Privacy Policy

This Policy applies to all personal data collected by wd3333 through the following channels: the wd3333.cam website and all subdomains; the wd3333 mobile-optimized interface; direct communications with our customer support team via live chat and email; and any other interaction between you and wd3333 that results in the collection of personal information.

This Policy does not apply to third-party websites, payment processors, game providers, or external services that you may access via links within the wd3333 platform. Each such third party operates under its own privacy policy, for which wd3333 accepts no responsibility.

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, national identity number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means wd3333, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of wd3333 under a contractual data processing agreement (e.g., payment service providers, cloud infrastructure providers).
• "KYC Data" means identity and address verification documents submitted by Members during the Know Your Customer process, including copies of Indonesian National Identity Cards (KTP) and proof-of-address documents.
• "Cookies" means small text files placed on your device by the wd3333 platform to facilitate session management, security, and analytics functions.
• "Member" means any individual who holds a registered account on the wd3333 platform.

wd3333 collects personal data through direct submission by Members, automated technical collection during platform use, and — where legally required — from third-party verification and fraud-prevention services. The categories of personal data we collect are as follows:

wd3333 does not collect sensitive categories of personal data beyond what is required for identity verification (i.e., national ID card details). We do not collect religious affiliation, political opinions, health data, or biometric data.

wd3333 uses your personal data strictly for the following purposes:

• Account Management: To create, maintain, and administer your wd3333 account, including processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, and e-wallets such as OVO, DANA, and GoPay.
• Identity Verification: To verify your age (21+) and identity as part of mandatory KYC compliance procedures, and to confirm that you are not subject to any applicable sanctions or exclusion lists.
• Service Delivery: To provide you with access to sports betting, live casino games, slots, and *togel* (Indonesia's traditional numbers lottery) markets, and to process all related transactions accurately.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, multi-accounting, and any other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: To meet our obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and financial record-keeping requirements imposed by the jurisdiction under which wd3333 is licensed.
• Customer Support: To respond to your queries, complaints, and account-related requests via live chat and email, and to maintain records of those communications for quality assurance and dispute resolution purposes.
• Responsible Gaming: To administer deposit limits, self-exclusion periods, cooling-off requests, and other responsible gaming tools at your request, and to monitor account activity for indicators of problem gambling behaviour where appropriate.
• Platform Improvement: To analyse aggregated, anonymized usage data for the purpose of improving platform performance, game selection, user experience, and customer support quality. This analysis does not identify individual Members.
• Promotional Communications: To send you bonus offers, promotional notifications, and platform updates via email or in-platform messaging — but only where you have opted in to receive such communications. You may opt out at any time by contacting support or updating your account preferences.
• Legal Claims: To establish, exercise, or defend legal claims arising in connection with your account or use of our platform.

wd3333 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and wd3333 — including account creation, transaction processing, and service delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you as a Member.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including AML/CTF obligations, KYC verification, financial record-keeping, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud detection, platform security, multi-account detection, and anonymized analytics is carried out on the basis of wd3333's legitimate business interests, provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

wd3333 does not sell, rent, or trade your personal data to any third party for commercial gain. We may share your personal data with the following categories of recipients strictly for the purposes described in this Policy:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process deposits and withdrawals. These providers act as independent data controllers subject to their own privacy policies and Indonesian financial regulations.
• Identity Verification Partners: Third-party KYC and AML screening services may receive your identity documents for the purpose of verifying your identity and screening against applicable sanctions and watchlists. All such partners are bound by strict data processing agreements and are prohibited from using your data for any purpose other than the verification task for which it was shared.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymized session identifiers for game delivery and RNG audit purposes. They do not receive your personally identifiable information.
• Cloud Infrastructure & IT Service Providers: wd3333 uses internationally certified cloud hosting and IT security providers to operate the platform. These providers process personal data as data processors under contract and are not permitted to use that data for their own purposes.
• Regulatory and Law Enforcement Authorities: wd3333 may disclose personal data to relevant regulatory bodies, financial intelligence units, or law enforcement agencies where required by applicable law, court order, or regulatory direction. We will notify affected Members of such disclosures to the extent permitted by law.
• Legal and Professional Advisers: Our legal counsel, auditors, and compliance advisers may access personal data on a strictly confidential basis where necessary for the provision of professional services to wd3333.

wd3333 uses cookies and similar tracking technologies to operate the platform securely and efficiently. The following categories of cookies are used:

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent the platform from functioning correctly. Disabling analytics cookies will not affect your ability to bet, deposit, or withdraw. Note that clearing your browser cookies will also clear your session, requiring you to log in again.

