Privacy Policy — W88Cric

1. Introduction

W88Cric (hereinafter referred to as "the Platform", "we", "us", or "our") is committed to protecting the privacy and personal data of all users who access and use the services available at w88cric.cam and any associated subdomains or mobile-optimised versions of the Platform.

This Privacy Policy (hereinafter referred to as "the Policy") sets out, in clear and transparent terms, the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, the parties with whom we may share data, and the rights available to you as a data subject.

This Policy applies to all individuals who:

• Visit or browse the Platform without registering an Account;
• Register an Account and use the Platform's sports betting, live casino, or related services;
• Contact the Platform's support team via live chat or email;
• Participate in any promotion, loyalty programme, or other marketing activity conducted by W88Cric.

By accessing the Platform or registering an Account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the Platform immediately.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including but not limited to a name, identification number, location data, email address, or online identifier.
• "Data Subject" — the natural person to whom the personal data relates; in the context of this Platform, the registered User or website visitor.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. W88Cric is the Data Controller for data processed through this Platform.
• "Data Processor" — any third party engaged by W88Cric to process personal data on its behalf, subject to a data processing agreement.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or erasure.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC" — Know Your Customer; the identity verification process required under the Platform's licensing obligations.
• "Cookie" — a small text file placed on a User's device by a website to store preferences, session information, or tracking data.

3. Data Controller Information

W88Cric acts as the Data Controller for all personal data collected through the Platform at w88cric.cam. The Platform operates under international online gaming licensing (Curacao jurisdiction) and applies data protection standards consistent with internationally recognised privacy frameworks.

For all data protection-related enquiries, Users may contact the Platform's designated data protection contact as follows:

• Contact method: Email to [email protected] with the subject line "Data Protection Enquiry"
• Live Chat: Available 24/7 on the Platform — state "Data Protection" at the start of the conversation to be directed to the appropriate team member
• Response time: Data protection enquiries are acknowledged within 3 business days and responded to substantively within 30 calendar days of receipt.

4. Categories of Personal Data We Collect

W88Cric collects personal data through several channels: information you provide directly during registration and account management; data generated automatically through your use of the Platform; and information obtained from third-party verification and payment service providers as necessary for operational and regulatory purposes.

4.1 Data Provided Directly by the User

4.2 KYC and Identity Verification Data

As required by our licensing obligations, the following documentation is collected during the identity verification process:

• Scanned or photographed copies of your Malaysian identity card (MyKad) — front and back — or equivalent government-issued identification;
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days);
• Selfie or live photo verification images where required;
• Documentation evidencing ownership of any payment method linked to the Account.

4.3 Transactional and Gaming Data

4.4 Technical and Device Data

When you access the Platform, the following technical data is automatically collected:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session duration, pages visited, and click-path data;
• Referral URL (the page from which you arrived at the Platform).

5. Legal Basis for Processing

W88Cric processes personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil the contract between W88Cric and the User — including account creation, payment processing, and withdrawal execution — is undertaken on the basis that such processing is necessary for the performance of the contract.
• Legal Obligation: Certain processing activities are required to comply with applicable legal and regulatory obligations including anti-money laundering (AML) requirements, KYC verification, and responsible gambling provisions mandated by the Platform's licensing authority.
• Legitimate Interests: Processing carried out on the basis of the Platform's legitimate interests, including fraud prevention, platform security, system optimisation, and analytics, where such interests are not overridden by the data subject's privacy rights.
• Consent: Where no other lawful basis applies, the Platform will seek the User's explicit consent prior to processing, such as for optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. How We Use Your Personal Data

W88Cric uses the personal data it collects for the following specific purposes:

6.1 Account Administration

To create, verify, manage, and maintain your Account, including processing KYC documentation, updating account settings, and enabling access to Platform services.

6.2 Payment Processing

To process deposits made via Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, cryptocurrency wallets (BTC/ETH/USDT/BNB), and card payments; and to execute withdrawal requests to verified payment methods.

6.3 Regulatory and AML Compliance

To fulfil obligations under applicable anti-money laundering, counter-terrorist financing, and responsible gambling regulations, including transaction monitoring, suspicious activity reporting, and age and identity verification.

6.4 Customer Support

To respond to Account queries, resolve disputes, process complaints, and provide technical assistance through live chat and email support channels.

6.5 Responsible Gambling Monitoring

To monitor player behaviour for indicators of problem gambling, to apply deposit limits and self-exclusion requests, and to ensure players are treated fairly in accordance with responsible gambling commitments.

6.6 Fraud Prevention and Platform Security

To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, and other conduct that may constitute a breach of the Platform's Terms and Conditions or applicable law.

6.7 Service Improvement and Analytics

To analyse aggregated and anonymised usage data for the purpose of improving the Platform's functionality, user experience, game catalogue, and customer service quality.

6.8 Marketing Communications (Consent-Based Only)

Where the User has expressly consented, to send promotional materials, bonus notifications, and Platform updates by email or on-Platform messaging. Users may opt out of marketing communications at any time via their Account settings or by contacting support.

7. Data Sharing & Third-Party Disclosure

W88Cric does not sell, rent, or trade personal data to third parties. Data is shared only in the following circumstances and only to the extent strictly necessary:

7.1 Service Providers and Data Processors

We engage carefully selected third-party service providers to assist in operating the Platform. These include payment gateway providers (for processing deposits and withdrawals via FPX, DuitNow, Touch 'n Go and other channels), KYC and identity verification partners, cloud hosting infrastructure providers, and customer support platform operators. All such parties are contractually bound to process data only on our instructions and to maintain appropriate security standards.

7.2 Game Software Providers

Game providers whose titles are integrated into the Platform may receive certain technical session data (such as session tokens or player identifiers) as necessary to operate their games. Personal identification data is not transmitted to game providers unless required for progressive jackpot administration or dispute resolution.

7.3 Regulatory and Law Enforcement Disclosure

W88Cric may disclose personal data to licensing authorities, law enforcement agencies, or financial intelligence units where required by law, regulation, or a valid court order. Such disclosures will be made only to the extent required and will be documented internally.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of the Platform's assets, personal data may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and of any changes to this Policy that result.

8. Cookies & Tracking Technologies

8.1 What We Use Cookies For

The Platform uses cookies and similar tracking technologies (including local storage and session identifiers) for the following purposes:

• Essential Cookies: Required for the Platform to function correctly — including maintaining your logged-in session, storing language preferences, and enabling secure transactions. These cannot be disabled without impairing core functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data on how users navigate the Platform, which pages are most visited, and where technical errors occur. This data is used exclusively for Platform improvement.
• Security Cookies: Used to detect and prevent fraudulent activity, identify bot traffic, and protect the integrity of your Account.
• Preference Cookies: Used to remember your display settings, notification preferences, and game lobby configurations across sessions.

8.2 Cookie Management

You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect certain features of the Platform, including session persistence and personalisation. Continued use of the Platform following the display of the cookie notice constitutes consent to the use of cookies as described in this section.

9. Data Retention Periods

W88Cric retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following retention periods apply as a general guideline:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with the Platform's data disposal procedures.

10. Data Security Measures

W88Cric implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between the User's device and the Platform's servers is encrypted in transit using industry-standard protocols;
• Encrypted Data Storage: Sensitive data including passwords (which are stored as cryptographic hashes only) and payment details are encrypted at rest;
• Access Controls: Access to personal data within the Platform's systems is restricted on a strict need-to-know basis, with role-based access controls and audit logging;
• Regular Security Audits: The Platform undergoes periodic penetration testing and security assessments by qualified third-party specialists;
• Fraud Detection Systems: Automated monitoring systems are in place to detect unusual account activity, suspicious transaction patterns, and potential data breaches.

11. Your Data Subject Rights

As a data subject, you have the following rights with respect to your personal data held by W88Cric. To exercise any of these rights, please contact the Platform via the channels listed in Section 15.

W88Cric will respond to all valid data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days with notification to the requestor.

12. International Data Transfers

As an internationally operating platform, W88Cric may transfer personal data to servers and service providers located outside of Malaysia. Such transfers may include transfers to jurisdictions that do not have data protection laws equivalent to those applicable in Malaysia.

Where personal data is transferred internationally, W88Cric takes appropriate safeguards to ensure the data is afforded a comparable level of protection, including:

• Entering into data processing agreements with all international data processors that include contractual data protection obligations;
• Limiting international transfers to providers operating in jurisdictions with recognised data protection frameworks;
• Ensuring that all cross-border data transfers are conducted on a need-to-process basis with appropriate access restrictions in place.

13. Minors & Age-Restricted Services

The Platform's services are strictly restricted to individuals who are 21 years of age or older. W88Cric does not knowingly collect personal data from individuals below the age of 21. Any Account found to belong to a minor will be suspended immediately, all associated personal data will be securely deleted (subject to any retention obligations), and any deposited funds will be returned to their source following investigation.

If you have reason to believe that a minor has registered an Account or provided personal data to W88Cric, please notify us immediately at [email protected] with the subject line "Underage Account Report".

14. Amendments to this Privacy Policy

W88Cric reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will provide advance notice via a prominent notice on the Platform homepage and, where appropriate, direct notification to registered Users via their registered email address.

The "Last Updated" date displayed at the top of this Policy reflects the most recent revision. We encourage Users to review this Policy periodically. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

15. Contact & Complaints

For any queries, concerns, or requests related to this Privacy Policy or the processing of your personal data by W88Cric, please contact us through the following channels. Email addresses are provided as plain text and are not clickable links.

• Data Protection Enquiries (Email): [email protected] — subject line: "Data Protection Enquiry"
• General Support (Live Chat): Available 24/7 on the Platform — state "Privacy / Data Request" at the start of the conversation
• Acknowledgement timeframe: 3 business days; substantive response within 30 calendar days

If you are not satisfied with the Platform's response to a data protection complaint, you may have the right to escalate the matter to a relevant supervisory authority or data protection regulator in your jurisdiction.