Official Documents

Privacy Policy wm98 —
Data Protection & Your Information Security

Your privacy is our priority. wm98 is committed to protecting every piece of personal information you entrust to us, using the latest encryption technology and rigorous data security practices in line with international standards.

Updated: 1 January 2026 256-bit SSL Bahasa Melayu Version 2.5

Our Commitment

Six Core Pillars WM98 Data Protection

Here is how WM98 ensures your personal data remains secure and under control at all times.

Continuous Encryption

All data transmitted between your device and wm98 servers is encrypted using TLS 1.3 protocol and AES-256 encryption. No third party can intercept or read that data.

Strict Access Controls

Only authorised WM98 staff may access your personal data, and only for legitimate purposes. Every access is logged and continuously monitored by our security team.

Secure Data Storage

Your data is stored in multi-tier data centres compliant with ISO 27001 standards. Automated backup systems ensure your data is never lost, while physical access to servers is fully controlled.

No Data Selling

Wm98 has never and will never sell, rent, or exchange your personal data to any third party for marketing or commercial purposes without your explicit prior consent.

Two-Factor Authentication

Wm98 fully supports two-factor authentication (2FA) to protect your account. Even if your password is compromised, your account remains secure as it requires additional verification through your device.

Periodic Review

The wm98 security team conducts quarterly internal audits and engages independent third parties for annual penetration testing to ensure data protection systems remain at the highest standard.


Important Note: This Privacy Policy explains how WM98 collects, processes, stores, and protects your personal information. By using the WM98 platform, you agree to the terms set out in this document. Please read it carefully before registering.
01 Introduction

Wm98 is an online gaming platform operating under a recognised licence and takes its responsibility to protect every user's privacy seriously. We understand that your trust is our most valuable asset, and we never take that responsibility lightly.

This Privacy Policy is drafted in accordance with applicable data protection legislation and global industry best practices. It outlines the types of data we collect, the purposes for collection, how we process and store it, and the rights you hold over your own personal data.

This document applies to all individuals who access or use the WM98 platform — whether through the official website at wm98.wine, the Android or iOS mobile app, or any other official channel provided by WM98. It also applies to individuals who simply browse our website without registering as a member.

wm98's Commitment: We are committed to always acting with transparency, honesty, and accountability in all matters relating to your personal data. Your privacy is not merely a legal obligation for us — it is a core value we uphold.
02 Data We Collect

Wm98 only collects data that is genuinely necessary to deliver the best service and ensure platform security. We practise the principle of data minimisation — we do not collect what we do not need.

Generally, the data we collect falls into three main categories:

Data Categories Sample Information Primary Purposes
Identity Data Full name, ID number, date of birth, gender Identity verification & KYC
Contact Data Phone number, email address, residential address Communication & customer support
Financial Data Bank account number, account holder name, e-wallet information Processing deposits & withdrawals
Technical Data IP address, device type, browser version, OS Security & fraud prevention
Activity Data Game history, transaction logs, settings preferences Service improvement & compliance
Communication Data Live chat conversation records, support tickets, emails Quality assurance & complaint resolution

We also collect data automatically through cookies and similar tracking technologies when you browse our platform. Further details on this are outlined in Section 5.

Important: Full credit or debit card numbers are never stored by wm98. All payment transactions are handled directly by licensed payment processors that comply with PCI-DSS standards.
03 How We Use Your Data

Every piece of data we collect is used solely for legitimate, pre-defined purposes. wm98 never uses your data for purposes unrelated to the services we provide. The following are the primary purposes of data use:

  • Service Provision: To operate and manage your account, process deposits and withdrawals, and enable you to access all features of the wm98 platform.
  • Identity Verification (KYC): To comply with anti-money laundering (AML) legal requirements and to ensure all members are verified individuals aged 18 and above.
  • Security & Fraud Prevention: To identify and prevent fraudulent activity, hacking, account abuse, and to protect the security of all platform users.
  • Customer Support: To respond to enquiries, resolve issues, and provide you with technical assistance more effectively.
  • Service-Related Communications: To send important notices regarding your account, policy changes, security updates, and transaction information.
  • Marketing (with Consent): To send promotional offers, bonus information, and the latest news — only to members who have consented to receive marketing communications.
  • Platform Improvements: To analyse usage patterns and improve user experience, system stability, and overall platform performance.
  • Legal Compliance: To fulfil regulatory reporting requirements and comply with all applicable legal obligations.
04 Data Sharing with Third Parties

Wm98 understands your concerns about data sharing. We do not sell, rent, or disclose your personal data to third parties except under specific circumstances described below.

  • Service Providers: We share only the necessary data with service providers we use to operate the platform — such as payment processors, licensed gaming software providers, and cloud infrastructure providers. All such parties are bound by strict confidentiality agreements.
  • Legal Requirements: wm98 will disclose data when required by court order, regulatory authority directive, or other valid legal obligation.
  • Crime Prevention: In cases involving fraud, money laundering, or serious security threats, WM98 reserves the right to share relevant information with law enforcement authorities.
  • Business Transfers: In the event of any merger, acquisition, or asset sale, user data may be transferred as part of those assets — subject to notice to users and equivalent protections.
wm98 Guarantee: We have never and will never sell your data to advertisers, data brokers, or third-party marketing companies. Your data is not our business commodity.
05 Cookies & Tracking Technologies

Wm98 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage patterns. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication, session management, and security. Cannot be disabled.
  • Performance Cookies: Collects information on how you use the platform to help us improve site speed and stability.
  • Functional Cookies: Stores your preferences such as language selection, display settings, and other choices to deliver a more personalised experience.
  • Analytics Cookies: Helps us understand traffic patterns and aggregate user behaviour (not individual) for continuous improvement.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality and user experience of the WM98 platform.

