Privacy Policy wow808 — Personal Data Protection for Malaysian Members

Wow808 is an online sports betting and casino platform operating in Malaysia, serving over 500,000 registered members nationwide. As a responsible data controller, we recognise that our members' trust depends not only on a quality gaming experience, but also on how we handle the personal information entrusted to us.

Malaysia has a robust legal framework for personal data protection through the Personal Data Protection Act 2010 (PDPA). wow808 fully complies with this legislation and goes further by adopting international best-practice data protection principles. We believe privacy is not merely a legal obligation — it is a fundamental right of every individual that must be respected and protected.

This Privacy Policy is written in plain, straightforward language because we want you to genuinely understand what happens with your data — not simply provide a lengthy document full of legal jargon. If you have any questions after reading this Policy, do not hesitate to reach out to the wow808 support team, available 24/7 in Bahasa Melayu.

Wow808 collects various types of personal information depending on how you interact with our platform. Below is a detailed breakdown of the data we collect and its sources:

2.1 Data You Provide Directly

• Registration Information: Full name, Malaysian identity card number (MyKad) or passport, date of birth, Malaysian mobile number, email address and password.
• Profile Information: Malaysian residential address, language preference, communication preferences and any additional information you choose to share.
• Identity Verification (KYC): Copies of identity documents, verification selfies, and other supporting documents required for anti-money laundering (AML) compliance.
• Financial Information: Payment method details, including your Touch 'n Go eWallet account number, GrabPay, Boost, ShopeePay, DuitNow, or FPX bank account used for deposits and withdrawals. We not store credit or debit card numbers directly — all card transactions are processed through certified third-party payment gateways.
• Communications: Any messages, emails, or live chat conversation records between you and the wow808 customer support team.

2.2 Automatically Collected Data

• Platform Usage Data: Login records, betting history, matches followed (Malaysia Super League, EPL, badminton, etc.), casino games played (baccarat, blackjack, roulette, etc.), total deposits and withdrawals, and full transaction history.
• Technical Data: Your IP address, web browser type and version, device operating system, screen resolution, time zone, and other technical information automatically transmitted by your device when you access the wow808 platform.
• Cookie Data: Session information, user preferences and analytics data collected through cookies and related tracking technologies — as further described in Section 8.
• Geolocation Data: Approximate location based on IP address, to verify that you are accessing wow808's services from Malaysia and for account security purposes.

Wow808 uses the personal data we collect for a range of lawful and necessary purposes in order to provide our services to you. Below is a detailed breakdown of each purpose:

• Account Management: Creating and managing your wow808 account, verifying your identity at login, processing password reset requests and maintaining accurate account records.
• Financial Transaction Processing: Processing deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX; processing withdrawal requests to registered payment methods; and maintaining complete transaction records for audit and accountability purposes.
• Betting & Casino Services Provision: Enables you to place bets on Malaysia Super League fixtures, EPL, badminton, cricket and other sports; access live casino games and table games; and enjoy all other services available on the wow808 platform.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, multi-account abuse, and other unlawful activity; monitoring for unusual usage patterns; and maintaining the integrity of the wow808 platform for all our members.
• Legal & Regulatory Compliance: To comply with Malaysia's PDPA, anti-money laundering legislation (AMLA), Know Your Customer (KYC) requirements, and any other applicable legal obligations.
• Service Communications: Sending important notifications about your account, service updates, policy changes, security alerts and transaction information via email or SMS.
• Marketing Communications (with consent): Sending you information about the latest wow808 promotions, new bonuses, tournaments, and special offers — but only where you have consented to receive such communications. You may withdraw this consent at any time.
• Service Improvement: Analysing aggregated (non-identifiable) usage data to understand how our members use the wow808 platform, identify areas for improvement, and develop more useful new features.
• Responsible Gaming: Monitoring betting patterns to identify indicators of problem gambling, enforcing limits you have set yourself and complying with any self-exclusion limits you have requested.

Under Malaysia's PDPA, all personal data processing must have a valid legal basis. wow808 processes your personal data on the following bases depending on the purpose of processing:

• Contract Performance: Processing necessary to fulfil the service contract between you and wow808 — including managing your account, processing financial transactions and providing the betting and casino services you have subscribed to.
• Legal Obligations: Processing required to comply with Malaysian legal obligations, including PDPA, AMLA (Anti-Money Laundering Act), KYC requirements, and any directives issued by competent authorities.
• Legitimate Interests: Processing for the purposes of platform security, fraud prevention, service improvement and business risk management — where wow808's legitimate interests are balanced against your rights and freedoms as a data subject.
• Consent: Processing for marketing communications and other purposes that are not a contractual or legal requirement — for which we will always seek your explicit consent, and which you may withdraw at any time.

