Privacy Policy — How WB403 Handles Your Data
At wb403, protecting the personal data of our players is a core responsibility, not an afterthought. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, who it may be shared with, and what rights you have as a data subject. Please read this document carefully — by using the wb403 platform, you acknowledge and accept the practices described below.
Your Privacy, Our Responsibility
Six core commitments that underpin how wb403 handles every piece of personal data we hold.
Minimal Data Collection
wb403 collects only the personal data necessary to operate your account, process transactions, verify your identity, and comply with legal obligations. We do not collect data speculatively or for purposes unrelated to the services we provide.
Encryption & Secure Storage
All personal data held by wb403 is encrypted at rest and in transit using256-bit SSL technology. Access to data systems is restricted to authorised personnel only, and all access is logged and audited on an ongoing basis.
No Sale of Personal Data
wb403 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your data is used exclusively to deliver and improve the wb403 service and to meet our regulatory obligations.
Your Rights, Respected
You have the right to access, correct, delete, and port the personal data we hold about you. You may also object to certain processing activities and withdraw consent where is the basis of processing. We respond to all data subject requests within 30 days.
Clear Retention Periods
wb403 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. Retention periods for different categories of data are published in this Policy and reviewed annually.
Transparent Updates
Whenever this Privacy Policy is materially updated, wb403 will notify registered players via email or an in-platform notification before the changes take effect. The effective date at the top of this page always reflects the most current version.
Section 1
Introduction
This Privacy Policy ("Policy") is published by wb403 ("the Company", "wb403", "we", "us", "our") and applies to all personal data collected from individuals who access or use the wb403 website, mobile platform, and associated services ("the Platform"). It describes how we process personal data in accordance with our obligations as data controller.
wb403 takes privacy seriously. We are committed to handling personal data responsibly, protecting it against unauthorised access or misuse, and being transparent about what we collect, how we use it, and the choices available to you. This Policy has been drafted to meet internationally recognised data protection principles and to reflect best practice for online gaming platforms serving Malaysian users.
This Policy should be read in conjunction with wb403's Terms & Conditions and Responsible Gambling Policy. By registering an account, accessing the Platform, or providing any personal data to wb403, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.
If you do not agree to this Policy, you must not use the wb403 Platform or provide us with any personal data. Continued use of the Platform following any material update to this Policy constitutes your acceptance of the updated version.
Section 2
Definitions
The following definitions apply throughout this Policy:
- "Personal Data" — any information relating to an identified or identifiable natural person ("data subject"), including but not limited to name, identification number, location data, email address, financial information, and online identifiers.
- "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
- "Data Controller" — wb403, which determines the purposes and means of processing personal data collected through the Platform.
- "Data Processor" — a third party that processes personal data on behalf of wb403, such as a payment gateway or identity verification service, under a formal data processing agreement.
- "Consent" — a freely given, specific, informed, and unambiguous indication by the data subject that they agree to the processing of their personal data for a stated purpose.
- "Cookies" — small text files stored on your device by a web browser when you access the Platform, which may contain identifiers and usage information.
- "KYC" — Know Your Customer identity verification, a regulatory requirement to confirm the identity of account holders before financial transactions are processed.
Section 3
Categories of Personal Data We Collect
wb403 collects personal data across several categories, depending on how you use the Platform and the services you access. The categories we may collect include:
Identity Data
Full legal name, date of birth, nationality, Malaysian MyKad number, passport number, gender
Contact Data
Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru)
Financial Data
Bank account details, e-wallet account identifiers (e.g., Touch 'n Go, Boost, GrabPay), transaction history, deposit and withdrawal records
Verification Data
Copies of government-issued ID documents, selfie/liveness check images, utility bills, and other KYC documents
Usage Data
Login timestamps, pages visited, games played, bet history, session duration, device type and operating system
Technical Data
IP address, browser type and version, time zone setting, cookie identifiers, device fingerprint
Communication Data
Records of live chat conversations, email correspondence, WhatsApp messages, and support ticket histories
Responsible Gambling Data
Deposit limit settings, self-exclusion elections, cooling-off requests, problem gambling assessments
Section 4
How We Collect Personal Data
wb403 collects personal data through a variety of means, which may include:
Direct Interactions
You provide data directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or update your account settings. This constitutes the primary source of identity and financial data held by wb403.
Automated Technical Collection
When you access the Platform, our servers automatically collect certain technical data including your IP address, browser type, operating system, device identifiers, referring URL, and session timestamps. This data is collected via server logs and, where applicable, via cookies and similar tracking technologies.
Third-Party Sources
wb403 may receive personal data from third parties in specific circumstances, including:
- Identity verification service providers who return KYC outcomes and risk scores based on documents you submit.
