Privacy Policy Waja66 — Malaysia Player Data Protection

Waja66 collects your personal information through several channels as you interact with our platform. This data collection is necessary to enable us to provide a secure, responsible, and high-quality service to all players in Malaysia.

Information you provide directly:

• Full name, date of birth, national identity card number (MyKad) or passport.
• Email address, phone number, and residential address.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Identity verification documents (KYC) uploaded to the platform.
• Information you share when contacting customer support.

Information collected automatically:

• Your IP address, browser type, and device operating system.
• Game session data including games played, session duration, and betting history.
• Cookie data and tracking technologies used to improve the user experience.
• Transaction logs including deposits, withdrawals, and bonus usage.
• Approximate location data based on IP address for geographic compliance purposes.

The following table provides a brief overview of the types of data collected and their purposes:

Every piece of data we collect is used for a clear and legitimate purpose. waja66 does not use your data for any purpose other than those stated below without first obtaining your additional consent.

• Account management: Registering your account, verifying your identity, and ensuring login security.
• Transaction processing: Processing deposits and withdrawals securely and accurately.
• Legal compliance: Meeting KYC, anti-money laundering (AML) requirements, and reporting to relevant authorities.
• Customer support: Resolving your inquiries, complaints, and technical issues more efficiently.
• Platform Security: Detecting and preventing fraud, hacking, and suspicious activity.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need assistance or betting limits.
• Marketing (with consent): Sending promotions, bonus offers, and the latest news about waja66 — only if you have opted in to receive them.
• Platform improvements: Analyzing usage data to improve the player experience and resolve technical issues.

Waja66 does not sell or rent your personal data to any third party. However, in the context of normal business operations, we may share certain information with the following selected parties, solely for platform operational purposes:

• Payment providers: Required transaction details are shared with legitimate e-wallet providers, banks, and payment gateways to process your deposits and withdrawals.
• KYC service providers: Identity information is shared with trusted third-party identity verification providers for compliance purposes.
• Game software providers: Basic game session data may be shared with game providers for technical and game fairness audit purposes.
• Legal authority: waja66 will disclose required information to the authorities if mandated by a court order, law, or a lawful regulatory investigation.

Waja66 will not disclose your personal data to any third party not listed above without first obtaining your explicit consent, except in emergency situations or as required by law.

Waja66 continuously invests in the latest security infrastructure to ensure your personal data is always protected. We employ multiple layers of technical and organisational security controls to prevent unauthorised access, loss, or misuse of data.

Key security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmissions between your browser and waja66 servers.
• Passwords and sensitive data are stored in encrypted form using one-way hashing algorithms — no waja66 staff member can ever view your original password.
• Two-factor authentication (2FA) is available for all player accounts and mandatory for internal staff accounts.
• Round-the-clock security monitoring by an in-house cybersecurity team and independent third parties.
• Penetration testing is conducted regularly to identify and patch system vulnerabilities.
• Access to player data is restricted to staff who require it to perform their duties only, with all access logged.

Waja66 uses cookies and similar tracking technologies to enhance the user experience, analyse website traffic, and deliver relevant content. Cookies are small text files stored on your device when you visit the waja66 platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the platform (e.g. most frequently visited pages) to help us improve our services.
• Functional Cookies: Saving your preferences such as language, region, and display settings to provide a more personalized experience.
• Analytics Cookies: Helping us understand overall platform usage patterns using trusted third-party analytics tools.

You can manage or disable cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality and your experience on the waja66 platform. For more information on managing cookies, refer to your browser's documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices, you have the following rights regarding your personal data at waja66:

Waja66 retains your personal data for as long as your account is active and for the prescribed period after account closure, in accordance with applicable legal requirements. We do not retain data longer than necessary.

Waja66 data retention guidelines:

• Active account data: Retained for as long as your account is active on the waja66 platform.
• Data after account closure: Transaction records and KYC documents are retained for a minimum of 7 years after account closure, in compliance with AML and tax legal requirements.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Analytics and cookie data: Anonymised data is retained for a maximum of 2 years for platform performance analysis purposes.
• Marketing data: Deleted when you withdraw consent or close your account, whichever comes first.

When data is no longer required, waja66 will delete or anonymise it using secure, irreversible methods, ensuring your data does not fall into the wrong hands.

Waja66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer.

When there are significant changes to this policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to all registered players via email or in-platform notifications.
• For highly material changes, we may ask you to provide explicit re-consent.

If you have any questions, concerns, or complaints regarding how waja66 handles your personal data, our privacy team is ready to assist. We are committed to resolving every enquiry transparently and in a timely manner.

You can reach the waja66 privacy team via:

• Privacy Email: [email protected] — for data-related enquiries and privacy rights requests.
• General Support: [email protected] — for account enquiries and technical issues.
• 24/7 Live Chat: Available directly on the waja66 platform for an immediate response.

All privacy-related requests will be acknowledged within 48 hours and fully resolved within the timeframe stipulated by Malaysia's PDPA. If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.