Waja888 Privacy Policy – Member Data Protection in Malaysia

When you register and use the waja888, we collect various types of information to ensure our services operate properly and securely. This information is organised into several key categories.

We only collect information that is strictly necessary for the purposes stated. waja888 does not collect sensitive data such as medical information, political views, or religious beliefs.

waja888 uses the information collected for legitimate and transparent purposes. We do not use your data for any purpose not stated in this policy without first obtaining your consent.

• Account Management: Processing registrations, verifying identities, managing logins, and ensuring the security of your account on the platform waja888.
• Transaction Processing: Handling deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks, and processing your winnings withdrawals accurately and promptly.
• Gaming Service Provision: Processing bets and winnings across all games, including slots, live casino, and Sports Betting covering the Malaysia Super League, EPL, BWF badminton, and esports.
• Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, and platform abuse through analysis of transaction patterns and behaviour.
• Customer Support: Providing relevant, personalised assistance when you reach out to our support team waja888 via live chat or email.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support, and managing the self-imposed limits you have set.
• Marketing Communications: Sending promotional information, bonuses, and the latest offers — only to members who have consented to receive such communications.
• Platform Improvements: Analysing aggregated usage data (without individual identification) to improve the platform's design, performance, and features waja888.

The legal bases for our data processing are: (a) contractual fulfilment — to provide the services you registered for; (b) legitimate interests — for platform security and fraud prevention; and (c) legal compliance — including AML requirements and Malaysia's PDPA.

waja888 understands that your trust is our most valuable asset. We do not sell or trade members' personal data. However, there are limited situations where we need to share data with trusted third parties in order to operate our services.

• Game Providers: Providers such as Pragmatic Play, PG Soft, Evolution Gaming, and Play'n GO receive only the minimum information necessary to verify game sessions and process winnings. These providers are bound by strict confidentiality agreements.
• Payment Processors: Licensed Malaysian payment providers such as Touch 'n Go, GrabPay, DuitNow, and FPX-connected banks receive the transaction details necessary to process your deposits and withdrawals.
• Law Enforcement: waja888 may be required to disclose information to Malaysian authorities when mandated by law, a court order, or a legitimate official investigation.
• Technical Service Providers: IT infrastructure and cybersecurity providers that help us operate the platform — all bound by strict data processing agreements and not permitted to use your data for their own purposes.
• Fraud Prevention Body: In cases where fraudulent activity is detected, relevant information may be shared with industry bodies or the relevant authorities to protect the platform and other users.

waja888 continuously invests in security infrastructure to ensure our members' personal and financial data remains protected at all times. The following measures form part of our multi-layered protection system.

• Data Encryption in Transit: All communications between your browser or app and the waja888 protected with TLS 1.3 / SSL 256-bit — the latest encryption protocol ensuring that data cannot be read even if intercepted in transit.
• Stored Data Encryption: Sensitive data stored in our databases, including identity verification information and financial records, is encrypted using AES-256 algorithms.
• Two-Factor Authentication: waja888 offers two-factor authentication (2FA) for an added layer of protection on your account. We encourage all members to enable this feature.
• 24/7 Monitoring: Our security team continuously monitors the platform to detect any suspicious activity, intrusion attempts, or anomalies that could compromise member data security.
• Regular Security Audits: Platform waja888 undergoes periodic independent security audits by qualified third parties to identify and address any vulnerabilities before they can be exploited.
• Staff Training: All staff with access to member data undergo comprehensive data protection training and are required to comply with strict internal confidentiality policies.

While we take every reasonable precaution, no security system can be guaranteed 100% foolproof. In the event of a data breach that affects your personal information, waja888 will notify you within the timeframe required by applicable law and take immediate steps to mitigate the impact.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and internal policies of waja888, you have the following rights regarding the personal information we hold about you.

• Right of Access: You have the right to request a copy of the personal data we hold about you. Your request will be processed within 30 days and provided in a readable format.
• Right to Rectification: If you find that information we hold about you is inaccurate or out of date, you have the right to request a correction. Some information can be updated directly from your account settings.
• Right to Erasure: You may request the deletion of your personal data from our records, subject to applicable legal retention requirements (such as financial records that must be kept for AML purposes).
• Right to Object to Marketing: You may opt out of your data being used for marketing communications at any time through your account settings or by contacting us.
• Right to Data Portability: You may request your data in a structured, machine-readable format for transfer to another platform, where technically applicable.

To submit any data rights requests, please contact us at support@waja888.best with the subject line "Data Rights Request — [Your Username]". We will verify your identity before processing any request in order to protect the security of your account.

Platform waja888 uses cookies and similar tracking technologies to enhance the user experience and maintain session security. Below are the types of cookies we use.

You can manage cookies through your browser settings. Disabling essential cookies may affect login functionality and session security on the platform. waja888. Cookies typically expire within 30 days for session cookies or 12 months for persistent cookies.

waja888 only retains your personal data for as long as necessary for the stated purposes, or as required by applicable laws in Malaysia.

Once the relevant retention period has ended, your data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity. waja888 conducts regular reviews to ensure that data no longer required is deleted according to the established schedule.

If you have any questions, concerns, or complaints regarding how waja888 handles your personal data, or if you wish to submit a request relating to your data rights, please contact us through the following channels.

For data rights requests that require identity verification, please include your account username and MyKad number (last four digits only) in your email to facilitate the verification process. We are unable to process data rights requests without sufficient identity verification, in order to protect the security of your account.

waja888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technological requirements, or relevant legislative amendments. All changes take effect upon publication on this page.

• We will notify you of significant amendments via an in-platform notice when you log in, or by email to your registered address.
• The "Last Updated" date at the top of this page will always reflect when the most recent amendment was made.
• Continued use of the platform waja888 after the amendments take effect will be considered your acceptance of the revised Privacy Policy.
• If an amendment involves a material change to how we use your data that requires fresh consent, we will obtain that consent before implementing the relevant change.

We encourage you to review this Privacy Policy page periodically. If you have any questions about the latest amendments, do not hesitate to reach out to our support team waja888 via live chat or email. We are always ready to clarify any changes that may affect you as a member.