Privacy Policy — dw288

Definitions

In this Privacy Policy, the following terms carry the meanings assigned below unless context clearly requires otherwise:

• "dw288" / "we" / "us" / "our" — the dw288 online betting and gaming platform accessible at dw288.app and all associated subdomains and services.
• "Member" / "Player" / "you" / "your" — any individual who has registered an account on the dw288 platform or who accesses the dw288 platform without registration.
• "Personal Data" — any information that identifies or could reasonably be used to identify a specific natural person, including names, national identity numbers, contact details, financial account information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "KYC" (Know Your Customer) — the identity and age verification process required before processing a Member's first withdrawal, involving the collection and review of government-issued identity documentation.
• "Cookies" — small text files placed on your device by the dw288 platform to support session management, preference storage, and anonymous analytics.
• "Third-Party Service Providers" — organisations that process personal data on dw288's behalf under contract, including KYC verification partners, payment processors, and platform security providers.

Data We Collect

dw288 collects personal data across several categories, each corresponding to a specific operational purpose. The table below outlines the primary categories of personal data collected from dw288 members:

How Data Is Collected

dw288 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically when you access the dw288 platform, including via cookies, server logs, and session tracking systems. See Section 9 for full details on cookies.
• Third-party KYC partners: Where dw288 engages a contracted third-party verification service to assist with identity or age verification, that service may return verification results (pass/fail/additional documentation required) to dw288 as part of the KYC process. dw288 does not receive raw third-party credit bureau data.
• Payment processors: Transaction status confirmations returned by local Indonesian bank transfer and e-wallet payment gateways. dw288 receives only transaction reference codes and status indicators — not full banking credentials.

Purposes of Processing

dw288 processes your personal data only for the specific purposes listed below. We do not process personal data for any purpose incompatible with those stated here without first obtaining your explicit consent:

• Account creation and management: Setting up and maintaining your dw288 member account, verifying your identity and age (21+ requirement), and administering your account profile.
• Service delivery: Processing your deposits and withdrawals in IDR via supported Indonesian banks and e-wallets, recording wager activity, and delivering game results.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, money laundering, and other prohibited conduct as defined in the dw288 Terms & Conditions.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling, administering self-exclusion and deposit limit requests, and complying with responsible gaming obligations.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Legal and regulatory compliance: Meeting obligations imposed by applicable law, including KYC requirements, record-keeping mandates, and responding to lawful requests from competent authorities.
• Platform improvement: Analysing anonymised usage data in aggregate to understand how members interact with the dw288 platform, identify technical issues, and improve the overall user experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about dw288 products and services — but only where you have not opted out of receiving such communications. You may opt out at any time by contacting the dw288 support team.

Legal Basis for Processing

dw288 processes personal data on the following legal grounds, each applicable to the specific processing activity described:

• Contractual necessity: Processing required to fulfil the dw288 member agreement — including account registration, transaction processing, and service delivery — is carried out on the basis that it is necessary for the performance of our contract with you.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement is based on dw288's legitimate interest in operating a secure, fair, and responsible gaming platform. These interests are balanced against your rights and do not override them.
• Legal obligation: Processing required to meet KYC, anti-money laundering, and other regulatory obligations is carried out on the basis of compliance with applicable legal requirements.
• Consent: Where dw288 processes personal data for marketing communications or optional personalisation features, such processing is based on your consent, which you may withdraw at any time without affecting any other aspect of your dw288 account or the services available to you.

Data Sharing

dw288 does not sell, rent, or share your personal data with any third party for that party's own commercial or marketing purposes. Personal data is shared only in the following limited and controlled circumstances:

• Third-party service providers operating under contract: dw288 engages a small number of contracted service providers who process personal data strictly on dw288's behalf and under dw288's instructions. These include KYC verification partners, payment gateway operators (supporting transactions via BCA, BRI, BNI, Mandiri, and e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja), platform security providers, and cloud infrastructure providers. All such providers are bound by data processing agreements that prohibit use of your data for any purpose beyond the contracted service.
• Legal and regulatory disclosure: dw288 may disclose personal data to competent governmental or regulatory authorities where required to do so by applicable law, court order, or lawful demand. dw288 will, where permitted by law, notify affected members of such disclosure requests.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of the assets of the dw288 platform operator, personal data held by dw288 may be transferred to the acquiring entity, subject to that entity assuming equivalent privacy obligations. Affected members will be notified in advance of any such transfer.
• Fraud prevention networks: Where dw288 identifies activity on the platform that constitutes or is reasonably suspected to constitute fraud, money laundering, or other financial crime, relevant account data may be shared with specialist fraud prevention organisations or law enforcement agencies.

Data Security

dw288 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and dw288 servers is encrypted using 256-bit SSL/TLS protocols. dw288 enforces HTTPS across all platform endpoints with no fallback to unencrypted HTTP.
• Encryption at rest: Sensitive personal data — including KYC documents, financial account identifiers, and authentication credentials — is stored in encrypted form on dw288 servers.
• Access controls: Access to personal data within dw288's internal systems is restricted on a strict need-to-know basis. Customer support agents, compliance staff, and technical personnel are granted access only to the data necessary for their specific role.
• Secure KYC document handling: Identity documents submitted for KYC verification are stored in an isolated, access-controlled document vault. Documents are retained only for the minimum period required by applicable KYC obligations and are securely deleted thereafter.
• Intrusion detection and monitoring: The dw288 platform infrastructure is continuously monitored for anomalous access patterns, potential intrusions, and data exfiltration attempts.
• Incident response: In the event of a personal data breach that poses a risk to affected members, dw288 will notify the affected Members without undue delay and will take immediate remedial action to contain the breach and mitigate potential harm.

