Malaysia PDPA 2010 Updated: January 2026

Welcome88 Privacy Policy – Personal Data Protection Malaysian Members

Welcome88 takes your privacy seriously. This policy clearly explains how we collect, use, store, and protect your personal information in accordance with the Personal Data Protection Act 2010 (PDPA Malaysia). You have every right to know exactly how your data is handled.

Welcome88's Privacy Commitment to Malaysian Members

Six core principles that guide how Welcome88 handles your personal data

Malaysia PDPA Compliance

Welcome88 fully complies with the Personal Data Protection Act 2010 (Malaysia PDPA) in every aspect of member data handling. This means we only process your data for legitimate purposes, in a fair manner, and no further than what is genuinely required to deliver the services we offer.

256-bit SSL Encryption

Every bit of data transmitted between your device and Welcome88's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading financial institutions such as Maybank and CIMB. Your login credentials, payment details, and personal data cannot be intercepted by third parties.

Your Data, Your Control

Welcome88 gives members full control over their personal data. You can access, edit, download, or request the deletion of your data at any time through your account panel or by contacting our privacy team. These rights are guaranteed under the PDPA and Welcome88 respects them in full.

No Sale of Data to Third Parties

Welcome88 does not sell, rent, or commercialise members' personal data to any third party for marketing or any other purposes. Your data belongs to you — we only use it to operate Welcome88's services and fulfil relevant legal obligations.

Responsible Data Retention

Welcome88 member data is stored on secure servers with strict access controls. We retain data only for as long as necessary for the original purpose of collection or as required by Malaysian law. Data that is no longer needed is securely deleted using industry-standard procedures.

Data Breach Notification

In the event of any security breach involving Welcome88 members' personal data, we are committed to notifying affected members within the timeframe stipulated by Malaysia's PDPA. We will also inform the relevant authorities and take immediate remedial action to minimise any adverse impact.

Why Does Data Privacy Matter at Welcome88?

When you register and play at Welcome88, you are trusting us with information that matters — your name, phone number, payment details, and playing habits. We do not take that trust lightly. This Privacy Policy is more than a legal formality — it is our commitment to every Malaysian member that your data will always be fully protected.

In Malaysia, the Personal Data Protection Act 2010 (PDPA) is the primary law governing how companies handle users' personal data. Welcome88 doesn't just comply with the PDPA — we go further by implementing international best practices in data security that exceed the minimum requirements of local law.

We understand that Malaysian players are becoming increasingly aware of and concerned about their digital privacy. You deserve to know exactly what happens to your data — and that is the whole point of this Welcome88 Privacy Policy page. No convoluted legal language, no hidden terms. We explain everything in plain language that anyone can understand.

Quick Summary: Welcome88 collects your data to operate our online casino services, process payments, and comply with applicable laws. We do not sell your data. You may request access to or deletion of your data at any time. Data is protected with 256-bit SSL. Questions? Email us at support@welcome88.online.

Welcome88's Level of Data Protection
Data Encryption
100%
Access Controls
98%
PDPA Compliance
100%
Security Audits
95%
24/7 Monitoring
100%
SSL
256-bit
Encryption
PDPA
2010
Full Compliance
90
Days
Save Game Logs
24/7
Monitoring
Active Security
This Privacy Policy takes effect on 1 January 2026 and supersedes all previous versions.

This Privacy Policy ("Policy") describes our privacy practices Welcome88 ("Platform", "We") concerning the personal information we collect from members and visitors to the website welcome88.online. This Policy applies to all services, games, and features provided by Welcome88 to users in Malaysia.

By using the Welcome88 platform — including registering an account, making a deposit, playing, or simply browsing our website — you agree to the collection and use of your personal information as described in this Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.


1

Personal Information We Collect

Welcome88 collects your personal information through various means when you use our platform. We only collect information that is strictly necessary to provide the services you request or as required by Malaysian law.

