This is our concrete promise waja 33 – not empty promises, but concrete actions we carry out every day to protect the personal data of our Malaysian members.
Introduction
Welcome to the Privacy Policy waja 33. This document sets out in detail how we, waja 33, operating through the website https://waja33.wine, collect, store, process, use and protect your personal information as a member or visitor of our platform.
Your privacy is our priority. As an online casino and betting platform serving Malaysians, we understand how sensitive the personal and financial information you entrust to us truly is. That is why we have set data protection standards that go beyond the minimum legal requirements.
This Privacy Policy has been drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and global industry best practices for data security. By using the waja 33 platform, you acknowledge that you have read and understood this policy.
This Privacy Policy applies to all waja 33 services, including our website, mobile app, customer support live chat, and all official communication channels.
Personal Data We Collect
waja 33 only collects data that is strictly necessary to provide services to you. We do not collect excessive data. The following are the categories of data we collect:
Data Minimisation Principle: waja 33 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive information such as credit card details directly – all payments are processed through secure payment gateways such as Touch 'n Go, DuitNow and FPX.
How We Use Your Data
The personal data you provide to waja 33 used solely for the following purposes. We will not use your data beyond this scope without first obtaining your explicit consent:
- Member account management – registering, verifying your identity, and managing your waja 33 account.
- Financial transaction processing – processing MYR deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, or CIMB Clicks, and managing withdrawals.
- Gaming service delivery – giving you access to Live Casino, slots, blackjack, roulette, and Sports Betting covering football, badminton, cricket, and e-sports.
- Security and fraud prevention – detecting and preventing suspicious activity, money laundering, and platform abuse.
- Legal compliance – fulfilling reporting obligations to the relevant authorities when required.
- Service communications – sending important notifications relating to your account, transactions, and service updates.
- Platform improvements – analysing usage patterns (in aggregated and anonymised form) to improve the user experience.
- Marketing with consent – sending promotional information and special offers only if you have given your consent.
We follow a "limited purpose" approach — each piece of data is used solely for the purpose stated at the time of collection. No profiling or automated decision-making that could affect your rights is carried out without human intervention.
Sharing Data with Third Parties
waja 33 does not sell, rent, or trade your personal data to third parties. However, in the course of operating the platform, there are limited situations where we may need to share your data with certain parties:
- Payment service providers – payment gateways that process your MYR deposit and withdrawal transactions (e.g. Touch 'n Go, DuitNow, FPX). They receive only the minimum data required to process each transaction.
- Game software providers – companies such as Evolution Gaming and Pragmatic Play that provide gaming platforms. Data shared is limited to game session IDs, with no full personal data disclosed.
- Technical service providers – hosting, CDN and cybersecurity providers that assist in managing our platform infrastructure, bound by strict confidentiality agreements.
- Legal authorities – when required by Malaysian law, a court order, or an official investigation by a relevant government agency.
Important Reminder: waja 33 does not share your data with data brokers, third-party advertising companies, or social media networks for advertising purposes without your explicit consent.
All of waja 33's third-party partners are bound by data protection agreements that require them to handle your data to a privacy standard no less stringent than our own.
Data Security
Waja 33 continuously invests in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational measures we have in place include:
- Data encryption in transit: SSL/TLS 256-bit for all communications between your browser/app and our servers.
- Data encryption at rest: Sensitive data such as financial details is stored in encrypted format using AES-256.
- Role-based access control: Only authorised personnel may access personal data, strictly on a need-to-know basis.
- Two-factor authentication (2FA): Mandatory for staff access to systems containing member data.
- 24/7 monitoring: An intrusion detection system (IDS) operates around the clock to identify unusual activity.
- Independent security audits: Independent security audits are conducted on a quarterly basis.
- Incident response plan: Detailed procedures are in place to respond swiftly in the event of a data security breach.
Security Tips for You: While we protect your data on our end, you can further strengthen your account security by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with anyone — including anyone claiming to be waja 33 staff.
Cookies & Tracking Technologies
Platform waja 33 uses cookies and similar tracking technologies to enhance the user experience and maintain session security. The following are the types of cookies we use:
- Essential cookies (required): Required for core platform functions such as login, session management, and security. Cannot be disabled.
- Performance cookies: We collect anonymous information about how visitors use our platform to help us improve our services.
- Functional cookies: Saves your preferences such as language and display settings to deliver a more personalised experience.
- Security cookies: Helps detect suspicious login attempts and protects your account from unauthorised access.
You can manage your cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality of the waja 33 platform. waja 33 does not use third-party cookies for advertising.
Your Rights Under PDPA 2010
As an individual whose personal data is processed by waja 33, you have the following rights protected under Malaysia's Personal Data Protection Act 2010:
To exercise any of the above rights, please contact our privacy team by email at support@waja33.wine by specifying the right you wish to exercise. We will respond within the timeframe required by law.
Data Retention Period
waja 33 retains your personal data only for as long as it is needed for the stated purpose or as required by Malaysian law. The following are our data retention guidelines:
- Active account data: For the duration of your active account plus 7 years after account closure (financial compliance requirement).
- Financial transaction records: Minimum 7 years from the transaction date, as required by Malaysian law.
- Support communication logs: 3 years from the date of last interaction.
- Technical log data: 90 days for routine security logs; up to 2 years for cases under investigation.
- Marketing data (with consent): Until you withdraw that consent.
Once the retention period has expired, data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to your identity.
Children's Privacy Protection
Platform waja 33 is exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.
If we discover that a child's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered on waja 33 are urged to contact us immediately.
If you are aware of anyone under the age of 18 using the waja 33 platform, please contact our support team immediately at support@waja33.wine.
Changes to This Privacy Policy
waja 33 reserves the right to update or amend this Privacy Policy from time to time in line with changes to laws, technology, or our business operations. The date of the most recent update is always displayed at the top of this page.
For material changes – that is, changes that significantly affect how we use or share your data – we will provide advance notice of at least 30 days before the changes take effect, via:
- Email to your registered address
- Prominent notices within the waja 33 platform
- Push notifications via mobile app (where applicable)
Continued use of the waja 33 platform after a change notice is posted constitutes acceptance of the updated policy.
Contact Us – Data Protection Officer
If you have any questions, concerns, or complaints regarding how waja 33 manage your personal data, or wish to exercise your rights under PDPA 2010, please contact our Data Protection Officer:
If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body overseeing PDPA compliance in Malaysia.
This Privacy Policy was updated on 1 January 2026 and supersedes all previous versions.