Privacy Policy

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "wa338", "we", "us", or "our" refers to the wa338 online betting and casino platform and its operators.
• "Platform" means the wa338 website at https://wa338.cam and all associated services and interfaces.
• "Player", "you", or "your" refers to any individual who accesses, registers on, or uses the Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, residential address, government-issued identification number, financial account details, device identifiers, and IP addresses.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Third Party" means any entity other than wa338 and the Player, including payment processors, identity verification providers, game studios, and regulatory bodies.
• "Cookie" means a small text file stored on your device by the Platform for the purposes described in Section 8 of this policy.

2 Data Controller

wa338 is the data controller in respect of all Personal Data processed in connection with the Platform and the services it provides to players in Indonesia and other jurisdictions where the Platform is accessible.

As data controller, wa338 is responsible for determining the purposes and means of processing your Personal Data. We are committed to processing your data only in accordance with this Privacy Policy, applicable data protection principles, and any legal obligations that apply to our operations.

If you have any questions about how wa338 processes your Personal Data, or wish to exercise any of your rights described in Section 11, please contact our Data Protection contact at [email protected].

3 Personal Data We Collect

wa338 collects the following categories of Personal Data in the course of providing services to registered players:

wa338 does not collect any special categories of sensitive personal data (such as health, biometric, racial, or political data) beyond what may be incidentally disclosed in responsible gaming self-assessment responses, which are treated with the highest level of confidentiality.

4 How We Collect Your Data

wa338 collects Personal Data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automatically during platform use: Technical Data including IP address, device identifiers, browser type, and session logs is recorded automatically each time you access the Platform. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 8.
• From third-party service providers: Identity verification agencies may share the results of document authentication checks with wa338. Payment processors provide transaction confirmation data. Fraud prevention services may provide risk-scoring information associated with a device or payment method.
• From publicly available sources: wa338 may cross-reference information you provide against publicly available records where this is necessary for anti-fraud or compliance purposes.

5 Legal Basis for Processing

wa338 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to register your account, accept deposits, process withdrawals, and provide the gaming services you have requested under the Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money laundering obligations, Know Your Customer (KYC) verification requirements, fraud prevention mandates, and record-keeping requirements applicable to international gaming operators.
• Legitimate interests: Processing for purposes including platform security, fraud detection, responsible gaming monitoring, and improvement of platform functionality, where those interests are not overridden by your privacy rights.
• Consent: Where we send you direct marketing communications or use non-essential cookies, we will ask for your explicit consent first. You may withdraw consent at any time by contacting our support team or adjusting your cookie preferences.

6 How We Use Your Personal Data

wa338 uses Personal Data collected from players for the following purposes:

• To create, verify, and maintain your player account, including KYC identity verification required before processing any withdrawal.
• To process deposits and withdrawals via your chosen Indonesian payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) and to maintain accurate transaction records.
• To provide access to the gaming products available on the Platform, including sports betting, live casino, slot games, togel (numbers lottery), and sabung ayam (cockfighting streams).
• To administer bonuses and promotions, verify eligibility, and apply wagering requirements in accordance with the applicable promotion terms.
• To operate and enforce our responsible gaming tools, including monitoring gaming patterns that may indicate at-risk behaviour and applying player-activated deposit limits, session limits, and self-exclusion periods.
• To detect, prevent, and investigate fraud, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• To provide customer support services and respond to your enquiries and complaints.
• To send you service communications related to your account, including transaction confirmations, security alerts, and policy update notifications.
• To send you promotional communications about wa338 offers and new features, where you have consented to receive such communications. You may opt out at any time.
• To analyse platform usage patterns in aggregate, anonymised form for the purpose of improving our products and user experience.

7 Data Sharing & Disclosure

wa338 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors and banking partners: BCA, BRI, BNI, Bank Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data necessary to process deposit and withdrawal transactions.
• Identity and KYC verification providers: Third-party agencies contracted by wa338 to perform document authentication and identity checks receive the identity documents and details you submit during KYC, solely for the purpose of verification.
• Fraud prevention and security services: Specialist providers assist wa338 in detecting and preventing fraudulent activity, money laundering, and account compromise. Data shared for this purpose is subject to strict confidentiality obligations.
• Game technology providers: International game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, and others) may process limited technical session data in order to deliver game content to your device.
• Legal and regulatory authorities: wa338 will disclose Personal Data to law enforcement agencies, financial intelligence units, or courts where required to do so by applicable law, a valid court order, or a lawful request from a competent authority.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by wa338 may access Personal Data on a strictly confidential basis in the course of providing professional services.

8 Cookies & Tracking Technologies

wa338 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: These cookies are required for the Platform to function. They maintain your login session, remember your language and currency preferences, and ensure that security features operate correctly. These cookies cannot be disabled without impairing the core functionality of the Platform.
• Performance and analytics cookies: These cookies collect anonymised, aggregated information about how players use the Platform — for example, which pages are visited most frequently and where error messages appear. This data helps wa338 identify areas for improvement. No personally identifiable information is stored in these cookies.
• Functional cookies: These cookies remember choices you have made on the Platform (such as game preferences or notification settings) to provide a more personalised experience on your next visit.
• Marketing cookies: With your consent only, these cookies may be used to deliver promotional content relevant to your interests. You may withdraw consent at any time.

