Your privacy matters to waja333. This Policy explains exactly what personal data we collect when you use the platform, why we collect it, how it is used, and the rights you hold over that data.
waja333 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use the waja333 platform at https://waja333.win ("the Site") and any related services ("the Services"). This Privacy Policy ("Policy") describes in detail how waja333 collects, processes, stores, shares, and protects your personal information.
This Policy applies to all Members, registered users, and visitors of the waja333 platform, whether accessing the Site from Kuala Lumpur, Penang, Johor Bahru, or elsewhere. By using the waja333 platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
This Policy should be read alongside the waja333 Terms & Conditions, which govern your overall use of the platform. Where terms defined in the Terms & Conditions are used in this Policy, they carry the same meaning.
For the purposes of applicable data protection legislation, waja333 is the data controller in respect of the personal data it processes about you in connection with your use of the Services. As data controller, waja333 determines the purposes and means by which your personal data is processed.
Where waja333 engages third-party service providers to process personal data on its behalf (for example, payment processors or cloud infrastructure providers), those third parties act as data processors and are contractually obligated to process your data only on waja333's instructions and in accordance with this Policy.
When you register a waja333 account or interact with the platform, you may provide the following categories of personal data:
When you access the waja333 platform, certain technical data is collected automatically by our systems:
waja333 may receive personal data about you from third-party sources in limited circumstances, including:
waja333 uses your personal data for the following purposes:
waja333 processes your personal data on the following legal bases:
waja333 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. waja333 may share your data with the following categories of recipients only to the extent necessary for the stated purpose:
All third-party data processors engaged by waja333 are bound by contractual obligations requiring them to process personal data only as instructed by waja333 and to maintain appropriate security measures.
waja333 uses cookies and similar tracking technologies on the Site. Cookies are small text files placed on your device that allow the platform to recognise your browser and remember certain preferences or session states.
You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the waja333 platform.
waja333 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. Specific retention principles include:
Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.
waja333 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:
Notwithstanding the above, no data transmission over the internet or electronic storage system is entirely without risk. waja333 cannot guarantee absolute security, and Members are encouraged to maintain strong, unique passwords and to use 2FA to mitigate account access risks.
Subject to applicable law, you hold the following rights in respect of your personal data held by waja333:
To exercise any of these rights, contact the waja333 data team at [email protected] with the subject line "Data Rights Request". waja333 will respond within 30 days of receiving a valid request. waja333 may require identity verification before processing a data rights request.
The waja333 platform is strictly intended for individuals aged 21 years and above. waja333 does not knowingly collect personal data from persons under the age of 21. Age eligibility is verified during the registration process via mobile number authentication and, where triggered, identity document verification.
If waja333 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be suspended immediately and all associated data will be deleted as soon as practicable, subject to any applicable legal hold requirements.
If you believe a minor has accessed the waja333 platform, please notify us immediately at [email protected].
waja333's platform infrastructure, including data storage and processing systems, may be operated from locations outside Malaysia. Where personal data is transferred to countries that do not provide an equivalent level of data protection to Malaysia, waja333 implements appropriate safeguards — including contractual data processing agreements incorporating internationally recognised standard contractual clauses — to ensure your data receives an adequate level of protection regardless of where it is processed.
By using the waja333 platform, you acknowledge that your personal data may be transferred and processed in jurisdictions outside your country of residence, subject to the safeguards described above.
waja333 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes to this Policy will be communicated to Members via email or platform notification with reasonable advance notice where practicable.
The date of the most recent revision is displayed at the top of this page. Your continued use of the waja333 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the platform and close your account.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data waja333 holds about you, please contact the waja333 data team:
waja333 aims to respond to all data-related queries within 30 calendar days. For urgent security concerns — for example, suspected unauthorised account access — please use live chat for the fastest response.
Every connection to waja333 is encrypted via HTTPS/TLS. Your login credentials, financial details, and personal information are never transmitted in plain text. The encryption standard applied is consistent with international online banking security expectations.
waja333 does not sell, rent, or trade your personal information to third-party marketers. Your data is used exclusively to operate your account, process your transactions, and comply with legal obligations. That is the complete list.
Malaysian Members hold full rights over their waja333 data — including the right to access, correct, export, or request deletion of their personal information. Data rights requests are processed within 30 days of receipt.
waja333 provides a clear breakdown of every category of cookie used on the platform. Non-essential cookies — including marketing cookies — require your explicit consent and can be withdrawn at any time through account or browser settings.
Your waja333 account password is stored in hashed, non-reversible form. No waja333 employee can retrieve your plaintext password. If you forget it, the only resolution is a reset via SMS OTP — the original password cannot be recovered because it does not exist in readable form.
waja333 does not hold personal data indefinitely. Clear retention periods apply to each data category — ranging from 3 years for support records to 5 years for AML-required transaction data. At expiry, data is securely deleted or anonymised.
If you have any questions about how waja333 handles your personal data, or if you wish to exercise your data rights, the support team is available 24/7. Reach us via live chat on the platform or email [email protected] — we respond to privacy queries within 30 days.