Privacy Policy — wd123

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "wd123" — the online gaming platform operated at wd123.bet, including all associated products, services, and features.
• "Platform" — the wd123 website, mobile-optimized interface, and any associated digital applications or services.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, national identity number, financial account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "User" / "You" — any individual who accesses, registers for, or uses the Platform in any capacity.
• "Account" — the personal registered account created by a User on the Platform.
• "KYC" — Know Your Customer identity verification process required for withdrawal processing and ongoing account compliance.
• "Cookie" — a small data file placed on your device by the Platform for the purposes described in Clause 6.
• "IDR" — Indonesian Rupiah, the sole transactional currency of the Platform.
• "Third-Party Processor" — any external entity engaged by wd123 to process Personal Data on our behalf, such as payment processors, game content providers, fraud detection services, and customer support platforms.

wd123 collects Personal Data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third parties where permitted by law. The categories of data we collect are set out in the table below.

wd123 processes your Personal Data for the following specific purposes:

1. Account Management: Creating, maintaining, and administering your Account, including verifying your identity, managing your balance in IDR, and enabling login access;
2. Service Delivery: Providing access to all gaming products on the Platform — slots, live casino, sportsbook, togel (Indonesia's traditional numbers lottery), live blackjack, and scratch cards — and processing associated transactions;
3. Payment Processing: Facilitating deposits and withdrawals via local Indonesian banking and e-wallet channels, reconciling transactions, and detecting and investigating payment anomalies;
4. KYC & Compliance: Verifying your age (21+ requirement), confirming your identity, conducting anti-money-laundering (AML) screening, and meeting all applicable legal and regulatory obligations;
5. Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviors, applying self-exclusion and deposit limit settings, and communicating with you regarding responsible gaming resources;
6. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, multi-accounting, bonus abuse, and other prohibited conduct;
7. Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and maintaining records of all support interactions;
8. Platform Improvement: Analyzing aggregated usage data to improve Platform performance, user experience, game selection, and promotional offerings;
9. Marketing Communications: Sending you promotional offers, bonus notifications, and news about wd123 products — where you have consented or where we have a legitimate interest — subject always to your right to opt out;
10. Legal Compliance: Complying with court orders, regulatory requests, and any other legally binding obligation that requires the disclosure or retention of your data.

wd123 processes your Personal Data only where a valid legal basis exists. The primary bases we rely upon are as follows:

• Contractual Necessity: Processing that is required to fulfill our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification, and responses to lawful authority requests;
• Legitimate Interests: Processing where wd123 has a genuine and proportionate business interest that does not override your fundamental rights — including fraud prevention, platform security, and internal analytics;
• Consent: Processing for marketing communications and certain non-essential cookies, where you have given explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We may share your Personal Data with the following categories of recipients:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These entities process your data as independent controllers subject to their own privacy policies;
• Game Content Providers: Licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive minimal technical identifiers necessary to deliver game sessions. These providers operate under binding data protection agreements with wd123;
• Identity Verification & KYC Services: Specialist third-party providers engaged to verify government-issued identity documents and conduct AML screening;
• Customer Support Platforms: Software providers that power our live chat and ticketing systems, operating strictly as data processors under wd123's instructions;
• Fraud Detection & Security Services: Third-party providers that analyze transaction and behavioral data to identify and prevent fraudulent activity;
• Legal & Regulatory Authorities: Courts, law enforcement agencies, licensing regulators, or other governmental bodies when we are legally required or compelled to disclose data;
• Business Successors: In the event of a merger, acquisition, or sale of the Platform, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All Third-Party Processors engaged by wd123 are required to implement appropriate technical and organizational security measures and are contractually prohibited from using your Personal Data for any purpose beyond the specific service they provide to us.

wd123 uses cookies and similar tracking technologies (including local storage objects and session tokens) on the Platform to ensure reliable operation, enhance user experience, and support analytics. The categories of cookies we deploy are as follows:

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies may impair your ability to log in and use the Platform. Clearing session cookies will log you out of your Account.

wd123 does not use third-party advertising networks that track your activity across unrelated websites. Any analytical or marketing cookies in use are limited in scope to activity on the wd123 Platform itself.

wd123 retains your Personal Data for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by applicable law. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your Account's active status plus a minimum of 5 years following Account closure, to satisfy AML record-keeping obligations;
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of verification, in accordance with applicable financial crime prevention requirements;
• Transaction Records: Financial transaction data, including deposit and withdrawal history in IDR, is retained for a minimum of 5 years from the date of each transaction;
• Support Communications: Live chat transcripts, emails, and support tickets are retained for 3 years from the date of the interaction;
• Marketing Preferences: Opt-in records are retained for as long as your Account is active and for 3 years thereafter, to evidence consent history;
• Technical & Log Data: Server logs, IP address records, and session data are retained for 12 months and then deleted or anonymized.

When your Personal Data is no longer required, it is securely deleted or irreversibly anonymized. Anonymized, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business analysis purposes.

Subject to applicable law and certain exceptions, you hold the following rights with respect to your Personal Data:

1. Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is being processed;
2. Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held about you. Minor details (such as contact information) can be updated directly within your Account settings;
3. Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. Note that certain data must be retained to comply with our legal obligations and cannot be deleted on request;
4. Right to Restrict Processing: You may request that we pause processing of your data in certain circumstances, for example while a rectification request is under review;
5. Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your data for transfer to another service provider;
6. Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling and direct marketing. Marketing opt-outs take effect immediately upon request;
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to [email protected] from the email address registered to your Account. We may need to verify your identity before processing your request. There is no charge for exercising your rights; however, requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee or may be refused.

wd123 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, loss, destruction, or alteration. These measures include:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols;
• Encryption at Rest: Sensitive stored data, including financial account details and identity documents, is encrypted at rest using AES-256 or equivalent standards;
• Access Controls: Internal access to Personal Data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative systems;
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems (IDS/IPS), and continuous network monitoring;
• Security Audits: We conduct regular independent security audits and penetration testing of our Platform and underlying infrastructure;
• Incident Response: wd123 maintains a formal data breach response plan. In the event of a security incident affecting your Personal Data, we will notify affected Users and relevant authorities as required by law.

While we employ industry-leading security practices, no digital system can guarantee absolute security. You also play an important role in protecting your data — keep your Account password strong and unique, enable any available two-factor authentication, and never share your login credentials with anyone.

wd123 enforces mandatory age verification at registration and during the KYC process. If we become aware that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated Account. Any funds deposited by a minor will be returned to the originating payment method where technically possible.

If you are a parent or guardian and believe that a minor in your care has registered an Account or provided Personal Data to wd123, please contact us immediately at [email protected] so we can investigate and take corrective action without delay.

wd123 operates as an internationally licensed platform, and some of our Third-Party Processors — including game content providers and technical infrastructure partners — may be located in jurisdictions outside Indonesia. As a result, your Personal Data may be transferred to, stored in, or processed in countries other than your country of residence.

Where Personal Data is transferred internationally, wd123 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Such safeguards may include:

• Binding contractual clauses with the receiving party requiring them to apply equivalent data protection standards;
• Processing exclusively with entities operating in jurisdictions recognized as providing an adequate level of data protection;
• Certification frameworks and codes of conduct applicable to international data transfers.

By registering an Account on the Platform, you acknowledge that your Personal Data may be transferred internationally in accordance with this clause.

The wd123 Platform may contain links to third-party websites or services — for example, links to specific payment provider portals or game provider information pages. This Privacy Policy applies solely to the wd123 Platform and does not extend to any third-party sites or services.

We encourage you to review the privacy policies of any third-party sites you visit. wd123 accepts no responsibility or liability for the privacy practices of third-party platforms, regardless of whether they are accessed through a link on the wd123 Platform.

wd123 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. Material changes will be communicated to registered Users via the email address on their Account or through a prominent notice on the Platform, no less than 7 days before the change takes effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the revised policy.

If you do not agree with any material change to this Privacy Policy, you should cease using the Platform and contact us to close your Account in accordance with the Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how wd123 handles your Personal Data, please contact us through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform; Indonesian-speaking agents available 08:00–24:00 WIB
• WhatsApp: Available to verified Account holders after login

We will acknowledge your privacy inquiry within 24 hours and aim to provide a substantive response within 30 calendar days. Complex requests may take longer; we will notify you if an extension is required.

If you are dissatisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction in which wd123 holds its operating license.