Waja888 is committed to protecting the privacy and data security of every member. This document details how we collect, use, store, and protect your information in accordance with Malaysia's applicable data protection laws.
This Privacy Policy is issued by waja888 ("Platform", "we") and applies to all users, registered members, and visitors of the waja888.onl website and the waja888 mobile app. We understand that your trust is our most valuable asset, and protecting your personal data is our unwavering priority.
This document is drafted in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and international industry best practices. It clearly and transparently explains what data we collect, why we need it, how we use it, and what rights you have as the owner of that data.
By continuing to use the waja888 platform, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account.
Waja888 only collects data that is genuinely necessary to provide you with a safe, efficient, and personalised service. Our data collection falls into three main categories:
In certain circumstances, we may receive additional information about you from payment service providers (such as FPX, Touch 'n Go eWallet, and GrabPay) to verify transactions, or from credit checking and fraud prevention agencies in order to fulfil our legal obligations.
| Data Category | Example | Requirements |
|---|---|---|
| Personal Identity | Name, IC, date of birth | Mandatory – KYC & registration |
| Contact Information | Email, phone number | Mandatory – account communications |
| Financial Data | Bank account number, e-wallet | Mandatory – payment processing |
| Technical Data | IP, device, browser | Automatic – platform security |
| Usage Data | Game history, session logs | Automatic – service improvement |
Every piece of data we collect has a clear and legitimate purpose. waja888 uses your information for the following purposes:
Important Note: waja888 never uses your data for purposes unrelated to the platform's services or for purposes for which you have not given consent. You can manage your marketing communication preferences at any time through your account settings.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), waja888 processes your personal data on the following valid legal bases:
Waja888 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is shared only in the following limited and controlled circumstances:
We work with certified third-party service providers to handle certain platform operations, including payment processing, secure cloud services, analytics systems, and licensed game providers. All these partners are bound by strict confidentiality agreements and may only use your data for purposes we have specified.
Where required by law or court order, waja888 will disclose the necessary information to relevant authorities such as Bank Negara Malaysia, the Financial Intelligence and Enforcement Department (FIED), or law enforcement agencies. We will notify you of any such request where permitted by law.
To protect the platform and all members from fraudulent activity, waja888 may share limited information with industry fraud prevention networks and identity verification system providers. Such sharing is strictly controlled and involves only the minimum data necessary.
The security of your personal data is a responsibility we take very seriously. waja888 implements multiple layers of technical and organisational protection to ensure your data remains safe at all times:
While we take all reasonable precautions, no online system can guarantee absolute security. We encourage you to play your part in keeping your account secure by using a strong password and never sharing your login details with anyone.
Waja888 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. Our general data retention guidelines are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | Throughout active account period | Ongoing service requirements |
| Financial transaction records | 7 years after account closure | AMLA & tax legal requirements |
| KYC Documents | 5 years after account closure | Financial regulatory compliance |
| Support communication logs | 3 years | Reference and quality improvement |
| Cookie and analytics data | 13 months | Usage pattern analysis |
Once the defined retention period expires, your data will be securely deleted or anonymised so it can no longer be associated with you as an individual.
Under Malaysia's PDPA 2010, you have the following rights regarding the personal data we hold. We are committed to respecting and facilitating the exercise of these rights:
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.
If your data is inaccurate or outdated, you have the right to request a correction via your account settings or through customer support.
You may request the deletion of your personal data, subject to applicable legal retention obligations.
You may withdraw your consent to data processing at any time, particularly for marketing communications.
You have the right to receive your data in a machine-readable format for transfer to another service provider.
You have the right to object to the processing of your data for direct marketing purposes or processing based on legitimate interests.
To exercise any of the above rights, contact our Data Protection Officer by email at [email protected], stating the right you wish to exercise and your identification details for verification.
The waja888 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how our platform is used. Our cookies fall into three categories:
| Cookie Type | Purpose | Duration | Status |
|---|---|---|---|
| Essential Cookies | Secure login, session management, CSRF protection | Session / 24 hours | |
| Analytics Cookies | Understanding usage patterns, platform improvement | 13 months | |
| Marketing Cookies | Displaying relevant ads and promotions | 30 days |
You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect core platform functions such as login and session security.
In operating a global platform, your personal data may be processed or stored in data centres located outside Malaysia, including in Singapore and the Asia-Pacific region. All international data transfers are carried out with appropriate safeguards, including:
Waja888 ensures that any transfer of data outside Malaysia occurs only to destinations that provide a level of data protection equivalent to or higher than that required by PDPA 2010.
The waja888 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under 18. If we discover that a child's data has been collected without proper age verification, we will immediately delete that data and close the associated account.
Parents or guardians who believe their child has registered an account at waja888 without permission are required to contact us at [email protected] immediately so that appropriate action can be taken without delay.
Waja888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. Any significant amendments will be communicated to you via in-platform notifications or your registered email at least 14 days before the effective date.
The "Last Updated" date at the top of this document indicates when this Privacy Policy was last amended. We encourage you to review this page periodically. Continued use of the platform after any amendment takes effect constitutes acceptance of the updated terms.
For any enquiries, requests, or complaints regarding your privacy and personal data protection on the waja888 platform, please contact our officially appointed Data Protection Officer (DPO):
If you are unsatisfied with our response to any privacy complaint, you have the right to lodge a formal complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.
At waja888, protecting your personal data is not merely a legal requirement — it is a core value that guides every operational decision we make.
All your personal and financial data is protected with 256-bit SSL encryption in transit and AES-256 encryption at rest – the same standard used by Malaysia's leading banks to safeguard high-value assets.
Every aspect of waja888's data handling is designed to fully comply with Malaysia's Personal Data Protection Act 2010. We have an officially appointed Data Protection Officer (DPO) to oversee this compliance.
Waja888 has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs entirely to you.
Our KYC identity verification process is fully digital and conducted through fully encrypted channels. Your identification documents are stored with the highest level of encryption and accessed only by authorised personnel.
The waja888 cybersecurity team continuously monitors the platform around the clock to detect and prevent any unauthorised access attempts, cyberattacks, or suspicious activity before they can compromise your data.
Through your waja888 account settings, you have full control over communication preferences, cookie choices, and data requests. You can update, correct, or request deletion of your data at any time with ease.
Your data is safe with us. With world-class privacy protection, full PDPA compliance, and our transparent commitment, enjoy peace of mind playing at waja888 alongside over 100,000 Malaysian members.
18+ only. Your data is protected under Malaysia's PDPA 2010. Please play responsibly.