waja88 Privacy Policy

1. Who We Are

waja88 is an online betting and gaming platform accessible at waja88.win. In this Privacy Policy, "waja88", "we", "us", and "our" refer to the operator of the waja88 platform. "You" and "your" refer to any individual who visits, registers on, or uses the waja88 platform in any capacity.

waja88 acts as the data controller in respect of personal data processed under this Policy. Questions or requests relating to this Policy should be directed to the waja88 support team via 24/7 live chat or by email to support@waja88.win (displayed as plain text; not a clickable link).

2. Data We Collect

waja88 may collect the following categories of personal data from you, depending on the nature of your interaction with the platform:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identity documents provided during Know Your Customer (KYC) verification.
• Contact Data: Email address, Malaysian phone number, and residential address (including city references such as Kuala Lumpur, Penang, Johor Bahru, or Petaling Jaya where provided).
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet account reference, bank account name and number for Malaysian banks including Maybank, CIMB, and Public Bank), transaction history, deposit and withdrawal records denominated in Malaysian Ringgit (MYR).
• Account Data: Username, encrypted password, account preferences, VIP tier status, bonus balances, betting and gaming history, session durations, and responsible gaming settings.
• Technical Data: IP address, browser type and version, device type and operating system, referring URLs, time zone, and screen resolution collected automatically when you access the waja88 platform.
• Communications Data: Records of your interactions with the waja88 support team via live chat, email, and any other channel, including the content and timestamps of such communications.
• Usage Data: Pages visited, features used, games played, bets placed, and other behavioural data generated through your use of the platform.

waja88 does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where expressly required for responsible gaming assessments and only with your explicit consent.

3. How We Collect Data

waja88 collects personal data through the following channels:

• Direct Submission: Data you provide when completing the waja88 registration form, KYC verification, depositing or withdrawing funds, updating account settings, or contacting support.
• Automated Technologies: Cookies, server logs, and similar tracking technologies that automatically collect Technical Data and Usage Data when you visit or interact with the platform. See Section 6 for more detail.
• Third-Party Sources: Identity verification agencies, fraud prevention databases, payment processors, and gaming licence compliance bodies may provide data to waja88 where applicable law permits.

4. Purposes & Legal Basis for Processing

waja88 processes your personal data for the following purposes, relying on the legal bases indicated:

• Contract Performance: To create and manage your Account, process deposits and withdrawals, settle bets, and deliver the waja88 gaming services you have requested.
• Legal Obligation: To comply with anti-money laundering (AML) legislation, KYC requirements imposed by the waja88 gaming licence, tax reporting obligations, and any applicable data protection law.
• Legitimate Interests: To operate, improve, and secure the platform; detect and prevent fraud, cheating, and account abuse; conduct analytics to improve user experience; and communicate service updates relevant to your Account.
• Consent: To send marketing communications about waja88 promotions, bonuses, and new features where you have opted in. You may withdraw consent at any time by updating your communication preferences in Account settings or contacting support.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, apply limits or restrictions where warranted, and fulfil self-exclusion requests in accordance with waja88's responsible gaming obligations.

5. Sharing Your Personal Data

waja88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data may be disclosed to the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: Touch 'n Go eWallet, Boost, GrabPay, and banking partners in Malaysia require transaction data to process deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and AML service providers who perform identity checks and fraud screening on behalf of waja88.
• Technology Partners: Cloud hosting providers, platform software vendors, and content delivery networks that process data on waja88's instructions under data processing agreements.
• Regulatory Authorities: Gaming regulators, financial intelligence units, and law enforcement agencies where disclosure is required by applicable law or a valid legal order.
• Professional Advisers: Lawyers, auditors, and accountants bound by professional confidentiality obligations where access is necessary for the conduct of their services.

Any third party receiving your data is required to process it only for the specified purpose and to maintain appropriate security measures. waja88 does not authorise sub-processors to use your data for their own purposes.