Most browsers allow you to control cookie settings through the browser preferences menu. Restricting cookies may affect the availability or performance of certain Platform features. For further guidance on managing cookies, refer to the help documentation of your browser.

9 Data Retention

wa338 retains your Personal Data for as long as is necessary to fulfil the purposes described in this policy, subject to the following specific retention periods:

• Account and identity data: Retained for the duration of your active account relationship with wa338, plus a minimum period of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction data: Retained for a minimum of five (5) years following the date of each transaction, consistent with financial record-keeping requirements applicable to international gaming operators serving Indonesian players.
• KYC documentation: Retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the last communication, unless the matter relates to an ongoing dispute or legal proceeding, in which case retention continues until resolution.
• Responsible gaming records: Self-exclusion requests and limit-setting records are retained for the duration of the self-exclusion or restriction period plus two (2) years to prevent re-registration during an active self-exclusion.
• Marketing consent records: Retained for as long as you remain subscribed plus three (3) years following opt-out, as evidence of the consent that was obtained.

Once the applicable retention period has expired, wa338 will securely delete or anonymise your Personal Data so that it can no longer be associated with you.

10 Data Security

wa338 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for sensitive Personal Data and financial records stored on our servers.
• Access controls that restrict database and system access to authorised personnel on a strict need-to-know basis, with individual authentication and audit logging.
• Multi-factor authentication for internal systems handling player data.
• Regular third-party penetration testing and security audits of the Platform infrastructure.
• Incident response procedures that include notification to affected players in the event of a security breach that poses a significant risk to their rights and freedoms.

While wa338 takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely immune to risk. Players are encouraged to protect their own account security by using a strong, unique password and activating any two-factor authentication options available in their Account settings.

11 Your Data Rights

As a player whose Personal Data is processed by wa338, you hold the following rights, subject to applicable legal limitations:

• Right of Access: You may request a copy of all Personal Data that wa338 holds about you, along with information about how it is being processed.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that we correct or update it without undue delay.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. Note that we may be required by law to retain certain data (see Section 9) and cannot delete it in those cases.
• Right to Restrict Processing: You may request that we limit the way we process your data while a dispute about accuracy or a legal objection is under review.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing based on our legitimate interests, and to direct marketing communications.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team at [email protected]. wa338 will respond to all valid data rights requests within 30 days of receipt. Where a request is particularly complex or numerous requests have been received, we may extend this period by a further 30 days with prior notification.

12 Children's Privacy

The wa338 Platform is strictly intended for adults aged 21 years and older. wa338 does not knowingly collect Personal Data from any person under the age of 21.

As part of our registration process and KYC verification, wa338 verifies the age of all players before permitting any real-money activity. Any account found to belong to a person under 21 years of age will be immediately suspended, all transactions reversed where possible, and all associated Personal Data deleted from our systems in accordance with applicable data protection requirements.

If you have reason to believe that a person under the age of 21 has registered on the Platform, please contact our support team immediately at [email protected] so that we can take prompt action.

13 International Data Transfers

As an internationally operated platform, wa338 may transfer your Personal Data to service providers or infrastructure located outside of Indonesia, including in jurisdictions where data protection laws may differ from those applicable in Indonesia. Where such transfers occur, wa338 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this policy.

Safeguards used for international transfers may include contractual clauses incorporating internationally recognised data protection standards, binding corporate rules where applicable, or transfers to jurisdictions recognised as providing an adequate level of data protection.

If you would like further information about the specific safeguards applied to any international transfer of your Personal Data, please contact our support team.

14 Changes to This Privacy Policy

wa338 reserves the right to update or amend this Privacy Policy at any time in response to changes in our data processing practices, applicable law, or the services we provide. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the change significantly affects your rights, notify you via email to the address registered on your account.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you should cease use of the Platform and contact our support team to discuss closing your account.

We recommend reviewing this Privacy Policy periodically to stay informed about how wa338 handles your Personal Data. The current version is always available at https://wa338.cam/privacy-policy.

15 Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the way wa338 processes your Personal Data, please contact our dedicated support team through the following channel:

• Email: [email protected] (plain text only — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Enquiry" in the subject line so your message is routed to the appropriate team member promptly.
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays (Idul Fitri, Idul Adha, Indonesian Independence Day — 17 August, and others)
• Response Time: wa338 targets a response to all privacy-related enquiries within 72 hours. Complex requests, including full data access requests, will be acknowledged within 72 hours and resolved within 30 days.
• Language: Privacy enquiries may be submitted in English or Indonesian (Bahasa Indonesia). Responses will be provided in the language of your enquiry where practicable.

If you are not satisfied with how wa338 has handled your Personal Data or responded to a data rights request, you have the right to lodge a complaint with the relevant data protection authority in your country of residence.