Privacy Policy
— we88my Platform

1Introduction

we88my ("we88my", "the Platform", "we", "us", "our") is committed to protecting the personal data and privacy of all individuals who access, register with, or otherwise interact with the we88my online casino and sports betting platform, accessible at https://we88my.cam (the "Site").

This Privacy Policy ("Policy") sets out in full the manner in which we88my collects, stores, uses, shares, and protects personal data submitted by Users in connection with their use of the Platform. It also describes the rights available to Users as data subjects and the mechanisms by which those rights may be exercised.

This Policy should be read alongside the we88my Terms & Conditions, which govern the broader contractual relationship between the Platform and its registered Users. By accessing the Site, creating an account, or submitting any personal data to we88my, you confirm your acknowledgement of and agreement to the practices described in this Policy.

2Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

3Personal Data We Collect

we88my collects the following categories of Personal Data from Users in the course of operating the Platform:

3.1 Registration & Account Data

• Full legal name as shown on your government-issued Malaysian identity document (MyKad, Passport, or Driver's Licence).
• Date of birth (used to verify that you satisfy the minimum age requirement of 21 years).
• Residential address, including postcode and city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).
• Email address and mobile telephone number used for account communication and two-factor authentication.
• Username and encrypted password credentials.
• Security questions and answers, where optionally configured.

3.2 Identity Verification (KYC) Data

• Scanned copies or photographs of government-issued identity documents including Malaysian MyKad (front and back), Passport photo page, or Driver's Licence.
• Proof of residential address — utility bill, bank statement, or official government correspondence dated within three (3) months of submission.
• Selfie or live photograph taken during biometric face-match verification against submitted identity documents.
• Documentation confirming ownership of payment methods (e.g., screenshots of Touch 'n Go eWallet, Boost, or Maybank account registered to the same name).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amount, method, timestamp, and transaction reference.
• Payment method identifiers — masked card numbers, e-wallet account references, bank account numbers, or cryptocurrency wallet addresses.
• Bonus and promotional credit records, including wagering activity associated with bonus completion.
• Account balance history and statement data.

3.4 Usage & Behavioural Data

• Game participation records — titles played, bet amounts, session duration, win/loss outcomes.
• Sports betting history — markets bet upon (including Liga Super Malaysia, EPL, UFC, and other events), odds accepted, and settlement outcomes.
• Login timestamps, session durations, and logout records.
• Responsible gambling tool usage — deposit limit settings, self-exclusion requests, cooling-off period activations.

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP data.
• Device type, operating system, browser type and version.
• Cookie identifiers and session tokens.
• Referral URL and navigation path data within the Site.

3.6 Communications Data

• Records of all live chat, email, and WhatsApp communications between You and the we88my support team, including the content of those communications and their timestamps.
• Dispute and complaint records, including any documentation submitted in connection with a formal grievance.

4How We Collect Your Data

we88my collects Personal Data through the following mechanisms:

• Direct submission — data you actively provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technical collection — data gathered automatically when you access the Site, including via cookies, server logs, and device fingerprinting technologies.
• Third-party verification services — identity and document verification data processed by our contracted KYC service providers, who return verification results to we88my.
• Payment processors — transaction confirmation data returned to we88my by payment service providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency processing partners upon completion of deposit or withdrawal instructions.
• Fraud and compliance screening — data obtained from third-party fraud detection, anti-money-laundering screening, and sanctions list checking services as part of our regulatory compliance obligations.

5Purposes of Processing

we88my processes your Personal Data for the following specific, legitimate purposes:

6Legal Basis for Processing

we88my processes Personal Data on the following legal bases:

• Contractual necessity — processing that is necessary for the performance of the Terms & Conditions contract between we88my and the User, including account creation, deposit processing, game participation, and withdrawal execution.
• Legal obligation — processing required to comply with applicable anti-money-laundering legislation, age verification obligations, data retention mandates, and responses to lawful requests from competent regulatory or law enforcement authorities.
• Legitimate interests — processing conducted in the pursuit of we88my's legitimate business interests in fraud prevention, platform security, and service improvement, where those interests are not overridden by the fundamental rights and freedoms of the data subject.
• Consent — processing for the purposes of sending direct marketing communications and optional analytics, where the User has provided explicit, freely given consent. Consent may be withdrawn at any time without detriment to other aspects of the User's account.

