WSO138 Privacy Policy — Personal Data Protection for Malaysian Users

WSO138 ("we", "wso138", or "Platform") is an operator of an online Sports Betting and casino gaming platform, operating under a valid gambling licence. We deeply value the trust you place in us by using wso138's services, and we take our responsibility to protect your personal information with the utmost seriousness.

This Privacy Policy ("Policy") describes the types of personal information we collect from members of the platform wso138 in Malaysia, how we use that information, who it may be shared with, the security measures we take to protect it, and the rights you hold regarding your personal data.

This policy applies to all users who register a wso138 account, browse our website, use our mobile app, or interact with any of our services, including Malaysia Super League and EPL football betting, badminton, cricket, e-sports, slots, and live casino.

We comply with Personal Data Protection Act 2010 (PDPA) Malaysia and international data protection best practices. In the event of any conflict between this Policy and applicable law, the law shall prevail.

Wso138 collects your personal information through several means — directly from you during registration and platform use, automatically through tracking technologies, and in some cases from authorised third-party sources.

2.1 Information You Provide Directly to Us

2.2 Automatically Collected Information

• IP address and general location information (state/city)
• Device type, model, operating system, and browser version
• Time and duration of login sessions on the wso138 platform
• Pages visited and actions taken within the platform
• Cookie and analytics tracker data (see the Cookies section)

Wso138 uses your personal information for the following legitimate and stated purposes:

• Service Provision: To create and manage your account, process bets, handle deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks), and provide access to all features on the wso138 platform.
• Identity Verification (KYC): To verify your identity in compliance with anti-money laundering (AML) requirements and fraud prevention measures. This is a mandatory requirement for all licensed betting platforms.
• Account Security: To detect and prevent suspicious login activity, fraud attempts, multiple accounts, and any activity that violates wso138's Terms & Conditions.
• Service Communications: To send account-related notifications, transaction confirmations, security alerts, and important service updates.
• Responsible Gaming: To monitor betting patterns and identify members who may require responsible gaming support, in line with wso138's commitment to user wellbeing.
• Platform Enhancement: Anonymised data is used to understand how users interact with the wso138 platform, for the purpose of product improvement and enhancing user experience.
• Marketing Communications: With your consent, to send you information about wso138 promotions, bonuses, and special offers via email or SMS.

In accordance with Malaysia's Personal Data Protection Act 2010 and applicable data protection standards, wso138 processes your personal data on one or more of the following valid legal bases:

• Contract Fulfilment: Processing necessary to provide the services you have requested as a wso138 member, including bet processing and payments.
• Legal Obligation: Processing required to comply with applicable laws, including KYC, AML (anti-money laundering), and regulatory reporting obligations.
• Legitimate Interests: Processing for platform security, fraud prevention, and service improvement purposes, which represent wso138's legitimate interests and do not override your fundamental rights.
• Consent: For optional marketing communications and advanced analytics functions, we rely on your explicit consent.

Wso138 does not sell your personal data to any third party. However, we may share your information in the following limited and specific circumstances:

5.1 Trusted Service Providers

We work with carefully selected third-party service providers to help us operate the wso138 platform, including:

• Payment processors to handle transactions via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX
• KYC and identity verification service providers
• Secure data storage and cloud infrastructure service providers
• Analytics service providers that use anonymised data only

All third-party service providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes designated by wso138.

5.2 Legal & Regulatory Requirements

Wso138 may disclose your personal data to government authorities, regulators, or law enforcement when required by law, court order, or valid regulatory directive, or when we reasonably believe such disclosure is necessary to prevent fraud, protect our rights, or safeguard the safety of other users.

5.3 Business Transfer

In the event of a merger, acquisition, or asset sale, personal data may be transferred as part of the assets involved. We will notify you before your data is transferred and becomes subject to a different privacy policy.

Wso138 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL Encryption: All data communications between the wso138 platform and your device are protected by 256-bit SSL/TLS encryption — the highest encryption standard used by Malaysian banks and financial institutions.
• Data-at-Rest Encryption: Sensitive data such as Identity Card numbers, bank account information, and passwords are stored in encrypted form within our databases.
• Strict Access Controls: Only specifically authorised wso138 staff may access members' personal data, and only for the purposes required to deliver the service.
• Regular Security Audits: wso138 undergoes regular cybersecurity audits conducted by independent third parties to identify and address any system vulnerabilities.
• 24/7 Monitoring: Our systems are monitored around the clock to detect any suspicious activity or attempted data breaches.
• Incident Response Plan: wso138 has a tested incident response procedure in place to address any data breaches promptly and effectively, including notifying affected users when required.

Wso138 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Active Account Data: For as long as your wso138 account remains active, and for the required period after account closure for legal compliance purposes.
• Financial Transaction Records: Minimum 7 years from the transaction date, in line with Malaysia's financial and tax record-keeping requirements.
• KYC Records: A minimum of 5 years after account closure or the end of the business relationship, as required by AML regulations.
• Security Logs: 12 months from the log date for security incident detection and investigation purposes.
• Communication Data: 2 years for customer service correspondence records from the date of the last interaction.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally. Requests for early data deletion may be submitted to us, subject to any legal obligations that prevent immediate deletion.

The wso138 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

You can manage or disable optional cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the wso138 platform and prevent you from logging in or completing transactions.

As a wso138 platform member in Malaysia, you have the following rights regarding your personal data, in accordance with the Malaysian Personal Data Protection Act:

The wso138 platform is a service for individuals aged 18 years and above only. We do not knowingly collect or process personal data of individuals under the age of 18.

Should we discover that we have collected personal data from an individual under the age of 18 without proper age verification, we will take immediate steps to delete that information from our records and close the account in question. If you have reason to believe that a minor is using the wso138 platform, please contact us immediately at support@wso138.ws.

Wso138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When we make material changes to this Policy, we will:

• Updating the "Last Updated" date at the top of this page
• Sending email notifications to registered wso138 members regarding important changes
• In the event of highly material changes, we may seek your renewed consent before you continue using the platform

We encourage you to review this page periodically to stay informed about how we handle your personal data. Your continued use of the wso138 platform after any amendments take effect will be considered your acceptance of the revised Policy.

If you have any questions, concerns, or complaints regarding how wso138 handles your personal data, or wish to exercise any of your privacy rights, please contact us through the following channels:

• Privacy Email: support@wso138.ws (subject: "Privacy Enquiry")
• Live Chat: Available on the wso138 platform, 24 hours a day, 7 days a week
• Response Time: We are committed to responding to all privacy enquiries within 5 business days

Wso138's customer support team is available in Bahasa Melayu and is ready to help you understand your privacy rights and how to exercise them. There's no need to worry — all privacy enquiries are handled with complete confidentiality and without any judgment.