WAR138 Privacy Policy

1. Definitions

In this policy, "personal data" means any information that identifies or could reasonably identify you as an individual — including your name, Malaysian identification number, email address, phone number, physical address, payment account identifiers, and IP address. "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, or deletion. "Platform" refers to the WAR138 website, account portal, sportsbook, casino, wallet, and customer support systems. "Payment partner" means a payment service provider such as a Malaysian bank, e-wallet operator, card network, or cryptocurrency gateway through which deposits or withdrawals are made. "You" means the individual who accesses WAR138 or holds a registered account.

2. Information We Collect

2.1 Registration and Identity Data

When you open a WAR138 account, we collect your chosen username, email address, mobile phone number, date of birth, and country of residence. During identity verification, we may also collect a copy of a government-issued identification document, proof of residential address, and facial verification data to confirm the document matches the account holder. These checks are required to verify that users are aged 21 and above, to prevent duplicate accounts, and to satisfy applicable know-your-customer obligations.

2.2 Payment and Transaction Data

WAR138 records the date, time, amount in MYR, payment method, and transaction status of each deposit and withdrawal. Payment methods we support include Touch 'n Go eWallet, Boost, GrabPay, DuitNow QR, FPX online banking, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, Mastercard, and supported cryptocurrency wallets. We do not store full card numbers or card verification values. Cryptocurrency transaction hashes and wallet addresses may be retained for fraud prevention and regulatory purposes.

2.3 Gaming and Platform Activity

We record each wager placed, including the game or sports market selected, stake amount, odds, outcome, and settlement amount. Sportsbook activity — including Liga Super Malaysia, EPL, UFC, and live football bets — is logged alongside casino game sessions, bonus claims, and promotional participation. These records are used to operate the platform, resolve disputes, detect suspicious activity, and administer loyalty rewards.

2.4 Technical and Device Data

When you access WAR138, automated systems collect your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time on page, and general geographic region. This information is used for security monitoring, fraud detection, performance optimisation, and aggregate analytics. It does not include precise real-time GPS location.

2.5 Communications Data

When you contact WAR138 through live chat, email, or the support ticket system, the content of your communications and any attachments you submit are stored. Communication records allow us to respond to your query, maintain a resolution history, and review escalated or disputed cases.

3. How We Use Your Information

WAR138 uses personal data only for the purposes set out below:

• Account operation: creating, authenticating, securing, and maintaining your player account.
• Identity and age verification: confirming that users are aged 21 and above and meet eligibility requirements before gaming or financial activity is enabled.
• Payment processing: executing and reconciling MYR deposits and withdrawals through Malaysian payment partners.
• Platform delivery: operating casino games, the sportsbook, live dealer tables, and related features.
• Fraud and security: detecting duplicate accounts, payment fraud, match manipulation, money laundering indicators, and other prohibited conduct.
• Bonus administration: evaluating eligibility, calculating wagering progress, and distributing loyalty rewards.
• Customer support: responding to queries, resolving complaints, and maintaining a service history.
• Responsible gaming: monitoring for indicators of problem gambling behaviour, enforcing deposit and session limits, and implementing self-exclusion requests.
• Service improvements: analysing aggregated usage patterns to prioritise platform features, payment options, and support capacity.
• Legal obligations: retaining records as required by applicable law, responding to lawful requests from authorities, and defending legal claims.

WAR138 does not use personal data to make automated decisions that produce significant legal effects without human review. Profile data is not used to restrict access to products in a manner that would constitute unlawful discrimination.

4. Data Sharing and Disclosure

WAR138 does not sell personal data to third parties or share it for the purpose of enabling third-party direct marketing. Data may be shared in the following limited circumstances:

• Payment partners: transaction data is disclosed to relevant payment service providers — including Malaysian banks, e-wallet operators such as Touch 'n Go and Boost, and payment gateways — to the extent required to execute and confirm financial transactions.
• Identity verification providers: document images and facial verification data may be processed by a third-party KYC provider for automated and manual review. These providers are bound by confidentiality and data security obligations.
• Game and software providers: aggregated or pseudonymous game session data may be shared with game providers for audit, certification, or technical support purposes.
• Security and fraud prevention services: risk scoring services may receive IP addresses, device identifiers, and behavioural data to assess transaction and account risk.
• Professional advisers: legal, audit, and compliance advisers may access personal data under professional confidentiality obligations where required.
• Law enforcement and regulators: WAR138 will disclose personal data in response to a valid court order, statutory obligation, or lawful request from a competent authority, including where required to prevent or investigate serious crime.

