Privacy Policy of wj33

wj33 operates as an international online casino and sports betting platform accessible at https://wj33.cam. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, prospective users, and visitors to our website.

This Policy applies to all personal data processed by wj33 in connection with the delivery of our Services, including live casino games, sports betting markets (covering Liga Super Malaysia, EPL, UFC, and other events), VIP programmes, promotional campaigns, payment processing, and customer support operations.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that directly or indirectly identifies a natural person, including name, identification number, contact details, financial information, or location data.
• "Processing" — any operation performed on personal data, whether automated or manual, including collection, recording, storage, retrieval, alteration, disclosure, or erasure.
• "Data Controller" — the party that determines the purposes and means of processing personal data. In respect of this Policy, wj33 is the Data Controller for all player personal data.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a written agreement and in accordance with the Controller's instructions.
• "Data Subject" — the natural person to whom the personal data relates, i.e., the registered player or website visitor.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for one or more stated purposes.
• "KYC" — Know Your Customer procedures used to verify the identity, age, and legitimacy of players before processing withdrawals or granting full platform access.
• "Special Category Data" — categories of personal data that warrant heightened protection, such as data relating to health, political opinions, or criminal convictions.

wj33 collects personal data that is necessary and proportionate to the delivery of our Services. The categories of data we collect are set out in the table below:

wj33 does not intentionally collect Special Category Data (such as health data, biometric data, or data relating to criminal convictions) except where this is strictly required for responsible gambling monitoring or by applicable regulatory requirements, in which case such processing will be carried out under a valid legal basis and with appropriate safeguards.

We collect personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC, contacting support, claiming a promotion, or submitting a complaint.
• Automated Technical Collection: Data collected automatically when you access the platform, including IP address, device fingerprint, session data, and cookie-based identifiers.
• Payment Processors: Financial data received from payment service providers such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank in connection with deposit and withdrawal transactions.
• Cryptocurrency Networks: Transaction data visible on public blockchain networks when you deposit or withdraw using BTC, ETH, USDT, or BNB.
• Identity Verification Providers: Verification data returned from third-party KYC service providers used to authenticate identity documents.
• Analytics Tools: Aggregated and anonymised behavioural data from platform analytics tools used to improve user experience and platform performance.
• Third-Party Sources: In limited circumstances, we may receive data from fraud prevention agencies, AML screening services, or publicly available sources to verify the accuracy of information you have provided.

wj33 processes personal data under one or more of the following lawful bases, in accordance with applicable international data protection standards:

• Contractual Necessity: Processing required to perform the contract between wj33 and the Player — including account management, game delivery, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification requirements, and regulatory record-keeping mandates.
• Legitimate Interests: Processing carried out for wj33's legitimate business interests, including fraud prevention, platform security, and responsible gambling monitoring, provided such interests are not overridden by the Player's rights.
• Consent: Processing based on the Player's freely given and informed consent, such as the sending of marketing communications. Consent may be withdrawn at any time without detriment to the Player's account status.

We process your personal data for the following specific purposes:

• Creating and maintaining your wj33 player account, including authentication and security
• Processing deposits and withdrawals in MYR and supported cryptocurrencies, and preventing financial fraud
• Verifying your identity and age (21+) in compliance with international KYC standards
• Delivering live casino games, slots, sports betting markets, and associated platform features
• Administering VIP tier programmes, bonuses, promotions (including birthday bonuses and referal rewards), and loyalty schemes
• Providing 24/7 customer support via live chat and email
• Monitoring player activity for responsible gambling purposes, including identifying potentially problematic gambling behaviour and facilitating self-exclusion
• Conducting anti-money laundering screening and complying with applicable international financial crime prevention obligations
• Ensuring platform security, detecting and preventing unauthorised access, fraud, and bot activity
• Improving platform performance, user experience, and product development through aggregated analytics
• Sending transactional communications (account notifications, security alerts, payment confirmations)
• Sending promotional communications where you have provided consent
• Maintaining records required by applicable licensing conditions and legal obligations

wj33 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following circumstances and only to the extent necessary:

• Payment Service Providers: Financial institutions and e-wallet operators (including FPX, DuitNow, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong) to facilitate deposits and withdrawals.
• KYC and Identity Verification Partners: Third-party identity verification and document authentication services engaged to fulfil our KYC obligations.
• AML and Fraud Prevention Services: Screening services used to identify sanctioned individuals, politically exposed persons, or fraud risk indicators.
• Game Content Providers: Certified casino game and sports data providers who may receive session-level data necessary to deliver their game content and validate outcomes.
• Cloud Infrastructure and Technology Providers: Hosting, database, and security infrastructure vendors who process data on our behalf as Data Processors under contractual obligations.
• Legal and Regulatory Authorities: Where required by a court order, lawful government request, or applicable regulation we may disclose personal data to competent authorities.
• Professional Advisers: Legal, accounting, or audit professionals where necessary for the conduct of wj33's lawful business operations, subject to professional confidentiality obligations.

All third-party Data Processors engaged by wj33 are contractually bound to process personal data only in accordance with wj33's instructions, this Policy, and applicable data protection law.

