Privacy Policy — wow33

01 Introduction

This Privacy Policy (the "Policy") sets out the data protection practices of wow33 (hereinafter "wow33", "we", "us", or "our") in connection with the operation of the online gaming and sports betting platform located at https://wow33.casa (the "Platform"). This Policy applies to all personal data collected from registered members, prospective users, and visitors to the Platform.

wow33 is committed to processing personal data in a lawful, fair, and transparent manner, in accordance with applicable data protection legislation. As a platform serving Malaysian players — including those based in Kuala Lumpur, Selangor, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia — we recognise the importance of ensuring that all personal data entrusted to us is handled with the highest standards of care and security.

By registering an account on wow33 or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood the practices described herein and consent to the collection and processing of your personal data as set out in this Policy.

This Policy should be read in conjunction with our Terms & Conditions, which govern the broader relationship between you and wow33. In the event of any inconsistency between this Policy and the Terms & Conditions regarding data-specific matters, this Policy shall prevail.

02 Definitions

The following key terms are used throughout this Policy with the meanings given below:

• "Controller" — the entity that determines the purposes and means of processing personal data; in this context, wow33.
• "Personal Data" — any information that identifies or can be used to identify a living natural person, directly or indirectly, including name, identification number, contact details, location data, and online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Subject" — the individual to whom the personal data relates; i.e., the registered user or visitor of the Platform.
• "Third Party" — any natural or legal person other than the Data Subject, the Controller, or a processor acting under the Controller's authority.
• "Consent" — any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes by which they agree to the processing of their personal data.
• "KYC" — Know Your Customer; the identity verification process conducted by wow33 to verify a user's identity and meet anti-money laundering obligations.
• "Platform" — the wow33 website, mobile-optimised site, and any related applications accessed via https://wow33.casa.

03 Data We Collect

wow33 collects personal data through your interactions with the Platform. The categories of data we collect are described below, grouped by the context in which they are gathered:

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless specifically required by applicable law or regulation (for example, where a liveness check is mandated for identity verification purposes). Where such data must be collected, we will obtain your explicit consent and apply enhanced security controls.

04 Legal Basis for Processing

wow33 processes personal data only where a valid legal basis exists. The primary legal bases upon which we rely are as follows:

1. Contractual Necessity: Processing is necessary to perform the contract between you and wow33 — including account creation, payment processing, game participation, and customer support. Without this processing, we cannot provide the Services.
2. Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and record-keeping obligations imposed by relevant authorities.
3. Legitimate Interests: Processing is necessary for the legitimate interests of wow33, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, internal analytics, and service improvement.
4. Consent: Where we rely on your consent — for example, for non-essential cookies or direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

05 How We Use Your Data

Personal data collected by wow33 is used for the following purposes:

• To create and administer your wow33 account and verify your identity in accordance with KYC requirements.
• To process deposits and withdrawals via your chosen payment method, including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency channels.
• To provide access to all Platform features including slots, live casino, sports betting (EPL, Liga Super Malaysia, UFC), live football markets, lottery, and arcade games.
• To administer bonuses, promotional offers, VIP tier benefits, and loyalty rewards in accordance with our Terms & Conditions.
• To conduct fraud detection, prevent money laundering, and comply with applicable regulatory obligations.
• To respond to your support enquiries, resolve complaints, and communicate with you regarding your account.
• To send you service-related communications, including transaction confirmations, security alerts, and policy update notices. You cannot opt out of these operational communications while you hold an active account.
• To send you marketing communications about wow33 promotions, new games, and special offers, where you have provided consent to receive such communications.
• To conduct internal analytics and improve the performance, security, and user experience of the Platform.
• To enforce our Terms & Conditions and exercise or defend legal claims where necessary.

06 Data Sharing & Disclosure

wow33 does not sell your personal data. We may share personal data with third parties only in the limited circumstances described below:

• Payment Processors: Financial transaction data is shared with our payment processing partners — including the operators of FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and the relevant Malaysian banks — to the extent necessary to process your deposits and withdrawals.
• Identity Verification Providers: KYC documentation may be shared with certified identity verification service providers to fulfil our regulatory obligations. These providers are contractually bound to maintain data security and confidentiality.
• Fraud Prevention & AML Agencies: We may share data with authorised fraud prevention and anti-money laundering bodies where we are legally required or authorised to do so.
• Game Providers: Aggregated, pseudonymised usage data may be shared with our game content providers to support game performance analysis. This data does not directly identify you.
• Legal & Regulatory Authorities: wow33 will disclose personal data to courts, law enforcement agencies, or regulatory bodies where required by applicable law, a court order, or legitimate legal process.
• Professional Advisers: Personal data may be disclosed to our legal, financial, and compliance advisers on a need-to-know basis and subject to confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of the Platform or its assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

All third parties with whom wow33 shares personal data are required to implement appropriate technical and organisational security measures and to process the data solely for the purposes for which it was disclosed.

