Privacy Policy
for dw888

1.1 Scope. This Policy applies to all personal data processed in connection with the dw888 platform, including data collected when you register an account, make a deposit or withdrawal, place a wager, contact support, or simply browse the site. It applies regardless of the device you use to access dw888 — desktop, mobile browser, or any future dedicated application.

1.2 Data Controller. dw888 operates as the data controller in respect of all personal data described in this Policy. As data controller, dw888 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

1.3 Target Audience. dw888 is an online gaming platform primarily serving members located in Indonesia. References to local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and the Indonesian Rupiah (IDR / Rp) throughout this Policy reflect the platform's primary market. Members must be at least 21 years of age.

dw888 collects personal data through several distinct channels. The table below summarises each data category, the specific data points within it, and the primary collection method.

2.1 Data You Provide Voluntarily. Most personal data is collected directly from you when you register, complete KYC verification, make a transaction, or contact our support team. Providing this data is a condition of using the platform — without it, we cannot open or maintain your account.

2.2 Data Collected Automatically. When you use the platform, certain technical and behavioural data is recorded automatically by our servers and analytics systems. This is necessary for platform security, fraud detection, and service improvement. We do not use this data to build advertising profiles or sell it to data brokers.

2.3 Data from Third Parties. In limited circumstances we may receive personal data from third-party sources — for example, identity verification data from our KYC service provider to confirm the authenticity of documents you submit, or fraud-risk signals from payment processors to protect your account.

dw888 uses the personal data we collect for the following clearly defined purposes:

• Account Management: Creating, maintaining, and securing your member account; verifying your identity at registration and during KYC; authenticating your login sessions.
• Transaction Processing: Processing deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja; executing withdrawal requests to your registered payment method; maintaining accurate financial records in Indonesian Rupiah (IDR).
• Service Delivery: Providing access to all gaming products on dw888, including the sportsbook (BRI Liga 1, EPL, La Liga, Serie A, Champions League), live casino, slot games, Sic Bo, and roulette; personalising your on-platform experience based on product preferences and gaming history.
• Fraud Prevention & Security: Monitoring for suspicious activity, duplicate accounts, money laundering patterns, bonus abuse, and unauthorised access; protecting the integrity of games and financial systems.
• Legal & Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML) guidelines, retaining records required for audit purposes, and responding to lawful requests from competent authorities.
• Responsible Gaming: Monitoring gaming behaviour to identify potential signs of problem gambling; administering self-imposed deposit limits, session alerts, cooling-off periods, and self-exclusion requests; ensuring that members under the age of 21 cannot access the platform.
• Customer Support: Responding to enquiries, resolving disputes, and providing technical assistance through live chat and email.
• Platform Improvement: Using aggregated and anonymised analytics data to improve platform performance, fix bugs, and develop new features. We do not use individually identifiable data for A/B testing without your knowledge.
• Marketing Communications (opt-in only): Sending promotional offers, bonus announcements, and seasonal campaign notifications (e.g., Idul Fitri, Ramadhan, Nyepi, Imlek specials) exclusively to members who have opted in to receive such communications. You may withdraw consent at any time by updating your notification preferences or contacting support.

dw888 relies on the following legal bases for processing your personal data, consistent with internationally recognised data protection principles:

Where dw888 relies on legitimate interest as the legal basis for processing, we have conducted a balancing test and determined that our legitimate interest is not overridden by your privacy rights. You have the right to object to processing based on legitimate interest at any time — see Clause 10 for details.

5.1 Service Providers. dw888 shares personal data with a limited number of third-party service providers who process data on our behalf under binding data processing agreements. These providers include:

• Payment Processors: Banking partners and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) — to execute deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Specialist identity verification platforms that validate KTP documents, passports, and selfie photographs against government records.
• Game Studios: Certified providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft (Pocket Games Soft), Habanero, and Spribe may receive anonymised session data necessary to deliver game functionality and calculate RTP.
• Fraud Prevention & Cybersecurity Services: Providers that analyse technical data (IP addresses, device fingerprints) to detect and block fraudulent access attempts.
• Cloud Infrastructure Providers: Hosting and database services that store platform data on secure, encrypted infrastructure.

5.2 Legal Disclosures. dw888 may disclose personal data to governmental, regulatory, or law-enforcement authorities if required to do so by applicable law, court order, or other compulsory legal process. We will, where permitted by law, notify you of such a request before complying.

5.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets involving dw888, personal data held by us may be transferred to the acquiring entity as part of that transaction. You will be notified by email of any such transfer and of any material changes to how your data is processed as a result.

5.4 No Sale of Data. dw888 does not sell, rent, or license your personal data to third-party marketers, data brokers, or advertising networks under any circumstances.

6.1 Cross-Border Processing. dw888 operates infrastructure and engages service providers across multiple jurisdictions in the Asia-Pacific region and beyond. As a result, your personal data may be transferred to and processed in countries outside Indonesia.

6.2 Safeguards. Whenever personal data is transferred internationally, dw888 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to what would apply in the country of origin. Safeguards include:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with all international service providers.
• Transfer impact assessments conducted for transfers to jurisdictions without an adequacy determination.
• Technical measures including encryption in transit (TLS 1.3) and at rest (AES-256) applied regardless of where data is processed.

6.3 Enquiries. If you wish to obtain details of the specific safeguards applied to a cross-border transfer of your personal data, you may request this information by contacting [email protected].

dw888 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual. Anonymised aggregate data (e.g., platform-wide betting statistics) may be retained indefinitely for research and development purposes.

8.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. dw888 uses cookies and similar technologies (such as local storage and session tokens) to enable core platform functionality, maintain your login session, and gather aggregate usage analytics.

8.2 Cookie Categories. The cookies we deploy fall into the following categories:

8.3 Third-Party Advertising Cookies. dw888 does not deploy third-party advertising or retargeting cookies. You will not be tracked across other websites based on your dw888 activity.

8.4 Managing Cookies. You can control cookie behaviour through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Blocking strictly necessary or fraud detection cookies may prevent you from accessing certain parts of the platform. For instructions specific to your browser, refer to the browser manufacturer's support documentation.

9.1 Technical Safeguards. dw888 implements a multi-layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• TLS 1.3 encryption for all data in transit between your device and dw888 servers.
• AES-256 encryption for all personal data stored in our databases.
• Two-factor authentication (2FA) available to all members and mandatory for all internal administrative access.
• Continuous intrusion detection and anomaly monitoring across all platform infrastructure.
• Regular penetration testing conducted by independent third-party security firms.
• Strict role-based access controls — only staff with a specific operational need may access member personal data, and all such access is logged and audited.

9.2 Organisational Safeguards. All dw888 personnel who handle personal data are subject to confidentiality obligations and receive regular data protection training. Access privileges are reviewed quarterly and revoked immediately upon termination of employment or contract.

9.3 Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, dw888 will notify affected members without undue delay and, where required, will notify the relevant competent authority. Our breach response plan is tested annually.

9.4 Your Responsibility. Account security is a shared responsibility. You are responsible for keeping your login credentials confidential and for using a strong, unique password for your dw888 account. We recommend enabling 2FA. dw888 will never ask for your password via email, live chat, or any other channel.

As a dw888 member, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a complete request.

11.1 Age Requirement. dw888 is strictly an adults-only platform. You must be at least 21 years of age to register an account, access any gaming product, or conduct any financial transaction on the platform. This age threshold applies to all members regardless of their location within Indonesia — whether in Jakarta, Surabaya, Bali, Medan, Bandung, Yogyakarta, or any other city or region.

11.2 No Data Collection from Minors. dw888 does not knowingly collect, process, or retain personal data from individuals under the age of 21. All prospective members are required to confirm their date of birth during registration, and KYC verification independently confirms age. If we become aware that a minor has circumvented these controls and created an account, we will immediately suspend the account, delete all associated personal data, and reverse any financial transactions where possible.

11.3 Parental Controls. We encourage parents and guardians to make use of internet filtering tools and parental control software to restrict access to online gambling platforms by those under the age of 21 in their households. If you believe a minor has accessed dw888 using your credentials or their own, please contact us immediately at [email protected].

12.1 External Links. The dw888 platform may display informational references to third-party sports organisations, leagues (such as BRI Liga 1, the EPL, La Liga, Serie A, Bundesliga, or the Champions League), and game studios. Where any such reference includes a hyperlink to an external website, dw888 is not responsible for the privacy practices or content of that external site. We strongly recommend that you review the privacy policy of any third-party website you visit.

12.2 Game Studio Integrations. When you launch a game provided by a third-party studio (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, or Spribe), that game is delivered via an API integration. The studio may process a limited set of anonymised session data (such as a hashed session token and bet amounts) to deliver the game and calculate outcomes. dw888 does not share your name, email address, or bank details with game studios.

12.3 Payment Provider Interfaces. When you initiate a deposit or withdrawal, you may be redirected to or interact with an interface operated by your chosen payment provider (e.g., BCA mobile banking, OVO, DANA, GoPay). Any data you enter on a payment provider's own interface is governed by that provider's privacy policy, not by this Policy.

13.1 Right to Update. dw888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. All changes are effective upon publication of the revised Policy at https://dw888.app/privacy-policy.

13.2 Notification of Material Changes. Where a change to this Policy is material — meaning it significantly affects the way we process your personal data or the rights available to you — dw888 will notify you by email to your registered address and by a prominent in-platform notice at least 14 days before the change takes effect. Continuing to use the platform after the effective date of a revised Policy constitutes acceptance of those changes.

13.3 Version History. The current version number and last-updated date appear at the top of this page. If you require a copy of a prior version of this Policy, contact us at [email protected] and we will provide it where reasonably practicable.

13.4 Language. This Policy is drafted in English. In the event of any inconsistency between the English version and any translated summary, the English version shall prevail.

14.1 General Privacy Enquiries. If you have any questions, concerns, or complaints regarding this Privacy Policy or dw888's personal data practices, please contact our support team. Agents are available 24 hours a day, 7 days a week, including Indonesian public holidays.

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response Time: General enquiries are typically acknowledged within 24 hours and resolved within 5 business days. Formal data rights requests are resolved within 30 days.

14.2 Data Protection Officer. dw888 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection legislation. The DPO can be reached at the email address above by marking your message "For the Attention of the DPO".

14.3 Complaints. If you believe dw888 has not handled your personal data in accordance with this Policy or applicable law, you have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction. dw888 would welcome the opportunity to address your concerns directly before you escalate to a supervisory authority, and we ask that you contact us first.