- Payment processors such as DuitNow, FPX, and e-wallet providers who pass transaction confirmation data, including your registered name and account reference, when a deposit or withdrawal is processed.
- Fraud prevention and anti-money laundering screening services that flag accounts against watchlists or known fraud databases.
- Analytics service providers that aggregate anonymised or pseudonymised usage data to help wb403 understand Platform performance.
Where wb403 receives personal data about you from a third party, we will handle it in accordance with this Policy and will notify you of the source if required by applicable law.
Section 5
Purpose of Processing & Legal Basis
wb403 processes personal data for specific, documented purposes. The primary purposes and corresponding legal bases are as follows:
- Account registration and management — Processing is necessary for the performance of a contract between you and wb403. Without this data, we cannot create or maintain your account.
- Identity verification (KYC) — Processing is necessary to comply with legal obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
- Payment processing — Processing is necessary for the performance of the contract (to execute your deposit and withdrawal requests via DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, and other approved methods).
- Fraud prevention and security — Processing is necessary for the legitimate interests of wb403 and its players in preventing fraud, detecting unauthorised access, and maintaining Platform security.
- Responsible gambling compliance — Processing is necessary for compliance with legal obligations and, where applicable, is in the vital interests of the data subject in cases of problem gambling identification.
- Customer support — Processing is necessary for the performance of the contract and the legitimate interest of resolving player queries and complaints efficiently.
- Platform analytics and improvement — Processing is based on wb403's legitimate interest in understanding Platform usage to improve service quality, subject to appropriate safeguards.
- Promotional communications — Where you have consented to receive marketing communications, we process your contact data for this purpose. You may withdraw consent at any time by contacting us at [email protected].
- Legal and regulatory compliance — Processing is necessary to comply with applicable laws, including record-keeping requirements, regulatory reporting, and responding to lawful requests from competent authorities.
Section 6
Data Sharing & Disclosure
wb403 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data may be shared in the following limited circumstances:
Service Providers (Data Processors)
wb403 engages third-party service providers who process personal data on our behalf under formal data processing agreements. These include payment gateway operators, KYC verification platforms, cloud hosting providers, fraud screening services, and customer support technology providers. All such providers are contractually required to process data only in accordance with wb403's instructions and to maintain appropriate security standards.
Regulatory and Law Enforcement Authorities
wb403 may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required by applicable law, in response to a lawful court order, or where necessary to prevent, investigate, or prosecute criminal activity including fraud and money laundering. Such disclosures will be made only to the extent required by the relevant legal obligation.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of wb403's business assets, personal data held by wb403 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to this Policy that result from it.
Professional Advisers
wb403 may disclose personal data to its legal advisers, accountants, and auditors where necessary for the purpose of obtaining professional advice or in connection with legal proceedings. Such disclosures are subject to strict confidentiality obligations.
Section 7
Data Retention
wb403 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. The following retention schedule provides an indicative overview of our key data categories:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 7 years post-closure | Legal obligation (AML / regulatory record-keeping) |
| KYC identity documents | 7 years from account closure or last transaction | Legal obligation (AML regulations) |
| Transaction & financial records | 7 years from transaction date | Legal obligation (financial record-keeping) |
| Customer support communications | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Responsible gambling records | 7 years from account closure | Legal obligation and player protection |
| Technical / usage logs | 13 months from collection | Legitimate interest (security and analytics) |
| Marketing consent records | Until consent is withdrawn + 3 years | Legal obligation (consent records) |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to a specific individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.
Section 8
Security Measures
wb403 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption applied to all data in transit between your device and wb403's servers.
- Encryption at rest for all sensitive personal and financial data stored in wb403's databases.
- Two-factor authentication (2FA) available to all account holders and mandatory for internal staff accessing data systems.
- Role-based access controls ensuring that employees can access only the personal data required for their specific job function.
- Continuous security monitoring including intrusion detection systems, automated anomaly alerts, and regular penetration testing by independent security specialists.
- Data breach response procedures — in the event of a confirmed personal data breach that creates a risk to data subjects, wb403 will notify affected players and relevant supervisory authorities within the timeframes required by applicable law.
Despite these measures, no online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own login credentials and for notifying wb403 immediately if they suspect their account has been compromised. Do not share your wb403 password with any third party.
Section 9
Cookies & Tracking Technologies
wb403 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies allow wb403 to recognise your browser across sessions, maintain your logged-in state, remember your preferences, and gather analytics data.
Categories of Cookies Used
- Strictly Necessary Cookies: These are essential for the Platform to function correctly. They manage your login session, maintain security tokens, and enable core platform features. These cookies cannot be disabled without disabling the Platform itself.
- Functional Cookies: These remember your preferences — such as language setting, display preferences, and notification settings — to provide a personalised experience across sessions.
