Privacy Policy — wow808

This Privacy Policy ("Policy") describes how wow808 ("we", "us", "our", or "the Company") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the Player", or "the User") who access or use the wow808 platform, including the website at https://wow808.cam and all related services operated under the wow808 brand (collectively, the "Platform").

wow808 is committed to protecting your privacy and handling your personal data in a transparent, fair, and lawful manner. By registering an account, depositing funds, or using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your relationship with wow808.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means wow808, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party service provider that processes personal data on behalf of wow808 under a binding contractual arrangement.
• "KYC" means Know Your Customer — the identity verification process required to confirm a Player's eligibility and comply with anti-money laundering obligations.
• "Cookies" means small text files placed on your device by the Platform to support functionality, analytics, and user experience.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

wow808 collects personal data in three primary ways: information you provide directly, information generated through your use of the Platform, and information received from third-party service providers. The categories of personal data we collect are set out below.

We do not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where strictly required by applicable law or regulatory obligation. We do not collect complete payment card numbers — payment transactions are processed through secure third-party payment gateways including FPX (Financial Process Exchange) and DuitNow operated by PayNet.

wow808 processes your personal data for the following specific purposes. We do not process personal data for any purpose that is incompatible with those listed below without providing prior notice and, where required, obtaining your separate consent.

• Account management and service delivery: To create and maintain your Player account, authenticate your identity at login, process deposits and withdrawals in MYR, and deliver all Platform features and services you have requested.
• KYC and regulatory compliance: To verify your identity and age (minimum 21 years), conduct anti-money laundering (AML) and counter-terrorism financing (CTF) checks, and meet all applicable legal and regulatory obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities on the Platform.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions.
• Responsible gambling: To monitor gambling behaviour patterns that may indicate problem gambling, enforce deposit limits and self-exclusion requests, and discharge our duty of care obligations to players.
• Platform improvement and analytics: To analyse aggregate, anonymised usage patterns to improve platform performance, game selection, and user experience. Individual-level data is not used for this purpose without separate consent.
• Marketing and promotions (where consented): To send you information about promotions, bonuses, and new Platform features where you have opted in to receive such communications. You may withdraw this consent at any time.

wow808 relies on the following legal bases to process your personal data:

• Performance of a contract: Processing that is necessary to provide the services set out in our Terms & Conditions, including account registration, payment processing, and game delivery.
• Compliance with a legal obligation: Processing required to meet applicable legal requirements including KYC identity verification, AML transaction monitoring, and regulatory reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and the prevention of bonus abuse, where our legitimate interests are not overridden by your rights and interests.
• Consent: Processing for optional marketing communications and non-essential analytics, where you have provided explicit, freely given consent. You may withdraw consent at any time by updating your account preferences or contacting the support team.

wow808 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: We share transactional data with regulated Malaysian payment processors including FPX / DuitNow (operated by PayNet), Touch 'n Go eWallet, Boost, GrabPay, and our banking partners (Maybank, CIMB, Public Bank, Hong Leong, RHB) to facilitate deposits and withdrawals. These providers are contractually bound to process your data solely for payment purposes.
• Identity verification providers: We share identity documents and personal data with KYC verification service providers to fulfil our age and identity check obligations.
• Regulatory and law enforcement authorities: We disclose personal data to competent authorities where required by law, court order, or regulatory requirement, including for AML and CTF reporting purposes.
• Fraud prevention services: We share relevant data with fraud detection and prevention service providers to protect the Platform and its players from financial crime and account abuse.
• IT and infrastructure providers: We share necessary technical data with providers that host our Platform infrastructure, under binding data processing agreements that restrict their use of your data.

All third-party service providers with whom we share personal data are contractually required to maintain the confidentiality of that data, to use it only for the specified purpose, and to implement appropriate technical and organisational security measures.

wow808 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your active account relationship plus a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction to meet financial record-keeping obligations.
• KYC documentation: Retained for five (5) years following account closure or the last date of business relationship.
• Customer support records: Retained for three (3) years from the date of the last interaction, or longer where a dispute remains unresolved.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with any individual.

wow808 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive stored data fields including passwords (which are hashed using industry-standard algorithms) and payment tokens;
• Role-based access controls ensuring that internal staff can only access personal data necessary for their specific job function;
• Multi-factor authentication for internal system access;
• Regular security assessments including vulnerability scanning and penetration testing of Platform infrastructure;
• Incident response procedures including data breach notification protocols aligned with applicable regulatory requirements.

wow808 uses cookies and similar tracking technologies to support the operation of the Platform, analyse usage patterns, and (where you have consented) deliver relevant content. The types of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without disabling the Platform itself.
• Functional cookies: Used to remember your preferences such as language settings and last-viewed game categories. These enhance your user experience but are not essential to core functionality.
• Analytics cookies: Used to collect aggregate data about how players use the Platform — pages visited, time spent, and navigation paths. This data is anonymised and used exclusively to improve Platform performance. These cookies are only placed with your consent.
• Marketing cookies: Used to deliver promotional content relevant to your interests, where you have opted in to marketing communications. These are only activated with your explicit consent.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to use Platform features, including login and payment processing.

Subject to applicable law, you hold the following rights in relation to your personal data held by wow808. To exercise any of these rights, please contact us via the details in Section 14.

• Right of Access: You may request a copy of the personal data we hold about you. We will respond within thirty (30) days of a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Minor corrections can also be made directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where we no longer have a legitimate purpose or legal obligation to retain it. Note that we are required to retain certain data (e.g. financial transaction records) for defined periods regardless of erasure requests.
• Right to Restriction: You may request that we restrict the processing of your data while a dispute or correction request is being resolved.
• Right to Object: You may object to processing carried out on the basis of our legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing relies on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

The wow808 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals below the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.

If wow808 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, we will immediately suspend the associated account, delete all personal data relating to that individual, and return any deposited funds through the original payment method after conducting necessary verification checks.

Parents and guardians who believe their child may have created an account on the Platform should contact us immediately via live chat so that prompt action can be taken.

wow808 primarily processes and stores personal data within infrastructure serving the Malaysian market. Where personal data is transferred to, or processed in, countries outside of Malaysia (for example, in connection with international cloud infrastructure providers or technical service providers), we ensure that appropriate safeguards are in place to protect the data at an equivalent standard to Malaysian data protection requirements.

Such safeguards may include contractual data processing agreements incorporating standard contractual clauses, or transfers to jurisdictions that maintain an adequate level of data protection as recognised by applicable law. A full list of countries to which data may be transferred is available upon request.

wow808 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes — those that significantly affect your rights or how your data is used — will be communicated to registered Players via a platform notification displayed upon login.

The effective date and last-updated date at the top of this Policy will be revised with each update. We recommend reviewing this Policy periodically. Your continued use of the Platform following any update constitutes acceptance of the revised Policy. If you do not agree with an amendment, you should request account closure in accordance with our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the wow808 Data Support team using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the Platform (Malaysia Time, UTC+8). This is the fastest way to reach us.
• Email: [email protected] — displayed as plain text only; not a clickable link

When submitting a data rights request, please include your registered account username and a clear description of your request. We may need to verify your identity before processing certain types of requests. All enquiries are acknowledged within five (5) business days.