waja888 Official Documents

Waja888 Privacy Policy – Personal Data Protection for Malaysian Players

Waja888 takes the privacy and data security of every member seriously. This document clearly explains what data we collect, how it is used, who can access it, and your rights as a Malaysian player over that data.

Updated: January 2026
Bahasa Malaysia
Applicable to Malaysian players
Document Contents
  • Personal Data Collected
  • Purpose of Data Use
  • Data Sharing with Third Parties
  • Data Security & Encryption
  • Cookies & Tracking Technologies
  • Your Personal Data Rights
  • Data Retention Period

How waja888 Protects Your Privacy

Privacy at waja888 is not just a document — it is a daily practice that shapes how we handle every piece of information you entrust to us.

Continuous 256-Bit SSL Encryption

All data transmitted between your device and waja888's servers is encrypted using 256-bit SSL — the same standard used by Malaysia's major banks. No third party can intercept or read your information in transit, whether you are logging in, making a deposit via Touch 'n Go, or placing a football bet.

No Sale of Data to Third Parties

Waja888 never sells, rents, or trades members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — we use it only for the purposes stated in this policy and nothing beyond that.

Malaysia Personal Data Protection Act Compliance

Waja888's privacy practices are designed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to the data protection principles established under Malaysian law and are committed to managing members' personal data in a responsible and transparent manner.

Your Data, Your Control

Every waja888 member has the right to access, review, correct, or request deletion of their personal data at any time. You may contact our support team to submit any data-related request, and we will process each request within the timeframe required by Malaysian law.

Two-Factor Authentication (2FA)

Waja888 offers a two-factor authentication option for an added layer of security on your account. With 2FA enabled, even if your password is compromised, others still cannot access your account without the OTP code sent directly to your registered mobile number.

Financial Transaction Data Kept Confidential

Your deposit and withdrawal records via DuitNow, GrabPay, FPX, or any other method are stored with the highest level of security and can only be accessed by authorised personnel. Regular customer support staff do not have access to your full financial transaction details — this is an additional layer of protection for your security.

Waja888 Data Security Infrastructure

Waja888 continually invests in industry-grade security infrastructure to ensure the personal data and financial information of every Malaysian member is protected at all times.

Data Encryption in Transit256-bit SSL
Password Protection (bcrypt)Industry Standards
Real-Time Threat Monitoring24/7 Active
Financial Transaction SecurityMultiple Layers
Malaysia PDPA ComplianceFull
Identity Data
  • Full name
  • IC number
  • Date of birth
  • Gender
  • Residential address
Contact Data
  • Email address
  • Mobile phone number
  • Platform username
  • Communication preferences
  • Preferred language
Financial Data
  • Deposit & withdrawal records
  • Payment methods used
  • MYR transaction history
  • Current account balance
  • Betting limits set
Activity Data
  • Sports betting history
  • Casino game history
  • Favourite sports & leagues
  • Time active on the platform
  • Device & operating system

Waja888 Full Privacy Policy

Important Note: This Privacy Policy explains how waja888 collects, uses, stores, and protects your personal data as a member of our platform. By registering and using waja888's services, you agree to the data management practices described in this document. We encourage you to read it in full to gain a complete understanding of your rights as a waja888 player in Malaysia.

1Personal Information We Collect

Waja888 collects the personal data necessary for platform operations, identity verification, transaction processing, and service improvement. We only collect data that is strictly required — nothing more. The following are the categories of data we collect:

  • Identity Data: Full name, Malaysian identification card number, date of birth, gender, and current residential address. This data is required to meet the age and identity verification requirements set out under our compliance policy.
  • Contact Data: Your email address, Malaysian mobile number, and the username you chose during registration. This is used for service communications, OTP verification, and account recovery.
  • Financial Data: Records of all deposit and withdrawal transactions, including the payment method used (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Boost, ShopeePay), the amount in Malaysian Ringgit (RM), and the transaction date. Full bank account numbers or digital wallet numbers are not stored on waja888's servers — only the secure token required for recurring processing.
  • Platform Activity Data: Sports betting history (EPL, Liga Super Malaysia, cricket, e-sports MPL Malaysia, BWF badminton), casino game records (slots, live casino, baccarat), market preferences, and general platform usage patterns.
  • Technical Data: IP address, browser type, device operating system, login and logout timestamps, and other technical information automatically generated when you use the waja888 platform.

