Privacy Policy

1. Who We Are

wc88 operates the online gaming and sportsbook platform accessible at wc88.biz and all associated sub-domains and interfaces. wc88 is the data controller responsible for personal data collected through the Platform. For the purposes of this Policy, references to "wc88", "we", "us", or "our" mean the wc88 operating entity licensed under international gaming authority.

Our designated data protection contact can be reached at [email protected]. We will respond to data-related queries within ten (10) business days.

2. Personal Data We Collect

2.1 Registration Data

When you create a wc88 Account, we collect: your legal full name, Malaysian mobile number, date of birth, preferred username, and account password (stored in hashed form — never in plaintext).

2.2 Identity Verification Data

To comply with KYC and AML requirements under our international gaming operating authority, wc88 may collect copies of your national identity card (MyKad), proof of residential address, and images of the payment method used — for example, a masked screenshot of your Touch n Go eWallet account name. This data is collected at the withdrawal stage and stored securely for the retention period mandated by our regulatory obligations.

2.3 Financial Transaction Data

wc88 records all deposit and withdrawal transactions associated with your Account, including amounts, timestamps, payment method identifiers, and transaction reference numbers. Full payment card or bank account numbers are never stored by wc88 — these are handled exclusively by our regulated payment processor partners.

2.4 Gaming Activity Data

We collect records of all gameplay sessions on the wc88 Platform, including games played, bet amounts, outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical & Device Data

When you access the wc88 Platform, we automatically collect: IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited, and session timestamps. This data is used for fraud prevention, security monitoring, and Platform performance optimisation.

2.6 Customer Support Data

When you contact wc88 support via live chat or email, we collect and retain records of the communication content, timestamps, and any personal data you provide in the course of seeking assistance. These records are maintained for quality assurance and dispute resolution purposes.

2.7 Voluntarily Provided Data

Any additional personal information you choose to provide to wc88 — for example in a survey response, feedback submission, or promotional entry — is collected and used only for the specific purpose for which it was submitted.

3. How We Use Your Personal Data

wc88 uses the personal data we collect for the following purposes:

• Account Creation and Management: To register your wc88 Account, authenticate your identity at login, and maintain your Account settings and preferences.
• Transaction Processing: To process deposits, withdrawals to Touch n Go eWallet, Boost, and other accepted payment methods, and to maintain accurate transaction records.
• Regulatory Compliance: To fulfil our obligations under our international gaming operating authority, including KYC verification, AML screening, and production of regulatory reports.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover, money laundering, and abuse of the wc88 Platform.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling behaviour and to enforce deposit limits, self-exclusion requests, and other responsible gaming tools elected by the Player.
• Customer Support: To respond to Account queries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the wc88 Platform, game library, and user experience.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Players who have opted in to receive them. See Section 12 for opt-out options.

4. Legal Basis for Processing

wc88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to register your Account, operate your gaming sessions, and process financial transactions is necessary to perform the contract between you and wc88.
• Legal Obligation: Processing required for KYC verification, AML compliance, and regulatory reporting is mandated by the terms of our gaming operating authority and applicable law.
• Legitimate Interests: Fraud prevention, security monitoring, and Platform improvement processing is carried out on the basis of wc88's legitimate business interests, provided those interests are not overridden by your fundamental rights.
• Consent: Marketing communications are sent only on the basis of your explicit consent, which you may withdraw at any time.

5. Sharing Your Personal Data

wc88 does not sell your personal data. We may share your information with the following categories of third parties, strictly for the purposes described:

• Payment Processors: Your transaction data is shared with regulated payment service providers — including Touch n Go eWallet, Boost, and banking FPX processors — to the minimum extent necessary to complete deposits and withdrawals.
• Identity Verification Services: KYC documentation may be processed by accredited identity verification service providers acting as data processors under our instruction and bound by confidentiality and data security obligations.
• Fraud Prevention and AML Services: wc88 shares data with specialist fraud detection and AML screening providers to protect the integrity of the Platform and comply with our regulatory obligations.
• Regulatory and Law Enforcement Authorities: wc88 will disclose personal data to regulatory bodies, gaming authorities, or law enforcement agencies where required to do so by law, court order, or the terms of our gaming operating authority.
• Technology Infrastructure Providers: Our Platform hosting, security monitoring, and database infrastructure is provided by third-party technology providers who process data on our behalf under data processing agreements that require them to maintain appropriate security standards.

