Privacy Policy Waja66 — Malaysia Member Data Security

Waja66 ("we", "our platform") takes seriously its responsibility to protect the privacy of every member who uses our services. This Privacy Policy transparently explains how we handle your personal information — from how it is collected to how it is used and protected.

This document applies to all users who access the waja66 website, register an account, or use any of our services, including through the mobile app. By using our platform, you agree to the practices described in this Privacy Policy.

If there are any significant changes to the way we handle your personal data, we will notify you via a prominent notice on the website or by email to your registered address. We encourage you to review this policy from time to time.

We collect your personal information in several ways — directly from you during registration, automatically through your use of the platform, and in certain cases, from trusted third-party sources.

Information you provide directly:

• Full name, date of birth, and identification card number (for KYC verification purposes).
• Email address, phone number and residential address.
• Bank account details or payment method information for deposits and withdrawals.
• Supporting documents such as copies of identification cards, bank statements or utility bills.
• Any communications you send to our support team.

Information collected automatically:

• IP address, device type, operating system and browser version.
• Usage data including pages visited, session duration and navigation patterns.
• General location information based on IP address (not precise GPS location).
• Transaction log data including deposit amounts, withdrawals and game history.

The information we collect is used for clearly defined and legitimate purposes. The table below provides a brief overview of the primary purposes for which your data is used:

We will not use your data for any purpose not stated above without first obtaining your consent. If you have given consent for marketing communications, you may withdraw that consent at any time.

Waja66 does not sell, rent, or disclose your personal information to third parties for commercial gain. However, under certain circumstances, we may need to share your information with the following parties:

• Payment service providers — to process your deposits and withdrawals securely. They are bound by strict confidentiality agreements.
• KYC and identity verification service providers — to ensure the member verification process runs securely and in compliance with regulations.
• Regulatory authorities and law enforcement agencies — when required by law, court order, or official investigation requirements.
• Internal analytics providers — using anonymised and aggregated data solely for user experience improvement purposes.

All third parties we work with are required to adhere to data protection standards equivalent to our own. We do not permit them to use your data for any purpose other than those specified.

Waja66 uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and ensure the security of your login session.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as session verification and security. Cannot be disabled.
• Performance Cookies — Collects information on how pages are used to help us improve platform efficiency.
• Functional Cookies — Saves your preferences such as language and display settings so you don't have to reconfigure them each time.
• Analytics Cookies — Helps us understand overall usage patterns for service improvement purposes.

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the waja66 platform.

We continually invest in security infrastructure to keep your personal data protected at all times. Our security measures include:

• 256-bit SSL encryption for all data transmission between users and our servers.
• Network segmentation and multi-layer firewall to prevent unauthorized access.
• Continuous security monitoring by our internal cybersecurity team.
• Role-based access controls — only authorised staff may access sensitive member data.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• Clear incident response procedures in the event of any data breach.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities within the timeframe stipulated by applicable law.

As a waja66 member, you have the following rights regarding your personal data:

• Right to Access — You may request a copy of the personal information we hold about you.
• Right to Rectification — You may request that we correct any information that is inaccurate or out of date.
• Right to Erasure — In certain circumstances, you may request that we delete your personal data, subject to any legal obligations we are required to comply with.
• Right to Restrict Processing — You may request that we restrict the way we process your data in certain situations.
• Right to Object — You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability — You may request your data be provided in a machine-readable format.

To submit any request relating to your rights, contact our support team via live chat, available 24/7. We will process your request within a reasonable timeframe not exceeding 30 days from the date of receipt.

Waja66 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active account data is retained for as long as your account remains active, plus any minimum retention period required by financial regulations.
• Financial transaction records are retained to comply with anti-money laundering (AML) legal requirements.
• After account closure, your data will be deleted or anonymized once the minimum required retention period has elapsed.
• Customer support communication logs are retained for 2 years for reference and dispute resolution purposes.

If you request account closure, we will process the data deletion within the stipulated timeframe, unless we have a legal obligation to retain certain information for a longer period.

The waja66 platform is strictly for users aged 18 and above. We do not intentionally collect, process, or store any personal information from minors.

If we discover that a minor's information has been collected without proper age verification, we will take immediate steps to delete that information and close the relevant account. We apply a strict KYC verification process during registration as our primary preventive measure.

Waja66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform service improvements.

Members will be notified of any significant amendments via a prominent notice on the website or by email to the registered address. The last updated date will always be displayed at the top of this document so you know when this policy was last revised.

Your continued use of the waja66 platform after any amendments are made constitutes your acceptance of the latest version of this Privacy Policy. If you disagree with the changes, you have the right to close your account and stop using our services.