2How We Collect Your Personal Data

Waja888 collects your personal data through several key channels:

  • Directly From You: During the account registration process, you will fill in a form requiring your identity and contact details. Additional information may be collected during further identity verification steps when required.
  • Through Use of the Platform: Every interaction you have with the waja888 platform — from browsing football odds and placing bets, to playing slots and reaching out to customer support — automatically generates an activity record stored in our system.
  • Via Payment Providers: When you make a deposit or withdrawal via Touch 'n Go, DuitNow, GrabPay, or FPX, the respective payment service provider shares the transaction information required to process the fund transfer securely.
  • Via Cookies & Tracking Technologies: The waja888 platform uses session cookies and analytics cookies to enhance the user experience and better understand how members engage with our platform. Further details on cookies are covered in Section 6.

Waja888 does not purchase or acquire personal data from external sources such as data brokers, third-party social media platforms, or public databases for targeting or marketing purposes.

3How We Use Your Personal Data

Waja888 uses the personal data collected solely for the following purposes:

  • Account Management: To create and manage your member account, process your registration, verify your identity, and maintain the security of your waja888 account.
  • Transaction Processing: Processing all deposits and withdrawals via your chosen Malaysian local payment method, maintaining accurate financial records, and preventing fraudulent transactions.
  • Service Delivery: To give you access to all waja888 platform features — sports betting, online casino, VIP programme, real-time odds, and all other services we offer.
  • Customer Support: When you contact the waja888 support team via live chat or email, we use your account information to verify your identity and provide relevant assistance promptly.
  • Service Communications: Sending important notices related to your account, OTP verification, security alerts, and information about policy or terms changes that affect your account.
  • Promotions & Rewards: With your consent, to send you information about promotions, bonuses, and VIP Rewards offers that may be relevant to your betting activity on waja888.
  • Legal Compliance: To fulfil applicable legal compliance obligations, including anti-money laundering (AML) requirements and identity verification standards established in Malaysia.
  • Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to understand how the waja888 platform is being used and identify areas for improvement that benefit all members.

Important: waja888 does not use your individual betting activity data for third-party ad targeting or sell it to advertisers. Your betting data is confidential and used solely for the platform operational purposes stated above.

4Data Sharing with Third Parties

Waja888 does not sell, rent, or share members' personal data with third parties for commercial purposes. However, there are limited situations where data may be shared with certain parties for necessary operational purposes:

  • Payment Providers: Information required to process your deposit and withdrawal transactions is shared with payment service providers such as Touch 'n Go, GrabPay, DuitNow, and FPX processors. This sharing is limited strictly to the information necessary for the transaction in question.
  • Game Software Providers: To deliver a high-quality live casino and slots experience, waja888 partners with certified international game software providers. Game session data required to maintain game integrity may be shared with these providers within a secure environment.
  • Legal Authorities: waja888 complies with legitimate information requests from Malaysian authorities made through proper legal processes — such as court orders or relevant financial crime investigations.
  • Security & Fraud Prevention Services: Certain information may be shared with third-party services that specialise in fraud detection and financial transaction security, in order to protect all waja888 members.

All third parties working with waja888 are required to adhere to the same standards of privacy and security that we uphold ourselves. waja888 ensures that appropriate data protection agreements are in place with all third-party partners before any data sharing takes place.

5Security & Data Protection

Waja888 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure:

  • 256-bit SSL Encryption: All communications between your browser or app and waja888's servers are encrypted using the latest TLS/SSL standards, meaning your data cannot be read by any third party while in transit.
  • Secure Password Storage: Your account password is never stored in plain text. waja888 uses a strong cryptographic hash function (bcrypt) with a unique random salt for each password — meaning that even in the event of a database breach, your password cannot be recovered.
  • Two-Factor Authentication (2FA): waja888 members are encouraged to enable 2FA, which sends an OTP code to their registered mobile number each time a new login attempt is made.
  • 24/7 Security Monitoring: The waja888 security team monitors account activity and platform traffic around the clock to detect suspicious patterns and respond to potential threats before they escalate.
  • Internal Access Controls: Only authorised personnel who require access to specific data categories to carry out their permitted duties are granted such access. The principle of least privilege is strictly enforced across the waja888 organisation.
  • Regular Security Audits: waja888 undergoes regular security assessments and penetration testing by independent parties to identify and address any potential vulnerabilities in our infrastructure.

That said, no digital security system is 100% perfect. In the event of a data security breach affecting your personal data, waja888 is committed to notifying you within a reasonable timeframe and taking all necessary remediation steps in accordance with Malaysian legal requirements.

6Cookies & Tracking Technologies

The waja888 platform uses cookies and similar tracking technologies to enhance the user experience and understand how the platform is used. The following are the types of cookies we use:

  • Essential Session Cookies: Required for the platform's core functions — including maintaining your logged-in state, remembering your language preference, and keeping your session secure while on waja888. These cookies cannot be disabled without affecting essential platform functionality.
  • Preference Cookies: Saves your preferences such as your chosen odds format (decimal, fractional, or American), favourite sports, followed leagues, and other display settings so you don't have to reconfigure them every time you log in.
  • Analytics Cookies: Gathering statistical information on how waja888 platform pages are used — such as the most frequently visited pages, time spent in each section, and click-through rates. This data is collected in aggregate form that cannot be traced back to any individual.
  • Security Cookies: To help identify and prevent fraudulent activity, suspicious login attempts, and automated attacks on the waja888 platform.

You can manage and delete cookies through your browser settings at any time. However, disabling essential cookies may cause certain waja888 platform features to not function properly. For the best experience on waja888, we recommend keeping essential cookies enabled.

7Your Personal Data Rights

As a waja888 member and as an individual protected under Malaysia's Personal Data Protection Act 2010, you have the following rights over your personal data:

Your Rights Description How to Submit a Request
Right of Access Request a copy of the personal data we hold about you Reach out via live chat support or email
Right to Rectification Correcting personal data that is inaccurate or out of date Via account settings or by contacting support
Right to Erasure Requesting deletion of your personal data (subject to legal obligations) Submit a request via email with identity verification
Right to Object Stopping the use of your data for direct marketing purposes Opt out via account communication settings
Right to Portability Receive your data in a machine-readable format Contact us at support@waja888.xyz
Right to Complain Submitting a complaint regarding waja888's handling of your data Contact support or submit a complaint to Malaysia's PDPD

Waja888 is committed to processing all personal data rights requests within 30 business days of receiving a complete request. For more complex requests, additional time may be required, but we will notify you of the reason for the delay and provide a revised estimated completion timeframe.

8Data Retention Period

Waja888 retains your personal data for as long as your account is active or as long as required for the purposes described in this policy. More specifically:

  • Active Account Data: Retained for as long as your waja888 account is active and for a reasonable period after account closure to handle any outstanding claims or disputes.
  • Financial Transaction Records: Deposit and withdrawal records are retained for a minimum of seven years, in line with Malaysia's financial compliance and applicable tax law requirements.
  • Security Logs: Access logs and security logs are retained for 12 months for threat detection and investigation of potential security incidents.
  • Support Communication Records: Conversation history with the waja888 customer support team is retained for two years so we can provide better context should you contact us again regarding the same issue.
  • Closed Account Data: Following account closure, data that is no longer required for legal compliance purposes will be deleted or anonymised within 90 days. Data that must be retained for legal purposes will be stored in a strictly controlled environment and will not be used for any other purpose.

