Privacy Policy

Wisma138 ("we", "us", "our", or "the Platform") operates the online gaming and sports betting platform accessible at wisma138.cam. We recognise that when you entrust us with your personal information, you are placing significant confidence in our ability to handle that data responsibly, securely, and with full respect for your privacy.

This Privacy Policy sets out in clear and plain terms: (a) what categories of personal data Wisma138 collects from and about you; (b) the specific purposes for which that data is collected and processed; (c) the circumstances under which we may share your data with third parties; (d) the measures we employ to keep your data secure; and (e) the rights you hold in respect of your personal data and how to exercise them.

This Policy applies to all users of the Wisma138 Platform, including registered Members and visitors who browse the Platform without creating an account. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information that identifies or is capable of identifying a natural person, directly or indirectly — including but not limited to name, identification number, contact details, location data, online identifiers, and financial information.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, and erasure.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. In the context of this Policy, Wisma138 acts as the Data Controller for the personal data of its Members and Platform visitors.
• "Data Processor" means any third party that processes Personal Data on behalf of and under the instruction of the Data Controller.
• "Member" means a natural person who has registered an account on the Wisma138 Platform.
• "Cookies" means small text files stored on your device by your web browser at the instruction of the Platform, used to remember preferences, session states, and usage patterns.
• "KYC" means Know Your Customer — the identity verification process conducted to confirm a Member's identity, age, and eligibility to use the Platform.

Wisma138 collects personal data that is necessary to operate the Platform, comply with our regulatory obligations, and deliver a personalised and secure experience. The categories of data we collect include:

Wisma138 collects personal data through the following means:

Wisma138 processes your personal data for the following specific and lawful purposes:

• Account Administration: Creating, maintaining, and securing your Member account; processing login requests; managing account preferences and communication settings.
• Service Delivery: Providing access to games, sports betting markets, and all other Platform features; processing deposits and withdrawals through approved Malaysian payment methods; crediting bonuses and promotional rewards.
• Identity & Age Verification: Conducting KYC checks to verify your identity, confirm you are aged 21 or above, and satisfy our regulatory compliance obligations.
• Financial Compliance: Monitoring transactions for anti-money laundering (AML) indicators; satisfying source-of-funds obligations; maintaining financial records as required by our licensing authority.
• Responsible Gambling: Monitoring gaming behaviour to identify potential indicators of problem gambling; enforcing deposit limits and self-exclusion arrangements; administering responsible gambling tools and programmes.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, account manipulation, bonus abuse, and unauthorised access; maintaining Platform integrity and security infrastructure.
• Customer Support: Responding to enquiries, complaints, and disputes; maintaining support records for quality assurance and training purposes.
• Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates where you have not opted out of marketing communications. You may opt out at any time via account settings or by contacting support.
• Platform Improvement: Analysing aggregated usage data to improve Platform design, game selection, payment flows, and overall user experience for our Malaysian member base.
• Legal Obligations: Complying with applicable legal and regulatory requirements, court orders, and lawful requests from authorised bodies.

Wisma138 processes personal data only where it has a lawful basis to do so. The applicable legal bases are:

• Contractual Necessity: Processing required to perform the contract between Wisma138 and you as a Member — including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with our international licensing conditions, anti-money laundering obligations, age verification mandates, and other applicable legal requirements.
• Legitimate Interests: Processing conducted for the legitimate interests of Wisma138 or its Members — including fraud prevention, security monitoring, Platform improvement, and responsible gambling programme administration — provided these interests do not override your fundamental rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of direct marketing communications. Consent-based processing may be withdrawn at any time without affecting the lawfulness of prior processing.

