This Privacy Policy explains how w138 collects, uses, stores, and protects the personal data of players and visitors to the w138 platform. Please read this document carefully. By using w138, you consent to the practices described herein.
w138 collects only the personal data that is strictly necessary for account operation, regulatory compliance, and service delivery. We do not collect data speculatively or beyond what is required for these purposes.
All personal data held by w138 is stored on servers protected by 256-bit SSL encryption, access controls, and regular security audits. Passwords are stored as salted cryptographic hashes — never in plain text.
w138 does not sell, rent, or trade your personal data to third parties for marketing purposes. Data shared with third-party service providers is governed by strict data processing agreements limiting their use.
You have the right to request a copy of the personal data w138 holds about you, to correct inaccuracies, and to request deletion where legally permissible. Submit requests via the support channels listed in this policy.
w138 uses cookies solely for session management, platform functionality, and fraud prevention. No third-party advertising trackers are embedded in the w138 platform. Cookie preferences can be managed via your browser settings.
w138 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. Retention schedules are documented in Section 8 of this policy.
This Privacy Policy ("Policy") is issued by w138 ("w138", "we", "us", "our") and applies to all personal data processed in connection with your use of the w138 platform accessible at https://w138.bio, including all games, services, and features offered thereon.
This Policy should be read alongside the w138 Terms & Conditions, which governs the contractual relationship between you and w138. By registering an account or using the w138 platform in any capacity, you acknowledge that you have read and understood this Policy.
w138 is committed to processing personal data lawfully, fairly, and transparently in accordance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA) where applicable, and the data protection requirements of the jurisdiction in which w138 holds its international gaming licence.
For the purposes of applicable data protection law, the data controller responsible for your personal data is w138, operating the platform at https://w138.bio.
For all data protection enquiries, correction requests, deletion requests, or complaints, you may contact w138 via:
w138 collects personal data in the following categories depending on how you interact with the platform:
3.1 Registration Data
When you create a w138 account, we collect: full legal name, date of birth, residential address, email address, and mobile phone number. This data is required to establish your account and verify your eligibility (21+ age requirement).
3.2 KYC Verification Data
As part of our Know Your Customer (KYC) obligations under our gaming licence, we may collect copies of: government-issued photo identification (MyKad, passport, driving licence), proof of address documents (utility bills, bank statements), and payment method verification documents. This data is processed solely for identity verification and regulatory compliance purposes.
3.3 Financial Data
We collect data relating to your deposits, withdrawals, and transaction history on the w138 platform. Payment instrument details (such as bank account numbers or e-wallet identifiers) are collected and stored in accordance with applicable financial data protection standards. w138 does not store full card numbers or CVV codes.
3.4 Gameplay Data
We record data relating to your gameplay activity including game selections, bet amounts, outcomes, session durations, and responsible gaming tool usage. This data is used for platform operation, regulatory reporting, fraud prevention, and responsible gaming monitoring.
3.5 Technical Data
We automatically collect certain technical data when you access the w138 platform: IP address, browser type and version, operating system, device identifiers, session timestamps, and pages visited. This data is used for platform security, fraud detection, and performance optimisation.
3.6 Communications Data
We retain records of communications between you and the w138 support team, including live chat transcripts and email correspondence. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.
w138 uses your personal data for the following purposes:
w138 processes your personal data on the following legal bases:
w138 does not sell, rent, or trade your personal data. We may share your data with third parties only in the following circumstances:
Important: w138 does not share your personal data with third-party advertisers, data brokers, or marketing platforms. Your data is not used for targeted advertising outside the w138 platform.
As w138 operates under international gaming licensing, some of your personal data may be processed or stored in jurisdictions outside Malaysia. Where such transfers occur, w138 ensures that appropriate safeguards are in place — including contractual protections equivalent to those required under applicable data protection law — to ensure that your data receives an equivalent level of protection regardless of where it is processed.
You may request further information about the safeguards governing international data transfers by contacting the w138 support team.
w138 retains personal data for the following periods unless a longer retention period is required by law:
Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.
w138 uses cookies and similar tracking technologies on the platform for the following purposes:
w138 does not use third-party advertising cookies or participate in cross-site behavioural advertising networks. You may manage cookie preferences through your browser settings; however, disabling essential cookies will affect your ability to use the w138 platform.
Subject to applicable data protection law, you have the following rights with respect to your personal data held by w138:
To exercise any of these rights, contact w138 support via live chat or at [email protected]. w138 will respond to verified requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 60 days with notice.
The w138 platform is strictly intended for adults aged 21 and over. w138 does not knowingly collect personal data from individuals under 21 years of age. If you believe that a minor has provided personal data to w138, please contact us immediately at [email protected]. Upon confirmation, w138 will take prompt steps to delete the data and close any associated account.
w138 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:
Despite these measures, no internet transmission is entirely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, w138 will notify you and the relevant supervisory authority in accordance with applicable legal requirements.
w138 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered players via the email address associated with their account, with at least 14 days' notice before the revised Policy takes effect.
The date of the most recent revision is displayed at the top of this document. Continued use of the w138 platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the platform and request account closure.
For any questions, requests, or complaints relating to this Privacy Policy or w138's data processing practices, please contact:
Support is available in English, aligned to Malaysia Time (MYT, UTC+8).
If you are not satisfied with w138's response to your data protection query or complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction where you reside or where the alleged infringement occurred.
w138 is built on transparency and trust — from how your MYR bets are settled to how your personal data is protected. Join Malaysian players from KL to Johor Bahru who play with confidence. 21+ only.
w138 operates under international gaming licensing. You must be 21 or older to register. Gambling involves risk — play responsibly. Visit Responsible Gaming for tools and support.