WangKaya takes your privacy seriously. This document explains exactly what data we collect, how we use it, who can access it, and what rights you have as a member of our platform. Your privacy is not just a promise — it is a responsibility we uphold.
The core principles that shape how WangKaya manages and protects each member's personal data
WangKaya only collects data that is genuinely necessary to deliver our services safely and smoothly. We do not collect irrelevant information simply because it is available — every piece of data we hold has a clear and justified purpose.
All WangKaya member data is protected using 256-bit SSL encryption, the highest industry standard. Data is stored on secure servers safeguarded by firewalls, 24/7 monitoring, and strict access controls — the same level of protection used in banking systems.
WangKaya has never and will never sell, rent, or supply members' personal data to any third party for marketing purposes. Your data belongs to you — it is not a commercial asset for us to exploit. This is a commitment we will not compromise on.
Only WangKaya staff with a legitimate operational need may access members' personal data — and every instance of access is logged and monitored. Our staff undergo mandatory privacy training and are bound by strict confidentiality agreements before being permitted to handle any data.
You have the right to access your data, request corrections, ask for deletion, or withdraw consent at any time. WangKaya takes every privacy rights request seriously and handles it within a reasonable timeframe — typically within 7 business days.
WangKaya's Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you are protected under Malaysian law regarding the use of your personal data, and WangKaya is legally obligated to meet all requirements set out under the Act.
This Privacy Policy explains how WangKaya collects, uses, stores, and protects your personal information when you use our platform at wangkaya.click. By registering or using the WangKaya platform, you agree to the data practices described in this document. Please read it carefully and contact us if you have any questions.
WangKaya collects members' personal information through several channels — during registration, during platform use, and through communications with our support team. We only collect data that is necessary to provide you with a safe, efficient, and responsible service.
WangKaya collects three main categories of data: personal identification information (name, IC number, date of birth, phone number, email), financial information (bank account or e-wallet numbers such as Touch 'n Go, GrabPay, DuitNow, FPX) for payment purposes only, and platform usage data (gaming history, transaction records, login activity, and device information).
Registration information: When you register a WangKaya account, we collect your full name as shown on your Malaysian identity card, an active Malaysian phone number, email address, date of birth for age verification, and a password of your choosing. This information is used to create and maintain your account, verify your identity, and confirm that you meet the minimum age requirement of 18 years.
Financial information: To process deposits and withdrawals in MYR, WangKaya needs to collect your payment method details — whether that is your Touch 'n Go e-wallet number, GrabPay account, bank account number for DuitNow, or FPX via Maybank2u or CIMB Clicks. This information is used solely to process your financial transactions and is not stored in any form that could be used for unauthorised transactions.
Technical & usage data: WangKaya automatically collects technical information when you use the platform — including IP address, device type and web browser, operating system, access date and time, pages visited, and session duration. This data helps us identify suspicious activity, prevent fraud, and improve the overall user experience on our platform.
| Data Type | Example | Primary Purpose |
|---|---|---|
| Identity Verification | Name, phone number, email | Account verification & communications |
| Finance | Bank account number, e-wallet | Processing RM deposits & withdrawals |
| Platform Usage | Game history, login records | Security & improvements |
| Technical | IP address, device type | Fraud prevention |
| Communications | Support chat records | Service quality |
WangKaya uses the personal data we collect solely for legitimate, necessary, and pre-defined purposes. We will not use your data for any other purpose without first informing you and, where required, obtaining your consent again.
Account management and security: The primary purpose of using your data is to operate your WangKaya account securely — this includes processing registration, verifying your identity at login, sending important account notifications, and ensuring no one else can access your account without authorisation. The security of your account is our number one priority when it comes to data use.
Financial transaction processing: Your financial information is used solely to process deposits and withdrawals in Malaysian Ringgit (RM) via your chosen Malaysian payment method — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX. We do not store credit or debit card details directly on our servers.
Legal compliance and fraud prevention: WangKaya is required under Malaysian law to retain financial transaction records for audit and anti-money laundering (AML) compliance purposes. Usage and technical data are also used to identify and prevent fraudulent activity, duplicate accounts, and platform abuse.
WangKaya processes your personal data on three valid legal bases under Malaysia's PDPA: your consent provided during registration, contract performance the service between you and WangKaya, as well as legitimate interests WangKaya to operate safely and in compliance with the law.
WangKaya does not sell, rent, or supply members' personal data to any third party for marketing or commercial purposes. This is a core commitment that is non-negotiable. That said, there are limited situations in which WangKaya needs to share data with specific parties in order to operate our services.
Payment service providers: To process MYR deposits and withdrawals, WangKaya is required to share the necessary transaction details with your chosen payment service provider — such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, or CIMB Clicks. Any data shared is kept to a minimum and limited strictly to what is needed to complete the transaction. All payment providers we work with maintain their own privacy policies and are responsible for their own legal compliance.
Game software provider: WangKaya partners with internationally licensed game software providers to deliver slots, live baccarat, Sports Betting, and other game categories. These providers may receive limited data related to your game sessions for technical and game integrity audit purposes. Such data does not include detailed personally identifiable information.
WangKaya may be required to disclose members' personal information to Malaysian authorities — including law enforcement agencies, Bank Negara Malaysia, or the Companies Commission of Malaysia — if lawfully ordered to do so. In such circumstances, WangKaya will disclose only the minimum information required and will endeavour to notify you where permitted by law.
In all data-sharing situations, WangKaya ensures that third parties receiving member data are bound by adequate confidentiality obligations and use that data only for the permitted purpose. We do not allow any third party to use WangKaya member data for their own purposes.
WangKaya makes serious investments in security infrastructure to protect the personal data of our 500,000+ members. The security measures we employ are on par with the standards used in banking and digital finance — because we believe Malaysian players' data deserves that level of protection.
256-bit SSL Encryption: All communications between your device and WangKaya's servers are secured with Transport Layer Security (TLS) encryption using 256-bit keys. This means that even if someone were to intercept your connection, the data they obtain would be unreadable without the corresponding decryption key. You can verify this protection by checking the padlock icon in your browser's address bar while using WangKaya.
Server infrastructure security: WangKaya's servers are protected by multi-layered firewalls, an intrusion detection system (IDS) active around the clock, and continuous security monitoring. Physical access to our data centres is restricted to authorised personnel only, with all access logged and audited regularly. Data backups are performed on a regular basis and stored at separate, secure locations.
WangKaya's data protection operates across three layers: network layer (SSL/TLS, firewall, VPN), application layer (two-factor authentication, login rate limiting, anomaly detection) and data layer (encryption at-rest for sensitive data, role-based access controls). All three layers work simultaneously to provide comprehensive protection.
User account security: Beyond the technical measures we put in place, your account security also depends on your own actions. WangKaya recommends using a strong, unique password (not used on any other platform), enabling two-factor authentication where available, never sharing your login details with anyone, logging out from shared devices, and contacting WangKaya support immediately if you suspect any unauthorised activity on your account.
Security incident response: In the event of any data breach that may affect members' personal data, WangKaya is committed to notifying affected members within a reasonable timeframe and taking immediate action to contain and remediate the situation. We will also report such incidents to the relevant authorities in accordance with Malaysian legal requirements.
WangKaya uses cookies and similar tracking technologies to enhance your experience on our platform. This section explains in detail the types of cookies we use, their purposes, and the choices available to you regarding cookies.
What are cookies? Cookies are small text files stored on your device (computer, smartphone, or tablet) when you visit a website. They allow the WangKaya platform to "remember" your preferences and settings between sessions, so you do not need to reconfigure them each time you log in.
You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies will affect the functionality of the WangKaya platform — you may be unable to log in or use certain features correctly. Analytics and performance cookies can be disabled without affecting the platform's core functionality.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and WangKaya's Privacy Policy, you have strong rights regarding your personal data. WangKaya is committed to respecting and facilitating the exercise of these rights without unnecessary obstacles.
To exercise any of the privacy rights above, contact the WangKaya Data Privacy Officer by email at support@wangkaya.click with the subject line "Data Privacy Request", or via the in-platform live chat. Please provide your account number and the nature of your request. WangKaya will process your request within 14 business days and inform you of the outcome.
WangKaya retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. We have a clear data retention policy to ensure data is not kept longer than it should be.
Active account data: While your WangKaya account remains active, we retain all data associated with it, including registration details, game history, and transaction records. This data is necessary to deliver our services to you and to fulfil our ongoing legal obligations.
Data after account closure: After your account is closed, WangKaya will retain minimum financial transaction records and identification information for the period required under applicable Malaysian law — typically seven years for financial records, in compliance with anti-money laundering and tax regulations. After this period, the data will be permanently deleted or anonymised.
Communication & support data: All communications with the WangKaya support team — including live chat logs, emails, and WhatsApp messages — are retained for three years for quality control, dispute resolution, and staff training purposes. Records are permanently deleted on a rolling basis once this period has elapsed.
When personal data is no longer required in a form that can identify an individual, WangKaya will anonymise that data — removing all identifying information — rather than deleting it entirely. Fully anonymised data may be retained indefinitely for analytics and platform improvement purposes, as it no longer constitutes personal data.
WangKaya's Privacy Policy may be updated from time to time to reflect changes in our data practices, relevant legislation, or platform improvements. WangKaya is committed to notifying you of any material changes to this policy in a reasonable manner.
Notice of changes: When WangKaya makes material changes to this Privacy Policy, we will display a prominent notice on the platform's main page and send a notification to all registered members via email at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision.
Minor changes: Minor changes that do not materially affect your privacy rights — such as spelling corrections, language clarifications, or the addition of information that does not alter how your data is used — may be made without formal notice. The "Updated" date at the top of this document will always reflect the latest version.
Continued use as consent: Continued use of the WangKaya platform after any updated Privacy Policy takes effect will be considered your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account before the effective date and request deletion of your data.
For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by WangKaya, please reach out to us via: Email: support@wangkaya.click (subject: "Data Privacy Enquiry") or 24/7 Live Chat within the WangKaya platform. All privacy enquiries will be responded to within 2 business days, and data rights requests within 14 business days. We communicate in Bahasa Melayu.
This Privacy Policy document is the authoritative version for Malaysian members. It was last updated in January 2026 and supersedes all previous versions. WangKaya recommends that you bookmark this page and review it periodically to stay informed about how your personal data is handled.
Frequently asked questions about privacy and data protection on the WangKaya platform
This Privacy Policy should be read alongside WangKaya's Terms & Conditions, which together set out the full agreement between you and our platform. Both documents form the foundation of a transparent and accountable relationship between WangKaya and every member. If you have any privacy-related questions not addressed here, our team is available in Bahasa Melayu 24 hours a day.
Your personal data is protected to the highest industry standards at WangKaya. Over 500,000 Malaysian players have trusted our platform for a safe, fair, and personalised betting experience. Register for free today and see the difference for yourself.
Licensed & secure platform. Data protected by 256-bit SSL. Minimum age 18.