Privacy Policy

This Privacy Policy ("Policy") is issued by WajaSlot ("WajaSlot", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at wajaslot.cam (the "Platform"). This Policy describes how WajaSlot collects, receives, uses, stores, shares, transfers, and processes personal data relating to individuals who access or use the Platform ("you", "User", "Player").

WajaSlot takes the privacy of its players seriously. We recognise that when you provide us with your personal information — whether during account registration, identity verification, payment processing, or general use of the Platform — you are placing trust in us to handle that information responsibly, transparently, and securely.

This Policy is designed to give you a clear and complete picture of our data practices. Please read it carefully. By registering for an Account on the WajaSlot Platform or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, location data, and online identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, transmission, dissemination, alignment, restriction, erasure, or destruction.
• "Data Controller" — WajaSlot, in its capacity as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — A third-party service provider that processes Personal Data on behalf of WajaSlot, pursuant to a written data processing agreement.
• "KYC Data" — Identity verification documents and supporting materials submitted by a Player in connection with WajaSlot's Know Your Customer (KYC) process.
• "Cookies" — Small text files placed on your device by the Platform to enable certain functions, remember preferences, and support analytics.
• "Account" — A registered player account on the WajaSlot Platform.

WajaSlot collects Personal Data across several categories, depending on how you interact with the Platform. The table below summarises the categories of data we collect and provides representative examples of each:

WajaSlot will only collect Personal Data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.

WajaSlot collects Personal Data through the following channels and mechanisms:

4.1 Direct Collection

Data you provide directly to WajaSlot when you register an Account, complete the KYC verification process, make a deposit or withdrawal request, contact our customer support team (via live chat, WhatsApp, or email), submit a complaint or dispute, or update your account profile settings.

4.2 Automated Collection

Data collected automatically when you access and use the Platform, including Technical Data and Usage Data captured through server logs, session tracking, and analytics tools. This data is collected regardless of whether you are logged into an Account.

4.3 Third-Party Sources

In certain circumstances, WajaSlot may receive Personal Data about you from third parties, including:

• Payment service providers (e.g., DuitNow operators, FPX gateway providers, e-wallet platforms including Touch 'n Go, Boost, and GrabPay) — for the purpose of confirming payment transactions.
• Identity verification and KYC service providers — for the purpose of validating identity documents and conducting AML screening.
• Fraud prevention and risk management service providers — for the purpose of identifying suspicious patterns or known fraudulent actors.

WajaSlot processes your Personal Data on the following legal bases, depending on the category of data and the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between WajaSlot and you (i.e., operating your Account, processing deposits and withdrawals, delivering game services, and resolving disputes).
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements, KYC verification mandates, and tax reporting obligations.
• Legitimate Interests: Processing carried out for WajaSlot's legitimate business interests, including fraud prevention, platform security, IT systems management, and responsible gambling monitoring — provided that these interests are not overridden by your fundamental privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in the context of optional marketing communications and the use of non-essential cookies.

Where consent is the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

WajaSlot uses the Personal Data it collects for the following purposes:

6.1 Account Management & Service Delivery

• Creating and maintaining your WajaSlot Account.
• Authenticating your identity upon login and during high-risk transactions.
• Processing deposits and withdrawals via your chosen payment method (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, etc.).
• Delivering game results, settling bets, and crediting or debiting Account Balances.
• Administering bonus credits, loyalty points (WajaPoints), and tier upgrades within the WajaSlot rewards programme.

6.2 Compliance & Fraud Prevention

• Verifying your age (minimum 21 years) and identity as part of the KYC process.
• Conducting AML and CTF screening against applicable sanctions and watchlists.
• Detecting and investigating suspicious transactions, multi-accounting, bonus abuse, and other forms of fraud.
• Retaining records as required by applicable financial and regulatory obligations.

6.3 Platform Improvement & Personalisation

• Analysing usage patterns to improve the design, functionality, and content of the Platform.
• Tailoring the game lobby, promotional offers, and content recommendations to your preferences and gameplay history.
• Conducting internal research and analytics to understand player behaviour and preferences.

6.4 Customer Support & Communications

• Responding to your support inquiries, complaints, and dispute submissions.
• Sending transactional communications (account notifications, deposit confirmations, withdrawal updates, KYC status updates) in English, Bahasa Melayu, or Chinese as per your stated preference.
• Sending promotional communications where you have provided consent to receive marketing from WajaSlot.

6.5 Responsible Gambling

• Monitoring gameplay and transaction patterns to identify potential indicators of problem gambling behaviour.
• Enforcing self-imposed limits, cool-off periods, and self-exclusion requests.
• Communicating with players who may be exhibiting signs of gambling-related harm, in accordance with WajaSlot's Responsible Gambling Policy.

WajaSlot does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. We may share your Personal Data with third parties only in the following limited and lawful circumstances:

• Payment Service Providers: We share transaction-relevant data with payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian banking partners) solely for the purpose of executing your deposit and withdrawal requests.
• Identity Verification Partners: We share KYC documents and Identity Data with accredited identity verification and AML screening service providers for compliance purposes.
• Technology and Infrastructure Providers: Certain operational functions of the Platform are supported by technology vendors (hosting, cloud infrastructure, game providers) who process data on our behalf under binding data processing agreements.
• Fraud Prevention Networks: We may share data with fraud prevention service providers and, where permissible, with other licensed operators for the purpose of identifying known fraudulent actors.
• Regulatory and Law Enforcement Authorities: WajaSlot will disclose Personal Data to regulators, law enforcement agencies, or courts when required to do so by applicable law, regulation, or a valid legal order.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of WajaSlot's business assets, Personal Data held by WajaSlot may form part of the transferred assets. Affected players will be notified in accordance with applicable law.

