Privacy Policy WAR138 –
Your Data, Our Responsibility

1Introduction

WAR138 ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and explains in detail how we collect, store, process, and protect your personal data.

This policy applies to all users of the WAR138 platform, including website visitors, prospective members in the registration process, and active members making full use of our gaming services. By accessing or using the WAR138 platform, you acknowledge that you have read and understood this Privacy Policy.

We continually strive to ensure that the information we hold about you is accurate, up to date, and used only for legitimate purposes. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account.

2Data Collected

2.1 Data You Provide Directly

When registering and using the WAR138 platform, you provide us with the following information directly:

• Identity Information: Full name, national identification number (MyKad) or passport, date of birth, and gender.
• Contact Information: Email address, mobile phone number, and current residential address.
• Financial Information: Bank account number, bank name, and payment method details used for deposits and withdrawals.
• Verification Documents: Copies of MyKad, passport, utility bills, or bank statements submitted during the KYC process.
• Communications: Records of conversations with our support team via live chat, email, or other channels.

2.2 Automatically Collected Data

When you use our platform, we also automatically collect technical information to ensure platform performance and security:

• Device Data: Device type, operating system, phone model, and unique device identifier.
• Network Data: IP address, internet service provider (ISP), and IP-based geographic location.
• Usage Data: Pages visited, games played, session duration, login frequency, and in-platform actions.
• Transaction Data: Deposit history, withdrawals, wagering, wins, and all financial activity within the account.
• Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 6.

3How We Use Your Data

The personal data we collect is used for the following purposes, all directly related to the provision of WAR138 platform services:

4Data Sharing

WAR138 does not sell or transfer your personal data to third parties for their own commercial purposes. However, in certain limited situations, we may share your data with the following parties:

4.1 Trusted Service Providers

We work with carefully selected third-party service providers to help operate the platform. These include payment gateway providers, identity verification services, cloud infrastructure providers, and licensed game software providers. All providers are bound by strict confidentiality agreements and are only permitted to process your data for the specific service purposes defined.

4.2 Legal Requirements

WAR138 will disclose your personal data when required by Malaysian law or a lawful directive from authorities such as the police, courts, or financial enforcement bodies. In such situations, we will disclose only the minimum information necessary and will notify you if permitted to do so by law.

4.3 Business Transfers

In the event that WAR138 is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. You will be notified in advance via email or an in-platform notice, and the new privacy policy will be communicated to you before any transfer takes place.

5Data Security

Protecting your personal data is our highest priority. WAR138 implements multiple layers of technical and organisational security to ensure your data remains safe at all times:

• Transmission Encryption: All data between your browser and our servers is encrypted using TLS 1.3 with a 256-bit SSL certificate.
• Storage Encryption: Sensitive data such as financial information and KYC documents is stored in encrypted format within our databases.
• Access Controls: Access to user data within our internal systems is restricted to staff who genuinely require it, and every access is logged and audited.
• Two-Factor Authentication: Our internal systems require multi-factor authentication for all staff accessing user data.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Incident Response Plan: We have tested incident response procedures in place to address any security breaches quickly and effectively.

6Cookies & Tracking Technologies

WAR138 uses cookies and similar technologies to enhance the user experience, analyse usage patterns, and maintain the security of your session. Cookies are small text files stored on your device when you visit our platform.

Cookie Types	Purpose	Retention Period
Essential Cookies	Required for core platform functions such as login authentication and session security. Cannot be disabled.	Session / 24 hours
Preference Cookies	Storing your personal settings such as language, display theme, and game preferences.	1 year
Analytics Cookies	Helping us understand how users interact with the platform for continuous improvement.	90 days
Security Cookies	Detecting suspicious activity, preventing fraud, and ensuring the integrity of your login session.	30 days

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. For more information on managing cookies in your browser, refer to the relevant browser help documentation.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold about you. We are committed to facilitating the exercise of these rights:

To exercise any of the above rights, submit a written request to our privacy team via email or live chat. We will process your request within 14 working days and may require identity verification before processing the request.

8Data Retention Period

WAR138 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by applicable law. The following are general guidelines for our retention periods:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysia's taxation and AML legal requirements.
• KYC Documents: Retained for 5 years from the date of verification or account closure, whichever is later.
• Communication Logs: Live chat and email records are retained for 2 years for service quality and dispute resolution purposes.
• Analytics Data: Anonymised usage data is retained for 12 months for platform performance analysis purposes.

When data is no longer needed, it is securely deleted using methods that ensure it cannot be recovered. Data retained for legal compliance purposes cannot be deleted upon personal request.

9Children's Data

The WAR138 platform is strictly for users aged 18 years and above. We do not intentionally collect or process personal data of individuals under the age of 18. If we discover that a child's data has been collected without our knowledge, it will be immediately deleted and the associated account will be closed.

If you believe your child or a minor has registered an account on our platform, please contact our support team immediately so we can take the appropriate action.

10Links to External Sites

The WAR138 platform may contain links or references to third-party websites in certain contexts, such as payment provider information. This Privacy Policy applies solely to the WAR138 platform. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies separately before using their services.

11Privacy Policy Amendments

WAR138 reserves the right to update or amend this Privacy Policy at any time. When significant changes occur, we will notify you via an in-platform notice or email to the address registered in your account at least 14 days before the amendments take effect.

The "Updated" date displayed at the top of this page indicates when this policy was last reviewed. Continued use of the WAR138 platform after amendments take effect constitutes your acceptance of the revised terms. If you do not agree with the amendments, you have the right to withdraw your consent and request account closure.

12Contact Us – Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

• Live Chat: Available 24/7 within the platform – the fastest way to get an immediate response
• Privacy Email: [email protected] – for official written enquiries regarding personal data rights
• General Support Email: [email protected] – for general enquiries regarding accounts and services

For issues related to responsible gaming, play habit controls, or account limits, please visit the Responsible Gaming ours. Information relating to the platform's terms of use can be found on the Terms & Conditions ours.