waja888 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by waja888 in connection with your use of the waja888 platform at waja888.club, including all associated gaming products, account services, customer support interactions, and promotional activities.

waja888 is the data controller in respect of personal data processed under this policy. By registering an account with waja888, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This policy should be read alongside the waja888 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

waja888 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of identity documents (e.g., MyKad, passport) collected during account registration and KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and residential address. This information is required to create and manage your waja888 account and to contact you regarding transactions or account matters.
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet account reference, Boost account reference, bank account details for Maybank, CIMB, or Public Bank), deposit and withdrawal transaction history, and account balance records. waja888 does not store full card numbers or unencrypted banking credentials.
• Technical Data: IP address, device identifier, browser type and version, operating system, screen resolution, time zone, and session data collected automatically when you access the waja888 platform.
• Usage Data: Login and logout timestamps, pages and features accessed, games played, bet history, wagering patterns, and session duration.
• Communications Data: Records of communications between you and waja888 customer support, including live chat transcripts and email correspondence.
• Responsible Gaming Data: Records of any responsible gaming tools you have applied to your account, including deposit limits, self-exclusion periods, and session time settings.

waja888 collects personal data through the following means:

• Directly from you: When you complete the waja888 registration form, submit KYC verification documents, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: Through cookies, web beacons, log files, and similar tracking technologies when you access the waja888 platform. See Section 7 for details on our use of cookies.
• From third parties: Identity verification services and payment processors may provide waja888 with data necessary to verify your identity or process transactions. waja888 may also receive data from fraud prevention agencies and responsible gaming databases where legally permitted.

waja888 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your waja888 account, verifying your identity, and managing your login credentials and session security.
• Transaction processing: Processing deposits and withdrawals via your selected payment method, reconciling account balances, and maintaining financial records as required by applicable regulations.
• Service delivery: Enabling your access to waja888's full range of gaming products, including the live casino, sportsbook, and slots lobby.
• Legal and regulatory compliance: Meeting anti-money laundering (AML), know-your-customer (KYC), and responsible gaming obligations imposed by waja888's licensing authority and applicable laws.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent, collusive, or criminal activity; monitoring for unusual betting patterns; and enforcing our Terms & Conditions.
• Responsible gaming: Monitoring gameplay for indicators of problem gambling behaviour and administering self-exclusion, deposit limit, and other responsible gaming tools applied to your account.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players use waja888 and to improve the platform's features, performance, and user experience.
• Marketing: Sending you promotional communications about waja888 offers, where you have provided consent or where we have a legitimate interest and you have not opted out. You may opt out of marketing communications at any time via your account settings.

waja888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the waja888 Terms & Conditions, including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and gaming licence conditions imposed on waja888.
• Legitimate interests: Processing carried out in pursuit of waja888's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, provided these interests are not overridden by your rights and interests.
• Consent: Processing for which we have obtained your explicit consent, including the sending of promotional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

waja888 does not sell your personal data. We may share your data with the following categories of third parties where necessary and only to the extent required:

• Payment processors: To facilitate deposits and withdrawals, your payment reference details are shared with the relevant payment service provider (e.g., Touch 'n Go, Boost, Maybank, CIMB). These providers process your data under their own privacy policies and are required to handle data securely.
• Identity verification providers: Third-party KYC and AML compliance services that assist waja888 in verifying player identities and screening against relevant watchlists.
• Gaming technology providers: Game providers and platform technology partners who supply and operate the gaming content available on waja888 may receive limited technical and transactional data necessary to deliver their services.
• Regulatory and law enforcement authorities: waja888 will disclose personal data to competent authorities where required by law, court order, or regulatory instruction, including disclosures required under AML reporting obligations.
• Fraud prevention agencies: Where waja888 has reasonable grounds to suspect fraud, money laundering, or other criminal activity, relevant data may be shared with fraud prevention and responsible gaming agencies.

All third parties with whom waja888 shares personal data are contractually required to maintain appropriate security standards and to use the data only for the specific purpose for which it was shared.

waja888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that allow us to recognise your browser, maintain your login session, remember your preferences, and collect usage analytics.

The following categories of cookies are used on waja888:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your authenticated login state and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Collect aggregated, anonymised data about how players use waja888, including which pages are visited most frequently and where technical errors occur. This data is used solely to improve Platform performance.
• Functionality cookies: Remember your language preferences, display settings, and other personalisation choices to provide a more consistent experience across visits.

You may manage cookie preferences through your browser settings. Blocking all cookies may impair some waja888 Platform functionality, including the ability to maintain a logged-in session.

waja888 retains personal data for as long as necessary to fulfil the purposes described in this policy, and as required by applicable laws and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active waja888 account relationship.
• Transaction and financial records: Retained for a minimum of 5 years following account closure, as required for AML compliance and financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years following the end of the customer relationship, or longer where required by applicable law.
• Customer support records: Retained for 2 years following account closure, or longer where a dispute remains unresolved.
• Marketing consent records: Retained for the duration of the account relationship and for 1 year following opt-out, to evidence compliance with consent requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with waja888's data disposal procedures.

waja888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and waja888 servers.
• Access controls restricting waja888 staff access to personal data on a strict need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of the waja888 platform infrastructure.
• Multi-factor authentication requirements for all waja888 administrative system access.
• Encrypted storage of sensitive personal data, including identity document scans and payment credentials.
• Incident response procedures to detect, contain, and notify in the event of a data security incident.

While waja888 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own waja888 account credentials.

Subject to applicable law, you have the following rights in relation to your personal data held by waja888:

• Right of access: The right to request a copy of the personal data waja888 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to waja888's legal and regulatory retention obligations.
• Right to restrict processing: The right to request that waja888 restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to object: The right to object to processing carried out on the basis of legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact waja888 at [email protected]. waja888 will respond to requests within a reasonable timeframe and in accordance with applicable data protection law. Requests may be subject to identity verification to ensure your data is disclosed only to you.

waja888 operates on a globally distributed platform infrastructure. Your personal data may be transferred to and processed in countries other than Malaysia in connection with the delivery of waja888's services, including by game providers, payment processors, and technology partners located outside Malaysia.

Where personal data is transferred internationally, waja888 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses with the relevant third-party recipients. waja888 will not transfer your data to countries that do not provide an adequate level of data protection without first implementing appropriate safeguards.

waja888 is strictly an adult platform. The waja888 platform is not directed at, and must not be used by, individuals under the age of 21. waja888 does not knowingly collect personal data from individuals under 21 years of age.

If waja888 discovers that personal data has been collected from an individual under 21, the relevant account will be immediately closed and all associated personal data deleted, subject to any legal obligations requiring retention of records related to the attempted underage access.

If you have reason to believe that a minor has registered a waja888 account, please contact us immediately at [email protected].

The waja888 platform may contain references to third-party services, including payment method providers and game developers. waja888 is not responsible for the privacy practices of any third-party services. This Privacy Policy applies solely to data collected and processed by waja888. Where you interact with a third-party service in connection with your waja888 account (for example, completing a Touch 'n Go eWallet transaction), your data is also subject to that provider's own privacy policy.

waja888 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via a notification on the waja888 platform or by email to the registered account address, at least 7 days before the change takes effect where reasonably practicable.

The "Last updated" date at the top of this page reflects the most recent version of the policy. Continued use of the waja888 platform following the effective date of any update constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how waja888 has handled your personal data, please contact our team:

• Email: [email protected] (plain text — not a clickable link)
• Live chat: Available via the waja888 platform during peak hours

waja888 is committed to resolving privacy-related enquiries promptly and in a manner consistent with applicable data protection law. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.