waja333 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how waja333 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data relating to individuals who register for an account, visit the platform, or otherwise interact with services offered at waja333.cam.

Waja333 respects the privacy of all Account Holders and is committed to processing personal data in a lawful, fair, and transparent manner. This Policy is intended to provide clear and accessible information so that you — as a User, Account Holder, or visitor — can make informed decisions about your personal data.

By registering an account or continuing to use the waja333 platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with the waja333 Terms & Conditions, which govern the overall use of the platform.

Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, deletion, or transfer.
• "Data Controller" means waja333, which determines the purposes and means of processing personal data collected through the platform.
• "Data Subject" means the identified or identifiable natural person whose personal data is being processed — in this context, the Account Holder or platform visitor.
• "Third Party" means any entity other than the Data Subject and waja333, including payment processors, identity verification providers, and analytics service operators.
• "Cookies" means small data files placed on a User's device by the platform for purposes including session management, security, and usage analytics.
• "KYC" (Know Your Customer) refers to the mandatory identity and document verification process applied to Account Holders.

Data We Collect

Waja333 collects personal data through multiple interactions across the account lifecycle. The categories of data collected are described in the table below:

Waja333 does not collect sensitive categories of data such as biometric profiles, health information, or political opinions. Selfie photographs collected during KYC are used solely for identity matching purposes and are not used to build biometric databases.

Legal Basis for Processing

Waja333 processes personal data on the following legal grounds:

• Contractual Necessity: Processing is required to register your account, process deposits and withdrawals, and deliver the gaming and betting services you have requested.
• Legal Obligation: Waja333 is required to verify identity (KYC), retain transaction records, and take fraud-prevention measures in accordance with applicable regulations, including anti-money-laundering requirements.
• Legitimate Interests: Waja333 processes certain data — such as device identifiers and session logs — for platform security, fraud detection, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Where processing is not covered by the above grounds — for example, sending optional promotional communications — waja333 will seek your explicit consent, which you may withdraw at any time.

How We Use Your Data

Personal data collected by waja333 is used for the following clearly defined purposes:

• Account Management: Creating, maintaining, and securing your waja333 account, including processing login credentials and authentication checks.
• Payment Processing: Verifying deposit and withdrawal requests, matching payment accounts to registered identities, and communicating transaction outcomes to your registered contact details.
• Identity Verification (KYC): Confirming that Account Holders meet the minimum age requirement of 21 years, validating identity documents, and preventing the use of false or stolen identities.
• Fraud and Security: Detecting unusual patterns, monitoring for multi-account behaviour, investigating suspected abuse, and protecting Account Holders from unauthorised access.
• Responsible Gambling: Operating deposit limits, self-exclusion requests, session controls, and account review processes associated with player protection obligations.
• Customer Support: Responding to enquiries, resolving disputes, and maintaining records of communications for audit and quality purposes.
• Platform Improvement: Using aggregated and anonymised usage data to understand how players navigate the platform and to identify technical issues or opportunities for improvement.
• Legal Compliance: Fulfilling record-keeping, reporting, and cooperation obligations arising from applicable law.

Data Sharing & Disclosure

Waja333 does not sell, rent, or trade personal data to third parties for commercial marketing. Data may be disclosed in the following circumstances:

• Payment Partners: Financial transaction data is shared with payment processors — including providers of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banks — solely to the extent necessary to complete deposit and withdrawal transactions.
• Identity Verification Providers: KYC documents may be processed by third-party identity verification services engaged by waja333 to support regulatory compliance. Such services are bound by confidentiality and data protection obligations.
• Technology and Platform Providers: Waja333 works with third-party technology providers for hosting, security, and game content delivery. These providers access only the data necessary for their specific operational function.
• Legal and Regulatory Authorities: Waja333 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal order.
• Fraud Prevention: Where fraud, money laundering, or serious abuse is suspected, waja333 may share relevant information with payment partners, fraud-prevention bodies, or investigative authorities.

