Privacy Policy

1. Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• "wa88", "we", "us" or "the Platform" refers to the online sportsbook and live casino service accessible at https://wa88.cam.
• "You" or "the Member" refers to any natural person who has registered or is in the process of registering an account on wa88, or who browses the Platform without an account.
• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including but not limited to name, date of birth, address, email address, phone number, national identification number, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, wa88.
• "KYC" or "Know Your Customer" refers to the identity and age verification process required under wa88's compliance obligations.
• "IDR" refers to Indonesian Rupiah, the transaction currency of the Platform.

2. Data Controller

2.1 wa88 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, wa88 is responsible for ensuring that Personal Data is Processed lawfully, fairly, and transparently, and that appropriate technical and organisational safeguards are in place.

2.2 All data protection enquiries, access requests, and complaints should be directed to wa88's designated data contact. Contact details are provided in Section 14 of this Policy.

3. Data We Collect

3.1 wa88 collects only the Personal Data necessary to provide its services, meet its legal obligations, and maintain a secure and fair platform. The categories of data collected are set out in the table below.

3.2 wa88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where expressly required for responsible gaming assessments and only with the Member's explicit consent.

4. How Data Is Collected

wa88 collects Personal Data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically as you navigate the Platform, including cookies, server logs, and analytics tools. See Section 9 for details on cookies.
• Third-party sources: Data received from identity verification partners, payment processors (including Indonesian banks and e-wallet providers), and fraud prevention services for the purposes of KYC and anti-money laundering (AML) compliance.
• Publicly available sources: Information obtained from public records or databases where lawfully necessary for compliance purposes.

5. Purpose & Legal Basis for Processing

5.1 wa88 processes Personal Data only where a lawful basis exists. The primary bases on which wa88 relies are:

• Contractual necessity: Processing required to create your account, process transactions in IDR, and deliver the services you have requested.
• Legal obligation: Processing required to comply with KYC, AML, and responsible gaming obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, service improvement, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for direct marketing communications and optional personalisation features, carried out only where you have given clear, freely withdrawable consent.

5.2 wa88 does not use Personal Data for automated decision-making that produces significant legal effects on Members without human review, except where expressly required for responsible gaming interventions such as self-exclusion enforcement.

6. Data Sharing

6.1 wa88 does not sell, rent, or trade Personal Data to third parties for their own commercial purposes.

6.2 Personal Data may be shared with the following categories of recipients, strictly on a need-to-know basis and under contractual data protection obligations:

• Payment processors and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for the purpose of processing deposits and withdrawals in IDR.
• KYC and identity verification partners: Third-party identity verification services engaged to verify age and identity as required by our compliance framework.
• Game content providers: Certified studios (such as Evolution Gaming, Pragmatic Play, and others) that supply live dealer and slot content may receive anonymised session identifiers for technical integration purposes only.
• Fraud prevention and security services: Specialist providers engaged to detect and prevent fraudulent activity and unauthorised account access.
• Legal and regulatory authorities: Government bodies, law enforcement, or regulators where disclosure is required by law, court order, or in response to a lawful request.

6.3 Where data is shared with third-party processors, wa88 requires those parties to maintain appropriate technical and organisational security measures and to process data solely in accordance with wa88's documented instructions.

7. Data Retention

7.1 wa88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention framework is as follows:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years after account closure, to satisfy AML and KYC record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five years from the date of each transaction.
• Communications data: Retained for up to two years from the date of the last interaction, unless required longer for an ongoing dispute.
• Technical and usage data: Generally retained in aggregate form for up to 24 months for analytics and security purposes.
• Self-exclusion records: Retained for the full duration of the exclusion period plus five years thereafter.

7.2 When Personal Data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual.

8. Security Measures

8.1 wa88 implements a range of technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption across all pages and data transmission channels;
• Encrypted storage of sensitive data including identity documents and financial records;
• Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis;
• Regular internal security audits and vulnerability assessments;
• Two-factor authentication options for Member accounts;
• Automated fraud detection and anomalous activity monitoring.