07 Data Retention

wow33 retains personal data for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following retention principles apply:

• Active Accounts: Personal data associated with active wow33 accounts is retained for the duration of the account's existence and for a minimum period of five (5) years following account closure, to fulfil legal, regulatory, and anti-money laundering obligations.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following the closure or suspension of the associated account.
• Support Communications: Customer support records, including live chat transcripts and email correspondence, are retained for a minimum of two (2) years.
• Marketing Consent Records: Records of your marketing consent or withdrawal thereof are retained for the duration of your account and for five (5) years thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that makes re-identification impossible. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing until deletion is feasible.

08 Cookies & Tracking Technologies

wow33 uses cookies, web beacons, and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website to facilitate certain functions and to collect usage information. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No consent is required for these cookies.
• Functional Cookies: These cookies remember your preferences — such as language settings, last game played, and notification preferences — to personalise your experience. They are activated based on your interactions with the Platform.
• Analytical Cookies: These cookies collect anonymised data about how visitors interact with the Platform, including pages visited, time spent, and error messages encountered. This data helps us improve Platform performance and user experience.
• Marketing Cookies: Where you have given consent, marketing cookies may be used to deliver relevant promotional content. These cookies do not track your activity on third-party websites.

You may manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may impair the functionality of the Platform and prevent you from accessing certain features, including your account.

09 Data Security

wow33 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including password hashes and payment method identifiers.
• Multi-factor authentication (MFA) options available to all registered accounts.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Strict access controls and role-based permissions for all internal staff with access to personal data systems.
• Automated fraud detection and anomaly monitoring systems operating on a continuous basis.
• Incident response protocols enabling rapid containment and notification in the event of a data security incident.

Whilst wow33 takes every reasonable precaution to safeguard your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that your device is adequately secured when accessing the Platform.

10 Your Rights as a Data Subject

As a Data Subject, you have the following rights in relation to your personal data held by wow33. To exercise any of these rights, please contact our support team via live chat or by email at the address set out in Section 14 of this Policy.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed and on what legal basis.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. We will update your records within a reasonable timeframe upon receipt of a valid correction request.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. This right is subject to our legal obligations to retain certain data, as described in Section 7.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where processing is unlawful but you do not wish for the data to be deleted.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests at any time. You also have the right to object to direct marketing communications at any time, without giving any reason.
• Rights Related to Automated Decision-Making: Where a decision is made solely by automated means that has a significant legal or similarly significant effect on you, you have the right to request human review of that decision and to contest the outcome.

We will respond to all valid data subject requests within thirty (30) calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it within the initial thirty-day period.

We will not charge a fee for processing your request unless it is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or decline to act on the request.

11 Minors & Age Restriction

The wow33 Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect personal data from any person under the age of 21. If you are under 21, you are not permitted to register an account or use any of the Services provided by wow33.

If wow33 becomes aware that personal data has been collected from an individual under the age of 21 without parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have registered on the Platform, please contact our support team immediately via live chat.

Parents and guardians are encouraged to install appropriate parental controls and internet filtering software on devices accessible to minors. Assistance with parental control resources is available through our Responsible Gambling page.

12 International Data Transfers

The personal data we collect is primarily stored and processed on servers that may be located in one or more jurisdictions. Where personal data is transferred to countries outside Malaysia, wow33 ensures that such transfers are carried out in compliance with applicable data protection legislation and that equivalent safeguards are in place to protect your data.

Safeguards for international transfers may include contractual clauses binding the recipient to data protection standards equivalent to those applied within Malaysia, or reliance on the recipient's adherence to an approved international framework for data protection.

By registering an account and using the Platform, you consent to the transfer of your personal data to servers in other jurisdictions where necessary for the operation of the Services, subject to the safeguards described in this Section.

13 Amendments to This Policy

wow33 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or operational requirements. The date of the most recent update is shown at the top of this page.

Where changes to this Policy are material — that is, where they significantly alter your rights or our obligations — we will notify registered members via a platform notification or email to your registered address prior to the changes taking effect. For non-material changes, we will update the Policy and revise the "Last Updated" date accordingly.

Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and request account closure in accordance with ourTerms & Conditions.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which wow33 processes your personal data, please contact us through the channels below:

If you are dissatisfied with our response to your data privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. wow33 takes all data privacy complaints seriously and will cooperate fully with any investigation by a competent supervisory authority.

For all other enquiries related to your wow33 account, games, payments, or responsible gambling support, please visit our FAQ page or contact our live chat team directly.