Privacy Policy WangKaya – Personal Data Protection for Malaysia Members

Wangkaya is committed to protecting the privacy of every member and user who accesses our platform at wangkaya.xyz. This Privacy Policy has been drawn up in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and international best practices in data protection.

This policy explains the types of personal data we collect from you, why it is collected, how it is used and protected, the limited circumstances under which it may be disclosed, and your rights as a data subject. We have made every effort to keep this policy as clear and straightforward as possible — free from complex or confusing legal language.

This Privacy Policy applies to all users wangkaya including website visitors who have not yet registered, registered members, and former members who have closed their accounts (relevant data may be retained in accordance with applicable legal or financial regulatory requirements).

Wangkaya collects personal data from you in several different ways, depending on how you interact with our platform. The following are the categories of data we collect:

We do not collect sensitive data categories such as health information, religious beliefs, or political views unless explicitly required for a specific service purpose and with your clear consent.

Personal data collected by wangkaya used solely for the following purposes. We will not use your data for any other purpose without informing you in advance:

• Account management: To create, verify, and manage your wangkaya account, including the login process, two-factor authentication, and password recovery.
• Transaction processing: To process deposits and withdrawals via your preferred Malaysian payment method, such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks). All amounts are processed in Malaysian Ringgit (MYR).
• Identity verification (KYC): To comply with legal requirements relating to age verification (18 years and above) and anti-money laundering prevention.
• Service delivery: To enable you to access and use all features of the wangkaya platform, including Sports Betting, casino games, virtual sports, and live matches.
• Customer support: To handle complaints, enquiries, and assistance requests submitted to the wangkaya support team.
• Security and fraud prevention: To detect and prevent fraudulent activity, multiple account usage, bonus abuse, and other security threats to the platform and its members.
• Responsible gambling: To monitor gameplay patterns for the purpose of identifying potential gambling issues and providing appropriate support to members who may need it.
• Marketing communications: To send promotional offers, new bonus information, and platform updates — only to members who have agreed to receive such communications.
• Legal compliance: To comply with applicable legal obligations, regulations, and directives from relevant authorities.

Wangkaya processes your personal data on one or more valid legal bases. Depending on the situation, the applicable basis is as follows:

• Contract performance: Processing necessary to fulfil the service contract between you and wangkaya — such as processing deposits, executing bets, and processing your withdrawal of winnings.
• Legal obligations: Processing necessary to comply with applicable laws, including identity verification requirements, anti-money laundering regulations, and tax compliance.
• Legitimate interests: Processing for the purposes of fraud prevention, system security, and service improvement, where these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and other optional purposes, wangkaya requires your explicit consent, which may be withdrawn at any time.

Wangkaya does not sell, rent, or disclose your personal data to third parties for their own independent marketing purposes. Limited data sharing occurs only in the following situations:

• Payment service providers: Malaysian payment gateway and eWallet providers that process your deposit and withdrawal transactions. They are bound by confidentiality agreements and receive only the data necessary to process the relevant transactions.
• Game software providers: Licensed game providers that supply casino software, virtual sports, and other games on the wangkaya platform. Any data shared is kept to a minimum and limited strictly to technical requirements.
• Technical service providers: Companies that assist us with IT infrastructure, cybersecurity, platform analytics, and technical support — all bound by data processing agreements that comply with Malaysia's PDPA.
• Legal authorities: When required by law, court order, or a lawful directive from a Malaysian government authority, wangkaya will disclose the necessary data. To the extent permitted by law, we will notify you of any such disclosure.
• Business transfers: In the event that wangkaya is involved in a merger, acquisition, or asset transfer, user data may be transferred to a successor entity bound by a privacy policy at least equivalent to this one.

Protecting your personal data from unauthorised access, loss, or disclosure is a core technical priority wangkaya. The security measures we have implemented include:

• SSL 256-bit Encryption: All data transmitted between your web browser and wangkaya's servers is encrypted using SSL 256-bit technology — the same standard used by Malaysia's leading banking institutions.
• Stored data encryption: Sensitive data such as financial information and identity verification documents are stored in encrypted form within our systems.
• Internal access controls: Access to user data within wangkaya's internal systems is restricted based on the principle of least privilege — only staff with a legitimate work need may access user data.
• Continuous security monitoring: Our systems are continuously monitored to detect and respond to any threats or suspicious activity.
• Two-factor authentication: wangkaya provides and encourages the use of two-factor authentication (2FA) on all accounts for an additional layer of security.
• Staff training: All wangkaya staff who handle user data undergo ongoing data protection training.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. In the event of a data breach that may affect your data, wangkaya will notify you and the relevant authorities in accordance with applicable legal obligations.

Wangkaya retains your personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law. Our general data retention principles are as follows:

• Active account: Account data is retained for as long as your account remains active on the wangkaya platform.
• After account closure: Financial transaction records and KYC documents are retained for a minimum of five years following account closure to meet applicable anti-money laundering and tax reporting legal requirements.
• Technical logs: Access logs and technical data are typically deleted after 90 days unless required for an ongoing security investigation or litigation.
• Support communications: Communication records with the customer support team are retained for three years for reference and service improvement purposes.
• Marketing data: Data used for marketing communications is deleted once you withdraw your consent, or within 30 days of your deletion request.

As a member wangkaya and the owner of your personal data, you hold the following rights, which you may exercise by contacting us at support@wangkaya.xyz:

Platform wangkaya uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The types of cookies we use are:

• Essential cookies: Required for core platform functionality such as login sessions and security. These cookies cannot be disabled as they are critical to the operation of the wangkaya platform.
• Performance cookies: Collects anonymous information about how visitors use the platform — such as the most frequently visited pages and time spent. This data is used solely for platform improvement.
• Functional cookies: Remembering your preferences, such as language settings and display options, to deliver a more personalised experience while you use wangkaya.
• Analytics cookies: Helps us understand platform usage patterns in aggregate and anonymised form, to make better product development decisions.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the wangkaya platform for you. For more information, refer to the documentation of your web browser.

Platform wangkaya is intended solely for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we determine that personal data has been collected from a minor, the account in question will be closed immediately and the associated data will be deleted within a reasonable timeframe, subject to any applicable legal retention obligations.

Wangkaya reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or other relevant operational factors. You will be notified of any material amendments through:

• Email to the address registered to your wangkaya account; or
• A clear notice on the wangkaya platform's main page; or
• Both of the above methods for amendments deemed significant.

Continued use of the platform wangkaya after the amendment's effective date will be considered your acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 8. The date of the last amendment to this policy is 1 January 2026.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by wangkaya, please contact us through the following channels: