Waze2Win Privacy Policy – Data Protection for Malaysian Players

This Privacy Policy is issued by waze2win and applies to all users who access or use the waze2win platform via the website at waze2win.run or through any associated mobile device or interface. This document sets out in detail the types of personal information we collect from you, the purposes for which it is collected, how we use it, who we may disclose it to, and the measures we take to keep it secure.

Waze2win is committed to operating in a way that respects the privacy of all its users. As a platform serving players from across Malaysia — from Kuala Lumpur, Selangor, Penang, Johor Bahru, Sabah, Sarawak and beyond — we understand that player trust in how we handle their data is the foundation of a strong relationship between waze2win and our player community.

By registering an account, making a deposit, placing a bet, or using the waze2win platform in any other way, you are considered to have read and agreed to this Privacy Policy. If you do not agree with any part of this policy, please stop using the waze2win platform and contact us to close your account if applicable.

Waze2win collects various types of personal information depending on how you interact with our platform. As a general rule, we only collect information that is strictly necessary for the stated purposes — we do not gather data beyond what is needed.

Information You Provide Directly

• Registration information: Full name as shown on your identification document, an active Malaysian phone number, an email address, and a password of your own creation.
• Identity verification (KYC) information: A copy of your MyKad, passport, or valid driving licence, and in certain cases, a recent bank statement or proof of address.
• Financial information: Details of the payment methods you have registered for deposits and withdrawals, including the phone number linked to your Touch 'n Go eWallet, GrabPay, DuitNow, or your FPX account number via Maybank2u, CIMB Clicks, and other supported banks.
• Communications with us: Records of live chat conversations, emails you have sent to support@waze2win.run, and any complaints or requests you have submitted to our support team.

Automatically Collected Information

• Platform usage data: Betting and game history, active session times, games visited, types of bets placed, and game outcomes.
• Device technical data: IP address, web browser type, operating system, and the device type and model used to access waze2win.
• General location data: IP-based location information for security and fraud prevention purposes. We do not collect precise GPS location data from your device.
• Cookie and session data: Information collected through cookies, browser sessions, and similar technologies that help us understand how you interact with the waze2win platform.

All information we collect is stored securely on servers protected with industry-standard encryption. We apply strict access controls to ensure that only authorised personnel can access our players' personal data.

Waze2win uses the personal information collected for a range of operational, security, and service improvement purposes. Each use has a clear legal or contractual basis, and we do not use your data for any purpose not stated in this policy without first obtaining your consent.

Account Management & Transactions

This is the primary purpose for which we collect your data. Your information is used to create and manage your waze2win account, process deposits via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, or ShopeePay, process withdrawals of winnings to your registered payment method, and verify your identity during the KYC process where required.

Security & Fraud Prevention

Technical information such as IP addresses, device data, and usage patterns is continuously analysed by waze2win's security systems to detect and prevent fraudulent activity, account intrusion attempts, bonus abuse, multiple account usage, and any activity that violates the platform's Terms & Conditions. This is a critical legitimate interest that protects all players within the waze2win ecosystem.

Service Communications

We use the email address and phone number you registered with to send transaction-related notifications, important updates on policy changes, account security alerts, and responses to your customer support enquiries. These communications are necessary for the operation of our service, and you cannot opt out of them while your account remains active.

Service Improvement

Anonymous usage data — data that cannot be linked to any specific individual — is used to analyse overall platform usage patterns, understand which games and features are most popular among Malaysian players, and inform decisions about interface improvements and new game additions. This type of analysis helps waze2win continue to grow and deliver a better experience for all players.

Waze2win does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. However, there are specific circumstances where waze2win needs to share certain information with selected parties in order to operate our services safely and effectively.

Payment Service Providers

When you make a deposit or withdrawal, the relevant transaction information must be shared with the payment gateway provider processing that transaction — including DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay. This sharing is limited strictly to the information required to process the transaction and is governed by strict confidentiality agreements.

Technology Service Providers

Waze2win works with carefully selected third-party technology service providers to support various technical functions, including server hosting, database management, email and SMS delivery, and analytics tools. All providers are bound by data protection agreements that require them to safeguard your information and use it solely for purposes agreed upon with waze2win.

Legal & Regulatory Authorities

Waze2win may be required by law to disclose certain information to government authorities, regulatory bodies, or law enforcement agencies upon receipt of a valid request under applicable legislation. In such circumstances, waze2win will comply with its legal obligations while taking reasonable steps to protect your privacy to the extent permitted.

Business Transfer

If waze2win is involved in any merger, acquisition, or sale of business assets, user data may be transferred as part of that transaction. In such cases, you will be notified in advance, and the receiving entity will be required to adhere to a privacy policy that meets at least the same standard as this one.

Waze2win implements comprehensive technical and organisational security measures to protect your personal information from unauthorised access, loss, alteration, or unlawful disclosure. Our approach to data security is multi-layered — meaning we do not rely on any single line of defence.

• 256-bit SSL Encryption: All communications between your browser or app and waze2win's servers are encrypted using the latest TLS protocol with a 256-bit key length — the same standard used by leading banking and financial institutions in Malaysia.
• Stored data encryption: Sensitive data such as payment details and KYC information is stored in encrypted form in our databases. Your password is never stored as plain text — it is hashed using a strong one-way hashing algorithm.
• Internal access controls: Access to player personal data within the waze2win system is strictly controlled on a need-to-know basis, in line with the principle of least privilege. Only staff who require access to perform their specific duties are permitted to view that data.
• Continuous security monitoring: Our cyber threat monitoring system operates 24/7 to detect and respond to any suspicious access attempts or unusual activity within the waze2win platform.
• Regular security audits: waze2win conducts regular security audits and penetration testing through independent third parties to identify and address any technical vulnerabilities before they can be exploited.
• Staff training: All waze2win staff who handle players' personal data receive regular data protection training and are bound by strict confidentiality agreements.

Waze2win uses cookies and similar tracking technologies to keep the platform running smoothly and to understand how players interact with our services. Cookies are small data files stored in your web browser when you visit the waze2win platform.

Types of Cookies We Use

• Essential Cookies (Required): These cookies are required for the waze2win platform to function properly. They store your login session information, language preferences, and interface settings. You cannot decline this type of cookie without affecting the core functionality of the platform.
• Performance & Analytics Cookies: These cookies help us understand how players use the platform — which pages are visited most often, how long players spend on a given page, and which features are used most frequently. This information is collected in aggregated, anonymous form and helps us make continuous improvements to the waze2win platform.
• Functional Cookies: This cookie stores your personal preferences — such as favourite games, display settings, and notification preferences — so you do not have to reconfigure them each time you log in to your waze2win account.

Managing Cookies

You can manage or delete cookies at any time through your web browser settings. Please note, however, that deleting or blocking essential cookies may affect the functionality of the waze2win platform and your gaming experience. Most modern browsers, including Chrome, Firefox, Safari, and Edge, provide options to manage cookies under their respective privacy settings.

As a waze2win platform user, you have several rights regarding the personal data we hold about you. waze2win respects these rights and is committed to making it straightforward for you to exercise them without unnecessary obstacles.

• Right to Access: You have the right to request a copy of the personal data we hold about you. Such requests can be submitted by email to support@waze2win.run, and we will provide the requested information within 30 working days.
• Right to Rectification: If you find that any personal information we hold about you is inaccurate or out of date, you have the right to request a correction. Some information can be updated directly from your account dashboard, while other changes may require document verification.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data. Please note that some data may need to be retained for a specific period for legal compliance, fraud prevention, or the resolution of outstanding disputes.
• Right to Withdraw Consent: If you have previously agreed to receive marketing communications from waze2win, you may withdraw that consent at any time via the unsubscribe link in any marketing email or by contacting our support team.
• Right to Object to Processing: In certain circumstances, you may object to the processing of your personal data for specific purposes. We will assess each objection in accordance with applicable legal and operational requirements.

To exercise any of the rights listed above, please contact the waze2win privacy team by email at support@waze2win.run. Clearly state the right you wish to exercise and provide your account details for identity verification. We will respond within 14 business days of receiving your request.

Waze2win retains your personal data for as long as your account is active and for a reasonable period after account closure, depending on the type of data and applicable legal requirements. We do not retain data for longer than is necessary for the stated purposes.

Typical Retention Period

• Active account data: Retained for as long as your account remains active on the waze2win platform.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date to comply with applicable legal and accounting requirements.
• KYC documents: Retained for 5 years after account closure, or for the period required by the relevant regulatory authority.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Technical data & security logs: Typically retained for 12 months for security analysis and fraud detection purposes.

Once the applicable retention period has ended, your data will be securely deleted or permanently anonymised so that it can no longer be linked to you personally. Our data deletion process follows industry-standard methods to ensure that deleted data cannot be recovered.

The waze2win platform is strictly for users aged 18 and above. Waze2win does not knowingly collect, store, or process personal information from individuals under the age of 18. This is a non-negotiable position and one we take very seriously.

We apply multiple layers of controls to prevent underage use of the platform, including age verification at registration, monitoring of usage patterns that may indicate an underage user, and KYC procedures requiring valid identity document verification for withdrawals. If we suspect that any account is held by an individual under 18, that account will be suspended immediately while an investigation is carried out.

If you believe your child or someone under the age of 18 has registered for or used the waze2win platform, please contact us immediately at support@waze2win.run. We will take immediate action to investigate and close the account in question if the claim is verified, and delete all associated personal data.

Waze2win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, changes in applicable legislation, the addition of new features or services, or feedback from players and regulatory bodies. The most recent update date is always displayed at the top of this page.

For material amendments that significantly affect how we handle your personal data, waze2win will send a notification to your registered email address and display a prominent notice within the platform at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make a fully informed decision.

For minor amendments such as spelling corrections, improved clarifications, or formatting changes that do not alter the substance of the policy, we may not send a separate notice but will always update the revision date at the top of this document. We recommend checking this page periodically to stay informed of the latest waze2win Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how waze2win handles your personal data, we encourage you to reach out to us directly. Our team will respond promptly and take every enquiry seriously.

For general privacy enquiries, the fastest way to get a response is through the live chat feature directly within the waze2win platform, which operates 24 hours a day, 7 days a week. Our support team can answer common privacy questions and direct more complex enquiries to the appropriate person within our organisation.

For formal requests relating to privacy rights — such as data access, correction, deletion, or objection to processing — please email us at support@waze2win.run with the email subject line "Data Privacy Request", along with your full name and registered phone number for identity verification. We are committed to responding to all formal privacy requests within 14 business days of receipt.