Wega888 Privacy Policy – Personal Data Protection & Player Privacy in Malaysia

1 Personal Data We Collect

Wega888 collects personal data from you in various situations throughout your use of our platform. We only collect data that is genuinely necessary and do not collect excessive data.

Data you provide directly:

• Registration information: Full name, identity card number (MyKad) or passport, date of birth, email address, phone number, and account password.
• KYC information: Valid identity document copies, proof of current address (bank statement, utility bill), and an identity verification selfie for the KYC process.
• Financial information: Bank account number, bank name, and e-wallet account details for processing deposits and withdrawals. Credit or debit card number where applicable.
• Communications: Records of your correspondence with our customer support team, including live chat logs, emails, and support tickets.

Data collected automatically:

• Usage data: Gaming activity, betting history, session dates and times, recorded wins and losses.
• Device data: Device type, operating system, browser version, screen resolution, and system language.
• Network data: IP address, internet service provider (ISP), and estimated geographic location based on IP.
• Cookie data: Information stored through cookies and similar tracking technologies — described in further detail in Section 7.

2 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. wega888 uses your personal data for the following purposes only:

• Account operations: Creating and managing your account, processing logins, verifying identity, and ensuring account security.
• Financial processing: Processing deposits, withdrawals, account balance management, and transaction record retrieval.
• KYC verification: Verifying your identity to comply with anti-money laundering (AML) legal requirements and other mandatory compliance obligations.
• Customer service: Providing technical support and customer service, processing complaints, and resolving disputes.
• Platform improvement: Analysing usage patterns to improve interface design, system performance, and overall user experience.
• Security: Detecting and preventing fraud, account abuse, money laundering, and other suspicious activities.
• Legal compliance: Fulfilling legal and regulatory obligations, including reporting requirements to relevant authorities when necessary.
• Marketing communications: Sending promotional notifications and information on the latest offers — only if you have given consent to receive such communications.

3 Legal Basis for Data Processing

Wega888 processes your personal data on valid legal bases as provided under Malaysia's Personal Data Protection Act 2010. The following outlines the legal basis for each processing category:

• Contract performance: Processing required to fulfil the platform usage agreement between you and wega888, including account management and transaction processing.
• Legitimate interest: Processing for the purposes of security, fraud prevention, service improvement, and business analytics that does not compromise your fundamental privacy rights.
• Legal obligation: Processing required under Malaysian law, including KYC and AML requirements and reporting to relevant authorities.
• Consent: For marketing communications and non-essential cookie usage, we rely on your consent, which can be withdrawn at any time.

4 Data Storage & Security

Wega888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or accidental deletion.

• Transit encryption: All data transmitted between your device and our servers is protected with TLS 1.3 — the latest available encryption protocol.
• Storage encryption: Sensitive data such as financial information and identity documents is stored in encrypted format using AES-256.
• Access controls: Only authorized staff may access member personal data, and every access is automatically logged for audit purposes.
• Security audit: Our systems undergo regular penetration testing and security audits by independent parties to identify and address any vulnerabilities.
• Retention period: Active account data is retained for the duration of active membership. Following account closure, data is kept for 7 years to comply with legal requirements before being securely deleted.
• Cloud provider: Data is stored in certified data centers that comply with international security standards, with automatic failover and backups to ensure service continuity.

5 Data Sharing with Third Parties

Wega888 does not sell your personal data. We only share data in the following limited situations, and only to the extent necessary:

• Service provider: We use trusted third-party service providers for functions such as payment processing, identity verification, cloud services, and analytics. All providers are bound by strict data protection agreements.
• Game provider: Minimum required game information is shared with licensed game providers to process game rounds and verify results. These providers do not receive full personally identifiable information.
• Authority: When required by law or a valid court order, we will disclose the necessary information to the relevant authorities. We will endeavor to notify you in advance unless prohibited from doing so by law.
• Fraud investigation: In cases of suspected fraud or criminal activity, we may share information with relevant law enforcement bodies or fraud prevention agencies.
• Business transfer: In the event of a merger, acquisition, or transfer of business assets, personal data may be transferred as part of those business assets. You will be notified in advance.

6 Your Privacy Rights

Under Malaysia's Personal Data Protection Act 2010 and international best practices, you have the following rights regarding your personal data at wega888: