we88my Privacy Policy

we88my ("we", "us", "our") operates the online gaming platform accessible at we88my.co ("the Platform"). we88my acts as the data controller in respect of the personal data of registered players and visitors to the Platform. This Privacy Policy ("Policy") is issued in accordance with applicable data protection legislation and the requirements of our international gaming licence.

This Policy describes the types of personal data we collect, the purposes for which we process it, the parties with whom we share it, the measures we take to keep it secure, and the rights you have in relation to your personal data. By using the we88my platform, you acknowledge that you have read and understood this Policy.

This Policy applies to all personal data processed by we88my in connection with your use of the Platform, including:

• Data provided by you when registering an account, completing KYC verification, making deposits or withdrawals, or contacting customer support;
• Data generated automatically by your use of the Platform, including gameplay data, transaction records, and device/browser information;
• Data collected through cookies and similar tracking technologies when you visit we88my.co.

This Policy does not apply to third-party websites or services that may be linked to or from the Platform. we88my is not responsible for the privacy practices of those third parties, and we encourage you to review their policies separately.

we88my collects the following categories of personal data:

we88my does not collect or process any special category data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless required by a specific licensing or regulatory obligation.

we88my collects personal data through the following means:

• Directly from you: when you register an account, complete your profile, submit KYC documents, make deposits or withdrawals, contact customer support, or interact with promotional campaigns;
• Automatically: through your use of the Platform — including gameplay activity, transaction records, session data, and technical data collected via cookies and server logs;
• From third parties: from identity verification service providers during the KYC process, from payment processors when confirming transaction status, and from fraud detection services where we share data for the purpose of identity and fraud screening.

we88my processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform our obligations under the account Terms & Conditions — including account management, payment processing, and platform service delivery;
• Legal obligation: Processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, licensing conditions, and law enforcement requests;
• Legitimate interests: Processing is carried out for the legitimate interests of we88my, including fraud prevention, security monitoring, platform improvement, and responsible gaming risk assessment, provided those interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications is based on your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

we88my uses your personal data for the following purposes:

• Creating and managing your we88my account;
• Verifying your identity and age in accordance with KYC and AML obligations;
• Processing deposits, withdrawals, and other financial transactions;
• Delivering the gaming services available on the Platform, including live casino, slots, sportsbook, and lottery;
• Providing customer support and resolving disputes;
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities;
• Monitoring gameplay patterns for responsible gaming risk assessment and applying protective measures where appropriate;
• Complying with licensing authority reporting obligations;
• Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts);
• Sending promotional and marketing communications to players who have provided consent;
• Analysing platform usage data to improve the we88my platform and user experience.

we88my does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances:

• Service providers: we88my engages third-party service providers for payment processing (including Touch n Go, Boost, Maybank, CIMB, FPX, and Public Bank integration layers), identity verification, fraud screening, and platform infrastructure. These providers act as data processors and are contractually bound to process your data only on we88my's instructions and in accordance with applicable data protection requirements;
• Gaming content providers: Game studios providing content to the we88my platform may receive limited technical data (such as session tokens and bet records) necessary to deliver and audit game outcomes. Gameplay data shared with studios is used solely for game operation and statistical reporting;
• Regulatory and licensing authorities: we88my is required to provide account and transaction data to applicable gaming licensing authorities and financial intelligence units as part of its regulatory compliance obligations;
• Law enforcement: we88my will disclose personal data to law enforcement agencies or courts where required to do so by applicable law, judicial order, or regulatory direction;
• Business transfers: In the event of a merger, acquisition, or sale of the we88my business or substantially all of its assets, personal data held by we88my may be transferred as part of that transaction. Affected players will be notified in advance where required by law.

we88my uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your we88my account during an active session. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings or game display preferences, across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — including pages visited, session duration, and navigation paths. This data is used to identify improvements to the we88my platform experience.
• Security cookies: Used to detect and prevent fraudulent activity, including CSRF protection tokens and bot detection signals.

