Waja333 Privacy Policy – How We Protect the Personal Data of Malaysian Members

1 Introduction

Waja333 ("we", "the platform", or "waja333") is the data controller responsible for personal information collected from users of our platform. This Privacy Policy outlines our data protection practices, your rights as a data subject, and how you may contact us regarding privacy matters.

We understand that your trust must be earned, not assumed. That is why waja333 has built a clear, straightforward privacy policy — so you know exactly what happens to your data from the moment you register to every time you use our platform.

This document applies to all registered members, website visitors, and anyone who interacts with the waja333 platform, including through Sports Betting, Live Casino, digital lottery, progressive jackpot, and all other features we offer.

2 Types of Personal Data We Collect

Waja333 only collects data that is strictly necessary to deliver the services you request and ensure platform security. We do not collect excessive or irrelevant data.

Financial information such as full bank account numbers, PINs or digital wallet passwords never stored within the waja333 system. All transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) are processed directly through licensed, PCI-DSS certified payment gateways.

3 How We Collect Data

Your personal data is collected through several different methods, depending on how you interact with the waja333 platform:

• Direct registration: Information you provide when opening a waja333 account — name, email, phone number, and date of birth;
• Platform usage: Activity data automatically generated when you use waja333 services, including Sports Betting and casino game records;
• Financial transactions: Information required during the deposit and withdrawal process using Malaysian payment methods;
• Identity verification (KYC): Identity documents submitted for account verification or withdrawals exceeding certain limits;
• Communications with support: Records of live chat, email, or WhatsApp conversations with the waja333 customer support team;
• Cookies and tracking technologies: Technical data automatically collected via your browser to improve the user experience.

4 Purpose of Data Use

Waja333 uses your personal data only for legitimate and relevant purposes. The primary purposes of data use are as follows:

• Account management: Create, verify, and maintain your waja333 member account;
• Transaction processing: Processing deposits, withdrawals and all financial transactions via Malaysian payment methods;
• Identity verification: Comply with anti-money laundering (AML) and know-your-customer (KYC) requirements;
• Platform security: Detecting and preventing fraud, multi-account abuse, and suspicious activity;
• Service improvements: Analysing usage patterns to improve the waja333 platform's interface and user experience;
• Service communications: Sending important notifications relating to your account, transactions, and security updates;
• Legal compliance: To fulfil obligations under applicable Malaysian law.

Waja333 not use your data for third-party marketing purposes or sell it to other companies. Promotional communications are sent solely in relation to waja333's own offers and services, and you may opt out at any time.

5 Sharing Data with Third Parties

Waja333 is very limited in how it shares personal data. We only share data in the following circumstances:

• Payment service providers: Certified payment gateways for processing transactions via DuitNow, Touch 'n Go, FPX, and others — subject to strict confidentiality agreements;
• Gaming technology providers: Game software providers who require minimal data for technical functionality — no full identity data is shared;
• Competent authorities: Where required by Malaysian law, court order, or a lawful law enforcement authority;
• Professional advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations.

6 Data Security

Waja333 continuously invests in security infrastructure to protect your personal data. The security measures we employ include:

• Encryption in transit: All data transmitted between your device and waja333 servers is protected by TLS 1.3 protocol with 256-bit encryption;
• Data encryption at rest: Sensitive data in our databases is stored in encrypted form using AES-256 algorithms;
• Access controls: Only waja333 staff who require access to carry out specific duties are permitted to view personal data, subject to strict log monitoring;
• Regular security testing: Penetration testing and security audits are conducted regularly by independent parties;
• 24/7 Monitoring: An active intrusion detection system monitors all waja333 platform activity around the clock;
• Two-factor authentication: Available to all member accounts as an additional layer of security.

While no system can guarantee 100% security, waja333 takes all reasonable measures and adheres to the highest industry standards. In the event of a security breach affecting your data, we will notify you and the relevant authorities within the timeframe required by law.

7 Data Storage & Deletion

Waja333 only retains your personal data for as long as necessary for the original purpose of collection, or as required under Malaysian law.

• Active account data: Retained for the duration of your active account plus 7 years following account closure (financial legal requirement);
• Financial transaction records: Retained for a minimum of 7 years in accordance with anti-money laundering legal requirements;
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes;
• Cookie data: Session cookies are deleted when the browser is closed; persistent cookies expire within 30–365 days depending on type;
• KYC verification data: Retained for the duration of the active account and 7 years after closure.

Once the retention period expires, data is securely deleted or anonymised in accordance with established data disposal procedures. You may also request deletion of your account and data before this period ends, subject to any legal requirements mandating specific retention.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and waja333's policies, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the waja333 privacy team at privacy@waja333.biz. We will process your request within 30 working days. In complex cases, this period may be extended with prior notice to you.

9 Cookie Policy

Waja333 uses cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use:

You can manage or delete cookies through your browser settings. Please note that disabling required cookies may affect the functionality of the waja333 platform. Optional cookies can be disabled without impacting core functionality.

10 Child Protection

The waja333 platform is exclusively for individuals aged 18 years and above only. We do not knowingly collect or process personal data of individuals under 18 years of age.

Should we discover that personal data belonging to an underage individual has been inadvertently collected, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on waja333 are urged to contact us immediately at support@waja333.biz.

11 Changes to the Privacy Policy

Waja333 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. Each new version will be marked with the updated date at the top of this document.

Members will be notified of significant changes via:

• Email to your registered address;
• In-platform notifications on waja333 when you log in;
• A prominent notice on the waja333.biz homepage.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request data deletion before the changes take effect.

12 Contact Our Privacy Officer

For any questions, concerns, or complaints regarding this Privacy Policy or the processing of your personal data by waja333, please contact:

• Privacy Email: privacy@waja333.biz
• General Support Email: support@waja333.biz
• Live Chat: Available 24/7 via the waja333 platform (login required)

The waja333 privacy team is committed to responding to all privacy-related enquiries within 5 business days and resolve more complex complaints within 30 working days.

You also have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) if you believe your privacy rights have been violated by waja333. However, we encourage you to contact us first so we can resolve the matter directly.