wisma66 Privacy Policy

1. Introduction

wisma66 ("wisma66", "we", "us", "our") is committed to protecting the privacy and personal data of all players and visitors who interact with the wisma66 platform. This Privacy Policy ("Policy") sets out in clear terms how wisma66 collects, processes, stores, and protects personal information in connection with the operation of our online gaming platform.

This Policy is intended to be transparent, straightforward, and consistent with the data protection principles that apply to the operation of responsible online gaming platforms serving Malaysian users. We do not use unnecessary technical language — if something is unclear, please contact our support team for clarification before proceeding.

2. Data Controller

wisma66 is the data controller responsible for personal data collected through the wisma66 platform. All enquiries relating to the collection, use, and processing of your personal data should be directed to the wisma66 Data Protection contact via the support channel listed in Section 14 of this Policy.

Where wisma66 engages third-party service providers who process personal data on our behalf (such as payment processors, identity verification providers, and game software suppliers), wisma66 ensures those parties are bound by contractual data processing obligations consistent with the standards set out in this Policy.

3. Personal Data We Collect

wisma66 collects personal data through multiple points of interaction with the platform. The categories of personal data we collect are as follows:

3.1 Registration & Account Data

• Full legal name and date of birth
• Malaysian mobile phone number and email address
• Chosen username and encrypted password credentials
• State and city of residence (e.g. Kuala Lumpur, Penang, Johor Bahru, Sabah)

3.2 Identity Verification (KYC) Data

• Government-issued identity document (MyKad, passport) — document number, image, and expiry
• Proof of address documentation
• Selfie or liveness verification data where required by the KYC process

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method identifiers
• e-Wallet identifiers (Touch 'n Go, Boost, GrabPay) and bank account reference information
• Bonus redemption and wagering history

3.4 Gaming Activity Data

• Game session records: titles played, bet amounts, outcomes, session durations
• Sportsbook wager data: markets selected, stakes, and settlement outcomes
• Responsible gaming tool usage: limit settings, cool-off requests, self-exclusion records

3.5 Technical & Device Data

• IP address and approximate geographic location derived therefrom
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Pages visited, navigation paths, and session duration on wisma66

4. How wisma66 Uses Your Personal Data

wisma66 uses the personal data it collects for the following specific purposes:

wisma66 does not use your personal data for any purpose beyond those listed above without first obtaining your explicit consent or satisfying a different lawful basis as set out in Section 5.

5. Legal Basis for Processing

wisma66 processes personal data on the following lawful bases:

• Contractual necessity: Processing required to fulfil the account agreement, process transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and gaming regulatory requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring — balanced against your fundamental privacy rights.
• Consent: Where you have given explicit consent — for example, to receive promotional communications from wisma66. You may withdraw such consent at any time by contacting our support team.

6. Data Sharing & Disclosure

wisma66 does not sell, rent, or trade your personal data to third parties for marketing purposes. We share personal data only in the following circumstances:

• Payment service providers: To process deposits and withdrawals through Touch 'n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB, Public Bank, Hong Leong Bank, USDT TRC20, and other supported payment channels.
• Identity verification providers: To conduct KYC checks as required by our operating licence obligations.
• Game software providers: Game providers receive anonymised session data required for game functionality; they do not receive your identity or financial details.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction.
• Fraud prevention networks: To detect and prevent fraudulent account activity, including multi-accounting and bonus abuse patterns.

All third parties who receive personal data from wisma66 are bound by contractual data processing agreements that require them to maintain confidentiality and use the data only for specified purposes.

7. Data Retention

wisma66 retains personal data for as long as your account remains active and for a period thereafter as required by applicable regulatory and legal obligations. Specific retention periods are as follows:

• Active account data: Retained for the duration of the account plus a minimum of five years following account closure, in accordance with AML regulatory requirements.
• KYC documentation: Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Transaction records: Retained for a minimum of five years for financial compliance purposes.
• Technical and device data: Retained for up to 13 months for security and fraud monitoring purposes, after which it is aggregated or deleted.
• Self-exclusion records: Retained indefinitely to ensure exclusion restrictions can be enforced if a player attempts to re-register.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

8. Security Measures

wisma66 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the wisma66 platform
• Encryption of all personal data and financial information stored in our databases
• Multi-factor authentication options for player accounts
• Regular independent security audits and penetration testing
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need
• Intrusion detection and monitoring systems operating 24/7

Notwithstanding these measures, no online system is completely immune to security risks. wisma66 will notify affected users promptly in the event of a data breach that poses a risk to their rights and freedoms, in accordance with applicable data protection obligations.

9. Cookies & Tracking Technologies

wisma66 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are:

• Strictly necessary cookies: Essential for the operation of the wisma66 platform — including session management, login authentication, and fraud prevention. These cannot be disabled.
• Functional cookies: Store your language preference, display settings, and game lobby filters to personalise your wisma66 experience between sessions.
• Analytics cookies: Collect aggregated, anonymised data on how players navigate the wisma66 platform, which pages are most visited, and where errors occur. This data is used to improve platform performance.
• Security cookies: Used to detect and prevent fraudulent activity, including automated bot traffic and multi-account registration attempts.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the wisma66 platform.

10. Your Data Rights

As a data subject, you have the following rights in relation to the personal data wisma66 holds about you:

• Right of access: Request a copy of the personal data wisma66 holds about you.
• Right to rectification: Request correction of any inaccurate or incomplete personal data in your account.
• Right to erasure: Request deletion of your personal data, subject to our legal retention obligations and regulatory requirements that may override this right.
• Right to restriction: Request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: Request transfer of your personal data in a structured, machine-readable format where technically feasible.
• Right to object: Object to the processing of your personal data on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the wisma66 support team as described in Section 14. Requests will be acknowledged within 5 business days and resolved within 30 calendar days. Complex requests may be extended by an additional 60 days with notification.

11. Minors & Age Restriction

If you have reason to believe that a minor has registered on the wisma66 platform, please contact our support team immediately.

12. Third-Party Services & Links

The wisma66 platform integrates third-party game providers, payment gateways, and analytics services to deliver its full feature set. While wisma66 carefully vets all third-party integrations and requires contractual data protection commitments, we are not responsible for the privacy practices of third-party entities beyond the scope of our data processing agreements with them.

The wisma66 platform does not contain links to external third-party websites for commercial or promotional purposes. Any navigational links on wisma66 point exclusively to pages within wisma66.one.

13. Changes to This Policy

wisma66 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable regulatory requirements. Where changes are material, we will notify registered users by email or via an in-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Continued use of the wisma66 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

14. Contact & Data Enquiries

For all privacy-related enquiries, data subject access requests, or concerns regarding the handling of your personal data by wisma66, please contact our Data Protection team:

Please include your registered account username and a description of your request. We aim to acknowledge all privacy enquiries within 5 business days.