9Children's Privacy

The waja888 platform is strictly restricted to individuals aged 18 and above. waja888 does not knowingly collect personal data from individuals under the age of 18. Should we identify that personal data belonging to an underage child or minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and become aware that your child has registered for or is using the waja888 platform, please contact our support team immediately via live chat or email at support@waja888.xyz. We will treat this as a matter of the highest priority and take the appropriate corrective action without delay.

10Amendments to This Privacy Policy

Waja888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements in Malaysia, or changes in how we deliver services to members. When we make material changes to this policy, we will:

  • Displaying a clear notice on the waja888 platform before any changes take effect.
  • Sending notification emails to all active members outlining the key changes made.
  • Updating the "Last Updated" date at the top of this document to reflect the date of the latest amendment.

Continued use of the waja888 platform after any policy amendment takes effect will be considered acceptance of the updated terms. If you do not agree with any amendment, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 7.

11Contact Us About Privacy

If you have any questions, concerns, or requests regarding your privacy or personal data management at waja888, please contact us via:

  • Live Chat: Available 24/7 within the waja888 platform — for general privacy queries that require an immediate response.
  • Privacy Email: support@waja888.xyz — use the subject line "Data Privacy Request" and include your account number for faster processing. We aim to respond to all emails within 2 business days.

Our Malaysian-speaking waja888 support team is ready to help you understand your rights or handle any personal data-related requests. We can also provide further information on how we process your data if you need a more detailed explanation of any aspect of this policy.

Waja888 Privacy Frequently Asked Questions

No. Your betting history on waja888 — whether it's EPL football, IPL cricket, MPL Malaysia e-sports, or casino games — is strictly confidential and is not shared with any third party for commercial, marketing, or any other purpose. This data is used solely for internal purposes: to enable your use of the platform, process transactions, and resolve any disputes that may arise. The only exception is when a valid legal order is received from Malaysian authorities.

Yes, you have the right to request deletion of your personal data. However, certain limitations apply — financial transaction records must be retained for a minimum of seven years in accordance with Malaysian legal requirements, and data needed to resolve active disputes cannot be deleted until those disputes are closed. To submit a deletion request, send an email to support@waja888.xyz with the subject line "Data Deletion Request" along with identity verification. Our team will process your request and inform you of which data can be deleted and which must be retained by law.

waja888 does not store your bank account numbers, card numbers, or digital wallet login credentials directly on our servers. All transactions made via Touch 'n Go, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, or any other method are processed directly through certified, secure payment gateways. waja888 only receives the payment token required to process recurring transactions — not your full financial details. This means that even in the event of any threat to waja888's servers, your financial information remains safe.

waja888 does not sell or share your personal data with third-party advertisers for targeted advertising purposes. Any activity data generated on the waja888 platform is used exclusively for internal operational purposes as outlined in this privacy policy. We may use your stated preferences (favourite sports, game types) to tailor in-platform communications to be more relevant to you — but this is handled entirely in-house and does not involve sharing any data with external parties.

Contact the waja888 support team immediately via live chat. Our team will temporarily suspend your account to prevent any further activity while the matter is investigated. You should also change your password right away and enable two-factor authentication (2FA) if you have not already done so. Be sure to review your recent account activity — betting records and transaction history — to identify any actions you did not carry out yourself. waja888 will investigate the security incident promptly and keep you informed of the findings.

Waja888 Policies & Other Information

waja888's Privacy Commitment

All your personal information, betting data, and financial transactions at waja888 are protected by continuous 256-bit SSL encryption. waja888 does not share your data with third parties without your consent and complies with Malaysia's Personal Data Protection Act 2010. For more details on how we manage your data, please read the Privacy Policy full policy. Gamble responsibly — visit this page for self-control tools.

Your Data Is Safe — Your Experience Is Priceless

With robust data protection and a strong security infrastructure in place, you can focus on what matters — enjoying EPL football odds, Liga Super Malaysia, Live Casino, and much more on waja888. Register for free today.

Touch 'n Go GrabPay DuitNow Boost FPX
Bahasa Melayu