ws0288 Privacy Policy

ws0288 is an internationally operated online gaming platform accessible at https://ws0288.app and all associated sub-domains and mobile interfaces. For the purposes of this Privacy Policy, ws0288 is the data controller responsible for the personal information collected from players who register accounts, make deposits, place bets, or otherwise interact with any part of the ws0288 Platform.

ws0288 serves English-preference players across Indonesia, including in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Yogyakarta, Makassar, Palembang, and all other regions of the archipelago. Our gaming verticals include sports betting, Live Casino, Slots, Live Dragon Tiger, and Keno. Where personal data is processed in connection with any of these products, this Policy applies in full.

References to "we", "us", and "our" throughout this document mean ws0288. References to "you" or "your" mean any individual who creates an account, browses the Platform, contacts our support team, or otherwise provides personal data to ws0288 in any context.

ws0288 collects personal data in several categories depending on your relationship with the Platform. The table below sets out the categories of data we collect, examples of specific data points in each category, and the primary reason for collection.

ws0288 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion. This is the primary source of your Identity, Contact, and Financial Data.
• Automated platform interactions: Technical and Usage Data collected automatically as you browse and use the Platform. This includes cookies, server logs, and analytics tools that record your device identifiers, IP address, session behavior, and game play activity.
• Payment processors: When you initiate a deposit or withdrawal, our payment gateway partners (including processors for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) share transaction confirmation data with ws0288 to credit your account and reconcile payments.
• KYC and fraud prevention providers: Third-party identity verification and anti-fraud services may return verification results and risk scores to ws0288 based on the documents and information you submit.
• Publicly available sources: In limited circumstances — principally for enhanced due diligence on high-value accounts — ws0288 may cross-reference publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, and adverse media databases.

ws0288 does not purchase personal data from data brokers or compile marketing profiles from third-party social media platforms.

ws0288 processes your personal data for the following specific purposes. Each purpose is tied to one or more legal bases described in Section 5.

• Account creation and management: To register your account, maintain your profile, verify your identity and age (21+ requirement), and manage your login credentials securely.
• Transaction processing: To process deposits and withdrawals in Indonesian Rupiah (IDR / Rp) via your chosen Indonesian bank or e-wallet channel, and to maintain accurate records of all financial activity on your account.
• Gaming services: To provide access to sports betting, live casino, slots, Live Dragon Tiger, Keno, and all other Platform products; to record your wagering history; and to settle bets and calculate winnings correctly.
• Customer support: To respond to your support requests, resolve disputes, and maintain records of our communications for quality assurance and compliance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, collusion, money laundering, unauthorized account access, and other prohibited conduct as defined in the Terms & Conditions.
• Regulatory compliance: To meet our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations, including filing regulatory reports where required.
• Responsible gaming: To monitor player behavior for indicators of problem gambling, enforce self-exclusion and deposit limits, and provide intervention support in accordance with our Responsible Gaming Policy.
• Marketing and promotions: Where you have opted in, to send you personalized promotions, bonus offers, and platform news by email or in-platform notification. You may withdraw this consent at any time through your account settings.
• Platform improvement: To analyze aggregate usage patterns, test new features, optimize game performance, and improve the overall player experience across all devices and Indonesian time zones.

Every processing activity carried out by ws0288 rests on at least one of the following legal bases:

• Performance of a contract: Processing that is necessary to provide the Platform services you have signed up for — including account management, transaction processing, and bet settlement — is carried out on the basis that it is required to perform our contract with you.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, internal analytics, and responsible gaming monitoring is carried out on the basis of ws0288's legitimate interests in operating a safe, fair, and sustainable gaming platform. We balance these interests against your privacy rights and will not process data under this basis where your interests clearly override ours.
• Legal obligation: Processing required to comply with AML, KYC, regulatory reporting, and record-keeping obligations is carried out on the basis that we are legally required to do so.
• Consent: Processing for marketing communications and any non-essential cookies is carried out on the basis of your explicit consent. Consent is freely given, specific, informed, and unambiguous. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ws0288 does not sell or rent your personal data to any third party. Data is shared only in the limited circumstances described below, and always subject to contractual obligations that require the recipient to maintain confidentiality and process data only for the stated purpose.

• Payment processors: To facilitate deposits and withdrawals, ws0288 shares the minimum necessary financial data with our payment gateway partners handling BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions. These processors are PCI-DSS compliant and bound by strict data-processing agreements.
• Game studios and content providers: Live casino feeds from Evolution Gaming, Pragmatic Play Live, and other studios require a session token tied to your account. Game outcome data is logged by both ws0288 and the studio for dispute resolution. Studios do not receive your full identity or financial data.
• KYC and identity verification providers: Your submitted identity documents and liveness photographs are processed by our third-party KYC provider to confirm your age and identity. Results are returned to ws0288; raw document images are not retained by ws0288 beyond the verification workflow.
• Fraud and AML compliance tools: Transaction and behavioral data may be shared with third-party fraud detection and anti-money-laundering screening services to identify suspicious activity.
• Cloud infrastructure and hosting: ws0288 uses cloud infrastructure providers to host the Platform. These providers process data on our behalf under data-processing agreements and do not independently access or use your data.
• Legal and regulatory authorities: ws0288 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid legal process, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or serious harm.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent data-protection commitments. You will be notified of any such transfer in advance.

ws0288 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, detect fraud, and — where you have consented — to serve personalized content and measure the effectiveness of promotions.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Disabling fraud detection cookies may result in additional security challenges when accessing your account.

ws0288 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with standard AML and KYC record-keeping requirements.
• Transaction and bet history: Retained for 5 years from the date of each transaction to support dispute resolution, regulatory reporting, and AML compliance.
• KYC documents (government-issued ID, proof of address): Retained for the duration of the verification process plus 5 years post-closure. Liveness check photographs are deleted within 30 days of successful verification.
• Support and communications records: Retained for 3 years from the date of the last interaction, or longer where a complaint or dispute remains unresolved.
• Marketing consent records: Retained for the duration of consent plus 2 years to provide an audit trail of consent events.
• Technical logs (IP addresses, device data, session logs): Retained for 12 months for security and fraud investigation purposes, then automatically purged.
• Responsible gaming records (self-exclusion, limits): Retained for 5 years after the exclusion or limit expires, to prevent circumvention through re-registration.

When a retention period expires, ws0288 either securely deletes the data or anonymizes it such that it can no longer be linked to any individual. Anonymized aggregate data may be retained indefinitely for statistical and platform improvement purposes.

You have the following rights in relation to the personal data ws0288 holds about you. To exercise any of these rights, contact us at [email protected] with a clear description of your request. We will respond within 30 days. No fee is charged for standard requests; if a request is manifestly unfounded or repetitive, we reserve the right to charge a reasonable administrative fee.

ws0288 implements a layered approach to data security, combining technical, organizational, and procedural controls designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction.

• Encryption in transit: All data exchanged between your browser or mobile device and the ws0288 Platform is encrypted using TLS 1.3 with 256-bit AES ciphers. Connections over older, insecure protocols (TLS 1.0, SSL 3.0) are rejected.
• Encryption at rest: Sensitive data stored in ws0288's databases — including identity document metadata, financial account identifiers, and KYC records — is encrypted at rest using AES-256.
• Payment data tokenization: Full payment credentials (card numbers, full bank account numbers) are never stored on ws0288's servers. All financial data is tokenized at the point of entry through our PCI-DSS Level 1 certified payment gateway.
• Access controls: Access to personal data by ws0288 employees is restricted on a strict need-to-know basis using role-based access controls. Administrative access to production systems requires multi-factor authentication (MFA).
• Security audits: ws0288 engages independent security firms to conduct regular penetration testing and vulnerability assessments of the Platform infrastructure.
• Incident response: ws0288 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities within the timeframes required by applicable law — and no later than 72 hours after becoming aware of the breach.
• Employee training: All ws0288 staff with access to personal data undergo mandatory data protection and security awareness training at induction and annually thereafter.

While ws0288 takes all reasonable measures to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the security of your own account credentials. Never share your password with anyone, including ws0288 support staff.

ws0288 strictly prohibits the use of the Platform by any person under the age of 21. This age restriction is absolute and applies to all players regardless of the legal gambling age in any particular jurisdiction.

ws0288 uses a combination of automated age-check tools at registration and mandatory KYC document verification — requiring a government-issued Indonesian identity card (KTP), passport, or driver's license — to verify that all players meet the 21+ requirement before any withdrawal is processed. Where ws0288 has reasonable grounds to suspect that a registered player is under the age of 21, the account will be immediately suspended pending verification.

ws0288 does not knowingly collect personal data from any person under 21. If we become aware that personal data from an under-21 user has been collected, we will delete it immediately and close the associated account. If you are a parent or guardian and believe your child has created a ws0288 account, please contact us immediately at [email protected] so we can investigate and take appropriate action.

ws0288 operates globally and may store or process your personal data in countries outside Indonesia. These countries may have data protection laws that differ from those in Indonesia. Where such transfers occur, ws0288 ensures that appropriate safeguards are in place to protect your personal data to at least the same standard as this Privacy Policy requires.

Safeguards used for international transfers include:

• Standard contractual clauses: Where personal data is transferred to service providers in countries without an adequacy finding, ws0288 uses internationally recognized standard contractual clauses that impose binding data-protection obligations on the recipient.
• Data-processing agreements: All third-party processors that handle ws0288 player data — regardless of location — are bound by written data-processing agreements that require them to implement appropriate technical and organizational security measures.
• Minimization before transfer: Where data must be transferred internationally (for example, to a cloud hosting provider or game studio), ws0288 applies data minimization principles — sharing only the fields necessary for the specific processing activity, pseudonymizing data where feasible, and never transferring full identity documents except where required by KYC regulation.

By creating an account and using the ws0288 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia for the purposes described in this Privacy Policy, subject always to the safeguards outlined above.

ws0288 reviews this Privacy Policy at least annually and whenever a material change in our data processing practices occurs. When we make significant changes — for example, collecting a new category of data, sharing data with a new category of third party, or altering our retention periods — we will notify registered players by email to the address on their account at least 14 days before the changes take effect.

Minor amendments such as typographical corrections, clarifications that do not affect your substantive rights, and updates to reflect changes in applicable law may be made without prior notice. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any change to this Policy, you must stop using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ws0288 handles your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] — please include "Privacy Request" in the subject line for priority routing to the Data Protection team. We aim to respond to all privacy requests within 5 business days and will resolve requests in full within 30 days.
• Live Chat: Available 24/7 directly from your Account dashboard at ws0288.app. For data subject rights requests that require identity verification, you will be directed to submit your request by email with supporting documentation.
• Support hours: 24 hours a day, 7 days a week, across all Indonesian time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9). Indonesian-speaking agents are available at all times.

If you are not satisfied with how ws0288 has handled your privacy complaint after allowing us a reasonable opportunity to respond, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. ws0288 will cooperate fully with any such authority in the investigation of complaints.

For responsible gaming concerns — including self-exclusion, deposit limits, and support for problem gambling — please visit our Responsible Gaming page or raise the matter directly with our 24/7 support team. All responsible gaming requests are treated with the highest priority.