dwg288 Privacy Policy

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Platform" means the dwg288 website at dwg288.vu and all associated sub-domains, mobile browser interfaces, and digital touchpoints operated by dwg288.
• "Member" or "You" means any individual who has registered a dwg288 Account or who accesses the Platform in any capacity.
• "Personal Data" means any information that, alone or in combination with other information, can directly or indirectly identify a natural person — including name, national identification number, contact details, financial information, device identifiers, and behavioral data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, and destruction.
• "Data Controller" means dwg288, the entity that determines the purposes and means of Processing your Personal Data.
• "Third-Party Processor" means any external service provider that Processes Personal Data on behalf of dwg288 under a written data processing agreement.
• "KYC" means Know Your Customer — the identity verification process dwg288 applies to Member Accounts in accordance with its anti-money-laundering obligations.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 9 of this Policy.

dwg288 collects Personal Data in several categories depending on your interaction with the Platform. The table below summarizes the categories and specific data points collected:

dwg288 collects Personal Data through the following channels:

• Direct Submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Data gathered automatically when you access the Platform, including IP address, device identifiers, browser fingerprinting data, and session metadata via server logs and analytics tools.
• Cookies and Tracking Technologies: First-party cookies, session tokens, and similar technologies placed on your device when you visit the Platform. See Section 9 for full details.
• Third-Party Verification Providers: Identity and address verification data returned by KYC service providers when processing your submitted documents.
• Payment Processors: Confirmation data from Indonesian bank transfer services and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) used to verify that a deposit or withdrawal has been successfully executed.
• Fraud Prevention Partners: Risk signals and device reputation data from fraud detection service providers used to protect the integrity of the Platform and the security of Member Accounts.

dwg288 uses Personal Data for the following specific purposes:

1. Account Management: To create, maintain, and administer your dwg288 Account, including authentication, password recovery, and session management.
2. Transaction Processing: To process deposits and withdrawals in IDR via your nominated Indonesian bank account or e-wallet, and to maintain an accurate record of all financial transactions on your Account.
3. Identity Verification (KYC): To verify your identity and age (21+) in compliance with our anti-money-laundering and responsible gaming obligations, and to ensure that the Account is operated by its registered holder.
4. Regulatory Compliance: To meet the requirements of our international operating license and to cooperate with law enforcement or regulatory authorities where legally required.
5. Fraud and Security: To detect, investigate, and prevent fraudulent activity, unauthorized Account access, money laundering, and other illegal or prohibited conduct on the Platform.
6. Customer Support: To respond to your queries, complaints, and requests submitted via live chat, email ([email protected]), or WhatsApp.
7. Platform Improvement: To analyze usage patterns, identify technical issues, and improve the overall quality and performance of the dwg288 Platform.
8. Personalization: To tailor the game recommendations, promotional offers, and content displayed to you based on your demonstrated preferences and betting history.
9. Marketing Communications: To send you promotional offers, new game announcements, and seasonal promotions (e.g., Idul Fitri, Ramadhan, or Indonesian Independence Day specials) by email or in-platform notification — subject to your communication preferences. You may opt out of marketing communications at any time via your Account settings or by contacting support.
10. Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behavior, and to administer self-exclusion, deposit limit, and cooling-off period requests in accordance with our Responsible Gaming policy.

dwg288 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted upon registration — including Account management, transaction processing, and customer support.
• Legitimate Interests: Processing carried out in pursuit of dwg288's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental privacy rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering legislation, KYC requirements, and requests from competent authorities.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior Processing.

dwg288 does not sell, rent, or trade your Personal Data to any third party for that party's own commercial purposes. Personal Data may be disclosed to the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• KYC and Identity Verification Providers: Third-party providers that verify the authenticity of identity documents and perform facial matching checks. These providers act as Data Processors under written agreements and may not use your data for their own purposes.
• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the minimum transaction data required to process a deposit or withdrawal on your behalf.
• Game Content Providers: Providers such as Evolution Gaming, Pragmatic Play, Pocket Games Soft, and other certified studios may receive anonymized session identifiers necessary to deliver their games and verify the legitimacy of game outcomes. They do not receive your full identity or financial data.
• Fraud Detection and Security Partners: Risk assessment platforms that analyze Technical Data to identify and block fraudulent account activity, bonus abuse, and unauthorized access attempts.
• Analytics Service Providers: Aggregated, anonymized behavioral data may be shared with analytics providers to help dwg288 understand platform usage trends and improve the Member experience.
• Legal and Regulatory Authorities: dwg288 may disclose Personal Data to law enforcement agencies, courts, or regulators where required to do so by applicable law, court order, or regulatory directive. In such cases, dwg288 will disclose only the minimum data required to satisfy the legal obligation and will notify you of such disclosure where legally permitted to do so.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of dwg288's assets, your Personal Data may be transferred to the acquiring entity, provided that the acquiring entity agrees to honor this Privacy Policy or provides you with equivalent protections.

dwg288 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following standard retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Where anonymization is not technically feasible, data is destroyed in accordance with industry-standard secure deletion procedures.

