wau88 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") is issued by wau88 ("wau88," "we," "us," or "our") and applies to all personal data collected through the wau88 Platform accessible at wau88.app, including all associated services, features, and communications.

1.2 By registering an Account on the wau88 Platform, placing any Wager, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and disclosure of your personal data as described herein.

1.3 This Policy should be read alongside the wau88 Terms & Conditions. Capitalised terms not defined in this Policy carry the meaning assigned to them in the Terms & Conditions.

2. Data Controller

2.1 wau88 is the data controller responsible for personal data collected through the Platform. For all data-related enquiries, you may contact us via live chat (available 24/7 on the Platform) or by email at: [email protected].

3. Personal Data We Collect

3.1 wau88 collects the following categories of personal data:

Category	Examples	When Collected
Identity Data	Full name, date of birth, identity document number (MyKad / passport), nationality	Registration; identity verification
Contact Data	Mobile number (+60 format), email address	Registration
Financial Data	Deposit / withdrawal transaction records, payment method identifiers (e.g., Touch 'n Go account reference), MYR wallet balance history	Each transaction
Technical Data	IP address, device type, browser type and version, operating system, session tokens, login timestamps	Each Platform session
Usage Data	Games played, Wagers placed, bet amounts, game session durations, feature interactions	During Platform use
Communications Data	Support chat transcripts, emails and messages exchanged with wau88	When you contact support
Responsible Gaming Data	Deposit limits set, self-exclusion status, cooling-off periods	When tools are activated

3.2 wau88 does not collect sensitive personal data such as biometric data, medical records, or political opinions, except where expressly required to satisfy an applicable legal or regulatory obligation.

4. How We Collect Personal Data

4.1 wau88 collects personal data through the following means:

• Direct interaction: Information you provide when registering an Account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically as you navigate and interact with the Platform, including through cookies, session identifiers, and server logs.
• Third-party verification: Identity and fraud-screening data received from identity verification service providers engaged by wau88 to satisfy its know-your-customer ("KYC") and anti-money laundering ("AML") obligations.
• Payment processors: Transaction confirmation data received from payment processors facilitating your deposits and withdrawals (e.g., FPX, DuitNow).

5. Purpose and Legal Basis for Processing

5.1 wau88 processes personal data for the following purposes and on the following legal bases:

Purpose	Legal Basis
Account registration and management	Performance of contract (account agreement)
Processing deposits and withdrawals	Performance of contract; legal obligation (AML/KYC)
Identity and age verification (21+)	Legal obligation; legitimate interest (fraud prevention)
Detecting and preventing fraud, money laundering, and prohibited conduct	Legal obligation; legitimate interest
Responsible gaming monitoring and intervention	Legal obligation; legitimate interest (player protection)
Customer support	Performance of contract; legitimate interest
Platform improvement and analytics	Legitimate interest
Marketing communications (where opted in)	Consent

6. Data Sharing and Disclosure

6.1 wau88 does not sell, rent, or exchange personal data with third parties for those parties' own commercial purposes.

6.2 wau88 shares personal data with third parties only in the following circumstances:

• Service providers: Identity verification providers, payment processors, fraud detection vendors, IT infrastructure providers, and customer support tool providers engaged by wau88 to deliver Platform services. These parties are contractually bound to process data only for the purposes specified by wau88 and to apply appropriate security measures.
• Game providers: Certified game studios whose titles are hosted on the Platform. Data shared is limited to session identifiers, Wager amounts, and game outcomes necessary to operate the game.
• Regulatory and legal authorities: Where required by applicable law, court order, or regulatory authority instruction, including anti-money laundering reporting obligations.
• Business transfers: In the event of a merger, acquisition, or asset sale, Member data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

7. Cookies and Tracking Technologies

7.1 The wau88 Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain login sessions, detect fraud, and analyse usage patterns.

