W888 Privacy Policy
At W888, your personal data is handled with the same care and precision we apply to every aspect of our platform. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you hold as a W888 player in Malaysia.
Last updated: 1 January 2026Introduction
W888 ("Company", "we", "us", "our") is committed to protecting and respecting the privacy of every individual who accesses or uses the W888 online gaming platform available at https://w888.click (the "Platform"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by W888.
This Policy applies to all Players, registered users, and visitors to the Platform, regardless of whether they are located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location from which the Platform is accessed. It covers data collected via the Platform's website interface, live chat system, customer support channels, and payment processing integrations.
By registering an Account on W888 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact W888 to request account closure.
Your privacy matters. W888 does not sell, rent, or lease your personal data to third parties for their independent marketing purposes. Your data is used solely to operate the Platform, deliver our services, and comply with applicable legal obligations.
Scope & Application
This Policy applies to all personal data processed by W888 in connection with the provision of the Platform and its associated services, including but not limited to:
- Account registration and identity verification (KYC) processes.
- Deposit and withdrawal transactions processed via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels.
- Sports betting activity, live casino gameplay, slot sessions, and esports wagering on the Platform.
- Communications between Players and the W888 customer support team via live chat or email.
- Promotional and loyalty programme participation, including welcome bonuses and VIP tier management.
- Technical interaction data collected through cookies, device identifiers, and log files during Platform usage.
This Policy does not apply to third-party websites, payment processors, or other external services that may be accessible in connection with the Platform. W888 is not responsible for the privacy practices of such third parties, and we encourage you to review their individual privacy notices.
Definitions
For the purposes of this Policy, the following definitions apply:
- Personal Data — any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, identification number, contact details, financial information, and digital identifiers such as IP addresses.
- Processing — any operation performed on personal data, including collection, storage, use, disclosure, alteration, and deletion.
- Data Controller — W888, which determines the purposes and means of processing personal data collected through the Platform.
- Data Processor — a third party that processes personal data on behalf of W888, under W888's instruction and subject to contractual data processing obligations.
- Consent — freely given, specific, informed, and unambiguous agreement by the Data Subject to the processing of their personal data for a stated purpose.
- KYC — Know Your Customer: the identity and age verification process applied to W888 accounts in compliance with applicable gaming licence requirements.
- Cookie — a small data file stored on a user's device by a website, used to retain session information, preferences, and analytics data.
Data We Collect
W888 collects personal data only to the extent necessary for the lawful and effective delivery of the Platform's services. The categories of data we collect are described in the table below:
| Data Category | Specific Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued identification number (e.g., MyKad), passport details where applicable. |
| Contact Data | Email address, mobile telephone number, residential address (for KYC verification and correspondence purposes). |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history, deposit and withdrawal records in MYR. |
| Account Data | Username, account balance, gameplay history, betting records, bonus usage, loyalty tier status, and session activity logs. |
| Technical Data | IP address, device type and operating system, browser type and version, session timestamps, referring URLs, and cookies. |
| Communications Data | Records of live chat sessions, email correspondence, and any information voluntarily provided to the W888 support team. |
| KYC Verification Data | Copies of government-issued identity documents, proof of address documents, and where applicable, source of funds documentation. |
W888 does not knowingly collect sensitive personal data (such as racial or ethnic origin, health data, or political opinions) except where strictly required for responsible gambling assessments or compliance with a specific legal obligation.
How Data Is Collected
W888 collects personal data through the following channels:
Data provided directly by you at the time of account registration, during the KYC verification process, when making deposits or withdrawals, when contacting customer support, or when participating in promotions and surveys.
As you interact with the Platform, W888 automatically collects technical data through cookies, server log files, and similar tracking technologies. This includes your IP address, device characteristics, session duration, pages visited, and game activity. This data is used for security monitoring, fraud detection, and service improvement.
W888 may receive data about you from third-party identity verification service providers engaged for KYC purposes, payment processors (such as FPX, DuitNow, and partner banks), and fraud prevention services. Data received from such sources is processed in accordance with the terms of our agreements with those service providers and the applicable provisions of this Policy.
Data Processing
W888 processes your personal data for the following specific purposes:
- Account Administration: Creating, managing, and maintaining your W888 account, including processing your registration, verifying your identity, and updating your account details.
