Wz66 Privacy Policy – Malaysian Member Data Protection & Privacy

1 Introduction

Wz66 is an integrated online entertainment platform offering a wide range of games including slots, fish shooting, live dealer, sports betting, and esports for players in Malaysia. We understand that your trust is our most valuable asset, and that trust begins with transparency in how we handle your personal data.

This Privacy Policy details the types of information we collect when you register and use the wz66 platform, the purpose of such collection, how we store and protect it, and the rights you hold over your own personal data.

This document applies to all users of the wz66 platform, including website visitors, registered members, active players, and anyone who interacts with our services through any device or channel provided by wz66.

2 Data We Collect

Wz66 collects your personal information through various means depending on how you interact with our platform. The following are the categories of data we may collect:

We do not collect sensitive data such as health information, religious beliefs, or political views unless voluntarily submitted by you in a context relevant to our services, for example, a self-exclusion request on health grounds.

3 How We Use Your Data

Wz66 uses your personal data responsibly and only for legitimate purposes. The following are the primary purposes for which your data is used:

• Identity Verification & KYC: Ensuring every member who registers is a real individual who meets the minimum eligibility requirements, including the age limit of 18 and other applicable legal requirements.
• Transaction Processing: Processing all deposit and withdrawal transactions securely and efficiently, including payment verification and financial records required for accounting and audit purposes.
• Account Security: Detecting and preventing unauthorised access, fraudulent activity, money laundering, and other security threats to your account and the wz66 platform as a whole.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate assistance or protection limits to players who need them.
• Service Communications: Sending you important account notifications, transaction confirmations, security updates, and relevant service information.
• Platform Improvement: Analysing usage data in aggregated and anonymised form to understand user needs and improve the gaming experience on the wz66 platform.
• Legal Compliance: Fulfilling our obligations under applicable Malaysian laws, including the PDPA, anti-money laundering (AML) requirements, and lawful regulatory directives.
• Marketing Communications: With your consent, we send information about promotions, bonuses, and exclusive offers that may interest you. You may withdraw this consent at any time.

4 Legal Basis for Data Processing

Every personal data processing activity carried out by wz66 is supported by at least one valid legal basis, as follows:

• Contract Performance: Processing is necessary to perform the agreement between you and wz66, including the provision of gaming services, transaction processing, and account management.
• Legal Obligation: Processing is required to comply with legal obligations applicable to wz66 under Malaysian law, including KYC and AML requirements.
• Legitimate Interest: Processing is necessary for the legitimate interests of wz66, such as fraud prevention, network security, and service improvement, provided these interests do not override your fundamental rights.
• Consent: For certain processing activities such as marketing communications, we rely on your explicit consent. You have the right to withdraw this consent at any time without affecting the validity of any processing carried out prior to withdrawal.

5 Data Sharing with Third Parties

Wz66 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, we may share your data in the following limited circumstances:

• Service Providers: We work with trusted third-party service providers, including payment processors, KYC service providers, licensed game providers, and IT infrastructure providers. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.
• Regulatory Bodies & Law Enforcement: We will disclose data when required by a court order, regulatory directive, or lawful instruction from a qualified law enforcement agency.
• Fraud Prevention: Data may be shared with recognised fraud prevention agencies to detect and prevent financial crime.
• Business Transfer: In the event of any merger, acquisition, or transfer of wz66 assets, user data may be transferred as part of those assets, subject to the same or stricter privacy policy.

6 Cookies & Tracking Technologies

The wz66 platform uses cookies and similar tracking technologies to enhance the user experience and collect analytics data required for platform operations. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login session authentication, security, and basic preferences. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, display settings, and game choices to provide a more personalised experience.
• Analytics Cookies: Helping us understand how users interact with the platform, which pages are most frequently visited, and where users encounter difficulties. This data is used in aggregated and anonymised form.
• Performance Cookies: Monitoring platform performance and identifying technical issues that need to be resolved to ensure a seamless experience for all users.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the wz66 platform. For more information on managing cookies, refer to your browser's help guide.

7 Data Retention & Deletion

Wz66 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: Retained for the duration your account is active, plus the minimum period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Data: Retained for a minimum of 5 years after the business relationship ends, in accordance with applicable AML legal requirements.
• Security Logs: Retained for 12 months to assist in security incident investigations if required.
• Marketing Data: Deleted within 30 days after you withdraw consent for marketing communications.

Once the retention period expires, your data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.

8 Your Rights Over Personal Data

As a data subject, you have the following rights guaranteed under applicable data protection laws:

To exercise any of the above rights, please contact our Privacy Officer by email at [email protected] or via live chat on the platform. We will process your request within the timeframe required by law.

9 Data Security Measures

Wz66 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• End-to-End Encryption: All data transmitted between your device and wz66 servers is encrypted using TLS 1.3 protocol with AES-256 encryption, ensuring security during data transmission.
• Strict Access Control: Only authorised personnel with a legitimate business need may access members' personal data. All access is logged and continuously monitored.
• Two-Factor Authentication: wz66 internal systems are protected with two-factor authentication (2FA) to prevent unauthorised access by external or internal parties.
• Regular Security Audits: wz66 conducts regular penetration testing and security audits by independent cybersecurity experts to identify and address any vulnerabilities.
• Staff Training: All staff who handle personal data undergo regular data protection training and are bound by confidentiality agreements.
• Incident Response Plan: wz66 maintains a tested security incident response plan, ensuring that any data breach can be identified, contained, and reported promptly.

10 Third-Party Links & Services

The wz66 platform integrates with third-party service providers including game providers, payment processors, and analytics providers. Please note that each of these third-party service providers maintains their own privacy policy, which is separate from the wz66 Privacy Policy.

Wz66 thoroughly vets every third-party partner to ensure they meet adequate data protection standards before any integration is implemented. However, wz66 is not directly responsible for the privacy practices of those third parties beyond the scope of the services they provide to our platform.

We encourage you to read the privacy policies of the relevant third-party service providers to fully understand how your data may be handled by them in the context of the services they provide.

11 Changes to This Privacy Policy

Wz66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform service improvements. Each version will be marked with a "Last Updated" date at the top of this document.

For material and significant changes, wz66 will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. Your continued use of the wz66 platform after such notice will be deemed acceptance of the updated terms.

12 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how wz66 handles your personal data, you may contact our Data Protection Officer (DPO) through the following channels:

• Privacy Email: [email protected] – for privacy-specific enquiries and data subject rights requests
• General Support Email: [email protected] – for general account and service enquiries
• Live Chat 24/7: Available directly on the wz66 platform after login

We aim to respond to all privacy-related inquiries within 5 business days. For formal requests relating to data subject rights, the processing period is within 21 business days as stipulated under Malaysia's PDPA.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in the jurisdiction where you reside.