Information You Provide Directly
  • Registration Information: Full name as shown on your identification document, an active Malaysian phone number, email address, and a password of your own choosing.
  • Identity Verification: A copy of your identity document (MyKad/passport), bank statement, or other documents that Welcome88 may request when required for KYC (Know Your Customer) verification or AML compliance purposes.
  • Payment Information: Details relating to your payment method, such as your Touch 'n Go eWallet username, GrabPay account number, DuitNow information, or bank account number for FPX via Maybank2u or CIMB Clicks. Welcome88 does not store credit or debit card numbers directly.
  • Communication with Us: Records of live chat conversations, emails, or any other form of communication between you and the Welcome88 support team.
Automatically Collected Information
  • Platform Activity Data: Gaming records, betting history, deposit and withdrawal transactions, as well as the time and duration of playing sessions on Welcome88.
  • Technical Data: IP address, browser type, operating system, device model, screen resolution, and other technical information automatically transmitted by your device when you access Welcome88.
  • Location Data: General location information derived from your IP address for the purpose of geographic region verification and fraud prevention. Welcome88 does not collect precise GPS location data without your explicit consent.
  • Cookie Data: Information stored through cookies and similar tracking technologies to enhance the user experience and analyse platform usage patterns. Further details are provided in Section 6.
2

How Welcome88 Uses Your Personal Data

Welcome88 uses members' personal data only for legitimate and specified purposes. We will not use your data for any other purpose without first obtaining your renewed consent.

Purpose of Use Type of Data Used Legal Basis (PDPA)
Account management & identity verification Name, email, phone number, ID documents Contract performance
Deposit & withdrawal processing Payment details, transaction history Contract performance
KYC verification & AML compliance ID documents, financial information Legal obligation
Fraud prevention & security IP address, device data, activity patterns Legitimate interest
Customer Support Communication records, account history Contract performance
Platform improvement & analytics Usage data (anonymised) Legitimate interest
Marketing communications Email, phone number Your consent

Welcome88 does not use automated profiling to make decisions that significantly affect you without human involvement, except for automated fraud detection, which is a fundamental security requirement of the platform.

3

Data Storage & Security

The security of your personal data is Welcome88's top priority. We implement multiple layers of technical and organisational safeguards to protect your data against unauthorised access, disclosure, alteration, or destruction.

  • Encryption in Transit: All data transmitted between your device and Welcome88's servers is protected by TLS 1.3 protocol with AES-256 encryption — the most secure standard currently available.
  • Encryption at Rest: Sensitive personal data such as passwords is stored in an irreversible hashed format. Payment details are encrypted with an additional layer of protection before being stored.
  • Internal Access Controls: Only Welcome88 staff with a legitimate business need may access member personal data. All access is logged and regularly audited.
  • Secure Servers: Welcome88 data is stored in high-grade data centres across Southeast Asia, certified to ISO 27001 security standards and protected by strict physical access controls.
  • Regular Security Audits: Welcome88 conducts regular penetration testing and security audits carried out by independent security firms to identify and address any vulnerabilities.
Data Retention Period

Welcome88 retains your personal data for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. In general:

  • Active account data: Retained for the duration the account remains active and for up to 5 years after account closure for audit and legal compliance purposes.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting legal requirements.
  • Welcome88 live casino game logs: Retained for 90 days for dispute resolution purposes.
  • Customer support communication data: Retained for 2 years for service quality and dispute resolution purposes.
  • Technical log data: Retained for 90 days for security and debugging purposes.

Important Note: While Welcome88 implements robust security measures, no digital system can guarantee absolute 100% security. You also play an important role in keeping your account safe — never share your password or OTP with anyone, including anyone claiming to be a Welcome88 representative.

4

Data Sharing with Third Parties

Welcome88 does not sell, rent, or commercialise members' personal data to third parties. However, in the course of operating the platform, we may need to share certain information with the following parties under limited and controlled circumstances:

  • Payment Providers: Information required to process transactions is shared with approved payment providers such as the Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay gateways, and banks supporting FPX. All such providers are bound by strict confidentiality agreements.
  • Live Gaming Studios: For Welcome88 live casino tables, only the minimum required information (such as session IDs) is shared with partner studios like Evolution, Pragmatic Live, and others, strictly for table operation purposes.
  • Technical Service Providers: Companies that assist Welcome88 in managing technical infrastructure, analytics, and cybersecurity may have limited access to the data needed to carry out their tasks.
  • Legal Authorities: Welcome88 may disclose personal data to Malaysian authorities where required by law, court order, or in efforts to prevent financial crime and money laundering.
  • Welcome88 no sharing data with third-party advertising companies for targeted advertising purposes.
  • Welcome88 no sell or exchange member lists with any other company.
  • Welcome88 no disclose data to external parties without a legitimate operational or legal basis.

When we share data with third parties, we ensure they are bound by data processing agreements that require a level of protection equal to or greater than Welcome88's own standards.