wd3333 implements a comprehensive, layered security architecture designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Transport Encryption: All data transmitted between your browser or device and wd3333's servers is encrypted using TLS 1.2 or higher, with a 256-bit SSL certificate. The padlock icon in your browser's address bar confirms this protection is active.
• Data-at-Rest Encryption: Sensitive personal data — including KYC documents, payment credentials, and account details — is encrypted at rest using AES-256 encryption in certified data center environments.
• Access Controls: Access to personal data is restricted to authorized wd3333 personnel on a strict need-to-know basis. All staff with data access undergo background screening and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. All wd3333 internal systems with access to Member data require mandatory multi-factor authentication.
• Intrusion Detection & Monitoring: Our infrastructure is continuously monitored for unauthorized access attempts, anomalous activity, and potential security breaches. Automated alerts escalate identified threats to our security team in real time.
• Penetration Testing: wd3333 engages independent cybersecurity professionals to conduct regular penetration tests and vulnerability assessments of our platform and data infrastructure.
• Incident Response: In the event of a personal data breach that is likely to result in risk to your rights and freedoms, wd3333 will notify affected Members and relevant regulatory authorities within seventy-two (72) hours of becoming aware of the breach, where legally required.

While wd3333 implements robust security measures, no internet-based system is entirely immune from risk. Members bear responsibility for maintaining the security of their own login credentials and should report any suspected unauthorized account access to our support team immediately.

wd3333 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The following standard retention periods apply:

• Active Account Data: Retained for the duration of your membership and for a period of five (5) years following account closure, in accordance with international financial record-keeping standards.
• KYC Documents: Retained for five (5) years following account closure or the completion of the transaction to which the verification relates, whichever is later. This period may be extended where required by a regulatory investigation or legal proceeding.
• Transaction Records: Deposit and withdrawal records, bet history, and bonus redemption records are retained for five (5) years following the date of each transaction.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Responsible Gaming Records: Self-exclusion records and deposit limit histories are retained for a minimum of five (5) years following their creation, to prevent circumvention of exclusion measures.
• Analytics Data: Anonymized, aggregated platform analytics data — which cannot be used to identify individual Members — may be retained indefinitely for product development purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with our internal data disposal procedures.

As a Member of wd3333, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request – [Your Username]". We will respond within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed. We will provide this in a structured, readable format.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Where correcting the data requires identity re-verification, we may request updated documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that certain data must be retained for the mandatory periods described in Section 9 and cannot be deleted on request.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the lawfulness of our processing.
• Right to Data Portability: You may request an export of your personal data in a machine-readable format (e.g., CSV or JSON) where the processing is based on your consent or on contractual necessity.
• Right to Object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, although we may override such objections where we have compelling grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal date.

wd3333 operates from an international jurisdiction and uses globally distributed cloud infrastructure to deliver a reliable, low-latency platform experience to Members across Indonesia — including those connecting from Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, and Palembang.

As a result, your personal data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, wd3333 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that which applies within Indonesia, including:

• Contractual data protection clauses between wd3333 and all receiving processors, requiring equivalent data protection standards and prohibiting unauthorized onward transfers.
• Use of data centers and infrastructure providers certified under internationally recognized security standards (including ISO 27001 and SOC 2 Type II).
• Processing only in jurisdictions deemed to provide adequate protection, or where supplementary measures are in place to address any adequacy gap.

For further information about the specific safeguards in place for international transfers of your personal data, contact our support team at [email protected].

wd3333's services are strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are under 21, you are not permitted to register or use the platform, and you must not provide us with any personal information.

If wd3333 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to permanently delete that data and close the associated account. Any funds held in an underage account will be returned to the payment source used for deposit, net of any bonuses received.

Parents and guardians who believe their child may have accessed or registered on the wd3333 platform are encouraged to contact our support team immediately at [email protected]. We treat all underage access reports as a priority matter and will respond within twenty-four (24) hours.

The wd3333 platform may contain links to third-party websites, payment portals, or game provider interfaces. These external services operate under their own privacy policies and data practices, for which wd3333 accepts no responsibility.

We strongly recommend reviewing the privacy policy of any third-party service you access from within the wd3333 platform before providing any personal information. The presence of a link on our platform does not constitute an endorsement of the linked service's privacy practices.

wd3333 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made — meaning changes that substantially affect your rights or how your personal data is processed — we will provide at least seven (7) calendar days' advance notice via email to your registered address and/or a prominent notice on the platform.

Minor amendments, such as typographical corrections or clarifications that do not alter the substantive meaning of any section, may be published without prior notice. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Your continued use of the wd3333 platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with an amended Policy, you should cease using the platform and contact support to arrange account closure.

If you have any questions, concerns, or complaints regarding this Privacy Policy or wd3333's handling of your personal data, please contact us through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry – [Your Username]" for the fastest routing to our data protection team.
• Live Chat: Available 24/7 on the wd3333 platform. Average first-response time: under 90 seconds. Suitable for general privacy questions; formal complaints should be submitted by email for documentation purposes.
• Response Time: We aim to acknowledge all privacy-related enquiries within forty-eight (48) hours and to provide a substantive response within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days — in which case we will notify you of the extension and the reason for it.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. Indonesian Members may contact the Kementerian Komunikasi dan Digital (Ministry of Communication and Digital Affairs) or the relevant supervisory authority established under Indonesian personal data protection legislation.