wso38 Privacy Policy

In this Privacy Policy, the following terms carry the meanings assigned below unless the context clearly requires otherwise.

This Privacy Policy describes how wso38 collects, uses, stores, shares, and protects the Personal Data of individuals who register accounts, browse the platform, or otherwise interact with wso38's services. It applies to all members and visitors regardless of whether they are located in Jakarta, Surabaya, Bandung, Bali, Medan, or elsewhere in Indonesia.

This policy should be read alongside our Terms & Conditions, which govern the overall relationship between wso38 and its members. By creating a wso38 account or continuing to use the platform after any update to this policy, you acknowledge that you have read and understood its contents.

wso38 is committed to handling Personal Data responsibly and in accordance with applicable international data protection principles. Our practices are designed to be transparent, proportionate, and respectful of the privacy interests of every member.

wso38 collects Personal Data across several categories depending on how you interact with our platform. The table below summarises the main data types we hold and their source.

wso38 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health records, or biometric data beyond what is strictly required for identity verification purposes.

wso38 collects Personal Data through the following channels:

• Direct interactions: When you complete the wso38 registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account profile, you provide data directly to us.
• Automated technical collection: When you visit or use the wso38 platform, our servers and analytics tools automatically record Technical Data and Usage Data including your IP address, device identifiers, and session behaviour. This collection is necessary to operate the platform securely and detect fraudulent activity.
• Cookies and similar technologies: The wso38 platform uses cookies and similar tracking technologies to maintain your session, remember preferences, and support fraud prevention. Full details are provided in Section 8 of this policy.
• Third-party sources: In limited circumstances, wso38 may receive data about you from third-party KYC verification providers, fraud screening services, or payment processors as part of identity verification or transaction monitoring processes.

wso38 processes your Personal Data for the following specific and documented purposes:

• Account management: To create, maintain, and administer your wso38 account, including authentication, password recovery, and profile updates.
• Identity verification (KYC): To verify your age (21+), identity, and residency as required before authorising withdrawals and as part of our anti-money-laundering obligations.
• Payment processing: To process deposits and withdrawals via local Indonesian bank transfers and e-wallets, and to detect and prevent fraudulent transactions.
• Service delivery: To provide access to wso38's gaming products including live casino, sports betting, slots, and other offerings available on the platform.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Responsible gaming: To administer deposit limits, self-exclusion requests, cooling-off periods, and other responsible gaming tools you activate on your account.
• Security and fraud prevention: To monitor for suspicious account activity, detect bonus abuse, prevent unauthorised access, and protect the integrity of the wso38 platform.
• Legal and regulatory compliance: To fulfil obligations under applicable law, respond to court orders, and co-operate with regulatory and law enforcement authorities where required.
• Platform improvement: To analyse usage patterns, conduct testing, and improve the performance, security, and features of the wso38 platform on an aggregated and anonymised basis where possible.
• Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and product updates via email or SMS, but only where you have explicitly opted in to receive such communications. You may withdraw your marketing consent at any time by contacting support.

wso38 processes your Personal Data on the following legal bases, which are established under internationally recognised data protection principles:

• Contractual necessity: Processing that is required to fulfil the contract between wso38 and you as a member — including account creation, payment processing, game access, and KYC verification.
• Legal obligation: Processing that wso38 is required to carry out under applicable law, including anti-money-laundering regulations, age verification requirements, and responses to lawful requests from regulatory authorities.
• Legitimate interests: Processing carried out to pursue wso38's legitimate business interests — such as fraud detection, security monitoring, and platform improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, sending you marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

wso38 does not sell your Personal Data. We share Personal Data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: We share financial data with our payment processing partners — including providers facilitating transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely to process your deposit and withdrawal transactions.
• KYC and identity verification providers: We share identity documents and related data with licensed third-party KYC verification services to confirm your age, identity, and residency as required by our operating licence.
• Fraud prevention and security services: We share Technical Data and transaction records with fraud screening providers to detect and prevent abuse of the wso38 platform.
• Game providers: Certain game studios integrated into wso38 — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe — may receive limited session data necessary to deliver their games. These providers are bound by data processing agreements that restrict their use of your data to that purpose only.
• Legal and regulatory authorities: We will disclose Personal Data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal obligation, court order, or regulatory direction. Where legally permissible, we will attempt to notify you of such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of wso38's assets, your Personal Data may be transferred to the successor entity. We will notify members of any such transfer and the successor's privacy commitments before the transfer takes effect.

