waja33 Privacy Policy

1. Introduction

waja33 ("the Company", "we", "us", "our") operates the online gaming platform accessible at waja33.vu. In the course of providing our services — including sports betting, live casino games, slots, and virtual casino products — to players across Malaysia, including in Kuala Lumpur, Penang, Johor Bahru, and Petaling Jaya, we necessarily collect and process certain personal data about you ("the User", "you", "your").

This Privacy Policy describes in detail what data waja33 collects, the purposes for which it is processed, the conditions under which it may be shared, and the rights you hold in relation to your personal data. This Policy should be read alongside the waja33 Terms & Conditions, which govern your use of the platform generally.

waja33 takes data protection seriously. Our data handling practices are designed to comply with applicable international data protection standards and the obligations imposed by our operating licence framework.

2. Data We Collect

2.1 Identity & Registration Data

When you register a waja33 account, we collect the following information:

• Full legal name;
• Date of birth (for age verification — minimum 21 years);
• Email address;
• Mobile phone number;
• Residential address;
• Username chosen at registration.

2.2 Identity Verification Data

To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, waja33 may request:

• Government-issued identification documents (e.g., MyKad, passport);
• Proof of address documents (e.g., utility bills, bank statements);
• Payment method verification documents.

2.3 Financial & Transaction Data

We collect data about all financial transactions conducted through your waja33 account, including:

• Deposit amounts, timestamps, and payment methods (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, bank transfer);
• Withdrawal requests, amounts, processing status, and destination payment details;
• Bonus transactions, wagering activity, and balance history.

2.4 Gaming & Betting Activity Data

waja33 records all gaming and betting activity associated with your account, including game session data, bet amounts, outcomes, sports wager details, and game history. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

2.5 Technical & Device Data

When you access the waja33 platform, we automatically collect:

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Session timestamps and duration;
• Pages visited and features accessed within the platform.

2.6 Communications Data

If you contact the waja33 support team, we retain records of communications including live chat transcripts and email correspondence. This data is used for quality assurance, training, and dispute resolution purposes.

3. How We Collect Data

waja33 collects personal data through the following channels:

• Direct submission — information you provide during account registration, identity verification, or when contacting support;
• Platform usage — data generated automatically as you navigate and interact with the waja33 platform;
• Payment processors — transaction confirmation data relayed to waja33 by integrated payment providers;
• Cookies and similar technologies — as described in Section 9 of this Policy.

4. How We Use Your Data

waja33 uses the personal data it collects for the following purposes:

• Account management — creating, maintaining, and administering your waja33 account;
• Service delivery — enabling you to access games, place wagers, make deposits, and request withdrawals;
• Identity verification and KYC compliance — verifying your identity to meet regulatory requirements;
• Fraud prevention and security — detecting and preventing fraudulent activity, money laundering, and unauthorised account access;
• Responsible gaming — monitoring gaming patterns to identify and assist users who may be exhibiting problematic gambling behaviour;
• Customer support — responding to queries, complaints, and disputes;
• Legal and regulatory compliance — fulfilling obligations under our operating licence and applicable law;
• Platform improvement — analysing usage patterns to improve the waja33 platform experience;
• Marketing communications — sending promotional offers, bonus notifications, and platform updates to users who have consented to receive them. You may opt out at any time through your account settings.

5. Legal Basis for Processing

waja33 processes personal data on the following legal bases:

• Contractual necessity — processing required to fulfil the account agreement and deliver the waja33 Service;
• Legal obligation — processing required to comply with AML, KYC, and gaming licence regulatory requirements;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring where these interests are not overridden by your data protection rights;
• Consent — processing for marketing communications, where you have provided explicit opt-in consent. You retain the right to withdraw this consent at any time.

