Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how wo88 ("the Company", "we", "us", "our") collects, uses, stores, and discloses personal data relating to individuals ("you", "your") who access or use the wo88 website, mobile platform, and associated services (collectively, "the Platform").

1.2 By registering an account on the wo88 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not consent to this Policy, you must not register an account or use the Platform.

1.3 This Policy should be read together with the wo88 Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference. Defined terms used in this Policy that are not separately defined herein carry the meaning assigned to them in the Terms & Conditions.

2. Data Controller

2.1 For the purposes of applicable data protection legislation, wo88 is the data controller of the personal data you provide to us through the Platform. As data controller, wo88 determines the purposes and means by which your personal data is processed.

2.2 Where wo88 engages third-party service providers to process personal data on its behalf, those providers act as data processors under written agreements that bind them to process your data only in accordance with wo88's instructions and in compliance with applicable data protection requirements.

3. Personal Data We Collect

3.1 wo88 collects the following categories of personal data from players:

3.2 wo88 does not collect sensitive personal data (such as health data, biometric data, or racial or ethnic origin data) unless specifically required for responsible gaming purposes (for example, where a player has self-excluded and requests re-activation, which may require additional verification).

4. How We Collect Your Data

4.1 Directly from you. The majority of the personal data wo88 holds is provided directly by you: when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or interact with the Platform.

4.2 Automatically. When you use the Platform, wo88 and its technology partners collect technical data automatically, including your IP address, device identifiers, browser type, and session data. This data is collected via server logs, cookies, and similar tracking technologies described in Section 10.

4.3 From third parties. wo88 may receive personal data about you from third-party service providers, including: (a) KYC and identity verification providers who assist in verifying your identity documents; (b) payment processors who provide transaction confirmation data; (c) fraud prevention and AML screening services; and (d) publicly available sources where relevant to fraud prevention or compliance purposes.

5. How We Use Your Personal Data

5.1 wo88 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your wo88 account, including processing deposits and withdrawals and managing your account balance.
• Identity and age verification: To verify your identity and confirm that you meet the minimum age requirement of 21 years before permitting participation in gaming activities.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and other legal obligations applicable to online gaming operators.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming behaviour, apply responsible gaming tools (such as deposit limits and self-exclusion), and identify players who may require support.
• Customer support: To respond to your queries, handle complaints, and resolve disputes relating to your account or Platform activity.
• Platform improvement: To analyse Platform usage patterns, diagnose technical issues, and improve the functionality and user experience of the Platform.
• Marketing (with consent): To send you promotional communications about wo88 products, bonuses, and services, where you have consented to receive such communications or where wo88 has a legitimate interest in contacting you as an existing customer.

6. Legal Basis for Processing

6.1 wo88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and wo88 (i.e., the Terms & Conditions), including account management, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, age verification requirements, and regulatory reporting.
• Legitimate interests: Processing carried out for wo88's legitimate business interests, including fraud prevention, security monitoring, Platform improvement, and marketing to existing customers, where such interests are not overridden by your data protection rights.
• Consent: Where wo88 relies on your consent as the legal basis for processing (for example, for direct marketing to non-customers), you have the right to withdraw that consent at any time by contacting us as described in Section 16.

7. Data Sharing and Disclosure

7.1 wo88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes.

7.2 wo88 may share your personal data with the following categories of recipients in the course of operating the Platform:

• Payment service providers: Banks, e-wallet providers (including Touch n Go, Boost), and cryptocurrency processors, for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist wo88 in verifying your identity documents and checking your details against relevant databases.
• Game technology providers: Software developers and platform providers whose games are accessible on wo88, to the extent necessary to facilitate your participation in those games.
• Fraud prevention and AML services: Third-party providers that assist wo88 in detecting and preventing fraudulent activity and money laundering.
• IT and infrastructure providers: Service providers responsible for hosting, maintaining, and securing the Platform infrastructure.
• Legal and regulatory authorities: Regulatory bodies, law enforcement agencies, and courts, where disclosure is required by law or a valid legal order.

7.3 All third-party service providers engaged by wo88 to process personal data are bound by written data processing agreements requiring them to process your data securely, only for the specified purpose, and in accordance with applicable data protection requirements.

8. Data Retention

8.1 wo88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements.

8.2 In general, wo88 retains account data and transaction records for a minimum of five (5) years from the date of the last transaction or account closure, in order to comply with applicable AML and gaming regulatory requirements.

8.3 KYC documentation is retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with applicable regulatory requirements.

