Privacy & Data Protection Policy

Version 1.0 – Last Updated: May 12, 2026 Operator: INNROAD, INC.

ARTICLE I: INTRODUCTION

INNROAD, INC. (the "Company," "We," "Us," or "Our") is committed to protecting the privacy and security of our users. This Policy explains how we collect, use, and safeguard your personal data in connection with the wahplay platform. By using our services, you consent to the processing of your data as described in this document in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

ARTICLE II: DATA COLLECTION SCOPE

We collect information necessary to provide a secure and optimized social gaming experience:

Identity Data: Full name, date of birth, and gender.

Verification Data: NRIC or Passport information (where required for security audits or high-value transactions).

Contact Data: Mobile number and email address.

Technical Data: IP address, device fingerprints (IMEI/MAC), and geolocation.

Transaction Data: Records of top-ups via DuitNow, FPX, and licensed e-wallets.

ARTICLE III: PURPOSES OF PROCESSING

Your data is processed for the following reasons:

Account Management: To maintain your profile and virtual ledger.

Safety & Security: To prevent fraud, multi-accounting, and unauthorized software use.

Platform Integrity: To ensure compliance with the 3R Policy (Race, Religion, Royalty) and Budi Bahasa principles.

Legal Compliance: To meet Malaysian tax, audit, and anti-money laundering requirements.

ARTICLE IV: DISCLOSURE TO THIRD PARTIES

We do not sell your personal data. Disclosure is limited to:

Payment Providers: To facilitate secure financial transactions.

Service Providers: Secure cloud hosting (e.g., AWS/Google Cloud) and support tools.

Regulatory Bodies: When required by Malaysian law or valid court orders.

ARTICLE V: DATA SECURITY

We implement industry-standard technical measures, including AES-256 encryption and TLS 1.3 transport security, to protect your data from unauthorized access, alteration, or disclosure.

ARTICLE VI: DATA RETENTION

We retain your personal data for the duration of your active account. Transactional and verification records are kept for seven (7) years to comply with Malaysian statutory audit and tax requirements.

ARTICLE VII: YOUR RIGHTS (PDPA 2010)

Under the PDPA, you have the right to access your data, correct inaccuracies, and withdraw consent. Note that withdrawing consent for essential data will result in the closure of your account.

ARTICLE VIII: REGISTERED USER DATA DELETION REGULATIONS

(I) Regulatory Adherence The Company stores and deletes customer data in accordance with relevant principles prescribed by Malaysian regulations and international data governance standards.

(II) Deletion Protocol and Irrecoverability When you request the deletion of customer data, the Company's dedicated deletion channel will first verify and confirm your deletion request. Once confirmed:

The customer data on the application layers and storage layers of the in-use storage system and backup storage system will be cleared.

NOTICE: Once the clearing process is complete, it is permanent and irreversible. Cleared customer data cannot be requested for recovery or restoration.

(III) Account Deletion Method Users can directly execute the deletion of their account and data through the following in-app path:

"WahPlay - Industry's Strongest 100,000x Setter APP" > Personal Center > Member Data > Account Settings > Delete Account.

ARTICLE IX: PROTECTION OF MINORS

wahplay is intended for users aged 18 and above. We do not knowingly collect data from minors. If we become aware that a minor has provided personal data, we will immediately terminate the account and purge the associated data.

ARTICLE X: CONTACT INFORMATION

For any inquiries regarding your data or to exercise your rights, please contact our Data Protection Officer (DPO):

INNROAD, INC. – Legal Department Email: support@wahplay.com