Wepoker Privacy Policy – Personal Data Protection for Malaysia Members

Welcome to the Privacy Policy page wepoker. We understand that your trust depends on how we handle the personal information you share with us. This document is written in plain, straightforward language — not dense legal jargon — so you always know exactly what happens to your data.

wepoker is the data controller for all personal information collected through our platform at wepoker.best. We operate in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and international best practices in personal data protection.

1 Introduction & Scope of Privacy Policy

This Privacy Policy applies to all individuals who:

• Visiting the wepoker.best website without registering an account
• Registering a member account on the wepoker platform
• Using any service offered by wepoker, including Sports Betting, Live Casino, slots, e-sports and lottery
• Contacting the wepoker customer support team via live chat, email or any other communication channel
• Participating in any promotions, contests, or loyalty programmes hosted by wepoker

This policy does not apply to third-party websites or services that may be linked from the wepoker platform. We encourage you to read the privacy policies of any other websites you visit separately, as wepoker is not responsible for their privacy practices.

By registering an account or using the wepoker platform, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data in accordance with the terms set out herein.

2 Types of Personal Data We Collect

Wepoker collects various categories of personal data for the purposes stated in Section 3. The categories of data we collect are as follows:

You may also choose to voluntarily provide additional information — such as your preferred sports (Super League football, BWF badminton, e-sports) or casino game preferences — to help us personalise your experience on the wepoker platform.

3 How Your Personal Data Is Used

Wepoker uses the personal data collected solely for the following purposes:

• Account Management: Creating and managing your member account, enabling secure login, processing identity verification, and ensuring the security of your account.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay — as well as processing withdrawal payouts to the bank account registered under your name.
• Service Provision: Giving you access to all games and betting on the wepoker platform, including Sports Betting (Malaysia Super League, EPL, BWF badminton), Live Casino (Baccarat, Roulette, Blackjack), slots, e-sports, and lottery.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, unauthorised access, multi-account use, and any other platform abuse.
• Customer Support: To assist you when you contact the wepoker support team, and to resolve any queries, complaints or disputes you have raised.
• Marketing Communications (With Consent): To send notifications about promotions, bonuses, special offers and platform updates — only to members who have opted in to receive such communications.
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA, anti-money laundering laws (AMLA), and other applicable regulations.
• Platform Improvement: Analysing platform usage patterns in aggregate (without identifying individuals) to improve the user experience, system performance, and game offerings.

4 Legal Basis for Data Processing

Wepoker processes your personal data on lawful bases recognised under Malaysia's PDPA 2010. For each processing purpose, we rely on one or more of the following bases:

• Your Consent: For marketing communications and non-essential cookies, we obtain your explicit consent beforehand. You may withdraw this consent at any time through your account settings.
• Contract Performance: Processing required to deliver wepoker's services to you after you register an account and agree to our Terms & Conditions — including deposit processing, winnings payouts, and access to games.
• Legitimate Interests: Processing that is necessary for wepoker's legitimate interests and does not override your privacy rights — such as fraud prevention, platform security and service improvement.
• Legal Obligation: Processing required to fulfil legal obligations imposed on wepoker, including identity verification requirements under Malaysian anti-money laundering laws.

5 Data Sharing with Third Parties

Wepoker does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. However, in certain circumstances, we may need to share your data with the following parties:

• Payment Service Providers: To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks, RHB Online, Bank Islam, Public Bank, Hong Leong Bank), Boost and ShopeePay. They receive only the data necessary to process your transactions.
• Game Service Providers: Live casino game providers (Baccarat, Roulette, Blackjack), slots and e-sports providers that supply game content to the wepoker platform. They are subject to strict confidentiality agreements.
• Technical Service Providers: Companies that provide IT infrastructure, server hosting, cybersecurity and analytics services — all operating under data processing agreements that comply with the PDPA.
• Relevant Authorities: Malaysian government agencies, law enforcement bodies, or courts where required by applicable law — including investigations into financial crime or money laundering.
• Professional Advisors: Lawyers, accountants or audit firms bound by strict professional confidentiality obligations.

6 Data Security Measures

Wepoker takes data security seriously. We implement a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, modification, or destruction:

• 256-bit SSL Encryption: All communications between your device and wepoker servers are encrypted using 256-bit Secure Socket Layer (SSL) — the same standard used by online banking.
• Stored Data Encryption: Sensitive data stored in our databases — including payment information and passwords — is encrypted using robust encryption algorithms. Passwords are stored as one-way hashes that cannot be decrypted.
• Internal Access Controls: Access to member personal data within wepoker is restricted to staff who genuinely require it to perform their duties. All access is logged and monitored.
• Two-Factor Authentication (2FA): 2FA is available to all wepoker members and is mandatory for high-risk operations such as changing your email address or making large withdrawals.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect any suspicious activity or intrusion attempts. Our security team is on hand to respond to incidents at any time.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Staff Training: All wepoker staff undergo regular data protection training to ensure they understand and comply with best practices in personal data handling.

7 Data Retention Period

Wepoker retains your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable Malaysian law. General data retention guidelines are as follows:

• Active Account Data: For as long as your account remains active on the wepoker platform.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in accordance with Malaysian accounting and tax legislation, as well as anti-money laundering (AMLA) requirements.
• Identity Verification Records (KYC): A minimum of 5 years from the date of verification or the date of account termination, whichever is later.
• Support Communication Data: 2 years from the date of last communication, for reference and dispute resolution purposes.
• Marketing Data: Until you withdraw consent or request deletion, with a maximum of 3 years from the date of last consent.
• Technical Data (Server Logs): 12 months for security purposes and technical issue detection.
• After Account Termination: Some data may be retained for the period required by law even after an account has been closed.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.

8 Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and wepoker's privacy policy, you have the following rights regarding your personal data:

9 Cookies & Tracking Technologies

The wepoker platform uses cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as login session management, account security and language preferences. Disabling them will affect platform functionality.
• Performance & Analytics Cookies: Helping us understand how users interact with the platform — the most frequently visited pages, time spent in each section, and navigation paths. This information is used in aggregate form and does not identify any individual.
• Functional Cookies: Remembering your preferences such as language, display settings and game preferences to deliver a more personalised experience on your next visit.

Wepoker does not use third-party advertising cookies that track your activity outside the wepoker platform for targeted advertising purposes. You can manage or disable cookies through your web browser settings at any time, though this may affect certain platform functions.

In addition to cookies, we also use the following technologies for security and performance purposes:

• Session Token: To verify your identity and ensure the security of your login session.
• Local Storage: To store interface preferences that improve platform speed and responsiveness.
• Encrypted Behavioural Analytics: To detect usage patterns for security and fraud prevention purposes only.

10 Contact Us & Privacy Complaints

If you have any questions, concerns, or complaints about how wepoker handles your personal data, please contact our Data Protection Officer (DPO):

We are committed to responding to all privacy complaints within 14 business days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia.