Wira88 Privacy Policy – Malaysian Member Data Protection

1Introduction & Scope of This Policy

Wira88 ("we", "the platform") takes your data privacy very seriously. This Privacy Policy ("Policy") explains how wira88 collects, stores, processes, uses, and protects the personal information you provide to us, or that is collected automatically when you use the wira88.biz platform and any associated mobile applications.

This policy applies to all users of the wira88 platform, including unregistered visitors, active registered members, and former members whose data remains in our systems within the defined retention period. It also covers information collected through all our interaction channels, including the website, mobile app, live chat, and email communications.

Wira88 is committed to handling your personal data with full transparency, responsibility, and in accordance with internationally recognised data protection principles. We comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements, which mandate the collection and verification of certain identity information as part of operating a licensed betting platform.

2Types of Personal Data We Collect

Wira88 collects two main categories of data: information you provide directly, and information collected automatically as you use our platform.

2.1 Data You Provide Directly

2.2 Automatically Collected Data

When you browse or use the wira88 platform, our systems automatically collect the following technical information for security, analytics, and service improvement purposes:

• Device Data: Device type, operating system, browser version, screen resolution, and unique device identifier.
• Network Data: IP address, geographic location (state/city level only, not precise location), internet service provider.
• Usage Data: Pages visited, time spent on each page, navigation patterns, in-platform searches, and actions taken (button clicks, bet placements).
• Betting Activity Data: Full betting history, wins and losses, game types played, session duration, and betting patterns for responsible gambling and fraud detection purposes.
• Cookies & Tracking Technologies: Information collected through cookies, web beacons, and similar technologies — described in further detail in Section 6.

3How Wira88 Uses Your Data

Wira88 uses collected personal data solely for legitimate purposes directly related to the delivery of our platform services. The following are the primary uses of your data:

3.1 Service Provision & Management

• Creating and managing your member account on the wira88 platform.
• Securely processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks.
• Processing withdrawals and verifying that payments are made to the rightful account owner.
• Settling bets and crediting winnings to your account.
• Providing access to all wira88 products including Sports Betting, live matches, slots, Live Casino, jackpots, badminton, and virtual sports.

3.2 Security & Fraud Prevention

• Verifying your identity through the KYC process to prevent identity fraud and money laundering.
• Detecting and investigating suspicious or unusual activity in your account to safeguard your funds.
• Preventing unauthorised access, duplicate accounts, and platform abuse.
• Fulfilling AML reporting obligations to the relevant authorities when required by law.

3.3 Member Communications

• Sending important account-related notices such as deposit confirmations, withdrawal confirmations, and security alerts.
• Keeping you informed about relevant wira88 promotions, bonuses, and special offers – you may opt out of marketing communications at any time.
• Sending responsible gambling information when our systems detect betting patterns that may warrant attention.
• Responding to enquiries and resolving issues through customer support channels.

3.4 Platform Improvement & Analytics

• Analysing platform usage patterns to identify areas requiring improvement in the user experience.
• Evaluating the performance of new features prior to full rollout to all members.
• Ensuring optimal server capacity and platform performance, especially during peak periods such as major Malaysia Super League or EPL matches.

3.5 Responsible Gambling

Wira88 uses your betting activity data for responsible gambling purposes, including:

• Monitoring betting patterns to identify early signs of problem gambling.
• Enforcing the deposit limits, loss limits, and session time limits that you have set for yourself.
• Proactively reaching out to members when their betting patterns suggest a need for additional support.
• Enforcing self-exclusion and ensuring that self-excluded members cannot access the platform.

4Data Sharing and Disclosure

Wira88 does not sell, rent, or transfer members' personal data to third parties for their own marketing or commercial purposes under any circumstances. Data sharing occurs only in the following limited and specific situations:

4.1 Trusted Third-Party Service Providers

Wira88 shares necessary data with third-party service providers involved in the operation of our platform. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes:

• Payment Processors: Payment gateway providers that process Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX transactions receive the transaction information necessary to securely process your payments.
• KYC Verification Providers: Third-party identity verification services that assist us in validating identity documents as part of the KYC process.
• Game Providers: Slot game, live casino, and virtual sports providers receive the session identifiers necessary to deliver gameplay but do not receive your full identity information.
• Cloud Services: The server infrastructure and data storage providers that host the wira88 platform are subject to strict data processing agreements.

4.2 Legal Requirements & Compliance

Wira88 may disclose your personal data to the relevant authorities under the following circumstances:

• When required by a court order, writ, or official directive from a law enforcement authority.
• To meet AML reporting requirements when transactions trigger mandatory reporting thresholds.
• Where disclosure is necessary to protect the rights, property, or safety of wira88, its members, or the general public.
• In the context of investigations into fraud, money laundering, or other financial crimes involving accounts on our platform.

5Data Security Measures

Wira88 takes data security infrastructure seriously to ensure your personal and financial information is protected at all times. Key security measures we have in place include:

5.1 Technical Security

• 256-bit SSL/TLS Encryption: All communications between your browser/app and wira88 servers are encrypted using the latest TLS protocol. This ensures that data in transit — including login credentials and financial information — cannot be read by any party attempting to intercept the communication.
• Data Encryption at Rest: Sensitive data stored in the wira88 database, including identity information and financial details, is encrypted using strong encryption algorithms to protect against unauthorised database access.
• Two-Factor Authentication (2FA): wira88 supports 2FA for account login to provide an added layer of security. We strongly encourage all members to enable this feature.
• 24/7 Security Monitoring: Our automated monitoring system continuously detects and alerts on suspicious activity, unusual login attempts, and other security threats around the clock.
• Periodic Security Testing: The wira88 platform undergoes penetration testing and security audits conducted by independent security experts on a regular basis to identify and address any vulnerabilities before they can be exploited.

