This page explains how wja88 handles personal data for players in Malaysia. It covers what we record when you register, how wallet and payment records are kept, who else sees them, and the requests you can make at any time. It applies to this website and to the wja88 app.
What We Record When You Play
The amount of data we hold is small and tied to running an account. Nothing is collected simply because it may be useful later; each field connects to a payment, a verification check or a support request you have already made.
Account details
When you register we store the name, date of birth, mobile number and address you give us. Passwords are kept in hashed form, so no member of staff at wja88 can read yours. If you verify later with a National ID Card, passport or driving licence, that document image sits in a folder with restricted access.
Payment records
Every deposit and withdrawal is stored against your wja88 account with the amount, the method used and the reference number returned by the payment partner. We never receive your Touch ’n Go PIN, your online banking password or a full card number.
Play and device data
We log which games you open, your stake sizes and how long a session lasts, because bonus wagering and disputes are settled from those records. Device data covers IP address, browser type and app version, which helps us flag unusual logins and keep the lobby loading quickly on mobile data.
Why We Need Each Piece
Age and identity checks keep minors off the platform, which is a condition of operating in Malaysia. Payment records let us match your money to the right wallet, and any bonus you claim is worked out from your own staking history rather than a guess.
What we do not do
wja88 does not sell player data and does not rent mobile numbers to outside marketers. Service messages about deposits, withdrawals and security arrive as part of having an account. Promotions reach you only if you opted in, and you can switch them off in account settings or by asking live chat.
Improving the lobby
Aggregated figures tell us which titles load slowly or fail on a weak connection. Those reports are counts and averages; they are not used to build an advertising profile, and they are never combined with your payment history.
How Wallet and Payment Data Moves
Deposits from RM20 appear in about 1 minute, and withdrawals from RM40 normally reach you in about 23 minutes. To make that happen we send the payment partner only what is needed to move the money: your account name, the amount and a transaction reference.
| Method | Data shared | Typical confirmation |
|---|---|---|
| Touch ’n Go eWallet | Registered mobile number, amount, reference | Deposit 1 min, withdrawal 23 min |
| DuitNow | DuitNow ID, amount, reference | Deposit 1 min, withdrawal 23 min |
| FPX Online Banking | Bank name, amount, reference | Deposit 1 min, withdrawal 23 min |
| Bank Transfer | Account name, account number, amount | Deposit 1 min, withdrawal 23 min |
Partners do not receive your wja88 password, your game history or your marketing preferences. Before your first withdrawal we ask for one identity document and review it within 24 hours; the check happens once per account.
Cookies That Keep You Signed In
A session cookie keeps you signed in while you move between the lobby and a game, and a security cookie remembers the device you normally play from. Preference cookies hold your language and display choices so the pages do not reset on every visit.
Analytics cookies count visits in aggregate. You can block or delete cookies from your browser settings; wja88 still loads, but you will sign in again each time and some table settings will reset. Nothing in a cookie gives us access to files on your phone.
When We Share With Others
Sharing happens with three groups only. Game studios including Playtech, Pragmatic Play, FA Chai, CQ9, Ezugi and KA Gaming receive a session token when you launch a title, not your name or wallet balance. Payment partners receive the transaction data listed in the table above.
The third group is authorities and auditors, who receive records only when a lawful written request is made. Every disclosure is logged, and the entry records who asked, what was supplied and the reason given.
Ask Us for a Copy or a Correction
You can request a copy of your data, a correction to a misspelled name, or removal from marketing lists. The steps below keep the request traceable from the first message.
-
Open live chat
24/7 Live Chat is the quickest route. Say you are making a data request and give your wja88 username.
-
Confirm it is you
Answer the security questions on the account, or upload the ID document you verified with.
-
State what you need
A copy, a correction or a marketing opt-out. Mention a date range if you want one specific period.
-
Keep the reference
Your request is logged with a reference number and answered in the same chat thread.
Closing your account works the same way: tell live chat, then confirm in writing. New deposits, bonuses and promotions stop immediately, and the records we must hold for tax and dispute handling stay on file until that period ends.
Keeping Your Account Locked Down
Data moving between your device and wja88 is protected with TLS, and account records are encrypted at rest. Access inside the company is set by role: support can see your contact details and transaction list, but not your password or the full image of your ID.
Your habits matter as much as our systems. Use a password you do not reuse, keep your phone locked, and tell live chat at once if a login alert looks wrong. Withdrawals can be tied to your registered mobile number for an extra check.
We Do Not Open Accounts for Minors
wja88 is for players aged 18 and above. If a review finds that an account belongs to someone under 18, it is suspended, stakes are returned where that is possible, and the details are removed from active systems. A parent who believes a minor has registered can raise it through live chat without the minor making the request.
Deleting What We No Longer Need
Records stay while your account is open, then for as long as the law requires. The pattern is set out below.
| Record | How long it stays | Why |
|---|---|---|
| Identity documents | Until verification is complete, then the period required by anti-money-laundering rules | Age and identity checks |
| Deposit and withdrawal history | While the account is open, then the tax and audit period | Matching payments, tax |
| Play and stake logs | Long enough to settle bonus wagering and disputes | Bonus terms, complaints |
| Marketing preferences | Until you change them, plus a short do-not-contact record | Honouring opt-outs |
Anything not listed in that table is deleted once the purpose for holding it ends.
If This Page Changes
When wja88 updates this policy the revised version appears here with a new date at the bottom. A substantial change, such as a new category of recipient, is announced in your account inbox or through live chat before it applies. Continuing to use your account after that point means you accept the revised policy.
Getting an Answer From Live Chat
Privacy questions run through 24/7 Live Chat so there is one place to follow them up. Keep the reference number you are given. For deposit limits, a time-out or self-exclusion, the responsible gaming page sets out the steps, and you can apply limits yourself inside your wja88 account.
Last updated: 10 November 2026. Read the terms and conditions alongside this policy, or head back to the homepage to look around first. Ready to play? Create a wja88 account.