Important Notice

Introduction and Scope of This Policy

wtobet is committed to handling personal information responsibly and transparently. This Privacy Policy applies to all users who access wtobet, interact with informational content, create or use an account, make a deposit or withdrawal, contact support, or participate in any eligible wtobet service. It applies regardless of whether you are located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam or elsewhere in Malaysia.

This Policy should be read together with the wtobet Terms & Conditions and the Responsible Gambling information. Where a specific process or service involves additional privacy notices, those notices will supplement rather than replace this Policy. By continuing to use wtobet after the effective date, you acknowledge that you have read and understood the practices described here.

Secure Data Handling

Personal information and identity documents are treated as sensitive and processed only for clearly defined, lawful purposes within the wtobet environment.

Minimal Collection

wtobet collects only the personal information that is reasonably necessary for account administration, security, verification and service improvement.

Transparent Processing

This Policy explains each category of data, why it is needed, how it is stored and how long it may be retained, so you can make informed decisions.

User Rights Respected

Depending on applicable law, you may access, correct or request deletion of your personal data. Requests should be submitted through the support contact below.

Cookie Awareness

wtobet may use cookies or similar technologies for session management, analytics and preference storage. Usage is described in the Cookie section of this Policy.

Clear Contact Channel

Privacy questions, corrections, deletion requests or concerns about wtobet data handling can be submitted through the support email listed in this Policy.

Section 1

Definitions

Personal Data
Any information that identifies or could reasonably identify you as an individual, including name, identification number, contact details, account credentials, device identifiers and payment references.
Processing
Any operation performed on personal data, including collection, recording, storage, retrieval, use, transmission, restriction, deletion or destruction.
Controller
The party responsible for determining the purposes and means of processing personal data in connection with the wtobet website and services.
Data Subject
The living individual to whom personal data relates. In the context of wtobet, this means you as the registered user or website visitor.
Consent
A freely given, specific, informed and unambiguous indication of the data subject's agreement to personal data being processed for a stated purpose.
Third Party
Any natural or legal person other than wtobet, the data subject and persons authorised to process personal data under direct wtobet responsibility.
Section 2

Personal Data We May Collect

wtobet may collect personal data at registration, during account use, through support interactions, via payment transactions and through automated technical processes. The categories below describe information that may be collected depending on the activity you undertake.

Category Examples When Collected
Identity Data Full name, date of birth, national ID or passport number Registration, KYC verification
Contact Data Email address, phone number, residential address Registration, account updates
Financial Data Bank name, account number, e-wallet identifier, transaction amounts in MYR Deposits, withdrawals, payment verification
Account Activity Login records, bet history, game sessions, promotion use, self-exclusion status Ongoing account use
Technical Data IP address, browser type, device model, operating system, session tokens, cookies Automatic collection on site visit
Communications Support messages, complaint records, enquiry details When you contact wtobet
Document Data Identity document images, selfies, proof of address, payment ownership records KYC, withdrawal verification
wtobet does not knowingly collect personal data from persons under 21 years of age. If such data is identified, it will be deleted as soon as reasonably practicable.
Section 3

Purposes of Processing and Legal Basis

wtobet processes personal data only for specific, legitimate purposes. The primary purposes and the basis on which each relies are described below.

Account Administration and Service Delivery

Registration, login, account maintenance, payment processing and access to wtobet games, sports markets and other features require personal data to function. Processing for these purposes is necessary to perform the agreement entered into when you create and use a wtobet account.

Identity Verification and KYC

wtobet may be required to verify age, identity, address, payment ownership and source of funds before permitting a withdrawal, after a certain deposit threshold or when security or regulatory concerns arise. Processing for KYC purposes may rely on legal obligation or legitimate interest in preventing fraud and protecting users.

Security, Fraud Prevention and Anti-Money Laundering

Transaction monitoring, device fingerprinting, login analysis and communication review may be used to detect fraudulent access, payment misuse, collusion, account compromise and money laundering activity. These activities rely on legitimate interest and applicable legal obligations, including obligations relevant to the financial services and gaming environment.

Responsible Gambling Controls

Activity data may be reviewed to support deposit limits, loss limits, session monitoring, self-exclusion checks and responsible gambling assessments. Applying these protections is in the legitimate interest of user welfare and may also reflect applicable regulatory requirements.

Service Improvement and Analytics

Anonymised or aggregated technical and usage data may be used to identify errors, improve layout, test features and understand general user behaviour patterns. Where individual data is involved, processing relies on legitimate interest, subject to appropriate safeguards.

Marketing Communications

Where you have separately consented to marketing, wtobet may use contact data to send information about relevant promotions, bonuses or services. You may withdraw marketing consent at any time. Withdrawal of marketing consent does not affect the lawfulness of earlier processing or access to the core wtobet service.

Section 4

Cookies and Similar Technologies

wtobet may use first-party cookies and similar session technologies to maintain login state, store preferences, prevent repeated form submissions and support basic website functionality. Without essential cookies, certain wtobet features may not operate correctly.

