wd188 Privacy Policy

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Platform" means the wd188 website at https://wd188.club and all associated services, features, and content made available by wd188.
• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, date of birth, national identity number, email address, telephone number, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, and destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, the operator of wd188.
• "Data Processor" means a third party that processes Personal Data on behalf of wd188 under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification process conducted by wd188 or its appointed verification partners.
• "You", "User", "Member" refers to any individual who accesses or uses the Platform.

wd188 operates as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, wd188 determines the purposes for which your Personal Data is collected and the manner in which it is processed, stored, and protected.

wd188 is an internationally operated online gaming and sportsbook platform serving English-preference players primarily located in Indonesia. While the Platform is accessible across the Indonesian archipelago — including major population centers such as Jakarta, Surabaya, Bandung, Medan, Semarang, Bali, Yogyakarta, Makassar, and Palembang — the data infrastructure supporting the Platform is maintained in internationally recognized, secure hosting environments outside Indonesia.

For all privacy-related inquiries, data subject requests, or complaints, you may contact our designated Privacy team directly at: [email protected]. We aim to acknowledge all privacy-related correspondence within 48 hours and to resolve substantive requests within 30 calendar days.

wd188 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

3.1 Registration Data

When you create a wd188 account, we collect the information you provide during the registration process, including:

• Full legal name (as it appears on your government-issued identity document).
• Date of birth (used to verify you are 21 years of age or older).
• Email address and mobile telephone number.
• Residential address (city, province, postal code).
• Username and encrypted password.
• Currency preference (Indonesian Rupiah / IDR by default).

3.2 Identity Verification (KYC) Data

To comply with our anti-money-laundering obligations and responsible gaming commitments, we collect:

• Copies of government-issued photo identification (e.g., Indonesian National Identity Card / KTP, passport, or driver's license).
• Proof of residential address (e.g., utility bill, bank statement, or official correspondence no older than three months).
• Selfie photographs holding your identity document, where requested by our verification team.
• Proof of ownership of the bank account or e-wallet used for transactions (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja).

3.3 Financial Transaction Data

In connection with deposits and withdrawals conducted via Indonesian local banks and e-wallets, we collect:

• Bank account name, account number, and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP).
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) and registered mobile numbers.
• Transaction amounts (denominated in Rupiah / IDR), timestamps, and transaction reference numbers.
• Deposit and withdrawal history for the lifetime of your account.

3.4 Gameplay and Betting Data

As part of delivering and improving our gaming services, wd188 logs:

• All bets placed, game rounds initiated, and wagers settled on the Platform, including sportsbook markets (football, badminton, BRI Liga 1, EPL, AFF Cup, MotoGP, E-sports, and others) and casino games.
• Bonus and promotion activity, including bonus claims, wagering progress, and forfeiture events.
• Session duration, game preferences, and responsible gaming tool activations (deposit limits, self-exclusion, session reminders).

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Referring URL, pages visited on the Platform, and time spent on each page.
• Cookie identifiers and session tokens (see Section 10 for full cookie details).

3.6 Communications Data

If you contact wd188 through live chat, email, or any other support channel, we retain records of those communications — including chat transcripts, email correspondence, and any attachments — for customer service, quality assurance, and dispute resolution purposes.

wd188 collects Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account settings.
• Automatically through the Platform: Via server logs, cookies, and similar tracking technologies when you browse or interact with any page on wd188.
• From third-party service providers: Including KYC and identity verification partners, payment processors, and fraud-detection services, who may share data with wd188 as part of their contracted service delivery.
• From publicly available sources: Including sanctions lists, politically exposed persons (PEP) databases, and adverse media databases, which wd188 monitors as part of its anti-money-laundering compliance obligations.

wd188 processes your Personal Data only where a valid legal basis exists for doing so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each:

Where wd188 relies on legitimate interests as the legal basis for processing, we have assessed that our interests do not override your fundamental rights and freedoms in the context of the specific processing activity. You may request further information about these assessments by contacting us at [email protected].

wd188 does not sell your Personal Data. We share your data only in the circumstances described below, and only to the minimum extent necessary for each stated purpose:

6.1 Payment Processors and Banking Partners

To facilitate deposits and withdrawals, we share relevant financial and identity data with our payment processing partners that operate the Indonesian bank transfer and e-wallet infrastructure (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja). This sharing is strictly limited to data required to execute and reconcile the specific transaction.

