Shwe88 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how Shwe88 ("Company", "we", "us", "our") collects, uses, stores, and discloses personal data in connection with your use of the Shwe88 online casino and sports betting platform accessible at shwe88.casa ("the Platform").

Shwe88 is committed to protecting the privacy and personal data of all players, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. Our data handling practices are designed to comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable international data protection standards.

By registering an account on Shwe88, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must discontinue use of the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly.
• "Data Subject" means the natural person to whom personal data relates — in the context of this Platform, this is you, the Player.
• "Data Controller" means Shwe88, which determines the purposes and means of processing personal data.
• "Data Processor" means any third party engaged by Shwe88 to process personal data on its behalf, such as payment processors and KYC verification providers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Consent" means a freely given, specific, informed, and unambiguous indication by the Data Subject that they agree to the processing of their personal data.
• "Cookies" means small text files stored on your device by your browser that allow the Platform to recognise your device and remember preferences and session data.
• "KYC" means Know Your Customer — the identity verification process required to comply with anti-money-laundering obligations.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia.

Personal Data We Collect

Shwe88 collects the following categories of personal data from registered players and Platform visitors:

3.1 Identity Data

• Full legal name as it appears on government-issued identification;
• Date of birth (used to verify that you are aged 21 or above);
• National identification number (MyKad) or passport number, collected during KYC verification;
• Photograph or scan of identity document, where required for KYC.

3.2 Contact Data

• Email address;
• Malaysian mobile phone number;
• Residential address (city, postcode, state — e.g., Kuala Lumpur, Penang, Shah Alam).

3.3 Financial & Payment Data

• Payment method identifiers (e.g., Touch 'n Go eWallet account reference, Maybank2u account number, DuitNow ID) — note that Shwe88 does not store full card numbers or e-wallet PINs;
• Deposit and withdrawal transaction history, including amounts, timestamps, and payment methods used;
• Cryptocurrency wallet addresses where USDT TRC20 or other crypto methods are used.

3.4 Account & Gaming Data

• Username and encrypted password;
• Account balance history, bonus credit records, and wagering activity;
• Game session logs, bet history, win/loss records, and RTP data;
• Sports betting selections, live betting activity (including Liga Super Malaysia, EPL, UFC, and other markets);
• VIP tier status and loyalty programme history.

3.5 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Pages visited, session duration, and navigation paths on the Platform;
• Login timestamps and session identifiers;
• Cookie data and similar tracking technology outputs (see Section 10).

3.6 Communications Data

• Live chat transcripts with our support team;
• Email correspondence sent to or received from Shwe88's support address;
• Feedback, complaints, and survey responses submitted through the Platform.

How We Collect Your Data

Shwe88 collects personal data through the following means:

• Directly from you — when you complete the account registration form, submit KYC documents, make deposits or withdrawals, place bets, contact our support team, or respond to promotions;
• Automatically via the Platform — through cookies, session tracking, login records, and device fingerprinting technology when you access the Platform;
• From payment processors — transaction confirmations, payment status updates, and fraud alerts received from our Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Clicks, Public Bank, Hong Leong, and cryptocurrency network confirmations;
• From identity verification providers — where a third-party KYC service is used to validate government-issued identity documents;
• From fraud prevention and anti-money-laundering services — risk scoring and verification data from third-party compliance providers.

Purposes of Processing Personal Data

Shwe88 processes your personal data for the following purposes:

Legal Basis for Processing

Shwe88 relies on the following legal bases to process your personal data, in accordance with the PDPA and applicable data protection principles:

1. Contractual Necessity: Processing is necessary to perform the contract between you and Shwe88 — i.e., to operate your account, process transactions, and deliver gaming services;
2. Legal Obligation: Processing is required for Shwe88 to comply with applicable laws, including anti-money-laundering regulations, KYC obligations, and responsible gambling requirements;
3. Legitimate Interests: Processing is necessary for the Company's legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and interests;
4. Consent: For certain processing activities — such as sending promotional communications — we will obtain your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

Shwe88 does not sell, rent, or trade personal data. We share personal data only in the following limited circumstances:

7.1 Payment Processors

To facilitate deposits and withdrawals, we share relevant transaction data with our Malaysian payment partners, including but not limited to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong. Each payment partner is bound by its own privacy policy and complies with applicable financial data protection standards.

7.2 Identity Verification & Compliance Providers

Identity documents submitted during KYC are shared with our accredited third-party verification provider solely for the purpose of confirming your identity. We may also share data with anti-money-laundering screening services as required by law.

