Privacy Policy — How wc88 Protects Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how wc88 ("wc88", "we", "us", "our"), the operator of the online gaming platform accessible at wc88.bio (the "Platform"), collects, uses, stores, discloses, and otherwise processes personal data about registered members, prospective members, and visitors ("you", "your") in connection with your access to and use of the Platform.

By registering for an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent, you should not use the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall framework governing your relationship with wc88.

2. Data We Collect

2.1 Registration and Identity Data

When you register a wc88 account, we collect information required to establish and verify your identity, including your legal full name, date of birth, residential address, email address, and Malaysian mobile number. Where identity verification (KYC) is required, we may collect copies of government-issued identity documents such as a Malaysian Identity Card (MyKad), passport, or equivalent.

2.2 Financial and Transaction Data

We collect records of all financial transactions conducted through your wc88 account, including deposit amounts, withdrawal requests, payment method details (for example, your FPX bank account, Touch 'n Go eWallet identifier, or USDT wallet address), and transaction timestamps. Full payment card numbers are not stored on the wc88 Platform; card transactions are handled by certified PCI-DSS compliant payment processors.

2.3 Gaming Activity Data

We maintain records of your gaming activity on the Platform, including game sessions, bet amounts, game outcomes, bonus usage, and betting history. This data is retained for regulatory compliance, dispute resolution, responsible gaming monitoring, and product improvement purposes.

2.4 Device and Technical Data

When you access the Platform, we automatically collect technical information including your IP address, browser type and version, operating system, device identifiers, screen resolution, session duration, and referring URLs. This information is used to secure your account, detect fraud, and optimise Platform performance.

2.5 Communications Data

We retain records of communications between you and the wc88 support team — including live chat transcripts, email correspondence, and any information you voluntarily provide during support interactions — for quality assurance and dispute resolution purposes.

2.6 Preference and Marketing Data

Where you have opted in, we collect data about your marketing preferences, promotional uptake, and communication channel preferences to personalise offers and communications relevant to your wc88 account.

3. How We Collect Data

wc88 collects personal data through the following channels:

• Direct provision: Information you actively provide when registering, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and device fingerprinting technologies.
• Third-party sources: Identity verification data from KYC/AML service providers; fraud signals from payment processors; and, where applicable, publicly available data used to verify the accuracy of registration information.

4. Purposes of Processing

wc88 processes your personal data for the following purposes:

• Establishing and managing your wc88 account, including identity verification and age confirmation (21+ requirement).
• Processing deposits, withdrawals, and other financial transactions in Malaysian Ringgit (MYR) or equivalent.
• Delivering and improving gaming services, including live casino, slots, sportsbook, and virtual casino products.
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities.
• Complying with applicable legal and regulatory obligations, including anti-money laundering (AML) and counter-terrorist financing (CTF) requirements.
• Operating the wc88 VIP programme and delivering tier-appropriate benefits to Gold, Platinum, and Black Diamond members.
• Administering the responsible gaming tools available on the Platform, including deposit limits, self-exclusion, and cooling-off periods.
• Sending transactional communications (account activity, security alerts, deposit/withdrawal confirmations) and, where you have opted in, promotional communications.
• Conducting analytics to improve Platform performance, user experience, and product offerings.
• Resolving account disputes and handling member support queries.

5. Legal Basis for Processing

wc88 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide the gaming services you have registered for and to manage your account.
• Legal obligation: Processing necessary to comply with AML, CTF, KYC, and other applicable legal or regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Personal Data

wc88 does not sell your personal data. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• Payment processors: To process deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and other accepted payment methods.
• Identity verification providers: To conduct KYC and age verification checks as required by applicable regulations.
• Game software providers: Certified third-party game providers may receive limited session data necessary to deliver their games; such providers are contractually bound to data confidentiality obligations.
• Fraud prevention and security services: To detect and prevent fraudulent activity, money laundering, and other prohibited conduct.
• Legal and regulatory authorities: Where required by law, court order, or regulatory direction, we may disclose your data to competent authorities, including financial intelligence units and law enforcement agencies.
• Professional advisers: Lawyers, auditors, and other professional advisers subject to strict confidentiality obligations.

7. International Data Transfers

Some of wc88's service providers and game software partners operate outside Malaysia. Where personal data is transferred internationally, wc88 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data protection mechanisms — to ensure that your data receives a level of protection consistent with Malaysian PDPA requirements and internationally recognised data protection standards.

8. Data Retention

wc88 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, and in any event for a minimum period as required by applicable legal and regulatory obligations. Specific retention guidelines include:

• Account registration and identity data: retained for the duration of the account relationship plus a minimum of five (5) years following account closure, to meet AML/KYC obligations.
• Financial transaction records: retained for a minimum of seven (7) years from the transaction date.
• Gaming activity logs: retained for a minimum of three (3) years for dispute resolution and regulatory compliance purposes.
• Support communications: retained for two (2) years from the date of the last interaction.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

9. Data Security

wc88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, access controls limiting staff access to personal data on a need-to-know basis, regular security assessments and penetration testing, and multi-factor authentication requirements for internal system access.

Notwithstanding these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you become aware of any security vulnerability or suspected breach relating to your wc88 account, please contact our support team immediately.

10. Cookies and Tracking Technologies

wc88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including authentication session management and security features. These cannot be disabled without affecting Platform functionality.
• Performance cookies: Collect anonymised data about how Members use the Platform to help us improve navigation, page load times, and feature usability.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalise your experience.
• Analytics cookies: Used to understand aggregate usage patterns on the Platform. No personally identifiable information is shared with analytics providers for advertising purposes.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies may impair your ability to use certain features of the Platform, including the wc88 login function.

11. Your Privacy Rights

Subject to applicable law and our legal retention obligations, you have the following rights in respect of your personal data held by wc88:

• Right of access: Request a copy of the personal data we hold about you.
• Right of correction: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
• Right to restrict processing: Request that we restrict the processing of your personal data in certain circumstances.
• Right to withdraw consent: Withdraw consent for marketing communications or non-essential cookies at any time, without affecting prior processing.
• Right to complain: Lodge a complaint with the relevant data protection authority if you believe your privacy rights have been infringed.

To exercise any of these rights, please contact our support team via 24/7 live chat or email at [email protected]. We will respond to verified requests within 30 days.

12. Minors

The wc88 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact our support team immediately.

13. Changes to This Policy

wc88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be notified to registered Members via the contact details on file or by prominent notice on the Platform prior to the effective date of the change. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by wc88, please contact us through the following channels:

• 24/7 Live Chat: available directly on-platform at wc88.bio
• Email: [email protected]
• Response time: typically under 5 minutes via live chat; within 24 hours for email queries.