Section 01
Introduction
This Privacy Policy ("Policy") is issued by wow388 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("you", "User", "Data Subject") who access, register on, or interact with the wow388 website and associated services available at https://wow388.lat.
wow388 is committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This Policy describes our data collection practices, the purposes for which we use your data, the circumstances under which we may share it, and the rights available to you as a data subject.
Scope: This Policy applies to all personal data processed in connection with your use of wow388, including data provided during registration, during the course of your account activity, and data collected automatically through your use of the platform.
By creating an account on wow388 or by continuing to use the platform after changes to this Policy take effect, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.
Section 02
Definitions
For the purposes of this Privacy Policy, the following terms have the meanings assigned below:
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
- "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, wow388.
- "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a written data processing agreement.
- "Consent" means a freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their personal data.
- "KYC" means Know Your Customer — the identity and address verification process required by our licensing framework.
- "Cookies" means small text files placed on your device by a website to store preferences, session information, or tracking data.
Section 03
Data We Collect
wow388 collects personal data falling into the categories set out below. The specific data collected in each category depends on the nature of your interaction with the platform.
3.1 Registration & Identity Data
- Legal full name
- Date of birth
- Residential address (including city, state, postcode, and country)
- Email address
- Mobile phone number
- Username and encrypted password
3.2 Identity Verification (KYC) Data
- Government-issued photo identification (e.g., MyKad, passport, driving licence)
- Proof of address documents (e.g., utility bill, bank statement dated within 3 months)
- Proof of payment method ownership
- Selfie or liveness check image (where required for enhanced verification)
3.3 Financial & Transaction Data
- Deposit and withdrawal transaction history, including amounts, timestamps, and payment method identifiers
- Payment method details (e.g., partial bank account numbers, e-wallet references — full card numbers are not stored by wow388)
- Cryptocurrency wallet addresses used for deposits or withdrawals
- Bonus and promotion usage records
3.4 Gameplay & Betting Data
- Game session logs, including games played, bet amounts, winnings, and session durations
- Sports betting history, including markets selected and outcomes
- Responsible gambling tool usage (deposit limits set, cool-off periods, self-exclusion requests)
3.5 Technical & Usage Data
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser information
- Session timestamps and pages visited
- Referring URL and exit URL
- Cookie identifiers and similar tracking data (see Section 8)
3.6 Communications Data
- Live chat transcripts with our support team
- Email correspondence with wow388
- Records of any complaints or disputes submitted
Section 04
How We Collect Your Data
We collect personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with platform features.
- Automatically — through cookies, web beacons, and similar tracking technologies as you navigate the platform. This includes technical data about your device and session.
- From payment processors — when you initiate a deposit or withdrawal via Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency networks, relevant transaction data is passed to us to enable processing.
- From identity verification partners — where we engage third-party KYC service providers to verify documents submitted during the verification process.
- From fraud prevention services — we may receive signals or risk scores from third-party fraud and AML (Anti-Money Laundering) screening services.
Section 05
Legal Basis for Processing
wow388 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:
| Processing Activity |
Legal Basis |
| Account registration and management |
Performance of a contract |
| Processing deposits and withdrawals |
Performance of a contract |
| Identity verification (KYC) |
Legal obligation (licensing requirements) |
| Fraud prevention and AML screening |
Legal obligation / Legitimate interests |
| Responsible gambling monitoring |
Legal obligation / Legitimate interests |
| Customer support communications |
Performance of a contract / Legitimate interests |
| Platform analytics and improvement |
Legitimate interests |
| Sending promotional communications |
Consent (where required) |
| Regulatory reporting and audit |
Legal obligation |
Section 06
How We Use Your Data
wow388 uses your personal data for the following purposes:
- To establish and maintain your account on the platform.
- To verify your identity in compliance with our KYC obligations under our licensing framework.
- To process your deposits and withdrawals through your chosen payment method, whether via Maybank2u, DuitNow, Touch 'n Go eWallet, or any other supported method.
- To detect, investigate, and prevent fraud, money laundering, and other financial crimes.
- To monitor gameplay patterns for responsible gambling purposes, including the enforcement of deposit limits and self-exclusion requests.
- To provide you with customer support and resolve disputes or complaints.
- To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts).
- To send you promotional communications about bonuses and offers where you have consented to receive these.
- To analyse platform usage in aggregate to improve game offerings, user interface, and operational performance.
- To comply with legal, regulatory, and audit requirements, including retention of records as required by our licensing authority.
wow388 does not use your personal data for automated decision-making that has a significant legal or similarly significant effect on you without providing you with the opportunity to request human review of such decisions.
Section 07
Data Sharing & Third Parties
7.1 When We Share Data
wow388 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share your data only in the circumstances set out below, and only to the extent necessary for the stated purpose.
7.2 Categories of Recipients
- Payment Processors: We share transaction data with payment service providers (including but not limited to banks, e-wallet operators, FPX network participants, and cryptocurrency payment gateways) to the extent necessary to execute your deposit and withdrawal requests.
- Identity Verification Providers: Where third-party KYC services are used, your identity documents and related data are transmitted to those providers under contractual data processing agreements.
- Fraud & AML Screening Services: We may share limited transactional and behavioural data with specialist fraud prevention and AML screening providers as part of our compliance obligations.
- Game Content Providers: Game studios and content providers that power games on the wow388 platform may receive anonymised or pseudonymised gameplay data necessary to deliver the game experience. They do not receive your name or payment details.
