Privacy Policy

Woo88 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at woo88.cam and all associated subdomains and mobile interfaces. We take the privacy of our users ("you", "your", "the Player") seriously and are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy explains the categories of personal data we collect from you, the purposes for which that data is processed, the legal bases upon which processing is carried out, how long data is retained, and the rights you hold in relation to your personal data.

By creating an account on Woo88 or accessing any part of the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the Woo88 Terms & Conditions, which govern the overall contractual relationship between you and the Platform.

For the purposes of this Privacy Policy, the following terms shall carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, or online identifiers that can, directly or indirectly, identify that individual.
• "Data Controller" means Woo88, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of Woo88 in accordance with documented instructions, including payment processors, KYC verification providers, and technology infrastructure suppliers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "KYC" means Know Your Customer — the mandatory identity and age verification procedures applied to registered players in accordance with applicable compliance obligations.
• "Sensitive Personal Data" means categories of data warranting heightened protection, including financial information, government-issued identification details, and any data revealing characteristics protected under applicable law.

Woo88 collects personal data through several channels: directly from you at the point of account registration and during ongoing platform use; automatically through technical systems as you interact with the Platform; and from third-party service providers involved in identity verification and payment processing.

3.1 — Data Provided Directly by You

• Full legal name and date of birth;
• Malaysian MyKad number, passport number, or other government-issued identification details submitted for KYC verification;
• Residential address (including city — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or other);
• Email address and mobile phone number;
• Payment method details — including bank account references for Maybank, CIMB, Public Bank, Hong Leong, and e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX;
• Source-of-funds documentation provided during enhanced due diligence reviews;
• Communications sent to our customer support team via live chat or email.

3.2 — Data Collected Automatically

• IP address and geographic location indicators at the time of login and transaction;
• Device identifiers, operating system, browser type and version;
• Session activity logs — pages visited, features used, games played, bets placed, and timestamps;
• Deposit and withdrawal transaction records, including amounts (in MYR), timestamps, and payment method used;
• Cookie identifiers (see Section 7 for full cookie disclosure).

3.3 — Data Received from Third Parties

• Identity verification results from accredited KYC service providers;
• Fraud risk scores and sanctions screening results from compliance technology providers;
• Payment confirmation and dispute notifications from payment processors.

All personal data processed by Woo88 is processed on one or more of the following recognised legal bases:

Where processing is based on consent, you retain the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for optional marketing communications, contact our support team or use the unsubscribe function in any marketing email received.

Woo88 processes your personal data for the following specific purposes:

• Account Administration: Creating and maintaining your player account, processing deposits and withdrawals in MYR, managing VIP tier status, and providing access to the full suite of casino and sportsbook products.
• Identity & Age Verification: Verifying that you are who you claim to be and that you meet the minimum age requirement of 21 years, as mandated by our operational and licensing obligations.
• Transaction Processing: Facilitating payment transactions through your chosen Malaysian payment channels — DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency rails.
• Customer Support: Responding to your enquiries, processing complaints, and managing dispute resolution processes.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeover, and other prohibited activities on the Platform.
• Responsible Gambling: Monitoring betting patterns to identify potential problem gambling indicators and administering self-exclusion, deposit limit, and other responsible gambling tools you have activated.
• Legal & Regulatory Compliance: Fulfilling mandatory record-keeping, reporting, and due diligence obligations under applicable laws and our licensing conditions.
• Platform Improvement: Analysing aggregated and pseudonymised usage data to improve Platform functionality, game selection, and user experience. This analysis does not involve profiling individuals for commercial targeting.
• Marketing Communications: Where you have given separate consent, sending you information about promotions, bonuses, and Platform updates. You may opt out at any time.

Woo88 does not sell, rent, or trade your personal data. Disclosure to third parties occurs only in the following circumstances and subject to appropriate safeguards:

• Payment Processors: Transaction data is shared with licensed payment service providers operating in Malaysia — including DuitNow operators, FPX, Touch 'n Go eWallet, Boost, GrabPay, and local banking institutions — for the sole purpose of processing your deposit and withdrawal instructions.
• KYC & Compliance Providers: Identity verification data is shared with accredited third-party KYC and sanctions-screening service providers to fulfil our mandatory due diligence obligations. These providers are contractually bound to process your data only for the purposes specified by Woo88.
• Technology Infrastructure Providers: Server hosting, content delivery, and platform security services may involve the processing of certain technical data by contracted infrastructure providers. All such providers are subject to data processing agreements.
• Legal & Regulatory Authorities: Woo88 will disclose personal data to competent law enforcement authorities, regulatory bodies, or courts where legally compelled to do so by a valid legal instrument, or where disclosure is necessary to prevent serious harm or financial crime.
• Group Entities: Where Woo88 operates as part of a corporate group, limited data sharing with affiliated entities may occur for consolidated compliance and fraud prevention purposes, subject to the same data protection standards applied by Woo88 directly.

