Waja3 Privacy Policy – Our Commitment to Protecting the Data & Privacy of Every Malaysian Member

1Information We Collect from You

Waja3 collects your personal information across several different situations — during registration, during platform use, and when you interact with our customer support. The following are the categories of information we may collect:

Waja3 follows a data minimisation principle — we only collect information that is strictly necessary for the stated purpose. We do not collect data that is excessive or irrelevant to the services we provide you.

2How We Use Your Information

Information collected by waja3 is used solely for the stated and legitimate purposes outlined below. waja3 uses your personal information for the following:

• Account management: Creating, managing, and maintaining your waja3 member account, including identity verification and account security.
• Transaction processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX, and handling your winnings withdrawals securely and on time.
• Service provision: Giving you access to all games and features on the waja3 platform, including Live Casino, slots, and Sports Betting.
• Customer support: Resolving queries, complaints, and assistance requests that you submit to the waja3 support team via live chat or email.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and any illegal activity on the waja3 platform.
• Legal compliance: Meeting applicable legal and regulatory obligations, including Know Your Customer (KYC) requirements and mandatory transaction reporting.
• Platform improvements: Analysing usage patterns (in aggregated, non-identifiable form) to improve the user experience, introduce new features, and ensure optimal platform performance.
• Marketing communications: Sending information about promotions, bonuses, and platform updates — only to members who have given explicit consent to receive such communications.
• Responsible gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support, and providing the appropriate tools and resources.

Waja3 will not use your information for any purpose not stated in this Privacy Policy without first obtaining your explicit consent.

3Sharing Information with Third Parties

Waja3 takes your privacy seriously and does not sell your personal information to any party. However, in certain limited situations, waja3 may need to share your information with the following parties:

• Payment service providers: E-wallet providers (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay) and FPX banks (Maybank, CIMB) only receive the information necessary to process your transactions securely. They are bound by strict confidentiality agreements.
• Game software providers: Companies that provide casino games (such as live baccarat tables, slots, and others) may receive game activity data necessary to operate the games properly. Such sharing is kept to a minimum and is subject to data protection agreements.
• Legal authorities: waja3 will disclose the required information to law enforcement agencies or regulatory bodies when mandated by Malaysian law or a valid court order. In such circumstances, waja3 will notify you where permitted to do so under applicable law.
• Technical service providers: Companies that assist in the technical operation of the platform (such as server services and cybersecurity systems) may have limited access to data solely as needed to perform their technical services. All such parties are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

4Cookies and Tracking Technologies

Waja3 uses cookies and similar technologies to enhance your experience on the platform. Below are the types of cookies used and their purposes:

• Essential cookies: Required for the platform's core functions — such as maintaining your login session, remembering language preferences, and keeping your account secure. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information on how members use the waja3 platform — such as the most frequently visited pages and page load times. This data is gathered in aggregated form and cannot be used to identify any individual.
• Functionality cookies: Remembering your preferences and settings, such as saved betting limits, favourite games, and interface display. This helps deliver a more personalised and efficient experience.
• Security cookies: Helping to detect and prevent fraudulent activity and unauthorised access to your account.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the waja3 platform. For more information on how to manage cookies in your browser, please refer to your browser's help documentation.

5Data Security & Protection Measures

Waja3 invests seriously in data security infrastructure to ensure your personal information remains protected at all times. The security measures we have in place include:

• 256-bit SSL Encryption: All communications between your device and waja3 servers are encrypted using 256-bit SSL — ensuring that data cannot be intercepted or read in transit.
• Protected servers: Member data is stored in data centres secured with multi-layered physical and digital protection, including biometric access controls, 24/7 CCTV, and fire suppression systems.
• Internal access controls: Only waja3 staff who genuinely require access to specific data in order to carry out their duties are permitted to do so. All access is automatically logged and monitored by our security team.
• Two-factor authentication (2FA): waja3 supports and encourages the use of two-factor authentication to add an extra layer of security to your account. With 2FA enabled, accessing your account requires not just your password but also an additional code sent to your device.
• Continuous monitoring: The waja3 security team monitors the platform 24 hours a day, 7 days a week to detect any suspicious activity or attempted security breaches.
• Data backup and recovery: Member data is backed up on a regular basis to ensure it can be quickly restored in the event of an unexpected technical incident.

While waja3 implements comprehensive security measures, no system is 100% immune to threats. In the highly unlikely event of a data security incident involving your personal information, waja3 is committed to notifying you promptly and taking appropriate remedial action.

6Data Retention Period

Waja3 does not retain your personal data longer than necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. As a general rule:

• Active account data: Retained for as long as your account is active and for a reasonable period after closure, for dispute resolution and audit purposes.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian financial regulations and legal requirements.
• Support communication data: Live chat and email records are retained for 3 years for reference and service improvement purposes.
• Technical data (logs): Technical access logs are retained for 12 months for security management and incident investigation purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications. You may withdraw consent at any time via your account settings or through waja3 customer support.

Once the retention period has expired or a valid deletion request has been received, your data will be securely deleted or fully anonymised so that it can no longer be linked to you.

7Your Rights as a Data Subject

As a waja3 member, you have the following rights regarding your personal data:

• Right to know: You have the right to know what personal data we hold about you, how it is used, and with whom it is shared.
• Right to access: You may request a copy of your personal data held by waja3 at any time.
• Right to rectification: If your personal data is inaccurate or incomplete, you have the right to request that we update it.
• Right to erasure: Under certain circumstances, you may request that we delete your personal data. Please note that this request may not be fulfilled in full if there are legal obligations requiring us to retain that data.
• Right to object: You may object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where the processing of certain data is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to the withdrawal.

To exercise any of the rights above, contact the waja3 support team via live chat or email at support@waja3.best. Requests will be processed within 14 working days from the date of receipt.

8Children's Privacy

The waja3 platform is for individuals aged 18 and above only. waja3 does not knowingly collect any personal information from individuals under the age of 18.

All account registrations go through a strict age verification process. If waja3 discovers that personal information has been collected from an underage individual, that data will be deleted immediately and the associated account will be closed without delay.

If you believe that someone under the age of 18 has registered an account on waja3 using false information, please contact our support team immediately so that action can be taken promptly.

9Links to Third-Party Sites

The waja3 platform may contain links to third-party websites or services in certain contexts. waja3 is not responsible for the privacy practices or content of those third-party sites.

This Privacy Policy applies only to information collected by waja3 through the waja3.best platform. We encourage you to read and understand the privacy policy of any third-party website you visit via links from our platform.

10Changes to This Privacy Policy

Waja3 reserves the right to update or amend this Privacy Policy from time to time in line with changes to business operations, legal requirements, or industry standards. When material changes are made to this Privacy Policy, waja3 will:

• Updating the "Last Updated" date at the top of this page.
• Notifying members via their waja3 account upon their next login.
• Sending an email to the registered address on your account for significant changes.

Continued use of the waja3 platform after notice of changes has been given will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, please contact waja3 support to discuss your options, including account closure if you choose to do so.

The current version of this Privacy Policy was last updated on 1 January 2026.

11Contact Us About Privacy

If you have any questions, concerns, or requests regarding your data privacy at waja3, our team is ready to help:

• Live Chat: Available 24/7 in Bahasa Malaysia, directly within the waja3 platform. Average response time under 3 minutes.
• Email: support@waja3.best — for written requests or official documentation related to data privacy.

All privacy-related requests will be handled with care and resolved within 14 business days of receipt. For more complex requests such as data deletion or data exports, resolution may take slightly longer, but we will keep you updated on the progress throughout.