Privacy Policy

weclub ("weclub", "we", "our", "us") operates the online casino and sports betting platform accessible at weclub.cam and any associated mobile applications or digital interfaces (collectively, the "Platform"). We understand that the privacy of our players is of fundamental importance, and we are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection laws and international best practices.

This Privacy Policy ("Policy") describes in detail how weclub collects, uses, stores, discloses, and protects personal information relating to individuals who access or use the Platform ("Players", "Users", "you"). It applies to all personal data processed by weclub in connection with the provision of our services to players located in Malaysia and other applicable jurisdictions.

By registering an account, accessing the Platform, or otherwise using weclub's services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must refrain from using the Platform and should close your account.

For the purpose of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information that identifies or could identify a living individual, either directly or in combination with other data. This includes name, email address, date of birth, residential address, payment details, and technical identifiers such as IP address.
• "Processing" means any operation performed on personal data, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means weclub, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of weclub under a data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their personal data for a stated purpose.
• "Sensitive Personal Data" means a special category of personal data that warrants heightened protection, including financial information, identity document data, and any data relating to health or vulnerability (such as problem gambling disclosures).

weclub collects personal data that you provide directly to us, data generated through your use of the Platform, and, in certain circumstances, data obtained from third parties for the purposes of verification and compliance. The categories of personal data we collect include:

weclub collects personal data through the following means:

4.1 Directly from You

• During account registration (name, contact details, date of birth)
• When completing KYC identity verification (identity document uploads)
• When making deposits or withdrawals via Malaysian payment methods (Maybank, CIMB, Public Bank, RHB, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay)
• When contacting our customer support team via live chat or email
• When completing responsible gambling forms or requesting self-exclusion
• When responding to surveys or promotional communications

4.2 Automatically Through Platform Use

• Through browser cookies and similar tracking technologies that record your session activity, preferences, and navigation patterns
• Through server logs that capture IP address, access time, pages visited, and device information
• Through gaming systems that record all bets placed, game sessions, and account activity in real time

4.3 From Third Parties

• From identity verification service providers engaged for KYC compliance
• From payment processing partners for transaction validation and anti-fraud purposes
• From anti-money laundering (AML) screening services and politically exposed person (PEP) databases

weclub processes your personal data for the following purposes:

• Account Administration: Creating, managing, and maintaining your player account, including processing deposits and withdrawals in MYR and maintaining accurate transaction records.
• Identity Verification (KYC): Verifying your identity, age (21+), and eligibility to use the Platform in compliance with applicable gaming regulations and anti-money laundering requirements.
• Service Delivery: Providing access to casino games, sports betting markets, live dealer products, and all other features of the Platform.
• Customer Support: Responding to queries, resolving complaints, and providing technical assistance via live chat and email channels.
• Responsible Gambling: Monitoring gaming activity for signs of problematic behaviour, enforcing deposit limits and self-exclusion requests, and complying with our responsible gambling obligations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and other prohibited activities.
• Marketing & Promotions: Sending personalised promotional offers, bonus notifications, and platform updates to Players who have consented to marketing communications. You may withdraw consent at any time.
• Legal & Regulatory Compliance: Meeting our obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records as required.
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, game selection, payment processing, and user experience.

weclub processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between weclub and the Player — including account creation, payment processing, and service delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations and regulatory reporting, is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and business analytics is carried out on the basis of weclub's legitimate interests, where such interests are not overridden by the Player's fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out on the basis of your explicit consent. You have the right to withdraw this consent at any time without affecting the lawfulness of prior processing.

weclub does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We disclose personal data only in the following limited circumstances:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in operating the Platform. These include payment processors (handling MYR transactions via DuitNow, FPX, and e-wallet partners), KYC and identity verification providers, IT and cloud infrastructure providers, customer support tooling providers, and data analytics platforms. All such providers are bound by data processing agreements that restrict their use of your data to the purposes for which it was shared and require them to implement appropriate security measures.