- Regulatory Authorities: We are legally obligated to share data with our licensing authority, and may be required to share data with law enforcement agencies in response to lawful requests.
- IT & Infrastructure Providers: Cloud hosting, security, and platform infrastructure providers process data on our behalf under strict data processing agreements and are permitted to use the data only for the purpose of providing the contracted service.
Important: All third parties with whom wow388 shares personal data are required to process that data in accordance with applicable data protection standards. wow388 does not authorise any third party to use your data for their own marketing or commercial purposes without your explicit consent.
Section 08
Cookies & Tracking Technologies
8.1 What Are Cookies
Cookies are small text files stored on your device when you visit a website. They allow the website to remember information about your visit, such as your language preference, session state, and authentication status.
8.2 Cookies Used by wow388
- Essential Cookies: Required for the platform to function. These include session authentication cookies and security tokens. Without these, the platform cannot operate correctly. They cannot be disabled.
- Functional Cookies: Store your preferences such as language settings and display preferences to improve your experience. These are set on a first-party basis.
- Analytics Cookies: Used to understand how users interact with the platform in aggregate — pages visited, session duration, and navigation paths. This data is anonymised and used solely to improve the platform.
- Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.
8.3 Cookie Management
You can manage non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the platform. Disabling essential cookies will prevent you from logging in or using core platform features.
Section 09
Data Retention
wow388 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by our licensing obligations and applicable laws. The following general retention guidelines apply:
| Data Category |
Retention Period |
| Account registration data |
Duration of account + 5 years after closure |
| KYC verification documents |
Duration of account + 5 years after closure |
| Transaction records |
Duration of account + 7 years after closure |
| Gameplay and session logs |
Duration of account + 3 years after closure |
| Support correspondence |
3 years from the date of correspondence |
| Marketing preferences and consent records |
Until consent is withdrawn, then 1 year |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that makes re-identification impossible. Extended retention may apply where data is subject to an ongoing legal dispute, investigation, or regulatory audit.
Section 10
Data Security
wow388 implements a layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, destruction, and alteration. Our security measures include:
- Transport Encryption: All data transmitted between your device and the wow388 platform is encrypted using 256-bit SSL/TLS protocols.
- Data-at-Rest Encryption: Sensitive data stored on our servers is encrypted using AES-256 or equivalent algorithms.
- Access Controls: Access to personal data within wow388's internal systems is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for privileged accounts.
- Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular penetration testing conducted by independent security specialists.
- Account-Level Security: We provide two-factor authentication (2FA) for user accounts. We strongly recommend all users activate 2FA via their account security settings.
While wow388 employs industry-standard security measures, no system is entirely immune to security incidents. If you suspect that your account has been compromised, please contact our support team immediately via live chat on the platform.
Section 11
Your Rights as a Data Subject
As a data subject, you have the following rights in relation to your personal data held by wow388. To exercise any of these rights, please contact our support team via live chat or email at [email protected] (plain text — not a clickable link). We will respond within thirty (30) days of receiving your request.
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of data where retention is no longer justified.
Right to Restriction
Request that processing is restricted in certain circumstances.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests.
Please note that certain rights are subject to limitations where data retention is required by law (for example, transaction records mandated by our regulatory obligations cannot be deleted on request during the applicable retention period). Where we cannot fully comply with a request, we will explain why in our response.
If you wish to withdraw consent for marketing communications, you may do so at any time by updating your account preferences or contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.
Section 12
International Data Transfers
wow388 operates under international gaming licensing, and some of the third-party service providers we use (including cloud hosting, KYC providers, and analytics services) may process data in jurisdictions outside Malaysia. Where such transfers occur, wow388 ensures that appropriate safeguards are in place, which may include:
- Contractual data processing agreements incorporating standard clauses that impose equivalent data protection obligations on the recipient.
- Transfers to jurisdictions recognised as providing an adequate level of data protection.
- Binding corporate rules where applicable.
Malaysian users should be aware that data protection laws vary between jurisdictions. However, wow388 takes steps to ensure that your data receives a consistent standard of protection regardless of where it is processed.
Section 13
Children's Privacy
The wow388 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted as part of our registration and KYC processes.
If you believe a minor has registered on wow388, please contact us immediately at
[email protected] (plain text — not clickable). Upon confirmation, we will close the account, void any associated transactions, and delete all personal data relating to the minor in accordance with our data deletion procedures.
Section 14
Updates to This Privacy Policy
wow388 reviews this Privacy Policy periodically to ensure it remains accurate, current, and compliant with applicable standards. We reserve the right to update or amend this Policy at any time.
When material changes are made, we will notify active users via the email address registered to their account and/or by displaying a prominent notice on the platform for a minimum of seven (7) days prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.
Your continued use of the wow388 platform after the effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should cease using the platform and may request account closure.
Section 15
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact wow388 using the details below:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week via the platform at https://wow388.lat
- Support Hours: 24/7, including Malaysian public holidays
For data subject rights requests (access, rectification, erasure, portability, restriction, or objection), please contact us via live chat or email with the subject line: Data Subject Rights Request. We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days.
For information about our responsible gambling tools and self-exclusion options, please visit our Responsible Gambling page. For the full contractual terms governing your use of wow388, please see our Terms & Conditions.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the wow388 Privacy Policy.
