Reference

How playwin88 Handles Your Personal Information

This Privacy Policy explains what information we collect when you use playwin88, how we use it, and the choices you have over your own data.

Account data protectionPayment privacy — Touch 'n Go eWallet, Boost, GrabPayYour right to access your dataClear contact path for data requests
playwin88 How playwin88 Handles Your Personal Information
DATA HANDLING STANDARDS

How We Protect and Manage Your Information

Data security at playwin88 is built around the account actions you take every day — logging in, depositing via your e-wallet, checking transaction history. Each of these touchpoints is covered by the practices below. We keep this consistent across all payment rails and device types.

Cookies and Session Tracking

We use cookies to keep your session active and to remember your preferences. You can adjust cookie settings in your browser at any time; some site functions may behave differently if certain cookies are off.

Account Security Practices

Login is protected by an OTP step sent to your registered contact. Any change to your account details — including linked payment methods like Boost or GrabPay — triggers a verification prompt.

Data Retention and Deletion

We keep your data only as long as needed. Active account data is held while your account is open; once closed, we follow the retention schedule required under applicable local law before purging records.

Who Can Access Your Data

Internal access to your personal data is role-restricted. Payment processors receive only the transaction data needed to clear your Touch 'n Go eWallet or DuitNow transfer — nothing more.

DATA CONTACT PATHS

How to Reach Us About Your Privacy

If you have a question about how we handle your data, want to correct information on your account, or need to submit a formal data request, we have three ways to reach our team. Players in Kota Bharu and across Malaysia use the same contact paths — there is no regional difference in how we process data queries. Responses to written data requests are handled separately from general account support.

Live Chat Reach our support team directly through the live chat window in your account. Suitable for quick data clarifications and account-level queries about stored information.
Email — Data Requests For formal requests — data access, correction or deletion — send us an email. Written requests create a traceable record and we will respond within a reasonable timeframe.
Account Settings Some data preferences, such as marketing communication opt-outs, can be managed directly inside your account settings without contacting support.

Common Questions About Your Data and Privacy

These are the questions we hear most often about how we handle account and payment data. If your question is not covered here, reach out via live chat or email and our team will walk you through it.

We collect the details you enter during registration — name, contact information and your chosen payment method. Device and session data is also logged automatically to protect your account.

We share data only with processors needed to complete your transactions — for example, the networks behind Touch 'n Go eWallet, Boost or GrabPay. We do not sell your data.

Send a written request to our support email. We will verify your identity against your account details and provide a summary of the personal data we currently hold for you.

Yes. Submit a deletion request via email. We will action it subject to any legal retention requirements — some transaction records must be held for a period under applicable local law before they can be removed.

Cookies keep your session running and save your preferences. You control cookie permissions through your browser settings. Turning off certain cookies may affect how parts of the account area function.

Yes — the same policy covers all payment routes, whether you deposit via FPX, Maybank2u or any supported e-wallet. The data we collect is the same across all methods.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.