🔐 waja888 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") applies to the waja888 platform accessible at waja888.co and all related services operated by waja888 ("waja888", "we", "us", "our"). This Policy governs how waja888 collects, processes, stores, and protects the personal data of users ("you", "User", "Player") in connection with your use of the platform.

1.2 By registering an account with waja888, making a deposit, or otherwise using the waja888 platform, you acknowledge that you have read and understood this Privacy Policy. Your use of the platform constitutes your consent to the data processing practices described herein, to the extent that such processing is based on consent under applicable data protection law.

1.3 This Policy should be read alongside the waja888 Terms & Conditions and Responsible Gaming Policy. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

1.4 waja888 is committed to handling your personal data responsibly and in accordance with applicable data protection legislation and the data protection requirements imposed under our international gaming authority licensing framework.

2. Personal Data We Collect

waja888 collects personal data in the following categories:

2.1 Registration & Account Data

• Full legal name;
• Date of birth (for age verification purposes);
• Email address;
• Username and encrypted password;
• Residential address;
• Contact number (optional but recommended for account recovery).

2.2 Identity Verification (KYC) Data

• Government-issued identification document (MyKad, passport, or equivalent);
• Proof of residential address (utility bill, bank statement dated within 3 months);
• Proof of payment method ownership where required;
• Selfie or liveness check image where required for enhanced verification.

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and payment method identifiers;
• eWallet identifiers (Touch n Go, Boost) and bank account references (Maybank, CIMB, Public Bank) — stored as tokenised references only, never full account credentials;
• Transaction history for the lifetime of your account.

2.4 Gameplay & Activity Data

• Game sessions, bets placed, outcomes, and win/loss records;
• Sportsbook betting history including markets, stakes, and settlements;
• Bonus and promotion usage history;
• Session timestamps and duration.

2.5 Technical & Device Data

• IP address and approximate geolocation;
• Browser type and version, operating system, device type;
• Cookies and similar tracking technology identifiers (see Section 6);
• Login timestamps and session tokens.

2.6 Communications Data

• Support chat transcripts and email correspondence;
• Survey responses and voluntary feedback submitted to waja888.

3. How waja888 Uses Your Personal Data

waja888 uses the personal data described above for the following purposes:

• Account creation and management: to create, maintain, and administer your waja888 player account;
• Age and identity verification: to verify that you meet the minimum age requirement of 21 years and to confirm your identity as part of our KYC obligations;
• Payment processing: to process deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank in Malaysian Ringgit;
• Platform operation: to deliver games, sportsbook, live dealer, and all other services you access on waja888;
• Licensing compliance: to meet the reporting, record-keeping, and audit obligations imposed under applicable international gaming authority licensing requirements;
• Anti-money laundering (AML) and fraud prevention: to monitor transactions and gameplay patterns for suspicious activity and to report to relevant authorities where legally required;
• Responsible gaming: to administer deposit limits, loss limits, session reminders, and self-exclusion requests, and to monitor for indicators of problem gambling;
• Customer support: to respond to your queries, complaints, and disputes;
• Marketing communications: to send you promotional offers, bonuses, and platform updates where you have consented to receive such communications;
• Platform improvement: to analyse usage patterns and improve the waja888 user experience through aggregated, anonymised analytics.

4. Legal Basis for Processing

4.1 Contractual necessity: Processing required to fulfil the contract between you and waja888, including account management, payment processing, and game delivery.

4.2 Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML obligations, and licensing authority reporting requirements.

4.3 Legitimate interests: Processing necessary for waja888's legitimate business interests, including fraud prevention, platform security, and aggregate analytics, where such interests are not overridden by your rights.

4.4 Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Data Sharing & Third-Party Disclosure

5.1 waja888 does not sell, rent, or trade your personal data to any third party for their own marketing purposes.

5.2 waja888 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Game software providers: to deliver certified casino games, live dealer streams, and sportsbook markets — these providers receive only the minimum data required for game session management;
• Payment service providers: including Touch n Go, Boost, Maybank, CIMB, and Public Bank, for payment processing — tokenised references only;
• KYC and identity verification services: third-party verification platforms used to authenticate government-issued documents;
• Licensing authorities: waja888's applicable international gaming authority regulators, who may require access to player data for audit and compliance purposes;
• Law enforcement and regulatory bodies: where waja888 is legally required to disclose data in response to a lawful request, court order, or to report suspected financial crime;
• Professional advisers: legal, accounting, and audit firms engaged by waja888 under strict confidentiality obligations.