As an internationally operated platform, personal data collected by wj33 may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, wj33 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data protection clauses between wj33 and the receiving party equivalent to applicable international standards
• Transfers only to recipients in jurisdictions that provide an adequate level of data protection assessed by wj33
• Technical and organisational security measures appropriate to the risk associated with the transfer

By using the wj33 platform, you acknowledge and consent to the transfer of your personal data to the jurisdictions in which wj33 and its service providers operate.

wj33 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention standards apply:

• Active Account Data: Retained for the duration of the player relationship and for a minimum of five (5) years after account closure, in compliance with AML record-keeping standards.
• KYC Documents: Retained for a minimum of five (5) years following the end of the player relationship, or longer if required by applicable law.
• Transaction Records: Financial transaction data retained for a minimum of seven (7) years to satisfy financial record-keeping obligations.
• Support Communications: Customer service correspondence retained for three (3) years after the matter is resolved, unless required longer for dispute or regulatory purposes.
• Marketing Consent Records: Consent records retained for as long as you remain subscribed to marketing communications, plus a period of three (3) years thereafter.
• Technical and Usage Logs: Generally anonymised or deleted within 12 months unless required for security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents reconstruction.

wj33 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security architecture includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the wj33 platform is encrypted using industry-standard TLS protocols, protecting financial and personal data in transit.
• Two-Factor Authentication (2FA): Optional but strongly recommended for all player accounts. Available via authenticator app or SMS verification.
• Segregated Player Funds: Player account balances are held in accounts separate from wj33's operational funds, protecting player money from platform-level risks.
• Access Controls: Strict role-based access controls ensure that internal personnel can only access personal data to the extent required by their specific role.
• DoS and Intrusion Protection: Enterprise-grade network security and real-time threat monitoring protects the platform from external attacks.
• Regular Security Audits: Internal and third-party security assessments are conducted periodically to identify and address potential vulnerabilities.

wj33 uses cookies and similar tracking technologies to enhance your platform experience, maintain session security, and collect analytical data. The categories of cookies we use are described below:

• Strictly Necessary Cookies: Essential to the operation of the platform. These cookies enable authentication, session management, security checks, and load balancing. They cannot be disabled without disrupting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and table layout choices to personalise your experience.
• Analytical Cookies: Collect aggregated data on how players interact with the platform — including pages visited, games played, and session duration — to help us improve performance and user experience.
• Security Cookies: Used to detect fraudulent behaviour, identify bots, and enforce access controls.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use core platform features. wj33 does not serve third-party advertising cookies or share behavioural data with external advertising networks.

Subject to applicable international data protection standards and any overiding legal obligations, you have the following rights in respect of your personal data held by wj33:

To exercise any of the above rights, please submit a request in writing to [email protected] with the subject line "Data Subject Request" and include your registered username and a description of your request. wj33 will respond within 30 calendar days. Where a request is complex or numerous, the response period may be extended by a further 60 days with prior notification.

The wj33 platform is strictly intended for individuals aged21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is enforced at account registration and during KYC processes.

If wj33 discovers that personal data has been collected from a person under the age of 21, the account will be suspended immediately, all associated funds will be held pending investigation, and the data will be deleted (subject to any mandatory record-keeping obligations under applicable law). The matter may also be referred to relevant authorities where appropriate.

Parents or guardians who believe a minor may have accessed the wj33 platform should contact our support team immediately at [email protected].

wj33 serves a significant number of players based in Malaysia, including players Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and other cities. This section provides additional context relevant to Malaysian players regarding the processing of their personal data.

14.1 Personal Data Protection Act 2010(PDPA)

Malaysia's Personal Data Protection Act 2010 (PDPA) governs the processing of personal data in commercial transactions within Malaysia. While wj33 operates under international licensing and may not be directly subject to the Malaysian PDPA, we are committed to processing personal data of Malaysian users in a manner consistent with the principles of the PDPA, including the seven data protection principles: General, Notice & Choice, Disclosure Security, Retention Data Integrity, and Access principles.

14.2 Financial Data and Malaysian Payment Providers

When you make deposits or withdrawals using Malaysian payment methods — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong Bank — your transaction data is shared with the relevant payment provider solely for the purpose of completing the transaction. Each of these providers operates under their own privacy policies, which we encourage you to review.

14.3 Legal Responsibility Reminder

wj33 reserves the right to update, amend, or replace this Privacy Policy at any time. Where amendments are material — for example, changes to the categories of data collected, new sharing arrangements, or changes to your rights — we will notify you by email to the address registered on your account and/or by displaying a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the wj33 platform following any amendment constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should discontinue use of the platform and contact us to request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by wj33, please contact our support and data protection team using the details below. All privacy-related correspondence should reference "Data Privacy" in the subject line to ensure prompt routing.

• Support Email: [email protected] — Privacy and data subject requests are acknowledged within 48 hours and fully addressed within 30 calendar days.
• Live Chat: Available 24 hours a day, 7 days a week including Malaysian public holidays. For privacy requests requiring documentation, email is the preferred channel.
• Subject Line for Privacy Requests: Use "Data Subject Request — [Your Username]" to ensure your request is prioritised by the data protection team.

For concerns about our responsible gambling practices and player protection tools, please visit our dedicatedResponsible Gambling page. For general platform questions, visit our FAQ.