5.2 Access Controls

• Access to members' personal data within wira88's internal systems is restricted solely to staff with a legitimate operational need, based on the principle of least privilege.
• All internal access to sensitive data is logged and audited on a regular basis to identify any unauthorised use.
• Internal staff passwords are subject to a strict password policy and a multi-layer authentication process.

5.3 Security Incident Response

In the event of a data breach that may affect your personal information, wira88 is committed to:

• Notifying affected members within a reasonable timeframe once a breach has been confirmed.
• Clearly explaining the types of data that may have been affected and the steps members should take.
• Implementing remediation measures promptly to limit the impact of a breach and prevent recurrence.

6Cookies and Tracking Technologies

The wira88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain security, and analyse platform performance. Below is an explanation of the types of cookies we use:

6.1 Necessary Cookies (Required)

These cookies are essential to the core functionality of the wira88 platform and cannot be disabled. They include:

• Session cookies that maintain your logged-in status during an active session.
• Security cookies that help detect unauthorised access attempts and suspicious activity.
• Cookies that store your language preference and basic platform settings.

6.2 Functional Cookies (Optional)

These cookies enhance your wira88 experience by remembering your preferences and settings:

• Cookies that remember your preferred payment method for future transactions.
• Cookies that store your preferred odds display settings (decimal, fractional, or American format).
• Cookies that remember the sports or game categories you visit most frequently.

6.3 Analytics Cookies (Optional)

Wira88 uses analytics cookies to understand how members use our platform and to identify areas for improvement. Data collected through analytics cookies is anonymised and aggregated.

6.4 Managing Cookie Preferences

You can manage or disable optional cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the wira88 platform and your overall user experience. Required cookies cannot be disabled without impacting your ability to use the platform.

7Data Retention Period

Wira88 retains your personal data only for as long as necessary for the purposes stated in this Policy, or as required by law and compliance obligations. Our retention policy is as follows:

Once the applicable retention period has elapsed, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

8Your Personal Data Rights

As a wira88 member, you have the following rights regarding your personal data. To exercise any of these rights, please contact the wira88 support team via live chat or email at support@wira88.biz:

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you. Wira88 will provide the requested data within 30 days of receiving a valid request. Certain exceptions apply — for example, data that is subject to an ongoing legal investigation or data whose disclosure would infringe on another person's privacy rights.

8.2 Right to Rectification

If you believe that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Please contact the wira88 support team with the correct information and any relevant supporting evidence (where applicable). Corrections will be processed within 14 business days.

8.3 Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data under certain circumstances, particularly where the data is no longer required for its original purpose and there is no other legal basis for retaining it. Please note that certain data, such as financial transaction records and KYC documents, cannot be deleted due to binding legal compliance requirements.

8.4 Right to Restrict Processing

You have the right to request that wira88 restrict the processing of your data under certain circumstances, such as when you are disputing the accuracy of your data or while a complaint is under investigation. During the restriction period, wira88 may only retain that data and may not process it for any other purpose.

8.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Requests to opt out of marketing communications will be processed within 5 business days. Please note that you may not object to data processing that is required for legal compliance or the provision of core services.

8.6 Data Portability Rights

Under certain circumstances, you have the right to receive the personal data you have provided to wira88 in a structured, commonly used, and machine-readable format for the purpose of transferring it to another service provider. Such requests will be assessed on a case-by-case basis.

9Children's Privacy

The wira88 platform is restricted to individuals aged 18 years and above only. Wira88 does not knowingly collect or process personal data of anyone under the age of 18.

If you are under 18 years of age, please stop using the wira88 platform immediately. Should wira88 discover that we have inadvertently collected personal data belonging to a minor, we will take immediate steps to delete that information and close the account in question.

If you are a parent or guardian who believes your child has registered on the wira88 platform, please contact our support team immediately at support@wira88.biz for prompt resolution.

10Cross-Border Data Transfers

In the course of its operations, wira88 may need to transfer your personal data to servers or service providers located outside Malaysia. This includes cloud computing services, international game providers, and global payment processing systems.

Any international data transfers carried out by wira88 are subject to adequate safeguards to ensure your data continues to be protected at a standard equivalent to that afforded in Malaysia. These protective measures include:

• A contractually binding standard data transfer agreement requiring all parties who receive your data to comply with the established data protection standards.
• Selecting service providers that are based in jurisdictions with robust and recognised data protection laws.
• Regular assessments of third-party providers to ensure ongoing compliance with required security standards.

By using the wira88 platform, you consent to data transfers as described in this section, subject to the protective measures stated herein.

11Amendments to the Privacy Policy

Wira88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, relevant legal developments, or technological advancements. The "Updated" date at the top of this page always reflects the date of the most recent amendment.

For material amendments — that is, changes that significantly affect how we use your personal data — wira88 will notify you by email to the address registered to your account, or through a prominent notice on the platform, at least 14 days before the amendment takes effect.

Your continued use of the wira88 platform after any amendments to this Privacy Policy take effect constitutes your acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account before the amendments come into force.

12Contact Us About Privacy

If you have any questions or concerns, or wish to exercise your personal data rights as described in this Policy, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week on the wira88 platform. For privacy enquiries, include "Privacy Enquiry" at the start of your message so it can be routed to the relevant team more quickly.
• Privacy Email: support@wira88.biz – please use the subject line "Privacy Policy Inquiry" or "Data Rights Request" to ensure your query is processed promptly. The typical response time is 2 to 5 business days for privacy inquiries requiring detailed review.

All requests relating to personal data rights will be logged and processed in accordance with wira88's internal procedures, which comply with recognised data protection principles. We are committed to addressing all your privacy concerns seriously and transparently.