Waja88 is committed to protecting the privacy and personal data of every member. This document explains exactly what data we collect, how it is used, and your rights as a user of our platform in Malaysia.
These are not just words — these six commitments reflect practices we actively carry out every day to protect the personal data of Waja88 members.
Waja88 handles all members' personal data in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we collect only what is genuinely necessary to provide our services, retain it only for as long as required, and give you full control over your data. PDPA compliance is not optional for us — it is a legal obligation we take seriously.
Every communication between your device and Waja88's servers is encrypted with 256-bit SSL technology — the same standard used by Maybank, CIMB, and Malaysia's leading financial institutions. This ensures that even if your data is intercepted in transit, it cannot be read by any unauthorised party. Our SSL certificates are renewed regularly and monitored around the clock.
Waja88 has never and will never sell, rent, or trade members' personal data to any third party for commercial purposes. Your data is collected solely to help us deliver a better platform experience for you — not as a secondary revenue stream. This is a commitment we uphold without exception, under any circumstances.
Waja88 members' personal data is stored on servers protected by multiple layers of physical and digital security — including enterprise-grade firewalls, role-based access controls, 24/7 monitoring, and regular encrypted backups. Access to member data within our systems is restricted to staff who genuinely require it to carry out their duties.
As a Waja88 member, you have the full right to access the personal data we hold about you, correct any inaccurate information, request deletion of your data under certain circumstances, and object to or restrict the processing of your data. We provide a straightforward and transparent process for exercising these rights, without any unnecessary barriers or delays.
Waja88 only sends you marketing communications if you have given explicit consent. You can withdraw this consent at any time through your account settings or by contacting our support team. We also do not share your contact information with third-party advertisers without your clear and specific consent for each purpose.
A clear overview of each data category we collect, its purpose, and how long it is retained.
| Data Category | Example Information | Primary Purpose | Retention Period |
|---|---|---|---|
| Identity Data | Full name, date of birth, MyKad number | Identity verification (KYC), age restrictions | Throughout the active account period + 7 years |
| Contact Data | Phone number, email address, residential address | Account communications, 2FA verification | For the duration of the active account |
| Financial Data | Payment methods, deposit & withdrawal records | Transaction processing, fraud prevention | 7 years (legal requirement) |
| Gaming Data | Betting history, winnings, losses | Responsible gaming, cashback, support | 3 years from the date of activity |
| Technical Data | IP address, device type, browser, access logs | Security, fraud detection, debugging | 90 days |
| Cookie Data | Language preference, login status, game session | Platform functionality, user experience | Up to 12 months |
Under Malaysia's PDPA and our privacy policy, you have eight rights that you can exercise at any time, free of charge.
Request a copy of all personal data we hold about you. We will provide a full report within 14 business days.
To correct any inaccurate or incomplete data, contact our customer support team or update it directly through your account profile settings.
Request the deletion of your personal data in certain circumstances — subject to legal retention and security requirements.
Object to the processing of your data for direct marketing purposes or in situations where you have legitimate grounds to do so.
Request a temporary restriction on the processing of your data while we investigate any dispute or complaint you have raised.
Receive your data in a machine-readable format for transfer to another service provider upon request.
Withdraw consent for specific types of processing at any time. Withdrawal does not affect any processing that took place prior to the request.
File a complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated by Waja88.
Key Summary: Waja88 respects your privacy. We collect only the data we need, use it solely to provide our services to you, and never sell it to third parties. This document sets out our practices in full and in good faith, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
This Privacy Policy ("Policy") is issued by Waja88 ("we", "Platform") and describes how we collect, use, store, protect, and disclose your personal information when you use the waja88.click website and all services provided through it.
This Policy applies to all users of the Waja88 platform, including unregistered visitors, registered members, and former members whose data is still retained as required by law. By accessing or using the Waja88 platform, you agree to be bound by the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform.
Waja88 is the data controller for all personal data collected through this platform. We are fully responsible for ensuring your data is managed in a manner that complies with applicable law, in particular the Malaysia PDPA 2010.
During registration and your use of the Waja88 platform, you provide us with the following information:
When you use the Waja88 platform, our systems automatically record certain technical information:
In line with responsible gaming requirements and security monitoring, Waja88 records your gaming activity history, including all bets placed, wins and losses, slots played, sports and esports events wagered on, and bonus and promotion usage. This data is used solely for the purposes stated in Section 3 and is not shared with external parties for marketing purposes.
