wa88 Privacy Policy

1. Introduction

wa88 is committed to protecting the privacy and personal data of all individuals who interact with our Platform — whether as registered players, prospective registrants, or general visitors. This Policy sets out the categories of personal data we collect, the purposes for which we process it, the legal basis for that processing, and the rights you hold in relation to your data.

wa88 acts as the data controller in respect of personal data collected through the Platform. We process personal data in accordance with applicable data protection legislation and our obligations under the terms of our operating licence.

2. Data We Collect

wa88 collects the following categories of personal data:

2.1 Identity Data

• Full legal name as it appears on your government-issued ID;
• Date of birth;
• National identification number (MyKad number) or passport number, where provided for KYC purposes;
• Copies of identity documents provided during account verification.

2.2 Contact Data

• Email address registered to your wa88 account;
• Mobile phone number;
• Residential address (city, state, postcode) for verification and correspondence purposes.

2.3 Financial Data

• Payment method identifiers (e-wallet account references, bank account numbers where provided for FPX or withdrawal processing);
• Deposit and withdrawal transaction history;
• Source-of-funds documentation provided during enhanced due diligence.

2.4 Technical & Usage Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser information;
• Session duration, login timestamps, and pages visited;
• Betting and gaming activity logs including wagers placed, games accessed, and outcomes.

2.5 Communications Data

• Records of Live Chat support interactions;
• Email correspondence with wa88 support;
• Feedback or complaint submissions.

3. How We Collect Data

wa88 collects personal data through the following means:

• Direct provision: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your profile settings;
• Automated collection: Technical data collected automatically when you access or interact with the Platform, including via cookies, server logs, and session tracking technologies;
• Third-party sources: Identity and fraud-screening data received from KYC verification service providers; payment confirmation data received from payment processors and e-wallet operators including Touch 'n Go eWallet, Boost, and FPX banking partners.

4. How We Use Your Data

wa88 uses personal data for the following purposes:

• To create, manage, and maintain your wa88 account;
• To process deposits, withdrawals, and betting transactions in Malaysian Ringgit (MYR);
• To verify your identity and age in compliance with our KYC obligations and responsible gaming requirements;
• To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct;
• To provide customer support and respond to account queries;
• To send transactional communications, including deposit confirmations, withdrawal notifications, and account security alerts;
• To send promotional communications about wa88 offers and services, where you have not opted out of such communications;
• To comply with applicable legal, regulatory, and licensing obligations;
• To improve Platform performance, user experience, and product development through aggregated usage analytics.

5. Legal Basis for Processing

wa88 processes personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide the services you have requested, including account management, transaction processing, and customer support;
• Legal obligation: Processing required to comply with KYC, anti-money laundering, and other regulatory requirements applicable to our operating licence;
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, where required by applicable law. You may withdraw consent at any time by contacting support or using the unsubscribe mechanism in any marketing communication.

6. Sharing Your Data

wa88 does not sell personal data to third parties. We may share your data with the following categories of recipient, strictly to the extent necessary for the stated purpose:

• KYC and identity verification providers: To process identity document verification and age confirmation;
• Payment processors and e-wallet operators: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency channels;
• Fraud prevention and security services: To screen transactions and login activity against known fraud patterns;
• Game content providers: Limited game session identifiers shared with licensed software providers to facilitate game play; no financial or full identity data is shared with game studios;
• Legal and regulatory authorities: Where required by law, court order, or regulatory demand;
• Professional advisors: Legal, accounting, and audit professionals bound by applicable duties of confidentiality.

All third-party data processors engaged by wa88 are contractually bound to process personal data only as instructed and to maintain appropriate security measures.

7. Cookies & Tracking Technologies

wa88 uses cookies and similar technologies including web beacons and local storage to operate and improve the Platform. The primary categories of cookies used are:

• Essential cookies: Required for session management, login authentication, and basic Platform functionality. These cannot be disabled without impacting Platform operation;
• Analytical cookies: Used to collect aggregated, anonymised data on how users interact with the Platform, to identify areas for improvement;
• Preference cookies: Store user interface preferences such as language and display settings between sessions.

wa88 does not use third-party advertising cookies or behavioural profiling cookies that track users across external websites. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the Platform.

8. Data Retention

wa88 retains personal data for the following periods:

• Active account data: Retained for the duration of the active account relationship;
• Post-closure account data: Retained for a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements and to respond to any regulatory or legal requests;
• Transaction records: Retained for seven years from the date of each transaction, in line with standard financial compliance obligations;
• Support correspondence: Retained for three years from the date of the last interaction;
• Technical logs: Retained for 12 months then automatically purged unless flagged for an active investigation.

9. Data Security

wa88 implements technical and organisational measures appropriate to the risk level associated with each category of personal data we process. These measures include:

• TLS 1.2+ encryption for all data in transit between users and the Platform;
• Encryption at rest for sensitive personal and financial data stored in our databases;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments by independent security professionals;
• Incident response procedures for detecting and managing data security events.

In the event of a data breach that is likely to result in high risk to your rights and freedoms, wa88 will notify affected individuals without undue delay and in accordance with our notification obligations under applicable law.

10. International Data Transfers

Some of wa88's service providers and infrastructure partners are located outside Malaysia. Where personal data is transferred to recipients in other jurisdictions, wa88 ensures that appropriate safeguards are in place — including contractual data protection clauses equivalent to the standard required under applicable data protection law — to protect your data to a standard at least equivalent to that applicable in Malaysia.

11. Your Rights

Subject to applicable law, you have the following rights in relation to personal data wa88 holds about you:

• Right of access: To request a copy of the personal data wa88 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data in certain circumstances, subject to our legal retention obligations;
• Right to restrict processing: To request that we limit processing of your data in certain circumstances;
• Right to object: To object to processing based on legitimate interests, including direct marketing;
• Right to data portability: To receive personal data you have provided to us in a structured, machine-readable format, where technically feasible.

To exercise any of these rights, please contact wa88 support via Live Chat on the Platform. We will respond to valid requests within 30 days. We may request proof of identity before processing any data rights request.

12. Children's Privacy

The wa88 Platform is strictly restricted to individuals aged 21 and over. wa88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has provided personal data through our Platform, we will take immediate steps to close the account and delete the associated data. If you believe that a minor may have registered an account, please notify us via Live Chat immediately.

13. Third-Party Links

The wa88 Platform may contain references to third-party services such as payment providers. This Policy does not apply to third-party websites or services. wa88 is not responsible for the privacy practices of external service providers. We recommend that you review the privacy policies of any third-party services you access in connection with your use of wa88.

14. Policy Updates

wa88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered players via a notice on the Platform. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wa88 processes your personal data, please contact our Data Protection team via Live Chat on the Platform (available 24/7) or by email at the address listed in the footer of this page. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 calendar days.