Warisan138 Privacy Policy – Member Personal Data Protection

1. Introduction

Warisan138 ("we", "Platform") is fully committed to protecting the privacy and data security of every member who uses our services. This Privacy Policy is the official document that transparently outlines how we collect, process, store, and protect your personal information.

We believe member trust is our most valuable asset. Transparency in data handling is therefore not merely a legal obligation — it is part of the core values we have upheld since the first day this platform launched. Every decision involving members' personal data is made with care, guided by internationally recognised best practices in data protection.

This policy applies to all data collected through the warisan138 website, our mobile app, email communications, live chat, and any other interactions between you and our platform.

2. Personal Data We Collect

We only collect data that is strictly necessary to operate the platform and provide you with the best experience. Below are the categories of data we collect:

Data We Do Not Collect

Warisan138 does not directly collect credit card numbers — all payments are processed through third-party payment providers integrated with PCI-DSS security standards. We also do not store biometric information such as fingerprints or facial recognition data.

3. How We Use Your Data

Your personal data is used for the following purposes only:

• Account Management: Creating, verifying, and maintaining your member account, including any required KYC processes.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently.
• Customer Support: Enabling our team to assist you in resolving any issues or enquiries effectively.
• Platform Security: Detecting and preventing fraud, account breaches, and other unauthorised activities.
• Legal Compliance: Fulfilling reporting obligations to the relevant regulatory bodies when required.
• Product Improvement: Understanding platform usage patterns to make meaningful improvements to the member experience.
• Service Communications: Sending important notifications regarding your account, promotions (if you have opted in), and platform updates.

4. Basis for Data Processing

Warisan138 processes your personal data on the following lawful bases:

• Contract Performance: Processing necessary to fulfil our obligations to you as a registered member, including account management and transaction processing.
• Legitimate Interest: Processing for platform security, fraud prevention, and service improvements that benefit all members.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering (AML) requirements.
• Consent: For optional marketing communications such as promotional offers and platform updates — you may withdraw this consent at any time.

5. Data Sharing with Third Parties

Warisan138 does not disclose your personal data to third parties except in the following limited circumstances:

Trusted Service Providers

We work with carefully selected third-party service providers to assist in operating the platform, including payment providers, game providers, and cloud infrastructure providers. All such providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes set out.

Legal Requirements

We may disclose your data to the relevant authorities when required by law, court order, or official investigation. In such cases, we will notify you in advance wherever permitted to do so.

Protection of Rights and Safety

Data may be disclosed to protect the rights, property, or safety of warisan138, our members, or the public, including in legal action against fraud or illegal activities.

6. Data Security

Warisan138 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

• Data Encryption: All data in transit is protected by 256-bit SSL/TLS encryption; stored data is also encrypted using industry-standard security algorithms.
• Access Control: A role-based access control (RBAC) system ensures that only authorised personnel can access sensitive data.
• Periodic Audits: Internal and external security audits are conducted regularly to identify and address potential vulnerabilities.
• 24/7 Monitoring: An active threat monitoring system operates around the clock to detect suspicious activity in real time.
• Data Backup: Data is regularly backed up to secure locations to ensure service continuity in the event of an incident.
• Staff Training: All staff who handle personal data receive regular data protection training.

7. Data Retention Period

Warisan138 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law:

• Active Account Data: Retained for the duration your account is active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years as required by accounting and anti-money laundering laws.
• Communication Logs: Customer support records are retained for 3 years for dispute resolution purposes.
• Technical Data: Server logs and technical data are retained for 12 months for security and troubleshooting purposes.

Once the retention period expires, data will be securely deleted or fully anonymised so that it can no longer be linked to any individual.

8. Your Rights

As a warisan138 member, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team by email at [email protected] or via live chat. We will process your request within 30 business days.

9. Cookies and Tracking Technologies

Warisan138 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and security settings. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as language and display theme for a more convenient experience.
• Analytics Cookies: Helping us understand how members use the platform so we can make meaningful improvements.
• Security Cookies: Used to detect and prevent fraudulent activity and to protect your account.

You can manage your cookie settings through your browser. However, disabling essential cookies may affect platform functionality.

10. Children's Data Protection

The warisan138 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors. Should we discover that a minor's data has been inadvertently collected, we will take immediate action to delete it and close the relevant account.

If you are a parent or guardian who believes your child has registered an account on our platform, please contact us immediately via customer support.

11. Amendments to the Privacy Policy

Warisan138 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Members will be notified of any material amendments via:

• In-platform notification upon login.
• Emailed to your registered address at least 14 days before the changes take effect.
• Update the "Last Updated" date at the top of this page.

Continued use of the platform after any amendments take effect will be deemed acceptance of the revised policy. If you do not agree with the changes, please close your account and discontinue use of the platform.

12. Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding your privacy and personal data protection, our team is ready to assist:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
• FAQ: Visit our FAQ page for instant answers

We will endeavour to respond to all privacy-related enquiries within 5 business days. For more complex requests such as data access or deletion, the processing period is up to 30 business days.