Privacy Policy

In this Privacy Policy, the following terms carry the meanings defined below unless the context clearly indicates otherwise.

wd288 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, wd288 determines the purposes for which your Personal Data is processed and the means by which that processing takes place.

If you have questions about how wd288 handles your data, wish to exercise any of your data rights, or need to submit a privacy-related complaint, you may contact us at any time using the details in Clause 15 of this Policy.

wd288 collects Personal Data from you directly (when you register, deposit funds, or contact support) and automatically (through your interaction with the Platform). The categories of data we collect are set out below.

3.1 Registration Data

When you open an account, wd288 collects:

3.2 Identity Verification (KYC) Data

To comply with our age-verification and anti-fraud obligations, wd288 collects:

3.3 Financial & Transaction Data

When you make deposits or request withdrawals, wd288 records:

3.4 Technical & Usage Data

wd288 automatically collects the following data when you access the Platform:

When you contact our support team via live chat or email, wd288 retains:

3.6 Responsible Gaming Data

If you set deposit limits, request a cooling-off period, or apply for self-exclusion, wd288 records those preferences and the dates they were applied. This data is retained to ensure your protective settings are enforced consistently across all sessions and devices.

wd288 processes your Personal Data only for the specific purposes described below. We do not use your data for any purpose that is incompatible with the original reason it was collected without first obtaining your explicit consent.

4.1 Account Management

We use your registration data to create and maintain your account, authenticate your identity on login, communicate account-related updates, and enforce the single-account policy described in our Terms & Conditions.

4.2 Payment Processing

Financial and transaction data is processed to facilitate deposits and withdrawals in Indonesian Rupiah (IDR) via your chosen local payment method — including bank transfers to BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata, and e-wallet transactions via OVO, DANA, GoPay, ShopeePay, and LinkAja. We retain transaction records to resolve disputes and reconcile account balances.

4.3 Identity Verification & Fraud Prevention

KYC data is processed to verify that you are at least 21 years of age, to confirm your identity matches the payment method on file, and to detect and prevent fraud, money laundering, and other financial crimes. wd288 employs automated screening tools alongside manual review for high-risk flags.

4.4 Platform Security

Technical and usage data — including IP addresses and device fingerprints — is used to detect unauthorized access, bot activity, account takeovers, and other security threats. Anomalous login patterns trigger security alerts and may result in temporary account locking pending verification.

4.5 Legal & Regulatory Compliance

wd288 is obligated to retain certain categories of data for the minimum periods required by anti-money laundering regulations, financial crime prevention frameworks, and the operational requirements of our international gaming license. This processing is mandatory; it cannot be opted out of without closing your account.

4.6 Service Improvement

Aggregated and anonymized usage statistics are analyzed to improve Platform performance, optimize the member experience, and develop new features. This analysis does not involve personally identifiable information and cannot be used to re-identify individual members.

4.7 Customer Support

Communications data is used to respond to your inquiries, resolve disputes, and maintain records of support interactions. Support transcripts may be reviewed for quality assurance purposes by our internal team only.

4.8 Responsible Gaming Enforcement

Responsible gaming preferences (deposit limits, session time limits, self-exclusion flags) are stored and applied to every session to ensure your protective settings remain active. This data may also be used to proactively identify members showing signs of problem gambling, in line with our duty-of-care obligations. See our Responsible Gaming page for full details.

wd288 processes your Personal Data under one or more of the following recognized legal bases:

• Contractual necessity: Processing required to perform the contract between you and wd288 — including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with anti-money laundering laws, age verification requirements, and other mandatory regulatory obligations applicable to internationally licensed gaming operators.
• Legitimate interests: Processing carried out for wd288's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where no other legal basis applies, wd288 will request your explicit consent before processing your data. You may withdraw consent at any time by contacting support, though withdrawal does not affect the lawfulness of processing carried out before that point.

wd288 does not sell or commercially transfer your Personal Data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

6.1 Payment Processors

To process deposits and withdrawals in IDR, wd288 shares the minimum necessary financial data with our contracted payment gateway partners who facilitate transfers via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners are bound by strict data processing agreements and may not use your data for any purpose beyond facilitating the specific transaction.

6.2 Identity Verification Providers

KYC document review may be supported by a certified third-party identity verification service. This provider processes your identity documents solely for age and identity verification on behalf of wd288 and is contractually prohibited from retaining your documents after the verification process is complete.

6.3 Game Content Providers

When you play games powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — your anonymized session data (bet size, game round ID, outcome) is transmitted to the relevant provider's certified RNG server for game resolution. No personally identifiable information is shared with game studios beyond what is technically necessary to authenticate your session.