Wow808 sell, rent or trade your personal data to any third party for marketing or commercial purposes. However, we may share your personal data with the following categories of third parties in limited and controlled circumstances:

• Payment Service Providers: Payment gateway providers that process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. Data sharing is limited strictly to the information needed to process each transaction, and all providers are bound by rigorous data protection agreements.
• Game Providers: Third-party game software providers (such as Evolution Gaming, Pragmatic Play Live, and others) may receive the minimum technical data required to deliver games to you. They do not receive your full identity information.
• Cloud & IT Service Providers: Cloud computing infrastructure providers and IT service providers that help us operate the wow808 platform securely — all bound by data processing agreements that meet high security standards.
• Legal Authorities: Malaysian law enforcement agencies, courts or regulatory bodies where we are required to do so under applicable Malaysian law or by valid court order. In such cases, we will endeavour to notify you in advance unless prohibited by law.
• Professional Consultants: Lawyers, accountants and other professional advisors engaged by wow808 — all of whom are bound by professional confidentiality obligations.

Wow808 retains your personal data only for as long as necessary to fulfil the purposes set out in this Policy or to meet applicable legal requirements. The following guidelines govern our retention periods:

• Active Account Data: For as long as your account remains active at wow808. We will retain your data for the duration of the service relationship between you and wow808.
• Financial Transaction Records: A minimum of seven (7) years from the transaction date, in compliance with Malaysian tax and anti-money laundering legal requirements.
• KYC Documents: A minimum of five (5) years after account closure or the date of the last transaction, whichever is later, in accordance with Malaysia's AMLA requirements.
• Customer Support Communication Logs: Two (2) years from the date of last interaction, for service quality and dispute resolution purposes.
• Marketing Data: Until you withdraw your consent to receive marketing communications.
• Technical Data & Logs: Six (6) months for routine technical logs; up to two (2) years for logs relating to ongoing security investigations.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you. The deletion process uses methods that ensure the data cannot be recovered.

Wow808 implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

• Encryption in Transit: All communications between your device and wow808's servers are encrypted using Transport Layer Security (TLS) 1.3 with 256-bit SSL certificates — the same standard used by Maybank2u, CIMB Clicks and Malaysia's leading financial institutions.
• Stored Data Encryption: Sensitive data stored in wow808's databases is encrypted using strong encryption algorithms. Your password is never stored in plain text — it is hashed using an irreversible algorithm.
• Strict Access Controls: The "need-to-know" principle is strictly enforced. Only staff who require access to specific data in order to carry out their duties are permitted to do so.
• Two-Factor Authentication: wow808's internal systems require multi-factor authentication for all staff access. Members are also encouraged to enable 2FA on their accounts.
• 24/7 Security Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) monitor the wow808 platform around the clock for any abnormal activity.
• Periodic Security Testing: Penetration testing and security audits are conducted regularly by independent cybersecurity experts to identify and address any vulnerabilities.
• Incident Response Procedure: wow808 has a comprehensive security incident response plan. In the event of a material data breach, we will notify affected members and the relevant authorities within the timeframe required by law.

While we take all reasonable steps to protect your data, no online security system can offer an absolute 100% guarantee. We therefore encourage you to take your own precautions as well — such as using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

The wow808 platform uses cookies and related tracking technologies to enhance your experience, ensure the platform functions correctly, and analyse how the platform is used. Below is an explanation of the types of cookies we use:

• Essential Cookies: These cookies are essential to the core functionality of the wow808 platform. They store your login session, language preference and other basic information required for the platform to operate properly. Disabling these cookies will affect platform functionality.
• Performance & Analytics Cookies: We use analytics tools to understand how our members use the platform — which pages are visited most frequently, how long play sessions last, and so on. All such data is collected in aggregate form and cannot be used to identify any individual.
• Functional Cookies: These cookies remember your preferences — such as your baccarat table display settings, saved betting limit configurations and other personal choices — so your experience is seamless every time you log in to wow808.
• Security Cookies: Used to detect suspicious login attempts, prevent CSRF attacks, and maintain the security of your session on wow808.

You can manage and/or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the wow808 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

Under Malaysia's PDPA, you have several important rights regarding the personal data we hold about you. wow808 is committed to making it easy for you to exercise these rights:

Wow808 services are exclusively for individuals aged 18 and above. wow808 does not knowingly collect or process personal data from individuals under the age of 18.

• All registration applicants are required to confirm that they are aged 18 or above during the registration process.
• The age verification (KYC) process we carry out helps us identify and block registrations by underage individuals.
• Should we discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account.

Wow808 may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or changes to the services we offer.

• You will be notified of any material changes to this Policy via your registered email and/or a prominent notice on the wow808 platform at least 14 days before the changes take effect.
• The "Last Updated" date at the top of this page will always reflect the date of the most current version of this Policy.
• Continued use of the wow808 platform after the effective date of any changes constitutes acceptance of the updated Policy.
• For changes that require fresh consent (for example, changes to consent-based data processing purposes), we will actively seek your consent before implementing those changes.

We encourage you to review this Privacy Policy periodically so you always know how we protect and use your personal data at wow808.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wow808 handles your personal data, please contact us through the following channels:

• Email: support@wow808.xyz — for data rights requests and privacy inquiries that require a written record
• Live Chat: Available 24/7 in Bahasa Melayu directly within the wow808 platform — for urgent inquiries and general support

Our data protection team will handle your enquiry with the seriousness it deserves and within the established timeframes. We are committed to providing a clear, complete and helpful response to every privacy enquiry we receive.