dwg288 applies a comprehensive set of technical and organizational security controls to protect your Personal Data against unauthorized access, accidental loss, destruction, or alteration. Key measures include:

• Encryption in Transit: All data exchanged between your browser and the dwg288 Platform is encrypted using TLS 1.3 with 256-bit AES encryption. HTTPS is enforced across all pages and API endpoints with HTTP Strict Transport Security (HSTS) enabled.
• Encryption at Rest: Sensitive data stored in dwg288's databases — including KYC documentation, financial records, and personal identifiers — is encrypted at rest using AES-256.
• Password Security: Member passwords are never stored in plaintext. dwg288 uses bcrypt one-way hashing with a per-account salt to protect credential data. Passwords are never recoverable by dwg288 staff.
• Access Controls: Access to systems containing Personal Data is restricted to authorized dwg288 personnel on a strict need-to-know basis. All internal access is logged, monitored, and subject to periodic audit.
• Two-Factor Authentication: Members are encouraged to enable two-factor authentication (2FA) on their dwg288 Account for an additional layer of login security.
• Intrusion Detection: dwg288's infrastructure is monitored continuously by automated intrusion detection systems. Anomalous activity triggers immediate alerts and investigation by the security team.
• Vulnerability Management: The Platform undergoes regular security assessments, penetration testing, and code reviews. Critical vulnerabilities are patched on an emergency basis; non-critical findings are addressed within a defined remediation window.

dwg288 uses cookies and similar technologies to operate the Platform effectively and to improve your experience. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly, and you will be unable to log in or conduct transactions. dwg288 does not use third-party advertising or retargeting cookies.

Subject to applicable law and any legal retention obligations, you have the following rights with respect to your Personal Data held by dwg288:

• Right of Access: You may request a copy of the Personal Data dwg288 holds about you, along with information about how it is being processed.
• Right to Rectification: If any Personal Data dwg288 holds about you is inaccurate or incomplete, you may request that it be corrected. You may update some data directly within your Account settings.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for Processing. Note that dwg288 may be required by law to retain certain data (particularly financial transaction records and KYC documentation) even after an Account closure request.
• Right to Restriction: You may request that dwg288 restrict the Processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where Processing is based on your consent or on a contract, and is carried out by automated means, you may request that dwg288 provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to Processing based on dwg288's legitimate interests, including profiling for personalization and marketing purposes. You may also opt out of direct marketing communications at any time via your Account settings.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of Processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". dwg288 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days with prior written notice to you.

The dwg288 Platform is strictly intended for adults aged 21 years and above. dwg288 does not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not register an Account, access the Platform, or submit any Personal Data to dwg288.

If dwg288 becomes aware that it has inadvertently collected Personal Data from a person under the age of 21, that data will be deleted immediately and the associated Account permanently closed. If you are a parent or guardian and believe that your child has submitted Personal Data to dwg288, please contact us at [email protected] and we will take prompt corrective action.

dwg288 is an internationally operating platform. Personal Data collected from Members based in Indonesia may be transferred to and processed in countries outside of Indonesia, including the jurisdiction where dwg288 holds its international operating license, and any country where our Third-Party Processors maintain data infrastructure.

Where Personal Data is transferred outside of Indonesia, dwg288 takes the following safeguards to ensure it receives an equivalent level of protection:

• Transfers are made only to Third-Party Processors that have entered into binding data processing agreements incorporating appropriate data protection clauses.
• dwg288 conducts due diligence on all Third-Party Processors to confirm that adequate technical and organizational security measures are in place prior to any data transfer.
• Data minimization principles are applied — only the minimum Personal Data necessary for the specific Processing purpose is transferred internationally.

By using the dwg288 Platform, you acknowledge and consent to the international transfer of your Personal Data on the terms described in this Policy.

The dwg288 Platform may contain links to third-party websites, game provider portals, or payment service interfaces. This Privacy Policy applies solely to Personal Data collected and processed by dwg288 through the Platform. dwg288 has no control over and accepts no responsibility for the privacy practices or content of any third-party website or service. We strongly encourage you to review the privacy policies of any third-party service you access via a link from the dwg288 Platform.

dwg288 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data practices, or the services we offer. When material changes are made, dwg288 will notify registered Members by posting a prominent notice on the Platform or by sending a notification to the email address associated with the Member's Account, at least seven (7) days before the changes take effect.

The version number and "Last Updated" date at the top of this document indicate which version is currently in force. The most current version of this Privacy Policy is always accessible at dwg288.vu/privacy-policy. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

For all privacy-related queries, data subject rights requests, or concerns about how dwg288 handles your Personal Data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Rights Request" for data subject rights submissions. Response within 1–6 hours during WIB business hours.
• Live Chat: Available 24/7 directly through the dwg288 Platform after logging in to your Account.
• WhatsApp: Available 08:00–24:00 WIB. Contact details provided to verified Members post-registration.

For questions about the Terms & Conditions governing your use of the Platform, please refer to the Terms & Conditions page. For information about responsible gaming tools and self-exclusion, please visit the Responsible Gaming page.