Compliant with Malaysia PDPA 2010  ·  Last Updated: January 2026

WCT88 Privacy Policy – Personal Data Protection Malaysian Users We Take Seriously

WCT88 takes every user's privacy seriously. This document clearly outlines the types of data we collect, how it is used, who it may be shared with, and your rights as a user under Malaysia's Personal Data Protection Act 2010. Please read it carefully.

WCT88's Privacy Commitment
Our data protection summary
  • Encryption: SSL 256-bit
  • Compliance: Malaysia PDPA 2010
  • Sale of data to third parties: Never
  • Your right to access your data: At any time
  • Payment: PCI-DSS compliant
  • Contact DPO: support@wct88.click

256-bit
SSL Encryption on All Data
PDPA
Full Compliance with the 2010 Act
0
Sale of Data to Third Parties
24/7
Privacy-Related Support

Six Ways WCT88 Protects the Privacy of Malaysian Users

These are not just statements — they are concrete measures WCT88 implements every day to keep your data safe.

256-Bit SSL Encryption at All Times

Every piece of data transmitted between your device and WCT88's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks. This means your phone number, password, payment details and gameplay records cannot be read by any third party in transit.

Full Compliance with Malaysia's PDPA 2010

WCT88 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means data is collected only for legitimate, stated purposes, you have the right to access and correct your data, and we have clear procedures in place for handling personal data requests.

No Sale of Data to Third Parties

WCT88 has never and will never sell, rent or trade users' personal data to any third party for marketing or commercial purposes. The data you provide to WCT88 is used solely for account operations, transaction processing and the improvement of our services to you.

Secure Payments Compliant with PCI-DSS

All financial transactions at WCT88 — including deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX — are processed through payment gateways that comply with Payment Card Industry Data Security Standards (PCI-DSS). Your financial data is handled with multiple layers of protection.

Data Storage with Strict Access Controls

WCT88 user data is stored on servers protected by multi-layered access controls. Only WCT88 staff with a legitimate operational need who have passed a rigorous security verification process are permitted to access user data, and all access is automatically logged.

Full Control Is in Your Hands

As a WCT88 user, you are in control of your data. You may request a copy of the data we hold, ask us to correct any inaccurate information, or apply for the deletion of your account and associated data at any time by contacting our team at support@wct88.click.

Important Note: This WCT88 Privacy Policy describes how the WCT88 platform (wct88.click) collects, uses, stores, and protects your personal data. By registering for and using the WCT88 platform, you agree to the data protection practices set out in this policy. This policy should be read together with Terms & Conditions WCT88.

1. Introduction & Scope of This Privacy Policy

WCT88 (operating at wct88.click) is an online casino and Sports Betting platform serving users in Malaysia. We understand that users' trust in our platform depends greatly on how we handle their personal data. This Privacy Policy is written with the intent of providing complete clarity — not vague terms or confusing legal language, but a straightforward explanation of what actually happens to your data at WCT88.

This policy applies to all personal data WCT88 collects through various channels — including via the wct88.click website, the WCT88 mobile app, communications with our customer support team, and any other interactions between you and the WCT88 platform. It also applies to data we receive from legitimate third parties such as payment service providers and identity verification partners.

WCT88 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of user data handling. This means we only collect data that is genuinely necessary, use it solely for the stated purposes, and give you meaningful control over your own data. If at any time you have questions or concerns about how WCT88 handles your data, our team can be reached at support@wct88.click.

2. Types of Personal Data WCT88 Collects

WCT88 collects your personal data through several means — information you provide directly, information collected automatically during your use of the platform, and in some cases information from legitimate third-party sources. Below is a comprehensive overview of the data categories we collect:

2.1 Data You Provide Directly to WCT88

Data Type Specific Examples Requirements
Account Information Malaysian phone number, password (stored in hashed form) Required for registration
Identity Verification Full name, IC number (when required for large withdrawals) For withdrawals of RM5,000 and above
Payment Information Malaysian bank account numbers, eWallet information (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) For deposits & withdrawals
Communications Live chat messages, emails, and enquiries submitted to customer support For issue resolution
Game Selection Account settings, self-set personal deposit limits To personalise your experience

2.2 Automatically Collected Data

While you are using the WCT88 platform, our systems automatically record certain technical information required for platform operation and security purposes:

  • Device & Technical Data: IP address, web browser type, operating system, device model, screen resolution, and language settings.
  • Session Data: Login and logout times, session duration, gameplay records, betting history, total deposits and withdrawals, and bonus usage records.
  • Usage Data: Pages visited within the platform, games played, features used, and navigation patterns within WCT88.
  • Location Data: General location based on IP address for security and regional verification purposes. WCT88 does not access your device's precise GPS data.