You may configure your browser to block or delete cookies. Note that disabling essential cookies will impair your ability to use the Platform, including the we88my login function. Disabling analytics cookies will not affect your ability to access or use the Platform.

we88my's platform infrastructure and some of its third-party service providers operate in jurisdictions outside Malaysia. Where personal data is transferred outside of Malaysia, we88my takes appropriate measures to ensure that such transfers are lawful and that the recipient maintains adequate data protection standards. These measures may include standard contractual clauses, certification under recognised international frameworks, or other legally recognised transfer mechanisms.

By using the we88my platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia. we88my will only transfer your data to countries or service providers that offer an adequate level of data protection.

we88my retains personal data for as long as your account is active and for such further periods as are required or permitted by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship;
• Post-closure retention: Following account closure, personal data is retained for a minimum of five (5) years to comply with AML legislation, licensing obligations, and applicable limitation periods for legal claims;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Support correspondence: Retained for a minimum of two (2) years from the date of the correspondence;
• Marketing consent records: Retained for the duration of the account and for three (3) years thereafter as evidence of consent.

At the expiry of applicable retention periods, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

we88my implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the we88my platform;
• Encryption of sensitive data fields (including payment details and identity document references) at rest;
• Role-based access controls restricting internal access to personal data to authorised personnel with a legitimate need;
• Two-factor authentication requirements for internal administrative access to systems holding personal data;
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure;
• Incident response procedures for detecting, containing, and reporting data security incidents.

While we88my takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your we88my account credentials and for notifying we88my immediately if you suspect any unauthorised access to your account.

Subject to applicable data protection law, you may have the following rights in relation to your personal data held by we88my:

• Right of access: You may request a copy of the personal data we88my holds about you;
• Right of rectification: You may request correction of inaccurate or incomplete personal data;
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to we88my's legal retention obligations;
• Right to restriction: You may request that we88my restricts processing of your personal data in certain circumstances;
• Right to object: You may object to processing based on legitimate interests, including profiling;
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact we88my at [email protected] with your full name, registered email address, and a description of your request. we88my will respond to data rights requests within thirty (30) days. We may require verification of your identity before processing any request.

we88my may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and platform news where you have provided consent to receive such communications during registration or through your account notification settings.

You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences in your we88my account settings;
• Clicking the unsubscribe link included in any marketing email;
• Contacting we88my customer support at [email protected].

Withdrawal of marketing consent does not affect your receipt of transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which are necessary for the operation of your account and cannot be opted out of while your account remains active.

The we88my platform is strictly restricted to individuals aged 21 years and above. we88my does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the registration and KYC process to prevent underage access to the Platform.

If we88my becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered on the we88my platform, please contact us at [email protected] immediately.

The we88my platform integrates third-party services to deliver certain functionality — including payment gateways (Touch n Go eWallet, Boost, Maybank, CIMB, FPX, Public Bank), identity verification services, and gaming content providers. When you interact with these services, your personal data may be processed by the relevant third party in accordance with their own privacy policies, over which we88my has no control.

we88my selects third-party service providers carefully and requires, by contract, that they maintain appropriate data protection standards. However, we88my is not responsible for the data practices of third-party gaming studios or payment providers beyond the terms of our processor agreements with them.

we88my reserves the right to update or amend this Privacy Policy at any time. Material changes — such as new categories of data collected, new purposes for processing, or new categories of recipients — will be notified to registered players by email or via a prominent notice on the Platform, with reasonable advance notice where possible. The effective date of the current version of this Policy is stated in the meta bar at the top of this page. The current version will always be accessible at we88my.co/privacy-policy. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the revised Policy.

For questions or concerns relating to this Privacy Policy, or to exercise your data rights, please contact the we88my data team using the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the on-site chat widget at we88my.co
• WhatsApp: Available — contact details within the Platform support section

we88my will acknowledge receipt of privacy-related enquiries within two (2) business days and aims to resolve all data rights requests within thirty (30) days. If you are not satisfied with we88my's response to a privacy complaint, you may have the right to lodge a complaint with the applicable data protection authority in your jurisdiction.