Privacy Policy — waze2 Platform

Introduction

This Privacy Policy ("Policy") is published by waze2, the operator of the online gaming platform accessible at waze2.cam ("Platform", "we", "us", "our"). This Policy applies to all personal data collected, processed, stored, or otherwise handled in connection with your use of the waze2 Platform, including account registration, gameplay, financial transactions, customer support interactions, and any marketing communications.

waze2 is committed to processing personal data responsibly, lawfully, and transparently. This Policy has been prepared in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework and equivalent standards applicable in the jurisdictions in which we operate.

By registering an Account on the waze2 Platform or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree to this Policy, you should discontinue use of the Platform and close your Account.

Definitions

Throughout this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, device identifiers, and behavioural data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, alteration, combination, restriction, erasure, or destruction.
• "Data Controller" means waze2, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of waze2 pursuant to a written data processing agreement.
• "Data Subject" means the natural person (i.e., you, the Player) to whom personal data relates.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC Documents" means identity verification materials submitted by you for the purpose of satisfying our Know Your Customer obligations, including government-issued identification, proof of address, and biometric selfie photographs.
• "Cookies" means small data files placed on your device by the Platform for session management, analytics, and personalisation purposes.

Personal Data We Collect

waze2 collects personal data from you directly (when you register, transact, or contact us), automatically (through your use of the Platform), and in some cases from third parties (such as payment processors or fraud prevention services). The categories of personal data we collect are set out in the table below.

Data Processing & Use

waze2 uses the personal data we collect for the following specific purposes. We do not use your personal data for any purpose that is incompatible with those stated below without obtaining your prior consent.

4.1 — Account Management and Service Delivery

We process your identity and contact data to create and manage your Account, authenticate your login sessions, process deposits and withdrawals in MYR via supported Malaysian payment methods (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20), and provide you with access to all Platform features.

4.2 — Identity Verification (KYC) and AML Compliance

We are obligated by our international gaming licence to verify the identity of all Players prior to processing withdrawals and to implement Anti-Money Laundering (AML) controls. KYC Documents are processed solely for these purposes and retained in accordance with our document retention schedule in Section 8.

4.3 — Fraud Detection and Platform Security

Technical data, financial transaction records, and gameplay data are analysed to detect and prevent fraudulent activity, bonus abuse, money laundering, collusion, and unauthorised account access. This processing is necessary for the legitimate interests of waze2 and the protection of all Platform users.

4.4 — Responsible Gambling Monitoring

Gameplay data and account activity are monitored to identify patterns associated with problem gambling behaviour. Where such patterns are detected, our responsible gambling team may proactively reach out to you with information and support. This processing is conducted in your interest and in fulfilment of our responsible gambling obligations. For more information, please visit our Responsible Gambling page.

4.5 — Customer Support

Communications data from your interactions with our support team is retained to resolve disputes, investigate complaints, and improve our service quality. Support records are retained for a period of three (3) years from the date of the interaction.

4.6 — Marketing Communications

Where you have provided consent, we may use your contact data to send you promotional communications regarding waze2 bonuses, new game releases, sports betting promotions, and special offers. You may withdraw consent to marketing communications at any time through your Account settings or by contacting support.

4.7 — Platform Improvement and Analytics

Aggregated and anonymised technical and gameplay data is used to analyse Platform performance, improve the user experience, and develop new features. This processing does not identify you as an individual.

Legal Basis for Processing

Where applicable data protection law requires us to identify a legal basis for processing personal data, we rely on the following bases:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the waze2 Terms & Conditions, including Account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, AML reporting, and age verification obligations under our gaming licence.
• Legitimate Interests: Processing carried out in the legitimate interests of waze2, including fraud prevention, platform security, responsible gambling monitoring, and service analytics, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your explicit, freely given consent, including for marketing communications and optional personalisation features. You may withdraw consent at any time without detriment to your Account.

Data Sharing & Disclosure

waze2 does not sell, rent, or trade your personal data to any third party. We may share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 — Service Providers and Data Processors

We engage trusted third-party service providers to assist with specific platform functions, including payment processing (e-wallet operators, FPX gateway providers, cryptocurrency processors), identity verification services, customer support software providers, cloud hosting and infrastructure providers, and fraud detection services. All such providers are bound by data processing agreements requiring them to process personal data only on our instructions and in accordance with applicable data protection law.

