Privacy Policy

This Privacy Policy ("Policy") describes how wd338 ("we", "us", "our") collects, processes, stores, and protects personal data provided by or generated by Members of the wd338 Platform operating at wd338.cam. This Policy applies to all individuals who access the Platform, including registered Members, applicants whose registration was not completed, and visitors who browse the Platform without registering.

By registering an account on wd338, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must not register or continue to use the wd338 Platform.

This Policy should be read alongside wd338's Terms & Conditions, which govern your overall use of the Platform, and our Responsible Gaming page, which covers our obligations and your rights relating to gambling harm prevention.

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, address, email address, phone number, financial account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — wd338, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third-party service provider that processes Personal Data on behalf of wd338 under a written data processing agreement.
• "Member" — any individual who holds a registered account on the wd338 Platform.
• "Platform" — the wd338 website, mobile-optimized interface, and any related software through which wd338 services are accessed.
• "KYC" — Know Your Customer — the identity verification process required prior to withdrawal processing, involving submission of government-issued identification and proof of payment method ownership.
• "Cookies" — small data files stored on a Member's device by the Platform for the purposes of session management, preference storage, and analytics.

2 Data We Collect

2.1 Registration Data. When you create a wd338 account, we collect the following information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify you meet the 21+ age requirement);
• Residential address in Indonesia (city, province, postal code);
• Email address (used as your primary contact channel);
• Mobile phone number (for security verification and account alerts);
• Username and encrypted password.

2.2 KYC Verification Data. Prior to processing your first withdrawal, we collect:

• Government-issued photo identification (Indonesian National ID Card / KTP, passport, or driver's license) — including the ID number, issuing authority, and expiry date;
• A selfie photograph or video for liveness verification, where required;
• Proof of payment method ownership (bank statement or e-wallet screenshot showing your name and account number).

2.3 Transaction Data. For every deposit and withdrawal, we record:

• Transaction amount (in IDR);
• Payment method type and masked account identifier (e.g., BCA account ending in XXXX);
• Transaction timestamp (WIB);
• Transaction status and reference number.

2.4 Wagering Activity Data. We maintain a record of all bets placed on the Platform, including game type, stake amount, odds or RTP, outcome, and settlement timestamp. This data is used for account management, dispute resolution, and regulatory compliance.

2.5 Technical and Device Data. When you access the Platform, we automatically collect:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session start and end times;
• Pages visited and features accessed within the Platform.

2.6 Communications Data. We retain records of all communications between you and wd338 support, including live chat transcripts and email correspondence, for a period of up to 5 years for quality assurance, training, and dispute resolution purposes.

3 How We Collect Data

wd338 collects Personal Data through the following channels:

• Directly from you — through the registration form, KYC document upload, deposit and withdrawal requests, support communications, and any other interaction where you voluntarily provide information;
• Automatically via the Platform — through cookies, server logs, and analytics tools that capture device and session data when you access the Platform;
• From third-party payment processors — when you initiate a deposit or withdrawal, your payment provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, or others) transmits transaction confirmation data to wd338;
• From identity verification providers — wd338 may use third-party KYC service providers to assist with document authentication. These providers return a verification result and relevant data points to wd338.

wd338 uses the Personal Data it collects for the following purposes:

• Account creation and management — to register your account, authenticate your identity at login, and maintain your account profile throughout your membership;
• Transaction processing — to receive deposits from and send withdrawals to your verified Indonesian bank account or e-wallet, and to maintain an accurate record of your Account Balance;
• Identity verification (KYC) — to verify that you meet the 21+ age requirement and that the payment methods linked to your account belong to you personally;
• Fraud prevention and security — to detect and investigate suspicious activity, prevent unauthorized access, identify duplicate accounts, and protect the integrity of the wd338 Platform;
• Regulatory compliance — to fulfill our obligations under applicable Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements, including record-keeping and reporting obligations;
• Customer support — to respond to your inquiries, resolve disputes, and administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests;
• Platform improvement — to analyze aggregated usage patterns, diagnose technical issues, and develop enhancements to the wd338 Platform;
• Promotional communications — to send you information about bonuses, promotions, and seasonal offers relevant to Indonesian players, where you have not opted out of marketing communications. You may opt out at any time by contacting support.

wd338 will not use your Personal Data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

5 Legal Basis for Processing

wd338 processes your Personal Data on the following legal bases:

6 Data Sharing & Third Parties

6.1 wd338 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes under any circumstances.

6.2 We share Personal Data with third parties only in the following circumstances:

• Payment processors — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data necessary to process your deposits and withdrawals;
• KYC and identity verification providers — third-party providers engaged by wd338 to assist with document authentication receive the identity documents you submit during the verification process;
• Game content providers — studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive anonymized session identifiers to facilitate game delivery and fair-play auditing;
• IT infrastructure and cloud service providers — providers who host the wd338 Platform and store data on our behalf, under strict data processing agreements;
• Legal and regulatory authorities — where wd338 is required by law, court order, or regulatory authority to disclose Personal Data, we will comply with such requirements and, where legally permitted, notify you of the disclosure.

6.3 All third-party Data Processors engaged by wd338 are bound by written data processing agreements that require them to process Personal Data only on wd338's instructions, maintain appropriate security standards, and not disclose your data to any further parties without wd338's authorization.

7 Cookies & Tracking

7.1 wd338 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyze how members interact with our services. The categories of cookies we use are:

7.2 Strictly necessary cookies cannot be disabled as they are essential to Platform operation. You may control functional and analytics cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the wd338 Platform.

7.3 wd338 does not use third-party advertising cookies or cross-site tracking technologies that would share your browsing behavior with advertising networks.

8 Data Retention

8.1 wd338 retains your Personal Data for as long as is necessary to fulfill the purposes for which it was collected, subject to any applicable legal retention requirements. The following retention periods apply:

• Active Account Data — retained for the duration of your active membership on the Platform;
• KYC and Identity Documents — retained for a minimum of 5 years following account closure, in accordance with AML regulatory requirements applicable to international gaming operators;
• Transaction Records — retained for a minimum of 5 years following the date of the transaction, for regulatory compliance and dispute resolution purposes;
• Support Communications — retained for up to 5 years from the date of each communication, for quality assurance and dispute resolution;
• Technical and Device Data (logs) — retained for up to 12 months from the date of generation, unless a security investigation requires extended retention;
• Marketing Preference Records — retained for the duration of your membership plus 1 year, to maintain evidence of opt-in or opt-out status.

8.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be attributed to any identifiable individual.

8.3 Where you submit a data deletion request (see Clause 9), wd338 will delete or anonymize your Personal Data as promptly as operationally possible, except where retention is required by applicable law or ongoing regulatory obligation.

9 Your Privacy Rights

9.1 As a wd338 member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request".

• Right of Access — you may request a copy of the Personal Data that wd338 holds about you. We will respond within 30 days of receiving a valid request;
• Right to Rectification — if any Personal Data we hold is inaccurate or incomplete, you may request that it be corrected. For changes to your registered name or date of birth, documentary evidence will be required;
• Right to Erasure — you may request deletion of your Personal Data, subject to legal retention obligations that may require us to retain certain records (see Clause 8);
• Right to Restriction — you may request that wd338 restrict the processing of your Personal Data in certain circumstances, for example while a rectification request is under review;
• Right to Data Portability — you may request that wd338 provide your Personal Data in a structured, machine-readable format, where technically feasible;
• Right to Object — you may object to processing of your Personal Data where wd338 relies on legitimate interests as the legal basis, and to all processing for direct marketing purposes;
• Right to Withdraw Consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

9.2 wd338 will not charge a fee for handling privacy rights requests made in good faith. Where a request is manifestly unfounded or excessive, wd338 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for doing so.

10 Data Security

10.1 wd338 implements a layered security architecture designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the wd338 Platform;
• AES-256 encryption for sensitive Personal Data stored at rest on our servers;
• Role-based access control — wd338 staff access to Personal Data is restricted on a strict need-to-know basis, with access logs maintained and reviewed regularly;
• Multi-factor authentication for all internal systems used to access member data;
• Regular penetration testing conducted by independent third-party security firms;
• 24/7 intrusion detection and monitoring of our server infrastructure.

10.2 In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, wd338 will notify affected members without undue delay — and in any event within 72 hours of becoming aware of the breach — by email to the address registered on your account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures wd338 is taking to address the breach.

10.3 While wd338 employs best-practice security controls, no internet-based system can guarantee absolute security. You are responsible for maintaining the security of your own device and account credentials. wd338 strongly recommends using a unique, complex password and not sharing your login details with any other person.

11 Children's Privacy

11.1 The wd338 Platform is strictly intended for adults aged 21 and over. wd338 does not knowingly collect, process, or retain Personal Data from any individual under the age of 21.

11.2 If wd338 becomes aware that an account has been registered by a person under 21 years of age, that account will be immediately suspended, all associated wagers voided, and any deposited funds returned to the payment source following identity verification. All Personal Data associated with the account will be deleted from our systems within a reasonable period, except where retention is required for legal or regulatory purposes.

11.3 If you believe that a person under 21 may have registered an account on wd338 using your payment details or personal information, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

12 Cross-Border Data Transfers

12.1 As an internationally operated platform serving Indonesian members, wd338 may transfer your Personal Data to servers or service providers located outside Indonesia. Such transfers may occur in the context of cloud infrastructure hosting, KYC verification services, or game content delivery.

12.2 Where Personal Data is transferred outside Indonesia, wd338 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Safeguards may include:

• Contractual clauses in data processing agreements with third-party processors that require them to maintain equivalent data protection standards;
• Transfers only to jurisdictions or processors that provide an adequate level of data protection as recognized by internationally accepted frameworks;
• Technical measures such as end-to-end encryption during data transmission.

12.3 You may request further information about the cross-border transfer mechanisms applicable to your Personal Data by contacting wd338 support at [email protected].

13 Policy Amendments

13.1 wd338 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The current version of this Policy will always be accessible at wd338.cam/privacy-policy.

13.2 Where an amendment materially changes how we process your Personal Data or affects your rights under this Policy, wd338 will notify you by email to your registered address at least 14 days before the amendment takes effect. The updated Policy will display the revised "Last Updated" date at the top of the page.

13.3 Your continued use of the wd338 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

14 Contact & Complaints

14.1 For any questions, concerns, or requests relating to this Privacy Policy or wd338's data processing practices, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly on the wd338 Platform — for immediate assistance with account-related privacy questions.
• Email: [email protected] — for formal privacy rights requests, data breach notifications, and detailed policy inquiries. Please use the subject line "Privacy Policy Inquiry" or "Privacy Rights Request" as appropriate.

14.2 wd338 will acknowledge all privacy-related email inquiries within 48 hours (WIB business hours) and will provide a substantive response within 30 days of receiving a valid request. For complex requests, we will communicate an estimated timeline for resolution.

14.3 If you are dissatisfied with wd338's response to a privacy concern or believe that your Personal Data has been processed in breach of this Policy, you may escalate your complaint by requesting a review by a senior compliance officer. Please indicate this clearly in your written correspondence to [email protected].