w88ap Privacy Policy for Malaysian Players

Introduction

This Privacy Policy describes the personal information practices of w88ap in connection with the website, account facilities, sports markets, casino entertainment and related services. By accessing w88ap, users acknowledge that certain information may be processed to provide a secure and functional experience.

w88ap recognises that privacy is particularly important where identity records, financial activity and gambling preferences are involved. The purpose of this Policy is to explain what information may be collected, why it may be required, who may receive it and how long it may be retained. This Policy should be read together with the w88ap Terms & Conditions.

Scope and Definitions

This Policy applies to information processed when a person browses w88ap, creates or manages an account, communicates with support, completes verification, uses a payment method, places a wager or applies a responsible gambling control.

“Personal information” means information that identifies a person or can reasonably be linked to an identifiable person. “Processing” includes collecting, recording, organising, storing, reviewing, sharing, restricting and deleting personal information. “Service provider” means an organisation engaged to support functions such as hosting, identity review, payment processing, fraud prevention or technical maintenance.

Aggregated or anonymised statistics that cannot reasonably identify an individual are not treated as personal information. w88ap may use such statistics to understand broad interests, such as demand for EPL, Liga Super Malaysia, UFC or live casino categories.

Information We Collect

The categories collected by w88ap depend on how a user interacts with the platform. A casual visitor may generate technical records, while an account holder may provide registration, verification and transaction information.

Users should provide accurate information and update material changes where necessary. w88ap asks users not to send information that has not been requested, including complete card credentials, wallet recovery phrases or passwords.

How We Use Personal Information

w88ap may process personal information for the following purposes:

• Creating, authenticating and maintaining an eligible player account;
• Confirming that a user is aged 21 or above and reviewing identity information;
• Providing sports betting, casino entertainment and account history functions;
• Processing MYR deposits, withdrawals, refunds and payment queries;
• Identifying suspicious activity, duplicate accounts, fraud or security threats;
• Applying bonus conditions, loyalty records and transaction limits;
• Responding to questions, complaints and account access requests;
• Administering deposit limits, cooling-off periods and self-exclusion requests;
• Improving platform stability, navigation and mobile performance; and
• Meeting applicable legal, regulatory, accounting and dispute-resolution duties.

w88ap does not intend to use personal information for a materially incompatible purpose without providing appropriate notice or obtaining consent where required. Automated indicators may help identify unusual account activity, but significant restrictions should be subject to an appropriate review process where applicable.

Grounds for Processing

Depending on the applicable legal framework, w88ap may process information because it is required to perform a user agreement, comply with a legal obligation, pursue a legitimate operational interest or act on valid consent. Legitimate interests may include protecting accounts, preventing fraud, maintaining platform security and resolving disputes.

Where consent is the relevant ground, it should be specific and capable of being withdrawn. Withdrawal does not affect processing completed before the request and may not require deletion where w88ap must retain records for security, financial or legal reasons.

Payments and Identity Verification

Payment activity may involve information connected with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong or supported cryptocurrencies. w88ap may receive a payment reference, account-holder name, transaction amount, date, status and limited source information. Complete payment credentials should remain subject to the controls of the relevant provider.

Identity review may require a government-issued document, proof of age, proof of address or evidence that a payment source belongs to the account holder. Documents are used to assess eligibility, reduce impersonation risk and support withdrawal checks. w88ap may suspend a transaction while information is incomplete or inconsistent.

Cookies and Device Information

w88ap may use cookies and similar local technologies to maintain sessions, remember preferences, support authentication, detect misuse and measure website performance. Essential cookies may be required for secure account features to function correctly.

Device information may include browser version, screen dimensions, operating system, approximate network location, language setting, login time and error records. Users can manage cookies through browser controls, although blocking essential storage may affect sign-in, cashier or security functions.

When Information May Be Shared

w88ap does not treat personal information as a product for unrestricted sale. Limited information may be disclosed to service providers or other recipients where reasonably necessary for an identified purpose. Recipients may include:

• Payment processors and financial service providers supporting deposits or withdrawals;
• Identity, age-verification, anti-fraud and account-security providers;
• Hosting, database, analytics and technical support providers;
• Professional advisers assisting with legal, accounting or dispute matters;
• Competent authorities where disclosure is lawfully required; and
• A successor organisation involved in a legitimate restructuring or transfer, subject to appropriate safeguards.

Providers should receive only the information reasonably required for their role and should be subject to confidentiality, security and permitted-use restrictions. w88ap may also disclose information when necessary to protect users, investigate misuse or defend legal rights.

International Processing

Because online services can rely on infrastructure and providers located in different jurisdictions, information associated with Malaysian users may be processed outside Malaysia. Privacy rules in another jurisdiction may differ from Malaysian standards.

Where required, w88ap seeks to use contractual, organisational or technical measures to protect information transferred internationally. These measures may include limited access, encryption in transit, confidentiality obligations and service-provider review. No internet transmission or storage system can, however, be guaranteed as completely secure.

Data Retention

w88ap retains personal information for only as long as reasonably necessary for the purpose for which it was collected and for applicable legal, financial, security or dispute-resolution requirements. Retention periods can differ by category.

Account and transaction records may be retained after closure to address fraud, chargebacks, tax, accounting or legal claims. Self-exclusion information may also be retained to help prevent an excluded user from opening another account. When information is no longer required, w88ap may securely delete it, anonymise it or place it beyond ordinary operational use.

Data Security

w88ap applies reasonable technical and organisational measures intended to protect information from unauthorised access, alteration, loss or disclosure. Measures may include encrypted transmission, access controls, authentication procedures, security logging, staff confidentiality duties and periodic review of service providers.

Users also have an important role. A w88ap password should be unique, difficult to guess and never shared. Players should sign out on shared devices, keep software updated and review account and MYR transaction records regularly. Any suspected unauthorised access should be reported promptly.

If a security incident creates a material risk, w88ap will assess the event and provide notices where required by applicable law. A notice may explain the type of information involved, recommended protective steps and available contact details.

User Rights and Requests

Subject to applicable law and legitimate exemptions, a user may have rights concerning personal information held by w88ap. Identity verification may be required before a request is completed to prevent disclosure to an unauthorised person.

A request may be limited where fulfilling it would expose another person’s information, undermine fraud prevention, conflict with record-retention duties or adversely affect a legal claim. w88ap will aim to explain any lawful limitation in clear English.

Responsible Gambling Information

w88ap may process deposit patterns, session duration, wagering activity, limit settings and account communications to administer responsible gambling controls. Such information may help identify possible risk indicators or ensure that a cooling-off or self-exclusion instruction is respected.

Self-exclusion records may be retained even after an account is closed because deletion could undermine the purpose of the restriction. Access should be limited to personnel or providers who need the information to administer player protection.

w88ap is for adults aged 21 and above only. Users should set an affordable RM budget, take regular breaks and never chase losses. More information about limits and self-exclusion is available on the Responsible Gambling page.

Policy Updates and Contact Us

w88ap may revise this Privacy Policy to reflect changes in services, security practices or applicable requirements. The updated date will be changed when a revision is published. Material changes may also be highlighted through an appropriate account or website notice.