- Service Delivery: Enabling you to access and use the Platform's gaming and betting services, process deposits and withdrawals, and participate in promotional programmes.
- Legal & Regulatory Compliance: Fulfilling obligations under applicable gaming licence conditions, anti-money laundering regulations, and age verification requirements. W888 is required by its gaming licence to maintain transaction records and verify player identities.
- Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the Platform.
- Responsible Gambling: Monitoring player behaviour to identify indicators of problematic gambling patterns, and facilitating the application of responsible gambling tools such as deposit limits, session reminders, and self-exclusion.
- Customer Support: Responding to your enquiries, resolving disputes, and providing assistance through live chat and email support channels.
- Service Improvement: Analysing aggregated usage data to improve Platform performance, user experience, game selection, and the relevance of promotional content.
- Marketing Communications: Sending you promotional offers, loyalty programme updates, and platform notifications — only where you have provided explicit consent, and always with a clear opt-out mechanism.
Lawful Basis for Processing
W888 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity involved:
- Contractual Necessity: Processing is necessary for the performance of our Terms & Conditions agreement with you — for example, processing deposits, settling bets, and administering your account.
- Legal Obligation: Processing is required to comply with applicable laws and gaming licence conditions — for example, KYC identity verification and anti-money laundering record-keeping.
- Legitimate Interests: Processing is necessary for W888's legitimate business interests — for example, fraud detection, security monitoring, and service improvement analytics — where such interests are not overridden by your rights and interests.
- Consent: Processing is based on your freely given, specific, and informed consent — for example, receiving optional marketing communications. You may withdraw consent at any time by contacting W888 support.
Data Sharing & Disclosure
W888 does not sell, rent, or disclose your personal data to third parties for their independent commercial or marketing purposes. Personal data may be shared with third parties only in the following specific circumstances:
- Service Providers & Data Processors: W888 engages third-party service providers to perform functions on its behalf, including payment processing (Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, e-wallet operators), KYC and identity verification, fraud prevention, customer support software, and platform technology infrastructure. Such providers are contractually bound to process data only for specified purposes and in accordance with W888's instructions.
- Regulatory & Legal Authorities: W888 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other illegal activity.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of W888's business, personal data held by W888 may be transferred to the acquiring entity as part of the transaction, subject to the acquirer assuming equivalent data protection obligations.
- With Your Consent: W888 may share your data with specific third parties where you have provided explicit, informed consent to such sharing.
No Data Sales: W888 has never sold and will never sell personal data to third-party data brokers, advertisers, or marketing agencies. Your data is not a commercial commodity on this Platform.
Data Retention
W888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:
- Active Account Data: Personal data associated with active accounts is retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
- Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven (7) years in compliance with applicable financial record-keeping obligations.
- KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
- Communications Data: Customer support correspondence is retained for up to three (3) years from the date of the interaction, unless the subject matter requires longer retention for dispute resolution or legal purposes.
- Technical & Log Data: Server logs and session data are typically retained for up to twelve (12) months for security and fraud monitoring purposes, and deleted thereafter.
Where retention is no longer necessary or legally required, W888 will securely delete or anonymise your personal data in accordance with its data lifecycle management procedures.
Data Security
W888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following measures:
- 256-Bit SSL Encryption: All data transmitted between your device and the W888 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols — the same standard used by major Malaysian financial institutions including Maybank and CIMB.
- Access Controls: Access to personal data within W888's systems is strictly controlled on a need-to-know basis. Staff members are granted access only to the data necessary for their specific role and are subject to confidentiality obligations.
- Two-Factor Authentication (2FA): Players may enable 2FA on their W888 accounts to add an additional layer of protection against unauthorised login attempts.
- Secure Data Storage: Personal data is stored on secure, access-controlled servers. Physical and logical security controls are implemented to prevent unauthorised data centre access.
- Regular Security Assessments: W888 conducts periodic security reviews and vulnerability assessments to identify and address potential security risks in a timely manner.
Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. Players are encouraged to maintain the security of their own account credentials and to notify W888 immediately if they suspect any unauthorised access to their account.
