Privacy Policy

01 Introduction

This Privacy Policy ("Policy") sets out how Waja66 ("Company", "we", "us", "our") — the operator of the online casino and sports betting platform accessible at waja66.cam ("Platform") — collects, uses, stores, shares, and protects the personal data of individuals ("Player", "User", "you") who access or use the Platform.

Waja66 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection legislation and privacy principles. We recognise the sensitivity of information provided by players in the context of online gambling services, and we hold ourselves to a high standard of data stewardship.

This Policy applies to all personal data collected through the waja66.cam website, including information submitted during account registration, identity verification, payment processing, customer support interactions, and general use of the Platform's features and services.

02 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, directly or indirectly. This includes names, identity card numbers, email addresses, IP addresses, and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether automated or manual.
• "Data Controller" — Waja66, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of Waja66, such as payment service providers, KYC verification vendors, or cloud hosting providers, acting under contractual data processing obligations.
• "Sensitive Data" — a sub-category of personal data afforded heightened protection, including but not limited to government-issued identity documents, financial account information, and data relating to health or vulnerable status.
• "Cookies" — small text files placed on a user's device by a website, used to remember session information, preferences, and browsing behaviour for functional and analytical purposes.

03 Personal Data We Collect

Waja66 collects the following categories of personal data in connection with your use of the Platform:

04 How We Collect Your Data

Waja66 collects personal data through the following channels and methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions and surveys.
• Automated Collection: Technical and behavioural data collected automatically when you access and interact with the Platform, including through cookies, server logs, and session tracking technologies.
• Third-Party Providers: Verified identity and risk data from KYC service providers, fraud prevention partners, and payment processors engaged by Waja66 to support secure and compliant operations.
• Publicly Available Sources: In limited circumstances, Waja66 may verify information against publicly available databases for fraud prevention or AML screening purposes.

05 Legal Basis for Processing

Waja66 processes personal data only where a lawful basis exists. The applicable legal bases for our processing activities are as follows:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Waja66 Terms & Conditions — including account management, payment processing, game provision, and customer support.
• Legal Obligation: Processing necessary to comply with applicable law, including anti-money laundering (AML) regulations, responsible gambling requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud, detect and investigate prohibited conduct, and improve our services — where such interests are not overridden by your privacy rights.
• Consent: Processing of personal data for optional purposes — such as marketing communications and non-essential cookies — where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 How We Use Your Personal Data

Waja66 uses the personal data we collect for the following specific purposes:

• To create, verify, and maintain your Waja66 account, including processing your registration details and confirming your identity through KYC procedures.
• To process deposits, withdrawals, and other financial transactions via DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency channels.
• To detect, prevent, investigate, and report suspected fraud, money laundering, match-fixing, bonus abuse, and other prohibited activities on the Platform.
• To provide and improve customer support, including responding to account queries, payment issues, and formal complaints submitted through live chat or email.
• To fulfil our responsible gambling obligations — including monitoring for signs of problem gambling behaviour, applying player-requested limits, processing self-exclusion requests, and providing age verification controls.
• To send you transactional communications — such as account notifications, withdrawal confirmations, and security alerts — which are necessary for the operation of your account.
• To send you marketing and promotional communications about Waja66 bonuses, new games, and platform updates — only where you have provided valid consent and not subsequently withdrawn it.
• To analyse aggregated, anonymised usage data to understand player behaviour, improve game offerings, optimise Platform performance, and refine our responsible gambling tools.

07 Data Sharing & Disclosure

Waja66 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Personal data is shared externally only in the following limited and controlled circumstances:

• Payment Service Providers: Financial institutions, e-wallet operators (Touch 'n Go, GrabPay, Boost, DuitNow), FPX processing partners (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency processors receive the minimum data necessary to execute and verify transactions.
• KYC & Identity Verification Partners: Third-party KYC service providers process identity documents and biometric selfie data on Waja66's behalf, strictly for the purpose of age and identity verification under contractual data processing agreements.
• Fraud Prevention & Security Vendors: Specialist third parties engaged to detect fraudulent activity, screen against sanctions lists, and monitor for suspicious transaction patterns — acting under strict confidentiality and data minimisation obligations.
• Regulatory Authorities: Where required by applicable law or a valid regulatory directive, Waja66 may be obligated to disclose player data to competent authorities without prior notice to the individual concerned.
• Legal Proceedings: In connection with legal claims, enforcement actions, or investigations involving Waja66 or a player, relevant personal data may be disclosed to legal advisors or court-ordered recipients.