5.3 All third parties with whom waja888 shares personal data are required to maintain appropriate data protection standards and may only use the shared data for the specific purpose for which it was disclosed.

6. Cookies & Tracking Technologies

6.1 waja888 uses cookies and similar technologies (local storage, session identifiers) to operate the platform, maintain your login session, remember your preferences, and analyse usage patterns.

6.2 Strictly necessary cookies are required for the waja888 platform to function. They maintain your authenticated session after waja888 login, remember your game settings, and enable secure payment flows. These cannot be disabled without impairing platform functionality.

6.3 Analytics cookies help waja888 understand how players use the platform — which games are popular, where navigation friction occurs, and how sessions flow. This data is aggregated and anonymised. You may opt out of analytics cookies via your browser settings or by contacting support.

6.4 Marketing cookies are used only where you have explicitly consented to receive marketing communications. They allow waja888 to tailor promotional content to your game preferences. You may withdraw consent at any time.

6.5 Most browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will affect your ability to use the waja888 platform, including the waja888 login function.

7. Data Retention

7.1 waja888 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and licensing obligations. Transaction records and KYC documentation are typically retained for a minimum of five years following account closure, in compliance with anti-money laundering legislation and licensing authority requirements.

7.2 Gameplay data and betting history are retained for the lifetime of the account and for a minimum of five years after closure for regulatory compliance purposes.

7.3 Marketing preferences and communication records are retained until you withdraw consent or request deletion, subject to any overriding legal retention requirements.

7.4 Following the expiry of the applicable retention period, waja888 will securely delete or anonymise your personal data.

8. Data Security

8.1 waja888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and waja888's servers;
• AES-256 encryption for sensitive data at rest;
• Tokenisation of all payment method references — full account numbers are never stored;
• Industry-standard one-way password hashing — passwords are never stored in recoverable form;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing by independent security professionals;
• Optional two-factor authentication (2FA) for all waja888 player accounts.

8.2 Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own waja888 login credentials and for notifying waja888 immediately if you suspect unauthorised access to your account.

9. Your Data Rights

9.1 Subject to applicable law and licensing obligations, you have the following rights in relation to your personal data held by waja888:

• Right of access: you may request a copy of the personal data waja888 holds about you;
• Right to rectification: you may request correction of inaccurate or incomplete personal data;
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements;
• Right to restrict processing: you may request that waja888 restrict the processing of your data in certain circumstances;
• Right to data portability: you may request a machine-readable copy of data you have provided to waja888;
• Right to object: you may object to processing based on legitimate interests, and you may withdraw consent for marketing and non-essential cookies at any time.

9.2 To exercise any of these rights, please contact waja888 at [email protected]. waja888 will respond to verified requests within 30 calendar days. We may require identity verification before actioning a data rights request.

9.3 Where waja888 is unable to fully action a data rights request due to overriding legal obligations — such as AML record-keeping requirements — we will explain the specific reason for any limitation.

10. Children's Privacy

10.1 The waja888 platform is strictly prohibited for persons under the age of 21. waja888 does not knowingly collect or process personal data from individuals under 21 years of age. If waja888 becomes aware that personal data has been collected from an individual under 21, that account will be immediately suspended and the data will be deleted to the extent not required to be retained by law.

10.2 If you believe that an individual under 21 has registered a waja888 account, please contact us immediately at [email protected].

11. International Data Transfers

11.1 waja888 operates globally and some of your personal data may be transferred to, stored, or processed in countries outside Malaysia. Where such transfers occur, waja888 ensures that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection standards, including contractual data protection clauses with relevant service providers.

11.2 Game software providers, KYC verification services, and other third-party service partners engaged by waja888 may operate infrastructure in various international locations. All such providers are contractually bound to maintain data protection standards equivalent to those described in this Policy.

12. Changes to This Privacy Policy

12.1 waja888 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated to registered users via in-platform notification or email at least 7 days before taking effect, where operationally practicable.

12.2 The current version of the waja888 Privacy Policy is always available at waja888.co/privacy-policy. The "Last Updated" date at the top of this Policy will reflect the most recent revision. Your continued use of the waja888 platform following any update constitutes your acceptance of the revised Policy.

13. Contact & Data Enquiries

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way waja888 handles your personal data, please contact our support team: [email protected] (plain text — not a clickable link).

13.2 waja888 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 calendar days. For complex requests or those involving regulatory coordination, we will keep you updated on the progress and expected timeline for resolution.