Privacy Policy

1. About This Policy

1.1 This Privacy Policy applies to all personal data processed by w888 in connection with the w888 online gaming and sports betting platform accessible at w888.win ("the Platform").

1.2 For the purposes of this Policy, "personal data" means any information relating to an identified or identifiable natural person — including your name, email address, contact number, payment details, device identifiers, and gaming activity records.

1.3 This Policy should be read alongside the w888 Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with the platform.

1.4 By registering an account or using the w888 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Categories of Personal Data We Collect

w888 collects and processes the following categories of personal data:

3. How We Collect Your Data

w888 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to promotions.
• Automated collection: Technical data collected automatically as you interact with the platform, including via cookies, server logs, and device fingerprinting technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud risk signals from payment processors; age verification data from third-party verification agencies where applicable.

w888 does not purchase personal data from data brokers and does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) except where explicitly required by law or consented to by you in writing.

4. Legal Basis for Processing

w888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to enter into and perform our contract with you, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) regulations, age verification requirements, and licensing obligations.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw consent for marketing communications at any time by contacting support.

5. How We Use Your Personal Data

w888 uses your personal data for the following purposes:

• Creating and managing your w888 account, including verifying your identity and age at registration and upon withdrawal;
• Processing MYR deposits and withdrawals via your chosen payment method;
• Providing access to casino games, live dealer tables, slots, and sportsbook markets;
• Administering bonus offers and verifying compliance with bonus terms and conditions;
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited conduct;
• Operating w888's responsible gaming programme, including monitoring play patterns for signs of problematic behaviour and facilitating self-exclusion and limit-setting tools;
• Providing customer support via Live Chat and email;
• Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts) to your registered contact details;
• Sending marketing communications where you have provided explicit consent;
• Complying with applicable legal and regulatory obligations, including reporting to relevant authorities as required by law.

6. Data Sharing & Disclosure

6.1 w888 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment processors and e-wallet providers: Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency processors, to the extent necessary to process your financial transactions;
• KYC and identity verification providers: Third-party agencies engaged to verify identity documents and age, operating under strict confidentiality obligations;
• Game content providers: Licensed game studios (such as Pragmatic Play, PG Soft, Evolution Gaming) who may process technical game session data for fair play monitoring and RNG auditing purposes;
• Fraud prevention and security services: Third-party fraud detection and cybersecurity providers engaged to protect the platform and its users;
• Legal and regulatory authorities: Where w888 is required by applicable law, court order, or regulatory directive to disclose personal data. w888 will notify affected users of such disclosure where legally permitted to do so;
• Business successors: In the event of a merger, acquisition, or sale of the w888 platform or its operating entity, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

6.2 All third-party processors engaged by w888 are bound by data processing agreements requiring them to process personal data only as instructed by w888, to maintain appropriate security standards, and to comply with applicable data protection law.

7. Data Retention

7.1 w888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active accounts: Personal data is retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with AML record-keeping obligations;
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction, as required by applicable financial regulations;
• KYC documentation: Retained for a minimum of 5 years following the completion of the KYC verification or account closure, whichever is later;
• Support communications: Retained for 3 years from the date of each communication to support dispute resolution and quality assurance;
• Marketing consent records: Retained for 3 years from the date of consent or withdrawal of consent.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (from which no individual can be identified) may be retained indefinitely for analytical and reporting purposes.

8. Cookies & Tracking Technologies

8.1 w888 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve the user experience, and support security monitoring. Cookies are small text files stored on your device by your browser.

8.2 The following categories of cookies are used on the w888 platform:

• Strictly necessary cookies: Required for the platform to function, including session authentication, fraud prevention, and load balancing. These cannot be disabled;
• Functional cookies: Remember your preferences (such as language settings and preferred payment method) to personalise your experience;
• Analytics cookies: Collect aggregated data about how users interact with the platform to help us improve performance and game library curation. Data collected is anonymised;
• Marketing cookies: Used only where you have consented to receive personalised promotional communications based on your interests and activity on the platform.

8.3 You can manage cookie preferences via your browser settings. Disabling strictly necessary cookies will impair the functionality of the w888 platform. Disabling other cookie categories will not affect your ability to access and use core platform features.

9. Security Measures

9.1 w888 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS (Transport Layer Security) encryption on all data transmitted between your device and the w888 platform;
• AES-256 encryption for sensitive personal data stored at rest;
• Two-factor authentication (2FA) available to all Account Holders;
• Role-based access controls limiting internal access to personal data to authorised personnel with a demonstrable need;
• Active session monitoring and anomaly detection to identify and respond to suspicious account access patterns;
• Regular security assessments conducted by qualified cybersecurity professionals.

9.2 No data transmission over the internet is entirely risk-free. While w888 takes all reasonable steps to protect your personal data, we cannot guarantee absolute security. If you suspect your w888 account has been accessed without your authorisation, contact our support team immediately.

10. Your Data Rights

10.1 You hold the following rights in relation to the personal data w888 holds about you. To exercise any of these rights, contact our support team at [email protected] or via Live Chat:

• Right of access: You may request a copy of the personal data w888 holds about you. We will respond within 30 days of a verified request;
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Contact support or update your account profile directly;
• Right to erasure: You may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose it was collected. This right is subject to w888's legal retention obligations, including AML record-keeping requirements;
• Right to restrict processing: You may request that w888 restrict the processing of your personal data in certain circumstances, such as while a dispute about data accuracy is pending;
• Right to data portability: You may request a copy of the personal data you have provided to w888 in a structured, machine-readable format;
• Right to object: You may object to processing based on w888's legitimate interests, including profiling for responsible gaming monitoring purposes. w888 will assess whether compelling legitimate grounds override your objection;
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

10.2 w888 will verify your identity before processing a data rights request. Requests may be refused or limited where they would adversely affect the rights and freedoms of others, or where compliance would breach a legal obligation.

11. Children's Privacy

11.1 The w888 platform is strictly for adults aged 21 and above. w888 does not knowingly collect personal data from individuals under the age of 21.

11.2 If w888 becomes aware that personal data has been collected from an individual under 21, the associated account will be immediately closed, the balance voided, and the personal data deleted in accordance with our standard deletion procedures.

11.3 If you have reason to believe that a minor has registered or attempted to register a w888 account, please contact our support team immediately at [email protected].

12. Amendments to This Policy

12.1 w888 reserves the right to update this Privacy Policy at any time. The updated Policy will be posted on this page with a revised effective date.

12.2 Where amendments are material — including changes to the categories of data collected, the purposes for which data is used, or data sharing arrangements — w888 will notify registered Account Holders via their registered email address not less than 14 days before the changes take effect.

12.3 Your continued use of the w888 platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.

13. Contact & Data Queries

For questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data by w888, please contact us through the following channels:

• Live Chat: Available 24/7 directly from any page on the w888 platform
• Email: [email protected]

w888 aims to acknowledge all data-related enquiries within 24 hours and to provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, we may extend the response period by up to an additional 60 days, with notice provided to you within the initial 30-day period.