w138 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how w138.bid ("w138", "we", "us", "our") collects, uses, stores, discloses, and protects personal data provided by or collected from individuals ("you", "User", "Member") who access or use the w138 online gaming platform available at w138.bid and its associated subdomains.

By registering an account, accessing the w138 platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the w138 platform.

w138 is committed to handling your personal data responsibly, in compliance with applicable data protection laws and international best practices. We review and update this Policy periodically. Material changes will be communicated to registered Members via the platform or registered email address.

2. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal data collected through the w138 platform is w138.bid. For all data-related enquiries, corrections, deletion requests, or complaints, please contact our support team at [email protected]

3. Personal Data We Collect

3.1 Registration Data

When you create a w138 account, we collect the following information:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Residential address;
• Email address;
• Mobile phone number;
• Preferred username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to verify player identity, w138 may collect:

• Copies of government-issued identity documents (e.g., MyKad, passport);
• Proof of address documents (e.g., utility bill, bank statement dated within three months);
• Selfie or video verification images where required by our KYC process;
• Source of funds declarations for high-value transactions.

3.3 Financial Data

To process deposits and withdrawals, w138 collects:

• Payment method details (e-wallet account references, bank account details where required);
• Transaction amounts and timestamps;
• Deposit and withdrawal history.

w138 does not store full payment card numbers. Card processing, where applicable, is handled by PCI-DSS compliant third-party payment processors.

3.4 Gaming and Behavioural Data

As part of normal platform operation and responsible gaming monitoring, w138 collects:

• Game session history, wager amounts, wins, and losses;
• Login timestamps and session durations;
• Device type, operating system, browser type, and IP address;
• Responsible gaming tool usage (deposit limits set, self-exclusion activations, reality check responses).

3.5 Communications Data

When you contact w138 via live chat, email, or other support channels, we retain records of the communication, including content, timestamps, and any attachments provided.

3.6 Cookies and Technical Data

w138 uses cookies and similar tracking technologies on its platform to maintain login sessions, prevent fraud, and analyse platform usage patterns. See Section 9 (Cookies) for full details.

4. How We Use Your Personal Data

w138 uses your personal data for the following purposes:

• Account management: Creating and maintaining your w138 account, verifying your identity, and administering your gaming activity;
• Payment processing: Processing MYR deposits and withdrawals via supported payment methods including Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank;
• Regulatory compliance: Fulfilling KYC, AML, and other legal or regulatory obligations applicable to w138 under its operating licence;
• Responsible gaming: Monitoring gaming behaviour to identify indicators of problem gambling, enforcing self-exclusion requests, and administering player protection tools;
• Security and fraud prevention: Detecting and preventing fraudulent activity, account takeovers, money laundering, and other prohibited conduct;
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance;
• Platform improvement: Analysing aggregated usage data to improve game offerings, payment processes, and overall platform performance;
• Marketing communications: Sending promotional offers and updates where you have given explicit consent. You may withdraw consent at any time.

5. Legal Basis for Processing

w138 processes your personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform the contract between you and w138 (account management, payment processing, game delivery);
• Legal obligation: Processing required to comply with applicable laws, including AML legislation and licensing conditions;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent.

6. Data Sharing and Disclosure

6.1 Service Providers

w138 shares personal data with trusted third-party service providers who assist in operating the platform, including payment processors, KYC verification providers, fraud detection services, game software providers, and IT infrastructure providers. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to w138.

6.2 Regulatory and Law Enforcement Authorities

w138 may disclose personal data to regulatory bodies, gaming licensing authorities, financial intelligence units, or law enforcement agencies where required by applicable law, court order, or regulatory direction. w138 will notify affected users of such disclosures where legally permitted to do so.

6.3 No Sale of Personal Data

w138 does not sell, rent, or exchange your personal data with third-party marketers or data brokers under any circumstances.

7. Data Retention

w138 retains personal data for as long as your account remains active and for a minimum period of five (5) years following account closure, to comply with AML record-keeping requirements and to resolve any disputes that may arise. Identity verification documents may be retained for longer periods where required by applicable licensing conditions. After the applicable retention period, personal data is securely deleted or anonymised.

8. Your Data Rights

Subject to applicable law and regulatory retention obligations, you have the following rights regarding your personal data held by w138:

• Right of access: Request a copy of the personal data w138 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to our legal retention obligations;
• Right to restrict processing: Request that w138 restrict the processing of your personal data in certain circumstances;
• Right to object: Object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability: Request that w138 provide your personal data in a structured, machine-readable format.

To exercise any of these rights, contact w138 support. We will respond to all verified requests within thirty (30) days. We may request proof of identity before processing your request.

9. Cookies

w138 uses the following categories of cookies on its platform:

• Essential cookies: Required for platform functionality, including login session management and security token validation. These cannot be disabled without impairing platform use;
• Analytics cookies: Used to understand how users interact with the w138 platform in aggregate, enabling improvements to navigation, game loading, and cashier performance. Data is anonymised;
• Preference cookies: Store your platform preferences (e.g., language settings, last visited game category) to improve your return experience.

w138 does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising. You may manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies may prevent access to certain platform features.

10. Data Security

w138 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting data access to authorised personnel, regular security assessments, and two-factor authentication enforcement for platform account access. No data transmission over the internet is entirely risk-free. While w138 takes all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, w138 will notify affected individuals and relevant authorities as required by applicable law.

11. International Data Transfers

w138 may transfer your personal data to service providers located outside Malaysia in the course of delivering the platform and related services. Where such transfers occur, w138 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to ensure that your personal data receives a level of protection consistent with this Policy.

12. Minors

The w138 platform is strictly for adults aged 21 and above. w138 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the w138 platform, please contact our support team immediately.

13. Changes to This Policy

w138 may update this Privacy Policy from time to time to reflect changes in our data practices, platform functionality, or applicable legal requirements. The effective date at the top of this page will be updated accordingly. Where changes are material, w138 will notify registered Members via the platform or registered email address. Your continued use of the w138 platform following notification of changes constitutes your acceptance of the updated Policy.

14. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the personal data w138 holds about you, please contact our support team. Our data protection contact is available 24 hours a day, 7 days a week via live chat on the w138 platform. Written enquiries may be directed to: [email protected]