Win88 Privacy Policy — Data Protection You Deserve

WIN88 collects various categories of personal information for lawful and specific purposes. We only collect information that is genuinely necessary to provide you with a high-quality service. The following are the categories of information we collect and their primary purposes:

We may also receive your information indirectly from legitimate sources, such as third-party KYC service providers we use for identity verification, or from licensed fraud prevention agencies in Malaysia. All data obtained through these channels is subject to this Privacy Policy.

WIN88 uses your personal data on a lawful basis under PDPA 2010. We ensure every use of data has a clear purpose and does not exceed the necessary scope. The primary purposes for which your data is used include the following:

• Account Management: Creating, verifying, and managing your player account, including the mandatory KYC process for legal compliance.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions made on the win88 platform securely and efficiently.
• Platform Security: Detecting and preventing fraud, money laundering, duplicate accounts, and any other security threats.
• Customer Support: Responding to enquiries, resolving complaints, and providing the technical assistance you need.
• Service Improvements: Analysing platform usage patterns to improve functionality, performance, and the overall user experience.
• Marketing Communications: Sending promotional offers, exclusive bonuses, and VIP programme updates — only to players who have consented to receive such communications.
• Legal Compliance: Fulfilling reporting obligations to relevant authorities in Malaysia, including anti-money laundering (AML) and counter-terrorism financing (CFT) requirements.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support or self-control tools through our responsible gaming programme.

We will not use your personal data for purposes unrelated to win88 services without first obtaining your explicit consent.

WIN88 takes a strict approach to data sharing. We do not disclose your personal information to external parties except in the limited situations set out below:

• Trusted Service Providers: We share necessary data with carefully selected service providers, such as KYC providers, licensed payment processors, and technology infrastructure providers. All third parties are bound by strict confidentiality agreements.
• Legal Requirements: WIN88 will disclose personal information when required by court order, requests from competent authorities, or other applicable legal obligations in Malaysia.
• Fraud Prevention: In cases involving suspected fraud, money laundering, or criminal activity, we reserve the right to share relevant information with the appropriate authorities or licensed fraud prevention agencies.
• Business Transfers: In the event of a merger, acquisition, or sale of WIN88 assets, players' personal data may be transferred to the successor entity, subject to an equivalent or stricter Privacy Policy.

Protecting your personal data is win88's highest priority. We continuously invest in the latest security infrastructure to keep your information safe from cyber threats and unauthorised access.

• End-to-End Encryption: All data transmitted between your device and WIN88's servers is protected by TLS 1.3 with AES-256 encryption, ensuring no third party can intercept your communications.
• Two-Factor Authentication (2FA): WIN88 provides an additional layer of security through 2FA, which can be enabled in your account settings, offering extra protection against unauthorised access.
• 24/7 Monitoring: Our cybersecurity team continuously monitors systems using advanced anomaly detection technology to identify and respond to threats in real time.
• Internal Access Controls: Access to players' personal data within win88 is restricted on a least-privilege basis — only staff who require access to carry out their duties are permitted.
• Regular Security Audits: We conduct regular independent penetration testing and security audits to identify and patch vulnerabilities before they can be exploited.
• Secure Data Backup: Your data is automatically backed up to encrypted data centres at multiple locations, ensuring service continuity and data recovery in the event of a technical incident.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage you to also take personal security measures, such as using a strong, unique password and never sharing your login credentials with anyone.

The win88 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, security, and language preferences. These cookies cannot be disabled as they are essential for the platform to function correctly.
• Performance Cookies: Collecting information on how you use the platform — most visited pages, response times, and any errors encountered — to help us improve platform performance.
• Functional Cookies: Remembering your preferences such as account settings, favourite games, and display preferences so you don't have to reset them each time you log in.
• Marketing Cookies: Used to display offers and promotions relevant to your interests. You may withdraw consent for marketing cookies at any time via your browser settings or the win88 account preferences centre.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the win88 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by win88. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the WIN88 customer support team via live chat. We will process your request within 5 business days and may require identity verification first for security purposes.

WIN88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by applicable Malaysian law. The following are our data retention guidelines:

• Active Account Data: Your personal data will be retained for operational purposes for as long as your account remains active and has not been closed.
• KYC Data and Financial Transactions: Retained for a minimum of 7 years after account closure, in line with AML legal requirements and Malaysian financial regulations.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.
• Security Logs: Retained for 12 months for the purpose of security incident investigation and fraud prevention.
• Customer Support Record: Retained for 3 years after case resolution to allow for reference and service improvement.

Once the retention period ends, your data will be securely deleted or anonymised using industry-standard methods, ensuring no recovery is possible by unauthorised parties.

WIN88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform service improvements. We are committed to keeping you informed of any material changes.

For significant changes, we will notify you through one or more of the following: an in-account notification on WIN88, an email to your registered address, or a prominent notice on our platform's homepage. The "Updated" date at the top of this document will always reflect the latest version of this Policy.

Continued use of win88 services after amendments take effect constitutes your acceptance of the updated terms. If you do not agree with the amendments, please stop using the platform and contact us to formally close your account.