Privacy Policy —
woc88 Platform

01 Introduction

woc88 ("woc88", "we", "us", "our") operates the online gaming platform accessible at https://woc88.cam and any associated mobile applications or service interfaces. As an operator that processes personal data belonging to Members located primarily in Malaysia and across Southeast Asia, woc88 takes its data protection obligations seriously.

This Privacy Policy ("Policy") describes how woc88 collects, processes, stores, shares, and protects personal data provided by or collected about individuals who register for, access, or interact with our platform. It applies to all Members, prospective Members, and visitors to the woc88 website and mobile applications.

By registering an account or otherwise using the woc88 platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must not create an account or use our services.

02 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, phone number, identity document number, device identifiers, IP address, and financial account details.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, alteration, transfer, or deletion.
• "Data Controller" — woc88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third-party service provider that processes personal data on woc88's behalf and under woc88's documented instructions.
• "Member" — any registered user who holds an active or inactive woc88 account.
• "KYC Data" — identity documents and supporting evidence submitted during the Know Your Customer verification process, including MyKad copies, passport scans, and proof of address.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookie" — a small text file placed on your device by the woc88 platform to facilitate session management, analytics, and personalisation features.

03 Personal Data We Collect

woc88 collects personal data through multiple touchpoints across the registration, verification, gaming, payment, and support journeys. The categories of personal data we process are outlined below:

04 How We Collect Your Data

woc88 collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or responding to surveys.
• Automated Technical Collection: Data collected automatically when you access or use the platform, including IP addresses, device identifiers, browser characteristics, and usage logs generated by our platform infrastructure.
• Payment Processing Partners: Transaction confirmation data received from FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing partners following completed payment operations.
• Identity Verification Services: Results and confirmation data from third-party KYC and anti-fraud verification providers engaged to validate the identity documents you submit.
• Cookies and Similar Technologies: Data gathered via browser cookies, local storage, and similar tracking technologies as described in Section 10 of this Policy.

05 Purposes of Data Processing

woc88 processes your personal data for the following specific and documented purposes:

• Account Creation and Management: To register your account, maintain your profile, and provide you with access to the woc88 platform and its features.
• Identity Verification and KYC Compliance: To verify your identity, confirm your age eligibility (21+), and comply with our international licensing obligations regarding Know Your Customer and Anti-Money Laundering requirements.
• Payment Processing: To process deposits and withdrawals in MYR via your chosen Approved Payment Methods, and to maintain accurate financial records of all transactions.
• Gaming Service Delivery: To provide access to casino games, sports betting markets, live dealer tables, and other gaming products available on the platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other forms of platform abuse.
• Responsible Gambling: To monitor gaming behaviour patterns, enforce self-imposed account limits, identify at-risk behaviour, and administer self-exclusion requests in compliance with our responsible gambling obligations.
• Customer Support: To respond to and resolve your enquiries, complaints, and support requests submitted via live chat, email, or other support channels.
• Legal and Regulatory Compliance: To meet reporting, record-keeping, and disclosure obligations imposed by applicable laws, licensing requirements, and instructions from competent regulatory authorities.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the performance, usability, and security of the woc88 platform.
• Marketing Communications (with consent): To send you promotional emails, bonus notifications, and gaming updates where you have provided explicit consent to receive such communications.

06 Legal Basis for Processing

woc88 processes your personal data only where a valid legal basis exists under applicable data protection law. The primary bases we rely upon are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Member Agreement, including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable law, including KYC/AML obligations under our international gaming licence and applicable financial crime prevention frameworks.
• Legitimate Interests: Processing undertaken for woc88's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time through your account settings or by contacting our support team.

07 Data Sharing & Disclosure

woc88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

• Payment Processing Partners: FPX operators, DuitNow, e-wallet providers (Touch 'n Go, Boost, GrabPay), Malaysian commercial banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency payment processors — to facilitate your deposit and withdrawal requests.
• KYC and Identity Verification Providers: Third-party services engaged to verify identity documents and confirm eligibility. These providers process data strictly under woc88's instructions and data processing agreements.
• Fraud Prevention and Security Services: Providers of fraud detection, IP screening, device fingerprinting, and cybersecurity services — to protect platform integrity and Member accounts.
• IT Infrastructure and Cloud Services: Managed hosting, database management, and cloud infrastructure providers — who process data solely for the purpose of providing computing services to woc88.
• Legal and Regulatory Authorities: Competent courts, law enforcement agencies, regulatory bodies, and licensing authorities — where woc88 is required to disclose personal data by law, court order, or licensing obligation.
• Professional Advisers: Legal counsel, auditors, and compliance consultants — bound by professional confidentiality obligations — where necessary for woc88's legitimate business and compliance functions.

