Privacy Policy WD138 — Our Commitment to Protecting Your Data

1Introduction

WD138 is an online betting platform providing a wide range of digital entertainment services to users in Malaysia. We fully recognise that our members' trust is our most valuable asset, and the protection of personal data is the foundation of that trust.

This Privacy Policy ("Policy") describes how WD138 collects, processes, stores, discloses, and protects your personal information when you use our platform, whether through the official website at wd138.vin or via our mobile app. This document also outlines your rights regarding that personal data and how you can contact us should you have any concerns.

By registering as a WD138 member, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform immediately.

2Information We Collect

WD138 collects various categories of information to ensure our platform operates smoothly and delivers the best experience to every member. The following are the types of data we collect:

We only collect information that is strictly necessary for the stated purposes. WD138 does not collect sensitive information such as medical records, religious beliefs, or political views unless specifically required and you have given explicit consent.

3Data Usage Purpose

Every piece of information we collect is used for a clear and legitimate purpose. WD138 uses member personal data for the following purposes:

• Account management — to register, verify, and maintain your account on the WD138 platform.
• Transaction processing — to securely process deposits, withdrawals, and any financial transactions.
• Identity verification (KYC) — to comply with anti-money laundering (AML) requirements and ensure platform security.
• Service improvement — to analyse usage patterns and enhance the gaming experience on WD138.
• Service communications — to send important notifications regarding your account, transactions, and policy changes.
• Fraud prevention — to detect and prevent fraudulent activity, money laundering, and platform abuse.
• Legal compliance — to fulfil the legal and regulatory obligations imposed on WD138.
• Relevant marketing — to inform you about exclusive promotions and offers (you may opt out at any time).

WD138 will not use your data for any purpose beyond those stated above without obtaining your prior consent. The legal basis for our data processing is your consent, our legitimate interest in operating a secure business, and our obligation to comply with the law.

4Information Sharing

WD138 understands that your privacy is a priority. We do not sell your personal data to any third party. However, there are certain situations where we need to share your information with trusted parties, namely:

• Payment service providers — such as FPX, Touch 'n Go, GrabPay, DuitNow, and banks to process your financial transactions.
• Game software providers — to enable access to games offered through the WD138 platform.
• KYC service providers — third-party identity verification companies that help us validate member documents.
• Legal authorities — when required by law, court order, or the relevant regulatory authority.
• Audit and security partners — independent audit firms that verify the fairness of our games and the integrity of our systems.

5Data Security

WD138 continuously invests in the latest cybersecurity infrastructure to ensure member personal data remains protected at all times. The security measures we implement cover technical, organisational, and physical aspects:

• End-to-end encryption using TLS 1.3 protocol for all data communications between clients and servers.
• Two-factor authentication (2FA) available for all member accounts to add an extra layer of security.
• Multi-layer firewall that monitors and filters incoming and outgoing traffic in real time.
• Intrusion detection and prevention system (IDS/IPS) operating around the clock to detect suspicious activity.
• Penetration testing periodically by independent security experts to identify and patch vulnerabilities.
• Automatic data backup across multiple server locations to ensure data recovery in emergency situations.
• Role-based access control (RBAC) ensuring only authorised personnel can access sensitive data.

While we take all reasonable measures, no security system is 100% perfect. In the event of a data breach involving your personal information, WD138 is committed to notifying you within the timeframe required by law and taking immediate remedial action.

6Cookies & Tracking Technologies

The wd138 platform uses cookies and similar tracking technologies to enhance the user experience, analyze website performance and understand member usage patterns. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies — required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance Cookies — collects data on how visitors use our website (e.g., most frequently visited pages) for analytics purposes.
• Functional Cookies — stores your preferences such as language, display settings, and login information for a more convenient return experience.
• Marketing Cookies — used to display relevant ads and promotions based on your interests (can be disabled via browser settings).

You can manage and delete cookies at any time through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the WD138 platform. For more information on cookies and how to control them, please refer to your web browser's documentation.

7Your Rights

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

To exercise any of the rights above, please contact the WD138 support team through the provided channels. We will process your request within 30 business days. Please note that certain rights may be limited in situations where we have a legal obligation to retain the data.

8Data Storage & Deletion

WD138 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. Our data retention policy is as follows:

• Active account data — retained for the duration your account remains active and for any additional period required by law.
• Financial transaction records — retained for a minimum of 7 years from the transaction date for AML and tax compliance purposes.
• KYC Documents — retained for 5 years after the termination of the business relationship, or as required by the relevant authorities.
• Communication logs — retained for 2 years for complaint resolution and dispute handling purposes.
• Technical data and logs — typically retained for 90 days unless required for an ongoing investigation.

Once the retention period expires and there is no legal requirement to retain the data, WD138 will delete or anonymize your data using secure, irreversible methods.

9Cross-Border Data Transfers

In our operations, your personal data may be transferred to and processed in countries outside Malaysia. This occurs primarily in the context of game software providers and international server infrastructure that we use.

WD138 ensures that any cross-border data transfers are carried out with adequate safeguards, including:

• Ensuring that recipient countries provide a level of data protection equivalent to Malaysia.
• Signing standard data transfer agreements with international service providers.
• Implementing additional technical measures such as encryption during data transfers.
• Obtaining your explicit consent for data transfers where required.

10Privacy Policy Changes

WD138 reserves the right to change, amend, or update this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Every amendment made is in the best interest of our members.

• Material changes will be communicated to you via email or in-platform notification at least 14 days before taking effect.
• The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy.
• Continued use of the wd138 platform after changes take effect constitutes acceptance of the amended terms.
• Previous versions of the Privacy Policy will be archived and can be requested through our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Should you have any questions about changes made, our support team is ready to assist.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how WD138 handles your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the WD138 platform.
• Telegram: Reach us through the official WD138 Telegram channel.
• WhatsApp: Send a message to our support team via WhatsApp.

We are committed to responding to all privacy-related inquiries within 5 business days. For more serious complaints or those involving potential data breaches, we will prioritize a response within 48 hours.