Privacy Policy

§ 01Introduction

This Privacy Policy ("Policy") describes how Wira888 ("the Platform", "we", "us", "our") collects, uses, stores, and protects personal information relating to users ("you", "User", "Player") of the website accessible at wira888.cam and all associated sub-domains, mobile experiences, and applications (collectively, the "Service").

Wira888 operates as an online casino and sports betting platform serving players across Malaysia and other permitted jurisdictions. As part of our operations, we are required by our international gaming licence to collect and process certain categories of personal data for identity verification, regulatory compliance, fraud prevention, and the provision of a safe and enjoyable gaming experience.

By registering an Account, accessing the Service, or otherwise engaging with the Platform, you confirm that you have read and understood this Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with this Policy, you must cease using the Service.

§ 02Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

• "Account" means the registered user profile created by a Player upon successful completion of the registration process on the Platform.
• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including but not limited to name, identification number, contact details, financial information, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transfer, or deletion.
• "KYC" means Know Your Customer — the identity and address verification process required under our licensing obligations prior to the processing of withdrawals.
• "Cookies" means small text files placed on a User's device by a website to store information about that User's session and preferences.
• "Third-Party Service Provider" means any external company or individual engaged by Wira888 to perform services on our behalf that require access to Personal Data, such as payment processors and identity verification services.
• "Sensitive Personal Data" means a subset of Personal Data attracting enhanced protection, including identity document numbers, biometric data, and financial account details.

§ 03Data Controller

Wira888 acts as the Data Controller in respect of Personal Data collected through and in connection with the Service. As Data Controller, Wira888 determines the purposes and means of processing your Personal Data.

Where Wira888 engages Third-Party Service Providers to process Personal Data on its behalf (for example, payment processors or KYC verification services), those providers act as Data Processors and are bound by contractual obligations to process data only on Wira888's instructions and in accordance with this Policy.

§ 04Data We Collect

Wira888 collects the following categories of Personal Data in connection with the provision of the Service:

4.1 Registration Data

Information you provide when creating an Account:

4.2 Identity Verification (KYC) Data

Documents and information submitted as part of the KYC process:

4.3 Financial Data

Payment-related information associated with deposits and withdrawals:

4.4 Usage and Technical Data

Information automatically collected when you access the Service:

4.5 Communication Data

Records of your interactions with our support team, including live chat transcripts and email correspondence, are retained for service quality, training, and dispute resolution purposes.

4.6 Gambling Activity Data

Records of games played, wagers placed, results, bonus usage, sports bets, and other gambling activity on the Platform. This data is required for account management, bonus administration, and responsible gambling monitoring.

§ 05How We Collect Data

Wira888 collects Personal Data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotional activities;
• Automatically — through the use of cookies, web beacons, server logs, and similar tracking technologies when you access and navigate the Platform;
• From Third-Party Service Providers — payment processors (including Maybank2u, CIMB Clicks, Public Bank Online, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX) may share transaction confirmation data with us; identity verification services may share the results of document authenticity checks;
• From fraud prevention databases — where permitted by applicable law, we may cross-reference registration data against industry-standard fraud prevention and watchlist databases.

§ 06Legal Basis for Processing

Wira888 processes Personal Data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and Wira888 — specifically, to provide the Service as described in our Terms & Conditions, including account management, game access, payment processing, and customer support;
• Legal Obligation: Processing is required to comply with our international gaming licence obligations, including KYC requirements, anti-money laundering (AML) reporting, and regulatory record-keeping;
• Legitimate Interests: Processing is necessary for Wira888's legitimate interests, including fraud detection and prevention, platform security, and service improvement, provided these interests are not overridden by your rights and interests;
• Consent: Where we rely on consent as the legal basis for processing (for example, for optional marketing communications), you have the right to withdraw your consent at any time by contacting our support team.

§ 07How We Use Your Data

Wira888 uses the Personal Data we collect for the following purposes:

• To create, manage, and maintain your Account on the Platform;
• To process deposits and withdrawals via Malaysian payment methods, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect;
• To conduct KYC identity and age verification prior to processing withdrawals, in compliance with our licensing obligations;
• To detect, investigate, and prevent fraud, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions;
• To monitor and enforce compliance with our responsible gambling commitments, including age verification (21+ requirement), deposit limit management, and self-exclusion processing;
• To provide customer support, respond to enquiries and complaints, and maintain records of interactions;
• To administer bonus programmes, loyalty tiers, birthday bonuses, referral rewards, and promotional campaigns;
• To analyse usage patterns and improve the functionality, performance, and security of the Platform;
• To send transactional communications, including deposit confirmations, withdrawal notifications, KYC status updates, and security alerts;
• To comply with applicable laws, regulations, licensing conditions, and lawful requests from regulatory authorities.

§ 08Cookies & Tracking Technologies

Wira888 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, and collect usage analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management and security tokens. These cannot be disabled without affecting core functionality;
• Functional Cookies: Used to remember your preferences, such as language settings, and to personalise your experience;
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, which we use to improve the Service. No personally identifying information is shared with analytics providers;
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session hijacking prevention.

You may control the use of non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of the Platform, including your ability to log in or maintain a session.