5

Your Rights as a Welcome88 Member

Under the Personal Data Protection Act 2010 (Malaysia PDPA) and international best practices, you as a Welcome88 member have the following rights regarding your personal data:

Right to Access Data

You have the right to request and receive a copy of all personal data Welcome88 holds about you. Requests will be processed within 21 business days.

Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Corrections are processed within 14 working days.

Right to Request Erasure

You may request the deletion of your personal data from Welcome88's systems, subject to legal retention requirements and any active contractual obligations.

Right to Restrict Processing

In certain circumstances, you may request to restrict the processing of your data while any dispute regarding its accuracy or the lawfulness of the processing is being resolved.

Data Portability

You have the right to receive your personal data in a structured, machine-readable format (such as CSV) for transfer to another platform should you choose to do so.

Right to Object to Processing

You may object to the processing of your data for direct marketing purposes at any time, and Welcome88 is required to stop such processing immediately.

To exercise any of the rights above, submit a written request to support@welcome88.online with the subject line "Privacy Rights Request" and include your full name and Welcome88 account number for identity verification. Welcome88 does not charge any fees for reasonable privacy rights requests.

6

Cookies & Tracking Technologies

The Welcome88 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and maintain security. Below are the types of cookies we use:

Cookie Types Purpose Duration Can Be Disabled?
Required Login sessions, security, CSRF verification, language preference memory Session / 30 days No – required for core functionality
Analytics Understanding how players use the platform, popular pages, and navigation paths Up to 2 years Yes – via browser settings
Optional Remembers game settings preferences, display size, and language selection Up to 1 year Yes – via browser settings

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect specific functions on the Welcome88 platform, including the ability to stay logged in and save your preferences. Instructions for managing cookies can be found in the help section of your browser (Chrome, Firefox, Safari, or Edge).

7

Privacy in Payments & Transactions

The security of financial transactions is one of the most critical aspects of Welcome88's privacy policy. We handle payment details with the highest level of protection, exceeding standard industry requirements.

When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks, the payment process is handled by a secure payment gateway. Welcome88 does not receive or store credit or debit card numbers directly — all card processing is carried out by licensed payment providers that comply with PCI DSS standards.

  • All deposit and withdrawal transaction records are securely stored and accessible only by members through the transaction history within their own accounts.
  • Welcome88's fraud monitoring system automatically analyses transaction patterns to detect suspicious activity and protect your account.
  • Any changes to payment information (such as updating a registered e-wallet) require additional identity verification to protect you from unauthorised modifications.
  • Welcome88 will never ask for your OTP, e-wallet password, or bank PIN through any channel. If you receive such a request, it is a fraudulent attempt and should be reported to us immediately.
8

Marketing Communications & Notifications

Welcome88 may send you marketing communications about the latest bonus offers, game promotions, or relevant platform updates. All marketing communications are sent only to members who have given their consent to receive them.

  • Marketing Emails: If you agreed during registration to receive marketing emails, Welcome88 will send you information about promotions, new bonuses, and platform features that may interest you.
  • Account Notifications: Some notifications are mandatory and cannot be disabled as they are tied to your account security — including login, deposit, withdrawal, and password change notifications.
  • Promotional SMS: With your consent, Welcome88 may send SMS messages about special promotions or exclusive bonuses to your registered phone number.

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link found at the bottom of any marketing email, or by updating your notification settings in your Welcome88 account panel. Unsubscribe requests will be processed within 10 business days.

Keep in Mind: Opting out of marketing emails does not affect your ability to use the Welcome88 platform or receive important account notifications. You will still receive emails related to account security and transactions.

9

Privacy Policy Amendments

Welcome88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements, or platform improvements. All amendments will be published on this page with a revised "Updated" date.

For material amendments — that is, changes that significantly affect how we handle your personal data — Welcome88 will endeavour to provide advance notice via your registered email or an in-platform notification at least 14 days before the amendment takes effect. This gives you sufficient time to review the changes before deciding whether to continue using the platform.

For minor amendments such as spelling corrections, language clarifications, or formatting changes that do not alter the meaning of the Policy, advance notice may not be provided, but the "Updated" date will still be revised to reflect the latest version. It is your responsibility to check this page periodically.

10

Contact Welcome88's Privacy Officer

If you have any questions, concerns, or complaints regarding how Welcome88 handles your personal data, we encourage you to reach out to us directly. The Welcome88 privacy team is ready to assist and committed to resolving any issues promptly and transparently.