6.2 KYC and Identity Verification Partners

To verify your identity and age in accordance with our 21+ requirement and anti-money-laundering obligations, we share KYC documents and registration data with our appointed verification service providers. These providers are contractually bound to process your data solely for the purpose of identity verification and to apply security standards equivalent to those maintained by wd188.

6.3 Game Content Providers

Third-party game studios integrated into the wd188 platform — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe — receive limited technical session identifiers and bet amounts to deliver game rounds. These studios do not receive your full registration profile unless it is strictly necessary for the delivery of their service. Each studio operates under its own privacy framework, and wd188 is not responsible for the data practices of third-party studios beyond the terms of our integration agreements.

6.4 Regulatory and Law Enforcement Authorities

wd188 may be required by applicable law, court order, or regulatory directive to disclose Personal Data to government agencies, law enforcement authorities, or financial intelligence units. wd188 will comply with such requirements and will, where legally permitted, notify the affected Member prior to disclosure.

6.5 Fraud Prevention and Security Services

To protect the Platform and its Members from fraudulent activity, account takeovers, and money laundering, wd188 shares limited data with third-party fraud detection and cybersecurity services. These services receive data such as IP addresses, device fingerprints, and transaction patterns, processed under strict data processing agreements.

6.6 Business Transfers

In the event that wd188 is involved in a merger, acquisition, restructuring, or sale of all or part of its business assets, your Personal Data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms that will apply to your data following the transfer.

Given that wd188 is an internationally operated platform, your Personal Data may be transferred to and processed in countries outside Indonesia. These countries may not have data protection laws that are directly equivalent to those in your country of residence.

When wd188 transfers Personal Data internationally, we put in place appropriate safeguards to ensure that your data receives a level of protection consistent with this Policy. These safeguards include:

• Contractual clauses in agreements with Data Processors that impose data protection obligations equivalent to those described in this Policy.
• Transferring data only to service providers operating in jurisdictions with recognized data protection frameworks or subject to adequate international data transfer mechanisms.
• Applying technical security measures (encryption in transit and at rest) to all cross-border data transfers.

For more information about the specific safeguards applied to international transfers of your Personal Data, please contact us at [email protected].

wd188 retains Personal Data for as long as is necessary to fulfill the purpose for which it was collected, to maintain your account, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, wd188 will securely delete or anonymize your Personal Data in accordance with our internal data disposal procedures. Anonymized data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

wd188 implements a comprehensive range of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our key security controls include:

• Encryption: All data transmitted between your device and wd188's servers is encrypted using TLS 1.2 or higher. Sensitive data at rest — including identity documents and payment account details — is encrypted using AES-256.
• Access Controls: Access to Personal Data within wd188's systems is restricted on a strict need-to-know basis. All staff with access to Personal Data undergo regular security training and are bound by confidentiality obligations.
• Infrastructure Security: wd188's server infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation controls. Servers are hosted in facilities with physical security controls and 24/7 monitoring.
• Two-Factor Authentication (2FA): All wd188 Members are encouraged to enable 2FA on their accounts. Internal staff accounts with access to production data require mandatory 2FA.
• Penetration Testing: wd188 commissions regular independent penetration tests of its platform infrastructure to identify and remediate security vulnerabilities.
• Incident Response: wd188 maintains a formal data breach incident response plan. In the event of a breach that poses a significant risk to your rights and freedoms, wd188 will notify affected Members promptly and in accordance with applicable requirements.

wd188 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to deliver, secure, and improve the Platform. The categories of cookies we use are as follows:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They include session authentication tokens that keep you logged in during your visit and security cookies that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing the functionality of the Platform.

10.2 Functional Cookies

Functional cookies remember your preferences — such as your chosen language, currency display (IDR), and game lobby settings — so that you do not need to reconfigure them on each visit. Disabling these cookies may reduce the convenience of your experience but will not prevent you from using the Platform.

10.3 Analytics Cookies

wd188 uses analytics tools to understand how Members navigate and use the Platform. Analytics cookies collect aggregated, anonymized data about page visits, feature usage, error rates, and session duration. This data is used solely to improve Platform performance and user experience. Analytics data is not used to build individual marketing profiles.

