Privacy Policy

1. Introduction

dw888 ("we," "us," "our") operates an online gaming platform accessible at https://dw888.cam, providing casino games, live dealer experiences, sports betting, and lottery services including togel (Indonesian traditional numbers lottery) to players in Indonesia. We recognize the trust you place in us when sharing your personal information and take our responsibility to protect that data seriously.

This Privacy Policy describes our practices concerning the collection, use, disclosure, and protection of personal data in compliance with international data protection standards and Indonesian privacy regulations where applicable. This policy applies to all users of dw888 services, regardless of how you access our platform—whether through desktop browser, mobile browser, or any future applications we may develop.

We encourage you to read this Privacy Policy carefully. If you have questions or concerns about how we handle your personal data, please contact our Data Protection Officer using the contact information provided in Section 12.

2. Data Controller Information

dw888 acts as the data controller for personal information collected through our gaming platform. As data controller, we determine the purposes for which and the means by which your personal data is processed. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently in accordance with applicable data protection regulations.

For all privacy-related inquiries, data access requests, or concerns regarding the processing of your personal information, you may contact us at:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond to all privacy inquiries within 30 days

3. Information We Collect

dw888 collects several categories of personal information necessary to provide our gaming services, ensure platform security, comply with legal obligations, and improve user experience. The information we collect falls into the following categories:

3.1 Account Registration Information

When you create an account with dw888, we collect:

• Personal Identification: Full legal name (as it appears on your Indonesian KTP), date of birth, gender, nationality
• Contact Information: Email address, mobile phone number, residential address (province, city, postal code)
• Account Credentials: Username and encrypted password (we store passwords in hashed format and cannot retrieve your original password)

3.2 Identity Verification (KYC) Documents

To comply with regulatory requirements and prevent fraud, we require identity verification documents including:

• Indonesian KTP (Kartu Tanda Penduduk): Clear copy or photograph showing your full name, photograph, date of birth, NIK (identification number), and address
• Proof of Address: Utility bill, bank statement, or government-issued document dated within the last three months confirming your residential address
• Verification Selfie: In some cases, a photograph of you holding your KTP for enhanced identity confirmation
• Proof of Payment Method: Bank statement or e-wallet screenshot confirming ownership of the payment method used for deposits (with sensitive account numbers partially obscured)

3.3 Financial and Transaction Data

To process deposits, withdrawals, and maintain accurate account records, we collect:

• Payment Method Details: Bank account information (BCA, BRI, BNI, Mandiri account numbers), e-wallet identifiers (OVO, DANA, GoPay phone numbers or account IDs)
• Transaction History: Deposit amounts, withdrawal amounts, dates and times of financial transactions, transaction IDs, payment processor confirmations
• Bonus and Promotional Data: Bonuses claimed, wagering progress, bonus terms acceptance, promotional code usage

3.4 Gaming Activity and Behavior

To provide gaming services and detect fraudulent or irregular behavior, we automatically collect:

• Game Activity: Games played, bet amounts, win/loss records, game session durations, favorite games
• Sports Betting Activity: Sports events bet on (including BRI Liga 1, EPL, La Liga matches), bet types (single, accumulator, live betting), odds selected, bet outcomes
• Lottery Participation: Togel markets played (Singapore, Hong Kong, Sydney, Macau), numbers selected, draw dates, prize winnings
• Responsible Gaming Data: Deposit limits set, self-exclusion status, session time tracking, reality check acknowledgments

3.5 Technical and Device Information

When you access dw888, we automatically collect certain technical data:

• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows), browser type and version, screen resolution
• Network Information: IP address, internet service provider, general geographic location (city/region level, not precise GPS coordinates)
• Usage Data: Pages visited, features used, time spent on platform, referring website, click patterns, navigation paths
• Log Data: Access times, error messages, system crashes, security incidents

3.6 Communication Records

When you contact dw888 customer support or communicate with us, we retain:

• Support Interactions: Live chat transcripts, email correspondence, WhatsApp messages, phone call recordings (where permitted by law and with notice)
• Feedback and Surveys: Responses to customer satisfaction surveys, product feedback, feature requests
• Marketing Communications: Email open rates, promotional offer responses, communication preferences

4. How We Use Your Information

dw888 uses the personal information we collect for specific, legitimate purposes. We process your data based on the following legal grounds:

4.1 Account Management and Service Delivery

We use your information to create and maintain your gaming account, process your deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay, calculate and credit winnings, manage your account balance in Indonesian Rupiah (IDR), and provide access to our gaming portfolio including casino games, sports betting, and togel lottery markets.

4.2 Identity Verification and Fraud Prevention

We process your KYC documents and personal data to verify your identity and confirm you meet our 21+ age requirement, prevent underage gambling, detect and prevent fraudulent activity including money laundering and bonus abuse, identify duplicate accounts and circumvention attempts, comply with anti-money laundering (AML) regulations, and protect against account takeover and unauthorized access.

4.3 Legal and Regulatory Compliance

We use your data to comply with our international gaming license obligations, respond to lawful requests from law enforcement or regulatory authorities, maintain records required by gaming regulations, fulfill tax reporting obligations where applicable, and enforce our Terms & Conditions and resolve disputes.

4.4 Platform Security and Technical Operations

We process technical and usage data to maintain platform security and prevent cyber attacks, monitor system performance and identify technical issues, troubleshoot and resolve bugs or errors, optimize platform speed and reliability, and ensure compatibility across devices and browsers.

4.5 Customer Support and Communication

We use your contact information and communication records to respond to your questions, concerns, and support requests, provide assistance with deposits, withdrawals, and game issues via Indonesian-speaking support agents, send important account notifications including security alerts and policy updates, notify you of completed transactions and withdrawals, and communicate responsible gaming resources if we detect signs of problem gambling.

4.6 Marketing and Promotions (With Your Consent)

Where you have provided consent, we may use your information to send promotional offers, bonuses, and special deals tailored to Indonesian players, notify you of new games, sports betting markets, or togel draws, share information about tournaments and competitions, and provide personalized recommendations based on your gaming preferences. You may withdraw marketing consent at any time by adjusting your account preferences or clicking "unsubscribe" in promotional emails.

4.7 Analytics and Platform Improvement

We analyze aggregated and anonymized data to understand how players use our platform and identify popular features, improve user interface and navigation, develop new features and gaming options, optimize payment processing times, and enhance overall user experience for Indonesian players.

5. Information Sharing and Disclosure

dw888 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

5.1 Payment Service Providers

We share necessary financial data with Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process your deposit and withdrawal transactions. These providers operate under strict banking security standards and are bound by their own privacy policies.

5.2 Game and Software Providers

We share limited technical data (user ID, bet amounts, game selections) with our licensed game providers to deliver casino games, live dealer experiences, and sports betting services. Game providers do not receive your personal identification information or contact details.

5.3 Identity Verification Services

We may use third-party KYC verification services to authenticate your Indonesian KTP documents and prevent identity fraud. These services process your identity documents under strict data protection agreements and do not retain your data beyond verification purposes.

5.4 Legal and Regulatory Authorities

We may disclose your information when required by law to comply with valid legal processes such as court orders, subpoenas, or warrants, respond to lawful requests from law enforcement or government agencies, protect our legal rights and enforce our Terms & Conditions, prevent fraud, illegal activity, or threats to public safety, or comply with gaming regulatory investigations.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you via email and platform notice before any such transfer, and the acquiring entity will be bound by this Privacy Policy unless you consent to a new policy.

5.6 Service Providers and Contractors

We engage carefully vetted third-party service providers to assist with hosting and infrastructure, customer support operations, marketing and communications, data analytics and reporting, and security and fraud prevention. These providers access personal data only to the extent necessary to perform their functions and are contractually obligated to protect your data and use it only for authorized purposes.

6. Data Security Measures

dw888 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

6.1 Encryption and Secure Transmission

All data transmitted between your device and our servers is protected by 256-bit SSL (Secure Socket Layer) encryption—the same standard used by major Indonesian banks like BCA, BRI, BNI, and Mandiri. This ensures that your login credentials, financial data, and personal information cannot be intercepted during transmission.

6.2 Secure Data Storage

Personal data is stored in secure, encrypted databases hosted in facilities with physical security controls including 24/7 monitoring, restricted access, and environmental protections. Passwords are stored using one-way cryptographic hashing—we cannot retrieve your original password, only verify that you've entered the correct one.

6.3 Access Controls and Authentication

Access to personal data is restricted to authorized dw888 personnel who require it to perform their job functions. All staff undergo security training and are bound by confidentiality obligations. We implement role-based access controls, multi-factor authentication for system access, regular access reviews and audits, and immediate revocation of access for terminated employees.

6.4 Security Monitoring and Incident Response

We maintain continuous monitoring systems to detect suspicious activity, conduct regular security assessments and vulnerability testing, employ intrusion detection and prevention systems, maintain incident response procedures for data breaches, and conduct periodic security audits by independent third parties.

Despite our security measures, no system is completely impenetrable. If we become aware of a data breach affecting your personal information, we will notify you promptly via email and provide information about the breach and steps you can take to protect yourself.

7. Data Retention Period

dw888 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:

7.1 Active Account Data

While your account remains active, we retain all personal data, gaming history, and transaction records to provide ongoing services and maintain accurate account records.

7.2 Closed Account Data

After account closure, we retain certain data for legal and regulatory compliance purposes:

• Financial Records: Transaction history, deposit/withdrawal records retained for 7 years to comply with financial regulations and tax requirements
• KYC Documents: Identity verification documents retained for 5 years for anti-money laundering compliance
• Gaming Activity: Bet history and game records retained for 3 years for dispute resolution and regulatory audits
• Communication Records: Customer support interactions retained for 2 years for quality assurance and dispute resolution

7.3 Marketing Data

If you withdraw consent for marketing communications, we will cease promotional emails immediately but may retain your email address on a suppression list to ensure we don't contact you again.

7.4 Data Deletion

After applicable retention periods expire, personal data is securely deleted using industry-standard data destruction methods. You may request early deletion of certain data types—see Section 8 for information about your privacy rights.

8. Your Privacy Rights

Under applicable data protection regulations, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (typically PDF or CSV) within 30 days of your request.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information directly through your account settings, or contact customer support for assistance with changes to name, date of birth, or address information.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, you withdraw consent for data processing based on consent, or you object to processing and there are no overriding legitimate grounds for continued processing.

Note that we may be unable to delete certain data if retention is required for legal compliance, defending legal claims, or fulfilling contractual obligations (such as processing pending withdrawals).

8.4 Right to Restrict Processing

You may request that we limit how we use your personal data in specific situations, such as while we verify the accuracy of data you have contested, while determining whether we have legitimate grounds to process data you have objected to, or if you need the data preserved for legal claims even though we no longer need it.

8.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider. This right applies to data you provided to us with your consent or for contract performance, and where processing is carried out by automated means.

8.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing emails by clicking "unsubscribe" or adjusting your account communication preferences.

8.7 Right to Withdraw Consent

Where we process your data based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

8.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will verify your identity before processing your request and respond within 30 days. There is no fee for exercising your privacy rights unless requests are manifestly unfounded or excessive.

9. Cookies and Tracking Technologies

dw888 uses cookies and similar tracking technologies to enhance your experience and analyze platform usage:

9.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit our website. They help us recognize your device on subsequent visits and remember your preferences.

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality, including maintaining your login session, remembering your language preference, and enabling secure transactions
• Performance Cookies: Collect anonymous information about how you use dw888, helping us identify technical issues and optimize platform performance
• Functionality Cookies: Remember your preferences such as favorite games, bet slip settings, and display options
• Analytics Cookies: Help us understand user behavior through tools like Google Analytics, allowing us to improve user experience

9.3 Managing Cookie Preferences

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are stored. Note that blocking essential cookies may affect platform functionality, potentially preventing login or transaction processing.

10. International Data Transfers

dw888 operates internationally and may transfer your personal data to countries outside Indonesia for processing and storage. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by data protection authorities
• Binding Corporate Rules for transfers within our corporate group
• Adequacy decisions where the destination country has been deemed to provide adequate data protection

Despite international transfers, your data remains subject to the protections outlined in this Privacy Policy, and we require all recipients to maintain equivalent security standards.

11. Changes to This Privacy Policy

dw888 may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you by:

• Sending email notification to your registered email address
• Displaying a prominent notice on the dw888 platform
• Updating the "Effective Date" at the top of this policy

We encourage you to review this Privacy Policy periodically. Your continued use of dw888 services after notification of changes constitutes acceptance of the updated policy. If you do not agree with changes, you may close your account by contacting customer support.

12. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or how dw888 handles your personal data, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Response Time: We aim to respond within 30 days to all privacy-related inquiries
• Customer Support: Available 24/7 via live chat on the dw888 platform

For specific requests regarding access, correction, deletion, or portability of your personal data, please clearly state the nature of your request and provide identification verification (username and registered email address) to help us process your request efficiently.