Waja33 Privacy Policy – Your Personal Data Protection

1 Privacy Policy Introduction & Scope

Welcome to the waja33 Privacy Policy page. This document is designed to provide users with full clarity on how our platform handles your personal data with complete trust and responsibility.

This Privacy Policy applies to all users accessing the waja33 website at waja33.top, the waja33 mobile app, and all services and products offered under the waja33 brand — including Sports Betting, Live Casino, Slots, Bingo, and all related platform features.

By registering or continuing to use the waja33 platform, you consent to the collection and use of your personal data as described in this policy. If you disagree with any aspect of this policy, please discontinue use of our platform and contact our support team to close your account.

Waja33 acts as the data controller for all personal information collected through this platform. We bear full responsibility for the security, accuracy, and lawful use of that data.

2 Personal Data We Collect

Waja33 only collects data that is genuinely necessary to provide a safe, efficient, and legally compliant service. The following are the categories of data we collect:

A. Data You Provide Directly

• Full name as it appears on your official identification document
• Date of birth and gender for age verification
• Active email address and mobile phone number
• Current residential address including postcode and state
• Bank account or e-wallet details for deposit and withdrawal purposes
• Copies of identity documents (MyKad or passport) for KYC verification
• Proof of address such as a recent utility bill or bank statement

B. Automatically Collected Data

• IP address and general geographic location based on IP
• Web browser type, operating system, and device information
• Login session records including access times and session duration
• Cookie data and session identifiers for an improved user experience
• Navigation patterns and interactions within the platform

C. Transaction Data & Gaming Activity

• Complete history of all deposits and withdrawals
• Records of bets, wins, and losses for each gaming session
• Bonus usage and wagering requirements fulfilment
• Communication history with the customer support team

3 How We Use Your Personal Data

The data we collect is used exclusively for legitimate purposes related to the operation of the waja33 platform. We do not use your data for any purpose outside the scope stated below:

If you do not wish to receive marketing communications from waja33, you may unsubscribe at any time via the "unsubscribe" link in our emails or by contacting our support team. This choice will not affect the delivery of core platform services to you.

4 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), waja33 processes your personal data on the following valid legal bases:

• Consent: For data collected at registration and for marketing communications, we rely on the explicit consent you have provided. You may withdraw this consent at any time.
• Contract Performance: Data processing necessary to fulfil our contractual obligations to you — including payment processing, account verification, and the provision of gaming services.
• Legal Obligation: Processing required by applicable law, including anti-money laundering (AML) requirements, KYC verification, and financial reporting compliance.
• Legitimate Interests: Processing carried out for legitimate business interests such as fraud prevention, platform security, and service improvement — provided these interests do not override your fundamental rights.

5 Data Sharing With Third Parties

Waja33 does not sell or disclose your personal data to third parties for marketing or commercial purposes. However, in the course of operating the platform, we may share data with the following limited and trusted categories of third parties:

• Payment Service Provider: Licensed payment gateways such as FPX, DuitNow, Touch 'n Go eWallet, and GrabPay to process financial transactions securely.
• Game Software Provider: Licensed game studios providing Live Casino, slots, and table game content — only data necessary for game functionality is shared.
• KYC Verification Provider: Certified third-party identity verification services for processing verification documents securely and efficiently.
• Regulatory Authority: Law enforcement bodies and regulatory agencies when required by valid court order or legal obligation.
• Cloud Infrastructure Provider: Cloud computing services used for hosting and data storage — bound by strict data processing agreements.

All third parties working with waja33 are required to comply with data protection standards equivalent to or stricter than our own policy. We do not permit any third party to use waja33 user data for their own purposes.

6 Cookies & Tracking Technologies

The waja33 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and help us understand how users interact with our platform.

The types of cookies we use are as follows:

• Essential Cookies (Strictly Necessary): These cookies are required for core platform functions such as login, session management, and security. They cannot be disabled without affecting platform functionality.
• Functional Cookies: Saving user preferences such as language, time zone, and display settings to provide a more personalised experience.
• Analytical Cookies: Helping us understand platform usage patterns for continuous improvement. Data collected is in aggregate form and does not identify individuals specifically.
• Security Cookies: Used to detect suspicious activity, prevent unauthorised access, and protect user accounts from cyber threats.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality and security of the waja33 platform.

7 Data Retention Period

Waja33 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account remains active on the waja33 platform, and up to 5 years after account closure to meet regulatory requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's tax and anti-money laundering legal requirements.
• KYC Documents: Retained for 5 years after the account closure date or the date of the last transaction, whichever is later.
• Security & Access Logs: Retained for 12 months for security incident investigation and fraud prevention purposes.
• Support Communication Records: Retained for 2 years after case resolution for reference and quality assurance purposes.

Upon expiry of the retention period, your data will be securely deleted or anonymised in accordance with the data disposal procedures established by waja33.

8 Your Rights Under the PDPA

As a registered waja33 platform user in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010:

9 Data Security Measures

Waja33 continuously invests in security infrastructure to ensure your personal data is always protected against unauthorised access, loss, destruction, or unlawful disclosure. Measures we implement include:

• 256-bit SSL Encryption: All data transmitted through the waja33 platform is protected with industry-standard SSL encryption, ensuring no third party can intercept or read your information in transit.
• Two-Factor Authentication (2FA): We offer and encourage the use of two-factor authentication for all user accounts as an additional layer of security.
• 24/7 Monitoring: Our automated security monitoring system operates around the clock to detect and respond to any suspicious activity or cyber threats.
• Tiered Access Control: Access to user data within waja33 is strictly limited on a need-to-know basis, and all access is automatically logged.
• Regular Security Audits: The waja33 platform undergoes regular security audits and penetration testing by accredited independent cybersecurity firms.
• Secure Data Backups: User data is regularly backed up to a secure, separate location to ensure full recovery in the event of a system failure.

10 Amendments to the Privacy Policy

Waja33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When significant amendments are made, we will:

• Displaying a clear notice on the waja33 platform homepage at least 7 days before the amendment takes effect
• Sending notifications to the email address registered to your account
• Updating the "Last Updated" date at the top of this document

Your continued use of the waja33 platform after an amendment takes effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how waja33 handles your personal data, our Privacy & Data Protection team is ready to assist you.

You can reach us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Live Chat button at the bottom corner of the waja33 platform — the fastest way to get a response.
• Support Email: [email protected] — typical response within 24–48 business hours.
• Account Section: Data correction requests can be submitted directly through your account profile settings.

When contacting us regarding privacy matters, please provide your account username and a clear description of your request so we can assist you more quickly and accurately.