Wira44 Privacy Policy — Malaysia User Data Security

1Introduction and Scope of Privacy Policy

This Privacy Policy is published by wira44 ("Platform", "we") and applies to all users who access or use the wira44 online betting platform, whether via the official website or mobile app. By registering or using our platform, you agree to the data collection and usage practices described in this document.

Wira44 is committed to protecting user privacy and complying with all applicable legal requirements in Malaysia, including the Personal Data Protection Act 2010 (PDPA). This policy outlines the types of data we collect, why we need it, how we use it, and the rights you hold regarding that data.

2Types of Personal Data Collected

Wira44 collects the personal data necessary to provide a safe, efficient service that meets legal requirements. The data we collect can be grouped into the following categories:

3How We Use Your Personal Data

All data collected by wira44 serves a specific and legitimate purpose. We do not use your data for any purpose not stated in this policy. The primary purposes of data use are as follows:

• Identity verification and KYC — to verify that you are a real individual eligible to use the platform in accordance with age restriction terms and legal requirements.
• Financial transaction processing — to process deposits, verify withdrawals, and maintain accurate account records for every user.
• Account security and fraud detection — to identify suspicious activity, unauthorised access attempts, and abnormal betting patterns.
• Service communications — to send important notifications relating to your account, transactions, platform updates, and relevant security information.
• Legal compliance — to fulfil the reporting and compliance obligations set by the relevant authorities, including anti-money laundering (AML) requirements.
• Platform enhancements — to analyse usage patterns in aggregated and anonymised form for the purpose of improving the platform's interface, performance, and security.
• Responsible gaming — to monitor wagering patterns and provide timely alerts or recommendations to users showing signs of problem gambling.

4Data Sharing and Disclosure

Wira44 does not sell, rent, or trade users' personal data to third parties for marketing purposes. However, there are limited situations where we need to share data with certain parties for legitimate operational purposes:

• Payment service providers — banks and selected payment processors receive only the minimum transaction data required to process your deposits and withdrawals.
• Game software providers — third-party game providers receive anonymous session identifiers for game processing purposes, without your full name or banking details.
• Legal authorities — in circumstances where we are compelled by a court order or directive from a lawful authority to disclose certain information.
• Security consultants and auditors — third parties engaged to conduct security audits or system assessments may access data in a controlled environment subject to strict confidentiality agreements.

5Security and Data Protection

Wira44 implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. The security measures we employ include:

• 256-bit SSL encryption for all communications between your device and our servers.
• Hashed password storage uses advanced algorithms — your original password is never stored in any of our databases.
• Two-factor authentication (2FA) available for all accounts as an additional layer of security.
• Firewall and intrusion detection systems that automatically monitors incoming traffic 24/7.
• Role-based internal access controls that ensures only staff who need to can access sensitive user data.
• Regular security audits by independent third parties to assess system strength and identify potential vulnerabilities.

6Cookies and Tracking Technologies

Wira44 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The types of cookies we use:

• Essential cookies — required for core platform functions such as maintaining your login session. These cookies cannot be disabled without affecting your use of the platform.
• Performance cookies — collects information about how users interact with the platform in aggregated and anonymised form, to help us improve performance.
• Functional cookies — stores your preferences such as preferred language and display settings to deliver a more personalised experience.
• Security cookies — used to detect suspicious sessions and protect your account from CSRF attacks and similar threats.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect platform functionality. wira44 does not use third-party cookies for advertising purposes.

7Your Rights Under the PDPA

As a wira44 user subject to Malaysia's PDPA, you have the following rights regarding your personal data:

8Children's Data Protection

The wira44 platform is intended solely for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from children or underage individuals.

If we discover or receive information that personal data of an underage individual has been collected without proper age verification, we will take immediate steps to delete the relevant data and terminate the associated account.

9International Data Transfers

In the course of platform operations, your personal data may be stored and processed on servers located outside Malaysia. However, wira44 ensures that all international data transfers comply with PDPA requirements and are carried out with adequate safeguards through:

• Standard data processing agreements that mandate a level of protection equivalent to Malaysia's PDPA.
• Selection of cloud service providers with internationally recognised security certifications such as ISO 27001.
• Periodic assessments of the data protection practices of our international technical partners.

10Data Retention Period

Wira44 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law. Our data retention guidelines are as follows:

• Active account data — retained for the duration your account is active and for a reasonable period after account closure.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Documents — retained for 5 years after the business relationship ends or as required by the relevant authorities.
• Security and access logs — retained for 90 days for security incident investigation purposes.
• Non-essential cookie data — expires automatically according to predefined settings, typically between 30 and 365 days.

Once the retention period expires, data will be securely deleted or fully anonymised so that it can no longer be linked to any specific individual.

11Privacy Policy Amendments

Wira44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform improvements. Every amendment will be accompanied by a new updated date at the top of this page.

For significant amendments that affect how we use your data, we will notify you via an in-platform notification or your registered email at least 14 days before the changes take effect. Continued use of the platform after the amendments take effect constitutes your acceptance of the updated terms.

12Contact Us for Privacy Inquiries

If you have any questions, concerns, or complaints regarding how wira44 handles your personal data, we encourage you to reach out to us through the following channels:

• Live Chat 24/7 — the fastest way to get a response, available directly within the wira44 platform.
• Support Email — [email protected] (for written enquiries requiring official documentation only).

Our team will endeavour to respond to all privacy-related enquiries within 3 business days. For formal requests such as data access, correction or deletion, please clearly state the type of request and include the required identity verification details.