Privacy Policy

1. Introduction

wd808 ("we", "us", "our") operates the online gaming and sportsbook platform accessible at https://wd808.asia (the "Platform"). We are committed to protecting the personal data of every player who uses our services, including players based in Jakarta, Surabaya, Bali, Medan, Bandung, Yogyakarta, and across the rest of Indonesia.

This Privacy Policy describes the personal data we collect, the purposes for which we process it, the parties with whom we may share it, the security measures we apply, and the rights available to you as a data subject. This policy is incorporated by reference into the wd808 Terms & Conditions and should be read alongside them.

wd808 processes personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability. These principles guide every aspect of our data handling from collection through to secure deletion.

2. Definitions

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, email address, phone number, payment details, and device identifiers.
• "Processing" means any operation performed on personal data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Subject" means the identified or identifiable natural person to whom the personal data relates — in the context of this policy, this means you, the registered Player.
• "Controller" means the entity that determines the purposes and means of processing personal data — in this case, wd808.
• "Processor" means any third party that processes personal data on behalf of wd808 under a written data-processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process applied to all wd808 Accounts.
• "Cookies" means small text files placed on your device by the Platform for session management, analytics, and personalisation purposes.
• "Special Category Data" means personal data that is particularly sensitive, such as health information. wd808 does not intentionally collect special category data except where strictly required by its responsible gaming obligations.

3. Personal Data We Collect

wd808 collects the minimum personal data necessary to deliver a secure, compliant, and personalised gaming experience. The categories of data we collect are set out in the table below:

4. How We Collect Your Data

wd808 collects personal data through the following mechanisms:

4.1 Direct Collection

You provide personal data directly to wd808 when you register an Account, complete the KYC process, make a deposit or withdrawal, contact support, or interact with any form or input on the Platform. This is the primary source of Identity Data, Contact Data, Financial Data, and KYC Documents.

4.2 Automated Technical Collection

Each time you visit or interact with the Platform, our servers and analytics systems automatically record Technical Data and Usage Data. This collection occurs through server logs, first-party cookies, and JavaScript-based analytics scripts that operate entirely within the wd808 domain. No third-party advertising trackers are loaded on the Platform.

4.3 Third-Party Sources

In limited circumstances, wd808 may receive personal data about you from third parties, including:

• Payment processors and Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — to confirm the status of a transaction or verify account ownership.
• Identity verification service providers engaged to assist with KYC processing — to cross-reference identity document authenticity.
• Fraud prevention and anti-money-laundering screening databases — to fulfil our compliance obligations under our international gaming licence.

Data obtained from third-party sources is handled with the same standard of care as data collected directly and is used only for the specific purpose for which it was obtained.

5. Purpose of Processing

wd808 processes your personal data for the following clearly defined purposes:

• Account Management: Creating, maintaining, and administering your wd808 Account, including authenticating your identity at each login session.
• KYC and Age Verification: Confirming that you meet the minimum age requirement of 21 years and that you are who you claim to be, in compliance with our licensing obligations.
• Payment Processing: Facilitating deposits and withdrawals via your chosen Indonesian payment method and maintaining accurate transaction records.
• Fraud Prevention and AML: Detecting, investigating, and preventing fraudulent activity, money laundering, terrorist financing, and other prohibited conduct on the Platform.
• Regulatory Compliance: Meeting our obligations under the terms of our international gaming licence, including record-keeping, reporting, and audit requirements.
• Customer Support: Responding to your enquiries, resolving disputes, and managing complaints in a timely and effective manner.
• Platform Improvement: Analysing aggregated usage patterns to improve game selection, interface design, loading performance, and the overall player experience.
• Responsible Gaming: Monitoring betting behaviour to identify potential problem gambling patterns and to apply the responsible gaming tools you have configured on your Account.
• Direct Marketing: Sending you promotional communications about wd808 bonuses, new games, and special offers — but only where you have consented to receiving such communications and only by the channels you have approved. You may withdraw marketing consent at any time.
• Security and Platform Integrity: Detecting and preventing unauthorised access, cheating, collusion, bot usage, and other integrity threats to the Platform and its players.

6. Legal Basis for Processing

wd808 relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing that is necessary to perform the contract between you and wd808 — specifically, to create and maintain your Account, process transactions, and deliver the gaming services you have requested. Without this processing, wd808 cannot provide its services to you.
• Legal Obligation: Processing that is required to comply with our licensing conditions, anti-money-laundering requirements, and other applicable legal or regulatory obligations, including mandatory KYC and transaction monitoring.
• Legitimate Interests: Processing carried out for the legitimate interests of wd808 or its players, provided those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, internal analytics, and responsible gaming monitoring. We have assessed these interests against your rights and are satisfied that the balance is appropriate.
• Consent: Processing for direct marketing communications and for the use of non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

wd808 does not sell personal data. We share personal data only in the following limited and controlled circumstances:

7.1 Service Providers (Processors)

We engage carefully selected third-party service providers to assist in delivering the wd808 Platform. These processors act strictly under written data-processing agreements and are permitted to use your data only for the specific service they provide to us. Current processor categories include:

• Payment gateway and Indonesian banking partners (for transaction processing via BCA, BRI, BNI, Mandiri, and e-wallets)
• Identity verification and KYC service providers
• Cloud infrastructure and hosting providers (for secure Platform operation)
• Game software studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, PG Soft, Spribe) — limited to the game session data required to render the game and record its outcome
• Customer support platform providers (for live chat and ticketing systems)
• Fraud detection and AML screening service providers

7.2 Regulatory and Legal Disclosures

wd808 may disclose personal data to regulators, licensing authorities, law enforcement agencies, or courts where required to do so by applicable law, by court order, or in connection with our licensing obligations. Such disclosures are made only to the extent required and are always logged internally.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of wd808's assets, personal data held by wd808 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, at least 30 days before the transfer takes effect.

7.4 With Your Consent

We may share your data with third parties for purposes not described above where you have given us your explicit, informed consent to do so. You may withdraw that consent at any time by contacting [email protected].

8. International Data Transfers

As an internationally licensed platform, wd808 may store and process personal data on servers located outside Indonesia. Where personal data is transferred internationally, wd808 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Indonesia. Safeguards include:

• Data-processing agreements incorporating internationally recognised standard contractual clauses
• Transfer only to jurisdictions assessed to provide an adequate level of data protection
• Contractual obligations on all overseas processors to apply technical and organisational security measures equivalent to those described in this policy

If you wish to obtain further information about the specific safeguards applicable to any international transfer of your data, please contact us at [email protected].

9. Data Retention

wd808 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

10. Cookies & Tracking Technologies

wd808 uses cookies and similar technologies to operate the Platform effectively, maintain the security of your session, and understand how the Platform is being used. We use the following categories of cookies:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be switched off. They are set only in response to your actions, such as logging in, adjusting account settings, or initiating a transaction. No consent is required for these cookies as they are necessary to provide the service you have requested. They are automatically deleted when your browser session ends or within 24 hours of inactivity.

10.2 Performance and Analytics Cookies

These cookies allow wd808 to count visits, identify popular pages, and understand how players navigate the Platform. All information collected is aggregated and anonymised; these cookies do not identify you personally. Performance cookies are set for a maximum period of 13 months and are renewed only upon your return visit. Your consent is requested for these cookies on your first Platform visit.

10.3 Functionality Cookies

These cookies enable the Platform to remember choices you have made — such as your preferred game lobby layout, language display, or currency format — and to provide enhanced, personalised features. Functionality cookies do not track your activity on other websites and are retained for up to 12 months.

10.4 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair core Platform functionality, including the ability to log in and place bets. Detailed instructions for managing cookies in all major browsers are available via your browser's help documentation. Deleting cookies does not delete your wd808 Account or any personal data held in our systems; it only removes locally stored session data from your device.

