waze2win Privacy Policy

1About This Privacy Policy

1.1 This Privacy Policy ("Policy") describes how waze2win ("waze2win", "we", "us", "our") collects, uses, discloses, retains, and protects personal data about individuals ("you", "your", "Player") who register an account, access, or otherwise use the waze2win online gaming platform accessible at waze2win.one ("Platform").

1.2 By registering an Account on the waze2win Platform or by using any waze2win Service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

1.3 This Policy forms part of the waze2win Terms and Conditions. Capitalised terms not defined in this Policy have the meanings ascribed to them in the waze2win Terms & Conditions.

1.4 waze2win takes the privacy of all Malaysian players seriously. The Platform is designed with privacy principles in mind — data minimisation, purpose limitation, and security by design are built into our operating procedures rather than treated as afterthoughts.

2Data Controller

2.1 The data controller responsible for personal data processed through the waze2win platform is the waze2win operating entity. For all data-related enquiries, you may contact the waze2win Data Protection team via the contact details set out in Section 14 of this Policy.

2.2 Where waze2win engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or technology infrastructure providers — those parties act as data processors and are contractually bound to process data only on waze2win's instructions and in accordance with applicable data protection standards.

3Personal Data We Collect

3.1 waze2win collects the following categories of personal data:

3.1.1 Registration Data

When you create a waze2win account, we collect your full legal name, date of birth, email address, and any other information provided during the registration process. This information is necessary to create and maintain your Account.

3.1.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, waze2win requires identity verification documents prior to processing withdrawals. This may include a copy of your MyKad, passport, or other government-issued identity document, and may include proof of address. KYC documents are processed by waze2win's compliance team and may be handled by an authorised third-party identity verification provider.

3.1.3 Financial Data

We collect information about your deposits, withdrawals, and transaction history on the Platform. For e-wallet transactions via Touch 'n Go, Boost, or GrabPay, we receive transaction reference data from the respective payment provider. For bank transfers via Maybank, CIMB, or other FPX-supported institutions, we receive transaction confirmation data. We do not store full payment card numbers on our systems.

3.1.4 Gaming Activity Data

waze2win records your gaming activity including games played, bets placed, outcomes, session duration, and wagering history. This data is used for account management, fraud detection, responsible gaming monitoring, and regulatory reporting.

3.1.5 Technical Data

We automatically collect technical information when you access the Platform, including your IP address, device type, operating system, browser type and version, referring URL, and pages visited. This data is used for security purposes, platform optimisation, and fraud prevention.

3.1.6 Communications Data

If you contact waze2win's support team via Live Chat or email, we retain records of those communications. This enables us to provide consistent support and maintain quality assurance.

4How We Collect Personal Data

4.1 waze2win collects personal data through the following means:

• Direct provision — information you provide directly during registration, KYC verification, support interactions, or other engagement with the Platform
• Automated collection — technical data collected automatically via cookies, session tracking, and server logs when you access the Platform
• Third-party providers — data received from payment processors (Touch 'n Go, Boost, GrabPay, Maybank, CIMB), identity verification services, and fraud prevention partners where you have authorised such sharing
• Publicly available sources — data from publicly accessible registers or databases where accessed for the purposes of fraud prevention or AML compliance

5Purpose of Processing & Legal Basis

5.1 waze2win processes personal data for the following purposes and on the following legal bases:

• Account creation and management — contractual necessity; necessary to provide the Services you have requested
• Payment processing — contractual necessity; necessary to process deposits and withdrawals
• Identity verification (KYC) — legal obligation; required by applicable AML and CTF regulatory frameworks
• Fraud prevention and security — legitimate interests; waze2win has a legitimate interest in protecting the Platform and its players from fraud, money laundering, and other illicit activity
• Responsible gaming monitoring — legitimate interests and legal obligation; waze2win monitors gaming patterns to identify players who may be at risk of gambling-related harm
• Platform improvement and analytics — legitimate interests; understanding how players use the Platform enables waze2win to improve service quality
• Customer support — contractual necessity; necessary to respond to and resolve your enquiries
• Marketing communications — consent; waze2win will only send direct marketing communications where you have provided explicit consent. You may withdraw consent at any time by contacting support.
• Regulatory reporting — legal obligation; certain data must be reported to regulatory or law enforcement authorities under applicable law

6Data Sharing & Disclosure

6.1 waze2win does not sell, rent, or trade your personal data to third-party marketers.

6.2 waze2win may share personal data with the following categories of recipients where necessary and under appropriate data processing agreements:

• Payment service providers — Touch 'n Go eWallet, Boost, GrabPay, and banking partners (Maybank, CIMB, Public Bank) to process deposits and withdrawals
• Identity verification providers — authorised third-party KYC and AML screening services that assist waze2win in meeting its identity verification obligations
• Technology and infrastructure providers — cloud hosting, security, and platform technology vendors who process data solely on waze2win's instruction
• Game content providers — licensed game studios may receive anonymised session data for technical support and RNG audit purposes
• Regulatory and law enforcement authorities — where waze2win is required by law, court order, or regulatory direction to disclose personal data
• Professional advisers — lawyers, auditors, and insurers bound by confidentiality obligations, where necessary for the conduct of waze2win's business

6.3 All third-party data processors engaged by waze2win are contractually required to maintain data security standards equivalent to those applied by waze2win itself and to process personal data solely for specified, authorised purposes.

7Cookies and Tracking Technologies

7.1 The waze2win Platform uses cookies and similar tracking technologies to operate the Platform, maintain session state, detect fraud, and improve user experience. Cookies are small text files placed on your device by your browser when you visit the Platform.

7.2 waze2win uses the following categories of cookies:

• Strictly necessary cookies — essential to the operation of the Platform, including session management and security. These cannot be disabled without affecting Platform functionality.
• Functional cookies — remember your preferences such as language settings and login state to improve your experience on the Platform.
• Analytics cookies — collect anonymised data about how players interact with the Platform, enabling waze2win to identify and resolve usability issues and improve service quality.
• Security cookies — assist in detecting and preventing fraudulent activity, including bot access and account takeover attempts.

7.3 You may configure your browser to refuse or delete cookies; however, doing so may impair your ability to use certain features of the waze2win Platform, including login and payment functionality.

8Data Retention

8.1 waze2win retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations.

8.2 Account data and gaming activity records are retained for the duration of the active Account relationship and for a minimum period of five years following Account closure, in compliance with AML regulatory record-keeping requirements.

8.3 KYC documentation is retained for a minimum period of five years following the end of the customer relationship, in accordance with applicable anti-money laundering regulations.

8.4 Communications data (Live Chat transcripts, email records) is retained for a period of two years from the date of the communication unless a longer period is required for the resolution of a dispute or regulatory matter.

8.5 Technical log data is retained for a period of 12 months from collection, after which it is anonymised or deleted unless required for an ongoing security investigation.

9Data Security

9.1 waze2win implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the waze2win Platform
• Encryption of sensitive data at rest, including identity documents and financial records
• One-way cryptographic hashing of account passwords — passwords cannot be recovered in plain text by anyone, including waze2win staff
• Access controls and role-based permissions limiting staff access to personal data to those with a business need to access it
• Regular security assessments and penetration testing of Platform infrastructure
• Two-factor authentication available to all registered players and mandated for administrative access

9.2 Notwithstanding the above, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, waze2win will notify affected players as soon as reasonably practicable.

10Your Data Rights

10.1 Registered waze2win players have the following rights in respect of their personal data, subject to applicable legal limitations:

• Right of access — you may request a copy of the personal data waze2win holds about you
• Right of rectification — you may request correction of inaccurate or incomplete personal data
• Right of erasure — you may request deletion of your personal data where we no longer have a lawful basis to retain it; note that regulatory retention obligations may limit the scope of this right
• Right to restrict processing — you may request that waze2win restricts the processing of your personal data in certain circumstances
• Right to data portability — you may request your personal data in a structured, commonly used, machine-readable format
• Right to object — you may object to processing based on waze2win's legitimate interests, including direct marketing
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing

10.2 To exercise any of these rights, please contact the waze2win Data Protection team using the contact details in Section 14. waze2win will respond to verified requests within 30 days. Where a request is complex or involves multiple rights, waze2win may extend this period by a further 60 days, with notification to you.

11Minors

11.1 The waze2win Platform is strictly for persons aged 21 and above. waze2win does not knowingly collect personal data from persons under the age of 21. If waze2win becomes aware that personal data has been collected from a person under 21, such data will be deleted promptly and the associated Account will be closed immediately.

11.2 If you believe that a minor has registered an Account on the waze2win Platform, please contact waze2win immediately via the contact details in Section 14.

12International Data Transfers

12.1 Some of waze2win's technology infrastructure and service providers may be located outside Malaysia. Where personal data is transferred to countries that may not provide an equivalent level of data protection, waze2win takes appropriate safeguards including contractual protections, binding corporate rules, or other legally recognised transfer mechanisms to ensure your data is protected.

12.2 By using the waze2win Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia for the purposes described in this Policy.

13Changes to This Policy

13.1 waze2win reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Players by email or by prominent notice on the Platform prior to taking effect.

13.2 The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the waze2win Platform following notification of changes constitutes acceptance of the revised Policy.

13.3 Players are encouraged to review this Policy periodically to remain informed of how waze2win protects their personal data.

14Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or waze2win's handling of your personal data, please contact us via:

Email: [email protected]

Live Chat: Available 24/7 via the waze2win Platform

We aim to respond to all privacy-related enquiries within 5 business days and to fulfill data subject requests within 30 days of receipt of a verified request.

This Privacy Policy was last reviewed on 11 June 2026. waze2win reserves the right to update this Policy at any time in accordance with Section 13.