Data Retention

Waja333 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following considerations:

• Active Accounts: Personal data associated with an active account is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, waja333 retains identity, financial, and transaction records for a minimum period required by applicable law — which may typically be five to seven years — to meet anti-money-laundering, audit, and legal obligations.
• KYC Documents: Verification documents are retained for the duration of the account relationship and for the legally required period thereafter.
• Support Communications: Records of customer support interactions are retained for a reasonable period to support dispute resolution and quality assurance.
• Cookies and Technical Data: Session cookies expire when the browser session ends. Persistent analytical cookies are retained for a defined period, typically not exceeding twenty-four months, after which they are renewed or expire.

Once retention periods have lapsed and no legal obligation requires continued storage, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Data Security

Waja333 implements and maintains technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, and accidental loss or destruction. These measures include:

• Secure HTTPS connections across all platform interactions to protect data in transit.
• Encryption of stored personal data, including identity documents and financial records.
• Access controls that restrict internal access to personal data on a need-to-know basis.
• Regular security reviews and monitoring to detect and respond to potential vulnerabilities.
• Staff protocols that govern appropriate handling and confidentiality of personal data.

No data transmission or storage system can be guaranteed as completely secure in all circumstances. In the event of a data breach that poses a risk to your rights and freedoms, waja333 will take appropriate steps in accordance with applicable notification obligations.

Cookies & Tracking Technologies

Waja333 uses cookies and similar tracking technologies to operate the platform effectively and to understand how it is used. The categories of cookies used are as follows:

• Essential Cookies: Required for core platform functionality, including session authentication, security checks, and payment flow management. These cannot be disabled without impairing platform access.
• Analytical Cookies: Used to collect aggregated and anonymised data on how users navigate the platform — such as pages visited, session duration, and feature usage. This helps identify areas for improvement.
• Functional Cookies: Store user preferences such as language selection, display settings, and previously visited sections to improve the browsing experience.

Waja333 does not use advertising or cross-site tracking cookies. You may configure your browser to reject or delete cookies; however, disabling essential cookies may affect your ability to log in and use certain platform features.

Your Rights as a Data Subject

Waja333 recognises and supports the following rights in relation to your personal data. To exercise any of these rights, please contact the waja333 support team with a written request from your registered email address:

• Right of Access: You may request confirmation of whether waja333 holds personal data relating to you, and a copy of that data in a structured format.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held on your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding retention obligations under applicable law.
• Right to Restrict Processing: You may request that waja333 limits how your data is processed while a dispute regarding accuracy or lawfulness is under review.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your personal data in a machine-readable format for transfer to another service provider.
• Right to Object: Where processing is based on legitimate interests, you may object to processing. Waja333 will assess whether its legitimate interests override your privacy rights in each case.
• Right to Withdraw Consent: Where processing is consent-based, you may withdraw consent at any time without affecting processing conducted prior to withdrawal.

Minors

The waja333 platform is strictly for adults aged 21 years and above. Waja333 does not knowingly collect personal data from individuals under this age. If an account is found to be held by a person under 21, the account will be suspended, and any personal data collected will be deleted or handled in accordance with applicable legal requirements.

Parents and guardians who believe that a minor has registered on the platform are encouraged to contact the support team immediately. Waja333 will investigate and take appropriate action promptly.

International Data Transfers

Some third-party service providers engaged by waja333 — including game content providers, technology infrastructure providers, and certain identity verification services — may process data in jurisdictions outside Malaysia. Where personal data is transferred internationally, waja333 takes reasonable steps to ensure that equivalent data protection standards are maintained by the receiving party through contractual obligations or other appropriate safeguards.

Waja333 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards, such as contractual data protection clauses.

Policy Amendments

Waja333 may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or platform features. Where changes are material, registered Account Holders will be notified via their registered email address or by prominent notice on the platform prior to the changes taking effect.

The "Last Reviewed" date at the top of this page indicates when the most recent update was made. Continued use of the platform following notification of updates constitutes acceptance of the revised Policy.

You are encouraged to review this Policy periodically to remain informed about how waja333 handles your personal data.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the waja333 support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, via the platform interface — the fastest channel for urgent matters.
• Email: [email protected] — written responses provided within 24 hours.

When submitting a data-related request, please include your registered account username, a clear description of your request, and — where required for identity verification — a copy of acceptable identification. Providing complete information helps the team process your request accurately and efficiently.

For matters relating to self-exclusion, account closure, or responsible gambling controls, please indicate the nature of your request when contacting the team, so that appropriate priority handling can be applied.