Waja99 Privacy Policy — Member Personal Data Protection

1 Introduction & Scope of Privacy Policy

Welcome to the waja99 Privacy Policy. This document is a binding agreement between you as a registered member or visitor of our website and waja99, the online slot games and wagering platform operating under the official domain waja99.net.

We understand that your trust is our most valuable asset. That is why waja99 takes a fully transparent approach to privacy matters. This policy clearly explains what data we collect, why we need it, how it is used, who it may be shared with, and what your rights are as the owner of that data.

This Privacy Policy applies to all services offered by waja99, including the main website, mobile app (where available), Slot Games, Sports Betting, live betting, deposit and withdrawal systems, the VIP programme, and all communication channels such as email, live chat, and in-account notifications.

Waja99 is the responsible data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all principles set out in the PDPA, including the General Principle, Notice & Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle.

2 Types of Personal Data We Collect

Waja99 practices the principle of data minimisation — we only collect information that is strictly necessary to provide you with a high-quality service. Below are the categories of data we collect and their respective purposes:

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. waja99 does not use your data for purposes unrelated to the provision of this platform's services. Below is a detailed breakdown of how your data is used:

• Account management: Creating, verifying, and managing your account, including the KYC process, password resets, and profile updates. Your identity data is required to ensure only you can access your account.
• Financial transaction processing: Verifying and processing all deposits and withdrawals promptly and securely. Your bank information is used solely to ensure funds reach the correct destination.
• Security & fraud prevention: Monitoring suspicious activity patterns, detecting unauthorized access attempts, preventing money laundering, and complying with AML (Anti-Money Laundering) requirements. Technical data such as IP addresses plays a key role in these security layers.
• Service communication: Sending transaction-related notifications, security alerts, policy updates, and promotional notices you have opted in to receive. You may unsubscribe from promotional emails at any time through your account settings.
• Platform improvement: Analyzing aggregated usage patterns to improve interface design, game performance, and overall user experience. This data is processed anonymously wherever possible.
• Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and recommending limit-setting tools or self-exclusion options to members who may need them. This is part of our social responsibility commitment.
• Legal compliance: Fulfilling legal obligations and regulatory compliance requirements, including responding to lawful requests from Malaysian authorities when required.

Waja99 does not use any fully automated decision-making systems that could materially affect you without human review.

4 Data Sharing With Third Parties

Waja99 takes a highly cautious approach to data sharing. We never sell your personal data to any third party for marketing or commercial purposes. Data sharing only occurs in limited and legitimate situations as follows:

• Payment service providers: Minimal transaction data is shared with trusted payment processors (FPX, Touch 'n Go, Boost, GrabPay) solely to complete your financial transactions. All such providers are bound by strict confidentiality agreements.
• Game software providers: Member ID information and betting records may be shared with game providers for fair play verification (RNG audit), dispute resolution, and fraud prevention purposes. Your full name and financial information are not shared with game providers.
• Authorities and regulatory bodies: waja99 will disclose required information to Malaysian authorities when mandated by court order, law, or a valid official request from a regulatory body. We will notify you of such disclosures unless prohibited by law.
• Auditors and legal consultants: In very limited circumstances, independent auditors or lawyers appointed by waja99 may need to access certain data for financial audit or legal advisory purposes. Such access is subject to strict confidentiality agreements.
• Business transfer: If waja99 is involved in any merger, acquisition, or sale of assets, user data may be transferred as part of those assets. You will be notified in advance and given appropriate options.

5 Data Storage, Retention & Security

The security of your data is a responsibility we take extremely seriously. waja99 continuously invests in the latest security infrastructure to ensure your personal information is always protected against unauthorised access, misuse, loss, or destruction.

• Encryption in transit: All data transmitted between your device and waja99 servers is encrypted using TLS 1.3 protocol with 256-bit SSL certificates. This ensures no third party can intercept your data during transmission.
• Encryption at rest: Sensitive data such as bank information and KYC documents are encrypted using AES-256 standards when stored in our database. Your password is stored in hashed form using the bcrypt algorithm and cannot be decrypted by anyone, including our staff.
• Internal access controls: Only specifically authorised staff may access member personal data, and only to the extent necessary to carry out their duties. All access is logged and audited regularly.
• Backup & disaster recovery: Your data is automatically backed up every 24 hours to a geographically separate secondary data centre to ensure service continuity and data protection in emergency situations.
• Retention period: Active account data is retained for as long as your account remains active. After account closure, data is kept for 7 years to meet financial and audit legal requirements. Data that is no longer required is securely deleted using recognised data deletion methods.

6 Cookies, Analytics & Tracking Technology

Waja99 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is a detailed explanation of the types of cookies we use and their purposes:

• Essential cookies (required): These cookies are required for core platform functions such as maintaining your login session, remembering your language preference, and ensuring account security. Without them, many platform features will not work correctly. These cookies cannot be disabled.
• Performance & analytics cookies: We use internal analytics to understand how members use our platform — which pages are most popular, where users encounter difficulties, and how we can improve user flow. This data is collected anonymously and in aggregate.
• Functional cookies: These cookies allow the platform to remember your preferences such as display theme, preferred betting limits, and notification settings to deliver a more personalized experience.
• Security cookies: Used to detect suspicious login attempts, automated bots, and fraudulent activity. These cookies play a vital role in protecting your account and funds.

You can manage or delete cookies at any time through your browser settings. However, disabling certain cookies may affect platform functionality and your user experience. Cookie management guides for major browsers (Chrome, Firefox, Safari, Edge) are available in our FAQ section.

Waja99 not use third-party tracking pixels, advertising networks, or spyware in any form. We do not share individually identifiable analytics data with any social media platform or advertising network.

7 Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have strong rights regarding your personal data. waja99 is committed to facilitating the exercise of these rights promptly and without obstruction: