AW888 Privacy Policy

This Privacy Policy (the "Policy") is issued by AW888 ("AW888", "we", "us", or "our"), the operator of the online gaming platform accessible at https://aw888.cam (the "Platform").

This Policy governs how AW888 collects, uses, discloses, stores, and protects the personal data of individuals who access or use the Platform, including registered players and website visitors (collectively referred to as "Users"). It applies to all personal data processed by AW888 in connection with the provision of its services, regardless of how that data was originally provided to us.

AW888 is committed to handling personal data responsibly, in accordance with applicable data protection principles under the international licensing framework under which the Platform operates. By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not accept the terms of this Policy, please discontinue use of the Platform.

For the purposes of this Policy, the following definitions apply:

AW888 collects the following categories of personal data in connection with the operation of the Platform and provision of gaming and betting services:

3.1 Account Registration Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Malaysian mobile phone number
• Username and hashed password
• Residential address (Malaysian city / postcode)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID (e.g., Malaysian MyKad, passport)
• Proof of residential address (e.g., utility bill, bank statement)
• Proof of payment method ownership (where required)
• Selfie or facial verification image (where applicable for enhanced KYC)

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts and transaction history
• Payment method details (e.g., bank account number, e-wallet identifier — AW888 does not store full card numbers)
• Currency (MYR or cryptocurrency equivalent)
• Bonus and promotional credit history

3.4 Gaming & Betting Activity Data

• Games played, bets placed, wagers, and outcomes
• Session duration and frequency of play
• Responsible gambling tool settings (deposit limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geographic location (country/city level)
• Device type, operating system, and browser type
• Log files and access timestamps
• Cookie identifiers and session tokens

3.6 Communications Data

• Customer support chat transcripts and email correspondence
• Feedback and survey responses submitted to AW888

AW888 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey.
• Automatically — when you access and interact with the Platform, through cookies, log files, session tracking, and similar technologies that capture device and usage data.
• From third parties — including payment service providers (e.g., DuitNow, Touch 'n Go eWallet, FPX, Maybank2u) for transaction processing and fraud prevention; identity verification service providers for KYC; and analytics partners, subject to the restrictions in Section 7 of this Policy.

AW888 processes your personal data for the following purposes, each underpinned by a legitimate basis for processing:

AW888 processes your personal data in a manner that is lawful, fair, and transparent. Processing activities are conducted on secured servers maintained under appropriate technical and organisational safeguards. Key processing activities include:

• Transaction Processing: Deposit and withdrawal data is processed in real time or near-real time in conjunction with Malaysian payment processors including DuitNow, FPX, and approved e-wallet providers. AW888 does not store full payment card numbers; tokenised identifiers are used where applicable.
• Identity Verification: KYC documents are processed by AW888's compliance team and, where applicable, by approved third-party identity verification service providers. Documents are stored in an encrypted format and accessed only on a need-to-know basis.
• Fraud & Risk Analysis: Automated systems analyse transaction patterns, device fingerprints, and account behaviour to identify and prevent fraudulent activity, multi-accounting, and money laundering.
• Responsible Gambling Monitoring: Player activity data is used to identify potential signs of problematic gambling behaviour. Where indicators are detected, AW888 may proactively contact the player or apply account-level restrictions.
• Analytics: Aggregated and anonymised usage data is analysed to improve Platform performance, game availability, and user experience. This analysis does not involve personal identification.

AW888 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Personal data may be disclosed to third parties only in the following circumstances:

• Service Providers: AW888 engages trusted third-party service providers to assist with payment processing (e.g., Maybank2u, CIMB Clicks, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX), KYC verification, IT infrastructure, fraud detection, and customer support platform operations. These providers are contractually obligated to process data only in accordance with AW888's instructions and applicable data protection requirements.
• Gaming Providers: AW888 shares limited account and session data with third-party game studios and live casino providers (e.g., for streaming live dealer sessions) as technically necessary to deliver the gaming service.
• Legal & Regulatory Authorities: AW888 may disclose personal data where required to do so by applicable law, court order, or regulatory authority — including in response to anti-money laundering (AML) reporting obligations under applicable licensing requirements.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all assets of AW888, personal data may be transferred to the acquiring entity, subject to the same privacy commitments set out in this Policy.

AW888 operates under international online gaming licensing and, as such, your personal data may be transferred to, stored in, or processed in countries outside Malaysia, including the jurisdiction in which AW888 holds its gaming licence and in countries where third-party service providers maintain their infrastructure.

Where personal data is transferred internationally, AW888 ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements with all international third-party processors, incorporating appropriate data protection clauses.
• Transfer to countries or entities that maintain data protection standards equivalent to or exceeding those applicable to AW888.
• Encryption of all data in transit and at rest.

By using the AW888 Platform, Malaysian Users acknowledge and consent to the transfer of their personal data to jurisdictions outside Malaysia as described in this section.

AW888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

Where data is retained beyond account closure solely for legal compliance purposes, it will be archived, access-restricted, and not used for any other purpose. At the end of the applicable retention period, data is securely and irreversibly deleted or anonymised.

AW888 uses cookies and similar technologies (including web beacons and local storage) to operate the Platform, improve the user experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management, login state, and security tokens. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences (such as preferred language or display settings) to personalise your experience. You may disable these, though certain features may be affected.
• Analytics Cookies: Collect anonymised, aggregated data about how Users interact with the Platform — including pages visited, time spent, and navigation paths. This data is used solely for internal service improvement.
• Security & Fraud Prevention Cookies: Used to detect and prevent malicious activity, including bot access, credential stuffing attacks, and multi-accounting attempts.

Subject to applicable data protection law and certain limitations (including those arising from AW888's legal obligations under its gaming licence), you hold the following rights in respect of your personal data:

To exercise any of the above rights, please contact AW888's Data Protection team at [email protected] with the subject line "Data Rights Request". AW888 will respond to all verified requests within 30 calendar days at no cost to you.

AW888 may be required to verify your identity before fulfilling a data rights request. This is to protect your data from being disclosed to an unauthorised party.

AW888 strictly prohibits access to and use of the Platform by any person under the age of 21. The Platform is not directed at, nor does it knowingly collect personal data from, individuals under 21 years of age.

Where AW888 becomes aware — through the KYC process or otherwise — that personal data has been collected from an individual under 21 years of age, all such data will be immediately deleted, the account closed, and any deposits returned where legally possible. The matter will be reported to the relevant authorities where required.

AW888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption for all data transmitted between your browser or device and AW888's servers.
• AES-256 encryption for personal data and financial records stored at rest.
• Two-factor authentication (2FA) available for all player accounts.
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Intrusion detection and prevention systems monitoring Platform infrastructure in real time.
• Data breach response procedures with defined notification timelines in the event of a confirmed security incident.

While AW888 takes all reasonable precautions to safeguard your data, no method of transmission over the internet or electronic storage is entirely infallible. We encourage you to use a strong, unique password for your AW888 account and to enable two-factor authentication.

AW888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform services. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the Platform informing Users of the change.
• Where required, notify registered Users by email of significant changes that affect their rights.

Your continued use of the Platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must discontinue use of the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or AW888's handling of your personal data, please contact us using the following details:

AW888 will acknowledge all data-related enquiries within 5 business days and will provide a substantive response within 30 calendar days, unless the complexity of the request requires a longer period, in which case you will be notified of the expected timeline.

This Privacy Policy was last updated on 1 January 2026. AW888 reserves all rights not expressly granted herein.