8.2 No method of transmission over the internet or method of electronic storage is completely secure. While wa88 takes every reasonable precaution, it cannot guarantee absolute security. Members are encouraged to choose strong, unique passwords and to enable two-factor authentication on their accounts.

9. Cookies & Tracking Technologies

9.1 wa88 uses cookies and similar technologies (including web beacons and local storage) to operate the Platform, maintain session state, detect fraud, and analyse how Members use the service.

9.2 The primary categories of cookies used on wa88 are:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without impacting core functionality, including login session management and security token validation.
• Performance and ana lytics cookies: Used to measure page performance, track navigation patterns, and identify technical errors. Data collected is aggregated and anonymised.
• Functionality cookies: Store your preferences such as display settings and language selection to personalise your experience across sessions.
• Targeting cookies: Used to deliver relevant promotional content to Members who have opted in to marketing communications. These cookies do not track activity across third-party websites.

9.3 You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform, including your account dashboard.

9.4 wa88 does not use third-party advertising networks that track Members across unaffiliated websites for cross-site behavioural advertising purposes.

10. Your Rights

10.1 Subject to applicable law, you hold the following rights in relation to your Personal Data held by wa88:

• Right of Access: You may request a copy of the Personal Data wa88 holds about you, along with information on how it is used.
• Right of Rectification: You may request the correction of inaccurate or incomplete Personal Data. Some corrections — such as changes to your registered name — will require documentary evidence.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to wa88's legal retention obligations (see Section 7). Requests for erasure will be assessed individually; data subject to mandatory retention periods cannot be deleted early.
• Right to Restriction: You may request that wa88 restricts the Processing of your Personal Data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: Where Processing is based on consent or contract and carried out by automated means, you may request that wa88 provides your data in a structured, machine-readable format.
• Right to Object: You may object to Processing based on legitimate interests. wa88 will assess whether its legitimate interests override your rights and will respond accordingly.
• Right to Withdraw Consent: Where Processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of Processing carried out prior to withdrawal.

10.2 To exercise any of the rights listed above, please contact wa88 using the details in Section 14. wa88 will respond to all legitimate requests within 30 days. In cases of complexity or high volume, this period may be extended by a further 60 days, with prior notification.

10.3 wa88 will not charge a fee for processing a rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

11. Minors

11.1 The wa88 Platform is strictly restricted to individuals aged 21 years and above. wa88 does not knowingly collect Personal Data from persons under the age of 21.

11.2 If wa88 discovers or has reasonable grounds to believe that Personal Data has been collected from an individual under 21, the relevant account will be suspended immediately, all associated Personal Data will be securely deleted, and any balance in the account will be handled in accordance with the Terms & Conditions.

11.3 If you believe that a minor has registered an account on wa88, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

12. Third-Party Links

12.1 The Platform may display references to third-party payment brands, game studio names, and sports league identifiers (such as BRI Liga 1, EPL, or Champions League) for informational purposes. wa88 does not embed links to external third-party websites within the Platform.

12.2 Where any third-party service is integrated into the Platform — such as a payment gateway or game content frame — that party's own privacy and data handling practices are governed by their respective policies. wa88 is not responsible for the data practices of third-party service providers beyond the contractual obligations described in Section 6.

13. Amendments

13.1 wa88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulatory guidance, platform features, or internal data practices. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

13.2 Where changes are material — meaning they affect how your Personal Data is used in ways that are significantly different from what was previously disclosed — wa88 will notify registered Members via the email address on their account at least seven days before the change takes effect.

13.3 Continued use of the Platform following notification of an amended Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any amendment, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

14. Contact

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the wa88 data team. Our customer support and data protection contact is available 24 hours a day, 7 days a week, aligned to Western Indonesia Time (WIB, UTC+7).

Email: [email protected]

14.2 wa88 is committed to resolving all data-related concerns promptly and fairly. If you are not satisfied with the resolution provided, you retain the right to escalate the matter to the relevant data protection authority or seek independent arbitration.

14.3 For responsible gaming support or self-exclusion requests, please visit our Responsible Gaming page.