Won88 Privacy Policy

This Privacy Policy ("Policy") describes how Won88 ("the Company", "we", "us", "our"), operating the online gaming platform accessible athttps://won88.casa, collects, uses, stores, shares, and protects the personal data of individuals ("Members", "Users", "you") who access or use our Platform and associated services.

Won88 is committed to handling personal data responsibly and in a manner consistent with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable data protection principles. By creating an account, making deposit, or otherwise using the Won88 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, both of which form part of your overall agreement with Won88. If you disagree with any aspect of this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, directly or indirectly. Examples include full name, email address, phone number, Malaysian MyKad number, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, and deletion.
• "Data Controller" — Won88, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third party that processes personal data on behalf of Won88, strictly under written instruction and subject to appropriate data protection agreements.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the Member's agreement to the processing of their personal data for a stated purpose.
• "KYC" — Know Your Customer — the identity verification process undertaken by Won88 to confirm a Member's identity in accordance with regulatory and operational requirements.
• "Cookie" — a small data file stored on a Member's device by the Platform for session management, analytics, and security purposes.
• "PDPA" — Malaysia's Personal Data Protection Act 2010, the primary legislation governing the processing of personal data in Malaysia.

Won88 collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect are set out in the table below:

Won88 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: When you access and interact with the Platform, we collect technical and usage data via server logs, cookies, and similar tracking technologies described in Section 10.
• From payment processors: When you fund your account via Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, or cryptocurrency channels, your payment provider may share relevant transaction data with us.
• From identity verification services: Where Won88 uses third-party KYC or AML screening services, those providers may return verification results or risk flags associated with your identity data.
• From third-party game providers: Game studios integrated with the Platform may share session and outcome data for the purpose of account integrity, wager recording, and dispute resolution.

Won88 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your Won88 member account, including authentication and security.
• Service Delivery: Processing deposits and withdrawals, recordingagers, crediting winnings, and providing access to all Platform features.
• Identity & Age Verification: Confirming that you are aged 21 or above and that your identity matches the information provided at registration.
• Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and KYC regulations.
• Fraud Prevention & Security: Monitoring for suspicious activity, detecting and investigating fraud, and protecting the security and integrity of the Platform.
• Customer Support: Responding to queries, resolving disputes, and maintaining communication records for quality assurance.
• Responsible Gambling: Monitoring gaming patterns to identify potential problem gambling behaviour and facilitating access to self-exclusion and limit-setting tools.
• Platform Improvement: Analysing usage patterns to improve the user experience, fix technical issues, and develop new features.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent, and always with an option to opt out.

Won88 processes personal data on the following legal bases under PDPA and applicable data protection principles:

• Contractual Necessity: Processing required to perform our obligations under the membership agreement you enter into upon registering — including operating your account, processing transactions, and providing gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, AML, and CTF requirements imposed online gaming operators.
• Legitimate Interests: Processing necessary for our legitimate interests in operating a secure, fair, and commercially sustainable platform — including fraud prevention, security monitoring, and platform analytics — where those interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit, informed consent and where you retain the right to withdraw consent at any time without detriment.

Won88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following limited circumstances:

• Service Providers (Data Processors): Third-party vendors engaged by Won88 to assist in delivering platform services — including payment processors (e.g., FPX network providers, DuitNow, e-wallet platforms), KYC verification providers, cloud hosting providers, and fraud screening services. All such providers are bound by strict data processing agreements.
• Game Studio Partners: Game providers integrated with the Platform receive only the minimal data required for game session management and wager reconciliation.
• Regulatory and Law Enforcement Authorities: Won88 will disclose personal data to competent authorities where required or legally compelled to do so — for example, in response to a valid court order, regulatory investigation, or statutory reporting obligation.
• Anti-Money Laundering (AML) Agencies: In jurisdictions where mandatory AML reporting applies, transaction data and identity information may be disclosed to relevant financial intelligence units.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of Won88's business, personal data may be transferred to the acquiring entity as part of the business assets, subject to equivalent data protection commitments.

In all cases of data sharing, Won88 applies appropriate safeguards and shares only the minimum personal data necessary for the stated purpose.