08 International Data Transfers

In operating the Waja66 Platform, personal data may be transferred to and processed in countries outside Malaysia, including jurisdictions where the Platform's infrastructure, third-party service providers, or regulatory oversight bodies are located.

Where personal data is transferred internationally, Waja66 takes appropriate measures to ensure that such transfers are carried out in compliance with applicable data protection requirements, including through the use of contractual safeguards, data processing agreements, and — where relevant — adequacy assessments of the recipient jurisdiction's privacy framework.

09 Data Retention

Waja66 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal retention obligations, or to resolve disputes and enforce agreements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's existence on the Waja66 Platform, plus a post-closure retention period as required by AML and financial record-keeping obligations (typically five (5) years following account closure).
• KYC Documents: Retained for a minimum of five (5) years from the date of account closure or the date of the last relevant transaction, in accordance with anti-money laundering regulatory requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years to satisfy statutory record-keeping and regulatory reporting requirements.
• Support Communications: Customer support records are retained for a period of three (3) years from the date of last interaction, for dispute resolution and service quality purposes.
• Marketing Data: Where consent is the legal basis, marketing preferences and communication records are retained until consent is withdrawn or the account is closed, whichever occurs earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10 Cookies & Tracking Technologies

Waja66 uses cookies and similar tracking technologies (including pixel tags and session storage) to operate the Platform, improve user experience, maintain security, and — where you have consented — to analyse usage and deliver relevant promotions.

You may manage your cookie preferences through your web browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Waja66 Platform, including login and payment processing features.

11 Security Measures

Waja66 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our key security controls include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the Waja66 Platform, including payment transactions and account management operations.
• Encryption of sensitive data at rest, including identity documents and financial account information stored on Waja66's servers.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis, with access logs maintained for audit purposes.
• Regular penetration testing, vulnerability assessments, and security audits conducted by qualified independent security professionals.
• Two-factor authentication (2FA) options available for player account logins, providing an additional layer of protection against unauthorised access.
• A defined data breach response procedure, under which Waja66 will notify affected players and, where required, relevant regulatory authorities in the event of a confirmed personal data breach.

12 Your Data Rights

Subject to applicable data protection law, you hold the following rights in relation to your personal data held by Waja66. To exercise any of these rights, please contact our support team using the details in Section 16.

• Right of Access: You may request a copy of the personal data Waja66 holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If you believe any personal data we hold is inaccurate or incomplete, you may request that it be corrected. You may also update basic account details directly through your account settings.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to limitations where retention is required by law (e.g., AML record-keeping obligations) or to defend against legal claims.
• Right to Restrict Processing: You may request that Waja66 restricts the processing of your personal data in specific circumstances, such as while the accuracy of data is disputed or an objection to processing is under consideration.
• Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of Waja66's legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Waja66 commits to responding to all valid data subject requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by an additional thirty (30) days, with prior notification to you of the reason for the extension.

13 Children & Minors

The Waja66 Platform is strictly intended for individuals aged 21 years and above. Waja66 does not knowingly collect, process, or retain personal data from persons under the age of 21. Age verification is a mandatory component of the account registration and KYC process.

If Waja66 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete such data and close the associated account. If you have reason to believe that a minor has registered on the Waja66 Platform, please contact our support team immediately.

14 Third-Party Links & Services

The Waja66 Platform may contain references to third-party service providers, payment processors, or informational resources. Where links to external websites or services are present, please be aware that Waja66 has no control over the privacy practices or content of those third-party sites.

This Privacy Policy applies solely to data collected and processed by Waja66 through the waja66.cam Platform. We encourage you to review the privacy policies of any third-party services you access in connection with your use of the Platform — in particular, the privacy notices of payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, and your bank's FPX service.

15 Updates to This Policy

Waja66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or operational requirements. Material changes to this Policy will be communicated to registered players via the email address on file or through a prominent notice on the Platform prior to the change taking effect.

The effective date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically. Continued use of the Waja66 Platform following notification of a material change constitutes acceptance of the revised Policy.

16 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or Waja66's handling of your personal data, please contact our support team through the following channels:

• 24/7 Live Chat: Available directly through your Waja66 account dashboard. Average response time under three (3) minutes. Recommended for urgent account or data queries.
• Email: [email protected] — displayed as plain text only. Expected response within twenty-four (24) hours during standard operating hours. For formal data subject access requests, please indicate "Data Request" in your message subject.