Introduction
wso138 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every individual who accesses, registers on or interacts with the wso138 website at wso138.asia. This Privacy Policy ("Policy") describes our data handling practices in connection with our online casino, live dealer, sports betting and related services.
By accessing wso138.asia, creating an account or using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform immediately.
Malaysia's Personal Data Protection Act 2010 (PDPA) governs the processing of personal data of Malaysian residents by commercial entities. While wso138 operates under international arrangements, we apply data protection principles consistent with recognised international standards to all user data regardless of origin.
This Policy should be read alongside the wso138 Terms & Conditions and Responsible Gambling policy, which together form the complete framework governing your relationship with the Platform.
Definitions
In this Policy, the following terms carry the meanings set out below:
Personal Data
Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data and device identifiers.
Data Controller
The entity that determines the purposes and means of processing personal data. In relation to wso138, the Data Controller is the licensed operator of the Platform.
Data Processor
Any third party that processes personal data on behalf of the Data Controller, including payment providers, identity verification services and analytics platforms.
Processing
Any operation performed on personal data, including collection, storage, use, disclosure, alignment, combination, restriction, erasure or destruction.
User / Data Subject
Any natural person aged 21 years or above who accesses or registers on the Platform and whose personal data is subject to this Policy.
Data We Collect
wso138 may collect the following categories of personal data, depending on how you interact with the Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, MyKad or passport number | Account registration, KYC verification, age checks |
| Contact Data | Email address, phone number, residential address (city, state) | Account management, support, regulatory compliance |
| Financial Data | Payment method details, transaction records, MYR balances, crypto wallet addresses | Deposits, withdrawals, fraud detection, AML compliance |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Platform security, fraud prevention, performance analytics |
| Usage Data | Pages visited, games played, wagers placed, session duration | Service improvement, responsible gambling monitoring |
| Verification Data | Identity document images, selfie photographs, proof of address documents | KYC compliance, identity confirmation, fraud prevention |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Support quality, dispute resolution, record keeping |
How Data is Collected
We collect personal data through the following channels:
Direct Submission
Data you provide when registering an account, completing KYC verification, contacting support, or responding to promotions. This includes identity documents uploaded through the secure HTTPS verification portal.
Automated Technical Collection
Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser fingerprints, session activity and cookie data. This collection occurs through our servers, analytics tools and security monitoring systems.
Third-Party Sources
Data received from payment processors (including DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, Boost and cryptocurrency networks such as BTC and USDT channels), identity verification providers and anti-fraud services in connection with account and payment checks.
Data Processing and Legal Basis
wso138 processes personal data only where a recognised legal basis exists. The applicable basis depends on the nature and purpose of the processing activity:
- Contractual necessity — Processing required to create and manage your account, process deposits and withdrawals, and provide requested Platform services.
- Legal obligation — Processing required to comply with applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements and licensing obligations.
- Legitimate interests — Processing for fraud detection, platform security, abuse prevention, responsible gambling monitoring and service improvement, where these interests are not overridden by your privacy rights.
- Consent — Processing for optional marketing communications, where you have provided specific, informed consent that may be withdrawn at any time.
wso138 does not sell, rent or trade personal data to third parties for their independent marketing purposes. Data shared with processors is governed by data processing agreements that restrict its use to specified purposes.
How We Use Your Data
Personal data collected by wso138 is used for the following purposes:
- Creating, verifying and managing your wso138 account and associated payment methods.
- Processing deposits and withdrawals via MYR banking, eWallet, FPX, DuitNow, BTC and USDT channels.
- Conducting identity verification and document review in compliance with KYC obligations.
- Detecting, investigating and preventing fraudulent transactions, account abuse, multi-accounting and bonus exploitation.
- Enforcing the 21+ age requirement and responsible gambling obligations, including monitoring for problem gambling indicators.
- Responding to support enquiries, complaints and dispute resolution requests.
- Sending account-related transactional communications including deposit confirmations, withdrawal updates and security alerts.
- Improving Platform performance, navigation and game availability based on aggregated usage data.
- Fulfilling reporting obligations to licensing authorities and law enforcement agencies where legally required.
Data Sharing and Disclosure
wso138 does not share personal data with any third party except in the circumstances described below:
Payment and Banking Processors
Transaction data is shared with payment service providers including Malaysian banking partners, eWallet operators and cryptocurrency network intermediaries solely to the extent necessary to process deposits and withdrawals.
Identity Verification Services
Identity document data and biometric selfie images may be shared with licensed third-party KYC and anti-money-laundering service providers to verify account ownership and satisfy regulatory obligations.
Legal and Regulatory Disclosure
Where required by applicable law, court order or regulatory instruction, wso138 may disclose personal data to competent authorities. Such disclosures will be limited to the information strictly necessary to satisfy the legal requirement.
Business Transfers
In the event of a merger, acquisition, restructuring or sale of assets, user data may be transferred to a successor entity subject to an equivalent privacy commitment. Users will be notified of any material change in data controller identity.
