Privacy Policy WSO138 — Our Commitment to Data Security You

This Privacy Policy explains how WSO138 ("we", "Platform", "WSO138") collects, uses, stores, protects, and discloses your personal information when you use the website https://wso138.biz and all related services.

By registering as a WSO138 member or using any of our services, you confirm that you have read, understood, and accepted the terms of this Privacy Policy. If you do not agree, please discontinue use of the WSO138 platform.

This Privacy Policy applies to all WSO138 members across Malaysia — whether you access the platform from Kuala Lumpur, Johor Bahru, George Town, Kota Kinabalu, or anywhere else in the country.

WSO138 collects your personal data through several channels — directly when you interact with the platform, and automatically when you use our services. The following are the categories of data we collect:

WSO138 only collects data that is strictly necessary for the stated purposes. We do not collect irrelevant or excessive information.

Your personal data is used by WSO138 solely for the following purposes — and we will not use your data beyond these purposes without obtaining your additional consent:

• Account Management: Creating, verifying and securely maintaining your WSO138 account.
• Financial Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX in Malaysian Ringgit (MYR), as well as withdrawals to your account.
• Service Delivery: To give you full access to everything WSO138 has to offer — from Live Casino, baccarat, and blackjack to Malaysia Super League Sports Betting and e-sports.
• Legal Compliance & KYC: To fulfil identity verification requirements and comply with applicable laws, including anti-money laundering legislation.
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent activity, multi-account usage and security breaches.
• Service Improvement: To analyse usage patterns, improve the platform, introduce new features, and personalise your experience on WSO138.
• Service Communications: Sending important notifications regarding your account, security, policy updates or technical disruptions.
• Marketing (With Consent): To send promotional information, bonuses, and the latest WSO138 offers — only if you have given your consent to receive such communications.

WSO138 does not sell, rent or trade members' personal information to any third party. However, there are certain circumstances where we may need to share your data:

Approved Service Providers

WSO138 works with a select group of third-party service providers to support platform operations — including payment service providers (Touch 'n Go, DuitNow, FPX, and others), IT and security service providers, and email delivery providers. All providers are bound by strict data confidentiality agreements and are only permitted to use your data for the specified purposes.

Legal Requirements

WSO138 may disclose member data to Malaysian government authorities or law enforcement bodies when required by law, court writ, or a valid official order. This includes cases related to fraud prevention, money laundering, or other criminal activities.

The security of member data is WSO138's top priority. We employ a multi-layered security approach that encompasses:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and WSO138 servers is encrypted using the latest SSL/TLS protocols, ensuring no third party can intercept or read your information in transit.
• Data Encryption at Rest: Member personal data stored in WSO138's databases is also encrypted for added protection against any unauthorised access attempts.
• 24/7 Security Monitoring: WSO138's automated monitoring system operates around the clock to detect any suspicious activity or unauthorised access attempts.
• Strict Access Controls: Only authorised WSO138 staff who require access for their specific duties may access member data. All access is logged and audited.
• Regular Security Testing: WSO138 conducts regular penetration testing and vulnerability assessments carried out by independent security specialists.
• Incident Response Plan: WSO138 has a comprehensive incident response plan to address any data breach swiftly and effectively.

As a WSO138 member, you have the following rights regarding your personal data. All requests will be processed within 48 working hours:

WSO138 uses cookies and similar tracking technologies to enhance the user experience, understand usage patterns, and maintain platform security. The following are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect the functionality of the WSO138 platform.

WSO138 does not intentionally collect, store, or process any personal data from individuals under the age of 18. The WSO138 platform is intended solely for adults aged 18 and above.

Should we discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate action to delete the information and close the account in question. If you believe a minor may have registered on WSO138, please contact us immediately at support@wso138.biz.

In certain circumstances, your personal data may need to be transferred to or stored on servers located outside Malaysia — for example, for data backup purposes or the use of cloud services whose infrastructure providers operate across multiple countries.

Whenever cross-border data transfers occur, WSO138 ensures that:

• Data recipients in other countries maintain privacy protection standards that are equivalent to or higher than those in Malaysia.
• Appropriate data processing agreements have been signed with all parties involved.
• Additional safeguards such as Standard Contractual Clauses are applied where necessary.

WSO138 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable law. The following are general data retention guidelines:

• Active Account Data: Retained for as long as your account remains active with WSO138.
• Financial Transaction Data in MYR: Retained for a minimum of 7 years from the transaction date to comply with Malaysian financial and tax regulations.
• Activity Log Data: Retained for 12 months from the date of activity.
• KYC Record Data: Retained for a minimum of 5 years following account closure to comply with anti-money laundering legislation.
• Customer Support Communication Data: Retained for 24 months from the date of last interaction.

Once the relevant retention period has expired, data will be securely deleted or anonymized in accordance with WSO138's security procedures.

WSO138 reserves the right to update or amend this Privacy Policy at any time. Any updates will reflect changes to our privacy practices, evolving legal requirements, or the expansion of WSO138's services.

When material changes are made to this Privacy Policy, WSO138 will:

• Sending notifications to members via their registered email address.
• Displaying a clear notice on the WSO138 platform's homepage.
• Updating the "Effective Date" at the top of this document.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the WSO138 platform after any updates take effect will be considered your acceptance of those changes.

For any enquiries, concerns, or requests regarding this Privacy Policy or how WSO138 handles your personal data, please contact us through the following channels: