wira44 Privacy Policy

wira44 (referred to in this Policy as "wira44", "we", "us", or "our") is the data controller responsible for the personal data collected through the wira44 Platform at wira44.co. As data controller, wira44 determines the purposes for which and the means by which personal data is processed.

This Privacy Policy applies to all personal data collected from players, prospective players, and website visitors who interact with the wira44 Platform, including through account registration, gaming activity, payment transactions, customer support, and general website browsing. It applies regardless of whether you access the Platform from Malaysia or any other permitted location.

By registering for a wira44 account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

wira44 collects the following categories of personal data in connection with the operation of its Platform and the provision of Gaming Services:

wira44 does not collect special categories of sensitive personal data (such as data concerning racial origin, religious beliefs, health conditions, or political opinions) in the ordinary course of its operations, except where required for responsible gaming assessments or where you voluntarily disclose such information in the course of support interactions.

wira44 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or filling out any other form on the Platform.
• Automated collection: Technical data collected automatically when you access the wira44 Platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party providers: Identity verification and KYC data received from third-party verification service providers; payment data received from payment processors (including eWallet providers such as Touch 'n Go and Boost); fraud and risk data received from third-party fraud prevention services.
• Gaming activity: Data generated through your use of Gaming Services, including bet placement, game outcomes, account transactions, and session activity, which is automatically recorded by the Platform's gaming systems.
• Public sources: In limited circumstances, wira44 may cross-reference information against publicly available sources to verify account information or to fulfil regulatory compliance obligations.

wira44 processes personal data only where a valid legal basis exists. The applicable legal bases for our data processing activities are:

• Performance of a contract: Processing necessary to register your account, provide Gaming Services, process transactions, and manage your account relationship with wira44.
• Compliance with a legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, age verification obligations, and regulatory reporting requirements imposed by our licensing authority.
• Legitimate interests: Processing carried out in furtherance of wira44's legitimate business interests, including fraud detection and prevention, Platform security, responsible gaming monitoring, and improving the quality of our services, provided such interests are not overridden by your rights and interests.
• Consent: Where we rely on consent as the legal basis for processing (e.g., for certain marketing communications), you may withdraw your consent at any time by contacting our support team or using the opt-out mechanism in the relevant communication.

wira44 uses the personal data it collects for the following purposes:

• To register and maintain your wira44 account, including verifying your identity and age (21+);
• To provide and improve Gaming Services, process bets, calculate winnings, and manage your account balance;
• To process deposits and withdrawals via your selected payment method (including Touch 'n Go eWallet, Boost, Maybank, CIMB, and Public Bank);
• To comply with our AML, KYC, and other regulatory obligations under our international gaming licence;
• To detect, investigate, and prevent fraud, collusion, and other prohibited conduct on the Platform;
• To monitor for responsible gaming concerns and to provide you with responsible gaming tools and interventions where appropriate;
• To communicate with you regarding your account, transactions, promotions, and material changes to our Terms or this Privacy Policy;
• To provide customer support and resolve disputes;
• To personalise your experience on the wira44 Platform where you have consented to such personalisation;
• To analyse Platform usage and improve our services, subject to applicable data minimisation principles.

wira44 will not use your personal data for purposes that are incompatible with the purposes for which it was originally collected, except with your consent or as permitted by applicable law.

6.1 Service Providers. wira44 shares personal data with third-party service providers who assist in operating the Platform, processing payments, conducting KYC verification, providing fraud prevention services, and delivering customer support. These providers are contractually bound to process data only in accordance with wira44's instructions and applicable data protection requirements.

6.2 Payment Processors. Financial data necessary to process your deposits and withdrawals is shared with the relevant payment processors and financial institutions, including eWallet providers (Touch 'n Go, Boost), banks (Maybank, CIMB, Public Bank), and card schemes. These entities process your financial data under their own privacy policies and applicable financial regulations.

6.3 Regulatory and Legal Disclosure. wira44 may disclose personal data to its licensing authority, law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with an investigation into suspected illegal activity (including but not limited to money laundering, fraud, or underage gambling).

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of wira44's business, personal data may be transferred to the relevant acquirer or successor entity, subject to that entity assuming the data protection obligations set out in this Policy.

6.5 No Sale of Data. wira44 does not sell, rent, or otherwise transfer your personal data to third parties for their independent marketing or commercial purposes.

wira44 uses cookies and similar tracking technologies on the Platform to enhance functionality, analyse usage, and support security and fraud prevention measures. The main categories of cookies used are:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled without impairing core Platform functionality.
• Functional cookies: Used to remember your preferences (such as language and display settings) to improve your experience on return visits.
• Analytics cookies: Used to collect aggregated statistical information about how visitors use the Platform. This data is used to improve Platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You may configure your browser settings to decline non-essential cookies. However, please note that disabling certain cookies may affect the functionality of the wira44 Platform. wira44 does not currently use third-party advertising or behavioural tracking cookies.

wira44 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, tax, accounting, or reporting requirements. The following general retention principles apply:

• Account data: Retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, as required by applicable AML and gaming regulations.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of the transaction or gaming session, consistent with regulatory record-keeping requirements under our licensing conditions.
• KYC documentation: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Support communications: Retained for a minimum of two (2) years from the date of the communication, or longer where the communication relates to an unresolved dispute or regulatory matter.
• Technical and usage data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised or deleted.

Where retention beyond these periods is required for legal proceedings, regulatory investigations, or legitimate dispute resolution purposes, data will be retained until those matters are concluded.

wira44 implements appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the wira44 Platform;
• Encryption of sensitive data fields (including passwords, which are stored as salted hashes and never in plaintext) in our databases;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments, vulnerability testing, and penetration testing of Platform infrastructure;
• Monitoring systems for detecting and responding to security incidents;
• Staff training on data protection obligations and information security practices.

Notwithstanding these measures, no transmission over the internet and no data storage system is completely secure. wira44 cannot guarantee the absolute security of your personal data. You should take appropriate steps to protect your account credentials and notify wira44 immediately if you suspect unauthorised access to your account.

Subject to applicable law and any overriding regulatory obligations, you have the following rights with respect to your personal data held by wira44:

• Right of access: You may request a copy of the personal data wira44 holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or completed.
• Right to erasure: You may request deletion of your personal data, subject to wira44's legal obligation to retain certain records under applicable AML and gaming regulations.
• Right to restriction: You may request that wira44 restrict processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your personal data.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact the wira44 support team via 24/7 live chat or by email at [email protected]. We will respond to all valid requests within thirty (30) days. Complex or multiple requests may require an extended response period, of which you will be notified.

The wira44 Platform is strictly restricted to individuals aged 21 years and older. wira44 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the wira44 account registration process and is enforced prior to any gaming activity being permitted.

If wira44 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, such data will be deleted and the associated account will be immediately suspended. Parents and guardians who believe that a minor has accessed the wira44 Platform or provided personal data to wira44 should contact our support team immediately.

wira44 may transfer personal data to, and process personal data in, countries other than your country of residence. This may occur, for example, where wira44's data hosting infrastructure, KYC verification providers, or gaming software providers are located in other jurisdictions.

Where personal data is transferred to countries that may not provide an equivalent level of data protection to that applicable in your jurisdiction, wira44 will implement appropriate safeguards, such as data processing agreements incorporating standard contractual clauses, to ensure that your personal data continues to be protected to the standard required by this Privacy Policy.

wira44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered account holders via email to the address on record, with a minimum notice period of fourteen (14) days prior to the changes taking effect.

The current effective version of this Privacy Policy is always available at wira44.co/privacy-policy. The date of last revision is displayed at the top of this document. Your continued use of the wira44 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or wira44's handling of your personal data, please contact us through the following channels:

• Live Chat: 24/7 live chat support is available directly through the wira44 Platform and is the fastest way to raise a data privacy matter.
• Email: [email protected] — responses within 1 hour during standard operating hours; data rights requests responded to within 30 days.
• Languages: English support available at all times.

wira44 takes all data privacy enquiries seriously and will acknowledge your request promptly. For requests relating to the exercise of your data rights under Section 10, please include your registered account email address and a clear description of the right you wish to exercise to help us process your request efficiently.