wasap88 Privacy Policy

This Privacy Policy is issued by wasap88, the operator of wasap88.org, a licensed online gaming platform serving Malaysian players. wasap88 acts as the data controller in respect of personal data collected through the wasap88 Platform.

If you have any questions or concerns regarding this Privacy Policy, or wish to exercise any data subject rights, you may contact the wasap88 Data Protection team at: [email protected], marking your email subject line "Privacy / Data Request" for prompt routing. Live chat support is also available 24/7 for general privacy enquiries.

wasap88 collects personal data in the following categories, depending on how you interact with the Platform:

• Identity Data: Full legal name, date of birth, national identification number or passport number, and nationality — collected as part of Know Your Customer (KYC) verification required under wasap88's licensing obligations.
• Contact Data: Email address, Malaysian mobile phone number, and residential address.
• Financial Data: Bank account details, eWallet identifiers (Touch n Go eWallet, Boost), and card details (processed by PCI-DSS compliant payment processors — wasap88 does not store full card numbers).
• Account Data: Username, encrypted password hash, account registration date, account status, and login history.
• Gaming Activity Data: Wagering history, game session logs, bet amounts, win/loss records, bonus usage, and responsible gaming tool settings.
• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, and geolocation data (country/region level).
• Communications Data: Records of any communications you have with wasap88 customer support, including live chat transcripts and email correspondence.

wasap88 collects personal data through the following means:

1. Direct provision: When you register an account, submit KYC verification documents, make a deposit or withdrawal, contact customer support, or update your account profile.
2. Automated collection: The wasap88 Platform automatically records technical and device data each time you access the site, including IP address, session timestamps, and browser characteristics, through server logs and first-party cookies.
3. Third-party sources: Identity verification and fraud prevention partners may provide wasap88 with data to assist in confirming the accuracy of information you have provided, in accordance with their own privacy practices and applicable data sharing agreements.
4. Payment processors: Transaction confirmation data is received from Malaysian payment processors and banking partners in the course of processing your deposits and withdrawals in MYR.

wasap88 processes your personal data for the following purposes:

• To create, verify, and maintain your wasap88 account.
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under wasap88's international gaming licence, including identity verification prior to processing withdrawals.
• To process deposits and withdrawals in Malaysian Ringgit (MYR) and maintain accurate transaction records.
• To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities on the wasap88 Platform.
• To operate and administer responsible gaming tools including deposit limits, session timers, cooling-off periods, and self-exclusion, and to monitor account activity against responsible gaming indicators.
• To provide customer support and respond to account-related queries and disputes.
• To send you transactional communications related to your wasap88 account, including deposit confirmations, withdrawal status updates, and security notifications.
• To improve the wasap88 Platform's performance, user experience, and game offering through aggregated analytics.
• To send promotional communications regarding wasap88 bonuses and offers, where you have provided consent or where permitted by applicable law. You may opt out of marketing communications at any time from your account notification settings.

wasap88 processes personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the wasap88 Terms & Conditions contract with you, including account administration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with wasap88's obligations under its gaming licence, AML regulations, and applicable financial crime prevention frameworks.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where your consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

wasap88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. wasap88 may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

1. Payment service providers and banking partners (including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and card processing networks) to facilitate deposits and withdrawals.
2. Identity verification and fraud prevention services engaged by wasap88 to fulfil KYC and AML obligations.
3. Game content providers whose titles are hosted on the wasap88 Platform, to the extent necessary for game operation and dispute resolution.
4. Regulatory and licensing authorities to whom wasap88 is required to report under its gaming licence conditions.
5. Law enforcement and government authorities where wasap88 is required to disclose data by applicable law, court order, or regulatory direction.
6. Cloud infrastructure and technology service providers who process data on wasap88's behalf under data processing agreements that require them to maintain equivalent data protection standards.

wasap88's operations involve processing personal data by service providers located outside Malaysia. Where personal data is transferred internationally, wasap88 ensures that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards, including contractual clauses that require recipient parties to process data only as directed by wasap88 and to maintain appropriate technical and organisational security measures.

wasap88 retains personal data for as long as is necessary for the purposes set out in this Policy, and specifically:

• Account and KYC records are retained for a minimum of five (5) years following account closure, as required by wasap88's licensing and AML obligations.
• Financial transaction records are retained for a minimum of five (5) years.
• Gaming activity logs are retained for a minimum of three (3) years.
• Customer support communications are retained for two (2) years.
• After applicable retention periods expire, data is securely deleted or irreversibly anonymised.

wasap88 uses first-party cookies and similar technologies to operate the Platform. The categories of cookies used are:

• Strictly necessary cookies: Required for platform functionality including session authentication and security. These cannot be disabled without impairing your ability to use the wasap88 Platform.
• Performance cookies: Used to collect aggregated, anonymised data about how pages are used, helping wasap88 improve platform performance and loading speed.
• Functional cookies: Used to remember your preferences such as language settings and responsible gaming tool configurations.

wasap88 does not use third-party advertising or behavioural targeting cookies. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect Platform functionality.

wasap88 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and wasap88 servers.
• Bcrypt hashing for stored passwords — wasap88 cannot read your password in plain text.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments of the wasap88 Platform.
• Segregated storage of player funds from operational accounts.
• Incident response procedures including mandatory notification timelines in the event of a data breach affecting players.

Notwithstanding these measures, no data transmission over the internet can be guaranteed as completely secure. You are responsible for maintaining the confidentiality of your wasap88 login credentials.

Subject to applicable law and the conditions of wasap88's gaming licence, you have the following rights in respect of your personal data held by wasap88:

1. Right of access: You may request a copy of the personal data wasap88 holds about you.
2. Right to rectification: You may request correction of inaccurate or incomplete personal data.
3. Right to erasure: You may request deletion of your personal data in certain circumstances, subject to wasap88's legal retention obligations (including KYC and AML requirements, which cannot be waived).
4. Right to restriction: You may request that wasap88 restrict processing of your data in certain circumstances, for example while a correction request is under review.
5. Right to data portability: You may request a machine-readable copy of personal data you have provided to wasap88.
6. Right to object: You may object to processing based on legitimate interests, and you may withdraw consent for direct marketing at any time.

To exercise any of these rights, contact wasap88 at [email protected] with the subject line "Data Subject Request". wasap88 will respond within thirty (30) days. Identity verification will be required before any request is processed.

The wasap88 Platform is strictly for adults aged 21 and above. wasap88 does not knowingly collect personal data from persons under the age of 21. If wasap88 becomes aware that personal data has been collected from a person under 21, the relevant account will be closed immediately, the data deleted in accordance with applicable regulations, and the matter referred to wasap88's responsible gaming team. If you have reason to believe that a minor has registered a wasap88 account, please contact us immediately at [email protected].

wasap88 may update this Privacy Policy from time to time to reflect changes in regulatory requirements, Platform operations, or data processing practices. The date of the most recent revision is displayed at the top of this page. Where changes are material, wasap88 will provide notice through the Platform or by email to your registered address. Your continued use of the wasap88 Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

For any privacy-related queries, data subject requests, or concerns, please contact wasap88 at:

• Email: [email protected] — subject line "Privacy / Data Request"
• Live Chat: Available 24/7 on the wasap88 Platform

If you believe your data protection rights have been infringed and wasap88 has not adequately addressed your concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.