All third-party data processors engaged by wc88 are subject to contractual obligations requiring them to process data solely in accordance with our instructions and to maintain security measures appropriate to the nature of the data.

6. Cookies & Tracking Technologies

wc88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for basic Platform functionality, including maintaining your authenticated session and remembering your language and display preferences. These cannot be disabled without impairing Platform operation.
• Security Cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and cross-site request forgery attacks.
• Analytics Cookies: Aggregated, anonymised data on how Players navigate the Platform is collected to identify usability issues and improve the overall gaming experience. No individually identifiable data is retained in analytics processing.
• Preference Cookies: Used to remember your Platform settings between sessions, such as preferred game categories and responsible gaming limits you have set.

You may manage cookie preferences through your browser settings. Disabling essential and security cookies will prevent the Platform from functioning correctly and you will be unable to log in to your wc88 Account.

7. Data Retention

wc88 retains personal data for the following periods:

• Active Account Data: Retained for the duration of your Account registration and for a period of five (5) years following Account closure, in order to comply with our regulatory obligations and to respond to any post-closure disputes.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification, as required by our international gaming operating authority's AML obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of transaction.
• Customer Support Records: Retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained for the duration of your opt-in consent and for one (1) year following your withdrawal of consent, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction policy.

8. Data Security

wc88 implements technical and organisational security measures appropriate to the nature and volume of personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Players and the Platform.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Multi-factor authentication required for all administrative access to systems containing personal data.
• Continuous security monitoring and intrusion detection on Platform infrastructure.
• Regular penetration testing and security audits conducted by independent third-party specialists.
• Formal data breach response procedures with defined notification timelines.

Notwithstanding the above, no data transmission or storage system can be guaranteed to be 100% secure. You transmit data to the Platform at your own risk and are responsible for maintaining the security of your own login credentials.

9. Your Data Rights

Subject to applicable law and our regulatory retention obligations, you have the following rights in respect of your personal data held by wc88:

• Right of Access: You may request a copy of the personal data wc88 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to our overriding regulatory retention obligations.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, for example while a correction request is being verified.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a structured, machine-readable copy of the personal data you have provided to us.
• Right to Object: You may object to processing of your personal data where it is carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our data protection team at [email protected]. We will acknowledge your request within five (5) business days and respond substantively within thirty (30) days.

10. Children's Privacy

The wc88 Platform is strictly intended for users aged twenty-one (21) years and above. wc88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that an Account has been registered by an underage individual, we will immediately suspend the Account and delete all associated personal data to the extent permitted by our regulatory obligations. If you believe that a minor has registered a wc88 Account, please contact our support team immediately at [email protected].

11. International Data Transfers

wc88 operates on infrastructure hosted across multiple jurisdictions. Your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, wc88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection legislation. Safeguards include contractual clauses requiring overseas recipients to maintain security and confidentiality standards consistent with this Policy.

12. Marketing Communications

wc88 sends promotional emails and SMS notifications to Players who have opted in to receive marketing communications during registration or at any subsequent time via Account Settings. Marketing messages may include bonus offers, game launch announcements, tournament invitations, and platform news.

You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in the Account Settings section of the wc88 Platform; or
• Contacting our support team at [email protected] with an unsubscribe request.

Withdrawal of marketing consent does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are sent on the basis of contractual necessity and cannot be opted out of while your Account remains active.

13. Changes to This Privacy Policy

wc88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. Material changes will be communicated to registered Players via the mobile number or email associated with their Account at least fourteen (14) days before the change takes effect.

The "Last updated" date at the top of this Policy indicates when the most recent revision was published. Your continued use of the wc88 Platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

14. Contact & Complaints

For questions, data access requests, or complaints regarding wc88's handling of your personal data, please contact:

[email protected]

wc88 support operates 24 hours a day, 7 days a week. Data-related requests are handled by our dedicated data protection team with acknowledgement within 5 business days and a substantive response within 30 days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to your circumstances.