Privacy Policy

Introduction

Wawaslot ("we", "us", "our") operates the online gaming platform accessible at wawaslot.cam (the "Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

We take data privacy seriously. This Policy is designed to help you understand what personal information Wawaslot collects, the reasons for collecting it, how it is used, who it may be shared with, and the steps we take to keep it safe. It also explains your rights in relation to your personal data and how to exercise them.

This Privacy Policy applies to all users of the Wawaslot Platform — including registered account holders and non-registered visitors — regardless of the device or browser used to access the Site. It should be read in conjunction with our Terms & Conditions.

By registering an account or continuing to use the Wawaslot Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including names, email addresses, identification numbers, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or erasure.
• "Data Controller" means Wawaslot, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of Wawaslot under our instructions and data processing agreements.
• "Data Subject" means the individual whose Personal Data is being processed — in this context, you, the Platform user or registered player.
• "Consent" means a freely given, specific, informed, and unambiguous indication by you that you agree to the processing of your Personal Data for a stated purpose.
• "Cookie" means a small text file placed on your device by a website to store information about your session, preferences, or browsing activity.
• "KYC" means Know Your Customer, the identity verification process we are required to conduct to comply with anti-money laundering regulations.

Personal Data We Collect

Wawaslot collects the following categories of personal data from players and site visitors:

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification — minimum 21 years)
• Gender (optional, collected during KYC)
• Nationality and country of residence
• Malaysian National Identity Card (MyKad) number or passport number

3.2 Contact Data

• Email address (used for account communication and notifications)
• Malaysian mobile telephone number
• Residential address (collected for KYC address verification)

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• Payment method verification details (e.g., the name on your Touch 'n Go eWallet, Boost account, Maybank, CIMB Clicks, or Public Bank account — held for KYC, not for storing full payment credentials)
• Account balance history and transaction logs
• Bonus and promotional activity records

3.4 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, pages visited, and features used on the Platform
• Login timestamps and session activity logs
• Cookie and tracking technology data (detailed in Section 10)

3.5 Communications Data

• Records of live chat conversations and email correspondence with our support team
• Survey responses and feedback submissions
• Promotional communication preferences (opt-in or opt-out status)

3.6 KYC Documentation

• Scanned or photographed copies of identity documents (MyKad, passport)
• Proof of address documents (utility bills, bank statements dated within 3 months)
• Payment method ownership evidence (screenshots or statements as required)

How We Collect Your Data

Wawaslot collects personal data through the following channels:

• Direct input: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions.
• Automated collection: Data collected automatically when you access or browse the Platform, including technical data collected via cookies, web beacons, and server logs.
• Third-party sources: Data received from payment processors, identity verification providers, and fraud detection partners to supplement or verify the information you have provided to us.
• Public sources: In limited circumstances related to AML compliance, we may cross-reference data against publicly available information or sanctions lists.

Purposes of Data Processing

We process your personal data for the following specific purposes:

Legal Basis for Processing

Wawaslot processes your personal data on the following legal grounds:

• Performance of a contract: Processing necessary to provide the gaming services you have registered for, including account management, deposits, withdrawals, and game access.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and financial reporting obligations.
• Legitimate interests: Processing for purposes such as fraud prevention, security monitoring, platform analytics, and improving our services — where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, promotional notifications, and non-essential cookies — which requires your explicit, opt-in consent and which you may withdraw at any time.

Data Sharing & Disclosure

Wawaslot does not sell, rent, or trade your personal data to third parties. We may, however, share your data with the following categories of recipients under strictly controlled conditions:

7.1 Service Providers and Data Processors

We engage third-party companies to assist us in operating the Platform and providing services to you. These include payment processors (who handle MYR transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, and Public Bank), identity verification providers, cloud hosting services, customer support tools, and fraud detection platforms. All such providers are bound by data processing agreements requiring them to process your data only on our instructions and to implement appropriate security measures.

7.2 Game Content Providers

Some of our casino game providers may receive limited technical session data (such as anonymised player identifiers and game logs) in order to deliver their games through our Platform. These providers are contractually required to handle such data in accordance with applicable data protection standards.

7.3 Legal and Regulatory Authorities

We may be required to disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities if we receive a lawful request, court order, or are otherwise legally compelled to do so. We will notify you of such disclosure where we are legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving Wawaslot, your personal data may be transferred to the acquiring entity. We will notify affected users via the email address associated with their account prior to any such transfer taking effect, and users will retain the right to request deletion of their data.

International Data Transfers

As an internationally licensed online gaming platform, Wawaslot may transfer your personal data to servers or service providers located outside of Malaysia. Such transfers may be necessary to provide you with our services — for example, cloud hosting infrastructure, game server networks, or payment processing systems operated from other jurisdictions.

Where personal data is transferred internationally, Wawaslot ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses with service providers that meet internationally recognised standards. We do not transfer your data to jurisdictions that lack adequate data protection frameworks without implementing compensating controls.

Data Retention

We retain your personal data for as long as your account remains active and for a reasonable period thereafter to fulfil the purposes outlined in this Policy, comply with legal and regulatory obligations, and resolve any outstanding disputes or claims.

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, as required for financial compliance and audit purposes.
• KYC documentation: Retained for the duration of the account relationship and at least 5 years post-closure.
• Support communications: Retained for up to 2 years following the resolution of the relevant query.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to legal retention requirements.
• Technical and usage logs: Retained for a rolling period of up to 12 months for security and fraud analysis purposes.

Following the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of your identity.

Cookies & Tracking Technologies

Wawaslot uses cookies and similar tracking technologies to operate the Platform, improve user experience, and understand how our site is used. A cookie is a small text file placed on your device when you visit a website.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies that keep you logged in during your visit and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings or last-visited game category, to personalise your experience. These do not track activity outside of Wawaslot.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform — such as page visit counts, navigation paths, and session durations. This helps us identify areas for improvement.
• Marketing Cookies: Used only with your consent to track engagement with promotional content and measure the effectiveness of our campaigns. You may opt out at any time.

10.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse all cookies, accept only certain types, or be notified when a cookie is set. Please note that disabling strictly necessary cookies will affect the functionality of the Platform and may prevent you from logging in or completing transactions.

Detailed browser-level cookie management instructions are available in the help documentation of all major browsers (Chrome, Firefox, Safari, Edge). Wawaslot does not control or take responsibility for cookies set by third-party game providers operating within our Platform.

Your Rights as a Data Subject

As a data subject, you have the following rights in relation to the personal data that Wawaslot holds about you. These rights are not absolute in all circumstances — some may be limited by our legal obligations or legitimate interests — but we are committed to facilitating their exercise wherever possible.