Your Rights
As a Data Subject, you hold the following rights in respect of your personal data processed by W888. To exercise any of these rights, please contact W888's support team via live chat or at [email protected]. W888 will respond to valid requests within thirty (30) days.
Right of Access
You may request a copy of the personal data W888 holds about you, together with information about how it is being processed.
Right to Rectification
If any personal data W888 holds about you is inaccurate or incomplete, you may request that it be corrected without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the original purpose, subject to legal retention obligations.
Right to Restriction
In certain circumstances, you may request that W888 restrict the processing of your personal data while a dispute or objection is being resolved.
Right to Data Portability
Where processing is based on consent or contract, you may request a copy of your personal data in a structured, machine-readable format.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
How to exercise your rights: Submit your request via live chat on the W888 Platform or email [email protected] with the subject line "Data Rights Request". Please include your registered account email address and a description of your request. W888 may need to verify your identity before processing the request.
Cookies & Tracking Technologies
The W888 Platform uses cookies and similar tracking technologies to deliver a secure, personalised, and functional user experience. The following types of cookies are used:
- Strictly Necessary Cookies: Essential for the Platform to function. These cookies maintain your session state, authentication status, and security tokens. They cannot be disabled without impairing your ability to use the Platform.
- Functional Cookies: Remember your preferences and settings (such as language and display preferences) to enhance your experience across sessions.
- Analytics Cookies: Collect anonymised data about how visitors use the Platform — pages visited, time on site, error occurrences — to help W888 improve performance and usability.
- Security Cookies: Used for fraud detection and prevention, helping W888 identify suspicious access patterns or account activity anomalies.
You may control cookie preferences through your browser settings. Disabling certain categories of cookies may affect Platform functionality. W888 does not use third-party advertising cookies or serve targeted advertising based on your personal data.
Minors & Age Restriction
The W888 Platform is strictly intended for adults aged 21 years and above. W888 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory component of the W888 KYC process.
If W888 becomes aware that personal data has been collected from an individual under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Where you believe that a minor may have registered on the Platform, please contact W888 support immediately at [email protected].
Age Verification: W888 uses identity document verification to confirm the age of all Players prior to approving withdrawals. Any account where age verification cannot be satisfactorily completed will be restricted and may be permanently closed.
Changes to This Policy
W888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or gaming licence requirements. Material changes to this Policy will be communicated to registered Players via email notification or a prominent notice on the Platform, with a minimum of seven (7) days' advance notice where reasonably practicable.
The date of the most recent revision is displayed prominently at the top of this page. W888 recommends that Players review this Policy periodically. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
Where you do not accept an amended Policy, you may exercise your right to withdraw consent and request account closure by contacting W888 support.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by W888, please contact our support team using one of the following channels. Our team is available 24 hours a day, 7 days a week.
Available 24/7 directly through the W888 Platform. Typical response: within 1 hour.
Please include your registered account email address and a clear description of your request or concern when contacting us. For data rights requests, W888 may require identity verification before processing the request to ensure the security of your personal data.
Privacy at a Glance
How W888 Protects Your Data
Every data exchange between your device and the W888 Platform is protected by bank-grade 256-bit SSL encryption — the same standard trusted by Maybank and CIMB for online banking security.
W888 does not sell your personal data to advertisers, data brokers, or any third party for marketing purposes. Your information is used exclusively to operate and improve the W888 Platform.
Access, rectify, port, or delete your personal data at any time. W888 processes all valid data rights requests within 30 days — no unnecessary delays, no runarounds.
Identity documents submitted for age and KYC verification are stored on secured, access-controlled systems and retained only for the minimum period required by applicable gaming licence obligations.
W888 uses only functional and security-essential cookies. We do not serve targeted advertising and do not use third-party advertising trackers. Cookie preferences can be managed through your browser settings.
W888 retains your data only as long as operationally necessary or legally required. Financial transaction records are retained for 7 years per applicable law. All other data is securely deleted or anonymised after its retention period expires.
Play with Confidence
Your Privacy is Protected on W888
W888 is built on a foundation of transparency, security, and player trust. From DuitNow deposits to EPL live betting, every interaction on the Platform is protected by bank-grade encryption and governed by a privacy framework that puts your data rights first.