Privacy
Policy

This Privacy Policy ("Policy") describes how we88myr ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data provided by or gathered about users ("you", "User", "Player") in connection with your use of the we88myr platform at https://we88myr.cam and all associated services.

we88myr is operated under international online gaming licensing. We provide online casino, sports betting, and gaming entertainment services to eligible users in Malaysia and other permitted jurisdictions. As part of delivering those services, we necessarily process personal data, and we take that responsibility seriously.

This Policy is incorporated by reference into our Terms & Conditions. By registering an account on we88myr or by using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

we88myr collects the following categories of personal data, depending on the nature of your interaction with the Platform:

We collect personal data through the following channels and mechanisms:

• Direct submission: When you complete the account registration form, submit KYC documents, initiate a deposit or withdrawal, contact support, or participate in any promotional activity requiring data input.
• Automated technical collection: When you access the Platform, our servers and analytics tools automatically record technical and usage data such as your IP address, device identifiers, and browsing behaviour within the Platform.
• Cookies and tracking technologies: Session cookies, preference cookies, and analytics trackers collect behavioural and technical data during your visits. Please refer to the Cookies section of this Policy for further detail.
• Payment providers: When you process a transaction via Touch 'n Go eWallet, DuitNow, Boost, FPX, or any other supported payment method, your payment provider may share transaction reference data with us for reconciliation purposes.
• Third-party KYC and fraud screening services: We may receive supplementary identity verification data from independent KYC service providers engaged to verify the authenticity of documents submitted during the KYC process.
• Inferred data: We may derive certain data points — such as inferred location from IP address or preferred sports markets based on betting history — from data you have already provided or from your Platform activity.

we88myr processes your personal data for the following specific, legitimate, and disclosed purposes:

• Account creation and management: To register your account, maintain your profile, and provide you with access to the Platform and its features.
• Identity and age verification (KYC): To confirm that you are who you claim to be and that you meet the minimum age requirement of 21 years. KYC is a legal obligation under international gaming licensing requirements.
• Transaction processing: To process deposits via methods such as Touch 'n Go eWallet, Maybank, CIMB, DuitNow, FPX, and cryptocurrency; and to process withdrawal requests back to verified accounts.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, money laundering, bonus abuse, and other prohibited activities.
• Regulatory compliance: To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations imposed by our international gaming licence.
• Customer support: To respond to your queries, complaints, and support requests submitted via live chat or email.
• Service improvement: To analyse usage patterns, identify technical issues, and develop improvements to the Platform based on aggregated, anonymised data insights.
• Responsible gambling: To monitor betting behaviour for indicators of problem gambling, to deliver responsible gambling tools, and to process self-exclusion requests effectively.
• Marketing communications: Where you have provided consent, to send you promotional offers, bonus notifications, and relevant Platform updates. You may withdraw consent at any time through your account settings.
• Legal proceedings: To establish, exercise, or defend legal claims in the event of a dispute.

We process your personal data on one or more of the following legal bases, as applicable to each purpose:

• Contractual necessity: Processing required to perform the contract between you and we88myr — specifically, the delivery of the gaming and betting services you have registered to use.
• Legal obligation: Processing required to comply with our obligations under applicable gaming regulations, AML laws, and KYC requirements imposed by our licensing authority.
• Legitimate interests: Processing conducted for purposes such as fraud prevention, platform security, and service improvement, where our legitimate interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit, informed consent prior to processing.

we88myr does not sell, rent, or commercially trade your personal data to any third party. We may share your personal data with the following categories of recipients, solely to the extent necessary to fulfil the purposes described in this Policy:

All third-party Data Processors engaged by we88myr are required to process personal data only on our documented instructions, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection obligations.

we88myr collects and processes limited financial data — such as e-wallet identifiers, bank account numbers, and cryptocurrency wallet addresses — for the sole purpose of executing deposit and withdrawal transactions. Full payment card details (if applicable) are processed exclusively by our PCI-DSS compliant payment gateway partners and are not stored on we88myr servers.

When you deposit or withdraw via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX-linked bank accounts (Maybank, CIMB, Public Bank, Hong Leong), the respective payment provider's own privacy policy also applies to the data you share with them directly during the transaction process.

For cryptocurrency transactions (BTC, ETH, USDT, BNB), wallet address information is stored for transaction reconciliation, AML record-keeping, and to facilitate future withdrawals back to a verified wallet. Cryptocurrency transactions are inherently recorded on public blockchains — this is a property of the technology and is outside we88myr's control.

we88myr uses cookies and similar tracking technologies to operate the Platform effectively, improve your experience, and gather analytics data. The categories of cookies we use are described below:

You can manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may impair the functionality of the Platform. Please note that we do not respond to browser-level "Do Not Track" signals at this time, as no universally agreed standard exists for their interpretation.

we88myr retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required to comply with legal, regulatory, and contractual obligations. Our key retention periods are as follows:

• Active account data: Retained for the duration of the account relationship, plus a minimum of five (5) years following account closure, to satisfy AML and gaming regulatory record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or from account closure, whichever is later, in compliance with AML obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for a period of three (3) years from the date of the last communication, unless the matter is subject to a live legal dispute, in which case records are retained until the matter is resolved.
• Marketing preference data: Retained until you withdraw your consent or for a maximum of three (3) years from the date of your last interaction with a marketing communication, whichever is earlier.
• Technical and usage data: Aggregated analytics data is typically retained for up to two (2) years; raw logs are retained for a shorter period as required for security monitoring.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised using procedures that prevent re-identification.

we88myr implements comprehensive technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial identifiers.
• Bcrypt or equivalent cryptographic hashing for all stored user passwords — we cannot retrieve plaintext passwords.
• Two-factor authentication (2FA) available to all registered users and mandated for privileged internal access.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel who require it for their specific job function.
• Regular internal security audits, penetration testing by independent security professionals, and continuous monitoring for anomalous access patterns.
• Incident response procedures that include mandatory breach notification protocols in the event of a data security incident affecting user rights and freedoms.

Subject to applicable law and certain exceptions noted below, you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please contact us via live chat inside your account dashboard or by emailing [email protected]. We will respond to verified requests within a reasonable timeframe, typically within thirty (30) calendar days. We may ask you to verify your identity before processing your request.

we88myr strictly prohibits access by individuals under the age of 21. The Platform is designed and operated exclusively for adults aged 21 and above. We do not knowingly collect or process personal data belonging to minors.

Where we discover or are notified that personal data has been submitted by a person under 21 years of age — including through account registration or a KYC submission — we will immediately suspend the relevant account, delete the associated personal data to the extent permitted by legal obligations, and take all reasonably practicable steps to ensure no minor retains access to the Platform.

If you believe that a person under the age of 21 has registered an account or submitted personal data to we88myr, please notify us immediately at [email protected].

we88myr operates internationally and engages service providers located in multiple countries. As a result, your personal data may be transferred to, stored in, and processed in countries outside Malaysia. These countries may have data protection laws that differ from those applicable in your country of residence.

Where personal data is transferred outside the country of collection, we implement appropriate safeguards to protect your data, which may include:

• Standard contractual clauses providing data protection obligations on the receiving party.
• Binding corporate rules where applicable to transfers within our corporate group.
• Adequacy decisions or equivalent recognition by the relevant supervisory authority.
• Explicit consent, where no other transfer mechanism is available and you have been fully informed of the risks.

By using the we88myr Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia as described in this section.

we88myr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify registered users by posting a prominent notice on the Platform and, where appropriate, by sending a notification to the email address associated with your account.

The "Last Reviewed" date at the top of this Policy indicates when the most recent review was completed. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the changes. We encourage you to periodically review this Policy to stay informed of how we handle your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, or if you wish to exercise any of your data rights, please contact the we88myr Data & Privacy team through the following channels:

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. we88myr is committed to cooperating with supervisory authorities and to resolving data protection complaints fairly.