- Analytical Cookies: These collect aggregated, anonymised data about how players use the Platform — which pages are visited most, where users navigate from, and how long sessions last. This information is used solely to improve the Platform experience.
- Security Cookies: These assist in fraud detection, bot prevention, and account security monitoring by tracking behavioural signals on the Platform.
wb403 does not use third-party advertising cookies or cross-site tracking cookies that follow you across other websites. You may control cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent the Platform from functioning correctly.
Section 10
Your Data Rights
As a data subject whose personal data is processed by wb403, you have the following rights in relation to that data. These rights are subject to applicable legal exceptions and may be limited in certain circumstances:
Right of Access
You may request a copy of the personal data wb403 holds about you, together with details of how it is processed.
Right to Rectification
If your personal data is inaccurate or incomplete, you may request that it be corrected or updated.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
You may request that processing of your data be restricted in certain circumstances, such as where you contest the accuracy of the data.
Right to Data Portability
You may request a copy of your personal data in a structured, machine-readable format for transfer to another controller, where technically feasible.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. Objections to direct marketing will always be honoured.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
You have the right to lodge a complaint with the relevant supervisory authority if you believe your data has been processed unlawfully.
To exercise any of these rights, please contact wb403 at [email protected]. We will respond to all verifiable data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, with notification provided to the requesting party within the initial 30-day window.
Section 11
International Data Transfers
wb403's primary data processing infrastructure is hosted in data centres within or serving the Asia-Pacific region. However, some of wb403's third-party service providers — including certain cloud infrastructure, KYC verification, and analytics platforms — may process personal data in jurisdictions outside Malaysia.
Where personal data is transferred to a third country or international organisation, wb403 ensures that appropriate safeguards are in place to protect the data, including contractual protections equivalent to those required under applicable data protection law. Transfers to third-party processors are governed by data processing agreements that impose obligations consistent with this Policy.
Players who wish to obtain further information about the safeguards applicable to international transfers of their personal data may contact wb403 at [email protected].
Section 12
Children's Privacy
wb403 is strictly an adults-only platform. We do not knowingly collect, process, or retain personal data from any individual below the age of 21years. Account registration requires players to confirm that they meet the 21+ age requirement, and all accounts are subject to KYC identity verification to confirm this.
If wb403 becomes aware that personal data has been collected from an individual under the age of 21 without the knowledge of a parent or guardian, we will take immediate steps to delete that data and close the associated account. Any funds held in such an account will be dealt with in accordance with our Terms & Conditions and applicable law.
Parents or guardians who believe a minor may have registered an account on wb403 are encouraged to contact us immediately at [email protected].
Section 13
Third-Party Links
The wb403 Platform does not contain links to external third-party websites as a general policy. However, in the event that any third-party content or references appear on the Platform, please note that wb403 has no control over the privacy practices of external websites and is not responsible for their content or data handling. This Policy applies solely to the wb403 Platform and the personal data collected directly by wb403 or its authorised data processors.
Where you access third-party service — such as a payment provider's website or a KYC verification portal — your data handling will be governed by that provider's own privacy policy. wb403 recommends reviewing these policies before interacting with any third-party platform.
Section 14
Amendments to This Policy
wb403 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, industry standards, or the manner in which we process personal data. Where amendments are material — meaning they substantially affect your rights or the way your data is processed — wb403 will provide advance notice via email to the address registered on your account or via an in-platform notification, less than 14 days before the changes take effect.
The effective date shown at the top of this Policy is updated each time the Policy is revised. The most current version of this Policy will always be accessible at this page URL. We recommend reviewing this Policy periodically to remain informed of how wb403 protects your personal data.
Continued use of the wb403 Platform following the effective date of any revised Policy constitutes your acceptance of the updated version. If you do not accept the revised Policy, you must cease using the Platform and close your account.
Section 15
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way wb403 handles your personal data, please contact us through one of the following channels. All enquiries are handled by wb403's customer support team, who are available 24 hours a day, 7 days a week, in English, Bahasa Melayu, and Mandarin Chinese.
- Email: [email protected] (plain text — not a clickable link)
- Subject line for data requests: "Data Privacy Request — [Your Account Username]"
- Live Chat: Available directly on the Platform. Average response time 3–5 minutes.
- Operating Timezone: Malaysia Time (MYT / UTC+8)
For formal data subject access requests, complaints regarding data processing, or requests to exercise any of the rights described in Section 10, written requests sent by email to [email protected] are preferred as they allow us to maintain an accurate record of the request and our response.
Play with Confidence at WB403
Your personal data is in safe hands. Join hundreds of thousands of Malaysian players who trust wb403 for a secure, fair, and transparent gaming experience.21+ only — play responsibly.