  • Privacy Email: Send data privacy enquiries to support@welcome88.online with the subject line "Privacy Enquiry" to ensure your email is handled by the right team.
  • Live Chat: For general privacy enquiries, you can reach us via the live chat feature on the Welcome88 platform, available 24/7.
  • Response Time: Welcome88 is committed to responding to all privacy enquiries within 3 business days and resolving data rights requests within 21 business days, as required under the Malaysia PDPA.
  • Complaints to Authorities: If you are not satisfied with Welcome88's response to your privacy concerns, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), which oversees PDPA compliance in the country.

Contact Us: For any enquiries regarding this Welcome88 Privacy Policy or your rights as a member, email us at support@welcome88.online or use the in-platform live chat. We are always here for you, 24 hours a day, 7 days a week.

FAQ – Privacy Policy of Welcome88

The most frequently asked questions by Malaysian members regarding privacy and data security

No. Welcome88 has never and will never sell, rent, or commercially exploit members' personal data to any third party for marketing or any other commercial purpose. Your data is only shared with service providers directly involved in the operation of the platform (such as the Touch 'n Go or GrabPay payment gateways) and only for the purposes required. All such third parties are bound by strict confidentiality agreements and are not permitted to use your data for any purpose beyond what Welcome88 has specified.

To request a copy of your personal data held by Welcome88, send an email to support@welcome88.online with the subject line "Data Access Request" and include your full name and Welcome88 account number. Our privacy team will first verify your identity before processing the request, and your data will be provided within 21 business days in a readable format. This request is free of charge and may be made at any time while your account is active.

Yes. Welcome88 employs enterprise-grade security infrastructure to protect all member payment details. Transactions via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX are processed through secure payment gateways with end-to-end encryption. Welcome88 does not directly store your e-wallet passwords or bank PINs. Our fraud monitoring system operates 24/7 to detect any suspicious activity on your account. If you suspect any unauthorised activity, contact Welcome88 support immediately via live chat.

Yes, you have the right to request deletion of your personal data from Welcome88's systems. However, certain restrictions apply under Malaysian law. Financial transaction records must be retained for a minimum of 7 years as required by accounting legislation, and records related to AML compliance may need to be kept for a longer period. Beyond data required by these legal obligations, Welcome88 will delete all other personal data once your account is closed and the minimum retention period has lapsed. Contact support@welcome88.online to initiate this process.

Although Welcome88 implements robust security measures to prevent data breaches, we have a comprehensive incident response procedure in place should anything occur. In the event of a breach involving member personal data, Welcome88 is committed to: (1) identifying and containing the breach promptly; (2) notifying affected members within the timeframe stipulated by PDPA Malaysia; (3) reporting to the Department of Personal Data Protection Malaysia where required; (4) taking remedial steps to prevent recurrence. We will provide clear information about what happened, what data was affected, and the steps you should take to protect yourself.

You can opt out of Welcome88 marketing emails in several easy ways: (1) Click the "Unsubscribe" link at the bottom of any marketing email you receive; (2) Log in to your Welcome88 account, go to Account Settings, then the Communication Preferences section to disable marketing notifications; (3) Email support@welcome88.online with an unsubscribe request and we will process it within 10 business days. Please note that opting out of marketing emails does not affect essential emails related to account security, transactions, and mandatory service information.

Welcome88 Policy Documents

Also read these documents that complement this Privacy Policy

📋
Terms & Conditions

The complete agreement governing your use of the Welcome88 platform, including terms on registration, deposits, bonuses, and gameplay.

Read More
❤️
Responsible Gaming

The tools and support Welcome88 provides to help members play safely, responsibly, and within their limits.

Read More
ℹ️
About Us

Get to know Welcome88 better — our mission, core values, team, and the journey behind becoming the platform of choice for 2.4 million members in Malaysia.

Read More

Your Data Is Safe with Welcome88

Welcome88 is fully committed to protecting your privacy and the security of your personal data. More than 2.4 million Malaysian members have trusted our platform — register today and enjoy a safe, secure, and rewarding online casino experience.

Touch 'n Go GrabPay DuitNow FPX Boost ShopeePay

PDPA 2010 Compliant • 256-bit SSL • Your Data Is Never Sold • For Players Aged 18 and Above

Bahasa Melayu