Privacy Policy WSO138 —
Your Data Is Fully Protected

Wso138 ("we", "Platform", or "company") operates the website wso138.vin and all related services under the wso138 brand. We deeply value the trust you place in us when sharing your personal information, and we take this responsibility seriously.

This Privacy Policy explains in detail how WSO138 collects, processes, uses, stores, and protects your personal data as a member or visitor of our platform. This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

Wso138 only collects data that is genuinely necessary to provide you with a safe, efficient, and responsible service. The following are the categories of data we collect:

Data You Provide Directly

• Identity Information: Full name, date of birth, identification card number (MyKad) or passport.
• Contact Information: Email address, mobile phone number, and residential address.
• Financial Information: Bank account details and eWallet account numbers for deposit and withdrawal purposes.
• Verification Documents: Copies of KYC documents submitted for identity verification.
• Account Information: Your username, encrypted password, and personal account preferences.

Automatically Collected Data

• Technical Data: IP address, browser type, operating system, and device information used.
• Usage Data: Pages visited, session time and duration, games played, and transaction history.
• Location Data: General geographic location based on IP address for compliance and security purposes.
• Cookie Data: Information collected through cookies and similar tracking technologies.

The data we collect is used solely for legitimate and clearly stated purposes. WSO138 uses your personal data for the following:

• Account Management: Creates, manages, and maintains your member account, including the registration process, login, and identity verification.
• Transaction Processing: Processes all deposits, withdrawals, and financial transactions securely and accurately.
• Service Delivery: Enables you to access all games, promotions, and platform features available on WSO138.
• Security & Fraud Prevention: Detects, prevents, and investigates fraudulent activity, money laundering, and any platform abuse.
• Legal Compliance: Fulfills legal and regulatory obligations applicable to our platform's operations.
• Service Communication: Sends important notifications regarding your account, transactions, policy changes, and security updates.
• Customer Support: Provides technical support and efficiently resolves your inquiries or complaints.
• Platform Improvement: Analyzes usage patterns to improve user experience, platform performance, and service offerings.
• Opted-In Marketing: Sends promotional information and exclusive offers if you have given specific consent to receive them.

Wso138 processes your personal data based on one or more lawful grounds under Malaysia's PDPA and relevant data protection frameworks:

• Contract Performance: Data processing required to fulfill the service agreement between you and WSO138, including account management and payment processing.
• Legal Obligation: wso138 is required to process certain data to comply with applicable laws, such as KYC requirements and financial reporting.
• Legitimate Interest: Processing required for WSO138's legitimate interests, such as fraud prevention and platform security, provided it does not override your fundamental rights.
• Your Consent: For marketing and promotional communications, we only process your data based on your explicit consent. You may withdraw this consent at any time.

Wso138 does not sell or rent your personal data to any third party. We only share data in limited and necessary situations as follows:

Third-Party Service Providers

We work with trusted service providers to help operate our platform. These include licensed payment processors, certified game providers, secure cloud infrastructure providers, and identity verification services. All providers are bound by strict confidentiality agreements and may only use your data for purposes we specify.

Authorities & Regulatory Bodies

Wso138 will disclose personal data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or valid legal process.

Business Transfer

Should wso138 be involved in a merger, acquisition, or asset sale, members' personal data may be transferred as part of that process. You will be notified in advance and your rights under this Privacy Policy will remain protected.

The security of your personal data is our absolute priority. WSO138 implements multiple layers of technical and organizational security measures to protect your data from unauthorized access, disclosure, alteration, or destruction:

• Data Encryption: All data transmissions are protected with 256-bit SSL/TLS encryption. Sensitive data at rest is also encrypted using industry-standard encryption algorithms.
• Access Control: Access to member personal data is restricted to staff who genuinely require it to perform their duties, with strict monitoring and audit logs in place.
• Firewall & Intrusion Detection System: Our platform is protected by multi-layered firewalls and intrusion detection and prevention systems (IDS/IPS) monitored 24/7.
• Regular Security Testing: wso138 conducts regular penetration testing and security audits to identify and address any vulnerabilities.
• Two-Factor Authentication: Two-factor authentication (2FA) is available to all members, adding an extra layer of protection to your account.
• Incident Response Plan: wso138 has a structured security incident response procedure to act swiftly in the event of any data breach.

Wso138 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law:

• Active Account Data: Retained for as long as your account is active and for a reasonable period after account closure for support purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and financial legal requirements.
• KYC Documents: Retained for the period required under applicable anti-money laundering laws.
• Communication Log: Retained for 2 years for customer support and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your consent or request deletion.

Once the relevant retention period expires, your data will be securely deleted or anonymised using industry-approved methods.

As a data subject under Malaysia's PDPA, you have the following rights regarding the personal data we hold:

Wso138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Performance Cookies: Collects information about how you use the platform to help us improve performance and user experience.
• Functional Cookies: Saves your preferences such as language and display settings to make your visits more comfortable.
• Analytics Cookies: Helps us understand overall usage patterns and user behavior for service improvement purposes.

You can manage or disable cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the WSO138 platform.

In operating our global services, your personal data may be transferred to and stored on servers located outside Malaysia. When this occurs, WSO138 ensures that:

• Data transfers are conducted only to countries or regions that provide an equivalent or higher level of data protection.
• Appropriate data transfer agreements, including approved standard contractual clauses, are in place to protect your data.
• All data recipients outside Malaysia are bound by the same confidentiality and security obligations we impose on our local staff and service providers.

The wso138 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. If you believe your child has provided us with personal information, please contact our support team immediately.

Parents and guardians are encouraged to monitor their children's online activity at all times and use appropriate parental control software to prevent unauthorised access to gambling platforms.

Wso138 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any changes will take effect immediately upon being published on our website.

The "Updated" date at the top of this page will always reflect the date of the current version. For significant changes, we will endeavour to notify you via email or in-platform notification before those changes take effect.

Your continued use of the wso138 platform after any amendments are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact our privacy team:

• Privacy Email: [email protected]
• Live Chat Support: Available 24/7 directly on the wso138 platform.
• Response Time: We will respond to all privacy inquiries within 5 business days.

For complaints that cannot be resolved through our internal channels, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory body under your jurisdiction.