Updated: 1 July 2026

William hill Malaysia Privacy Policy – Protection of Your Personal Data

At william hill, your privacy is not merely a legal obligation — it is a core part of the trust we have built with players over more than 90 years. This Privacy Policy clearly and honestly explains what we collect, why we need it, how we protect it, and the rights you hold as a player.

By using the william hill platform, you agree to the processing of your personal data as described in this Privacy Policy. If you have any questions, our support team is available at all times.

William hill's Six Pillars of Data Protection

Our approach to privacy is not reactive — it is proactive, comprehensive and built into every layer of the platform from the ground up.

🔐

Bank-Grade Encryption

All personal and financial transaction data is protected with 256-bit SSL encryption — the same standard used by Malaysia's largest banking institutions.

🚫

No Data Selling

William hill has never and will never sell, rent, or trade players' personal data to any third party for marketing or commercial purposes.

⚖️

Guaranteed Player Rights

You have the right to access, correct, transfer or request the deletion of your data. These rights can be exercised at any time through customer support.

🗂️

Data Minimisation

We only collect data that is genuinely necessary to provide our services, meet legal requirements and ensure the security of your account.

🔔

Breach Notification

In the event of any security incident involving your data, william hill will notify you and the relevant authorities within the timeframe required by law.

🌏

Local Legal Compliance

Our privacy policy complies with the Malaysia Personal Data Protection Act (PDPA) and relevant regulatory requirements applicable to platform operations in Malaysia.

1Personal Data We Collect

William hill collects your personal data through several channels — directly when you register and interact with the platform, automatically through your use of our services, and in certain cases, from trusted third-party sources for identity verification purposes.

Data you provide directly:

  • Full name, date of birth and identification number (MyKad or Passport)
  • Email address, phone number and residential address
  • Bank account details or payment methods used
  • KYC verification documents submitted during the registration process
  • Feedback and complaints you submit to customer support

Data collected automatically:

  • IP address, device type and browser information
  • Game history, deposits, withdrawals and platform activity
  • Login session information including access time and location
  • Cookie data and platform usage analytics (see Section 7)

We do not collect sensitive data such as medical information, religious beliefs or political views unless you voluntarily provide it in a specific and relevant context.

2Purpose of Data Collection and Use

Every piece of data we collect has a clear and legitimate purpose. william hill does not collect data for undisclosed purposes or purposes unrelated to the provision of our services.

Data Type Primary Purpose Legal Basis
Identity & Contact Account registration, KYC, communications Contract, legal obligation
Finance Deposit & withdrawal processing Contract, anti-money laundering
Game History Compliance, dispute resolution Legal obligation, legitimate interest
Technical & Usage Security, platform improvement Legitimate interest
Marketing Preferences Relevant promotions (if consented) Your consent

3Legal Basis for Data Processing

William hill processes your personal data only where a valid legal basis exists. Depending on the type of data and the purpose of processing, the applicable bases are as follows:

  • Contract: Processing necessary to fulfil the agreement between you and william hill, such as processing deposits and withdrawals
  • Legal Obligation: Data that must be collected to comply with regulatory requirements, KYC and anti-money laundering obligations
  • Legitimate Interest: Processing required for platform security, fraud prevention and service improvement
  • Consent: Optional activities such as marketing communications — you can withdraw your consent at any time

4Data Sharing and Disclosure

William hill does not sell your personal data. In certain situations, data may be shared with selected third parties, but all such sharing is done on a need-to-know basis, with strict data protection controls, and for legitimate purposes only.

Parties that may receive your data:

  • Payment service providers that process your deposits and withdrawals
  • Identity verification providers for KYC requirements
  • Gaming companies providing content for the platform (only necessary technical data)
  • Regulatory authorities and law enforcement agencies when required
  • IT service providers maintaining the platform infrastructure under strict confidentiality agreements

All third parties that receive your data are required to sign data processing agreements obligating them to protect your data to a standard equal to or exceeding william hill's own standards.

5Data Retention Period

William hill does not retain your personal data longer than is necessary for the stated purposes or as required by law. Retention periods vary according to data type and regulatory requirements.

  • Active account data: for the duration of the active account and for the required period after closure
  • Financial transaction records: minimum 7 years after the transaction (Malaysia legal requirement)
  • KYC documents: minimum 5 years after the business relationship ends
  • Customer support communication logs: 3 years
  • Non-essential cookie data: up to 12 months or until the cookie is deleted by you

Once the retention period expires, your data will be securely deleted or anonymised. In cases where immediate deletion is not technically feasible, the data will be isolated and protected until it can be deleted.

6Data Security Measures

William hill invests seriously in data security infrastructure. This goes beyond meeting minimum requirements — we hold ourselves to a higher standard than what is legally mandated, because we understand that player trust is an invaluable asset.

  • In-transit data encryption using TLS 1.3
  • At-rest encryption for all sensitive data
  • Role-based access controls — staff can only access data required for their specific duties
  • Periodic independent security audits by certified cybersecurity firms
  • A regularly tested incident response plan to minimise the impact of any breach
  • Mandatory data security training for all staff who handle player data

The william hill platform has passed penetration testing conducted by independent security firms. These tests are carried out at least once a year to ensure no new vulnerabilities exist in the system.

7Cookies and Tracking Technologies

William hill uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and understand how the platform is used. Each cookie category serves a distinct purpose.

Types of cookies we use:

  • Essential Cookies: Required for core platform functionality such as login and session security. Cannot be disabled.
  • Preference Cookies: Remembers your settings such as language and display preferences. Can be turned off.
  • Analytics Cookies: Collects anonymised data on how the platform is used for improvement purposes. Can be turned off.
  • Marketing Cookies: Only active if you provide consent, to display relevant promotions. Can be disabled at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the overall functionality of the platform.

8Your Rights as a Player

As a william hill player, you have a range of rights regarding your personal data. These rights can be exercised at any time by contacting our support team or through your account settings.

👁️
Right of Access

Request a copy of all personal data we hold about you in a readable format.

✏️
Right to Rectification

Request correction of any inaccurate or incomplete data we hold about you.

🗑️
Right to Erasure

Request deletion of your data, subject to applicable legal retention requirements.

⛔
Right to Object

Object to the processing of your data for marketing purposes or where processing is based on legitimate interest.

📦
Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another provider.

⏸️
Right to Restriction of Processing

Request restriction of your data processing in certain circumstances while a dispute or review is ongoing.

William hill will respond to all data rights requests within 30 business days. For complex requests, this period may be extended with prior notice given to you. No fees are charged for reasonable requests.

9Child Data Protection

The william hill platform is strictly for individuals aged 18 and above. We do not accept registrations from minors, and we do not knowingly collect any personal data from children or individuals under the age of 18.

Should we become aware that we have collected personal data from a minor without valid parental or guardian verification, we will take immediate steps to delete that data and close the account in question. We apply strict age verification procedures during the KYC process to prevent this from occurring.

If you believe someone under the age of 18 has used the william hill platform, please contact our customer support immediately. We will respond promptly to address the issue.

10Cross-Border Data Transfers

In certain circumstances, your personal data may be transferred and processed outside Malaysia — for example, when we use international cloud service providers or technical partners operating across multiple countries.

All cross-border data transfers are carried out with appropriate safeguards in place, including standard data processing agreements, approved transfer mechanisms, or equivalent data protection guarantees. william hill ensures that the same level of data protection applies regardless of where your data is processed.

11Changes to This Privacy Policy

William hill reserves the right to update this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or platform improvements. Significant changes will be communicated to you via email notice at least 14 days before taking effect.

The "Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. We encourage you to check this page from time to time to stay informed about how we handle your data.

12How to Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact the william hill customer support team. Our team is available to assist you at all times and will ensure every query is handled appropriately.

For more formal or sensitive privacy inquiries, you may contact us via the support email address available in the footer of this website. We will acknowledge your inquiry within 24 hours and provide a substantive response within 30 days.

All data rights requests and privacy enquiries are handled by staff specifically trained in data protection. There is no need to worry — we take this responsibility seriously.

Play with Peace of Mind — Your Data is Safe with william hill

With a transparent privacy policy, bank-level encryption and guaranteed player rights, william hill is a platform you can trust completely. Join our player community today.

18+ only. Responsible Gaming  |  FAQ

Bahasa Melayu