Waja3's Six Core Privacy Protection Principles
These are our core commitments to ensuring your personal data remains safe and protected at all times.
Full Encryption
All data transmitted between your device and waja3's servers is protected with 256-bit SSL encryption. Your personal and financial information cannot be intercepted or read by any third party during transmission.
Secure Data Storage
Your personal data is stored on servers protected by multi-layered firewalls and strict access controls. Only authorised personnel with a legitimate purpose may access member data.
No Data Sales
Waja3 has never and will never sell, rent, or share members' personal data with advertisers or third parties unrelated to our platform operations. Your information belongs entirely to you.
Member Controls
You have the full right to access, correct, or request deletion of your personal data at any time. Your request will be processed within 14 business days by our privacy team.
PDPA Compliance
All of waja3's data management practices fully comply with Malaysia's Personal Data Protection Act 2010. We conduct regular compliance reviews by our internal legal team and independent external auditors.
Breach Notification
In the event of any security incident affecting member data, waja3 will notify the affected members within 72 hours and take immediate action to address the situation.
1. Introduction and Scope of This Policy
Welcome to waja3, Malaysia's leading online entertainment platform. This Privacy Policy explains in detail how waja3 ("we", "the platform") collects, uses, stores, discloses, and protects your personal information ("member", "user") when you use our services at waja3.com.
This document has been prepared with care to ensure you understand your rights as the owner of your personal data, as well as our responsibilities as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This policy applies to all users of the waja3 platform, including website visitors, registered members, and former members whose data we still retain within the legally mandated retention period.
By registering an account or using any part of the waja3 platform, you give your consent to the collection and processing of your personal data as described in this policy. If you disagree with any provision of this policy, you may contact us to request account deletion before continuing to use the platform.
2. Types of Personal Data We Collect
Waja3 collects various types of personal information for legitimate and specific purposes. We only collect data necessary for platform operations and identity verification. The following are the main categories of data we collect:
| Data Categories | Type of Information | Primary Purposes |
|---|---|---|
| Identity Information | Full name, date of birth, identity card number (MyKad), gender | KYC identity verification, legal compliance |
| Contact Information | Email address, phone number, residential address | Account communications, transaction notifications |
| Financial Information | Bank account number, deposit and withdrawal transaction records | Payment processing, fraud prevention |
| Usage Data | Login, game history, activity patterns, session duration | Platform improvements, detection of suspicious activity |
| Technical Data | IP address, browser type, device, geographic location | Account security, fraud detection |
| KYC Documents | MyKad copy, proof of address, verification selfie | Full identity verification, AML compliance |
We also collect information you voluntarily provide through interactions with our customer support team, platform feedback, or participation in promotional campaigns. All such information is managed with the same level of security regardless of how it was obtained.
3. How We Collect Personal Data
Waja3 collects your personal data through various legitimate channels. Understanding how this collection works helps you control the information you share with us:
- Account registration: When you register a waja3 account for the first time, you are required to complete a registration form containing basic personal and contact information.
- KYC verification process: To meet Malaysian legal requirements, we request identity verification documents when certain transaction thresholds are reached or when we suspect suspicious activity.
- Platform usage: Our system automatically logs usage activity such as logins, games played, transactions, and interactions with platform features.
- Cookies and tracking technologies: We use session cookies and preference cookies to enhance the user experience. Analytics cookies are used to understand usage patterns in an aggregated and anonymized manner.
- Support communications: When you contact our support team, the contents of your conversations, emails, or support tickets are stored for quality assurance and record-keeping purposes.
4. Purpose of Personal Data Processing
Waja3 processes your personal data only for legitimate, specific, and transparent purposes. The following are the primary purposes of our data processing:
- Account management and identity verification: To create, verify, and manage your member account, including the KYC process as required by law.
- Financial transaction processing: To process deposits, withdrawals, and all financial transactions related to your account securely and accurately.
- Security and fraud prevention: To identify, investigate, and prevent any fraudulent activity, money laundering, or security breaches that could affect you or the platform.
- Legal and regulatory compliance: To fulfil our legal obligations under the Personal Data Protection Act 2010, anti-money laundering (AML) regulations, and other applicable regulatory requirements in Malaysia.
- Service communications: To send you account notifications, security updates, transaction alerts, and important service-related information.
- Platform improvements: To analyse aggregated usage patterns in order to enhance the user experience, improve existing features, and develop new services.
- Marketing and promotions (with consent): To contact you about offers, promotions, and special campaigns related to waja3, subject to your communication preferences.
5. Data Sharing and Disclosure
Waja3 does not sell members' personal data. However, under certain limited circumstances, we may share data with the following parties for legitimate platform operational purposes:
- Payment processors: Approved financial institutions and payment service providers such as local banks and digital wallet operators, solely to enable your transactions to be processed securely.
