Wabo22 Privacy Policy – Data Protection You Deserve

This Privacy Policy ("Policy") is published by wabo22 ("we", "Platform", or "wabo22") and describes how we collect, use, disclose, store, and protect your personal information when you register for and use the services provided through the wabo22 platform at wabo22.best.

Wabo22 operates as an online gaming entertainment platform designed specifically for users in Malaysia. All personal data processing we carry out is subject to Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to ensuring that every member's privacy rights are respected and protected at all times.

This Policy applies to all individuals who use the wabo22 platform — including website visitors, registered members, and active users who make deposits and play games. It covers all access methods, including web browsers on laptops, Android and iOS mobile devices, and any other interfaces we may introduce in the future.

Wabo22 collects various types of personal data depending on how you interact with the platform. Below is a full summary of the data we may collect:

A. Data You Provide Directly

• Registration information: Malaysian phone number, password (stored in encrypted form that is unreadable by our team).
• Profile information: username, language preference, and other account settings you have configured yourself.
• Identity verification documents: a copy of your MyKad or passport, requested only when required for the KYC (Know Your Customer) process for withdrawals exceeding a specified amount.
• Payment information: payment method details used, including e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or FPX information linked to Malaysian bank accounts (Maybank2u, CIMB Clicks) — stored as encrypted tokens.
• Support communications: live chat conversation records and emails with the wabo22 support team.

B. Automatically Collected Data

• Log and technical data: IP address, device type, operating system, browser type and version.
• Platform usage data: games played, session duration, login and logout times, deposit and withdrawal records.
• Approximate location data: state and city based on IP address — we do not collect the precise GPS location of your device.
• Cookie data: session information and preferences stored in your browser to enhance your experience on the platform.

Personal data collected by wabo22 is used exclusively for legitimate and specific purposes. We do not process your data for any purpose unrelated to the provision of this platform's services. The following is a complete list of data use purposes at wabo22:

• Account management: creating, verifying, and maintaining your member account on the wabo22 platform.
• Financial transaction processing: processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks, as well as withdrawals to the same payment methods.
• Provision of gaming services: allows you to access and play slots, live casino, baccarat, blackjack, jackpot, and all other games on the platform.
• Security and fraud prevention: detect and investigate suspicious activity, fraud attempts, multiple account usage, and any violations of the terms of service.
• Customer support: providing technical assistance and support services in Bahasa Malaysia and English via live chat and email.
• Legal compliance: fulfilling applicable legal obligations, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Service improvement: analysing platform usage patterns on an aggregated, anonymised basis to improve the platform's design, performance, and content.
• Service communications: sending important notifications related to your account, policy changes, or security matters via your registered phone number.

Wabo22 does not sell, rent, or disclose members' personal data to third parties for their own commercial purposes. However, there are limited circumstances where we need to share data with certain parties to keep the platform running properly:

Parties That May Receive Your Data (Under Strict Limitations)

• Payment processing providers: Malaysian local payment service providers authorized by Bank Negara Malaysia, solely for the purpose of processing deposit and withdrawal transactions. Data shared is limited to the minimum required for processing only.
• Licensed game provider: Companies such as Pragmatic Play, Microgaming, NetEnt, and PG Soft receive anonymised player IDs and the session data required to run their games. They do not receive your full identity information.
• Technical infrastructure provider: Cloud and hosting service providers that store our platform data are bound by strict confidentiality agreements and security standards set by wabo22.
• Legal authorities: Where required by Malaysian law or a valid court order, wabo22 will disclose the necessary data to the relevant law enforcement authorities.