Why this data is required: Gaming session and transaction records are essential for ensuring fair settlement of bets, accurate processing of withdrawals, and protecting your account from unauthorised access. This data also enables WCT88 to proactively detect and prevent fraud, safeguarding all users on the platform.

3. How WCT88 Uses Your Personal Data

WCT88 uses the personal data it collects for the following legitimate and stated purposes only. We do not use your data for any purpose beyond those listed below without first obtaining your additional consent:

  • Account Operations: Verifying your identity at login, accurately processing deposits and withdrawals, updating your account balance, and ensuring transaction records are correct.
  • Service Delivery: Provides access to all WCT88 games and platform features, processes bets and settles game outcomes, and manages your bonus programme and VIP loyalty programme.
  • Security & Fraud Prevention: Detects suspicious or unusual activity in your account, prevents unauthorised access, identifies and blocks fraud attempts, and enforces a one-account-per-user policy.
  • Legal Compliance: Complies with applicable Malaysian legal requirements, including PDPA 2010, anti-money laundering laws (AMLA), and the reporting requirements of relevant regulatory bodies.
  • Customer Support: Resolves enquiries, complaints, and disputes submitted to the WCT88 support team, and improves the quality of our support services based on interaction records.
  • Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to identify areas for improvement, test new features, and ensure the WCT88 platform continues to run smoothly and efficiently.
  • Responsible Gaming: Monitors gameplay patterns to identify users who may need responsible gambling support, and enables deposit limit tools and self-exclusion features to function effectively.
  • Service Communications: Sending important account-related notifications such as deposit confirmations, withdrawal notices, policy updates, and account security information. WCT88 does not send marketing communications without your consent.

4. Data Sharing with Third Parties

WCT88 does not sell, rent, or trade users' personal data to any third party for commercial purposes. This is a fundamental commitment that does not change. However, in the course of operating the platform, WCT88 may share the minimum necessary personal data with the following categories of third parties:

4.1 Technical Service Providers

WCT88 works with trusted technical service providers to operate certain aspects of the platform — including cloud computing service providers, payment gateways for processing Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX transactions, as well as SMS verification service providers. All such providers are contractually bound to handle WCT88 data in accordance with strict privacy and security standards, and are permitted to use that data solely for the agreed service purposes.

4.2 Game Software Providers

To enable the gaming platform to function, minimal game session information may be shared with game software providers such as Pragmatic Play, PG Soft, Evolution Gaming, and other providers operating on the WCT88 platform. This sharing is technically necessary for game round settlement and result verification. All such providers are internationally licensed companies subject to strict data protection requirements imposed by their own regulatory bodies.

4.3 Competent Authorities

WCT88 may disclose users' personal data to competent Malaysian government authorities when required by law — including in investigations relating to financial crime, money laundering, or cases where a competent court issues a disclosure order. In such cases, WCT88 will disclose only the minimum data necessary to fulfil the legal requirement and will notify the relevant user where permitted by law to do so.

WCT88's Commitment: Any sharing of data with third parties is always conducted on a minimum-necessary basis — only data genuinely required for a legitimate purpose is shared. WCT88 never grants broad access to its user database to any external party. All data-sharing arrangements are documented in writing and include binding data protection obligations.

5. WCT88 Data Security Measures

User data security is a core technical and operational priority at WCT88. We implement multiple layers of security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

  • Encryption in Transit: All communications between your browser or app and WCT88's servers are secured with TLS 1.3 using AES-256 encryption. This applies to every page on the platform, not just login or payment pages.
  • Data-at-Rest Encryption: Sensitive data stored in WCT88's databases — including passwords and payment information — is stored in encrypted or irreversibly hashed form.
  • Internal Access Controls: Access to user data among WCT88 staff is strictly governed by the principle of least privilege — each employee is granted access only to the data required for their specific job function.
  • 24/7 Security Monitoring: WCT88 systems are continuously monitored to detect unauthorised access attempts, suspicious activity patterns, and other security threats. Intrusion detection systems are deployed across all layers of the infrastructure.
  • Two-Factor Authentication: Account registration and sensitive account actions on WCT88 are protected by two-factor authentication via SMS OTP sent to your registered phone number as an additional layer of security.
  • Periodic Security Assessments: WCT88 conducts regular vulnerability assessments and security testing on its platform infrastructure to identify and remediate potential security weaknesses before they can be exploited.

While WCT88 takes all reasonable steps to protect your data, no digital security system is 100% foolproof. You also play an important role in keeping your account secure — please use a strong, unique password for your WCT88 account, never share your login credentials with anyone, and contact WCT88 support immediately if you suspect any suspicious activity on your account.