7.2 The following categories of cookies are used:

• Strictly necessary cookies: Required for Platform functionality, including session management and security. These cannot be disabled without impairing Platform operation.
• Analytics cookies: Used to understand aggregate usage patterns and improve Platform performance. Data collected is anonymised or pseudonymised.
• Preference cookies: Store non-sensitive Member preferences such as language and display settings.

7.3 Most browsers allow you to control cookie settings. Note that disabling strictly necessary cookies will affect Platform functionality. wau88 does not use third-party advertising cookies or track Members across unrelated third-party websites.

8. Data Retention

8.1 wau88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, and accounting requirements. The following general retention periods apply:

• Account and transaction records: Retained for a minimum of seven (7) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for the duration of account operation plus seven (7) years.
• Customer support communications: Retained for three (3) years from the date of the relevant interaction.
• Technical and usage data: Retained for up to twenty-four (24) months, after which it is anonymised or deleted.

8.2 Where a Member requests account closure and deletion, wau88 will delete or anonymise personal data subject to the retention obligations set out above.

9. Data Security

9.1 wau88 implements technical and organisational measures appropriate to the risk presented by the processing of Member personal data. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between the Member's browser and the Platform;
• Encryption-at-rest for databases containing personal and financial data;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Multi-factor authentication for administrative access to production systems;
• Regular security assessments and penetration testing by independent security professionals;
• Incident response procedures for managing potential data breaches, including notification obligations where required by applicable law.

9.2 Members are responsible for maintaining the security of their own login credentials. wau88 recommends enabling two-factor authentication and using a unique, strong password for the wau88 account.

10. Your Data Rights

10.1 Subject to applicable law, Members have the following rights in respect of their personal data held by wau88:

• Right of access: You may request a copy of the personal data wau88 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where retention is no longer necessary, subject to legal retention obligations.
• Right to restriction: You may request that wau88 restrict the processing of your personal data in certain circumstances.
• Right to data portability: You may request that wau88 provide your personal data in a structured, machine-readable format for transfer to another controller.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, please contact wau88 customer support via live chat or by email at: [email protected]. wau88 will respond to verified requests within thirty (30) calendar days.

10.3 wau88 may need to verify your identity before acting on a data rights request to protect against unauthorised disclosure or deletion of personal data.

11. International Data Transfers

11.1 The wau88 Platform is operated by an entity licensed under international gaming authority standards. Personal data may be processed or stored on servers located outside Malaysia. Where personal data is transferred internationally, wau88 ensures that appropriate safeguards are in place — including contractual protections equivalent to those required under applicable data protection law — to protect the data during and after transfer.

12. Children's Privacy

12.1 The wau88 Platform is strictly intended for adults aged 21 years and above. wau88 does not knowingly collect personal data from individuals under the age of 21. Where wau88 identifies that data has been collected from an underage individual, such data will be deleted immediately and the associated Account closed in accordance with the Terms & Conditions. If you have reason to believe a minor has registered a wau88 Account, please contact support immediately.

13. Third-Party Links

13.1 The Platform does not contain links to third-party websites for commercial or advertising purposes. Where links to internal policy pages or other wau88 pages appear on the Platform, they do not involve transfer of personal data to external parties. wau88 is not responsible for the privacy practices of any third-party service whose data wau88 receives solely for verification or payment processing purposes.

14. Changes to This Privacy Policy

14.1 wau88 may update this Privacy Policy from time to time to reflect changes in Platform practices, applicable law, or regulatory requirements. The effective date of the current version is displayed at the top of this page. Where changes materially affect Member rights, wau88 will provide reasonable notice via the Platform prior to the changes taking effect. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.

15. Contact

15.1 For any queries, concerns, or requests relating to this Privacy Policy or wau88's data practices, please contact the wau88 data team via:

• Live chat: Available 24/7 on all pages of the Platform (average response time under 3 minutes).
• Email: [email protected] — responses within 24 hours during business days.

15.2 If you believe wau88 has not adequately addressed your privacy concern, you may escalate the matter to the relevant data protection authority or gaming regulatory body under whose jurisdiction wau88 operates.