11. Your Data Subject Rights

As a data subject, you hold the following rights in relation to the personal data wd808 holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 calendar days of receiving a verifiable request.

• Right of Access: You may request a copy of all personal data wd808 holds about you, together with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that certain data must be retained for the periods set out in Section 9 to comply with our legal and licensing obligations; erasure requests will be honoured to the maximum extent that our obligations permit.
• Right to Restriction of Processing: You may request that wd808 restrict the processing of your data in certain circumstances, such as while the accuracy of the data is being contested or where you have objected to processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you may transfer it to another service provider.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though in that case wd808 may demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

12. Security Measures

wd808 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and wd808 servers is encrypted using industry-standard TLS 1.2 or higher. The wd808 platform is served exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data and KYC documents stored in our databases are encrypted at rest using AES-256 encryption. Financial data is never stored in plain text.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with data access undergo background screening and receive mandatory data-protection training. Privileged access is reviewed quarterly.
• Multi-Factor Authentication: Administrative access to wd808 back-end systems requires multi-factor authentication. Players are strongly encouraged to enable two-step verification on their Accounts.
• Penetration Testing: wd808 commissions independent security assessments and penetration tests on a regular cycle to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: wd808 maintains a documented data breach incident response plan. In the event of a breach that is likely to result in a risk to your rights and freedoms, wd808 will notify you without undue delay and will take all reasonable steps to contain and remediate the breach.
• Data Minimisation: wd808 collects only the personal data strictly necessary for the purposes described in this policy. Data fields that are no longer required are purged from active systems on a scheduled basis.

While wd808 takes all reasonable precautions to protect your personal data, no internet-based system is completely immune to risk. You play an important role in keeping your Account secure by choosing a strong, unique password, not sharing your login credentials with any third party, and reporting suspected unauthorised access to [email protected] immediately.

13. Protection of Minors

The wd808 Platform is strictly intended for adults aged 21 years and over. wd808 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the Account registration and KYC process, and wd808 actively monitors for indicators that a minor may be attempting to access the Platform.

If wd808 discovers or is notified that personal data has been collected from an individual under 21 years of age, it will take immediate steps to suspend the relevant Account, delete the minor's personal data from its systems, and — where applicable — report the matter to the appropriate authorities. If you believe that a minor has registered on the Platform using false age information, please notify us immediately at [email protected].

Parents and guardians are encouraged to use internet filtering tools to restrict access to online gambling platforms. wd808 supports the use of parental control software as a complementary measure to its own age verification controls.

14. Third-Party Links & External Content

The wd808 Platform does not contain links to third-party websites. All navigation and content links on the Platform point exclusively to internal wd808 pages. Game software interfaces provided by third-party studios (such as Evolution Gaming, Pragmatic Play, and PG Soft) are embedded within the wd808 Platform environment and operate under data-processing agreements between wd808 and the respective studio.

Where any third-party content is displayed within the Platform, wd808 ensures by contract that the third party does not use player data for its own marketing or profiling purposes. wd808 accepts no responsibility for the privacy practices of any external site that a user may independently navigate to outside the wd808 domain.

15. Amendments to This Privacy Policy

wd808 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our security measures. When a material change is made, wd808 will notify registered players via the email address on file at least 14 days before the change takes effect. Non-material changes — such as formatting updates, clarifications of existing provisions, or corrections of typographical errors — may be made without prior notice.

The version date displayed at the top of this document and in the page header is updated each time the policy is revised. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We recommend that all players review this policy periodically to stay informed of how wd808 protects their data. The current version is always accessible at https://wd808.asia/privacy-policy.

16. Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a potential data security incident, please contact wd808 through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24/7 via the wd808 Platform. Indonesian-speaking agents available 08:00–24:00 WIB daily.
• FAQ: Answers to common privacy questions are available on our FAQ page.