Waja88 uses your personal data for the following purposes:
Waja88 only processes your personal data on a valid legal basis in accordance with Malaysia's PDPA. The bases we rely on are:
Waja88 shares the minimum necessary personal data with selected service providers that help us operate the platform. This includes payment gateway providers such as Touch 'n Go, DuitNow, FPX, GrabPay, Boost, and ShopeePay for transaction processing, cloud computing service providers for technical infrastructure, and identity verification service providers for the KYC process.
All third parties are bound by data protection agreements that prohibit them from using your data for any purpose other than those specified, and require them to manage your data to security standards equivalent to our own.
Waja88 may be required to disclose your personal data to government authorities or law enforcement agencies where mandated by Malaysian law, a valid court order, or in the course of investigating and preventing criminal activity, including fraud and money laundering. In all such cases, we will disclose only the minimum information necessary and will endeavour to notify you in advance where permitted by law.
Waja88 has never and will never: sell your personal data to advertisers or data brokers, share your gaming history or financial data with third-party marketing parties, disclose your account information to family members or any other party without your written consent, or use your data for any purpose beyond what is explicitly stated in this Policy.
Waja88 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure:
While we take all reasonable measures to protect your data, no security system can guarantee absolute protection. You also play an important role in keeping your account secure by using a strong password and never sharing your login credentials with anyone.
Waja88 retains your personal data only for as long as necessary for the purpose it was collected, or as required under Malaysian law:
Once the retention period expires, your data will be securely deleted or anonymised in a form that can no longer be linked to your identity. You may request early deletion of your data, subject to legal retention requirements.
Under Malaysia's PDPA and this Policy, you have the following rights regarding your personal data at Waja88:
To exercise any of the rights above, contact us by email at support@waja88.click or via Waja88's platform live chat. We will process your request within 14 business days and may need to verify your identity before responding.
Waja88 uses cookies and similar technologies to keep the platform running smoothly, protect account security, and deliver a better experience for you. Cookies are small text files stored on your device when you visit our platform.
We use four categories of cookies: functional cookies that are essential for the platform to operate, security cookies that protect your account from unauthorised access, analytics cookies that help us understand how the platform is used, and personalisation cookies that allow us to tailor content based on your preferences. The first and second categories are mandatory and cannot be disabled, as they are critical to basic security and functionality. The third and fourth categories are optional.
You can manage your preference cookie settings through your browser settings. Disabling analytics or personalisation cookies will not affect your ability to log in, play, make deposits, or withdraw funds.
In the course of its operations, Waja88 may need to store or process some of your data on servers located outside Malaysia — for example, cloud computing servers used for additional capacity. In such cases, Waja88 ensures a level of protection equivalent to Malaysia's PDPA through binding data transfer agreements, or by selecting providers that operate under a recognised data protection framework.
Waja88 does not transfer personal data to jurisdictions that lack an adequate level of data protection without appropriate contractual safeguards in place. You may contact us for further information on the data transfer mechanisms we use.
As a matter of policy, the Waja88 platform does not contain links to external websites. However, if you access the Waja88 platform via a link from another site or application, please note that this Privacy Policy applies solely to the Waja88 platform. Waja88 is not responsible for the privacy practices of any other website or service you may visit before or after using our platform.
Waja88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we deliver our services. Any material changes will be communicated to you via a clear notice on the platform or by email to your registered address, at least 14 days before the changes take effect.
You are encouraged to review this Policy periodically. The "Last Updated" date at the top of this document will always reflect the latest version. Your continued use of the Waja88 platform after any amendments take effect will be considered your acceptance of the updated Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or how Waja88 handles your personal data, please reach out to us through the following channels:
Our data protection team, proficient in Bahasa Melayu, will process your request within 14 working days. For more complex requests, we will inform you within that period if additional time is required. We are committed to handling every privacy-related enquiry with the seriousness and level of care it deserves. For information on overall platform rules, please refer to Terms & Conditions us.
Effective Date: This Privacy Policy takes effect from 1 July 2026 and supersedes all previous versions. Waja88 is the data controller fully responsible for the processing of personal data belonging to Malaysian members who use this platform.
Waja88 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). Your personal data is protected with 256-bit SSL encryption and is never sold to any third party. For further questions about your rights, contact us at support@waja88.click or refer to Terms & Conditions us.
The most frequently asked questions from Waja88 members about how we handle their personal data.