Privacy Policy

1. Overview

waja44 ("waja44", "we", "us", "our") operates the online gaming platform accessible at waja44.com. In the course of providing our services — including sports betting, live casino, slots, account management, and customer support — we necessarily process personal data about our registered users ("you", "Player") and visitors to our platform.

This Privacy Policy applies to all personal data processed by waja44 in connection with the waja44 platform, including data collected through waja44.com, the waja44 mobile application, live chat, email correspondence, and any other channel through which you interact with waja44.

This Policy should be read together with the waja44 Terms and Conditions, which govern your use of the platform and are incorporated herein by reference.

2. Data Controller

waja44 is the data controller responsible for the personal data you provide to us or that we collect about you through your use of the waja44 platform. As data controller, waja44 determines the purposes and means of processing your personal data and is accountable for its protection.

If you have any questions about how your personal data is processed, or wish to exercise any of your rights described in this Policy, please contact our Data Protection Officer at: [email protected]

3. Personal Data We Collect

waja44 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, government-issued identification number (MyKad number or passport number), and a copy of your identity document where required for KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and residential address.
• Financial Data: Payment method details (e-wallet account identifiers for Touch n Go eWallet and Boost, bank account details for FPX transfers), transaction history, deposit amounts, withdrawal requests, and account balance information.
• Account Data: Username, encrypted password, account registration date, login history, session timestamps, and device identifiers associated with account access.
• Gaming Activity Data: Betting history, game participation records, wagering patterns, bonus utilisation, and responsible gaming settings configured on your account.
• Technical Data: IP address, browser type and version, operating system, device type, referring URL, pages visited on waja44.com, and session duration data collected through cookies and server logs.
• Communications Data: Records of your interactions with waja44 customer support, including live chat transcripts, email correspondence, and any information you voluntarily provide during support interactions.

We do not collect sensitive personal data (as defined under Malaysia's PDPA 2010) beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect racial or ethnic origin, religious beliefs, or health information unless required for responsible gaming assessments.

4. How We Collect Personal Data

waja44 collects personal data through the following means:

• Direct Provision: Information you submit when completing the registration form, undergoing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the waja44 platform.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and anti-money laundering screening data from compliance service providers; and payment processing data from e-wallet operators and banking partners where necessary to process your transactions.

5. Purposes of Processing

waja44 processes your personal data for the following purposes:

• To establish, maintain, and manage your waja44 account, including registration, login authentication, and account security.
• To process deposits, withdrawals, and financial transactions, and to maintain accurate transaction records.
• To verify your identity and age as required by our Terms and Conditions and applicable regulatory obligations (KYC/AML compliance).
• To provide and improve our gaming services, including personalising your platform experience based on your gaming activity preferences.
• To communicate with you regarding your account, including transaction confirmations, security alerts, and responses to your support inquiries.
• To send you promotional communications about waja44 bonuses and offers, where you have consented to receive such communications or where we have a legitimate interest to do so.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct on the platform.
• To comply with legal and regulatory obligations, including reporting obligations under applicable anti-money laundering laws.
• To operate responsible gaming tools, including monitoring for indicators of problem gambling behaviour and applying account restrictions where appropriate.
• To analyse platform usage patterns for the purpose of improving user experience, platform performance, and security.

6. Legal Basis for Processing

waja44 processes your personal data on the following legal bases under applicable data protection law:

• Contractual Necessity: Processing required to perform our contract with you (the waja44 Terms and Conditions), including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering legislation, age verification requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing necessary for waja44's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your explicit consent, including marketing communications and certain cookie-based data collection. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Disclosure to Third Parties

waja44 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: Touch n Go Digital Sdn. Bhd. (Touch n Go eWallet), Boost Holdings Sdn. Bhd., and FPX-participating Malaysian banks, for the purpose of processing your financial transactions.
• Identity Verification Providers: KYC and anti-money laundering service providers engaged to verify player identity and screen against sanctions lists and politically exposed person (PEP) databases.
• Game Software Providers: Licensed game studios (e.g. Pragmatic Play, Evolution, PG Soft) that power the games on the waja44 platform. These providers may collect limited technical data necessary for game delivery and fairness auditing.
• IT and Infrastructure Providers: Cloud hosting, cybersecurity, and technical infrastructure providers engaged to operate and maintain the waja44 platform.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or a formal request from a competent regulatory or law enforcement authority.
• Professional Advisers: Legal advisers, auditors, and compliance consultants engaged under confidentiality obligations where necessary for waja44's business operations.

All third-party service providers engaged by waja44 are required to process personal data only in accordance with waja44's instructions and applicable data protection obligations.

8. International Data Transfers

Some of waja44's service providers and game software partners are located outside Malaysia. Where personal data is transferred to recipients in countries that do not provide an equivalent level of data protection to Malaysia's PDPA 2010, waja44 implements appropriate safeguards, which may include contractual clauses, binding corporate rules, or other transfer mechanisms recognised under applicable law.

By using the waja44 platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia in connection with the services described in this Policy.

9. Data Retention

waja44 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, for regulatory compliance and fraud prevention purposes.
• Financial and Transaction Data: Retained for a minimum of seven (7) years following the relevant transaction, in accordance with applicable financial record-keeping obligations.
• Gaming Activity Data: Retained for a minimum of five (5) years, including for responsible gaming monitoring and dispute resolution purposes.
• Communications Data: Support correspondence retained for three (3) years from the date of the interaction.
• Technical and Cookie Data: Retained for periods ranging from session duration (session cookies) to a maximum of two (2) years (persistent analytics cookies), as described in our cookie notice.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10. Cookies & Tracking Technologies

waja44 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, load balancing cookies, and security cookies. These cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how visitors use waja44.com, including pages visited and time spent on the platform. Used to improve platform performance and user experience.
• Functional Cookies: Remember your preferences such as language settings and display options to personalise your experience across sessions.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the waja44 platform. waja44 does not use advertising or cross-site tracking cookies.

11. Your Data Rights

Subject to the provisions of Malaysia's Personal Data Protection Act 2010 and other applicable data protection laws, you have the following rights with respect to your personal data held by waja44:

• Right of Access: To request confirmation of whether waja44 holds personal data about you and to obtain a copy of that data.
• Right of Correction: To request correction of inaccurate or incomplete personal data held about you.
• Right to Withdraw Consent: Where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Restrict Processing: In certain circumstances, to request that waja44 restrict the processing of your personal data.
• Right to Erasure: In certain circumstances, to request deletion of your personal data. Note that waja44 may be required to retain certain data to comply with legal obligations notwithstanding an erasure request.
• Right to Object: To object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: Where technically feasible, to receive personal data you have provided to waja44 in a structured, commonly used machine-readable format.

To exercise any of these rights, submit a written request to [email protected]. waja44 will respond within 21 days of receiving a verifiable request. Identity verification will be required before disclosing or modifying personal data.

12. Children's Privacy

The waja44 platform is strictly for persons aged 21 years and above. waja44 does not knowingly collect personal data from any person under the age of 21. If waja44 becomes aware that personal data of an underage individual has been collected, that data will be deleted immediately and the associated account will be permanently closed.

If you have reason to believe that a minor has registered on the waja44 platform, please contact us immediately at [email protected] so that appropriate action can be taken promptly.

13. Security Measures

waja44 implements technical and organisational security measures appropriate to the risk associated with the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and waja44 servers.
• Password hashing using industry-standard cryptographic algorithms. Passwords are never stored in plain text.
• Multi-factor authentication available for all player accounts and mandated for all administrative access.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security firms.
• Strict access controls limiting employee access to personal data on a need-to-know basis, with all access logged and audited.
• Incident response procedures that include notifying affected players of any data breach that poses a risk to their rights within 72 hours of detection, in accordance with applicable regulatory requirements.

While waja44 takes all reasonable measures to protect your personal data, no security system is impenetrable. You are responsible for maintaining the confidentiality of your own account credentials and for using secure network connections when accessing your waja44 account.

14. Amendments to This Policy

waja44 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email and through a prominent notice on the waja44 platform at least seven (7) days prior to the changes taking effect.

The version of this Policy currently in force is identified by the "Last Updated" date at the top of this page. Your continued use of the waja44 platform following any amendment constitutes acceptance of the revised Policy. If you do not agree with any amendment, you must cease using the platform and may request account closure.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or waja44's data processing practices, please contact:

• Data Protection Officer, waja44
• Email: [email protected]
• Live Chat: Available 24/7 at waja44.com

If you are not satisfied with waja44's response to a data protection concern, you have the right to lodge a complaint with the relevant data protection authority. In Malaysia, data protection matters may be directed to the Department of Personal Data Protection (JPDP) at pdp.gov.my.

This Privacy Policy was last reviewed on 1 June 2026. waja44 operates under international gaming licensing standards. Gambling involves risk — please play responsibly.