7.3 Legal and Regulatory Authorities

Shwe88 may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or to respond to a lawfully served legal process. We will notify you of such disclosures where legally permitted to do so.

7.4 Service Providers

We engage certain third-party service providers to assist with Platform operations, including cloud hosting, IT security, customer support tooling, and analytics. These providers act as data processors under written agreements that restrict them from using your data for any purpose beyond the provision of their services to Shwe88.

Data Retention

Shwe88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, taking into account our legal and regulatory obligations. The following general retention periods apply:

• Account and transaction data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping obligations;
• KYC documents: Retained for five (5) years from the date of verification or account closure, whichever is later;
• Communications and support records: Retained for three (3) years from the date of the relevant communication;
• Gaming and betting logs: Retained for five (5) years for audit, dispute resolution, and responsible gambling monitoring purposes;
• Technical and usage data: Session logs and IP records retained for thirteen (13) months for fraud detection and security purposes; aggregated analytics data may be retained indefinitely in anonymised form.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with industry best practices. Where deletion is not immediately technically feasible, data will be isolated and protected pending deletion at the next scheduled purge.

Data Security

Shwe88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Shwe88 Platform;
• Encrypted storage for sensitive personal data, including identity documents and financial records, at rest;
• Access controls — personal data is accessible only to authorised Shwe88 personnel on a strict need-to-know basis;
• Multi-factor authentication for internal systems access by Shwe88 staff;
• Regular security assessments including penetration testing and vulnerability scanning;
• Incident response procedures to contain, investigate, and remediate any data security incidents promptly.

While Shwe88 takes all reasonable precautions to safeguard your data, no transmission over the internet is entirely risk-free. You are responsible for maintaining the confidentiality of your own account credentials. Shwe88 will never ask for your password by email, Live Chat, WhatsApp, or any other channel.

Cookies & Tracking Technologies

The Shwe88 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session state, and support Platform analytics. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They maintain your login session, remember your language preference, and support the security of your account. These cookies cannot be disabled without materially impairing Platform functionality.

10.2 Analytics and Performance Cookies

These cookies collect aggregated, anonymised information about how players interact with the Platform — such as which pages are visited most frequently and whether error messages are encountered. This data helps us improve the Platform experience for all users.

10.3 Functional Cookies

These cookies remember choices you make — such as display preferences, last-used payment method, or game category filters — to provide a more personalised experience on your next visit.

10.4 Managing Cookies

You may configure your browser to refuse some or all cookies, or to alert you when cookies are being set. Please note that disabling certain cookies may affect the functionality of the Shwe88 Platform — in particular, disabling strictly necessary cookies will prevent you from remaining logged in.

Your Data Rights

As a Data Subject under the PDPA and applicable data protection principles, you hold the following rights in relation to your personal data held by Shwe88:

To exercise any of the above rights, please contact our support team via Live Chat (available 24/7) or by email. We will acknowledge your request within 48 hours and provide a full response within 30 days. Where requests are complex or numerous, we may extend this period by a further 30 days with prior notification.

Identity verification may be required before we act on a data rights request to protect the security of your information. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.

Minors & Age Restrictions

The Shwe88 Platform is strictly restricted to players aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been provided by a person under 21, we will take immediate steps to delete that data and close the associated account.

Age verification is conducted as part of the KYC process. Shwe88 reserves the right to request proof of age at any time and to withhold access to the Platform pending verification.

Third-Party Links & Integrations

The Shwe88 Platform may contain references or links to third-party payment gateways and service providers operated independently of Shwe88. When you interact with a third-party service — for example, by authenticating through Maybank2u, CIMB Clicks, or Touch 'n Go eWallet — you are subject to that provider's own privacy policy and terms of service.

Shwe88 is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

Amendments to This Policy

Shwe88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the scope of our services. Material changes will be communicated to registered players via email notification or a prominent in-platform notice at least seven (7) days before the amended Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. It is your responsibility to review this Policy periodically. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

Contact Us & Data Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how Shwe88 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on the Shwe88 Platform — the fastest way to reach us, with an average response time of 3–5 minutes.
• Email: [email protected] — responses within 24 hours for general enquiries; data rights requests acknowledged within 48 hours.
• Languages: Our support team handles privacy enquiries in English, Bahasa Melayu, and Chinese.

If you are not satisfied with our response to your privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. In Malaysia, privacy-related complaints may be directed to the Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.