wj33 Privacy Policy

1. About This Policy

wj33 is committed to protecting the privacy and security of all personal information we hold about our players and platform visitors. This Privacy Policy sets out the basis on which personal data we collect will be processed by us. It applies to all data collected through the wj33 Platform, including via the website wj33.app, any related mobile browser experience, and all interactions with our customer support team.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform. Capitalised terms not defined herein have the meanings given in the Terms & Conditions.

wj33 acts as the data controller in respect of personal data collected through the Platform. As data controller, we determine the purposes and means by which your personal data is processed. We are responsible for ensuring that the processing we conduct complies with applicable data protection legislation.

2. Data We Collect

wj33 collects personal data in several ways — directly from you when you register and use the Platform, automatically as you interact with the Platform, and from third-party verification and payment service providers. The categories of data we collect are set out in the table below.

3. How We Use Your Data

wj33 uses personal data for the following purposes:

• Account management: To register your account, verify your identity, maintain your profile, and communicate important account-related information to you;
• Service delivery: To provide access to the wj33 Platform, process deposits and withdrawals via Malaysian payment methods (including FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency), and ensure the correct crediting of winnings;
• KYC and compliance: To meet our obligations under applicable anti-money laundering (AML) regulations, our international gaming licence conditions, and other regulatory requirements — including verifying age (21+ mandatory), identity, and source of funds where required;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, and other prohibited activities as defined in the Terms & Conditions;
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion and deposit limits set by you, send reality check notifications, and identify accounts that may show signs of problem gambling;
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels;
• Platform improvement: To analyse usage patterns, test new features, optimise game loading performance, and improve the overall wj33 experience for Malaysian players;
• Marketing communications: To send you promotional offers, bonus notifications, and event updates — but only if you have opted in to receive such communications. You may withdraw your consent at any time via your account settings.

4. Legal Basis for Processing

Where applicable data protection law requires us to identify a legal basis for processing personal data, we rely on the following:

• Contractual necessity: Processing required to perform the contract between you and wj33, including account registration, payment processing, and service delivery;
• Legal obligation: Processing required to comply with our legal and regulatory obligations, including AML checks, KYC verification, age verification, and regulatory reporting;
• Legitimate interests: Processing in our legitimate interests to operate a safe, fair, and commercially viable platform — including fraud prevention, security monitoring, technical operations, and responsible gaming — where these interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — including in respect of marketing communications and the use of non-essential cookies.

5. Data Sharing & Disclosure

wj33 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors and e-wallet providers: To process deposits and withdrawals via FPX (Maybank, CIMB, Public Bank, RHB), Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency networks. These providers are subject to their own data protection obligations;
• KYC and identity verification services: To complete mandatory identity and age verification checks as required by our licensing conditions;
• Game software providers: Game studios and aggregators that provide content on the wj33 Platform may receive anonymised or pseudonymised usage data for technical integration and RTP auditing purposes;
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, regulatory directive, or as part of our obligations under our operating licence;
• Fraud prevention agencies: Where we believe, in good faith, that sharing information is necessary to prevent, detect, or investigate fraud or other illegal activity;
• Professional advisers: Legal counsel, auditors, and compliance consultants acting under strict confidentiality obligations.

6. International Data Transfers

wj33 may transfer personal data to third-party service providers or infrastructure partners located outside of Malaysia. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections applicable in your jurisdiction. These safeguards may include contractual data protection clauses, adherence to internationally recognised data protection frameworks, or other measures recognised as adequate under applicable law.

By using the wj33 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia, subject to the protections described in this Policy.

7. Data Security

wj33 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and wj33 servers;
• Encryption of sensitive data at rest, including identity documents and financial information;
• Access controls that limit employee access to personal data to those with a legitimate business need;
• Regular security audits and penetration testing of Platform infrastructure;
• Multi-factor authentication for internal administrative systems;
• Incident response procedures for the rapid detection, containment, and notification of data security incidents.

Whilst we take all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for keeping your own wj33 login credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

8. Data Retention

wj33 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. Key retention periods are as follows:

• Active account data: Retained for the duration of your active wj33 account relationship;
• Transaction and financial records: Retained for a minimum of 5 years following the relevant transaction, in compliance with AML record-keeping requirements;
• KYC and identity verification documents: Retained for a minimum of 5 years following account closure, as required under applicable anti-money laundering regulations;
• Customer support correspondence: Retained for 3 years following the resolution of the relevant support interaction;
• Marketing preferences and consent records: Retained until you withdraw consent or request deletion, and for up to 2 years thereafter for audit purposes;
• Technical and usage data: Retained for up to 24 months on an aggregated, anonymised basis for platform analytics purposes.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Cookies & Tracking Technologies

wj33 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small data file stored on your device by your browser. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for Platform operation — including session authentication, security tokens, and login state persistence. These cannot be disabled without impairing Platform functionality;
• Functional cookies: Remember your language preference, game settings, and other personalisation options to improve your experience;
• Analytics cookies: Collect anonymised data about how visitors use the Platform (pages visited, session duration, navigation paths) to help us identify areas for improvement. We do not use third-party behavioural advertising networks;
• Security cookies: Used for fraud detection and to identify unusual or suspicious account activity.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the wj33 Platform. We do not use tracking pixels or cross-site advertising cookies.

10. Your Rights

Subject to applicable data protection law, you have the following rights in respect of personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal and regulatory retention obligations;
• Right to restrict processing: You may request that we limit how we use your personal data in certain circumstances;
• Right to data portability: Where processing is based on your consent or contract performance, you may request that we provide your personal data in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interests, including for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to all verified requests within 30 days. We may need to verify your identity before processing your request.

11. Children's Privacy

Parents or guardians who believe that a minor may have registered on the wj33 Platform should contact us immediately at [email protected] so that we may investigate and take appropriate action without delay.

12. Changes to This Privacy Policy

wj33 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will notify registered players by email to the address on file and/or by posting a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting your information. Your continued use of the wj33 Platform following the publication of any revised Policy constitutes your acceptance of the updated terms.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which wj33 processes your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 from your wj33 account dashboard;
• Email: [email protected] (plain text — not a clickable link);
• FAQ: Visit our FAQ page for answers to common privacy and account questions.

We aim to respond to all privacy-related enquiries within 5 business days. For formal data subject rights requests, we will acknowledge receipt within 72 hours and provide a full response within 30 calendar days.