wbwin Privacy Policy – How We Collect, Use, and Protect Your Data

1. Introduction

wbwin is committed to protecting the privacy and personal data of all users who access and use the wbwin platform at wbwin.co. This Privacy Policy is designed to be transparent and straightforward — we want you, as a Malaysian player, to understand exactly what data wbwin collects, why we collect it, how we use it, who we share it with, and how long we keep it.

This Policy should be read alongside the wbwin Terms & Conditions and Responsible Gaming Policy, both of which are published on this platform. By registering an Account on wbwin or by continuing to access the platform after this Policy has been made available to you, you acknowledge that you have read and understood its contents.

We do not take a "collect everything, decide later" approach to data. Every category of personal data collected by wbwin corresponds to a specific, identified purpose — regulatory compliance, platform operation, payment processing, or customer support. If we cannot identify a clear purpose, we do not collect the data.

2. Data Controller

2.1 The data controller responsible for the personal data of wbwin users is the licensed operating entity behind the wbwin platform. wbwin is operated by a licensed gaming entity under international gaming authority regulations. For all data-related enquiries, contact details are provided in Section 16 of this Policy.

2.2 Where wbwin engages third-party processors — such as payment service providers, identity verification companies, or game providers — those third parties act as data processors under wbwin's instruction. They are not independent data controllers with respect to your wbwin account data, and they are bound by contractual data processing obligations consistent with applicable data protection law.

3. Personal Data We Collect

wbwin collects the following categories of personal data, depending on your level of engagement with the platform:

3.1 Registration & Account Data

• Full legal name;
• Date of birth (for age verification — wbwin requires players to be 21 years of age or older);
• Email address;
• Mobile phone number;
• Residential address (including postcode, city, state — relevant for Malaysian players in Kuala Lumpur, Penang, Johor Bahru, Sabah, Sarawak, and other states);
• Username and encrypted password credentials.

3.2 Identity Verification (KYC) Data

• Copy of Malaysian NRIC (MyKad) or valid international passport;
• Proof of residential address (e.g., Maybank, CIMB, or Public Bank statement; utility bill; official government correspondence);
• Source of funds documentation where required by wbwin's AML obligations.

3.3 Financial & Transaction Data

• Payment instrument identifiers (e.g., last four digits of a bank account, Touch 'n Go eWallet or DuitNow registered mobile number — wbwin does not store full payment card numbers);
• Deposit and withdrawal transaction records, including amount, timestamp, and payment method;
• Account balance history.

3.4 Gaming Activity Data

• Game session records (game title, provider, session start and end time, wager amounts, outcomes, RTP over session);
• Sports betting history (event, market, stake, odds, settlement);
• Bonus participation and wagering requirement progress;
• Responsible gaming tool activations (deposit limits set, self-exclusion status).

3.5 Technical & Device Data

• IP address;
• Browser type and version;
• Device type, operating system, and screen resolution;
• Session timestamps and login/logout records;
• Referring URL (if accessed via a link).

3.6 Customer Support Data

• Live chat transcripts;
• Email correspondence;
• Complaint and dispute records.

4. How We Collect Your Data

4.1 Directly from you — when you register an Account, complete KYC, make a deposit or withdrawal, contact customer support, or interact with any part of the wbwin platform interface.

4.2 Automatically — through cookies, session tracking, server logs, and analytics tools as you navigate the wbwin platform. See Section 10 for full details on cookies.

4.3 From third parties — identity verification services (in the KYC process), payment processors (transaction confirmation and fraud screening), and, where applicable, responsible gaming self-exclusion registers.

5. Legal Basis for Processing

5.1 wbwin processes personal data on the following legal bases:

• Contractual necessity — processing required to operate your Account, process transactions, and provide the Services you have contracted for;
• Legal obligation — processing required for AML compliance, KYC verification, licensing obligations, and reporting to regulatory authorities;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and analytics (where such interests are not overridden by your rights);
• Consent — marketing communications and non-essential analytics cookies (where you have provided express consent, which may be withdrawn at any time).

6. How We Use Your Personal Data

6.1 wbwin uses the personal data collected for the following purposes:

• Creating and maintaining your wbwin Account;
• Verifying your identity and age as required by licensing regulations;
• Processing deposits and withdrawals via MYR payment channels including Touch 'n Go, DuitNow, GrabPay, Boost, and FPX;
• Providing and operating all platform Services, including live casino, slots, sportsbook, and arcade;
• Detecting and preventing fraud, money laundering, and platform abuse;
• Monitoring for responsible gaming risk indicators and applying responsible gaming interventions where appropriate;
• Responding to customer support queries and resolving disputes;
• Communicating important account and security notices;
• Improving the wbwin platform through aggregated, anonymised analytics;
• Sending promotional communications where you have consented to receive them.

7. Disclosure to Third Parties

7.1 wbwin does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. Disclosure of personal data occurs only in the following circumstances:

• Payment processors — to facilitate deposits and withdrawals via your chosen MYR payment channel;
• Game providers — certified third-party game studios receive the minimum data necessary to deliver game content and record game outcomes for your Account;
• Identity verification providers — to conduct KYC checks on behalf of wbwin in compliance with licensing obligations;
• Regulatory and law enforcement authorities — where required by applicable law, court order, or regulatory demand, including AML reporting obligations;
• Professional advisers — legal, accounting, or auditing firms acting under professional confidentiality obligations in connection with wbwin's business operations;
• Business transfers — in the event of a merger, acquisition, or sale of the wbwin business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

8. International Data Transfers

8.1 As an internationally licensed gaming platform, wbwin may transfer personal data to third-party processors located outside Malaysia. Where such transfers occur, wbwin ensures that adequate safeguards are in place — including contractual clauses requiring the recipient to maintain data protection standards equivalent to those applied by wbwin — before any transfer is made.