While dw288 takes all reasonable and industry-standard precautions to protect your personal data, no online platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your dw288 account credentials — see the dw288 Terms & Conditions for full account security obligations.

Data Retention

dw288 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the duration of your active dw288 membership and for a period of 5 years following voluntary account closure or termination, to meet anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification, in accordance with applicable KYC obligations. Documents are securely deleted at the end of the retention period.
• Transaction records: Deposit and withdrawal records are retained for 5 years from the date of the transaction.
• Support communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction, to support dispute resolution and quality assurance.
• Technical and usage logs: Server access logs and session data are retained for a maximum of 12 months, after which they are anonymised or deleted.
• Marketing consent records: Records of your consent to or opt-out from marketing communications are retained for the lifetime of your dw288 account and for 1 year following account closure.

Upon expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction methods or irreversibly anonymised such that it can no longer be associated with any individual.

Cookies & Tracking Technologies

The dw288 platform uses cookies and similar tracking technologies to support core platform functionality, security, and anonymous performance analytics. The following categories of cookies are used:

• Strictly necessary cookies: Required for the dw288 platform to function correctly — including session authentication, CSRF protection, and load balancing. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your platform preferences, such as language settings and last-visited game category. These improve your experience but are not essential to core functionality.
• Analytics cookies: Anonymous, aggregated cookies that help dw288 understand how members navigate the platform, which pages are most visited, and where technical issues arise. No personally identifiable information is transmitted via analytics cookies. dw288 uses only self-hosted or privacy-respecting analytics tools — no data from these cookies is shared with third-party advertising networks.
• Security cookies: Short-lived cookies used to detect and prevent fraudulent login attempts, credential stuffing attacks, and other automated abuse of the dw288 login system.

dw288 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. Your browsing activity on the dw288 platform is not shared with external advertising platforms.

Your Rights

As a dw288 member, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the dw288 support team via live chat or email. dw288 will respond to all valid requests within 30 days of receipt:

• Right of access: You have the right to request a copy of the personal data that dw288 holds about you, along with information about how that data is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held by dw288 about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to dw288's legal obligations to retain certain data (e.g., KYC records and transaction records for the retention periods set out in Section 8).
• Right to restriction of processing: You have the right to request that dw288 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: You have the right to receive a copy of personal data that you have provided to dw288 in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where dw288 processes your personal data on the basis of consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of dw288's legitimate interests, where you believe your fundamental rights and freedoms override those interests.

dw288 will not charge a fee for processing data rights requests submitted in good faith. Where a request is manifestly unfounded or excessive, dw288 reserves the right to charge a reasonable administrative fee or decline to act on the request, subject to providing written justification.

Minors

The dw288 platform is strictly for adults aged 21 years and over. dw288 does not knowingly collect personal data from any individual under the age of 21. Registration on the dw288 platform requires a declaration of age, and KYC verification is used to confirm that all members meet the 21+ eligibility requirement.

If dw288 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, the data will be securely deleted, and any associated funds will be returned to the depositing payment method following an investigation. If you believe that a minor has registered an account on the dw288 platform, please contact the support team immediately so that appropriate action can be taken.

International Data Transfers

The dw288 platform operates with infrastructure and service providers that may be located outside of Indonesia. Where personal data is transferred to a jurisdiction outside Indonesia, dw288 ensures that such transfers are subject to appropriate contractual safeguards — including data processing agreements that impose privacy and security obligations equivalent to those set out in this Privacy Policy.

dw288 does not transfer personal data to countries or jurisdictions that do not provide an adequate level of data protection without first establishing appropriate contractual protections. KYC documents and financial data relating to Indonesian members are handled with heightened transfer controls given their sensitivity.

Policy Amendments

dw288 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change to the categories of data collected, the purposes for which data is used, or the parties with whom data is shared — dw288 will notify registered members via in-platform notification or email to the address registered on their account, at least 7 days before the amended Privacy Policy takes effect.

Your continued use of the dw288 platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. The "Last Updated" date at the top of this document reflects the date on which the current version came into force. The most current version of this Privacy Policy is always accessible at dw288.app/privacy-policy.

Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by dw288, please contact the dw288 privacy and support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the dw288 platform. Live chat is the fastest way to reach a dw288 support agent and is staffed by Indonesian-speaking representatives at all times.
• Support Email: [email protected] — responses are provided within 24 hours during standard operating periods. For formal data rights requests, please include "Data Rights Request" in your email subject line to ensure prompt routing to the appropriate team.
• Support Hours: 24 hours — WIB (UTC+7), every day of the year including all Indonesian public holidays.

dw288 is committed to resolving all privacy-related concerns promptly, transparently, and in accordance with the principles set out in this Privacy Policy. We take every data rights request seriously and will provide a substantive written response within the 30-day timeframe set out in Section 10.