Privacy Policy

WangKaya ("we", "us", "our") operates the online casino and sports betting platform accessible at https://wangkaya.cam (the "Platform"). We take the privacy and data security of our players seriously, and this Privacy Policy has been prepared to provide full transparency regarding how we handle the personal information of individuals who interact with our Platform.

This Privacy Policy applies to all personal data collected from users ("you", "your") who register an account, access the Platform, place bets, make deposits or withdrawals, contact our support team, or otherwise interact with our Services — whether you are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or anywhere else in Malaysia.

By using the WangKaya Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, processing, and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must discontinue your use of the Platform immediately.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform and form part of the agreement between you and WangKaya.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

WangKaya collects personal data in the categories described below. We collect only such data as is necessary and proportionate to the purposes for which it is required.

3.1 Registration & Identity Data

When you create a WangKaya account, we collect:

• Full legal name;
• Date of birth (to verify you are aged 21 or above);
• Residential address (including postcode and state);
• Email address;
• Mobile phone number;
• Chosen username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations, we may request:

• Government-issued photo identification (e.g., Malaysian MyKad, passport);
• Proof of current residential address (e.g., utility bill, bank statement dated within three months);
• Proof of payment method ownership (e.g., screenshot of e-wallet account registered in your name).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR and timestamps;
• Payment method details (e.g., bank account name, last four digits of account, e-wallet identifier for Touch 'n Go, Boost, GrabPay, DuitNow, FPX);
• Transaction history and Account balance records.

3.4 Gaming & Betting Activity Data

• Game session logs, bet history, wager amounts, and outcomes;
• Sports betting market selections (e.g., EPL, Liga Super Malaysia, UFC);
• Responsible gambling settings including any deposit limits or self-exclusion requests you have submitted.

3.5 Technical & Device Data

• IP address and approximate geographic location;
• Browser type and version;
• Device type, operating system, and screen resolution;
• Session duration and navigation behaviour on the Platform.

3.6 Communications Data

• Records of live chat interactions with our customer support team;
• Email correspondence relating to your Account or the Services;
• Feedback or complaints submitted through the Platform.

WangKaya collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with any feature on the Platform;
• Automatically: When you access or use the Platform, our systems automatically collect technical data including IP address, device information, browser data, and session activity via cookies and similar tracking technologies;
• From third-party service providers: We may receive data from our payment processing partners (e.g., FPX operators, DuitNow, Touch 'n Go eWallet) to verify transaction authenticity and detect fraudulent activity;
• From identity verification services: Where required by law or our internal KYC procedures, we may cross-reference identity information with third-party verification providers to confirm the accuracy of the data you have provided.

WangKaya processes personal data only where a valid lawful basis exists. The primary bases on which we rely are as follows:

WangKaya uses the personal data we collect for the following purposes:

• Account creation and management: To register your Account, verify your identity and age, and maintain your Account in good standing;
• Delivery of Services: To process your deposits and withdrawals in MYR, record your betting activity, and provide access to our games library including slots, live casino, sports betting, and lottery products;
• KYC and compliance: To satisfy our legal obligations relating to anti-money laundering, counter-terrorist financing, age verification, and identity fraud prevention;
• Customer support: To respond to your enquiries, investigate complaints, and resolve account issues through our 24/7 live chat service;
• Security and fraud prevention: To monitor for suspicious account activity, detect unauthorised access, and protect the integrity of the Platform;
• Responsible gambling: To apply and manage deposit limits, cooling-off periods, and self-exclusion requests submitted by you, and to identify patterns of play that may indicate problem gambling behaviour;
• Platform improvement: To analyse aggregated usage data, identify technical issues, and improve the performance and user experience of the Platform;
• Legal proceedings: To exercise, establish, or defend legal claims where necessary.

