At Warisan138, your privacy is a core obligation, not an afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is processed and stored, and what rights you have as a Member of our platform.
This Privacy Policy ("Policy") is issued by Warisan138 ("we", "us", "our", "the Platform") and governs the collection, use, storage, disclosure, and protection of personal data belonging to all registered Members, prospective Members, and visitors ("you", "your", "User") who access or interact with the Warisan138 website and services available at warisan138.cam.
Warisan138 is an online casino and sports betting platform designed and operated primarily for Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other Malaysian states and territories. As a platform serving Malaysian users, Warisan138 is committed to handling personal data in accordance with applicable personal data protection principles, including those outlined in Malaysia's Personal Data Protection Act 2010 (PDPA).
By registering a Warisan138 account, making a deposit, or otherwise using the Platform's services, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree to this Policy, you must discontinue use of the Platform and close your account.
For the purposes of this Policy, the following terms carry the meanings assigned below:
When you register an account, complete KYC verification, make a deposit, request a withdrawal, or contact our support team, you may provide the following categories of Personal Data:
When you access and use the Warisan138 Platform, we automatically collect certain technical and behavioural data, including:
We may receive Personal Data about you from the following third-party sources:
Warisan138 processes your Personal Data for the following specific purposes:
| Purpose | Data Used | Necessity |
|---|---|---|
| Account registration & management | Name, email, phone, date of birth, username | Essential |
| KYC identity verification | IC/passport, address proof, date of birth | Essential |
| Payment processing (deposits & withdrawals) | Bank/e-wallet details, transaction amounts, MYR balances | Essential |
| Customer support | Account ID, contact details, communication records | Essential |
| Fraud prevention & AML compliance | Transaction history, device data, IP address | Legal obligation |
| Responsible gambling monitoring | Wagering patterns, deposit limits, session duration | Legal obligation |
| Platform analytics & improvement | Anonymised usage data, session behaviour | Legitimate interest |
| Marketing communications (with consent) | Email, name, promotion preferences | Consent-based |
We do not use your Personal Data for automated decision-making that produces significant legal effects without human review, except in circumstances where such automation is required for fraud prevention and is subject to manual escalation procedures.
Warisan138 processes your Personal Data on the following legal grounds:
Warisan138 does not sell, rent, or trade your Personal Data to any third party for their independent marketing purposes. We may share your Personal Data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
To process deposits and withdrawals, Warisan138 shares relevant transaction data with our verified Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX operators (Maybank, CIMB, Public Bank, RHB, Hong Leong Bank), and cryptocurrency processing services. These partners receive only the minimum data required to complete the transaction.
For KYC verification, identity document data (including MyKad or passport scans) is shared with licensed identity verification service providers. These providers are bound by strict confidentiality obligations and data processing agreements with Warisan138.
We may share transaction and behavioural data with fraud prevention platforms and anti-money laundering screening services to identify and prevent suspicious activity. This processing is conducted under our legal obligations and legitimate interests.
Warisan138 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required by applicable law or a valid legal process. We will, where legally permissible, notify affected Members of such disclosures.
We engage third-party service providers for cloud hosting, data storage, customer support tooling, and analytics. These providers act as Data Processors under written agreements that restrict their use of your data to the services they perform for Warisan138.
Warisan138 retains your Personal Data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.
Warisan138 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and understand how Members interact with our services. A cookie is a small text file placed on your device by your browser when you visit the Platform.
You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through the browser's privacy or settings menu. Please note that disabling certain cookies may affect the functionality of the Platform.
Warisan138 implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
In the event of a data breach that is likely to result in a risk to your rights and freedoms, Warisan138 will notify affected Members without undue delay and in accordance with applicable legal requirements.
As a Member whose Personal Data is processed by Warisan138, you have the following rights under applicable data protection law. You may exercise any of these rights by contacting our support team at [email protected] with the subject line "Data Rights Request."
Request a copy of the Personal Data we hold about you, including the purposes for which it is processed.
Request correction of inaccurate or incomplete Personal Data held on your account.
Request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to our legal retention obligations.
Request that we restrict processing of your Personal Data in certain circumstances, such as while a rectification request is pending.
Request a structured, machine-readable copy of the Personal Data you provided to us, where technically feasible.
Withdraw consent for consent-based processing (e.g., marketing) at any time, without affecting the lawfulness of prior processing.
Warisan138 will respond to verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, with notification to you. We may need to verify your identity before processing a data rights request.
Warisan138 strictly prohibits the use of the Platform by any person under the age of 21 years. We do not knowingly collect, store, or process Personal Data belonging to individuals under the age of 21.
All account registrations require confirmation that the applicant is at least 21 years of age. Warisan138 uses KYC verification procedures to confirm the age and identity of all Members before granting access to real-money wagering services.
If Warisan138 discovers or has reasonable grounds to believe that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the data as permissible under legal retention obligations, and refund any real-money deposits to the original payment method.
The Warisan138 Platform may contain references to third-party payment services (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank Internet Banking, and others) that operate under their own independent privacy policies and terms. Warisan138 is not responsible for the privacy practices of third-party services and has no control over how they collect or use your data once you interact with their platforms.
We encourage you to review the privacy policies of any third-party services you interact with in connection with your Warisan138 account — particularly your chosen payment provider and e-wallet service.
Warisan138 reviews this Privacy Policy periodically and reserves the right to update it at any time. Material changes — those that significantly affect your rights or our data practices — will be communicated to you via notice on the Platform homepage and by email to your registered address, with at least 14 days' notice before the changes take effect where practicable.
Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. The effective date of the current version is stated at the top of this document. The most current version of this Policy is always accessible at warisan138.cam/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the Warisan138 Data Support team through the following channels:
Email (Privacy & Data Requests):
[email protected]
Please use the subject line: "Privacy Request — [Your Username]"
Live Chat: Available 24/7 in English, Bahasa Melayu, and Mandarin — average response under 5 minutes.
WhatsApp: Daily, 8:00 AM – 2:00 AM Malaysian Standard Time (MYT).
We take all privacy queries seriously and aim to respond within 5 business days for general enquiries and within 30 calendar days for formal data rights requests. This Privacy Policy was last updated on 1 January 2026.
A summary of the core privacy commitments embedded in our data practices — plain English, no jargon.
Every data packet exchanged between your device and Warisan138 — including payment details and login credentials — is encrypted in transit using industry-standard TLS/SSL protocols.
Warisan138 does not sell, rent, or trade your Personal Data to third parties for marketing or commercial purposes. Your information exists solely to provide and improve our services to you.
We collect only the data that is genuinely necessary — for registration, KYC, payments, and support. No speculative data collection and no harvesting of data for secondary undisclosed purposes.
Our data practices are aligned with Malaysia's Personal Data Protection Act 2010 (PDPA) — covering lawful collection, purpose limitation, data quality, security, retention, and data subject rights.
Access, rectify, delete, or port your data at any time. Warisan138 responds to verified data rights requests within 30 calendar days — no bureaucratic delays or runaround.
In the unlikely event of a data breach posing risk to your rights, Warisan138 commits to notifying affected Members without undue delay — in line with legal obligations and basic transparency.
Our support team handles data requests in English, Bahasa Melayu, and Mandarin — 24 hours a day, 7 days a week. No automated replies, no lengthy queues.
This Privacy Policy is effective as of 1 January 2026. For players aged 21 and above only. warisan138.cam