wdg188 Privacy Policy

1. Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" means the wdg188 website at https://wdg188.app, all related subpages, game interfaces, account portals, and any associated mobile web experience.
• "wdg188" / "we" / "us" / "our" means the operator of the wdg188 platform and all affiliated entities responsible for data processing activities described in this policy.
• "Player" / "you" / "your" means any individual who visits, registers on, or uses the Platform.
• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly — including but not limited to name, email address, mobile number, date of birth, national identity number, payment account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "KYC" means Know Your Customer — the identity and age verification process applied to Players before withdrawal access is granted.
• "AML" means Anti-Money Laundering — the compliance framework applied by wdg188 to detect and prevent financial crime on the Platform.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, remember preferences, and support analytics.
• "Third-Party Processors" means external service providers engaged by wdg188 to process Personal Data on our behalf, including payment processors, KYC verification services, and game studio APIs.

2. Scope & Applicability

2.1 This Privacy Policy applies to all Personal Data collected by wdg188 in connection with the operation of the Platform, whether collected at the point of registration, during account use, via the Platform's live chat support channels, or through automated technical means such as server logs and cookies.

2.2 This policy applies to all Players regardless of the device — desktop, mobile browser — used to access the Platform.

2.3 The wdg188 Platform is operated for and marketed to players based in Indonesia. By using the Platform, you confirm that you are at least 21 years of age and that providing your personal data to wdg188 for the purposes described in this policy is consistent with your rights and obligations under the laws of Indonesia.

2.4 This Privacy Policy is incorporated into and should be read alongside the wdg188 Terms & Conditions. In the event of a conflict, the Terms & Conditions take precedence on matters of contract, while this Privacy Policy takes precedence on matters of data handling.

3. Personal Data We Collect

wdg188 collects the following categories of Personal Data from Players:

3.1 Registration Data

When you create a wdg188 account, we collect: full legal name; email address; date of birth; Indonesian mobile phone number; username; and a hashed form of your chosen password (we never store passwords in plain text).

3.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal, we collect copies or photographs of: a valid government-issued photo identification document (KTP or passport); and proof of the payment method used for deposits (e.g., a screenshot of your BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay account showing your name and account number). This data is processed solely for the purpose of verifying your identity and age and for compliance with AML obligations.

3.3 Financial Transaction Data

We record details of all deposits and withdrawals made through the Platform, including: transaction date and time; transaction amount in IDR; payment method type (e.g., BCA bank transfer, GoPay, OVO); and a reference number or masked account identifier associated with the payment. Full payment credentials (full account numbers, card numbers) are never retained on wdg188 servers — they are handled exclusively by the relevant payment processor.

3.4 Gaming Activity Data

We record your gaming activity on the Platform, including: games played and game provider; bet amounts and game results; session start and end times; bonus activations and wagering progress. This data is used for account management, dispute resolution, responsible gaming monitoring, and internal analytics to improve the Platform.

3.5 Technical & Device Data

When you access the Platform, our servers automatically collect: IP address; browser type and version; operating system; device type (desktop or mobile); referring URL; and session timestamps. This data is collected for security monitoring, fraud prevention, and aggregate analytics. It does not reveal your precise location.

3.6 Communications Data

When you contact the wdg188 support team via live chat, email, or WhatsApp, we retain a record of that communication — including the content of messages and timestamps — for the purpose of resolving your query and for quality assurance and training purposes.

4. How We Collect Personal Data

wdg188 collects Personal Data through the following methods:

• Directly from you: at account registration, during KYC submission, when updating account profile settings, and when contacting support.
• Automatically: through server-side logs, session tracking, and first-party cookies placed on your browser when you visit the Platform.
• From third-party processors: KYC verification partners may provide a verified/not-verified status result and a confidence score to wdg188 following your submission of identity documents. Payment processors confirm transaction status and may flag suspected fraud. We do not receive raw document images from these processors after verification is complete.

5. Purposes of Processing

wdg188 processes your Personal Data for the following purposes:

Purpose	Data Categories Used
Account creation and management	Registration data, technical data
Identity and age verification (KYC)	KYC data, registration data
Processing deposits and withdrawals	Financial transaction data, KYC data
Delivering game services	Registration data, gaming activity data, technical data
Fraud detection and AML compliance	All data categories, as needed
Customer support and dispute resolution	Registration data, gaming activity, communications data
Responsible gaming monitoring	Gaming activity data, communications data
Platform security and technical operations	Technical and device data
Personalisation and product improvement	Gaming activity, technical data (aggregated and anonymised)
Compliance with legal obligations	All categories, as required by applicable regulation

6. Legal Basis for Processing

wdg188 processes Personal Data on the following legal bases:

• Contractual necessity: Processing your registration data, gaming activity, and financial transaction data is necessary to fulfil our obligations to you as a Platform user under the wdg188 Terms & Conditions.
• Legal obligation: KYC identity verification and AML transaction monitoring are required by applicable anti-money laundering and counter-terrorism financing laws and regulations. wdg188 is legally obligated to carry out these processes and to retain relevant records for the periods specified by regulation.
• Legitimate interests: Processing technical and device data for security monitoring, fraud prevention, and aggregate platform analytics serves the legitimate interests of wdg188 and of our Players in maintaining a safe and well-functioning platform. We apply a balancing test and confirm that these interests do not override your fundamental privacy rights.
• Consent: Where wdg188 processes Personal Data beyond the above bases — for example, for the purpose of sending you promotional communications — we will seek your explicit consent at the point of collection. You may withdraw consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

7.1 wdg188 does not sell, rent, or otherwise transfer your Personal Data to third parties for their own marketing or commercial purposes.

7.2 Personal Data may be disclosed to the following categories of recipient, strictly for the purposes described:

• Payment processors (e.g., the technology providers behind BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja integrations): to facilitate deposit and withdrawal transactions. These processors operate under their own privacy policies and applicable financial data regulations.
• KYC and identity verification providers: to verify your identity and age as required for compliance. Document images are transmitted securely and are not retained by wdg188 beyond the verification review period.
• Game studio APIs (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft): a session token and minimal account identifier are passed to the game engine to launch a game session. Game studios do not receive your financial or KYC data.
• IT infrastructure and cloud hosting providers: who process data on our behalf under strict data processing agreements that prohibit any independent use of your data.
• Regulatory and law enforcement authorities: wdg188 will disclose Personal Data to competent authorities where required to do so by law, court order, or binding regulatory instruction. Where legally permitted, we will inform you of such disclosure.

7.3 All third-party processors engaged by wdg188 are required to implement appropriate technical and organisational security measures and are prohibited from using your Personal Data for any purpose other than the specific service they provide to wdg188.

8. Cookies & Tracking Technologies

8.1 wdg188 uses first-party cookies — small data files placed on your browser — to support the operation of the Platform. The following categories of cookie are used:

• Essential / strictly necessary cookies: These are required for the Platform to function. They maintain your login session, remember your currency and language preference, and protect against cross-site request forgery (CSRF). The Platform cannot function without these cookies. No consent is required for their placement.
• Analytics cookies: These collect aggregated, anonymised data about how Players navigate the Platform — which pages are visited most often, typical session lengths, and common navigation paths. This data is used solely to improve the Platform and is never tied back to individual Player identities.
• Security cookies: These help wdg188 detect anomalous login behaviour, rapid account switching, and other indicators of fraudulent or automated activity on the Platform.

8.2 wdg188 does not use third-party advertising cookies, behavioural tracking cookies, or cross-site tracking pixels. No data collected via cookies on the wdg188 Platform is shared with advertising networks.

8.3 You may configure your browser to block or delete cookies. Note that blocking essential cookies will prevent you from logging in and using the Platform. Analytics and security cookies can be disabled without affecting core Platform functionality, though doing so may reduce the security monitoring coverage applied to your account.

9. Data Retention

9.1 wdg188 retains Personal Data only for as long as is necessary for the purposes for which it was collected, taking into account applicable legal obligations and legitimate operational needs.

9.2 The following general retention periods apply:

• Active account data (registration, gaming activity, transaction history): retained for the duration of the account and for a minimum of five (5) years following account closure, as required for AML compliance and dispute resolution purposes.
• KYC documents: retained for a minimum of five (5) years following the completion of the verification review, in accordance with standard AML record-keeping requirements.
• Support communications: retained for two (2) years from the date of the last interaction, after which they are securely deleted unless subject to an active dispute or legal proceeding.
• Technical and device data (server logs): retained for ninety (90) days for security and fraud detection purposes, then deleted on a rolling basis.
• Cookies: session cookies are deleted automatically when you close your browser. Persistent analytics cookies expire after twelve (12) months from placement.

9.3 Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10. Data Security

10.1 wdg188 implements a multi-layered security architecture to protect Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption of all data in transit between your device and the Platform;
• Encryption at rest for all sensitive stored data, including hashed passwords and tokenised payment identifiers;
• Role-based internal access controls: employees can access only the data necessary for their specific role, and access is logged and audited;
• Automated anomaly detection systems that monitor for suspicious login behaviour, unusual transaction patterns, and potential data exfiltration attempts;
• Regular internal security reviews and third-party penetration testing of the Platform infrastructure.

10.2 Notwithstanding the above measures, no data transmission over the internet or storage system is entirely immune to breach. In the event of a data breach that poses a material risk to affected Players, wdg188 will notify affected individuals promptly, describe the nature of the breach, and provide guidance on protective steps you can take.

11. Your Data Rights

11.1 As a wdg188 player, you hold the following rights with respect to your Personal Data. These rights may be exercised by contacting support at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You may request a copy of the Personal Data wdg188 holds about you. We will provide this within thirty (30) days of a verified request.
• Right to Rectification: If any Personal Data held about you is inaccurate or incomplete, you may request that it be corrected. Certain data fields — such as your registered name and date of birth — can only be corrected through the KYC verification process.
• Right to Erasure: You may request deletion of your Personal Data and Account. Note that deletion cannot override our legal obligation to retain certain AML and KYC data for the statutory retention periods set out in Section 9. Where an erasure request is fulfilled, data that must be retained for legal compliance will be anonymised rather than deleted outright.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of data or where processing may be unlawful — you may request that we restrict active processing while the matter is reviewed.
• Right to Data Portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) where processing is based on consent or contractual necessity and is carried out by automated means.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

11.2 wdg188 will respond to all data rights requests within thirty (30) days. Complex requests may require an extension of up to an additional thirty (30) days, in which case you will be informed of the delay and the reason for it.

12. Children & Minors

12.1 The wdg188 Platform is strictly for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21.

12.2 Where wdg188 discovers or reasonably suspects that an Account has been registered by or is being used by an individual under 21, we will immediately suspend the Account, conduct an investigation, and — if the suspicion is confirmed — permanently close the Account. Any Balance held in the Account at the time of closure will be handled in accordance with our Terms & Conditions and applicable legal requirements.

12.3 If you believe that a minor may have registered on the Platform, please notify us immediately at [email protected].

13. Third-Party Links

13.1 The wdg188 Platform does not contain links to third-party websites beyond what is necessary for technical integration of game studio content. This Privacy Policy applies solely to the wdg188 Platform and does not govern the data practices of any third-party game studio, payment provider, or other external service whose services you may access in connection with using wdg188.

13.2 wdg188 encourages you to review the privacy policies of any third-party service you interact with independently of the wdg188 Platform.

14. Policy Amendments

14.1 wdg188 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Platform. The "Last Reviewed" date at the top of this page will be updated accordingly.

14.2 For material changes — those that could reasonably affect your rights or expectations as a Player — wdg188 will provide notice via a prominent announcement on the Platform or by email to your registered address at least seven (7) days before the amendment takes effect.

14.3 For minor changes (such as clarifications, corrected typographical errors, or updated contact details), the revised policy takes effect immediately upon publication. Continued use of the Platform following any amendment constitutes acceptance of the updated Privacy Policy.

15. Contact & Complaints

15.1 If you have any questions about this Privacy Policy or about how wdg188 handles your Personal Data, please contact our support team through the following channels. Note that contact details are provided as plain text only and are not clickable links.

• Email: [email protected] (plain text — not a link). Use subject line "Privacy Policy Enquiry — [Your Username]".
• Live Chat: Available 24/7 on the wdg188 Platform. Identify your query as a privacy-related matter when initiating the chat so that it is routed to the appropriate team member.
• WhatsApp: +62 811 0188 188 (plain text — not a link), available 08:00–22:00 WIB.

15.2 Complaints. If you believe that wdg188 has failed to handle your Personal Data in accordance with this Privacy Policy or applicable data protection principles, you are encouraged to contact us in the first instance to allow us the opportunity to resolve the matter. We aim to acknowledge all privacy complaints within five (5) business days and to provide a substantive resolution within thirty (30) days.

15.3 If your complaint is not resolved to your satisfaction through the internal process, you retain the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.