Wabo22 continually invests in security infrastructure to protect members' personal data from unauthorised access, loss, misuse, or accidental disclosure. The following are the key security measures we have implemented:

• Data encryption in transit: All data transmitted between your browser or app and wabo22's servers is protected by TLS 1.3 with 256-bit encryption — no data is ever sent in plain text over the internet.
• Data encryption at rest: Sensitive data, including payment details and verification information, is stored in encrypted form in our databases. Passwords are never stored as plain text — only as irreversible hashes.
• Layered access controls: Access to member data within wabo22 is restricted to staff who require it to carry out their responsibilities. All access is logged and monitored.
• 24/7 security monitoring: An intrusion detection system (IDS) operates around the clock to identify and respond to any security threats in real time.
• Regular security audits: wabo22 conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Incident response plan: wabo22 has a clearly defined incident response procedure in the event of a security breach, including notification procedures for affected members.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a wabo22 member have the following rights regarding your personal data. wabo22 is committed to respecting and facilitating the exercise of all these rights:

• Right of Access — You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within 14 business days.
• Right to Rectification — If any of your personal data is inaccurate or incomplete, you have the right to request a correction. Most profile information can be updated directly from your wabo22 account settings.
• Right to Erasure — You may request the deletion of your personal data in certain circumstances — for example, if your account is closed and the data is no longer needed for its original purpose. Requests are subject to any data retention obligations required by law.
• Right to Object to Processing — You may object to the processing of your data for direct marketing purposes at any time. Once an objection is received, your data will no longer be used for that purpose.
• Data Portability Rights — You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) so it can be transferred to another platform should you wish to do so.
• Right to Restrict Processing — In certain circumstances, such as during a complaint investigation, you may request that we restrict how we use your data while awaiting a resolution.

To exercise any of the rights above, please submit a written request to support@wabo22.best stating the specific right you wish to exercise and your account details. We will process your request within 14 business days and inform you of the action taken.

Wabo22 uses cookies and similar tracking technologies to improve the user experience, maintain session security, and understand how the platform is used in aggregate. Below is an explanation of the types of cookies we use:

• Session cookies: Temporary cookies that are automatically deleted when you close your browser. These cookies are needed to maintain your login session so you don't have to log in again each time you navigate to a different page on the wabo22 platform.
• Functional cookies: Cookies that store your preferences — such as language, display settings, and other interface configurations — so the wabo22 platform behaves the way you have set it up.
• Analytics cookies: We use aggregated, non-personally identifiable analytics data to understand which pages are visited most often, common navigation paths, and areas of the platform that need improvement.
• Security cookies: Cookies that help us detect and prevent fraudulent activity, such as suspicious login attempts or CSRF (Cross-Site Request Forgery) attacks.

You can configure your web browser to reject or delete cookies. However, please be aware that disabling essential cookies (particularly session and security cookies) may affect the normal functioning of the wabo22 platform, and you may be unable to log in or use the service properly.

Wabo22 retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required under applicable Malaysian law. The following are data retention guidelines for key categories:

• Active account data: Retained for the duration of your active account plus 7 years following account closure, in accordance with Bank Negara Malaysia's financial record-keeping and AML retention requirements.
• Financial transaction records: All deposit and withdrawal records are retained for a minimum of 7 years from the transaction date, in compliance with the Income Tax Act and applicable AML requirements.
• Security logs: Access logs and security activity are retained for 12 months for digital forensics purposes, should they be required in any security incident investigation.
• Customer support records: Conversation records and support tickets are retained for 3 years from the date of the last interaction.
• Aggregated analytics data: Aggregated usage data that contains no personally identifiable information may be retained indefinitely for service improvement purposes.

Once the retention period expires and there is no legal requirement to retain the data, wabo22 will securely destroy or anonymize it in accordance with established procedures.

The wabo22 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data belonging to an individual under the age of 18 has been collected without proper age verification, we will take the following steps immediately:

• Suspending the relevant account pending investigation.
• Deleting all personal data associated with the individual from our systems.
• Returning any eligible balance to the verified legal guardian of the individual once identity has been confirmed.
• Notifying the relevant authorities where required by law.

If you have any questions, concerns, or wish to exercise your privacy rights in relation to this Privacy Policy, please contact wabo22's Data Protection Officer through the following channels:

• Email: support@wabo22.best (please state "Privacy Inquiry" in the subject line)
• Live Chat: Available 24/7, directly through the wabo22 platform

For formal requests regarding your privacy rights (data access, correction, or deletion), please submit a written request to the email address above, including the following information:

• Your wabo22 registered username or phone number.
• The type of right you wish to exercise.
• Specific details of your request.

We will acknowledge receipt of your request within 3 business days and complete the processing within 14 business days. If your request requires additional time to process, we will notify you in advance along with the reason.