Third parties who receive personal data from WAR138 are not permitted to use that data for purposes beyond those specified in their agreement with WAR138.

5. Data Retention

WAR138 retains personal data for as long as is reasonably necessary for the purposes described in this policy. In practice this means:

• Active account data is retained while the account remains open and for a period thereafter to handle any post-closure queries or dispute resolution.
• Transaction and wagering records may be retained for the period required under applicable financial record-keeping and anti-money-laundering obligations, which may extend to seven years or longer in certain circumstances.
• KYC and identity documents are retained for the period required by applicable verification and regulatory obligations.
• Customer support records are retained for a reasonable period to maintain a resolution history and handle re-opened complaints.
• Technical logs used for security monitoring are subject to routine rotation and are not kept indefinitely.

When retention is no longer justified, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

6. Cookies and Tracking Technologies

WAR138 uses cookies and similar technologies — including session tokens, local storage, and pixel tags — to operate core platform functions and analyse usage. Cookies used by WAR138 fall broadly into three categories:

• Strictly necessary cookies: required for login sessions, security token validation, and platform navigation. These cannot be disabled without breaking core functionality.
• Performance and analytics cookies: collect anonymous data on page visits, load times, and feature usage to help us identify and fix problems and prioritise improvements.
• Functional cookies: remember language preferences, display settings, and previously selected options to provide a more consistent experience across sessions.

You may configure your browser to block or delete cookies. Blocking strictly necessary cookies may impair your ability to log in or complete transactions. WAR138 does not use third-party advertising cookies or share cookie data with ad networks.

7. Security Measures

WAR138 implements technical and organisational measures appropriate to the sensitivity of the data processed. These measures include transport layer security (TLS) encryption for data in transit, encryption or hashing for sensitive stored data fields, access controls limiting personal data access to personnel with a documented need, audit logging of access to sensitive account data, automated monitoring for access anomalies, and periodic security reviews.

No transmission over the internet or electronic storage method can be guaranteed to be completely secure. Where WAR138 becomes aware of a security incident affecting personal data, it will take reasonable steps to contain the incident, assess the impact, and notify affected users where required. You are responsible for keeping your account credentials confidential and for using a strong, unique password for your WAR138 account.

8. Your Rights and Choices

Subject to applicable law and verification of your identity, you may exercise the following rights in relation to personal data WAR138 holds about you:

• Right of access: request a description of the personal data held about you and the purposes for which it is processed.
• Right to rectification: ask us to correct inaccurate personal data or complete incomplete records.
• Right to erasure: request deletion of personal data where retention is no longer justified — subject to legal retention obligations, outstanding account matters, and fraud prevention requirements.
• Right to restrict processing: request that we limit processing of your personal data in certain defined circumstances while a correction or objection is reviewed.
• Right to object: object to processing based on legitimate interest where your particular circumstances justify it.
• Right to data portability: request personal data you have provided to WAR138 in a structured, machine-readable format where technically feasible.

To exercise any of the above rights, please contact WAR138 support with your registered account details and a description of the request. We will respond within a reasonable period and may ask for verification before acting. Some requests may take longer where third-party consultation is needed.

9. Age Restriction and Minors

WAR138 is intended exclusively for adults aged 21 and above. We do not knowingly collect personal data from individuals below this age. During registration and identity verification, age confirmation is required. Where WAR138 becomes aware that personal data has been collected from a person below the minimum age, the account will be closed, any balance will be handled according to the applicable terms and verification findings, and the personal data will be deleted subject to any mandatory retention requirements.

If you believe a minor has registered with WAR138, please contact support immediately using the email address below so the matter can be reviewed promptly.

10. Changes to This Policy

WAR138 may update this Privacy Policy from time to time to reflect changes in the platform, processing activities, applicable law, or industry standards. The effective date at the top of the page will be updated each time a material revision is made. Continued use of the platform after the updated policy is published constitutes acceptance of the revised terms. If the changes are significant, we may also note them on the platform or through account notification where reasonably practicable.

We encourage you to review this policy periodically. A full version of the current policy is always accessible on this page.

11. Contact Us

If you have a question about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the WAR138 support team. Our support team operates 24 hours a day, 7 days a week on Malaysia Standard Time (MYT, UTC+8).

Email support address (plain text — not a clickable link): [email protected]

Please include your registered username, a description of your request or concern, and any relevant transaction or date references. We aim to acknowledge privacy-related requests promptly and to provide a substantive response within a reasonable timeframe, having regard to the complexity of the request.