7Data Sharing & Disclosure

we88my does not sell, rent, or commercially disclose Personal Data to third-party advertisers, data brokers, or unaffiliated commercial entities. Personal Data is shared with third parties only in the following circumstances:

• Payment Service Providers: Personal Data necessary to process deposits and withdrawals is shared with the relevant payment service providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected Malaysian banks (Maybank, CIMB, Public Bank, RHB, Hong Leong), and cryptocurrency processing partners — solely for the purpose of completing the instructed transaction.
• KYC & Identity Verification Vendors: Identity documents and verification selfies are transmitted to contracted third-party KYC service providers for the sole purpose of identity verification. These providers are contractually bound to process data solely for this purpose and to maintain equivalent data security standards.
• Fraud Detection & AML Screening Services: Limited data points may be passed to third-party fraud screening and anti-money-laundering tools to assess transaction risk and screen against sanctions lists, in compliance with regulatory obligations.
• Game Software Providers: Gameplay session data may be shared with the game software providers whose titles are hosted on the we88my Platform in connection with game operation, dispute resolution, and RNG certification audits.
• Infrastructure & Hosting Providers: Personal Data is stored on servers operated by contracted cloud infrastructure providers who process data solely as data processors acting on we88my's instructions under binding data processing agreements.
• Legal & Regulatory Authorities: Personal Data may be disclosed to competent governmental, regulatory, or law enforcement authorities where we88my is under a legal obligation to do so, or where such disclosure is necessary to protect the rights, safety, or property of we88my, its Users, or the general public.

8Cookies & Tracking Technologies

we88my uses cookies and similar tracking technologies on the Site for the following purposes. You may manage cookie preferences through your browser settings, though disabling certain cookies may impair the functionality of the Platform.

9Data Retention

we88my retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to satisfy applicable legal or regulatory retention obligations. The following general retention periods apply:

• Account and KYC data — retained for the duration of the active Player Account and for a minimum period of five (5) years following account closure, in compliance with standard anti-money-laundering record-keeping requirements.
• Transaction records — financial transaction logs are retained for a minimum of five (5) years from the date of the transaction, or longer where required by applicable law.
• Communications records — support chat and email records are retained for a period of two (2) years from the date of the most recent communication, unless the matter is subject to an ongoing dispute or investigation.
• Marketing consent records — records of marketing opt-in consents and opt-out requests are retained for the duration of the User's account and for a minimum of two (2) years following account closure, as evidence of consent status.
• Technical and device data — server log and IP address data is typically retained for a period of ninety (90) days unless required for a longer period in connection with a security incident or fraud investigation.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that renders it irrecoverable and no longer attributable to the original data subject.

10Data Security

we88my implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmitted between Users' devices and we88my's servers, ensuring that data in transit cannot be intercepted by third parties.
• Encryption at rest applied to all databases containing Personal Data, including KYC documentation stores and financial transaction records.
• Role-based access controls limiting internal staff access to Personal Data on a strict need-to-know basis, with comprehensive access audit logging.
• Two-factor authentication (2FA) available to all registered Users as an additional account security layer, strongly recommended for accounts with active balances.
• Regular third-party penetration testing and security audits of Platform infrastructure.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity patterns for human review.

11Your Rights as a Data Subject

As a User whose Personal Data is processed by we88my, you hold the following rights in relation to your data. To exercise any of these rights, please contact the we88my Data Privacy team at [email protected] with the subject line "Data Rights Request":

we88my will respond to all verified data rights requests within thirty (30) days of receipt. Complex or high-volume requests may require an extension of up to a further sixty (60) days, in which case you will be notified of the extended timeline and the reasons for it.

12Third-Party Links

The we88my Platform does not contain links to third-party websites for commercial or advertising purposes. Any links to third-party payment gateways or verification services that appear in the course of deposit, withdrawal, or KYC processes are strictly functional in nature and are necessary for the completion of the relevant transaction or verification process.

we88my is not responsible for the privacy practices of any third-party services to which Users may be directed in the course of completing a deposit, withdrawal, or KYC submission. Users are encouraged to review the privacy policies of those third-party services independently before submitting personal data through their interfaces.

13Children & Minors

we88my does not knowingly collect Personal Data from any individual under the age of 21 years. The Platform is strictly intended for adults aged 21 and above. Age verification is a mandatory step in the account registration and KYC process.

If we88my becomes aware that Personal Data has been submitted by a person under the age of 21 — whether through a fraudulent registration or otherwise — we88my will promptly close the relevant account, delete the associated Personal Data to the extent permitted by applicable law, and take any other steps necessary to address the underage access.

14Policy Amendments

we88my reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — meaning they significantly change how your Personal Data is collected, used, or shared — we88my will notify registered Users via a notice posted on the Platform and, where practicable, via email to the registered account address.

The "Last Updated" date displayed at the top of this page will be revised each time the Policy is amended. We encourage Users to review this Policy periodically to remain informed of how we88my is managing their Personal Data. Continued use of the Platform following any amendment constitutes acknowledgement of the updated Policy.

15Contact Us

For all privacy-related enquiries, data rights requests, or concerns regarding the processing of your Personal Data by we88my, please contact our Data Privacy team using the details below. Please include your full name, registered email address, and a clear description of your request or concern to facilitate a prompt response.

we88my is committed to resolving all privacy-related enquiries transparently and within the timelines stated above. If you are not satisfied with our response to a data rights request, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.