7.2 Regulatory and Law Enforcement Authorities

weclub may be required to disclose personal data to competent regulatory authorities, gaming commissions, or law enforcement agencies in response to a lawful request, court order, or legal process. We will disclose only the minimum data required to comply with such obligations and will, where legally permissible, notify the affected Player of such disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of weclub's business, player data may be transferred to the acquiring entity as part of the transaction, subject to the same data protection obligations set out in this Policy.

weclub retains personal data only for as long as is necessary to fulfil the purposes described in this Policy or as required by applicable law. The following indicative retention periods apply:

• Account and Transaction Records: Retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for five (5) years following the end of the business relationship, or longer where required by applicable law or regulatory direction.
• Gaming Activity Logs: Retained for a minimum of three (3) years to support responsible gambling monitoring, dispute resolution, and regulatory reporting obligations.
• Communications and Support Records: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, to evidence compliance with consent management obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with weclub's data disposal procedures.

weclub uses cookies and similar tracking technologies (including web beacons, local storage, and session identifiers) to operate the Platform, personalise your experience, and analyse usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These enable session management, secure login, and access to account features. They cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated information about how Players use the Platform, which pages are visited most frequently, and where errors occur. This data helps us improve Platform performance and user experience.
• Functionality Cookies: Used to remember your preferences (language, currency display, responsible gambling settings) and personalise your experience on return visits.
• Marketing Cookies: Used, where you have consented, to track your interactions with weclub promotional content and deliver relevant offers. These may be managed via your browser settings or by contacting support.

weclub implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the weclub Platform is protected using TLS 1.2 / 1.3 (256-bit SSL encryption). This applies to all login, registration, deposit, withdrawal, and account management interactions.
• Encryption at Rest: Sensitive personal data stored on weclub's servers, including financial details and KYC documents, is encrypted using industry-standard encryption protocols.
• Access Controls: Access to personal data within weclub's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Infrastructure Security: weclub's Platform infrastructure is hosted on hardened, monitored servers with regular security patching, intrusion detection, and penetration testing carried out by independent security specialists.
• Incident Response: weclub maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify affected Players and, where required, the relevant regulatory authority within the timeframes prescribed by applicable law.

Whilst weclub takes every reasonable precaution to protect your data, no system is entirely immune from security risks. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

As a player whose personal data is processed by weclub, you are entitled to exercise the following rights in relation to your personal data. All requests are handled by our Data Protection function and responded to within 30 days of receipt.

To exercise any of the above rights, please contact our Data Protection team in writing at [email protected] with the subject line "Data Subject Request — [Your Account ID]". We may ask you to verify your identity before processing your request.

The weclub Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals below the age of 21. Age verification is a mandatory step in our KYC process, and registration by minors is expressly prohibited.

If weclub becomes aware that personal data has been collected from an individual below the minimum age, we will promptly delete all such data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

The weclub Platform may contain references to or integrations with third-party payment services (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank) and game content providers. These third parties operate under their own privacy policies, which govern the collection and use of data in connection with their respective services.

weclub is not responsible for the privacy practices of third-party service providers and encourages Players to review the applicable privacy policies of any external services they interact with in connection with their use of the Platform. This Privacy Policy applies solely to personal data collected and processed directly by weclub through the Platform.

weclub reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where changes are material, we will provide prior notice through the Platform and, where reasonably practicable, via email to the address registered on your account.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or weclub's data protection practices, please contact us through the following channels:

• Data Subject Requests & Privacy Enquiries: [email protected] (subject line: "Privacy Enquiry" or "Data Subject Request")
• Live Chat Support: Available 24/7/365 via the Platform for general queries
• Response Time: All written privacy queries acknowledged within 24 hours; substantive response within 30 calendar days

If you are not satisfied with weclub's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.

For responsible gambling concerns, self-exclusion requests, or gaming behaviour queries, please refer to our dedicated Responsible Gambling page, which includes information on available tools and external support resources.