Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how waduk700 ("the Platform", "we", "us", "our"), the operator of the website located at https://waduk700.cam, collects, uses, stores, shares, and protects the personal data of individuals who register for, access, or use the Platform and its associated services.

waduk700 is an English-language online casino and sports betting platform operated under international online gaming licensing, serving players primarily in Malaysia. We are committed to protecting the privacy of our players and to processing personal data responsibly, transparently, and in accordance with internationally recognised data protection principles.

By registering for an Account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

2 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, including name, contact details, identification documents, financial information, and online identifiers such as IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Data Controller" means waduk700, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of waduk700 pursuant to a written agreement, such as payment processors, KYC verification providers, and cloud hosting services.
• "Player" or "User" means any individual who has registered for an Account on the Platform or who otherwise uses any service provided by the Platform.
• "KYC" means Know Your Customer — the identity and age verification process required under our Terms and Conditions and applicable anti-money laundering obligations.
• "Cookie" means a small text file placed on your device by the Platform for the purposes of session management, security, and analytics.
• "Sensitive Personal Data" means Personal Data relating to health, financial circumstances, or other categories that warrant additional protection under applicable law.

3 Data We Collect

We collect the following categories of personal data from Players:

3.1 Registration & Identity Data

• Full legal name as it appears on government-issued identification;
• Date of birth (for age verification — minimum age 21);
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam);
• Email address and mobile phone number;
• Username and encrypted password hash.

3.2 Identity Verification (KYC) Documents

• Copy of government-issued photo ID (Malaysian MyKad, passport, or driving licence);
• Proof of residential address (utility bill, bank statement, or equivalent — dated within three months);
• Proof of payment method ownership (e.g., screenshot of Touch'n Go eWallet, Boost, or bank account confirming the account holder's name matches the registered Account).

3.3 Financial & Transaction Data

• Deposit and withdrawal history, amounts, and timestamps (all in MYR);
• Payment method references (partial account numbers or wallet IDs — we do not store full card numbers);
• Wagering history, game session data, and bet records.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Session start/end times, pages visited, and in-platform navigation patterns;
• Error logs and crash reports where applicable.

3.5 Communications Data

• Records of live chat conversations, email correspondence, and support ticket histories between you and our customer support team;
• Feedback, complaint records, and dispute correspondence.

4 How We Collect Data

We collect Personal Data through the following means:

5 Data Processing & Purpose

We process your Personal Data for the following specific purposes:

• Account creation and management: to register your account, verify your identity, maintain your profile, and allow you to log in securely;
• Age verification: to confirm that you are at least 21 years of age, as required by our Terms and Conditions and responsible gambling obligations;
• Payment processing: to facilitate MYR deposits and withdrawals through your chosen payment methods (Touch 'n Go eWallet, Boost, GrabPay Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, USDT TRC20, and Bitcoin);
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other criminal conduct;
• Regulatory compliance: to meet obligations under the anti-money laundering and counter-terrorism financing requirements of our licensing jurisdiction;
• Customer support: to respond to your queries, complaints, and support requests in a timely and accurate manner;
• Responsible gambling: to monitor wagering patterns and identify behaviour that may indicate problem gambling, and to administer self-exclusion, deposit limit, and cooling-off requests;
• Platform improvement: to analyse usage patterns, fix bugs, and improve the performance and functionality of the Platform for all players; and
• Promotional communications: to send you relevant offers and promotions by email, where you have consented to receive marketing communications (consent may be withdrawn at any time).

6 Legal Basis for Processing

We process your Personal Data on the following legal grounds:

• Contractual necessity: processing required to fulfil our obligations under the account agreement with you — including account setup, payment processing, and support;
• Legal obligation: processing required to comply with anti-money laundering, KYC, and licensing requirements imposed on the Platform by its regulatory authorities;
• Legitimate interest: processing necessary for fraud prevention, platform security, and the protection of other players — where these interests are not overridden by your fundamental rights and freedoms; and
• Consent: processing for non-essential purposes such as marketing communications, where you have given explicit, informed consent that can be withdrawn at any time without penalty.

7 Data Sharing & Disclosure

waduk700 does not sell, rent, or trade your Personal Data to unaffiliated third parties for commercial gain. We share your data only in the following limited and necessary circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers to assist in operating the Platform. These include: payment gateway operators (for processing MYR transactions); KYC and identity verification providers; cloud hosting and infrastructure providers; and customer support platform providers. All such providers are bound by data processing agreements that restrict how they may use your data and require them to maintain adequate security standards.

7.2 Regulatory & Legal Disclosure

We may disclose your Personal Data to regulatory bodies, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or regulatory directive. Where legally permitted, we will notify you before making such a disclosure.

7.3 Anti-Money Laundering Obligations

As part of our licensing obligations, we may be required to file suspicious transaction reports with relevant financial intelligence units. In such cases, we are prohibited by law from disclosing to you that such a report has been filed.

7.4 Corporate Transactions

In the event of a merger, acquisition, or sale of all or substantially all of the Platform's assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such change and provided with the opportunity to exercise your data rights prior to the transfer taking effect.

8 Data Retention

We retain Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any legal retention obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

9 Data Security

We implement a range of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption in transit: all communications between your browser/app and our servers are encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: sensitive data fields including identification document images, payment method references, and authentication credentials are stored in encrypted form;
• Access controls: access to Personal Data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for internal systems;
• Penetration testing: the Platform undergoes periodic independent security assessments to identify and remediate vulnerabilities; and
• Incident response: we maintain a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities in accordance with our obligations.

10 Cookies & Tracking Technologies

waduk700 uses cookies and similar technologies to provide a functional, secure, and optimised experience on the Platform. The following categories of cookies are used:

We do not use third-party advertising cookies, behavioural tracking pixels, or cross-site user profiling technologies. You may control or delete cookies through your browser settings, though disabling essential cookies will impair your ability to use the Platform.

11 International Data Transfers

As waduk700 operates under international licensing and uses globally distributed cloud infrastructure, your Personal Data may be processed in jurisdictions outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data, including:

• Transfer only to service providers and sub-processors in countries that provide an adequate level of data protection, or with whom we have entered into data processing agreements incorporating appropriate contractual safeguards;
• Use of standard contractual clauses or equivalent mechanisms where required by applicable law; and
• Restriction of transferred data to the minimum necessary for the specific processing purpose.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia for the purposes described in this Policy, subject to the safeguards described above.

12 User Rights

Subject to applicable law and any legitimate overiding interests (such as anti-money laundering retention obligations), you have the following rights in respect of your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you. We will respond within 30 days of a verified request.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Minor corrections (such as address updates) can be made directly through account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements. Note that KYC and transaction records must be retained for anti-money laundering compliance purposes and cannot be erased within the mandatory retention period.
• Right to Restrict Processing: You may request that we restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of data is disputed.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing (e.g., for marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to the processing of your Personal Data where we rely on legitimate interest as the legal basis, subject to our ability to demonstrate compelling grounds for continued processing.

To exercise any of these rights, please contact our Data team via the email address listed in Section 16. We will verify your identity before processing any request. Where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline the request.

13 Data of Minors

waduk700 strictly prohibits the use of its Platform by individuals under the age of 21. We do not knowingly collect or process Personal Data from persons under the age of 21. Age is verified during the registration process and, where necessary, through the KYC documentation review.

If we become aware that Personal Data has been collected from a person under the age of 21, we will immediately close the associated Account, void any wagering activity, and permanently delete the data subject to any legal retention requirements. If you believe a minor has registered on the Platform, please notify our support team immediately.

14 Third-Party Links

The Platform does not contain links to third-party websites, applications, or social media platforms as a matter of policy. Where references to third-party payment services (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, or FPX) appear on the Platform, these are references to payment methods we support — not links to those providers' own websites.

We are not responsible for the privacy practices of any third-party service provider you interact with independently of the Platform. We encourage you to review the privacy policies of your chosen payment providers and other services you use in connection with your online activity.

15 Policy Amendments

waduk700 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the structure of the Platform. The date of the most recent revision is displayed at the top of this page.

Where changes are material, we will notify registered Players by email or via a prominent notice on the Platform at least seven calendar days before the revised Policy takes effect. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

Where a proposed change would materially and adversely affect how we use Personal Data you have already provided, we will seek your explicit consent before applying that change to your existing data.

16 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by waduk700, please contact us through the following channels:

• Live Chat: Available on the Platform from 9AM – 2 AM MYT, seven days a week. Select "Privacy / Data Request" as the subject of your query.
• Email: [email protected] — please use the subject line "Privacy Request — [Your Full Name]" for data-related enquiries.

We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a substantive response within 30 calendar days of receipt of a verified request.

For enquiries specifically related to responsible gambling data tools — such as self-exclusion records or the removal of your data following account closure — please refer to our Responsible Gambling page.