wtc88 Privacy Policy

1. Data Controller

The data controller responsible for personal data processed through the wtc88 platform located at https://wtc88.win is the wtc88 operating entity ("wtc88", "we", "us", "our"). All data processing activities described in this Privacy Policy are carried out by or on behalf of wtc88 in accordance with the requirements of our international gaming authority licence and applicable data protection legislation.

For any data-related enquiries, you may contact our Data Protection team by emailing [email protected]. Please include "Data Privacy" in the subject line of your message.

2. Data We Collect

wtc88 collects the following categories of personal data from players and platform visitors:

We do not collect special categories of personal data (as defined under applicable data protection law) such as racial or ethnic origin, religious beliefs, or health data, unless specifically required for responsible gaming assessments or compelled by regulatory obligation.

3. How We Collect Data

wtc88 collects personal data through the following means:

• Direct interaction — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotion;
• Automated technologies — through cookies, server logs, and similar tracking technologies as you navigate the wtc88 platform;
• Third-party sources — from payment processors, identity verification service providers, fraud prevention agencies, and our gaming licence authority where disclosure is required or permitted by law.

4. Purpose & Legal Basis for Processing

wtc88 processes your personal data for the following purposes and on the following legal bases:

5. Data Retention

wtc88 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account data and transaction records are retained for a minimum of five (5) years from the date of the last transaction, as required by anti-money laundering regulations under our gaming licence;
• KYC documents are retained for a minimum of five (5) years following account closure;
• Customer support communications are retained for three (3) years from the date of the last interaction;
• Cookies and analytics data are retained for periods ranging from session-only to up to two (2) years depending on cookie type, as detailed in our Cookie Policy.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents recovery or re-identification.

6. Disclosure to Third Parties

wtc88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of third parties strictly on a need-to-know basis:

• Payment processors — Touch n Go eWallet, Boost, Malaysian banking institutions, and other payment service providers for the purpose of processing your MYR transactions;
• Identity verification providers — third-party KYC and age verification service providers who assist us in confirming the identity and age (21+) of our players;
• Fraud prevention agencies — organisations that assist us in identifying and preventing fraudulent activity, money laundering, and account abuse;
• Gaming regulators and licensing authorities — our gaming licence authority and any competent regulatory body to which we are legally obliged to report;
• IT and infrastructure providers — cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict contractual data processing agreements;
• Game studios and content providers — solely to the extent necessary to provide seamless game access; game studios receive anonymised session tokens and do not receive your personal identity data.

All third-party processors engaged by wtc88 are contractually bound to process your data only in accordance with our instructions and applicable data protection law.

7. International Data Transfers

As an internationally licensed online gaming platform, wtc88 may transfer your personal data to countries outside Malaysia for processing. Where such transfers occur, wtc88 ensures that appropriate safeguards are in place, including contractual clauses equivalent to or exceeding the data protection standards applicable in Malaysia. By using the wtc88 platform and accepting this Privacy Policy, you consent to any such cross-border data transfer subject to these safeguards.

8. Cookies & Tracking Technologies

The wtc88 platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. The categories of cookies we use are:

• Strictly Necessary Cookies — essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing Platform functionality.
• Functional Cookies — remember your preferences such as language settings and responsible gaming configurations across sessions.
• Analytics Cookies — used to understand how players navigate the Platform, which pages are visited most frequently, and how performance can be improved. Data is aggregated and anonymised.
• Marketing Cookies — used to deliver relevant promotions based on your gaming activity and preferences, where you have consented to receive marketing communications.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the wtc88 Platform but may limit some personalisation features.

9. Your Data Rights

Subject to applicable law and regulatory requirements, you have the following rights with respect to your personal data held by wtc88:

• Right of Access — to request a copy of the personal data wtc88 holds about you;
• Right of Rectification — to request correction of any inaccurate or incomplete personal data;
• Right of Erasure — to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to Restrict Processing — to request that we limit how we use your data in certain circumstances;
• Right to Data Portability — to receive your personal data in a structured, machine-readable format where processing is based on consent or contract;
• Right to Object — to object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". wtc88 will respond within thirty (30) days of receipt of a valid request. We may require identity verification before processing your request.

10. Data Security

wtc88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end encryption of all data in transit via TLS 1.2 or higher;
• Encrypted storage of sensitive data at rest;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Regular security assessments, vulnerability testing, and penetration testing by independent security firms;
• Incident response procedures in the event of a suspected data breach, including notification obligations as required by law.

Despite these measures, no data transmission over the internet is completely secure. wtc88 cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any suspected breach.

11. Children's Privacy

The wtc88 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is enforced through our KYC process at the point of registration and before withdrawal facilities are activated. If we become aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe a minor has registered on wtc88 should contact us immediately at [email protected].

12. Updates to This Privacy Policy

wtc88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. Material changes will be communicated to registered players via email or a prominent notice on the wtc88 Platform prior to the changes taking effect. The "Last Updated" date at the top of this page will reflect the most recent revision. Your continued use of the wtc88 Platform following notification of changes constitutes your acceptance of the revised Privacy Policy.