8.4 Where personal data is no longer required for any lawful purpose and retention is not required by law, wo88 will securely delete or anonymise that data in accordance with its data deletion procedures.

9. Data Security

9.1 wo88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest on Platform infrastructure;
• Role-based access controls limiting access to personal data to authorised personnel on a need-to-know basis;
• Access logging and monitoring for anomalous data access activity;
• Regular security assessments and penetration testing of Platform infrastructure;
• Two-factor authentication available to all accounts and mandatory for administrative access.

9.2 While wo88 takes reasonable steps to protect your personal data, no internet-based system is entirely secure. You are responsible for maintaining the security of your account credentials, as described in the Terms & Conditions. wo88 will notify you in accordance with applicable law in the event of a data breach that is likely to result in a high risk to your rights and freedoms.

10. Cookies and Tracking Technologies

10.1 wo88 uses cookies and similar tracking technologies (such as web beacons and local storage) on the Platform. Cookies are small text files placed on your device when you visit the Platform. They serve the following purposes:

• Essential cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state. Disabling these cookies will prevent you from using the Platform.
• Performance and analytics cookies: Used to collect aggregated, anonymised data on how players use the Platform, helping wo88 identify areas for improvement.
• Security cookies: Used to detect suspicious login activity, prevent cross-site request forgery, and support fraud prevention measures.

10.2 Most web browsers allow you to control cookie settings through the browser's preferences. You may choose to reject non-essential cookies, but please be aware that doing so may affect the functionality of the Platform. Blocking essential cookies will prevent you from logging in.

10.3 wo88 does not use third-party advertising cookies or behavioural retargeting cookies for the purpose of serving advertising on third-party websites.

11. Your Data Protection Rights

11.1 Subject to applicable law and wo88's legal obligations, you have the following rights with respect to your personal data:

• Right of access: You have the right to request a copy of the personal data wo88 holds about you.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held about you.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to wo88's legal retention obligations — we may not be able to delete certain data that we are required to retain by law.
• Right to restrict processing: In certain circumstances, you have the right to request that wo88 restrict the processing of your personal data.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to object: Where wo88 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. wo88 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11.2 To exercise any of the above rights, please contact wo88 customer support as described in Section 16. wo88 will respond to your request within a reasonable timeframe and in accordance with applicable law. wo88 may request proof of identity before processing a data subject request.

12. Marketing Communications

12.1 wo88 may send you promotional communications about bonuses, new games, sportsbook promotions, and other wo88 services by email, SMS, or in-Platform notification. As an existing customer, wo88 may send you such communications on the basis of its legitimate interest, unless you have opted out.

12.2 You may opt out of marketing communications at any time by: (a) clicking the unsubscribe link in any wo88 marketing email; (b) updating your communication preferences in your account settings; or (c) contacting wo88 customer support and requesting to be removed from marketing lists.

12.3 Opting out of marketing communications does not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, or security alerts) which wo88 is required to send as part of operating your account.

12.4 wo88 will never send marketing communications to players who have self-excluded from the Platform or who have been placed on a marketing suppression list at their own request.

13. Children's Privacy

13.1 The wo88 Platform is strictly for adults aged 21 years and over. wo88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

13.2 If you believe that a person under the age of 21 has registered an account on the wo88 Platform or has otherwise provided their personal data to us, please contact our support team immediately so that we can investigate and take appropriate action.

14. International Data Transfers

14.1 In order to operate the Platform, wo88 may transfer your personal data to service providers located in jurisdictions outside Malaysia. Where such transfers occur, wo88 takes appropriate measures to ensure that your personal data remains protected to a standard equivalent to that which applies within Malaysia, including through the use of contractual safeguards with the receiving service provider.

14.2 wo88 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate protective measures.

15. Amendments to This Policy

15.1 wo88 reserves the right to amend this Privacy Policy at any time. The revised Policy will be published on the Platform with an updated "Last Updated" date. Where amendments are material, wo88 will endeavour to provide advance notice to players via the Platform or by email to the registered account address.

15.2 Your continued use of the Platform following the publication of an amended Privacy Policy constitutes your acceptance of the amended Policy. If you do not accept the amended Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

16. Contact

16.1 For any questions, concerns, or requests relating to this Privacy Policy or wo88's handling of your personal data, please contact our support team:

• Live Chat: Available 24/7 via the Platform
• Email: [email protected]

16.2 When contacting us regarding a data protection matter, please include your registered username and a clear description of your request so that we can handle it efficiently. wo88 aims to acknowledge all privacy-related requests within 3 business days and to provide a substantive response within 30 days, or such shorter period as required by applicable law.