6. Cookies & Platform Tracking Technologies

The WCT88 platform uses cookies and similar tracking technologies to enable certain functions to operate correctly and to enhance the user experience. Cookies are small text files stored in your browser or on your device when you visit the WCT88 platform. The following types of cookies are used:

6.1 Essential Cookies (Cannot Be Disabled)

These cookies are essential to the core functionality of the WCT88 platform and cannot be disabled without impairing your use of it. They include login session cookies that maintain your authentication status, security cookies for CSRF prevention, and language preference cookies. No personally identifiable information is stored in these cookies.

6.2 Functional Cookies (Optional)

These cookies remember your preferences — such as display settings, theme and your last game selection — to provide a more personalised experience. You can disable these cookies without losing core platform functionality, though some personal preferences may not be saved between sessions.

6.3 Analytics Cookies (Optional)

WCT88 uses aggregated analytics data to understand how users interact with the platform as a whole — for example, which pages are visited most frequently, which games are most popular, and where users encounter difficulties in the interface. This data is processed in aggregate form and is not linked to any individual user's identity.

You can manage your cookie settings through your web browser's preferences. Most modern browsers — including those used on Android and iOS devices — allow you to view, delete, and block cookies. Please refer to your browser's documentation for specific instructions on managing cookies.

7. Data Retention & Transfer

WCT88 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required under applicable Malaysian law. Retention periods vary by data type:

  • Active Account Data: Retained for the duration your account is active and for a reasonable period following account closure to allow for the resolution of any outstanding disputes.
  • Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable Malaysian financial and tax law requirements.
  • Security Log: Retained for 12 months for fraud detection and security incident investigation purposes if required.
  • Support Communication Records: Retained for 24 months to allow reference if the same issue recurs and for service quality improvement purposes.
  • Responsible Gaming Data: Self-exclusion records and configured limits are retained for an appropriate period to ensure your preferences are honoured even after an account is closed and reopened.

WCT88 user data is stored and processed primarily on servers located within the Asia region. Where data needs to be processed outside Malaysia — for example, through international game software providers or global payment gateways — WCT88 ensures that such transfers are carried out with adequate safeguards, including data transfer agreements that comply with international standards equivalent to Malaysia's PDPA protections.

8. Your Rights as a WCT88 User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights with respect to the personal data WCT88 holds about you. WCT88 is committed to respecting and facilitating the exercise of these rights:

01
Right of Access

You have the right to request and receive a copy of the personal data WCT88 holds about you. We will provide this information in a readable format within 14 days of receiving your request.

02
Right to Rectification

If you find that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. We will update our records within a reasonable timeframe once the request has been verified.

03
Right to Erasure

You may request the deletion of your personal data from WCT88's records. Such requests will be processed subject to applicable legal retention requirements — for example, financial records that must be kept for a prescribed period cannot be deleted upon individual request.

04
Right to Object

You have the right to object to the processing of your personal data for specific purposes — in particular, processing for direct marketing purposes. WCT88 will cease such processing immediately upon receiving a valid objection.

05
Right to Restrict Processing

Under certain circumstances, you may request that WCT88 restrict how your data is processed — for example, while you are disputing the accuracy of your data or while a complaint investigation is ongoing.

06
Right to Lodge a Complaint with the Authorities

If you believe that WCT88 has violated your privacy rights under PDPA 2010, you are entitled to file a complaint with the Personal Data Protection Commissioner of Malaysia, in addition to seeking redress through a court of competent jurisdiction.

How to submit a request relating to your rights: To submit any request relating to your privacy rights, contact the WCT88 team at support@wct88.click stating the type of request, your WCT88 account number, and the required identity verification details. We will respond within 14 business days.

9. Children's Privacy

The WCT88 platform is intended solely for adults aged 18 and above. WCT88 does not knowingly collect or process personal data from individuals under the age of 18. The WCT88 registration process requires confirmation that the user is at least 18 years old, and WCT88 performs age verification during withdrawal processing.

If WCT88 discovers that personal data has been inadvertently collected from a child, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their underage child may have registered a WCT88 account are advised to contact our support team at support@wct88.click immediately.

10. Links to Third-Party Services

The WCT88 platform integrates with third-party services necessary for its operations — primarily payment gateways that process deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX Maybank2u/CIMB Clicks. When you interact with these payment gateways to carry out a transaction, you are also subject to the respective provider's privacy policy for the portion of that interaction that takes place within their environment.

WCT88 is not responsible for the privacy practices of any third party that is not under our direct control. We encourage users to read the privacy policies of the payment providers they use in order to fully understand how their data is handled during the transaction process.