06 Data Security

Data security is central to wm98's operations. We continually invest in best-in-class security technologies and processes to ensure your personal data is always protected against unauthorised access, breaches, or misuse.

The technical and organisational security measures we implement include:

  • Data encryption in transit using TLS 1.3 and valid 256-bit SSL certificates
  • Data encryption at rest using AES-256 algorithm
  • Active 24/7 intrusion detection and prevention system (IDS/IPS)
  • Network segmentation and layered firewalls to protect server infrastructure
  • Role-based access control (RBAC) for all internal staff
  • Mandatory cybersecurity awareness training for all staff
  • Annual penetration testing by independent third parties
  • A comprehensive and tested incident response plan
TLS 1.3 AES-256 IDS/IPS Active RBAC Annual Audit

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of any data breach affecting your information, wm98 will notify you within a reasonable timeframe and take immediate remedial action.

07 Your Rights Regarding Personal Data

As the owner of your own personal data, you hold certain rights that wm98 is committed to respecting and facilitating. The following are the key rights you hold:

👁️
Right to Access

Request a copy of the personal data we hold about you at any time.

✏️
Right to Rectification

Update or correct your personal data that is inaccurate or incomplete.

🗑️
Right to Erasure

Request deletion of your personal data, subject to legal requirements.

⛔
Right to Object

Object to the processing of your data for direct marketing purposes at any time.

📦
Right to Portability

Obtain your data in a machine-readable format for transfer to another platform.

⏸️
Right to Restrict Processing

Request that we restrict the processing of your data under certain specified circumstances.

To exercise any of the above rights, please contact the wm98 customer support team via the in-platform live chat. We will process your request within no more than 30 calendar days from the date of receipt. In most cases, we aim to respond within 7 business days.

08 Retention Period & Deletion Policy

Wm98 does not retain your personal data longer than necessary for the purpose it was collected, or beyond the time limits prescribed by applicable laws and regulations.

  • Active Account Data: Retained for the duration of your active account plus 5 years after account closure, in line with AML compliance requirements.
  • Financial Transaction Records: Retained for a minimum of 7 years to meet tax and financial reporting legal requirements.
  • Communication Logs: Customer support conversation records are retained for 2 years for quality assurance and complaint resolution purposes.
  • Technical Log Data: Technical and security logs are retained for 90 days before being deleted or anonymised.
  • Marketing Data: Retained until you withdraw your marketing consent, after which it is deleted within 30 days.

When data is no longer needed, it is securely deleted using methods that meet recognised data erasure standards, ensuring it cannot be recovered by any party.

09 Cross-Border Data Transfers

As an internationally operating platform, your personal data may be transferred to and processed in countries other than Malaysia, including locations where our servers and service providers operate.

Wm98 ensures that any cross-border data transfer is carried out with protections equivalent to or greater than those provided in Malaysia, through the following mechanisms:

  • Data transfer agreements compliant with international standards with all partners and service providers
  • Use of approved standard contractual clauses for international data transfers
  • Data protection impact assessments (DPIA) prior to any new data transfer being initiated
  • Continuous compliance monitoring of all third parties that receive data
10 Child Protection

The wm98 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. If you believe a minor has registered on our platform, please contact our customer support team immediately so we can take appropriate action.

Parents & Guardians: Please monitor your children's internet usage and ensure they cannot access online gaming platforms intended for adults. wm98 employs a strict age verification system, but parental supervision remains the most effective layer of protection.
11 Changes to This Privacy Policy

Wm98 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. When significant changes occur, we will notify you via:

  • Prominent notices on the wm98 platform homepage
  • Notification email to your registered email address
  • In-app notifications on the wm98 mobile app (where applicable)

Changes will take effect 14 days after notice, unless required by law to take effect immediately. Continued use of the wm98 platform after the effective date constitutes your acceptance of the updated Privacy Policy.

The "Last Updated" date at the top of this document indicates when this Privacy Policy was last modified. You are advised to review this page periodically.

12 Contact Us

If you have any questions, concerns, or complaints regarding how wm98 handles your personal data, or if you wish to exercise any of your rights under this Privacy Policy, please do not hesitate to contact us.

Live Chat

Reach us directly via Live Chat on the WM98 platform. Our support team is available 24 hours a day, 7 days a week.

Official Email

For written enquiries or formal requests regarding personal data, you may contact us at: [email protected]

We will endeavour to respond to all enquiries within 2 business days. For more complex cases involving data rights, we aim to resolve them within 30 calendar days as stipulated by our policy.


Join wm98 Today

Ready for a Gaming Experience Secure & Trusted?

Join millions of members who already trust WM98. Your data is protected, your privacy is respected — just focus on your wins.

Encrypted Data 256-bit SSL Certified RNG 24/7 Support
Bahasa Melayu