6. Data Sharing & Disclosure

waja33 does not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Payment processors — data shared with integrated payment providers (including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank) solely for the purpose of processing transactions;
• Identity verification providers — KYC and document verification services engaged to fulfil regulatory compliance obligations;
• Game software providers — limited technical data shared with certified game studios to facilitate game delivery and dispute resolution;
• Regulatory and law enforcement authorities — disclosure made where required by our operating licence conditions, a valid legal order, or statutory obligation;
• Business transfers — in the event of a merger, acquisition, or sale of waja33's business assets, user data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third-party processors engaged by waja33 are required to handle personal data in accordance with applicable data protection standards and are prohibited from using such data for any purpose beyond the specific service they are engaged to provide.

7. Data Retention

waja33 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. Specifically:

• Account data is retained for the duration of the account relationship and for a minimum of five years following account closure, in accordance with AML regulatory requirements;
• Transaction and betting records are retained for a minimum of five years;
• KYC documentation is retained for a minimum of five years following the completion of the verification process;
• Support communications are retained for up to three years.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with waja33's internal data lifecycle procedures.

8. Data Security

waja33 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and waja33 servers;
• Salted cryptographic hashing of stored passwords — plaintext passwords are never retained;
• Automated account monitoring systems that detect and flag suspicious login activity;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular security reviews and penetration testing of platform infrastructure.

Whilst waja33 takes data security seriously, no online platform can guarantee absolute immunity from all security threats. You are encouraged to use strong, unique passwords for your waja33 account and to enable two-factor authentication where available.

9. Cookies & Tracking Technologies

The waja33 platform uses cookies and similar tracking technologies to enhance user experience, maintain authenticated sessions, and analyse platform usage patterns. The types of cookies used include:

• Essential cookies — required for platform functionality including session management and login authentication. These cannot be disabled without impairing core platform functions;
• Analytics cookies — used to collect aggregated, anonymised data about how users interact with the waja33 platform, helping us identify areas for improvement;
• Preference cookies — used to remember your platform settings and display preferences across sessions.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the waja33 platform.

10. Your Rights

Subject to applicable law and our regulatory obligations, you hold the following rights in relation to your personal data held by waja33:

• Right of access — the right to request a copy of the personal data waja33 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data, subject to legal retention obligations;
• Right to restriction — the right to request that waja33 limit the processing of your data in certain circumstances;
• Right to data portability — the right to receive your personal data in a structured, machine-readable format;
• Right to withdraw consent — the right to withdraw consent for marketing communications at any time through your account settings or by contacting support;
• Right to object — the right to object to processing based on legitimate interests in certain circumstances.

To exercise any of the above rights, please contact the waja33 Data Protection team via [email protected]. Requests will be acknowledged within five business days. Please note that certain rights may be limited where processing is required to fulfil legal or regulatory obligations.

11. Children's Privacy

The waja33 platform is intended solely for adults aged 21 years and above. waja33 does not knowingly collect personal data from individuals under the age of 21. If you are aware that a minor has provided personal data to waja33, please contact us immediately at [email protected] so that appropriate action can be taken to remove such data and restrict access.

12. International Data Transfers

The waja33 platform and its supporting infrastructure may process and store personal data in jurisdictions outside of Malaysia. Where personal data is transferred internationally, waja33 ensures that appropriate safeguards are in place to maintain data protection standards equivalent to those required under applicable law. Such safeguards may include contractual data protection clauses, adequacy determinations, or other mechanisms recognised under applicable data protection frameworks.

13. Changes to This Policy

waja33 reserves the right to amend this Privacy Policy at any time. Material changes will be notified to registered users via email or platform notification prior to the change taking effect. The date of the most recent revision is displayed at the top of this document. Your continued use of the waja33 platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy.

14. Contact Us

For privacy-related enquiries, data subject requests, or concerns about how waja33 handles your personal data, please contact our support team:

waja33 is committed to resolving privacy concerns promptly and transparently. Where concerns cannot be resolved directly, you may refer the matter to the relevant regulatory authority responsible for data protection oversight in your jurisdiction.