6.4 Law Enforcement & Regulatory Authorities

wd288 may be legally required to disclose Personal Data to law enforcement agencies, financial intelligence units, or other regulatory bodies in response to a valid legal request, court order, or mandatory reporting obligation. wd288 will notify you of any such disclosure where permitted by law to do so.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of wd288's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address registered to your account before your data becomes subject to a materially different privacy policy.

wd288 uses cookies and similar local-storage technologies to ensure the Platform functions correctly, to keep your session secure, and to analyze aggregate usage patterns. The table below describes the categories of cookies in use on the Platform.

wd288 does not use advertising cookies, retargeting pixels, or any third-party behavioral tracking technology. You may clear cookies at any time through your browser settings; note that doing so will log you out of your current session.

wd288 retains your Personal Data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulatory obligations. The retention periods below apply to the main data categories:

• Account and registration data: Retained for the lifetime of your account and for a minimum of 5 years following account closure, in line with standard anti-money laundering record-keeping requirements.
• KYC documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: Retained for 5 years from the date of each transaction.
• Support correspondence: Retained for 2 years from the date of the last interaction in a support thread.
• Technical and session data: Retained for 90 days, after which it is aggregated and anonymized.
• Responsible gaming preferences: Retained for the lifetime of the account and for 12 months after account closure to prevent circumvention of self-exclusion through re-registration.

Upon expiry of the applicable retention period, your data will be securely deleted or irreversibly anonymized. Deletion requests submitted before the end of a mandatory retention period will be fulfilled to the maximum extent permitted by law, with mandatory records placed in restricted access storage until the retention period expires.

wd288 applies a layered security framework to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). Our domain enforces HTTPS with HTTP Strict Transport Security (HSTS).
• Encryption at rest: Sensitive data fields — including identity document scans and payment identifiers — are encrypted at rest using AES-256 before storage in our database.
• Access controls: Access to production databases containing member Personal Data is restricted to a minimal number of authorized personnel. All internal access is logged, audited, and subject to multi-factor authentication.
• Penetration testing: wd288 conducts regular independent security assessments of the Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed data breach affecting your Personal Data, wd288 will notify affected members without undue delay and take all reasonable steps to contain and remediate the breach.
• Two-factor authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. wd288 provides 2FA as a standard account security option at no additional cost.

As a member of wd288, you have the following rights in relation to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

wd288 operates as an internationally incorporated online gaming platform. Your Personal Data may be processed in data centers or by service providers located outside Indonesia. Wherever your data is transferred internationally, wd288 ensures that appropriate safeguards are in place to provide a level of protection equivalent to internationally recognized data protection standards. These safeguards include contractual data processing agreements with all international data recipients that impose binding data protection obligations consistent with this Privacy Policy.

Game content providers such as Evolution Gaming, Pragmatic Play, NetEnt, and Microgaming operate certified data centers in various jurisdictions. Session data transmitted to these studios for game resolution is anonymized at the point of transmission and is not used by those providers for any purpose beyond delivering the specific game round.

wd288 operates a strict 21+ age restriction across all markets, including Indonesia. The Platform is not directed at, and does not knowingly collect Personal Data from, any person under the age of 21.

If wd288 determines at any point — whether through KYC verification, third-party age-screening tools, or another method — that a member is under 21 years of age, the account will be immediately suspended, all pending transactions will be cancelled, and any funds deposited will be returned to the originating payment method after identity verification of the account holder is completed.

If you are a parent or guardian and believe your child has registered an account on wd288, please contact us immediately at [email protected]. We will investigate and action the report within 24 hours.

The wd288 Platform integrates with third-party services to deliver game content, process payments, and verify identities. While wd288 selects these partners carefully and requires contractual data protection commitments from all of them, each third party operates under its own privacy policy for the data it independently controls.

wd288 is not responsible for the privacy practices of third-party game studios, payment processors, or other service providers once data has been transmitted under the terms described in Clause 6. We encourage you to review the privacy policies of any third-party payment service you use to fund your wd288 account — including those of BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.

The wd288 Platform does not contain links to external third-party websites for advertising or promotional purposes. Any link present on the Platform points exclusively to internal wd288 pages.

wd288 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made, wd288 will notify registered members by email and by displaying a prominent notice on the Platform. The "Last updated" date at the top of this page reflects the most recent revision.

Your continued use of the Platform after the revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you must cease using the Platform and request account closure by contacting support before the changes take effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way wd288 handles your Personal Data, please contact our support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Policy Query" or "Data Rights Request" to ensure prompt routing to the correct team.
• Live Chat: Available 24/7 via the live chat interface on the Platform.
• Response time: Privacy and data rights requests will be acknowledged within 3 business days and fully responded to within 30 calendar days of receipt.

If you are not satisfied with wd288's response to your privacy complaint, you have the right to escalate the matter to the data protection authority or regulatory body with jurisdiction over wd288's operations. wd288 will cooperate fully with any such regulatory inquiry.

For responsible gaming concerns specifically, please visit our dedicated Responsible Gaming page where additional resources, self-assessment tools, and self-exclusion options are available to all members.