6. Cookies & Tracking Technologies

The waja88 platform uses cookies and similar technologies to ensure correct functionality, personalise your experience, and collect analytical data. The categories of cookies used include:

• Strictly Necessary Cookies: Required for core platform functions including login session management, balance display, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limits between sessions.
• Analytical Cookies: Aggregate, anonymised data used by waja88 to understand how players navigate the platform and identify areas for improvement. No personal identity is attached to analytical data.
• Fraud Prevention Cookies: Identify unusual login patterns or technical fingerprints associated with account abuse or unauthorised access attempts.

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent platform functionality. waja88 does not use third-party advertising cookies or cross-site tracking pixels.

7. Data Retention

waja88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account & Transaction Records: Retained for a minimum of five (5) years from account closure or the last transaction, in compliance with AML and gaming licence obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Retained for two (2) years from the date of the interaction unless a longer period is required for a pending legal or compliance matter.
• Marketing Consents: Retained until you withdraw consent or for one (1) year following your last interaction with a marketing communication, whichever is earlier.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8. Security Measures

waja88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, without limitation:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the waja88 platform — the same standard applied by major Malaysian banks.
• Encrypted storage of passwords using industry-standard hashing algorithms. waja88 staff cannot view your password in plain text.
• Two-Factor Authentication (2FA) available for all Accounts, providing an additional layer of protection beyond username and password.
• Access controls limiting employee access to personal data to those with a business need, governed by role-based permissions and audit logging.
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure.

No data transmission over the internet is entirely without risk. If you become aware of a potential security breach affecting your waja88 Account, please contact the support team immediately via 24/7 live chat.

9. Your Rights

Subject to applicable data protection law and the rights available in your jurisdiction, you may have the following rights in respect of your personal data held by waja88:

• Right of Access: To request a copy of the personal data waja88 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data where retention is no longer necessary, subject to overriding legal obligations (e.g., AML retention requirements).
• Right to Restriction: To request that processing of your data be restricted in certain circumstances.
• Right to Data Portability: To receive your data in a structured, machine-readable format where processing is based on consent or contract performance.
• Right to Object: To object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: To withdraw consent for marketing communications at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, submit a written request to waja88 via 24/7 live chat or by email to support@waja88.win. waja88 will respond within thirty (30) days, or sooner where required by applicable law. Identity verification may be required before processing certain requests.

10. Responsible Gaming & Data

Personal data — including betting history, session duration, deposit frequency, and account activity patterns — may be processed by waja88 for responsible gaming purposes, including the identification of potentially problematic gambling behaviour. This processing is carried out as part of waja88's obligations under its gaming licence and in the legitimate interests of player welfare.

Where responsible gaming monitoring identifies a concern, waja88 may contact you with information about available support tools including deposit limits, loss limits, session timers, and self-exclusion. Data processed for responsible gaming purposes is not shared with third parties except where required by applicable gaming regulation. See the Responsible Gaming page for full details of available player protection tools.

11. Children & Minors

The waja88 platform is strictly intended for individuals aged 21 years and older. waja88 does not knowingly collect personal data from any person under the age of 21. If waja88 becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly and the associated Account closed. Parents and guardians who believe a minor has registered on the waja88 platform should contact support immediately.

12. Changes to This Policy

waja88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or business practices. Material changes will be communicated to registered players via the email address on file and/or via a prominent notice on the platform. The effective date at the top of this document will be updated accordingly. Continued use of the waja88 platform following notification of a material change constitutes acceptance of the revised Policy.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by waja88, please contact us using the following methods:

• Live Chat: Available 24/7 directly on the waja88 platform. Average response time is under 90 seconds.
• Email: support@waja88.win (displayed as plain text; not a clickable link). Suitable for non-urgent data rights requests.

This Privacy Policy was last reviewed and updated in June 2026. It applies to all personal data processed by waja88 in connection with the operation of the waja88 platform at waja88.win.