Cookies and Tracking
wso138 uses cookies and similar tracking technologies to support Platform functionality, maintain session security and analyse usage patterns. The categories of cookies used include:
- Essential cookies — Required for basic Platform operation including authentication, session management and security. These cannot be disabled without disrupting core functionality.
- Functional cookies — Remember preferences such as language settings, display choices and previously selected payment methods to improve your experience.
- Analytical cookies — Collect aggregated, anonymised data about page views, navigation paths and feature usage to help us improve the Platform.
- Security cookies — Support fraud detection, bot identification and abuse prevention by analysing interaction patterns.
You may manage non-essential cookie preferences through your browser settings. Disabling essential cookies may limit Platform functionality. Where required by applicable law, consent for non-essential cookies is obtained before their activation.
Data Retention
wso138 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with legal, regulatory and licensing obligations. The following general retention guidelines apply:
- Account data — Retained for the duration of the active account and for a minimum of 5 years following account closure to satisfy AML and licensing record-keeping requirements.
- Transaction records — Retained for a minimum of 5 years in accordance with financial compliance obligations applicable to the Platform's licensing jurisdiction.
- KYC documents — Retained for the period required by the applicable licensing authority, typically 5 years from the date of last transaction or account closure.
- Support communications — Retained for up to 3 years for dispute resolution, quality assurance and complaint management purposes.
- Technical and usage logs — Typically retained for 12 to 24 months depending on security and fraud analysis requirements.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
Data Security
wso138 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration and destruction. Key security measures include:
- Mandatory HTTPS encryption for all data transmitted between user devices and the Platform.
- Encryption of sensitive data at rest, including identity document files and financial records.
- Role-based access controls restricting staff access to personal data to the minimum necessary for defined job functions.
- Regular security assessments and monitoring of platform infrastructure for vulnerability and intrusion indicators.
- Secure document upload portals for KYC submissions with integrity verification.
Account security also depends on you. Use a strong, unique password that is not reused across other services. Never share your login credentials, one-time codes or payment verification details with any third party, including individuals claiming to represent wso138 support. Notify us immediately if you suspect unauthorised access to your account.
User Rights
Subject to applicable law and the requirements of our licensing and AML obligations, you may exercise the following rights in relation to your personal data:
- Right of Access — Request confirmation of whether we hold your personal data and obtain a copy of it.
- Right to Rectification — Request correction of inaccurate or incomplete personal data held in your account.
- Right to Erasure — Request deletion of your personal data where it is no longer necessary for the original purpose and no legal retention obligation applies.
- Right to Restriction — Request that we restrict processing of your data pending the resolution of an accuracy dispute or a legitimate interest objection.
- Right to Data Portability — Request a structured, machine-readable copy of data you provided to us under a consent or contractual basis.
- Right to Object — Object to processing based on legitimate interests, including direct marketing profiling.
- Right to Withdraw Consent — Where processing is based on consent (e.g., optional marketing), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, submit a written request to our support team. We will acknowledge your request within 5 business days and respond substantively within 30 days. Some requests may be subject to identity verification before processing.
Rights to erasure and restriction do not override mandatory retention obligations imposed by licensing authorities or anti-money-laundering regulations. Where a retention exception applies, we will inform you of the basis and expected retention period.
International Data Transfers
As an internationally operated platform, wso138 may transfer personal data to servers, processors or licensing entities located outside Malaysia. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place, including contractual data protection obligations with third-party processors and application of recognised transfer mechanisms where required.
By using the Platform, you acknowledge that your data may be processed in jurisdictions that may have different data protection standards from those applicable in Malaysia. We apply consistent internal data protection standards regardless of processing location.
Minors and Age Restrictions
wso138 strictly prohibits access to the Platform by individuals under the age of 21. We do not knowingly collect personal data from anyone below this age threshold. If we become aware that personal data has been submitted by a minor, that data will be deleted and the associated account will be closed immediately.
Age verification is conducted as part of the KYC process, and accounts found to have provided false date-of-birth information will be suspended pending investigation. Any balances associated with underage accounts may be forfeited in accordance with the wso138 Terms and Conditions.
Changes to This Policy
wso138 may update this Privacy Policy from time to time to reflect changes in our data handling practices, applicable law or platform services. The updated Policy will be published at this page with a revised effective date. Where changes are material, registered users may be notified by email at the address associated with their account.
We encourage you to review this page periodically. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy. The version reference in the document header identifies the currently applicable edition.
Contact Information
For any questions, concerns or requests relating to this Privacy Policy or your personal data held by wso138, please contact our support team. Data rights requests must include your registered account name and a description of the specific right you wish to exercise.
Support Email: [email protected]
(plain text — not a clickable link)
Live Chat: Available 24 hours a day, 7 days a week on the Platform.
Response target: 5 business days for data rights requests; 30 days for substantive response.