WajaSlot retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. The following retention periods apply as general guidelines:

• Account Data: Retained for the duration of your active Account relationship with WajaSlot, plus a minimum of five (5) years following Account closure, to comply with applicable AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the KYC process or the closure of the associated Account, whichever is later, in accordance with applicable AML obligations.
• Transaction Records: Retained for a minimum of five (5) years following each transaction, in accordance with applicable financial record-keeping requirements.
• Support Communications: Retained for a minimum of two (2) years following the resolution of the relevant support interaction or dispute.
• Technical / Log Data: Retained for a period of up to twelve (12) months, unless a longer retention period is required for active fraud investigation or legal proceedings.
• Marketing Preferences: Retained until you withdraw consent or until your Account is closed, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data.

The WajaSlot Platform uses cookies and similar tracking technologies to provide, maintain, and improve the Platform's functionality and your user experience.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the operation of the Platform. These cookies enable core functions such as session authentication, security, and load balancing. They cannot be disabled without affecting the Platform's functionality.
• Functional Cookies: Used to remember your preferences, such as language selection, display settings, and game lobby layout, to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform, enabling WajaSlot to identify areas for improvement.
• Marketing Cookies: Used to deliver promotional content relevant to your interests, where you have provided consent to receive marketing communications from WajaSlot. These cookies may track your Platform activity across sessions.

9.2 Cookie Consent & Management

Non-essential cookies (functional, analytics, and marketing) are only placed on your device with your consent, which is requested upon your first visit to the Platform. You may withdraw or update your cookie preferences at any time via your Account settings or browser controls. Withdrawing consent for non-essential cookies will not affect your ability to access the Platform's core features.

WajaSlot implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS / 256-bit SSL): All data transmitted between your device and WajaSlot's servers is encrypted using industry-standard TLS protocols, providing end-to-end protection for all communications and transactions on the Platform.
• Encrypted Data Storage: Sensitive Personal Data, including KYC documents and financial records, is stored in encrypted form on secure servers with access restricted to authorised personnel only.
• Access Controls: Strict role-based access controls limit internal access to Personal Data to employees, contractors, and service providers who require it for their specific operational responsibilities.
• Two-Factor Authentication (2FA): Available to all players for Account login, and mandated for internal staff accessing sensitive data systems.
• Regular Security Audits: WajaSlot conducts periodic penetration testing, vulnerability assessments, and security audits of the Platform and its supporting infrastructure.
• Incident Response Plan: WajaSlot maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, affected individuals will be notified without undue delay.

Notwithstanding the above, no method of electronic transmission or storage is entirely infallible. WajaSlot cannot guarantee the absolute security of your Personal Data; however, we apply all reasonable and industry-standard measures to protect it.

Subject to applicable law and the specific circumstances of your request, you hold the following rights in relation to your Personal Data processed by WajaSlot. All rights may be exercised by contacting WajaSlot's Data Protection team using the details in Section 15.

WajaSlot will respond to all verified data subject requests within thirty (30) calendar days. In cases of complexity or high volume, this period may be extended by up to a further sixty (60) days, with notice provided to you within the initial 30-day period.

The WajaSlot Platform is strictly intended for use by adults aged 21 years and above. WajaSlot does not knowingly collect, process, or store Personal Data relating to individuals under the age of 21. Age verification (minimum 21 years) is a mandatory requirement for Account registration and for processing withdrawal requests.

In the event that WajaSlot discovers that Personal Data has been collected from an individual under the age of 21, all data associated with that individual will be immediately deleted and the Account will be permanently closed. Any funds in the Account will be handled in accordance with WajaSlot's minor protection procedures and applicable law.

WajaSlot operates a platform that is primarily designed for and served to players based in Malaysia. However, in the course of providing its services, certain Personal Data may be processed on infrastructure or by service providers located outside Malaysia.

Where Personal Data is transferred to a jurisdiction that does not provide a level of data protection equivalent to that applicable under the laws governing WajaSlot's operations, WajaSlot will implement appropriate safeguards to protect that data. These safeguards may include:

• Standard contractual clauses (SCCs) or equivalent contractual mechanisms binding the receiving party to data protection obligations equivalent to those applicable in the origin jurisdiction.
• Ensuring that any third-party data processor receiving the data is certified under a recognised international data protection framework.
• Conducting transfer impact assessments where required by applicable law.

For more information about the safeguards WajaSlot applies to international data transfers, please contact the Data Protection team using the details in Section 15.

WajaSlot reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Where changes are material, WajaSlot will notify registered Players via the Platform and/or by email to the address associated with their Account.

The updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of the WajaSlot Platform following the publication of any updated Policy constitutes acceptance of those changes. If you do not agree with the updated Policy, you should cease using the Platform and contact WajaSlot's support team to arrange Account closure.

WajaSlot recommends that all players review this Privacy Policy periodically. The most current version will always be accessible at wajaslot.cam/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy, the processing of your Personal Data, or the exercise of your data subject rights, please contact WajaSlot's Data Protection team using the details below. All contact information must be used for text-based communication only — no clickable links are provided.