Woo88 uses cookies and similar tracking technologies to maintain session continuity, ensure platform security, and analyse aggregate usage patterns. The following categories of cookies are in use:

Woo88 does not employ third-party advertising or cross-site tracking cookies. You may manage functional and analytics cookies through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your account. Continued use of the Platform following acceptance of this Privacy Policy constitutes consent to the use of strictly necessary cookies.

Woo88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account registration and continued use of the Platform.
• Transaction Records: Financial transaction records, including deposits, withdrawals, and wager history, are retained for a minimum of five (5) years following the date of transaction, in accordance with anti-money-laundering record-keeping obligations.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following account closure, consistent with applicable compliance requirements.
• Customer Support Records: Communications and complaint records are retained for a minimum of five (5) years from the date of the last interaction.
• Closed Account Data: Following voluntary account closure or account termination, personal data is retained for the period required by legal obligations and then securely deleted or anonymised.
• Marketing Data: Data held solely on the basis of marketing consent is deleted within ninety (90) days of consent withdrawal.

At the expiry of applicable retention periods, personal data is securely deleted, destroyed, or irreversibly anonymised in accordance with Woo88's data disposal procedures.

Woo88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Woo88 Platform is encrypted in transit using industry-standard protocols.
• Encrypted Data Storage: Sensitive personal data is stored in encrypted form at rest on secured servers. Database access is restricted through role-based access controls.
• Two-Factor Authentication (2FA): Available for player accounts and mandatory for all internal administrative access to systems holding personal data.
• Regular Security Audits: Independent penetration testing and security assessments are conducted at least annually by accredited third-party security firms.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Staff with data access privileges receive regular data protection training.
• Incident Response: Woo88 maintains a documented data breach response procedure. In the event of a breach likely to result in risk to affected individuals, notification will be provided in accordance with applicable legal requirements.

Despite the measures above, no online transmission or storage system can be guaranteed to be completely secure. You are encouraged to use a strong, unique password for your Woo88 account and to enable two-factor authentication where available.

Subject to applicable data protection law and any overriding legal obligations, you hold the following rights in relation to your personal data held by Woo88. To exercise any of these rights, please contact us through the channels described in Section 14.

Woo88 operates exclusively for adults. The Platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under 21 years of age.

All registration applications are subject to mandatory age verification checks. Where Woo88 identifies that an account has been created by or on behalf of a person under the minimum age, the account will be immediately suspended, all activity will be voided, and any deposited funds will be returned to the originating payment source pending identity verification of the true account holder.

In order to provide the Woo88 Platform to Malaysian players, certain personal data may be processed by service providers located outside of Malaysia. Such cross-border transfers are undertaken only where adequate safeguards are in place to ensure that the receiving party provides a level of data protection equivalent to that applied by Woo88 domestically.

Applicable safeguards include contractual data processing agreements incorporating standard data protection clauses, requirements for technical and organisational security measures equivalent to those described in Section 9, and restrictions on onward sub-processing without prior written authorisation from Woo88.

In all cross-border transfer arrangements, Woo88 retains supervisory responsibility over the handling of your personal data and remains the Data Controller accountable for its protection.

Woo88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where material amendments are made — particularly those that materially affect how your personal data is used or the rights available to you — we will notify registered players by email to the address associated with their account prior to the changes taking effect.

Minor amendments, such as clarification of existing practices or corrections of typographical errors, may be made without individual notification. The "Last Reviewed" date at the top of this page will always reflect when the Policy was most recently updated.

Your continued use of the Platform following the publication of an amended Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any amendment, you should cease using the Platform and close your account before the effective date of the revised Policy.

For all privacy-related enquiries, data rights requests, or complaints regarding the handling of your personal data by Woo88, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. For data rights requests, please state clearly in your opening message that you are submitting a "Data Subject Request".
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request" as appropriate. Allow up to 30 days for a substantive response to formal data rights requests.

When submitting a data rights request, please provide your registered account username or email address, and a clear description of the right you wish to exercise. We may need to verify your identity before processing your request to ensure that data is not disclosed to or altered at the request of an unauthorised party.

Where you believe Woo88 has handled your personal data in a manner inconsistent with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.