- Technology service providers: Third-party companies providing technical infrastructure, hosting, cybersecurity, and analytics services, bound by strict data protection agreements with waja3.
- Regulatory and law enforcement bodies: When required by law, court order, or directive from a competent regulatory authority in Malaysia.
- Identity verification services: Approved third-party KYC service providers that assist in member identity verification in accordance with compliance requirements.
All third parties granted access to waja3 member data are required to comply with our data protection policy and applicable laws. They are strictly prohibited from using that data for any purpose other than what is specified in their service agreement with waja3.
6. Data Retention Period
Waja3 does not retain your personal data longer than necessary for its stated purpose or as required by law. The following are our general data retention guidelines:
- Active account data: For as long as your account remains active and throughout your membership with waja3.
- Financial transaction records: Minimum 7 years from the transaction date, in line with Malaysia's financial legal requirements.
- KYC verification documents: Minimum 5 years after the business relationship ends, in accordance with AMLA (Anti-Money Laundering Act) requirements.
- Security and activity logs: 90 days for general access logs; up to 3 years for security incident-related logs.
- Closed account data: After account closure, data is archived for the legally prescribed retention period before being securely deleted.
7. Data Security and Protection Measures
The security of your personal data is waja3's highest priority. We continuously invest in the latest security infrastructure to ensure your data remains protected at all times. The technical and organizational security measures we implement include:
- Data in transit is encrypted using TLS 1.3 protocol with 256-bit SSL certificates.
- Stored data is encrypted using AES-256 standards for sensitive information.
- Role-based access control (RBAC) ensures that only authorized personnel can access the relevant data.
- Mandatory two-factor authentication (2FA) for all internal systems containing member data.
- 24/7 security monitoring by an internal cybersecurity team and automated threat detection systems.
- Regular penetration testing by qualified independent cybersecurity firms.
- Mandatory data security training programme for all waja3 staff who handle personal data.
While we take all reasonable steps to protect your data, no security system can guarantee 100% protection against all threats. You also play an important role in your account's security by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to our team.
8. Cookies and Tracking Technologies
Waja3 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:
- Essential Cookies: Required for core platform functions such as login session management, language preferences, and security. These cookies cannot be disabled.
- Performance Cookies: Collects anonymized information about how users interact with the platform to help us identify areas for improvement.
- Functional Cookies: Stores your preferences such as account settings and display language to deliver a more personalized experience.
- Analytics Cookies: Helps us understand aggregated usage patterns to make data-driven decisions for platform improvements.
You can manage your cookie settings through your web browser settings at any time. Disabling certain cookies may affect the functionality of some features on our platform.
9. Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 and waja3's privacy policy, you have the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you in a readable format.
Right to Rectification
Request correction of inaccurate or incomplete personal data in our records.
Right to Erasure
Request deletion of your personal data, subject to legal retention obligations.
Right to Object
Object to the processing of your data for marketing purposes or certain other specific purposes.
Right to Data Portability
Receive your data in a structured format for transfer to another service provider.
Right to Restriction
Request restriction of your data processing while an investigation or dispute is ongoing.
To exercise any of the above rights, please contact the waja3 Data Protection Officer by email at [email protected], stating the right you wish to exercise and your account details. Requests will be processed within 14 business days. If we require additional information to verify your identity before processing the request, we will notify you promptly.
10. Children's Privacy
The waja3 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data of individuals under 18. If we discover that a minor's personal data has been collected without our knowledge, we will take immediate action to delete that data and close the account in question.
If you are a parent or guardian and discover that your underage child has registered on our platform, please contact us immediately at [email protected] for prompt action.
11. Changes to This Privacy Policy
Waja3 reserves the right to update this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or improvements to our services. For material changes, we will provide clear notice to members via:
- An email notification to your registered email address at least 14 days before the changes take effect.
- In-platform notification upon your next login.
- Updates are reflected on the "Last Updated" date at the top of this document.
Continued use of the waja3 platform after the effective date of any policy change constitutes your acceptance of the updated policy. If you disagree with the changes, you have the right to close your account and request the deletion of your personal data.
12. Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the waja3 Data Protection Officer through the following channels:
- Email: [email protected] (please state "Privacy Inquiry" in the subject line)
- Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
- Response Time: We are committed to responding to all written privacy inquiries within 5 business days
Waja3 Privacy FAQ
Answers to the most frequently asked questions from members about how we manage personal data.
Your Data Is Protected. Your Game Is Safe.
Waja3 ensures your privacy and security are our top priority. Register today and enjoy the best gaming experience with the peace of mind that your data is always safe with us.