All third-party service providers with whom woc88 shares personal data are required to enter into data processing agreements obligating them to process personal data only as directed by woc88, to maintain appropriate security measures, and to comply with applicable data protection law.

08 International Data Transfers

As woc88 operates under international licensing and engages global service providers, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, woc88 ensures that appropriate safeguards are in place, which may include:

• Data processing agreements incorporating standard contractual clauses approved by recognised data protection authorities.
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection.
• Binding corporate rules where applicable within group structures.

09 Data Retention

woc88 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable legal and licensing obligations. General retention periods are as follows:

• Account Data and KYC Records: Retained for the duration of the membership and for a minimum of five (5) years following account closure, in accordance with AML and gaming licensing requirements.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of the transaction, as required for financial record-keeping and regulatory audit purposes.
• Support and Communications Records: Retained for three (3) years from the date of the interaction, to facilitate dispute resolution and quality assurance.
• Marketing Consent Records: Retained for the duration of your consent and for two (2) years following withdrawal of consent, to demonstrate compliance with consent obligations.
• Technical and Usage Logs: Retained for twelve (12) months in active systems, after which they may be archived in anonymised form for statistical analysis.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with woc88's data destruction procedures.

10 Cookies & Tracking Technologies

woc88 uses cookies and similar tracking technologies to operate certain essential platform functions, improve user experience, and analyse platform usage. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function. These enable session management, login authentication, and security features. They cannot be disabled without materially impairing platform functionality.
• Functional Cookies: Used to remember your preferences, language settings, and display configurations to provide a more personalised experience.
• Analytics Cookies: Collect anonymised or pseudonymised data about how users interact with the platform (pages visited, session duration, error occurrence). Used solely to improve platform performance.
• Security Cookies: Support fraud detection, rate-limiting, and bot prevention systems. These are essential for platform integrity.

You may manage non-essential cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality or performance of some platform features. woc88 does not use cookies to serve third-party advertising or track your browsing activity on other websites.

11 Security Measures

woc88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the woc88 platform is encrypted in transit using industry-standard SSL/TLS protocols.
• At-Rest Encryption: Sensitive personal data, including KYC documents and financial records, is encrypted in storage using AES-256 encryption.
• Two-Factor Authentication (2FA): Optional but strongly recommended for all Members. woc88's internal systems require 2FA for all staff accessing production data.
• Access Controls: Personal data is accessible only to woc88 personnel with a documented business need. Role-based access controls are enforced and audited.
• Penetration Testing: Regular third-party penetration tests and vulnerability assessments are conducted on platform infrastructure.
• Incident Response: woc88 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified in accordance with applicable legal requirements.

12 Your Rights Over Your Data

Subject to applicable data protection law, you hold the following rights in respect of your personal data processed by woc88. You may exercise any of these rights by contacting our Data Protection Officer as described in Section 16 of this Policy.

woc88 will respond to all verified data subject requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days with written notice provided to you. Some rights are subject to exemptions where processing is required by law or to protect the rights and safety of others.

13 Children & Minors

The woc88 platform is strictly prohibited for persons under the age of 21. woc88 does not knowingly collect, process, or retain personal data from individuals under 21 years of age. Age verification checks are conducted at the time of registration and through our ongoing KYC process.

If woc88 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, all such data will be immediately deleted and the associated account permanently closed.

If you are a parent or guardian and believe your child has accessed or registered on the woc88 platform, please contact our support team immediately at the contact details provided in Section 16 of this Policy.

14 Third-Party Links & Services

The woc88 platform may contain references to payment service providers and other operational partners. Any interaction with third-party services — including payment gateways operated by FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go, Boost, or GrabPay — is governed by those parties' own privacy policies and data handling practices.

woc88 is not responsible for the data practices of third-party services and strongly recommends that you review the privacy policies of any payment or service provider you interact with during your use of the woc88 platform.

15 Changes to This Policy

woc88 reserves the right to update this Privacy Policy at any time. Material changes — including changes that expand our data collection scope, introduce new sharing arrangements, or alter your rights — will be communicated to registered Members by email notification and/or an in-platform banner at least 14 days before they take effect.

Minor or administrative updates (such as clarifications that do not substantively alter your rights or our obligations) may be made without advance notice. The "Last Updated" date at the top of this Policy will reflect all revisions.

Your continued use of the woc88 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must discontinue use of the platform and may request account closure in accordance with our account termination procedures.

16 Contact Us & Data Protection Officer

If you wish to exercise any of your data rights, raise a privacy concern, report a potential data breach, or make any enquiry regarding the processing of your personal data by woc88, please contact our Data Protection Officer (DPO) or our support team through the following channels: