Waja888 takes the privacy of every Malaysian player seriously. This document clearly sets out what data we collect, how it is used, who may access it, and your rights as a player regarding your personal data.
Our Privacy Commitment
Before reading the full policy, here are six core principles that guide how waja888 handles the personal data of every Malaysian player.
All data transmitted between your device and waja888's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banking institutions such as Maybank and CIMB. None of your data travels unprotected.
Waja888 has never sold, and will never sell, players' personal data to any third party for marketing or commercial purposes. Your data belongs to you — we use it solely for the platform operations you have consented to.
Waja888 only collects data that is strictly necessary for platform operations, identity verification, payment processing, and legal compliance. We do not collect irrelevant or unnecessary information from Malaysian players.
Every waja888 player has the right to access, amend, download, or request deletion of their personal data. Requests can be submitted through customer support and will be processed within 30 business days.
Waja888's Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all local legal requirements relating to the collection, processing, and storage of Malaysian players' personal data.
In the event of a data security breach that may affect your account, waja888 is committed to notifying you by email within 72 hours of identifying the incident, in line with industry best practices.
Security Level
Waja888 continually invests in security infrastructure to ensure that Malaysian player data is always protected to the highest standard. Below is an overview of the standards we adhere to.
Your Rights
Under Malaysia's Personal Data Protection Act 2010, every waja888 player has the following rights regarding their personal data. All requests may be submitted to support@waja888.click.
How to Submit a Request: Send an email to support@waja888.click with the subject line "Personal Data Request", including your account number and the type of request. All requests will be processed within 30 business days. Identity verification may be required to protect the security of your data.
This Privacy Policy ("Policy") is published by waja888 ("Platform", "We") and describes how we collect, use, disclose, store, and protect your personal data when you use the waja888 platform at waja888.click.
Waja888 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable regulations governing personal data protection within the Malaysian jurisdiction. We are committed to ensuring that your privacy is respected and protected at all times while you play and interact with our platform.
By registering for or using the waja888 platform, you consent to the collection and use of your personal data as described in this Privacy Policy. If you disagree with any part of this Policy, please stop using the waja888 platform and contact us to close your account.
Quick Summary: waja888 collects your data solely to operate the platform, process your payments via Touch 'n Go, GrabPay, DuitNow, and other methods, and comply with applicable laws. We do not sell your data. You may request deletion of your data at any time.
When you register and use the waja888 platform, you voluntarily provide us with the following personal data:
When you use the waja888 platform, our systems automatically collect technical data required for platform operations:
In certain cases, waja888 may receive data about you from legitimate third parties, including:
| Data Category | Example | Primary Purpose | Required? |
|---|---|---|---|
| Identity | Full name, MyKad, date of birth | Account verification & KYC | Mandatory |
| Contact | Phone, email | Communication & security | Mandatory |
| Finance | Bank account number, e-wallet | Deposits & withdrawals | Mandatory |
| Technical | IP, device, cookies | Security & operations | Automatic |
| Games | Betting history and winnings | Account records & compliance | Automatic |
| Marketing | Promotional preferences | Relevant offers for you | Optional |
Waja888 uses the personal data collected solely for legitimate and necessary purposes, as outlined below:
With your consent, waja888 may send you notifications about promotions, new bonuses, and exclusive offers via email or SMS. You may withdraw this consent at any time through your account settings or by contacting our customer support.
waja888 will not use your data to make automated decisions that significantly affect you without human review. Any important decisions regarding your account, such as suspension or KYC verification, involve review by our team.
Waja888 does not sell, rent, or disclose players' personal data to third parties for their own marketing purposes. Your data is only shared in the following limited and legitimate circumstances:
Waja888 works with trusted third-party service providers to support platform operations. These include:
All third-party service providers are bound by confidentiality agreements and may only use your data for the purposes we have specified. They are not permitted to use your data for their own purposes.
Waja888 may disclose your personal data to the relevant authorities where we are required to do so by Malaysian law, court order, or in the context of a legitimate criminal investigation. In such situations, we will endeavour to notify you in advance unless prohibited by law.
In the event of a merger, acquisition, or transfer of waja888 assets, players' personal data may be transferred as part of that transaction. Players will be notified in advance of any such changes and given the option to delete their account if they do not agree with the new ownership.
Waja888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure.
Important Note: While waja888 implements comprehensive security measures, no system can guarantee 100% online security. You can also help by using a strong, unique password for your waja888 account, enabling two-factor authentication (2FA), and never sharing your login credentials with anyone.
You can enhance the security of your waja888 account in the following ways:
The waja888 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:
You can manage your cookie settings through your browser's settings. Please note that disabling required cookies may affect the functionality of the waja888 platform. For optional cookies, you may choose to opt out without impacting the platform's core features.
As a waja888 player, you have the following rights under Malaysia's Personal Data Protection Act 2010 with respect to your personal data. All requests may be submitted by email to support@waja888.click with the subject line "Personal Data Request".
You have the right to obtain a copy of the personal data we hold about you. This includes account information, transaction history, game history, and any other information we have collected. Data access requests will be processed within 30 business days.
If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic information such as your phone number or email address can be updated directly through your account settings. For corrections to identity information such as your name or identification card number, please contact customer support with relevant supporting documents.
You may request deletion of your personal data from waja888's systems. Please note that certain data may need to be retained by waja888 to fulfil legal obligations — such as financial transaction records required under anti-money laundering regulations — even after your account has been closed.
You have the right to receive the personal data you have provided to waja888 in a machine-readable format (such as JSON or CSV) for transfer to another platform. Such requests will be processed within 30 business days.
You may object to the processing of your personal data for direct marketing purposes at any time. Once you object, we will immediately stop using your data for that purpose. You may also opt out of all marketing communications via the "unsubscribe" link in any marketing email you receive from waja888.
For all data privacy rights requests, identity verification is required to protect the security of your account. waja888 will not process requests from anyone unable to verify their identity as the legitimate account holder.
Waja888 retains your personal data for as long as your account remains active or as long as it is needed for the purposes stated in this Privacy Policy. Retention periods vary depending on the type of data:
| Data Type | Retention Period | Reason |
|---|---|---|
| Basic Account Information | For the lifetime of the account + 5 years | Legal requirements & audits |
| Financial Transaction Records | 7 years after the transaction | Financial legal compliance |
| KYC Documents | 5 years after account closure | Anti-money laundering requirements |
| Game History | 3 years | Dispute resolution & audits |
| Communication Logs | 2 years | Customer support & records |
| Technical Cookie Data | Up to 12 months | Platform security & analytics |
Once the relevant retention period has ended, data will be securely deleted or permanently anonymised so that it can no longer be linked to you as an individual. The data deletion process is carried out using methods that ensure the data cannot be recovered.
Waja888 reserves the right to update or amend this Privacy Policy from time to time in line with changes in legislation, industry practices, or how we handle player data. The date of the most recent update will always be displayed at the top of this page.
When there are significant changes to how we use your personal data, waja888 will notify you via:
Continued use of the waja888 platform after the effective date of an updated Privacy Policy constitutes your acceptance of those changes. If you do not agree with the updated Privacy Policy, you have the right to close your account and request deletion of your data before the changes take effect.
This policy is effective from: 1 January 2026. Any enquiries regarding changes to this Privacy Policy may be directed to the waja888 support team at support@waja888.click.
If you have any questions, concerns, or wish to submit a request regarding this Privacy Policy or your personal data on waja888, please reach us through the following channels:
For formal complaints regarding the handling of your personal data, please include the following information in your email:
Waja888 is committed to responding to all privacy-related enquiries within 5 business days and resolving all requests within 30 business days. If your request requires additional processing time, we will notify you of the expected timeframe.
For links to other waja888 platform policies, please refer to: