W88login Malaysia Privacy Policy – Protection of Your Personal Data

W88login collects personal information from you in several ways depending on how you interact with our platform. We organise the data collected into three main categories.

A. Information You Provide Directly

• Account registration details: full name, Malaysian identity card number (MyKad), date of birth, Malaysian mobile number and email address.
• Address information: your current residential address in Malaysia (required for certain identity verification processes).
• Financial information: bank account number or eWallet account (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) registered for deposits and withdrawals.
• Identity verification documents during the KYC process: a copy of your MyKad and your latest bank statement or eWallet statement.
• Customer support communications: records of live chat conversations, emails, and any attachments you have sent to the w88login support team.

B. Information Collected Automatically

• Technical log data: IP address, web browser type, device operating system, screen resolution, and device language.
• Session and usage data: pages visited, time spent on each page, buttons clicked, games played, and the duration of each session.
• Transaction data: a complete record of all deposits, withdrawals, bets, winnings, and bonuses processed on your account.
• General location data: broad geographic region based on your IP address, used to verify that you are accessing the platform from within Malaysia.
• Mobile device data: device model, operating system version, and unique device identifier (if using the mobile app).

C. Information from Third-Party Sources

• Identity verification information from recognised third-party KYC service providers to authenticate your documents.
• Blacklist screening and fraud prevention information from industry security services to protect all users on the platform.
• Social media account data if you choose to register or log in via a supported social media platform (only your name and email address are retrieved).

Every piece of information collected by w88login has a clear and legitimate purpose. We do not use your data for any purpose not stated in this document without obtaining fresh consent from you.

W88login does not sell or rent your personal data to any third party. However, in the course of operating the platform, we may need to share certain data with carefully selected parties that are bound by strict data protection agreements.

• Payment service provider: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks via FPX (Maybank2u, CIMB Clicks) receive only the minimum transaction information required to process your deposits and withdrawals. Each of these providers is governed by their own privacy policy and is regulated by Bank Negara Malaysia.
• KYC service providers: Identity verification document information is shared with recognised third-party KYC providers to carry out document authenticity checks. This sharing is a legal obligation under AML/CFT regulations.
• Gaming service providers: Third-party game providers may receive non-personally identifiable session identifiers to operate the games you select. Your actual name and financial information are never shared with game providers.
• Legal authorities: w88login will disclose personal data where required by Malaysian law, court order, or a lawful request from a relevant law enforcement agency.
• Business transfer: In the event of a company merger, acquisition, or asset sale, user data may be transferred as part of that process. You will be notified by email in advance and given the option to close your account if you do not agree.

All third parties that receive your data are required to sign a data processing agreement with w88login, ensuring they handle your data to a standard of protection no less than that set out in this privacy policy.

W88login uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect your experience on the w88login platform. Session cookies typically expire when you close your browser, while persistent cookies are stored for the duration specified in their respective cookie settings.

Protecting your personal data is both a core technical and organisational priority for w88login. We continually invest in our security infrastructure to ensure your information remains protected at all times.

• 256-bit SSL/TLS encryption for all data transmitted between your device and w88login's servers — meaning no one can read data in transit even if they manage to intercept the connection.
• Data-at-rest encryption for all sensitive records stored in our database, including financial information and identity documents.
• Two-factor authentication (2FA) is available for all accounts — we strongly recommend enabling it in your account settings for an added layer of security.
• A real-time threat detection system that monitors all account activity to identify suspicious patterns, such as login attempts from new locations or unusual transaction activity.
• Penetration testing conducted periodically by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
• A strict internal access control policy — staff may only access data required for their specific role, and all access is automatically audited.
• Security awareness training for all w88login staff is conducted on a regular basis to ensure best practices in information security are consistently upheld.

W88login retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by Malaysian law. Below are general retention guidelines for key data categories.

• Active account information: Retained for as long as your account remains active. After account closure, basic information is kept for 7 years for legal compliance and dispute resolution purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and AML legal requirements.
• KYC Documents: Retained for 7 years after the business relationship ends, in accordance with Malaysia's Anti-Money Laundering Act.
• Customer support communication logs: Retained for 3 years for quality control and dispute resolution purposes.
• Platform analytics data: Anonymised data that cannot be used to identify individuals may be retained for longer periods for service improvement purposes.
• Security and activity logs: Retained for 12 months for the purpose of detecting and investigating security incidents.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by w88login. These rights can be exercised by contacting our privacy team.

To exercise any of the rights above, please submit a written request to support@w88login.my with the subject line "Data Rights Request" along with a copy of your MyKad for identity verification. We will respond within 14 business days. If you are dissatisfied with how we handle your request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

The w88login platform is restricted to users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

• Should we discover that personal data of an individual under 18 has been collected inadvertently, we will promptly delete that information and close the associated account.
• Parents or guardians who suspect an account has been opened in a minor's name are urged to contact us immediately at support@w88login.my.
• W88login applies an age verification process at registration to reduce the risk of sign-ups by minors, including date-of-birth checks and identity document verification during the KYC process.

W88login reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements.

• You will be notified of any material changes to this policy via your registered email and an in-platform notification at least 14 days before the changes take effect.
• The date of the most recent update is always displayed at the top of this document. We encourage you to review this policy periodically.
• If you do not agree with any changes, you may close your account before the changes take effect by contacting customer support.