Wisma138 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We may share your personal data with the following categories of parties only to the extent necessary and for the purposes described:

The Wisma138 Platform uses cookies and similar tracking technologies to provide, maintain, and improve the service. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These cookies enable core functionality such as session authentication, security token management, and load balancing. They cannot be disabled without materially impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, game history, and last-used payment method, to provide a more personalised experience on your next visit.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Members use the Platform — including which pages are visited most frequently and where users encounter errors — to inform improvements to the Platform experience.
• Security Cookies: Used to detect and prevent fraudulent activity, verify session integrity, and protect Members from account takeover attacks.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookie categories may affect your ability to access some features of the Platform. Continued use of the Platform following your initial visit constitutes acceptance of our use of cookies as described in this Policy.

Wisma138 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal retention obligations. Our general retention framework is as follows:

• Active Account Data: Retained for the duration of your account's active status, plus a period following closure as required by our licensing obligations and applicable law.
• Financial Transaction Records: Retained for a minimum of five (5) years following the transaction date, in accordance with standard anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure, or longer where required by our regulatory obligations.
• Support Communications: Retained for a period of three (3) years following the resolution of the relevant enquiry or dispute.
• Technical & Usage Logs: Retained for a period of twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures. Where you request account closure, we will process the closure and begin the retention countdown within 30 days of receiving your confirmed request.

Wisma138 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit TLS/SSL encryption. Sensitive data stored in our databases is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal access is controlled through role-based permissions, multi-factor authentication requirements, and comprehensive access logging.
• Intrusion Detection: Our infrastructure is monitored continuously by automated intrusion detection and prevention systems designed to identify and respond to anomalous activity in real time.
• Penetration Testing: We conduct regular third-party penetration testing and vulnerability assessments of our Platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Incident Response: We maintain a documented data breach response procedure. In the event of a security incident that poses a material risk to your personal data, we will notify affected Members and relevant authorities in accordance with applicable obligations.
• Staff Training: All Wisma138 personnel who handle personal data receive regular training on data protection obligations, security best practices, and their responsibilities under this Privacy Policy.

While we take extensive measures to protect your data, no system is entirely immune to risk. We encourage all Members to maintain strong, unique passwords for their Wisma138 accounts and to enable two-factor authentication where available.

Subject to applicable law and any overriding regulatory obligations, you hold the following rights in respect of your personal data held by Wisma138:

To exercise any of the above rights, please contact our data team at [email protected] with the subject line "Data Rights Request". We will respond to verified requests within 30 days of receipt. We may need to verify your identity before processing certain requests.

The Wisma138 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21 and we do not permit minors to register accounts or use the Platform in any capacity.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor may have provided personal data to Wisma138, please contact us immediately at [email protected].

Our age verification procedures are designed to prevent underage access, but parents and guardians are encouraged to use appropriate parental control tools to prevent minors from accessing online gaming platforms.

The Wisma138 Platform may reference or integrate with third-party services — such as payment providers including Maybank2u, Touch 'n Go eWallet, and DuitNow — in the context of processing your transactions. These third-party services operate under their own independent privacy policies and data practices, for which Wisma138 bears no responsibility.

We encourage you to review the privacy policies of any third-party service providers whose services you use in connection with your Wisma138 account. Wisma138's obligations under this Privacy Policy extend only to personal data processed directly by or under the direction of Wisma138.

Wisma138 is an internationally operated platform and your personal data may be processed and stored on servers located outside of Malaysia. Where personal data is transferred internationally, Wisma138 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy.

These safeguards may include: standard contractual clauses binding recipient entities to data protection standards; data processing agreements with third-party service providers; and the selection of service providers operating in jurisdictions with recognised data protection frameworks.

Wisma138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform features. When material changes are made to this Policy, we will notify registered Members by email or by publishing a prominent notice on the Platform, providing reasonable advance notice before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to any revised Policy, you should discontinue use of the Platform and contact us to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Wisma138, please contact us through any of the following channels:

We are committed to resolving any privacy-related concern in a fair, transparent, and timely manner. If you are not satisfied with our response to a data rights request or privacy complaint, you retain the right to escalate the matter to the relevant supervisory authority in your jurisdiction.