10.4 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. Please note that disabling certain cookies may affect the functionality and performance of the Platform. For specific guidance on managing cookies in your browser, refer to your browser's help documentation.

wd188 does not use third-party advertising or retargeting cookies. We do not participate in cross-site behavioral advertising networks.

Subject to applicable law and certain exceptions set out below, you have the following rights in respect of the Personal Data wd188 holds about you:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you and to receive information about how we process it.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may also update certain registration details directly through your account dashboard.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you have the right to request deletion of your Personal Data. This right is subject to exceptions — for example, where we are required to retain data to comply with a legal obligation or to defend a legal claim.
• Right to Restriction of Processing: You may request that wd188 suspend the processing of your Personal Data in certain circumstances, such as while the accuracy of your data is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data where that processing is based on legitimate interests. wd188 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days. We may require you to verify your identity before processing your request.

wd188 is strictly an adults-only platform. The minimum age to register and use the Platform is 21 years. wd188 does not knowingly collect Personal Data from individuals under the age of 21.

All registrations are subject to mandatory age verification as part of the KYC process. Where wd188 has reason to believe that a registered account is held by a person under 21 years of age, the account will be immediately suspended pending investigation. If the investigation confirms underage registration, the account will be permanently closed and any deposited funds will be returned to the originating payment method. Any winnings generated from underage play will be forfeited in full.

If you believe that wd188 has inadvertently collected Personal Data from an individual under the age of 21, please contact us immediately at [email protected] and we will take prompt action to investigate and, where confirmed, to delete the relevant data.

The wd188 Platform integrates services from third-party providers including game studios, payment processors, and analytics tools. Where third-party services involve the processing of your Personal Data, those providers act as Data Processors on behalf of wd188 under formal data processing agreements, or in certain cases as independent Data Controllers subject to their own privacy policies.

wd188 exercises due diligence in selecting third-party service providers and requires that all providers demonstrate adequate data protection standards. However, once data passes to an independent Data Controller (such as a bank or e-wallet provider processing your withdrawal), wd188's Privacy Policy no longer applies to that provider's use of your data. We recommend reviewing the privacy policies of payment providers you use — including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja — to understand how they handle your personal information.

The wd188 Platform does not contain links to external third-party websites unrelated to our services. wd188 is not responsible for the privacy practices of any external website.

wd188 may send you promotional communications — including bonus offers, seasonal promotions (such as Ramadhan reload bonuses, Idul Fitri cashback events, Imlek draw promotions, and BRI Liga 1 enhanced-odds campaigns), new game announcements, and loyalty program updates — by email or SMS, where you have provided your consent to receive such communications during registration or at a later point through your account settings.

Marketing communications are always clearly identified as promotional in nature. You may opt out of receiving marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email; or
• Updating your communication preferences through your wd188 account dashboard; or
• Contacting our support team at [email protected] with the subject line "Unsubscribe".

Opting out of marketing communications will not affect transactional communications essential to your account — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts. These communications will continue to be sent as they are necessary for the operation of your account.

wd188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. The "Last Updated" date at the top of this Policy will be revised accordingly whenever a change is made.

Where amendments are material — meaning they substantively affect how we process your Personal Data or reduce your rights — wd188 will provide advance notice by posting the updated Policy on the Platform with a prominent notice, and where practicable, by sending a notification to your registered email address before the changes take effect.

Non-material amendments (such as typographical corrections, restructuring of clauses for clarity, or updates to contact information) may be made without specific advance notice. Your continued use of the Platform following publication of any amendment constitutes your acceptance of the revised Policy. If you do not agree with a revised Policy, your remedy is to discontinue use of the Platform and close your account in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wd188 handles your Personal Data, please contact our Privacy team through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Inquiry" for fastest routing to our Privacy team.
• Live Chat: Available 24 hours a day, 7 days a week via the Platform's live chat widget, staffed by Indonesian-speaking agents who can assist with privacy-related queries.
• Response Time: We aim to acknowledge all privacy-related correspondence within 48 hours and to resolve substantive requests within 30 calendar days of receipt of a complete request.

For questions about our Terms & Conditions, please visit the Terms & Conditions page. For guidance on managing your gambling activity responsibly, please visit the Responsible Gaming page.

For general information about wd188, our platform, and the games we offer, please visit the About Us page or explore our full game catalog through the navigation menu above.