Privacy Policy

This Privacy Policy applies to all personal data collected and processed by wd288 in connection with the operation of the wd288 online gaming platform accessible at wd288.bet ("the Platform"). It covers data collected through website visits, account registration, identity verification, financial transactions, customer support interactions, and marketing communications.

wd288 primarily serves players located in Indonesia. Accordingly, our data practices are designed with the context of Indonesian players in mind, including the use of local payment methods (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) and communication preferences typical of the Indonesian market. Our platform operates in English, but our support team includes Indonesian-speaking agents available 24/7.

This Policy applies to all users of wd288 regardless of location, but does not extend to third-party services, game studios, or payment processors that maintain their own independent privacy policies. Where wd288 shares data with such third parties, this Policy describes the nature and purpose of that sharing in Section 6.

wd288 collects personal data in several categories depending on how you interact with the platform. The following table summarises the types of data we collect and the context in which each type arises:

wd288 collects personal data through the following mechanisms:

• Direct Submission: Data you provide voluntarily when registering an account, completing KYC verification, initiating a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Data gathered automatically when you access the platform, including your IP address, device fingerprint, browser metadata, and session activity logs. This data is collected via server logs and first-party analytics tools.
• Cookies and Tracking Technologies: wd288 uses first-party cookies and similar technologies to maintain your login session, store your preferences, and analyse platform usage patterns. See Section 9 for full details on our cookie practices.
• Payment Processors: When you deposit or withdraw using a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), our payment processing partners may share transaction confirmation data with wd288 for reconciliation and fraud prevention purposes.
• Identity Verification Partners: Where wd288 uses a third-party KYC verification service to validate your identity documents, that partner may share the outcome of the verification check (pass/fail/flagged) and supporting data with wd288.
• Fraud and Compliance Databases: wd288 may cross-reference your registration details against industry-shared responsible gaming databases and anti-money laundering (AML) watchlists as part of our compliance obligations.

wd288 processes your personal data for the following specific and documented purposes:

wd288 processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing that is required to fulfil our contractual obligations to you as a registered player — including account creation, transaction processing, and bonus administration — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations — including KYC identity verification, AML transaction monitoring, and the retention of financial records — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing undertaken to protect the security and integrity of the wd288 platform, detect and prevent fraud, and conduct anonymised analytics to improve our services is carried out on the basis of our legitimate business interests, provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for the purpose of sending promotional communications and marketing offers is carried out on the basis of your freely given, specific, and informed consent, which you may withdraw at any time without detriment.

wd288 does not sell, rent, or trade your personal data to third-party marketing organisations under any circumstances. We share personal data with third parties only in the limited circumstances described below:

• Payment Processors: We share the minimum financial data required to process your deposits and withdrawals with our licensed payment processing partners. This includes transaction amounts, your registered payment account identifier (e.g., BCA or BRI account number, OVO or DANA mobile number), and transaction reference codes.
• KYC Verification Providers: Identity documents and selfie verification data submitted during the KYC process are shared with our contracted KYC service provider solely for the purpose of verifying your identity. KYC providers are contractually prohibited from using your data for any purpose beyond verification.
• Fraud Prevention and AML Services: Certain account and transaction data may be cross-referenced with industry fraud prevention databases and AML screening services to detect prohibited conduct. Data shared for this purpose is strictly limited to what is necessary for each screening check.
• Game Studio Providers: When you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, or Habanero, your player session data (player ID, bet and win amounts, game session timestamps) is shared with the relevant studio's game server to facilitate game-play. This data does not include your full identity or financial details.
• Legal and Regulatory Authorities: wd288 will disclose personal data to competent legal or regulatory authorities where required to do so by applicable law, valid court order, or binding regulatory direction. We will notify you of such disclosure where we are legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, asset sale, or restructuring involving wd288, your personal data may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections being maintained by the successor.

wd288 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised data set may be retained indefinitely for aggregate analytics purposes.

wd288 implements a layered security architecture to protect your personal and financial data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and the wd288 platform is encrypted using 256-bit SSL/TLS protocols — the same standard used by Indonesia's major banking institutions, including BCA and BRI. Data is never transmitted in plain text.
• Encrypted Data Storage: Personal data and KYC documents stored on wd288's servers are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data stores.
• Access Controls: Access to personal data is restricted to authorised wd288 personnel on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and regular security training.
• Intrusion Detection and Monitoring: wd288's infrastructure is monitored continuously for anomalous access patterns, attempted intrusions, and data exfiltration attempts. Automated alerts trigger immediate investigation by our security team.
• Two-Factor Authentication (2FA): wd288 supports and strongly encourages the use of two-factor authentication on all player accounts to reduce the risk of unauthorised access resulting from compromised credentials.
• Third-Party Security Audits: wd288's platform security and RNG systems are subject to periodic independent audits. Audit outcomes inform our ongoing security improvement programme.

wd288 uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, and analyse how the platform is used. We do not use third-party advertising cookies or cross-site tracking technologies.

You can manage or delete cookies at any time through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your wd288 account. Disabling analytics cookies will not affect your ability to use the platform but will limit our ability to improve it based on real usage data.

wd288 is required by its licensing obligations to verify the identity of all players prior to processing their first withdrawal. This process — commonly referred to as Know Your Customer (KYC) verification — involves the collection and review of sensitive identity documents. The following practices govern how wd288 handles KYC data:

• Documents Collected: KYC verification requires submission of a government-issued photo ID (Indonesian KTP, passport, or driving licence), proof of payment method ownership, and a selfie verification photograph. Full details are provided in our Terms & Conditions, Section 8.
• Storage and Encryption: All KYC documents are stored in an encrypted document vault with access restricted exclusively to wd288's compliance personnel. Documents are not accessible to general customer support staff.
• Retention Period: KYC documents are retained for a minimum of five years from the date of submission, as required by applicable anti-money laundering regulations. Documents are securely deleted upon expiry of the retention period.
• No Third-Party Marketing Use: KYC documents and the identity data they contain are never shared with, sold to, or made accessible by any third party for marketing, profiling, or commercial data purposes.
• Document Authenticity: Submitting forged, altered, or fraudulent identity documents in the KYC process is a serious breach of wd288's Terms & Conditions and may constitute a criminal offence. Such submissions will be referred to the relevant authorities.

As a wd288 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will acknowledge your request within 48 hours and respond substantively within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data wd288 holds about you, including the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data held about you. Where data accuracy affects your account status, we will correct verified errors without undue delay.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where the processing was unlawful. This right is subject to override by our legal retention obligations — for example, financial transaction records and KYC documents must be retained for the mandatory periods described in Section 7.
• Right to Restriction: You have the right to request that wd288 restrict the processing of your personal data pending the resolution of an accuracy dispute, a legitimate interest objection, or a pending erasure request.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. wd288 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

wd288 operates a strict 21+ age policy. Our platform is not directed at, designed for, or intended to be used by any person under the age of 21. We do not knowingly collect, store, or process personal data belonging to individuals under 21 years of age.

As part of our KYC verification process, wd288 requires all players to provide documentary proof of age before their first withdrawal is processed. Any account found to belong to a player under 21 will be immediately and permanently suspended, all associated funds will be forfeited, and the relevant details will be reported to the appropriate authorities where required by law.

The wd288 platform may reference or integrate with third-party services, including game studio platforms (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, Habanero, Pocket Games Soft) and payment infrastructure providers (local Indonesian banks, OVO, DANA, GoPay, ShopeePay, LinkAja). Each of these third parties operates under its own independent privacy policy and data practices.

wd288 is not responsible for the privacy practices of any third-party service provider. We recommend that you review the privacy policies of any third-party services you interact with in connection with your gaming activity. wd288 selects third-party partners that maintain appropriate data protection standards, and all data-sharing arrangements with third parties are governed by contractual data processing agreements that restrict use of your data to the agreed purpose.

wd288 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the scope of our services. When material changes are made to this Policy, we will notify registered players via the email address associated with their account at least seven days before the updated Policy takes effect.

The current version of this Privacy Policy is always available on this page. The "Last Updated" date at the top of the page reflects when the most recent revision came into force. Your continued use of the wd288 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way wd288 handles your personal data, please contact our Privacy team through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" for general questions or "Privacy Rights Request — [Your Username]" for formal data rights requests.
• Live Chat: Available 24/7 directly on the wd288 platform. Indonesian-speaking agents are on hand around the clock, including during Idul Fitri and all Indonesian public holidays.
• Response Times: We acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 calendar days. Complex data access requests may require additional time; we will inform you if this is the case.