Privacy Policy waja99 — Your Data Security Is Our Top Priority

This Privacy Policy describes how waja99 ("we", "Platform" or "website") collects, uses, stores and protects your personal information when you use our services at waja99.app. By registering or using the waja99 platform, you agree to the practices described in this Privacy Policy. Please read this document carefully — it is written in plain language so you understand your rights clearly.

To provide a safe and personalised gaming experience, waja99 collects several categories of information from our users. This data collection is carried out transparently and only for legitimate purposes.

Information you provide directly:

• Full name as shown on official identification documents (MyKad or passport).
• An active Malaysian phone number for account verification.
• A valid email address for communications and important notices.
• Date of birth for age verification (18 years and above).
• Bank account or e-wallet details (DuitNow, FPX, Touch 'n Go, GrabPay, Boost) for deposit and withdrawal purposes.
• KYC documents such as a copy of your MyKad or passport for the identity verification process.

Information collected automatically:

• IP address and general location information (city/state level).
• Device type, operating system and web browser version used.
• Session log data including login times, session duration and pages visited.
• Betting history and in-platform transaction records.
• Cookie data and device identifiers for security verification.

Waja99 uses collected information solely for legitimate, stated purposes. We do not use your data for unrelated purposes without first obtaining your consent.

• Account Management: Creating, maintaining, and securing your player account, including login verification and password resets.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform accurately and securely.
• KYC Verification: Verifying your identity and age in line with legal and regulatory compliance requirements.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and other suspicious activities.
• Service Enhancement: Analysing usage patterns to improve platform performance, user interface, and overall gaming experience.
• Communications: Sending important account notices, security updates, promotional information (if you have opted in), and responses to support enquiries.
• Legal Compliance: Meeting legal compliance obligations including PDPA Malaysia, anti-money laundering (AML) requirements, and directives from lawful authorities.

Waja99 does not sell, rent, or disclose your personal information to third parties for marketing or commercial purposes. However, there are limited situations where data sharing is necessary to operate our services:

• Technology Service Provider: Technical partners providing server infrastructure, fraud detection systems, and platform analytics tools. All such providers are bound by strict confidentiality agreements and are only permitted to process data for specified purposes.
• Payment Gateway: Approved payment processors (DuitNow, FPX, and e-wallet partners) to facilitate secure financial transactions. Such sharing is minimal and limited only to data required for transaction verification.
• KYC Verification Provider: Approved third-party identity verification platforms that assist with the KYC process. These providers operate under strict privacy standards and do not retain your data longer than necessary.
• Legal Authority: Information may be disclosed to police, courts, or regulatory agencies when required by Malaysian law or a valid court order.

Protecting your data is more than a legal obligation for waja99 — it is our moral responsibility to every player who entrusts us with their personal information. We continuously invest in the latest security infrastructure to keep your data safe at all times.

• 256-bit SSL/TLS Encryption: All communications between your browser and waja99's servers are protected with industry-grade encryption, the same standard used by Malaysia's leading banks.
• Stored Data Encryption: Sensitive information such as passwords and financial details are stored in encrypted form (hashed/encrypted) in our database. Even waja99 staff cannot view your actual password.
• Two-Factor Authentication (2FA): Our platform supports two-factor authentication for an added layer of protection when you log in to your account.
• 24/7 Monitoring: Our real-time threat monitoring system operates around the clock to detect and respond to any suspicious activity.
• Data Segregation: Financial data is stored in a server environment isolated from general gaming activity data, reducing the risk of cross-exposure.
• Regular Security Audits: waja99 conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities.

Cookies are small text files stored on your device when you visit the waja99 platform. We use cookies to enhance the user experience, maintain session security, and understand how the platform is used.

Types of Cookies We Use:

You can manage or delete cookies through your web browser settings at any time. Please note that deleting essential cookies may affect certain platform functions, including the ability to stay logged in.

As a waja99 platform user and a Malaysian citizen or resident, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). We fully respect and support the exercise of these rights.

Waja99 retains your personal data for as long as your account is active or as long as necessary to provide services to you. After account closure, we retain certain data for a defined period to fulfil our legal and regulatory obligations.

• KYC & Identity Data: Retained for a minimum of 7 years after account closure in compliance with Malaysia's anti-money laundering (AML) legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years for audit, tax compliance, and regulatory reporting requirements.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Cookie & Session Data: Automatically deleted according to the retention periods set out in our Cookie Policy (ranging from session to 90 days).
• Marketing Data: Deleted within 30 days after you withdraw consent to receive marketing communications.

In the course of its operations, waja99 may transfer or process your personal data outside Malaysia, particularly when using cloud infrastructure services or international technology providers. Such transfers are only carried out with appropriate safeguards in place.

Waja99 ensures that all international data transfers are carried out with:

• Ensuring that recipient countries maintain an adequate level of data protection equivalent to Malaysia.
• Signing binding Data Processing Agreements with all third-party providers that handle your data.
• Using approved standard contractual clauses to protect data during transfers.
• Ensuring all transferred data remains encrypted in transit.

The waja99 platform may contain links or references to third-party services such as payment gateways or game providers. waja99's Privacy Policy applies only to our own platform and does not cover the privacy practices of any third-party websites or services.

We encourage you to read the privacy policy of each third-party service you use. waja99 is not responsible for the data collection or usage practices of third parties that are separate from our platform.

Waja99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. All amendments take effect immediately upon being published on this page.

When significant changes occur, we will notify you via:

• A clear notice on the platform's home page upon the next login.
• Notification email sent to the address registered in your account.
• Update the "Last Updated" date shown at the top of this page.

Continued use of the waja99 platform after any amendments are published constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request data deletion in accordance with the procedure stated in Section 6.