Personal Data Protection — PDPA 2010 Malaysia

Privacy Policy w138 — Personal Data Protection for Malaysian Members

Your privacy is our priority. This document transparently explains how w138 collects, uses, stores, and protects your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

Updated: 1 January 2026 Version 3.1 Malaysia (PDPA 2010)

W138's Privacy Commitment to Malaysian Members

Six data protection principles we fully uphold to safeguard your trust and the security of your personal information.

Malaysia PDPA 2010 Compliance

All data processing practices at w138 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing personal data protection in the country.

256-bit SSL Encryption

Every bit of data transmitted between your device and the server w138 protected with 256-bit SSL encryption — the same security standard used by Malaysia's leading banking institutions.

No Sale of Data to Third Parties

Member personal data w138 will not be sold, rented, or transferred to any third party for marketing or commercial purposes without your explicit consent.

Full Member Control

You have the right to access, correct, delete, or object to the processing of your personal data at any time through your account settings w138 or by contacting our team.

Secure Data Storage

Member personal data is stored on servers protected by layered access controls, 24-hour monitoring, and regular backups. Only authorised personnel are granted access to sensitive data.

Data Breach Notification

In the event of any data security breach affecting your information, w138 committed to notifying you within 72 hours in accordance with Malaysia's PDPA guidelines.

Summary: w138 takes your privacy seriously. We only collect data that is necessary, use it solely for the stated purposes, and will never sell it to anyone. You always have the right to access, correct, or request deletion of your data. Contact us at privacy@w138.wine for any enquiries.

1

Information We Collect

w138 collects various categories of personal information from members and platform visitors. This information is necessary to enable us to provide online betting services that are secure, fair, and compliant with Malaysian legal requirements.

Data Category Example Information Purpose of Collection
Identity Data Full name, date of birth, MyKad/passport number Age VerificationKYC
Contact Information Email address, phone number, mailing address CommunicationOTP
Financial Data EWallet information (TNG, GrabPay), FPX bank account details DepositWithdrawal
Technical Data IP address, device type, web browser, operating system SecurityUpdates
Usage Data Betting history, games played, session duration Responsible GamingMarketing
Communication Data Live chat records, emails, and submitted complaints Customer SupportRecords

All information you provide to w138 must be accurate and up to date. You are responsible for updating your information whenever changes occur, particularly your email address and phone number used for account verification and important notifications.

Note: w138 does not directly store credit or debit card numbers. All FPX and eWallet payments are processed through certified third-party payment gateways that comply with PCI-DSS standards.

2

How We Use Your Data

w138 uses the personal information collected solely for legitimate and transparent purposes. We do not process your data for any purpose beyond those stated below without first obtaining your additional consent.

  • Account Management: Creating, verifying, and managing accounts w138 which includes the Know Your Customer (KYC) process as required by law
  • Transaction Processing: Processing all deposits and withdrawals in Malaysian Ringgit (MYR) via eWallet methods (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow, and local FPX banking
  • Platform Security: Identifying and preventing fraudulent activity, unauthorised access, or platform abuse — including detection of suspicious IP addresses and unusual betting patterns
  • Customer Support: Providing technical support and addressing member enquiries or complaints via 24/7 live chat
  • Responsible Gaming: Monitors usage patterns to identify members who may need responsible gaming support and to enforce self-imposed limits
  • Marketing Communications: Sending information about promotions, bonuses, and special offers w138 relevant to your interests — you may unsubscribe at any time
  • Analytics & Improvement: Analysing usage data in aggregate (without identifying individuals) to improve the overall platform user experience
  • Legal Compliance: Meeting reporting and compliance obligations mandated by Malaysian authorities in relation to anti-money laundering (AML) and counter-terrorism financing
3

Sharing Data with Third Parties

w138 upholds the principle that your personal data is never sold, rented, or shared for third-party marketing purposes. However, there are limited circumstances where data sharing is necessary and permitted:

  • Service Providers: We share only the minimum necessary data with third-party service providers bound by strict confidentiality agreements — including payment gateway providers, technology service providers, and communication platforms
  • Legal Compliance: w138 will disclose information to Malaysian authorities where required by court order, legal investigation, or a valid regulatory directive
  • Security Protection: In security emergencies, we may share necessary information to prevent fraud or to protect the rights and safety of other users.
  • Business Transfer: In the event of a merger, acquisition, or business asset transfer, member data may be transferred — members will be notified in advance

w138 never sells members' personal data to advertisers, data brokers, or any other commercial party for financial gain. This is our absolute commitment to all Malaysian members.

4

W138 Data Security Measures

w138 continuously invests in the latest cybersecurity infrastructure and practices to protect the personal data of all our members. The following are the key security layers we have implemented:

256-bit SSL Encryption
All data in transit
Two-Factor Authentication
2FA for account login
Secure Servers
Layered access control 24/7
Real-Time Monitoring
Active threat detection system
Regular Data Backups
Automatic data recovery
Staff Training
Mandatory privacy compliance

Although w138 takes all reasonable precautions, no online security system can guarantee 100% absolute protection. We encourage members to also take responsibility by using strong passwords, enabling 2FA, and never sharing their login credentials.

5

Cookies & Tracking Technologies

Platform w138 uses cookies and similar tracking technologies to enhance your experience, maintain login sessions, and understand how users interact with our website. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions including login authentication, session security, and language preferences. These cookies cannot be disabled as they are critical to platform operation.
  • Performance Cookies: Collecting anonymised data on how visitors use our website — for example, the most frequently visited pages and errors encountered. This information is used to improve performance w138
  • Functional Cookies: Saving your preferences such as interface language, display settings, and personal preferences to make your experience more comfortable
  • Analytics Cookies: Used to understand aggregate usage patterns for product improvement purposes — all data is processed anonymously

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect platform functionality. w138 and your overall experience.

6

Your Rights Under PDPA 2010 Malaysia

As a data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding your personal data held by w138:

Right of Access

You have the right to obtain a copy of the personal data we hold about you. Data access requests can be submitted by email to privacy@w138.wine and will be processed within 21 calendar days.

Right to Rectification

You may request corrections to inaccurate or incomplete data at any time through your account settings w138 or by contacting our customer support directly.

Right to Erasure

You may request the deletion of your personal data when it is no longer required for the original purpose of collection, subject to applicable legal record-keeping obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. Simply click "unsubscribe" in any marketing email or contact us directly.

Data Portability Right

You may request a copy of your personal data in a machine-readable format (such as CSV or JSON) for the purpose of transferring it to another service provider.

How to Submit a Data Rights Request: Contact the Data Protection Officer (DPO) w138 via email at privacy@w138.wine. Please include your full name and account number w138, along with the right you wish to exercise. We will respond within 21 business days.

7

Child Data Protection

Platform w138 is a service intended exclusively for adults aged 18 and above. We strictly prohibit the use of our platform by anyone under the age of 18.

w138 does not knowingly collect any personal data from children under the age of 18. Should we become aware or confirm that we have collected personal data from someone below the stipulated age, we will immediately take the following steps:

  • Promptly delete all related data from our databases
  • Close the account in question and freeze any remaining account balance
  • Reporting to relevant authorities where required

If you believe that a minor has accessed the w138 platform, please contact us immediately at privacy@w138.wine. We take the protection of children seriously.

8

Data Retention Period

w138 retains your personal data for as long as your account remains active and for as long as necessary to fulfil the original purpose of collection, as well as to comply with applicable legal obligations in Malaysia.

  • Active Account Data: Retained for the duration of account activity plus 7 years after account closure for legal compliance purposes
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with AML reporting requirements and Malaysian tax legislation
  • Communication Records: Live chat and email records are retained for 2 years for reference and dispute resolution purposes.
  • Technical Log Data: Technical logs and security data are retained for 90 days before being automatically deleted
  • Marketing Data: If you opt out of receiving marketing communications, your data will be removed from the mailing list within 10 business days
9

Privacy Policy Amendments

w138 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services. Any material amendments will be communicated to members via:

  • In-account notifications w138 upon your next login
  • Notification email sent to your registered address
  • Prominent notice on the website homepage w138

Continued use of the platform w138 after the notification of changes will be considered as your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

10

Contact the Data Protection Officer (DPO)

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way w138 handles your personal data, please contact our Data Protection Officer:

Privacy Email
privacy@w138.wine
Live Chat
Available 24 hours, 7 days a week
Response Time
Within 21 business days
Jurisdiction
Malaysia (PDPA 2010)

Last Updated: 1 January 2026. This Privacy Policy forms part of the overarching agreement between you and w138, together with Terms & Conditions and Responsible Gaming Policy.

Your Data is Safe with w138

We are fully committed to protecting your privacy. Register an account w138 free today and enjoy a safe, fair, and responsible betting experience made for Malaysians.

Bahasa Melayu