All Third-Party Processors engaged by wso38 are required to enter into data processing agreements that impose equivalent data protection standards and restrict their use of your Personal Data to the purposes for which it was shared.

The wso38 platform uses cookies and similar technologies to deliver a functional, secure, and personalised experience. Below is a summary of the cookie categories in use.

You can manage cookie settings through your browser's privacy controls. Please note that disabling strictly necessary or security cookies will impair your ability to use the wso38 platform. wso38 does not use cookies to serve third-party advertising or to track your activity on websites outside of the wso38 platform.

wso38 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Transport encryption: All data transmitted between your device and wso38 is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive data stored on wso38 servers — including identity verification documents and financial records — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to systems containing Personal Data is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all staff with data access privileges.
• Password hashing: Member passwords are never stored in plain text. They are hashed using a modern cryptographic algorithm designed to resist brute-force attacks.
• Intrusion detection: wso38 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Regular security audits: The wso38 platform undergoes periodic security assessments, including vulnerability scanning and penetration testing, conducted by independent specialists.

Despite these measures, no internet transmission or data storage system can be guaranteed to be completely secure. In the unlikely event of a data breach that poses a material risk to your rights, wso38 will notify affected members and the relevant authorities within the timelines required by applicable law.

wso38 retains your Personal Data only for as long as necessary to fulfil the specific purpose for which it was collected, or as required by applicable law or our operating licence conditions. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five years after account closure, to comply with anti-money-laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in compliance with financial regulatory requirements.
• KYC documents: Retained for a minimum of five years after the conclusion of the business relationship, or longer if required by applicable law.
• Customer support communications: Retained for up to two years from the date of the last interaction, or longer where the matter relates to an unresolved dispute or legal proceeding.
• Technical and usage data: Retained for up to 12 months on an identifiable basis, after which it is aggregated or anonymised for analytical purposes.
• Marketing consent records: Retained for as long as you remain opted in, and for a minimum of two years after you withdraw consent as evidence of the consent and its withdrawal.

When Personal Data is no longer required and no legal obligation mandates its retention, wso38 will securely delete or irreversibly anonymise it in accordance with our internal data retention and disposal procedures.

As a wso38 member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team via live chat or email at [email protected].

• Right of access: You may request a copy of the Personal Data wso38 holds about you. We will provide this within 30 days of a valid request, free of charge for the first request in any 12-month period.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purposes for which it was collected, or where you withdraw consent — you may request deletion of your Personal Data. This right is subject to overriding legal retention obligations.
• Right to restrict processing: You may request that we limit how we process your Personal Data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including any profiling activities. wso38 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

wso38 will respond to all valid rights requests within 30 calendar days. In exceptional circumstances involving complexity or volume, we may extend this period by a further 30 days, with notification provided to you within the initial 30-day window.

wso38 is strictly an adults-only platform. You must be at least 21 years of age to register an account or use any wso38 service. wso38 does not knowingly collect Personal Data from any individual under the age of 21.

If wso38 identifies or is notified that Personal Data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated data, and — where a deposit has been made — return any funds to the originating payment method after completing the necessary verification steps.

Parents or guardians who believe that a minor may have registered a wso38 account should contact our support team immediately via live chat or at [email protected] so that appropriate action can be taken without delay.

The wso38 platform may display or reference the names of third-party service providers — such as game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) and payment brands. These references are informational only. wso38 does not include active outbound links to external websites within the main platform interface.

wso38 accepts no responsibility for the privacy practices of any third party. If you independently navigate to a third-party website, we encourage you to review that party's privacy policy before providing any Personal Data.

wso38 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our operating licence conditions. When we make material changes, we will post a prominent notice on the wso38 platform and, where practicable, send a notification to the email address registered on your account.

The revised Privacy Policy will take effect on the date specified in the update notice. Your continued use of the wso38 platform after the effective date constitutes acceptance of the updated policy. If you do not agree with the changes, you should stop using the platform and request account closure before the effective date.

The date shown in the "Last Updated" line at the top of this page reflects the date of the most recent substantive revision.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wso38 handles your Personal Data, please reach out to us through one of the following channels:

• Live Chat: Available directly on the wso38 platform, 08:00–24:00 WIB daily, staffed by native Indonesian-speaking agents who can assist with privacy enquiries in either English or Bahasa Indonesia.
• Email: [email protected] (displayed as plain text — not a clickable link). Please include "Privacy Request" in your subject line so that your enquiry is routed to the appropriate team.

wso38 aims to acknowledge all privacy-related enquiries within 24 hours of receipt. Substantive responses to data subject rights requests will be provided within 30 calendar days as described in Section 11.