Privacy Policy — WOU88

This Privacy Policy ("Policy") is issued by WOU88 ("the Company", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data obtained through the WOU88 online gaming platform located at https://wou88.cam (the "Platform"), including all associated services, features, content, and applications.

WOU88 is committed to safeguarding the privacy and security of all personal information entrusted to us by our members, visitors, and prospective users. This Policy has been prepared in accordance with applicable data protection laws and reflects our obligations as an operator providing gaming services to users in Malaysia and internationally.

This Policy should be read alongside our Terms & Conditions, which are available at /terms-conditions and are incorporated herein by reference. In the event of any conflict between this Policy and the Terms & Conditions regarding privacy matters, this Policy shall prevail.

We review and update this Policy periodically to reflect changes in our practices, technology, regulatory requirements, or applicable law. The most current version of this Policy is always available on this page. The effective date at the top of this page indicates when the current version came into force.

For the purposes of this Privacy Policy, the following terms have the meanings assigned to them below:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a natural person, directly or indirectly, including but not limited to a name, identification number (e.g., MyKad / NRIC), location data, email address, phone number, or IP address.
• "Processing" means any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means WOU88, which determines the purposes and means of the Processing of Personal Data obtained through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of WOU88 under contractual instruction (e.g., payment service providers, KYC verification platforms, cloud hosting services).
• "Data Subject" means the identified or identifiable natural person to whom the Personal Data relates — in most cases, this means you, the User.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data for one or more specific purposes.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, session management, analytics, and personalisation.
• "KYC" means Know Your Customer, a mandatory regulatory process requiring WOU88 to verify the identity, age, and source of funds of registered Members.

WOU88 collects Personal Data from you in the course of operating the Platform and delivering its services. The categories of Personal Data we collect, and the primary purposes for which each category is used, are set out in the table below:

WOU88 collects Personal Data through the following primary channels:

• Direct submission during registration: When you create a WOU88 account, you provide identity and contact information directly.
• KYC document uploads: When you submit government-issued identification documents, proof of address, or source of funds documentation for account verification.
• Financial transactions: When you make deposits via Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or cryptocurrency channels, relevant transaction metadata is collected.
• Platform usage: Automatically as you interact with the Platform — including IP address logging, session cookies, device fingerprinting, and game play data.
• Customer support interactions: When you contact our support team via live chat or email at [email protected], the content of those communications is retained.
• Third-party verification partners: Where we use authorised KYC or fraud prevention partners to verify your identity or screen transactions.
• Responsible gambling disclosures: When you voluntarily provide information in the context of setting deposit limits, requesting self-exclusion, or engaging with our responsible gambling tools.

WOU88 processes your Personal Data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

• Contractual necessity: Processing is necessary to perform the contract between you and WOU88 — including account management, payment processing, and service delivery.
• Legal obligation: Processing is required for WOU88 to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) laws, age verification requirements, tax reporting obligations, and gaming licensing conditions.
• Legitimate interests: Processing is necessary for the legitimate interests of WOU88, including fraud prevention, platform security, responsible gambling monitoring, and business analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities, including direct marketing communications and optional personalisation features, we rely on your express consent. You may withdraw consent at any time by contacting [email protected].

WOU88 uses the Personal Data we collect for the following purposes:

• Account creation and management: To register, verify, and maintain your WOU88 account and associated preferences.
• Identity and age verification: To confirm that you meet the 21+ age requirement and are an eligible user in accordance with our Terms & Conditions.
• Payment processing: To process deposits and withdrawals via your chosen payment method, including Maybank2u, DuitNow, Touch 'n Go eWallet, and other supported channels.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account compromises, money laundering, and other prohibited activities.
• Regulatory compliance: To fulfil our obligations under AML, KYC, and gaming licensing regulations, including reporting obligations where mandated by law.
• Customer support: To respond to your enquiries, resolve disputes, and deliver quality support through our 24/7 live chat and email channels.
• Personalisation: To tailor your platform experience, including game recommendations, bonus offers relevant to your activity, and interface preferences — subject to your consent where required.
• Responsible gambling monitoring: To identify patterns of play that may indicate problem gambling behaviour and to ensure responsible gambling tools and interventions are effective.
• Platform improvement: To analyse aggregated usage data, improve platform stability, develop new features, and benchmark service quality.
• Direct marketing: Subject to your consent and applicable opt-out rights, to send promotional communications regarding WOU88 offers, bonuses, and platform updates.

We will not use your Personal Data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

WOU88 does not sell your Personal Data to third parties. We may share your Personal Data with carefully selected third parties in the following circumstances:

• Payment service providers: Banks and e-wallet operators (including FPX network members, DuitNow payment infrastructure, Touch 'n Go eWallet service providers, and Boost) process transaction data necessary to facilitate your deposits and withdrawals.
• KYC and identity verification partners: Authorised identity verification service providers may receive identity documents and biographic data to complete the KYC process on our behalf.
• Fraud detection and AML screening providers: Specialist third-party services may process certain data for the purpose of detecting fraudulent transactions or screening against financial crime watchlists.
• Game content and platform infrastructure providers: Live casino and slot game providers may receive anonymised session identifiers necessary to deliver gaming content and validate bet outcomes.
• Cloud hosting and IT infrastructure providers: WOU88 uses reputable cloud infrastructure providers to host and maintain Platform data under contractual data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, court order, or competent regulatory instruction, WOU88 may be required to disclose Personal Data to the relevant authorities. We will notify you of such disclosures to the extent legally permissible.
• Professional advisers: Lawyers, auditors, and compliance consultants acting under obligations of professional confidentiality may have limited access to Personal Data in the course of providing professional services to WOU88.

All third-party Data Processors engaged by WOU88 are contractually required to process Personal Data only on our documented instructions, to implement appropriate security measures, and to comply with applicable data protection laws. WOU88 maintains a register of authorised Data Processors and reviews these relationships periodically.

WOU88 uses cookies and similar tracking technologies (including web beacons, pixel tags, and session storage) to operate the Platform effectively, remember your preferences, and gather analytics data to improve our services.

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. You may control functional and analytics cookies through your browser settings or by contacting our support team. Note that disabling certain cookies may affect your user experience and the availability of some Platform features.

WOU88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable laws and regulatory obligations. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your membership and for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of seven (7) years to satisfy anti-money laundering reporting obligations and tax record-keeping requirements.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication is relevant to an active dispute or legal proceeding.
• Technical and log data (IP addresses, session logs): Retained for up to twelve (12) months for security and fraud investigation purposes.
• Responsible gambling records: Retained for the duration of any active self-exclusion or limit, plus five (5) years, to protect against circumvention and ensure continuity of player protection measures.
• Marketing consent records: Retained until consent is withdrawn or for three (3) years following your last interaction with a marketing communication, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data is securely deleted, anonymised, or archived in accordance with our internal data lifecycle management procedures. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and research purposes.

WOU88 implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in transit: All data transmitted between users and WOU88 servers is encrypted using TLS 1.2 / 1.3 with 256-bit SSL certificates.
• Encryption at rest: Sensitive data stored on WOU88 servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Internal access to Personal Data is governed by role-based access controls (RBAC). Staff access is granted on a strict need-to-know basis and is subject to regular access rights reviews.
• Two-factor authentication: Administrative system access requires multi-factor authentication (MFA) for all personnel with access to production systems containing Personal Data.
• Regular security audits: WOU88 conducts periodic penetration testing and vulnerability assessments of its platform infrastructure by qualified third-party security specialists.
• Intrusion detection: Automated intrusion detection and anomaly monitoring systems operate continuously to identify and respond to potential threats in real time.
• Data breach response: WOU88 maintains a documented data breach response plan. In the event of a breach affecting your Personal Data, we will notify affected users and relevant authorities as required by applicable law.

Subject to applicable law and certain limited exceptions (such as legal retention obligations), you hold the following rights with respect to your Personal Data held by WOU88:

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days. We reserve the right to verify your identity before processing any rights request.

WOU88 operates globally and may transfer your Personal Data to countries outside Malaysia in order to deliver its services. This includes transfers to cloud infrastructure providers, game content suppliers, KYC verification partners, and fraud detection services operating in multiple jurisdictions.

Where Personal Data is transferred outside of Malaysia to jurisdictions that may not offer the same level of data protection, WOU88 takes appropriate safeguards to ensure that your data remains protected. These safeguards include:

• Entering into data processing agreements with receiving entities that include standard contractual clauses approved by relevant data protection authorities;
• Transferring data only to entities that have independently certified compliance with recognised data protection frameworks;
• Conducting transfer impact assessments where applicable to evaluate the risk of transfer to specific jurisdictions.

You may request information about the specific safeguards applied to any international transfers of your Personal Data by contacting [email protected].

The WOU88 Platform is strictly intended for adults aged 21 years and above. WOU88 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21.

All new account registrations are subject to mandatory age verification as part of our KYC process. If WOU88 becomes aware that Personal Data has been collected from a person under the age of 21 without verifiable parental consent, that Account will be immediately suspended and the data will be deleted from our systems as soon as is reasonably practicable.

WOU88 reviews this Privacy Policy regularly and reserves the right to update it at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we offer.

When we make material changes to this Policy — changes that significantly affect how we collect, use, or share your Personal Data — we will notify you by sending a notification to the email address registered to your account and/or by displaying a prominent notice on the Platform at least seven (7) days before the changes come into effect.

Minor amendments, such as corrections of typographical errors or clarifications that do not substantively alter the meaning of any clause, may be made without prior notice.

The date of the most recent revision is always displayed at the top of this page. We recommend reviewing this Policy periodically to stay informed of how WOU88 protects your information. Archived versions of this Policy are available upon request by contacting [email protected].

If you have any questions, concerns, complaints, or requests relating to this Privacy Policy or the processing of your Personal Data by WOU88, please contact us through the following channels:

• Privacy & Data Enquiries:
  Email: [email protected]
  Subject line: "Privacy Enquiry"
  Response time: Within 72 hours
• Data Rights Requests (Access, Erasure, Portability, Correction):
  Email: [email protected]
  Subject line: "Data Rights Request"
  Response time: Acknowledgement within 72 hours; substantive response within 30 days
• Live Chat Support:
  Available 24 hours a day, 7 days a week directly on the Platform.