Privacy Policy

1. Data Controller

wo88, operating the Platform at wo88.app and holding a current international gaming authority licence, is the data controller responsible for the personal data you provide when registering for or using the wo88 Platform ("Platform"). In this Privacy Policy, references to "wo88", "we", "us", and "our" mean the wo88 Platform operator. References to "you" and "your" mean the individual Member or visitor whose personal data is being processed.

By registering a wo88 account or using the Platform as a visitor, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

wo88 collects personal data from two primary sources: information you provide directly, and information collected automatically through your use of the Platform.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, gender, Malaysian MyKad or passport number, residential address, email address, and Malaysian mobile phone number.
• Identity verification documents: Copies of MyKad, passport, and supporting documents such as utility bills or bank statements submitted during the KYC process.
• Payment information: Bank account numbers, eWallet identifiers (Touch 'n Go, Boost), and transaction reference data used for deposit and withdrawal processing. wo88 does not store full card numbers or sensitive payment credentials beyond what is technically necessary for the payment channel integration.
• Support communications: Records of correspondence with wo88 support staff, including live chat transcripts, submitted queries, and any documentation you provide in support requests.
• Responsible gaming data: Deposit limits, loss limits, self-exclusion settings, and any voluntary disclosures you make in the context of responsible gaming tools.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages and game sections visited, navigation paths, session duration, bet history, game activity logs, and feature interactions on the Platform.
• Cookie and tracking data: Session cookies, persistent preference cookies, and analytics identifiers. Full details are provided in Section 6 below.
• Geolocation data: Approximate geographic location derived from IP address, used for jurisdictional compliance checks. wo88 does not collect precise GPS location data.

3. How We Use Your Personal Data

wo88 processes your personal data for the following purposes:

• Account registration and management: To create, administer, and maintain your wo88 account, including authentication, profile management, and account communications.
• Identity verification (KYC): To verify your identity and age (21+) as required by wo88's international gaming authority licence and applicable anti-money laundering obligations.
• Payment processing: To process deposits, withdrawals, and refunds via your chosen payment method, and to maintain financial records as required by applicable law.
• Platform operation and game delivery: To provide access to sportsbook, live casino, slots, lottery, and all other wo88 services. Bet history and game logs are maintained for the purposes of dispute resolution and audit compliance.
• Customer support: To respond to enquiries, resolve disputes, and process complaints submitted through the wo88 support system.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and breaches of wo88's Terms & Conditions.
• Responsible gaming compliance: To administer deposit limits, self-exclusion settings, and other responsible gaming controls you have activated, and to monitor for patterns that may indicate problematic gambling behaviour.
• Regulatory compliance: To fulfil obligations arising from wo88's gaming licence, including record-keeping, reporting to regulatory authorities, and cooperating with law enforcement where legally required.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to Members who have opted in to marketing communications. You may withdraw marketing consent at any time.
• Platform improvement: To analyse aggregated and anonymised usage data for the purpose of improving Platform features, performance, and user experience.

4. Legal Basis for Processing

wo88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil wo88's obligations under the Member account agreement — including account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including gaming licence conditions, AML obligations, tax record-keeping, and responses to lawful authority requests.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and aggregate analytics — where these interests are not overridden by Member privacy rights.
• Consent: Processing for optional marketing communications, where you have given explicit consent. Consent is freely given and may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

5.1 General Principle. wo88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes.

5.2 Operational Service Providers. wo88 engages third-party service providers who process personal data on our behalf under contractual data processing agreements. These include:

• Payment processing partners (FPX banking networks, Touch 'n Go, Boost, and linked bank systems) for deposit and withdrawal transactions.
• Identity verification and KYC service providers for document validation.
• Cloud infrastructure and hosting providers operating secure data centre facilities.
• Customer support platform providers facilitating live chat and ticketing systems.
• Game software studios and live casino operators (including Pragmatic Play, PG Soft, and Asia Gaming studio partners) for the purposes of game delivery and audit logging.

5.3 Regulatory and Legal Disclosure. wo88 may disclose personal data to regulatory authorities, gaming licence bodies, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required by applicable law or where wo88 has a good-faith belief that disclosure is necessary to prevent or investigate illegal activity, fraud, or a threat to safety.

5.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of wo88's business, personal data held by wo88 may be transferred to the acquiring or successor entity, subject to the same privacy protections described in this Policy.