6.2 — Regulatory and Law Enforcement Disclosures

We may disclose personal data where required to do so by applicable law, court order, or regulatory directive, including disclosures to financial intelligence units, law enforcement agencies, or gaming regulatory authorities. We will disclose only the minimum information required to satisfy the legal obligation.

6.3 — Corporate Transactions

In the event of a merger, acquisition, reorganisation, or sale of assets involving waze2, personal data held by the Platform may be transferred to the acquiring entity. We will provide notice of any such transfer and the new entity will be bound by this Privacy Policy or a policy offering equivalent protections.

Cookies & Tracking Technologies

waze2 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the Platform, maintain your session, and improve your user experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences such as language settings, display configuration, and responsible gambling tool settings to personalise your experience.
• Analytics Cookies: Used to collect aggregated information about how users interact with the Platform, allowing us to measure performance and identify areas for improvement. This data is not used to identify individual users.
• Security and Fraud Prevention Cookies: Help us detect and prevent automated attacks, unusual login behaviour, and other security threats against Account holders.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use core Platform features including login and financial transactions.

Data Retention

waze2 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with applicable legal obligations, and resolve disputes. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with AML regulatory requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, and longer where required by applicable law or regulatory directive.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Gameplay and Session Data: Retained for a period of two (2) years from the date of the session, after which it may be retained in anonymised, aggregated form for analytical purposes indefinitely.
• Marketing Preferences: Retained until you withdraw consent or close your Account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Your Rights as a Data Subject

Subject to applicable law and certain exceptions, you hold the following rights in relation to the personal data waze2 holds about you. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verified data subject requests within thirty (30) days of receipt.

Data Security

waze2 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and our servers.
• AES-256 encryption for personal data and KYC documents stored at rest.
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis.
• Multi-factor authentication for all internal system access by waze2 staff.
• Regular security audits, vulnerability assessments, and penetration testing conducted by qualified third-party security professionals.
• Incident response procedures to manage and report data breaches in accordance with applicable regulatory requirements.

Whilst we take all reasonable precautions to protect your personal data, no system is completely immune to security threats. You also play an important role in protecting your data by using a strong, unique password for your waze2 Account, enabling any available multi-factor authentication features, and keeping your login credentials confidential.

International Data Transfers

As an international online gaming platform, waze2 may transfer personal data to and process it in countries outside Malaysia, including the jurisdiction in which we are licensed. Some of these countries may not offer the same level of data protection as Malaysia under the PDPA.

Where we transfer personal data internationally, we ensure appropriate safeguards are in place, which may include standard contractual clauses binding the recipient to data protection standards equivalent to those required by applicable law, or processing in jurisdictions that have been assessed to offer adequate protection.

By using the waze2 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

Children & Minors

waze2 is strictly an adult gaming platform. We do not knowingly collect personal data from any person under the age of 21 years. Our registration process includes age declaration requirements and KYC verification to enforce this restriction.

If we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated Account, freeze any balances pending review, and securely delete the personal data of the minor in question. Any winnings generated by an underage Account will be voided.

Parents and legal guardians who believe their child may have accessed or registered on the Platform should contact our support team immediately so we can take prompt corrective action.

Third-Party Links & Services

The waze2 Platform may contain references to third-party services such as payment processors, responsible gambling resources, and regulatory bodies. These third parties operate under their own privacy policies and data practices, for which waze2 bears no responsibility.

We encourage you to review the privacy policies of any third-party services you access in connection with your use of the Platform. waze2 is not responsible for the privacy practices or content of third-party websites or services.

Policy Amendments

waze2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our Platform operations. Material changes will be communicated to registered Account holders via email notification or a prominent in-Platform notice prior to the effective date.

The current version of this Policy, including its effective date, is always accessible on this page. We recommend that you review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way waze2 processes your personal data, please contact our Data & Privacy team through the following channels:

• Live Chat: Available 24/7 directly within your waze2 Account dashboard — the fastest channel for urgent privacy queries.
• Email: [email protected] — Please include "Privacy Request" in your subject line.

For data subject rights requests (access, erasure, portability, etc.), please submit your request through the live chat or email channels above. We will verify your identity before processing any request and will respond within thirty (30) days. In complex cases, we may extend this period by up to an additional sixty (60) days, in which case we will notify you accordingly.

For responsible gambling concerns, player protection resources, and self-exclusion requests, please visit our dedicated Responsible Gambling page.