Analytics cookies or scripts may also be used to collect aggregated information about page visits, referral sources, device categories and navigation paths. Where third-party analytics tools are involved, data is typically anonymised or pseudonymised before being used to inform improvements.

Most web browsers allow you to view, restrict or delete cookies through browser settings. Blocking essential cookies may limit access to parts of wtobet. Restricting analytics cookies does not prevent use of the core website.

Section 5

Sharing Personal Data with Third Parties

wtobet does not sell personal data. Data may be shared with third parties only to the extent reasonably necessary for the purposes described in this Policy and in the following circumstances.

  • Payment processors and banking partners: Financial data may be shared with banks, FPX, DuitNow or selected e-wallet providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong to facilitate deposits and withdrawals, subject to their own applicable policies.
  • Identity verification providers: KYC checks may involve third-party verification services. Only the information required for the check is shared, and the third party acts under appropriate obligations.
  • Technology and hosting providers: Infrastructure, database and software services used to operate wtobet may process personal data on behalf of wtobet under contractual obligations.
  • Legal and regulatory authorities: wtobet may disclose personal data when required by a lawful order, warrant, court direction or regulatory obligation applicable to the relevant jurisdiction.
  • Business transfers: In the event of a merger, acquisition or restructure, personal data may be transferred to the relevant successor entity under equivalent privacy protections.
Any third party receiving personal data on behalf of wtobet is required to handle it securely and use it only for the agreed purpose. wtobet does not permit third parties to use shared data for their own unrelated marketing without your separate consent.
Section 6

Data Retention

wtobet retains personal data for as long as it is necessary to fulfil the original collection purpose, to comply with applicable legal, regulatory, anti-money-laundering and dispute-resolution obligations, or to defend legitimate interests in the event of a claim or investigation.

Account data including identity records, transaction histories and KYC documents may be retained for a defined period after account closure, consistent with applicable financial and gaming record-keeping obligations. Specific retention periods may vary by data category and applicable law.

When personal data is no longer required and no legal or regulatory basis for retention exists, wtobet will take reasonable steps to delete, anonymise or aggregate it so that it can no longer identify you.

Section 7

Data Security Measures

wtobet implements technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include access controls, encryption of sensitive data in transit, credential hashing, logging of unusual activity, and periodic security review processes.

No system can guarantee complete protection against all threats. You also have a role in protecting your data by choosing a strong password, keeping verification codes private, avoiding shared or public devices for account access, and reporting any suspected compromise promptly. wtobet staff will not ask you to disclose your complete password, one-time code or sensitive banking credentials during a support interaction.

Section 8

International Data Transfers

wtobet may use technology infrastructure or service providers located outside Malaysia. Where personal data is transferred to another country, wtobet aims to ensure that appropriate contractual, technical or equivalent safeguards are in place before the transfer occurs. Reference to international service providers does not constitute a representation that data protection standards in those countries are equivalent to those under Malaysian law.

If you have a concern about a specific international transfer, you may direct your enquiry to the support contact listed in Section 11 of this Policy.

Section 9

Your Rights as a Data Subject

Depending on applicable law and the circumstances of the processing, you may hold some or all of the following rights in relation to personal data wtobet holds about you.

  • Right of Access: You may request confirmation of whether wtobet processes personal data about you and, if so, a copy of that data in a readable format.
  • Right to Rectification: If personal data held about you is inaccurate or incomplete, you may request a correction. Accurate data is important for payments, KYC and account security.
  • Right to Erasure: In certain circumstances, such as where data is no longer necessary or was unlawfully processed, you may request deletion. This right does not override lawful retention obligations.
  • Right to Restrict Processing: You may ask wtobet to limit how your data is used in specific situations, such as while a correction request is being assessed.
  • Right to Object: You may object to processing based on legitimate interest, including direct marketing. wtobet will stop marketing communications when such an objection is received.
  • Right to Data Portability: Where applicable, you may request that data provided by you and processed automatically be returned in a structured, machine-readable format.
  • Right to Withdraw Consent: Where processing relies on your consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing.

To exercise any of these rights, submit a request through the contact details in Section 11. wtobet may need to verify your identity before responding. Requests will be reviewed and responded to within a reasonable timeframe in accordance with applicable law.

Section 10

Changes to This Privacy Policy

wtobet may update this Privacy Policy to reflect legal, regulatory, operational or technical changes. The revised Policy will be published on this page with an updated effective date. For significant changes, wtobet may also display a prominent notice on the website.

Continued use of wtobet after updated terms take effect constitutes acknowledgement where permitted by law. If any change affects how your personal data is used in a way you do not accept, you should stop using the website and request account closure if applicable.

Section 11

Contact Us About Privacy

If you have a question about this Privacy Policy, wish to exercise a data subject right, want to report a suspected security incident or have a concern about how wtobet processes your personal information, please contact the website support team.

Website contact: [email protected]

The email address above is displayed as plain text for reference. Please include your registered account details and a clear description of your request. Do not include your password, one-time security code or full payment card details in any support message. Response times may vary depending on the nature and complexity of the request.