W138 Privacy Policy – Your Personal Data Protection

1 Introduction and Scope of Privacy Policy

Welcome to the w138 Privacy Policy page. This document is the official agreement between you as a user of the platform and w138 as the operator of the online gaming platform at the website w138.vin. This Privacy Policy clearly and comprehensively explains how we handle every aspect of your personal data.

Your privacy is more than a legal obligation to us — it is a core value of w138. Since the platform launched, we have made serious investments in the security infrastructure and privacy policies that protect every member's interests. We believe your trust in us depends not only on the quality of games we offer, but also on how we safeguard the information you entrust to us.

This policy applies to all users who browse, register, log in, or interact with any part of the W138 platform — including our website, mobile app, and customer support channels. By continuing to use the W138 platform after reading this Privacy Policy, you agree to the data processing practices described herein.

2 Types of Personal Data We Collect

W138 collects your personal data only when it is necessary to provide the services you request or to fulfil our legal obligations. The following are the categories of data we collect:

We do not collect any data classified as sensitive, such as medical records, religious beliefs, or political views. w138 also does not require you to share social media information unless you choose to register via your own social media account.

Technical data such as IP addresses and device information is collected automatically when you browse our platform. This is standard practice carried out by almost all online platforms and is necessary for security and technical performance purposes.

3 How We Use Your Data

Every piece of data we collect is used for a specific and legitimate purpose. w138 does not use your data for any purpose unrelated to the operation of the platform or our legal obligations. The following are the primary purposes for which your personal data is used:

• Account management: Creating, verifying, and maintaining your account, including any mandatory KYC processes.
• Transaction processing: Processing deposits, withdrawals, and all other financial transactions you carry out on the platform.
• Security and fraud prevention: Detecting and investigating suspicious activity, including unauthorised access attempts and platform misuse.
• Legal compliance: Meeting legal requirements related to customer identification, anti-money laundering (AML), and reporting to the relevant authorities where mandated.
• Customer support: Providing effective assistance when you contact our support team.
• Platform enhancement: Analysing aggregated, anonymised usage patterns to improve the overall user experience.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.
• Service communications: Sending important notifications related to your account, security, and policy changes — not for marketing without your consent.

W138 will only send you marketing communications if you have given explicit consent to receive them. You may withdraw this consent at any time through the notification settings in your account.

4 Data Sharing with Third Parties

W138 takes a highly cautious and limited approach to sharing your personal data. We does not sell, rent, or disclose your personal data to any third party for their own marketing or commercial purposes. However, in the following scenarios, limited data sharing may occur:

• Payment service providers: Required transaction information is shared with authorised payment providers — including DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay gateways — solely for processing your financial transactions.
• Technical service providers: Companies that help us operate the platform — such as cloud infrastructure providers and security service providers — may require limited access to certain data within the scope of their service contracts with w138.
• Legal obligations: w138 may be required to disclose data to government authorities, law enforcement agencies, or regulatory bodies when mandated by applicable law.
• Legitimate interest protection: In certain situations such as fraud investigations or legal claims, relevant data may be shared with the parties involved.

All third parties with whom we share data are bound by strict confidentiality agreements and must comply with data protection standards equal to or higher than our own. w138 remains accountable for how your data is handled by appointed third parties.

5 Cookies and Tracking Technologies

W138 uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our platform.

We use several types of cookies, each serving a different purpose:

• Essential cookies: Required for core platform operations, including login verification and session security. These cookies cannot be disabled as they are essential to the platform's core functions.
• Performance cookies: Collecting information on how you use the platform — such as the most frequently visited pages and time spent — to help us improve platform performance and layout.
• Functional cookies: Remembering your preferences and settings, such as your preferred language and display mode, to deliver a more personalised experience.
• Security cookies: Used exclusively to detect and prevent fraudulent activity and to ensure your login session remains secure.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the W138 platform. For the best experience, we recommend enabling at least the necessary cookies.

6 Data Security and Technical Protection

The security of your personal data is w138's highest priority. We have implemented multiple layers of technical and organisational protection to ensure your data is always safeguarded against unauthorised access, loss, alteration, or disclosure.

Key security measures we implement include:

• End-to-end encryption: All data communications between your device and w138 servers are secured with the latest TLS/SSL protocols.
• Two-factor authentication (2FA): An additional security layer to protect your account from unauthorised access even if your password is compromised.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect and respond to any security threats in real time.
• Encrypted password storage: Your account password is never stored in plain text. We use strong one-way hashing algorithms, meaning no one — including our own staff — can view your actual password.
• Regular security audits: We conduct regular penetration testing and independent security audits to identify and address any vulnerabilities.
• Role-based access control: Only staff with legitimate operational needs and specific authorisation may access your personal data.

7 Your Rights as a User

As a w138 member, you have certain rights regarding your personal data. w138 fully respects and facilitates the exercise of these rights. The following are the rights you hold:

To exercise any of the above rights, you may contact the w138 support team via live chat on the platform. We will process your request within a reasonable timeframe and inform you of the action taken.

8 Children's Data Protection

W138 is an online gaming platform dedicated to adult users aged 18 and above. We do not knowingly collect, store, or process the personal data of children under the age of 18.

If we find that a child's personal data has been collected without our knowledge — for example, due to a false age declaration during registration — we will take the following steps immediately:

• Freezing the account in question immediately
• Deleting all personal data associated with the account
• Returning any remaining account balance where applicable
• Reporting the incident to the relevant authorities where required

Parents or guardians who discover that their child or ward has registered or used the w138 platform are urged to contact our support team immediately via live chat for follow-up action.

9 Data Retention and Deletion Period

W138 retains your personal data only for as long as it is needed for the purposes described in this Privacy Policy or as required by applicable law. Retention periods vary according to the type of data and relevant legal requirements:

• Active account data: Retained for the duration that your account remains active and operational.
• KYC and identity verification data: Retained for a minimum of 5 years after account closure, in accordance with anti-money laundering legal requirements.
• Financial transaction records: Retained for a minimum of 7 years for tax compliance and financial audit purposes.
• Customer support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Technical data and security logs: Retained for 12 months for security analysis and fraud detection purposes.

When data is no longer required and there is no legal obligation to retain it, W138 will securely delete or anonymise that data using methods that ensure it cannot be recovered.

If you request account closure, your data will not be deleted immediately as we are still subject to the minimum retention periods required by law. You will be informed of the retention period applicable to your account when you submit a closure request.

10 Amendments to This Privacy Policy

W138 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. The latest version of this Privacy Policy is always available on this page with an updated effective date.

When we make significant changes to this Privacy Policy, we will notify you via:

• In-platform notification the next time you log in
• A notification email sent to the email address registered to your account
• A clear notice on the main page of this Privacy Policy

Your continued use of the w138 platform after any Privacy Policy changes take effect will be considered your acceptance of those changes. If you do not agree with the changes made, you have the right to close your account before the changes come into effect.

11 How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. The w138 support team is available to assist you 24 hours a day, 7 days a week.

You can reach us through the following methods:

• Live Chat: Fastest method — click the chat icon in the corner of the platform to connect directly with our support team
• Email: [email protected]

For privacy rights requests such as data access, correction, or deletion, please clearly state the type of request and provide sufficient identity verification information so that we can process your request securely and accurately.

We are committed to responding to all privacy-related enquiries within a reasonable timeframe. For complex requests, additional processing time may be required, and we will keep you informed of the expected timeline.