Won88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

• Active Account Data: Retained for the duration of your active membership and for a period of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification, as required by applicable AML and regulatory frameworks.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Support Communications: Customer support records are retained for three (3) years from the date of the interaction.
• Marketing Data: Where processing is based on consent, marketing data is retained until consent is withdrawn or for a maximum of two (2) years from the last engagement, whichever is earlier.
• Technical Logs: Server logs and session data are retained for a maximum of twelve (12) months, unless required longer for ongoing security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents reconstruction of identifiable information.

Won88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All personal and financial data is encrypted at rest using AES-256 and in transit using TLS 1.3. This applies to all data stored on our servers and transmitted between your device and our Platform.
• Access Controls: Access to personal data is restricted to Won88 personnel and authorised processors who require it for legitimate operational purposes. Role-based access control (RBAC) systems are in place.
• Two-Factor Authentication (2FA): Members may enable 2FA on their accounts for an additional layer of login security. Won88 strongly recommends all Members activate this feature.
• Fraud Monitoring: Automated systems monitor Platform activity in real time to detect unusual patterns, potential account compromise, or fraudulent transaction behaviour.
• Regular Security Audits: Won88 conducts periodic internal and third-party security reviews of our infrastructure, access controls, and data handling practices.
• Incident Response: In the unlikely event of a personal data breach that poses a risk to Members, Won88 will notify affected individuals and relevant authorities in accordance with applicable legal obligations.

Won88 uses cookies and similar technologies on the Platform. A cookie is a small data file placed on your device when you visit our website. We use the following categories of cookies:

• Essential Cookies: Strictly necessary for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Used to collect anonymised analytics data about how Members interact with the Platform — pages visited, session duration, error events. This data helps us improve Platform performance and user experience. We use first-party analytics only.
• Preference Cookies: Used to remember your language preference and display settings across sessions.
• Security Cookies: Support fraud detection and account protection systems by recording authentication events and flaging anomalous access patterns.

Won88 does not use third-party advertising cookies, behavioural profiling cookies, or cross-site tracking technologies. You may manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from accessing certain Platform features.

As a Won88 Member, you have the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond within a reasonable period and in accordance with applicable law.

Won88 will not charge a fee for reasonable data subject requests. Where are manifestly unfounded or excessive, we reserve the right to apply an administrative fee or decline the request, with written explanation provided.

Won88 is strictly an adult entertainment platform. The minimum age for registration and use of the Platform is 21 years old. Won88 does not knowingly collect personal data from any person under the age of 21.

Age verification is conducted as part of the KYC process. Members who are found to have misrepresented their age will have their accounts permanently suspended, all winings forfeited, and deposits returned after deducting applicable transaction costs. Where fraud is suspected, Won88 reserves the right to report the matter to relevant authorities.

In order to operate the Platform and deliver services to Malaysian Members, Won88 may transfer personal data to service providers located outside of Malaysia — for example, cloud hosting infrastructure, game studio partners, or KYC verification services hosted in other jurisdictions.

Where personal data is transferred outside Malaysia, Won88 ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections provided under the Malaysian PDPA. These safeguards may include:

• Standard contractual clauses or data processing agreements with the receiving entity.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
• Binding corporate rules where applicable within affiliated corporate groups.

By using the Won88 Platform and providing your personal data, you acknowledge and consent to the possibility of such cross-border transfers, subject to the safeguards described above.

Won88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform operations. The revised Policy will be published on this page with an updated effective date.

Where material changes are made to this Policy — particularly changes that affect your rights or how we process sensitive personal data — Won88 will provide prominent notice to Members via email or in-platform notification prior to the changes taking effect, where reasonably practicable.

We encourage Members to review this Policy periodically. Continued use of the Platform following publication of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a material revision, you should contact us to discuss your options, including account closure.

For any questions, concerns, or requests relating to this Privacy Policy or Won88's data practices — including the exercise of your data subject rights — please contact our support team through the channels below. All privacy-related enquiries will be handled confidentially and with priority.

For responsible gambling support, self-exclusion requests, and related welfare enquiries, please visit our dedicatedResponsible Gambling page. For general platform questions, ourFAQ covers the most common topics.