TW88 Privacy Policy — We Protect Your Data

Tw88 understands that privacy is more than a legal requirement — it is the trust that every member places in us. As Malaysia's trusted online gaming platform, we are committed to managing your personal data with full transparency, integrity, and accountability.

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. It explains the types of data we collect, why we need it, how it is used, and the rights you hold as a data subject.

Tw88 has appointed an internal Data Protection Officer (DPO) responsible for ensuring all data processing operations comply with this policy and applicable legislation. If you have any privacy concerns, you may contact our team at any time.

Tw88 only collects personal data that is strictly necessary to provide a secure, fair, and legally compliant service. We do not collect excessive or irrelevant information beyond what is required to operate our platform.

Sensitive data such as identity card numbers and financial information is only collected when required for KYC or fund withdrawal processes, and is stored in encrypted format using AES-256 encryption.

Every piece of data we collect has a clear and lawful purpose. TW88 does not use your data for purposes not stated in this policy without first obtaining your additional consent.

• Verifying your identity during account registration and the KYC process to ensure platform safety for all members.
• Securely processing deposits and fund withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and direct bank transfer.
• Detecting and preventing fraudulent activity, money laundering, and unauthorised access to your account.
• Sending important account-related communications such as deposit confirmations, security notices, and terms updates.
• Delivering effective customer support by understanding the context and history of your interactions with TW88.
• Monitoring gameplay patterns for responsible gaming purposes — including early detection of signs of problem gambling.
• Improving the platform, user experience, and game offerings based on anonymised data analysis.
• Sending you relevant promotional offers and bonuses — only if you have consented to receive marketing communications.

Tw88 does not share your personal data with external parties except in limited and necessary circumstances as described below. We ensure that every third party involved adheres to data protection standards equivalent to or stricter than our own.

• Payment service providers — DuitNow, FPX, and digital wallet payment gateways receive only the minimum data required to process your financial transactions.
• Game software providers — Licensed game providers supplying slots, Live Casino, and other games receive player pseudonyms only, not full identity data.
• Cloud service providers — tw88's server infrastructure utilises industry-grade cloud providers bound by strict data processing agreements.
• Statutory authorities — tw88 will disclose data when required by law, court order, or official request from Malaysian law enforcement agencies.
• Group companies — tw88-affiliated entities involved in delivering platform services will only receive access to the data necessary to perform their specific functions.

Tw88 continuously invests in the latest cybersecurity infrastructure to ensure your personal data remains protected at all times. We employ a multi-layered defence approach encompassing technical, operational, and administrative safeguards.

• 256-bit SSL/TLS encryption protects all data in transit between your device and TW88's servers — no data is transmitted in plain text.
• AES-256 encryption is applied to all sensitive data stored in TW88's databases, including financial information and KYC documents.
• Intrusion detection systems (IDS) and next-generation firewalls monitor all inbound and outbound traffic 24 hours a day to detect cyber threats.
• Two-factor authentication (2FA) is available for all member accounts and is mandatory for internal TW88 administrative access.
• Penetration testing is conducted periodically by independent cybersecurity firms to identify and patch vulnerabilities before they can be exploited.
• Internal access to member data is restricted on a least-privilege basis — only staff who require the data to perform their specific duties are granted access.
• Comprehensive audit logs record every access to sensitive data, enabling thorough investigation in the event of a security incident.

The TW88 website uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members interact with our platform.

You can manage or block cookies through your browser settings. However, blocking essential cookies may affect TW88 platform functionality, including the ability to log in to your account. Analytics and marketing cookies can be disabled without affecting access to games.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding personal data TW88 holds about you. TW88 is committed to respecting and facilitating the exercise of these rights.

Tw88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Once data is no longer needed, it will be securely deleted or permanently anonymised.

• Active account data — retained for the duration your account is active and for 7 years after account closure for legal compliance and financial audit purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's Anti-Money Laundering (AMLA) and tax legal requirements.
• KYC documents — retained for 5 years after the business relationship ends or the date of the last transaction, whichever is later.
• Support communication records — retained for 2 years for quality control and dispute resolution purposes.
• Technical security logs — retained for 12 months for cyber threat detection and digital forensics purposes.
• Anonymised analytics cookie data — retained for 90 days before being automatically deleted from our systems.

Tw88 may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or newly introduced platform features. We are committed to informing you of any material changes in a clear and timely manner.

• Minor changes that do not affect your rights — updated within this document with a new revision date notice shown at the top of the page.
• Material changes that affect how we process your data — you will be notified via an in-platform notice and email to your registered address at least 14 days before the changes take effect.
• Continued use of the TW88 platform after a change notice constitutes your acceptance of the updated privacy terms.
• If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 7.

If you have any questions, concerns, or complaints regarding TW88's Privacy Policy or how we handle your personal data, our Privacy and Data Protection team is ready to listen and assist you.

• Live chat within the TW88 platform — mark your request as "Privacy Enquiry" to be routed to the right team.
• Privacy team email: [email protected] (please include "Privacy Complaint" in your email subject line)
• Our target response time is within 5 business days for general privacy enquiries and 24 hours for urgent data security incidents.
• For more information on responsible gaming and data protection in the context of gambling, visit the Responsible Gaming us.
• For general frequently asked questions about the tw88 platform, please refer to the FAQ us.