At w138, your privacy is more than a promise — it is our priority. This document clearly explains how we collect, use, store, and protect your personal information at all times.
Updated: 1 January 2026Six core data protection principles we implement to ensure your personal information remains safe with w138 at all times.
All data transmitted between your device and w138 servers is protected using 256-bit SSL encryption — the same standard used by banking institutions in Malaysia — ensuring no third party can intercept your data in transit.
Your personal information is stored on servers protected by multi-layered firewalls, strict access controls, and continuous monitoring. Only authorised personnel may access user data, and every access is logged for audit purposes.
You have full control over your personal data. You may request to view, amend, or delete your information at any time via your account settings or by contacting our support team directly.
W138 has never and will never sell, rent or share your personal information with third-party advertisers or data brokers. Your data is used solely for platform operations and to improve your own user experience.
The w138 privacy policy is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. We adhere to all applicable local legal requirements regarding the collection, processing, and storage of personal data for Malaysian users.
In the event of any security incident affecting your data, w138 is committed to notifying you promptly, explaining the scope of the incident and the steps taken to address it without delay.
Important Note: By registering for or using the w138 platform, you are deemed to have read and agreed to this privacy policy. Please read this document carefully before using our services.
W138 ("We", "Platform") values the privacy of every user who entrusts us with their personal information. This Privacy Policy is designed to transparently explain how we handle your data from the moment you register an account through to every transaction you make on our platform.
This document forms part of the comprehensive w138 Terms and Conditions. Any terms not defined in this document refer to the definitions in the Terms and Conditions us. This policy applies to all w138 platform users including website visitors, registered users and mobile app users.
W138 operates as an online entertainment platform offering Live Casino, sports betting, Slot Games and number betting for users in Malaysia. In running these operations, we collect certain personal information necessary to ensure our services run smoothly, securely and fairly.
This privacy policy is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and is updated periodically to reflect changes in legislation and industry best practices.
We collect several categories of personal information depending on how you interact with the w138 platform. Below is a detailed description of each data category we collect:
We do not directly store your credit or debit card information. All payment transactions are processed through certified payment gateways that comply with PCI DSS standards.
| Data Category | Example | Mandatory / Optional |
|---|---|---|
| Personal Identity | Name, IC, Date of Birth | Mandatory |
| Contact | Phone, Email | Mandatory |
| Financial | Bank Account Number | Mandatory (for transactions) |
| Technical | IP, Device, Browser | Automatic |
| Behaviour | Game History | Automatic |
Every piece of information we collect is used solely for legitimate and reasonable purposes. w138 does not use your data for purposes unrelated to platform operations without your explicit prior consent.
W138 does not sell, rent or disclose your personal information to any third party for marketing purposes without your consent. However, there are limited situations where we may need to share your information with certain parties:
We work with trusted, thoroughly vetted third-party service providers to support platform operations, including payment gateway providers, KYC verification service providers, secure cloud infrastructure providers, and licensed game software providers. All providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.
W138 may be required to disclose your information to government authorities, law enforcement bodies or regulatory agencies where we are obligated to do so under Malaysian law or a valid court order. In such situations, we will notify you in advance where legally permitted.
In the event of any merger, acquisition or sale of w138 platform assets, user information may be transferred as part of the business assets. You will be notified in advance via a prominent notice on our website before any such data transfer takes place.
We never sell your personal data to data brokers, advertising companies, or any party not directly related to the operations of the w138 platform.
W138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the w138 platform. For the best experience, we recommend allowing essential cookies at minimum.
W138 retains your personal information only for as long as necessary to fulfil the purposes stated in this privacy policy or as required by applicable laws and regulations.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active Account Information | Throughout the active account period | Service operations |
| Transaction Records | 7 years after transaction | Legal requirements |
| KYC Documents | 5 years after account closure | AML/KYC Compliance |
| Communication Logs | 3 years | Dispute Resolution |
| Technical Data (IP, Logs) | 12 months | Security & Audit |
Once the designated retention period has elapsed, your data will be securely deleted or anonymised in accordance with established industry-standard procedures.
W138 implements multiple layers of technical and operational security to protect your personal data from unauthorised access, disclosure, alteration or unintended destruction.
Security Tips: While we do everything possible to protect your data, account security also depends on your own actions. Use a strong password, enable 2FA and never share your login credentials with anyone.
Under Malaysia's Personal Data Protection Act (PDPA) and w138's internal policies, you have the following rights regarding your personal data:
To exercise any of the above rights, please contact the w138 customer support team via 24/7 Live Chat on our platform. We will process your request within 14 business days. In complex cases, this period may be extended to up to 30 days and you will be informed in advance.
The w138 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.
If we find that personal information has been inadvertently collected from someone under the age of 18, we will take immediate steps to delete that information and terminate the associated account. Parents or guardians who suspect their child has registered on our platform are encouraged to contact our support team immediately.
w138 employs a strict age verification process including KYC checks to prevent underage individuals from accessing our platform.
W138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements or platform improvements. When material changes are made, we will notify you via:
The effective date of the latest Privacy Policy is always displayed at the top of this document. Continued use of the w138 platform after any amendment takes effect will be deemed as your acceptance of the updated Privacy Policy.
If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, the w138 privacy team is ready to assist you.
You may also refer to the FAQ us for answers to frequently asked questions, or the Responsible Gaming for user safety information.
If you are not satisfied with our response, you have the right to file a complaint with Malaysia's Personal Data Protection Department or the relevant regulatory authority in your country.