11. Changes to This Privacy Policy

WCT88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, developments in Malaysian privacy law, or changes to platform operations. When material changes are made to this policy, WCT88 will:

  • Updating the "Last Updated" date displayed at the top of this page
  • Displaying in-platform notifications on WCT88 to inform users of important changes
  • For highly material changes, sending a notification via SMS or email to the contact details registered with your account

Continued use of the WCT88 platform after the effective date of any updated policy will be considered acceptance of the revised terms. If you do not agree with any changes to this Privacy Policy, you should stop using WCT88 and contact our team to close your account.

Effective date of this document: 1 January 2026. The latest version of WCT88's Privacy Policy is always available on this page at wct88.click/privacy-policy.

12. How to Contact Us Regarding Privacy Issues

For any questions, concerns, or requests regarding WCT88's Privacy Policy or the handling of your personal data, you may reach us through the following channels. Our team will respond within 14 business days for all privacy-related enquiries:

Privacy Team Email

For data access requests, corrections, deletions or any privacy policy enquiries requiring a formal written response.

support@wct88.click
24/7 Live Chat

For general privacy and account security enquiries requiring a prompt response. Our team replies in under 2 minutes.

Available on the WCT88 platform
WhatsApp Support

For urgent issues relating to account security or transactions that require immediate action outside of regular hours.

Number available after login

Frequently Asked Questions About WCT88's Privacy Policy

Answers to the questions users ask most about privacy and data security at WCT88

No, WCT88 has never sold, rented, or shared users' personal data with any third party for marketing or commercial purposes, and never will. This is an unwavering policy. The data you provide to WCT88 during registration and platform use — including your phone number, payment information, and activity records — is used solely by WCT88 for the operation of your account and the improvement of our services. WCT88 does not sell user lists to advertisers, marketing service providers, or any other party. If you receive unsolicited marketing communications and suspect they may be linked to your data from WCT88, please contact us at support@wct88.click immediately.

All financial transactions at WCT88 — whether via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay or FPX Maybank2u and CIMB Clicks — are processed through payment gateways that comply with PCI-DSS (Payment Card Industry Data Security Standard). This means your sensitive financial data is transmitted through encrypted channels and processed in a secure environment. WCT88 itself does not store your full card number, PIN or eWallet password — this information is transmitted directly between your device and the relevant payment provider via secure channels. All communications between the WCT88 platform and your device are also protected by 256-bit SSL encryption, meaning your data cannot be intercepted in transit even by those accessing the same network.

To request deletion of your personal data from WCT88's records, submit a written request to support@wct88.click with "Data Deletion Request" as the email subject. Include your WCT88 account number and the required identity verification (registered phone number). WCT88 will process your request within 14 business days. Please note that certain records may not be fully deletable due to legal obligations — in particular, financial transaction records that Malaysian tax and financial laws require to be retained for seven years. In such cases, WCT88 will inform you which data can be deleted and which must be retained for legal reasons, along with the applicable retention period. Once your account is fully closed, any data that has been deleted cannot be recovered.

When your WCT88 account is closed — whether at your own request or for other reasons — WCT88 will retain the necessary data for the retention periods prescribed under Malaysian law. Financial transaction records are kept for seven years in accordance with financial reporting requirements. Support communication logs are retained for 24 months. Data that is no longer required by law will be securely deleted within a reasonable timeframe. For inactive accounts that have not been formally closed, data is retained under the same retention policy. WCT88 will not use data belonging to closed accounts for any marketing or active operational purposes. If you apply for a permanent self-exclusion from the WCT88 platform, that exclusion record is retained indefinitely to ensure your request is honoured should any attempt be made to open a new account in the future.

WCT88 uses general location information derived from your IP address — not precise GPS data from your device — for account security purposes. This allows WCT88's systems to detect suspicious login attempts from locations that differ significantly from where you normally access the platform. WCT88 does not require or request GPS permission from your phone. If you use a VPN while accessing WCT88, the detected location may not reflect your actual location — this may trigger additional security checks to protect your account. For optimal security, WCT88 recommends accessing the platform from your usual location without a VPN. IP-based location information is not used for advertising or marketing profiling purposes.

WCT88 Privacy Commitment Summary: Your personal data is protected with SSL 256-bit encryption and handled in full accordance with Malaysia's Personal Data Protection Act 2010. WCT88 does not sell your data to anyone. You have the full right to access, correct, or request deletion of your data at any time by contacting us at support@wct88.click. For complete information about your rights, refer to Section 8 of this Privacy Policy or read Terms & Conditions us.

Other Important WCT88 Documents You Should Read

Register with WCT88 — The Malaysian Casino Platform That Protects Your Data at All Times

With a transparent privacy policy, 256-bit SSL encryption, and full compliance with Malaysia's PDPA 2010, you can enjoy slots, Live Casino and Sports Betting at WCT88 with complete peace of mind — knowing your data is always protected.

For users aged 18 and above only. Please play responsibly. Terms & conditions apply.

Bahasa Melayu