Privacy Policy

Wins88 ("Wins88", "we", "us", "our") operates the online casino and sports betting platform accessible at wins88.cam. We are committed to protecting and respecting the privacy of every individual who accesses or uses our Platform. This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal data in connection with your use of the Wins88 Platform and any related services.

This Policy applies to all users of the Wins88 Platform, including registered Players and visitors, regardless of location. It is particularly relevant to players based in Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of the country.

By accessing the Platform, registering an Account, or using any of our services, you acknowledge that you have read, understood, and consent to the practices described in this Policy. If you do not agree to this Policy, you must cease use of the Platform immediately.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall use of the Wins88 Platform and are incorporated herein by reference.

For the purposes of this Privacy Policy, the following definitions apply:

Wins88 collects and processes the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Contact Data

• Full legal name (as it appears on your MyKad or passport)
• Date of birth (to verify the 21+ age requirement)
• Malaysian identity document number (MyKad) or passport number
• Email address
• Mobile phone number
• Residential address

3.2 Financial & Payment Data

• Payment method details (e.g., the registered name and identifier associated with your Touch 'n Go eWallet, Boost eWallet, GrabPay, DuitNow, FPX bank account, or USDT wallet address)
• Transaction history — deposits, withdrawals, and bonus activity on the Platform
• Account balance and wagering activity records

3.3 Technical & Usage Data

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Login timestamps, session duration, and pages visited
• Game and betting activity logs
• Referral source (how you found Wins88)

3.4 KYC Verification Documents

• Scanned or photographed copies of government-issued photo ID (MyKad front and back, or passport bio page)
• Selfie photographs submitted for identity confirmation
• Proof of payment method documents where requested

3.5 Communications Data

• Records of live chat conversations and email correspondence with our support team
• Survey responses, feedback submissions, and promotion participation records

Wins88 collects personal data through the following means:

1. Direct Provision: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
2. Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and session tracking technologies.
3. Payment Processors: Confirmation data received from payment service providers (such as Touch 'n Go, Boost, DuitNow, FPX network banks including Maybank, CIMB, Public Bank, and Hong Leong Bank) when you conduct financial transactions on the Platform.
4. Identity Verification Partners: Where we engage a third-party KYC verification service to confirm the authenticity of identity documents, confirmation results may be shared with Wins88.
5. Third-Party Analytics: Aggregate and anonymised behavioural data from analytics providers to help us understand how the Platform is used and identify areas for improvement.

Wins88 processes your personal data only for specific, legitimate purposes. The following table sets out the primary purposes for which your data is used:

Wins88 processes personal data only where a valid legal basis exists. The legal bases on which we rely include:

1. Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and game access.
2. Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and any regulatory reporting duties.
3. Legitimate Interests: Processing necessary for Wins88's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your data protection rights.
4. Consent: Where you have provided explicit consent — for example, to receive promotional communications via email or SMS. You may withdraw consent at any time by contacting our support team or updating your account preferences.

Wins88 does not sell, rent, or transfer your personal data to unaffiliated third parties for their own marketing purposes. We may share your data with the following categories of parties, and only to the extent necessary:

• Payment Service Providers: Data shared with your chosen payment provider (e.g., Touch 'n Go, Boost, DuitNow, FPX-connected banks such as Maybank, CIMB, Public Bank, or Hong Leong Bank) to process transactions.
• KYC and Identity Verification Partners: Where a third-party specialist is engaged to verify your identity documents.
• Game Software Providers: Game providers integrated into the Platform may receive session-level technical data required to deliver gameplay. Game providers are contractually prohibited from using this data for any purpose other than service delivery.
• Fraud Prevention and AML Services: Data may be shared with compliance and fraud detection specialists where suspicious activity is identified or where regulatory obligations require reporting.
• Regulatory and Law Enforcement Authorities: Wins88 may disclose personal data to competent authorities where required to do so by law, court order, or in connection with legal proceedings.
• Corporate Transactions: In the event of a merger, acquisition, or sale of Wins88's business or assets, personal data may be transferred to the relevant acquirer, subject to equivalent data protection obligations.

Wins88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard data retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for statistical and analytical purposes.

The Wins88 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, remember your preferences, and gather usage analytics. Cookies do not contain your financial credentials or KYC documents.

Types of Cookies We Use

• Strictly Necessary Cookies: Required for core Platform functionality, including session management, login state, and security. These cannot be disabled without impairing your use of the Platform.
• Functional Cookies: Allow the Platform to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Analytics Cookies: Collect aggregate and anonymised data on how players use the Platform — which pages are visited most, where users drop off, and how features are used. This information helps us improve the Platform.
• Marketing Cookies: Used to track the effectiveness of promotional campaigns and referral sources, where you have provided consent. These cookies do not share your data with third-party advertisers.

You may control cookie settings through your browser preferences. Note that disabling certain cookies may affect your ability to use some features of the Platform. Strictly necessary cookies cannot be disabled through browser settings as they are essential to Platform operation.

Wins88 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Wins88 Platform is encrypted in transit using industry-standard SSL/TLS technology.
• Data Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is encrypted when stored on our servers.
• Two-Factor Authentication (2FA): Available to all Players to add an additional layer of security to their Accounts beyond the password.
• Access Controls: Wins88 staff access to personal data is restricted on a strict need-to-know basis, with access logs maintained for audit purposes.
• Regular Security Audits: The Platform undergoes periodic security assessments and penetration testing by qualified third-party specialists.
• Incident Response: Wins88 maintains a data breach response procedure. In the event of a breach affecting your rights and freedoms, affected Players will be notified in accordance with applicable law.

While Wins88 takes all reasonable precautions, no system is entirely immune to risk. Players are also responsible for maintaining the security of their own Account credentials and should not share their login details with any third party.

Subject to applicable data protection law, you have the following rights in respect of the personal data Wins88 holds about you:

To exercise any of the above rights, please contact our support team via live chat or by emailing us at the address provided in Section 15. We will respond to verified requests within 30 days. We may require you to verify your identity before processing a rights request.

The Wins88 Platform is strictly intended for individuals aged 21 years and above. Wins88 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

All new Players are required to confirm their age at registration and to undergo KYC verification — including submission of a valid government-issued photo ID — before full account access is granted. Any account found to belong to a person under 21 will be suspended immediately, all associated funds will be returned in accordance with our applicable policy, and the personal data will be securely deleted.

If you believe that a minor has submitted personal data to Wins88, please contact our support team immediately so that we can take appropriate action.

The Wins88 Platform integrates with a range of third-party service providers necessary to deliver a complete gaming and payments experience. These include payment processors, game software providers, identity verification services, and platform analytics tools. Each such provider is engaged under a contractual data processing agreement that requires them to:

1. Process personal data only for the specific purposes for which they are engaged;
2. Maintain technical and organisational security measures equivalent to those applied by Wins88;
3. Not sub-process or disclose personal data without prior written authorisation;
4. Delete or return personal data upon termination of the engagement.

Wins88 is not responsible for the independent privacy practices of third-party service providers in contexts outside their engagement with Wins88. Players are encouraged to review the privacy policies of their chosen payment providers (e.g., Touch 'n Go, Boost, GrabPay, Maybank) for information on how those providers handle your data independently.

Wins88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The "Last Updated" date at the top of this page will be revised accordingly whenever material changes are made.

Where changes are material — particularly those that expand the categories of data collected, change the purposes for which data is used, or affect your rights — Wins88 will endeavour to notify affected Players via email or via a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Platform following any amendment constitutes your acknowledgement of the revised Policy. If you do not agree to the revised Policy, you must cease use of the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Wins88 handles your personal data, please contact our Data Privacy team through any of the following channels:

• Live Chat: Available 24/7 via the on-site live chat widget. Average response time under 2 minutes. For data rights requests, please specify "Data Privacy Request" when initiating the conversation.
• Email: [email protected] (plain text — not a clickable link). For data rights requests, please use the subject line "Privacy Rights Request" and include your registered account username. Average response time: within 2 hours for general enquiries; up to 30 days for formal data rights requests.

All data rights requests will be acknowledged within 5 business days. We may require identity verification before processing a request to ensure that personal data is only disclosed to the account holder.