6. Cookies and Tracking Technologies

6.1 What Cookies wo88 Uses. The wo88 Platform uses the following categories of cookies and similar technologies:

• Strictly necessary cookies: Session authentication, security tokens, and load balancing identifiers required for the Platform to function. These cannot be disabled without preventing access to the Platform.
• Functional cookies: Preferences such as language settings, remembered game lobbies, and responsible gaming tool configurations. These persist across sessions to improve your experience.
• Analytics cookies: Anonymised usage statistics used internally to understand how Members navigate the Platform and to identify performance issues. wo88 uses privacy-respecting analytics configurations that do not share identified user data with third-party analytics vendors.

6.2 Managing Cookies. You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent access to wo88 but may affect personalisation features. Strictly necessary cookies cannot be disabled while using the Platform.

7. Data Retention

wo88 retains personal data for the following periods:

• Active account data: Retained for the duration of your active wo88 account relationship plus a minimum of five (5) years following account closure, as required by gaming licence and AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in compliance with applicable financial record-keeping laws.
• KYC documents: Retained for the duration of the account relationship and for at least five (5) years after closure, as required by anti-money laundering regulations.
• Support correspondence: Retained for two (2) years from the date of resolution unless a dispute is ongoing.
• Marketing consent records: Retained for three (3) years from the date consent was given or withdrawn, to demonstrate compliance with consent obligations.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with wo88's data disposal procedures.

8. Data Security

wo88 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and wo88 servers.
• Encryption of sensitive data at rest, including identity documents and financial information.
• Role-based access controls limiting employee access to personal data to those with a documented operational need.
• Regular security assessments and penetration testing of wo88's infrastructure.
• Two-factor authentication options for Member accounts to reduce the risk of unauthorised access.
• Session monitoring and anomalous login detection to identify potential account compromise attempts.

While wo88 takes all reasonable precautions, no internet-connected system can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, wo88 will notify affected Members and relevant authorities as required by applicable obligations.

9. Your Data Rights

Subject to applicable law and regulatory constraints (including data retention obligations arising from wo88's gaming licence), Members have the following rights regarding their personal data:

• Right of access: You may request a copy of the personal data wo88 holds about you.
• Right to rectification: You may request correction of inaccurate personal data. Certain data — such as the name on your KYC-verified identity document — can only be updated by submitting updated verification documents.
• Right to erasure: You may request deletion of your personal data. This right is subject to wo88's legal obligations to retain certain data for regulatory compliance purposes. Data that must be retained by law cannot be deleted on request.
• Right to restrict processing: You may request that wo88 temporarily restrict processing of your data while a correction or objection is being assessed.
• Right to object: You may object to processing carried out on the basis of legitimate interests. wo88 will assess whether its interests are overridden by your privacy interests in each case.
• Right to withdraw marketing consent: You may withdraw consent to marketing communications at any time via Account Settings or by contacting support. Withdrawal does not affect the lawfulness of marketing communications sent before withdrawal.

To exercise any of these rights, contact the wo88 support team via the official live chat on the Platform. wo88 will respond within 30 days of receiving a valid request.

10. Children and Minors

The wo88 Platform is strictly for adults aged 21 years or older. wo88 does not knowingly collect personal data from individuals under 21. If wo88 becomes aware that personal data has been collected from a person under the age of 21, it will immediately suspend the associated account, void all gaming activity, and securely delete the personal data of the minor in accordance with its data disposal procedures.

Parents and guardians who believe a minor has registered on wo88 are encouraged to contact wo88 support immediately for prompt account closure and data deletion.

11. International Data Transfers

wo88's infrastructure may involve the processing of personal data across multiple jurisdictions as part of its cloud hosting and service provider arrangements. Where personal data is transferred outside your country of residence, wo88 ensures that appropriate safeguards are in place — including contractual data processing agreements with service providers that impose data protection standards consistent with this Privacy Policy and applicable regulatory requirements.

By using the wo88 Platform, you acknowledge and consent to the transfer of your personal data to wo88's operational infrastructure across applicable jurisdictions for the purposes set out in this Privacy Policy.

12. Updates to This Privacy Policy

wo88 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs. Material changes will be communicated to Members via the email address on file or via a prominent notice on the Platform prior to the change taking effect. The "Last Updated" date at the top of this document reflects the most recent revision.

Continued use of the wo88 Platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a material change, you should cease using the Platform and may request account closure before the new terms take effect.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by wo88, please contact the wo88 Data & Privacy team via the official support channel:

• Live chat: Available 24/7 via the wo88 Platform
• Email: [email protected]

wo88 is committed to resolving privacy-related queries promptly and transparently. Where a query cannot be resolved through the support channel, Members may escalate to the independent dispute resolution body designated under wo88's gaming authority licence.