WangKaya does not sell, rent, or trade your personal data. We may disclose personal data to the following categories of third parties strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment service providers: Including FPX operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, Visa, Mastercard, and cryptocurrency payment processors, solely to facilitate the processing of your deposits and withdrawals;
• Identity verification providers: Third-party KYC service providers engaged to verify the authenticity of identity documents submitted by Users in connection with their Accounts;
• Game content providers: Licensed game studios and providers whose content is made available through the WangKaya Platform, to the limited extent necessary to manage game sessions and ensure fair play;
• IT infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who support the technical operation of the Platform under strict data processing agreements;
• Regulatory and law enforcement authorities: We may disclose personal data to relevant governmental or law enforcement bodies where required to do so by applicable law, court order, or regulatory direction — including in connection with our AML obligations;
• Professional advisors: Legal counsel, auditors, and compliance consultants retained by WangKaya, where access to personal data is necessary for the provision of their professional services.

Any third party that processes personal data on behalf of WangKaya is required to do so under a written data processing agreement that restricts their use of the data to the specific purposes for which it was shared.

WangKaya uses cookies and similar tracking technologies to operate the Platform, maintain session state, and analyse usage patterns. The categories of cookies we use are as follows:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. WangKaya does not use third-party advertising cookies or retargeting pixels.

WangKaya retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention principles apply:

• Active Account data: Retained for the duration of your Account's active status plus a period of five (5) years following Account closure, to support our legal and compliance obligations including AML record-keeping requirements;
• KYC and identity documents: Retained for a minimum of five (5) years following the date of Account closure, in accordance with applicable regulatory guidance;
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the relevant transaction in accordance with applicable financial record-keeping obligations;
• Customer support communications: Retained for two (2) years from the date of the relevant interaction, unless a longer period is required in connection with an open dispute or legal claim;
• Technical and device data: Typically retained in anonymised or aggregated form for up to twelve (12) months for platform analytics purposes.

Upon the expiry of the relevant retention period, personal data will be securely deleted or anonymised in accordance with our internal data destruction procedures.

WangKaya implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the WangKaya Platform;
• Encrypted storage of sensitive personal data including passwords (stored as salted cryptographic hashes) and identity documents;
• Two-factor authentication (2FA) available to all Account holders as an additional layer of access control;
• Access controls restricting internal access to personal data on a strict need-to-know basis, with all access logged and audited;
• Regular security assessments and penetration testing conducted by qualified cybersecurity professionals;
• Incident response procedures designed to detect, contain, and remediate data security incidents in a timely manner.

In the event of a data security incident that is likely to result in a risk to your rights or interests, WangKaya will notify affected Users and relevant regulatory authorities in accordance with applicable legal requirements.

As a data subject, you have the following rights in respect of the personal data that WangKaya holds about you. To exercise any of these rights, please contact our customer support team via live chat or email as described in Section 15 of this Policy.

We aim to respond to all valid data rights requests within 30 calendar days of receipt. Where a request is particularly complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

Please note that certain rights are subject to limitations. For example, we may be unable to delete data that we are legally required to retain for AML, KYC, or financial record-keeping purposes.

The WangKaya Platform and Services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21.

As part of our registration and KYC process, WangKaya takes positive steps to verify the age of all Account applicants. Any Account found to have been registered by a person under the age of 21 will be immediately suspended. Any deposits associated with such an account will be returned to the originating payment method, and no winnings will be paid out.

The WangKaya Platform may from time to time contain informational references to or descriptions of third-party services (such as payment providers or game developers). This Privacy Policy does not apply to any third-party websites, applications, or services that may be operated independently of WangKaya.

WangKaya accepts no responsibility or liability for the privacy practices of any third-party service provider or platform. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the WangKaya Platform.

WangKaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features and Services offered on the Platform. When material changes are made, we will provide notice to registered Users by email or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised to reflect the date on which the most recent version of this Privacy Policy came into effect. We encourage you to review this Privacy Policy periodically to stay informed about how WangKaya protects your personal data.

Your continued use of the WangKaya Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the manner in which WangKaya processes your personal data, please contact our Data Privacy team through the following channels:

When submitting a data rights request or privacy complaint, please include your Account username, a clear description of your request or concern, and any relevant dates or transaction references. This will allow us to locate your data promptly and respond to your enquiry as efficiently as possible. We aim to acknowledge all privacy-related communications within 48 hours of receipt.