8.2 Game providers in particular may be located in various jurisdictions. All game providers engaged by wbwin are certified by internationally recognised gaming testing laboratories and are subject to data handling requirements under their respective regulatory frameworks.

9. Data Retention

9.1 wbwin retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data and transaction records — retained for a minimum of five (5) years following Account closure, in compliance with AML record-keeping requirements;
• KYC documents — retained for the duration of the Account relationship plus five (5) years following Account closure;
• Customer support records — retained for three (3) years from the date of the relevant interaction;
• Technical logs — retained for twelve (12) months for security and fraud investigation purposes;
• Marketing consent records — retained for the duration of the consent period plus sufficient time to demonstrate compliance.

9.2 On expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with wbwin's data destruction procedures.

10. Cookies & Tracking Technologies

10.1 The wbwin platform uses cookies and similar technologies (including session storage and local storage) to support the operation and improvement of the platform. Cookies used by wbwin fall into the following categories:

• Strictly Necessary Cookies — required for the wbwin platform to function correctly, including session authentication, the account wallet balance display, and platform navigation. These cookies cannot be disabled without rendering the platform non-functional.
• Performance & Analytics Cookies — used to collect anonymised data on how users interact with the wbwin platform, enabling identification and resolution of performance issues and improvements to user experience. These cookies require your consent.
• Functional Cookies — used to remember your preferences (such as language settings or responsible gaming notification dismissals) across sessions.

10.2 You can manage non-essential cookies through your browser settings. Please note that disabling functional cookies may affect personalisation features on the platform. Disabling strictly necessary cookies will affect platform functionality.

10.3 wbwin does not use cross-site advertising tracking cookies or sell cookie-derived data to advertising networks.

11. Your Data Rights

11.1 As a data subject, you hold the following rights with respect to your personal data processed by wbwin:

• Right of Access — you may request a copy of the personal data wbwin holds about you;
• Right to Rectification — you may request correction of inaccurate or incomplete personal data;
• Right to Erasure — you may request deletion of your personal data, subject to wbwin's legal retention obligations (noting that data subject to regulatory retention requirements cannot be erased until the relevant retention period expires);
• Right to Restrict Processing — in certain circumstances, you may request that wbwin restricts the processing of your data while a correction or objection request is under review;
• Right to Data Portability — you may request a structured, machine-readable copy of personal data you have provided to wbwin;
• Right to Object — you may object to processing based on legitimate interests, particularly in respect of direct marketing;
• Right to Withdraw Consent — where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of the above rights, contact wbwin via Live Chat or at [email protected]. wbwin will respond to data rights requests within 30 days. Complex requests may require a further 30-day extension, of which you will be notified.

11.3 wbwin may request verification of identity before processing a data rights request to ensure data is not disclosed to unauthorised parties.

12. Marketing Communications

12.1 With your consent, wbwin may send you promotional emails, platform notifications, and SMS messages relating to new games, bonuses, festive promotions (including CNY, Hari Raya, and other Malaysian public holiday events), sportsbook offers, and platform updates.

12.2 You may withdraw consent for marketing communications at any time by: (a) clicking the unsubscribe link in any marketing email; (b) updating your communication preferences in your wbwin Account settings; or (c) contacting customer support via Live Chat. Withdrawal of consent does not affect service communications (such as account security alerts, deposit confirmations, and withdrawal notifications), which are sent irrespective of marketing preferences.

13. Children & Minors

13.1 The wbwin platform is strictly for adults aged 21 years and above. wbwin does not knowingly collect personal data from individuals under the age of 21. If wbwin becomes aware that an Account has been registered by a person under 21, the Account will be closed immediately, any deposited funds will be returned to the source payment instrument, and all associated personal data will be deleted except to the extent required for regulatory reporting.

13.2 If you believe that a person under 21 has registered a wbwin Account using your personal details or payment instruments, contact wbwin customer support immediately via Live Chat.

14. Security Measures

14.1 wbwin implements the following technical and organisational security measures to protect personal data:

• 256-bit SSL/TLS encryption on all data transmitted between user devices and wbwin servers;
• Encryption of sensitive data at rest using AES-256 or equivalent industry-standard algorithms;
• One-way cryptographic hashing of all account passwords (passwords are never stored in plain text);
• Role-based access controls restricting internal access to personal data to authorised personnel only, on a need-to-know basis;
• Regular internal and third-party security reviews;
• Intrusion detection and monitoring systems;
• Data breach response procedures, including notification to affected users and regulatory authorities in the event of a material breach.

14.2 While wbwin implements rigorous security measures, no system is entirely immune to all security threats. You are responsible for maintaining the security of your Account login credentials and for notifying wbwin immediately if you suspect unauthorised access to your Account.

15. Changes to This Privacy Policy

15.1 wbwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in platform operations, regulatory requirements, or data protection best practices. Material changes to this Policy will be communicated to registered Account holders via the email address associated with their Account and via a prominent notice on the wbwin platform prior to the changes taking effect.

15.2 The "Last Updated" date at the top of this Policy reflects the most recent revision. We recommend that you review this Policy periodically. Continued use of the wbwin platform following notification of a Policy update constitutes your acceptance of the revised Policy.

16. Contact Us

For all privacy-related enquiries, data rights requests, or concerns regarding the processing of your personal data by wbwin, please contact us via:

• Live Chat: Available 24/7 through the wbwin platform. Average response time under 3 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing.

wbwin will acknowledge all privacy-related contact within 48 hours and endeavour to resolve your enquiry within 30 calendar days.