Privacy Policy

This Privacy Policy ("Policy") sets out how Wosbet ("the Company", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal data of users ("you", "your", or "the User") who access or use the Wosbet platform at wosbet.casa, including all associated services such as sports betting, live casino, slots, and customer support channels.

Wosbet is committed to protecting the personal information of all our members, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. This Policy has been prepared in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA Malaysia), and reflects international best practices for online gaming platforms.

By accessing the Wosbet Platform, registering an account, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably identify a natural person, directly or indirectly — including name, IC number, email address, phone number, IP address, and financial account details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means Wosbet, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of Wosbet, such as payment gateway providers (e.g., FPX, DuitNow operators) and KYC verification services.
• "KYC" (Know Your Customer) refers to the identity and age verification process required before a User can withdraw funds from their Wosbet account.
• "Cookies" means small text files stored on your browser or device that allow the Platform to recognise your session and preferences.
• "PDPA" refers to the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions.

Wosbet collects personal data across several categories. The table below summarises the types of data we hold and their typical source:

Wosbet collects personal data through the following means:

Wosbet processes your personal data only for specific, legitimate purposes. The primary purposes for which we use your data are:

• Account Management: Creating, maintaining, and administering your Wosbet account, including resetting passwords and managing account preferences.
• Identity Verification (KYC): Verifying your identity and age (21+) in compliance with responsible gambling obligations prior to processing withdrawals.
• Transaction Processing: Processing deposits and withdrawals via supported Malaysian payment methods (Maybank, CIMB, Touch 'n Go eWallet, DuitNow, FPX, and cryptocurrency channels).
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and multi-accounting on the Platform.
• Responsible Gambling: Monitoring betting patterns to identify at-risk behaviour and enforce self-exclusion or deposit limits requested by Users.
• Customer Support: Responding to queries, complaints, and requests submitted through live chat, email, or other support channels.
• Promotional Communications: Sending relevant offers and promotions to eligible players — only where you have provided consent. You may opt out at any time.
• Legal Compliance: Fulfilling our obligations under applicable law, responding to regulatory inquiries, and maintaining records as required by anti-money laundering (AML) regulations.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the design, performance, and functionality of the Wosbet Platform.

All personal data processing carried out by Wosbet is underpinned by at least one of the following lawful bases, in accordance with the PDPA 2010 and applicable data protection frameworks:

• Contractual Necessity: Processing required to fulfil the contract between you and Wosbet — including account creation, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with our legal and regulatory duties, including KYC/AML obligations and record-keeping requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Where processing is based on your freely given, specific, and informed consent — such as for marketing communications. Consent may be withdrawn at any time.

Wosbet does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data only in the following limited circumstances:

Wosbet retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:

• Active Account Data: Retained for the duration of your account relationship with Wosbet plus 5 years following account closure, in compliance with AML record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of 7 years from the date of the transaction, as required under applicable financial regulations.
• KYC Documents: Identity verification documents are retained for 5 years following account closure, or longer if required by a competent authority.
• Support Communications: Live chat transcripts and support emails are retained for 2 years unless required for an ongoing dispute or investigation.
• Technical Logs: Server logs and session data are retained for 12 months for security and fraud analysis purposes.
• Marketing Consent Records: Consent records are retained for the duration of the consent plus 3 years following withdrawal of consent.

Upon expiry of the applicable retention period, data is securely deleted or permanently anonymised in accordance with our data disposal procedures.

The Wosbet Platform uses cookies and similar tracking technologies to enhance your user experience, maintain your session, and gather analytical insights. The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function — these manage your login session, maintain your account state, and enable secure authentication. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data on how users interact with the Platform — pages visited, features used, errors encountered — to help us improve functionality and performance.
• Functional Cookies: Remember your preferences such as language settings and display preferences to provide a more personalised experience on subsequent visits.
• Security Cookies: Used for fraud detection and prevention, including device fingerprinting and session integrity monitoring.

Wosbet employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and our servers.
• AES-256 encryption for sensitive data stored at rest in our databases.
• Multi-factor authentication (MFA) available for all player accounts.
• Regular independent penetration testing and vulnerability assessments of our infrastructure.
• Role-based access controls ensuring staff access data only on a need-to-know basis.
• 24/7 security monitoring and automated intrusion detection systems.
• Secure, encrypted backup systems with geographically distributed redundancy.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely secure. Wosbet will notify affected users and relevant authorities promptly in the event of a data breach affecting their personal data, where required by applicable law.

As a data subject under the PDPA 2010 and applicable data protection frameworks, you hold the following rights in relation to your personal data held by Wosbet. To exercise any of these rights, contact our support team at [email protected] (plain text — not a clickable link).

We will respond to all data rights requests within 30 calendar days of receipt. For complex or high-volume requests, we may extend this period by a further 30 days, in which case we will notify you accordingly. There is no fee for exercising your rights unless a request is manifestly unfounded or excessive.

The Wosbet Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21.

Age verification is a mandatory step of the Wosbet KYC process. If we discover that personal data has been collected from a user who is under 21, we will immediately delete that data and close the associated account. Any funds held in such an account will be returned to the originating payment method following a compliance review.

The Wosbet Platform integrates with third-party payment service providers — including Maybank2u, CIMB Clicks, Public Bank Online, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — to facilitate deposits and withdrawals for Malaysian players. Each of these providers operates under its own privacy policy and data governance framework.

When you initiate a payment transaction on the Wosbet Platform, you will be redirected to or interact with the relevant payment provider's interface. The data you submit during that interaction is processed by that provider and is subject to their privacy terms. Wosbet is not responsible for the data practices of third-party payment or service providers.

We recommend reviewing the privacy policy of any third-party service you interact with through or in connection with the Wosbet Platform.

Wosbet reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. The "Last Updated" date at the top of this page will be revised to reflect each amendment.

Where changes are material — meaning they affect the manner in which we process your data in a way that may have a significant impact on your privacy rights — we will provide notice via email to your registered address or via a prominent in-platform notification prior to the changes taking effect.

Your continued use of the Wosbet Platform following publication of any amendment constitutes your acceptance of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Wosbet, please contact our Data Protection team through the following channels. All contact details are provided as plain text only and are not clickable links:

We are committed to resolving all privacy-related queries fairly and efficiently. If you are not satisfied with our response, you may escalate your concern to the Personal Data Protection Department (PDPD) of Malaysia (text reference only — not a link), the competent supervisory authority under the PDPA 2010.