Privacy Policy waja44 –
Your Data, Your Rights,
Fully Taken Care Of

1Who Is Responsible for Your Data?

The Data Controller for all personal information collected through the waja44.bet platform is waja44 ("the Company", "We"). We bear full responsibility for ensuring that your personal data is collected, used, stored, and processed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international privacy principles.

This Privacy Policy applies to all services provided by waja44 through the waja44.bet website, including account registration, online casino services, lottery, slots, baccarat, financial transactions, and all customer support interactions. It also applies to any waja44 mobile apps that may be launched in the future.

2Personal Data We Collect

Waja44 collects your personal data through several different channels throughout your relationship with our platform. Below is a detailed explanation of each category:

Data you provide directly:

• During registration: full name, date of birth, gender, Malaysian MyKad or passport number, email address, and a valid Malaysian mobile number
• During identity verification (KYC): front and back copy of MyKad, selfie with MyKad, proof of current address
• At the point of deposit: information relating to your chosen payment method — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, or CIMB Clicks via FPX
• When contacting support: live chat conversation content, emails, and any attached documents

Automatically collected data:

• Technical information: IP address, device type, operating system, phone model, screen resolution and browser version
• Usage data: pages visited, time spent, games played, total bets placed, and login frequency
• Geolocation data: state and city of residence based on IP address (not precise GPS location)
• Cookies and similar tracking technologies — see the Cookie Policy section for more information

3How Do We Use Your Data?

Waja44 uses your personal data for the following purposes, each of which has a valid legal basis under Malaysia's PDPA 2010:

1. Account Management: Creating, verifying, and managing your waja44 account, including identity and age verification as required by law
2. Transaction Processing: Processing deposits via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX, as well as managing withdrawals to your Malaysian bank account or e-wallet
3. Security & Fraud Prevention: Detecting and preventing unauthorised access, money laundering, identity fraud and platform abuse
4. Customer Support: Answering enquiries, resolving complaints, and providing technical assistance to you
5. Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and activating appropriate protection tools
6. Platform Improvements: Analysing aggregated, anonymised usage data to improve the user experience
7. Legal Compliance: Complying with reporting obligations to the relevant regulatory bodies
8. Marketing (with consent): Sending promotional information, bonuses and special offers from waja44 via email or notifications — only where you have given explicit consent

Waja44 will not use your data for any purpose not stated here without first obtaining your renewed consent.

4Sharing Data with Third Parties

Waja44 shares your personal data only in the following limited circumstances, and always with strict controls in place to ensure your data is handled securely:

• Payment Providers: Required transaction information is shared with licensed payment processors such as the DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay gateways and Malaysian banks via FPX — solely for the purpose of processing your transactions
• Game Providers: Basic game data is shared with providers such as Evolution Gaming and Pragmatic Play solely for game operation and winnings verification purposes
• Legal Compliance: Data is shared with Malaysian law enforcement authorities when required by court order, warrant, or other legal obligation
• IT & Security Services: Officially contracted technical service providers who assist in operating and securing the waja44 platform, bound by strict confidentiality agreements

5Data Security Measures

Waja44 invests seriously in security infrastructure to ensure your personal data is always protected. The security measures we have implemented include:

• Encryption in transit: 256-bit SSL/TLS for all communications between your device and waja44's servers
• Encryption at rest: Sensitive data such as passwords is stored using irreversible one-way hashing algorithms
• Internal access controls: Only authorised personnel with a legitimate need may access users' personal data, and every access is recorded in an audit log
• Regular penetration testing: waja44 conducts regular security audits by independent external experts to identify and address vulnerabilities before they can be exploited
• Intrusion detection system: Continuous 24/7 monitoring to detect any abnormal or suspicious activity
• Two-factor authentication (2FA): Available and encouraged for all waja44 accounts

While no security system can guarantee absolute protection, waja44 is committed to consistently employing the latest security technologies and industry best practices to safeguard your data.

6Data Retention Period

Waja44 retains your personal data for as long as it is needed for the purpose it was collected, or as required by Malaysian law. General data retention periods are as follows:

• Active account data: For as long as your account remains active and you are a waja44 customer
• Financial transaction data: Minimum 7 years from the date of transaction, in accordance with Malaysia's financial record-keeping requirements
• KYC data (identity verification): 5 years after account closure or the date of the last transaction, whichever is later
• Support communication logs: 3 years from the date of interaction
• Marketing data: Until you withdraw consent or 2 years from the last interaction, whichever is earlier
• Cookies: Depends on type — see the Cookie Policy section for specific details

Once the retention period expires, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked to you.

7Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data that waja44 holds about you:

To exercise any of the rights above, please contact waja44's Data Protection Officer by email at privacy@waja44.bet. Requests will be processed within 14 working days. We may require additional identity verification before fulfilling your request to ensure the security of your data.

8Cookie Policy

Waja44 uses cookies and similar tracking technologies to enhance your experience, maintain account security, and analyse platform usage. The following are the categories of cookies we use:

You can manage your cookie preferences through your web browser settings or via the privacy settings panel in your waja44 account. Note: disabling essential cookies will affect your ability to use the platform.

9Cross-Border Data Transfers

As part of waja44's global platform operations, some of your personal data may be stored or processed on servers located outside Malaysia — in particular in connection with the game software providers and cloud infrastructure we use.

When your personal data is transferred outside Malaysia, waja44 ensures a level of protection equivalent to that provided under Malaysia's PDPA 2010 through the following mechanisms:

• Signing Data Transfer Agreements with overseas recipients requiring them to adhere to strict data protection standards
• Ensuring transfers are made only to countries or entities with recognised equivalent data protection laws
• Use of standard contractual clauses that safeguard your rights as a data subject

10Child Protection

The waja44 platform is intended for users aged Aged 18 and above only. We do not knowingly collect any personal data from individuals under the age of 18.

Should we become aware or suspect that personal data has been collected from someone under the age of 18 without adequate eligibility verification, we will take the following steps immediately:

1. Suspend the account in question immediately
2. Immediately deleting all associated personal data
3. Returning any existing balance to a verified parent or legal guardian upon confirmation of their identity
4. Reporting incidents to the relevant authorities where required

Parents or guardians who suspect their child has registered a waja44 account are urged to contact us immediately at privacy@waja44.bet for immediate action.

11Changes to This Privacy Policy

Waja44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or relevant technological developments.

When material changes are made to this Privacy Policy, waja44 will:

• Updating the "Last Updated" date at the top of this page
• Sending email notifications to all active registered members outlining the key changes
• Displaying a prominent notice on the waja44 platform for a minimum of 14 days
• For highly material changes, seeking your renewed consent before the changes take effect

Your continued use of the waja44 platform after the effective date of a new version of this Privacy Policy constitutes your acceptance of the changes.

12Contact Our Data Protection Officer

Waja44 has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA 2010 compliance and handling all privacy-related enquiries. For any enquiries, data rights requests or privacy complaints, please contact:

• DPO Email: privacy@waja44.bet
• General Customer Support: support@waja44.bet
• Live Chat: Available 24/7 within the waja44 platform

The response time for privacy-related requests is 14 working days from the date of receipt. For complaints that cannot be resolved directly with waja44, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010.