Wabo My Privacy Policy — Personal Data Protection for Malaysian Players

Wabo My Entertainment Sdn Bhd ("wabo my", "we") takes our responsibility to protect the privacy and personal data security of all players and users on our platform seriously. This Privacy Policy has been drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data protection.

This Privacy Policy applies to all personal data we collect through the wabomy.com website, the Wabo My mobile app, interactions with our customer support team, and any written or electronic communications between you and Wabo My.

We believe privacy is a fundamental right. That is why we built our systems with a privacy-by-design approach — meaning data protection is embedded into every aspect of our platform from the ground up, not added as an afterthought. Every decision we make about your data is guided by your best interests and security.

Wabo my collects personal data strictly as needed to deliver platform services securely and efficiently. We do not collect data beyond what our operations require. The following are the categories of data we may collect:

We may also receive your personal data from third-party sources such as identity verification service providers, fraud prevention agencies, and marketing partners that you have authorised to share your data.

The personal data we collect is used solely for legitimate and specific purposes. We do not use your data for anything unrelated to providing wabo my's services. The following are the primary purposes for which your data is used:

• Account Management: To create, verify, and manage your player account, including any required KYC processes.
• Transaction Processing: Processes deposits via Touch 'n Go, GrabPay, DuitNow, FPX and other Malaysian payment methods, as well as withdrawals to your account.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and the use of multiple accounts.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to players.
• Responsible Gaming: Monitoring play patterns to identify players who may need responsible gambling support.
• Platform Enhancements: To analyse usage patterns and improve game quality, interface design, and overall user experience.
• Marketing Communications: Sending promotional offers, bonuses and the latest updates — only where you have given your consent.
• Legal Compliance: Fulfilling regulatory obligations, complying with court orders, and responding to lawful requests from authorities.

Wabo my does not sell, rent or trade your personal data to third parties for their own marketing purposes. We only share data in limited, controlled circumstances as follows:

• Service Providers: Licensed payment processors (Touch 'n Go, GrabPay, DuitNow, FPX), cloud hosting providers that have signed data confidentiality agreements, and verified gaming software providers.
• Identity Verification Partners: Licensed third-party KYC agencies engaged to verify player identities for legal compliance purposes.
• Regulatory Authorities: We may be required to disclose your data to law enforcement agencies or regulatory authorities when mandated by Malaysian law.
• Business Transfers: In the event that Wabo My is involved in any merger, acquisition, or sale of assets, player data may be transferred as part of that transaction, with appropriate notice provided to you.

Every third party that receives your data from Wabo My is required to comply with data protection standards equal to or higher than our own requirements. Legally binding data processing agreements are signed with all our service provider partners.

Wabo My continuously invests in the latest security infrastructure to ensure your personal data is protected against unauthorised access, disclosure, alteration, or destruction. Key security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your device and wabo my servers is encrypted using the latest TLS 1.3 protocol.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an added layer of security on their accounts.
• 24/7 Monitoring: Our automated security monitoring system operates around the clock to detect any unusual activity.
• Regular Penetration Testing: Independent security audits and penetration testing are conducted regularly by certified third-party security experts.
• Access Controls: Access to players' personal data within wabo my is restricted to staff who require that information to carry out their duties only.

While we take all reasonable steps to protect your data, no data transmission over the internet can be guaranteed to be 100% secure. You are also responsible for keeping your account password secure and not sharing your login credentials with anyone.

Wabo my uses cookies and similar tracking technologies to enhance the user experience, analyse website traffic and personalise content. Cookies are small text files stored on your device when you visit our platform.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the functionality of the wabo my platform. Cookie settings can also be configured via the cookie consent banner displayed on your first visit to our platform.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by wabo my. We are committed to respecting and facilitating these rights:

Wabo My retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by Malaysian law. Retention periods vary by data category:

• Active Account Data: Retained for the duration your account is active, plus the mandatory period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial legislation and anti-money laundering (AML) requirements.
• KYC and Identity Verification Records: Retained for a minimum of 5 years following account closure.
• Support Communication Logs: Retained for 3 years for reference and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.
• Security and Technical Logs: Retained for 12 months for fraud detection and security analysis purposes.

Once the retention period expires, your personal data will be securely deleted or converted into an anonymised format that cannot be linked back to your identity. Our data deletion procedures comply with NIST SP 800-88 standards for secure media sanitisation.

Wabo my reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle personal data. Any updates will be published on this page with a new version number and effective date.

For material changes that significantly affect your rights, we will provide advance notice via the email address registered to your account or through an in-platform notification at least 14 days before the changes take effect. Continued use of the wabo my platform after the effective date constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding how Wabo My handles your personal data, we encourage you to reach out to us directly first so we can resolve the matter promptly.

• Data Protection Officer (DPO): privacy@wabomy.com
• General Support: support@wabomy.com
• Live Chat: Available 24/7 via the chat icon on the wabo my platform
• Response Time: Under 2 minutes (live chat), under 24 hours (standard email), 5 business days (formal PDPA enquiries)

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner under the Ministry of Communications and Digital (KKD) through the designated official channels.