Privacy Policy – waja33

1. Introduction

waja33 ("we", "us", "our", "the Platform") is committed to protecting the personal data of everyone who uses the waja33 online casino and sportsbook at waja33.one. This Privacy Policy ("Policy") explains what personal data waja33 collects, why it is collected, how it is used, with whom it is shared, and how it is protected.

This Policy applies to all players who register an account, use any service, or visit the waja33.one website. By registering or using the Platform, you confirm that you have read and understood this Policy. If you do not agree with this Policy, you should not create an account or use waja33 services.

waja33 operates under international gaming authority licensing. As a licensed operator, waja33 is subject to obligations regarding player data collection, retention, and protection that are more stringent than those applying to general commercial websites. This Policy reflects those obligations.

2. Personal Data We Collect

2.1 Registration Data

When you create a waja33 account, we collect the following information:

• Full legal name;
• Date of birth (for age verification — waja33 is strictly 21+);
• Residential address, including city and postcode;
• Email address;
• Contact telephone number.

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and licensing requirements, waja33 may request:

• A copy of a government-issued photo identity document (e.g., Malaysian MyKad, passport);
• Proof of residential address (e.g., utility bill or bank statement dated within three months);
• Evidence of payment method ownership (e.g., screenshot of e-wallet account showing name).

2.3 Transaction Data

waja33 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, game bet and settlement records, bonus credits, and payment method details (excluding full card or account numbers, which are not stored by waja33).

2.4 Technical and Usage Data

When you access the waja33 platform, we automatically collect technical data including your IP address, device type and operating system, browser type and version, session timestamps, pages visited, and in-platform navigation patterns. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.5 Communications Data

Records of communications between you and waja33 customer support — including live chat transcripts and email correspondence — are retained for quality assurance and dispute resolution purposes.

3. How We Use Your Personal Data

waja33 uses the personal data it collects for the following purposes:

• Account management: creating, maintaining, and securing your waja33 account;
• Age and identity verification: confirming that you meet the 21+ age requirement and that your identity matches your account registration details;
• Transaction processing: processing deposits, withdrawals, and bet settlements in MYR;
• Fraud prevention and security: detecting and preventing unauthorised access, money laundering, bonus abuse, and other prohibited conduct;
• Regulatory compliance: fulfilling record-keeping, reporting, and verification obligations required under waja33's licensing framework;
• Customer support: responding to queries, complaints, and account issues;
• Platform improvement: analysing usage patterns to improve game offering, interface design, and payment options;
• Responsible gaming: monitoring player behaviour to identify potential problem gambling indicators and providing appropriate tools or interventions;
• Marketing communications: sending promotional information about waja33 offers to players who have not opted out of such communications. You may opt out at any time by contacting customer support.

4. Legal Basis for Processing

waja33 processes personal data on the following legal bases:

• Contractual necessity: processing required to create and manage your account and deliver gaming services;
• Legal obligation: processing required to comply with anti-money-laundering laws, gaming licensing requirements, and financial record-keeping obligations;
• Legitimate interests: fraud detection, security monitoring, and platform analytics, where these interests are not overridden by your privacy rights;
• Consent: marketing communications, where consent is required by applicable law. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

5.1 Service Providers

waja33 shares personal data with third-party service providers who process data on waja33's behalf under contractual data processing agreements. These include payment processors (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, FPX), identity verification providers, KYC/AML screening services, game software providers, and customer support platform providers. These parties are not permitted to use your data for their own purposes.

5.2 Regulatory and Legal Disclosure

waja33 may disclose personal data to its gaming regulator, financial intelligence units, law enforcement authorities, or courts where required to do so by law or by the terms of its licensing obligations. waja33 will notify affected players of such disclosures where it is legally permitted to do so.

5.3 No Sale of Data

waja33 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing or commercial purposes under any circumstances.

6. Cookies and Tracking Technologies

The waja33 website uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and analyse usage. The categories of cookies used include:

• Essential cookies: necessary for the platform to function. These cannot be disabled.
• Analytics cookies: used to understand how players navigate the platform and to identify performance issues. These do not identify you personally.
• Security cookies: used to detect and prevent fraudulent activity and unauthorised account access.

You may configure your browser to refuse non-essential cookies. Doing so may affect the functionality of certain platform features but will not prevent you from accessing core gaming services after login.

7. Data Retention

waja33 retains personal data for the following periods, or longer where required by applicable law:

• Account and transaction records: a minimum of five (5) years following account closure, in accordance with anti-money-laundering legislation;
• KYC documentation: five (5) years following the end of the business relationship;
• Customer support communications: two (2) years from the date of the communication;
• Technical and usage data: twelve (12) months from collection, unless retained longer for active fraud investigations.

Where retention is no longer necessary and no legal obligation requires continued storage, waja33 will securely delete or anonymise the relevant data.

8. Data Security

waja33 implements technical and organisational security measures appropriate to the sensitivity of the personal data it holds. These include 256-bit SSL encryption for all data in transit, AES-256 encryption for data at rest, role-based access controls limiting staff access to personal data, multi-factor authentication for internal platform administration, and regular security audits conducted by independent third parties.

In the event of a personal data breach that poses a risk to affected individuals, waja33 will notify its gaming regulator and, where required, the affected players within the timeframes mandated by its licensing obligations.

9. Your Rights

You have the following rights in relation to your personal data held by waja33:

• Right of access: to receive a copy of the personal data waja33 holds about you;
• Right to rectification: to have inaccurate personal data corrected;
• Right to erasure: to request deletion of your personal data, subject to waja33's legal retention obligations;
• Right to restriction: to request that waja33 limit processing of your data in certain circumstances;
• Right to data portability: to receive your personal data in a structured, machine-readable format;
• Right to object: to object to processing carried out on the basis of legitimate interests, including direct marketing.

To exercise any of these rights, contact waja33 customer support via live chat or at [email protected]. waja33 will respond to verified requests within thirty (30) calendar days. Identity verification may be required before actioning a data subject request.

10. Minors

The waja33 platform is strictly restricted to individuals aged 21 and above. waja33 does not knowingly collect personal data from anyone under the age of 21. If waja33 becomes aware that an account has been registered by a person under 21, the account will be immediately suspended, the personal data will be deleted to the extent permitted by legal retention requirements, and any deposited funds will be returned in accordance with the applicable Terms & Conditions.

11. Third-Party Links

The waja33 platform does not contain links to third-party external websites for commercial purposes. Where third-party game providers' software is accessed through the waja33 lobby, those providers are subject to contractual data processing obligations as described in Section 5.1. waja33 is not responsible for the privacy practices of third-party operators whose platforms are accessed independently of waja33.

12. Changes to This Policy

waja33 may update this Privacy Policy from time to time to reflect changes in its data practices, applicable law, or licensing requirements. Material changes will be communicated to registered players by email. The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the waja33 platform following notification of material changes constitutes acceptance of the updated Policy.

13. Contact

For privacy-related enquiries, data subject requests, or complaints regarding waja33's data practices, please contact:

waja33 Data Privacy Team
Email: [email protected]
Live Chat: Available 24/7 via the waja33 platform

If you are not satisfied with waja33's response to a privacy complaint, you may have the right to escalate the matter to the relevant supervisory authority under your applicable data protection legislation.