§ 09Data Sharing & Disclosure

Wira888 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your Personal Data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Processors: To facilitate deposit and withdrawal transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian bank portals. These processors receive only the transaction data required to complete the payment;
• KYC and Identity Verification Service Providers: To verify your identity documents against authoritative databases as required by our licensing obligations;
• Fraud Prevention Services: To cross-reference account activity against industry fraud and risk databases, solely for the purpose of protecting the integrity of the Platform and its users;
• IT and Hosting Providers: Infrastructure providers who host and maintain the Platform's systems under strict data processing agreements and confidentiality obligations;
• Regulatory and Licensing Authorities: Where required by our international gaming licence or applicable law, we may be required to disclose Personal Data to licensing bodies or competent authorities. We will notify affected Users where lawfully permitted to do so;
• Legal and Compliance Advisors: Qualified legal counsel and compliance consultants engaged for specific advice, subject to professional confidentiality obligations;
• Business Successors: In the event of a merger, acquisition, or sale of all or part of Wira888's business, Personal Data may be transferred to the acquiring entity, which will be bound by data protection obligations no less stringent than those described in this Policy.

§ 10International Data Transfers

As an internationally licensed platform, Wira888's data processing infrastructure may involve the transfer of Personal Data to countries outside Malaysia, including jurisdictions in which our licensing authority is based and in which our hosting and processing partners operate.

Where Personal Data is transferred to jurisdictions that do not provide a level of data protection equivalent to that in Malaysia, Wira888 implements appropriate safeguards, including contractual data processing agreements that require recipients to apply data protection standards consistent with the principles set out in this Policy.

By using the Service, you consent to the international transfer of your Personal Data for the purposes described in this Policy, subject to the safeguards described above.

§ 11Data Retention

Wira888 retains Personal Data for the period necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Account Data and KYC Documentation: Retained for a minimum of five (5) years from the date of Account closure or the last transaction, as required under our licensing obligations for AML and regulatory record-keeping purposes;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Communication Records (support chats and emails): Retained for a minimum of two (2) years from the date of the communication;
• Usage and Technical Data (logs and cookies): Retained for up to thirteen (13) months, after which aggregated, anonymised analytics data may be retained indefinitely;
• Self-Exclusion Records: Retained for the duration of the self-exclusion period plus an additional five (5) years to prevent re-registration during the exclusion period.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an identified individual.

§ 12Data Security

Wira888 implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption at rest for all stored sensitive and financial Personal Data;
• Role-based access controls ensuring that only authorised personnel with a documented need can access Personal Data;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Two-factor authentication requirements for all administrative access to systems that store or process Personal Data;
• Incident response procedures for the identification, containment, and notification of any personal data breach.

§ 13Your Rights

Subject to applicable law and our licensing obligations, you have the following rights in relation to your Personal Data held by Wira888:

To exercise any of the above rights, please contact our support team using the contact details provided in Section 17. We will respond to all data subject requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further two (2) months with written notification.

Please note that certain rights are subject to limitations where our licensing obligations require retention of data regardless of a deletion or restriction request. We will clearly explain any such limitations when responding to your request.

§ 14Children's Privacy

The Service is strictly intended for adults aged twenty-one (21) years and above. Wira888 does not knowingly collect Personal Data from persons under the age of twenty-one (21). Age verification is a mandatory component of our KYC process, and any Account found to have been registered by a person under this age will be immediately closed, all funds forfeited, and all associated Personal Data deleted in accordance with applicable law.

If you become aware that a minor has accessed or registered on the Platform, please notify us immediately at the contact details provided in Section 17 so that we can take appropriate action without delay.

§ 15Third-Party Services

The Platform integrates with a number of third-party services to deliver core functionality, including payment processing, identity verification, and platform security. While Wira888 selects third-party partners carefully and requires them to uphold data protection standards consistent with this Policy, we are not responsible for the privacy practices of those third-party services in respect of data they process independently of Wira888.

The payment providers used by Wira888 — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and the online banking portals of Malaysian banks such as Maybank, CIMB, Public Bank, and Hong Leong — are independent entities with their own privacy policies governing the data they handle. We encourage you to review their respective privacy policies when using those services in connection with your Wira888 Account.

§ 16Changes to This Privacy Policy

Wira888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, licensing requirements, or operational structure. Revised versions of this Policy will be published on this page with an updated effective date.

Where a material change is made to how we process your Personal Data, we will endeavour to notify active Account Holders via the registered email address associated with their Account. In all cases, it is your responsibility to review this Policy periodically and remain informed of the current version.

Continued use of the Service following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any revision, you must cease using the Service and may request Account closure by contacting our support team.

§ 17Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or Wira888's handling of your Personal Data, please contact us using the following details:

When submitting a data subject request, please include your registered username or email address, a clear description of your request, and any information that will help us verify your identity and locate the relevant data. We may require identity verification before processing data access, rectification, or deletion requests to protect against fraudulent requests.

We aim to acknowledge all privacy enquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days.

This Privacy Policy was last reviewed and updated on 1 January 2026. Wira888 is committed to maintaining the highest standards of data protection for all players.