waw33 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by waw33 in connection with your access to and use of the website located at waw33.pro (the "Platform"), including all associated mobile-optimised interfaces, account management tools, and customer support channels.

For the purposes of this Privacy Policy, waw33 acts as the data controller — that is, the entity that determines the purposes and means of processing your personal data. By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with the waw33 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

waw33 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from regulated third-party sources as part of our identity verification and fraud-prevention obligations. The categories of data we collect are set out in the table below.

waw33 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your player account, verify your identity, and enable you to access all features of the Platform.
• Payment Processing: To execute deposit and withdrawal transactions via local Indonesian bank transfers (BCA, BRI, BNI, Mandiri, and others) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records of all transactions associated with your account.
• Identity Verification (KYC): To comply with our anti-money laundering (AML) obligations by verifying that you are who you claim to be, that you meet the minimum age requirement of 21 years, and that your use of the Platform is not connected to any prohibited or criminal activity.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions. Technical data including IP addresses and device fingerprints are used for this purpose.
• Responsible Gaming: To monitor gameplay patterns and intervene proactively where our systems identify indicators of problem gambling behaviour. This includes administering self-imposed deposit limits, session time limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of our communications with you for quality assurance and compliance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to identify technical issues, improve user experience, and develop new platform features. This analytics use does not involve processing of personally identifiable data in a manner that singles you out as an individual.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus announcements, seasonal promotions (such as those tied to Idul Fitri, Ramadhan, or Indonesian Independence Day), and product updates via your preferred communication channel. You may withdraw this consent at any time.
• Legal Compliance: To comply with applicable legal and regulatory requirements, including responding to lawfully issued requests from courts, law enforcement, or regulatory authorities.

waw33 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is used:

• Contractual Necessity: Processing is necessary for the performance of the agreement between you and waw33 (the Terms & Conditions), including account registration, payment processing, and delivering the gaming services you have requested.
• Legal Obligation: Processing is necessary for waw33 to comply with its legal and regulatory obligations, including AML/KYC requirements, age verification, fraud reporting, and responding to lawful governmental requests.
• Legitimate Interests: Processing is necessary for the purposes of waw33's legitimate interests — specifically, maintaining the security and integrity of the Platform, preventing fraud and abuse, improving our services, and operating our business sustainably — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and for the use of non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

waw33 does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: Indonesian bank transfer processors, e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and PCI-DSS-compliant card payment infrastructure partners receive the financial data necessary to execute your deposit and withdrawal requests.
• Identity Verification Providers: Regulated KYC and AML compliance platforms receive identity and verification documents in order to cross-reference them against official databases and watchlists, as required by our compliance obligations.
• Fraud Prevention Services: Specialist fraud-detection and device-fingerprinting service providers receive technical data (IP addresses, device identifiers, session metadata) to assist in identifying and blocking fraudulent activity on the Platform.
• Game Content Providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — receive the minimum player data necessary to deliver and settle the games you play. These studios operate their own data security frameworks under their respective licensing obligations.
• Customer Support Platforms: Live chat and customer relationship management (CRM) tools used to manage support interactions may process your contact data and communications history.
• Legal & Regulatory Authorities: waw33 may disclose personal data to courts, law enforcement agencies, regulatory bodies, or other competent public authorities where required to do so by a legally binding order or where disclosure is necessary to protect the rights, property, or safety of waw33, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of waw33's assets, your personal data may be transferred to the acquiring entity, subject to equivalent or superior data protection commitments. You will be notified of any such transfer by email before it takes effect.

All third-party data processors engaged by waw33 are contractually required to process personal data only on our documented instructions, to maintain appropriate technical and organisational security measures, and to assist waw33 in fulfilling its obligations to you under this Privacy Policy.

waw33 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve performance, and — where you have consented — to personalise your experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly and cannot be disabled. They include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure stable platform performance.
• Functional Cookies: These cookies remember your preferences — such as your chosen display language, notification settings, and last-visited game categories — to provide a more personalised experience. Disabling these cookies will not prevent access to the Platform but will reset your saved preferences on each visit.
• Analytics Cookies: With your consent, we use analytics tools to collect anonymised, aggregated data about how players navigate the Platform — including page visit frequency, session duration, and feature usage patterns. This data informs product development and does not identify you individually.
• Security & Fraud-Detection Cookies: These cookies collect device fingerprint data used by our fraud prevention systems to identify and block suspicious access attempts, bot activity, and multi-account registrations.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary or security cookies may impair your ability to use certain features of the Platform, including logging in and completing financial transactions.

waw33 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five years following account closure, to satisfy AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in accordance with standard financial record-keeping obligations applicable to online payment processing.
• KYC Documents: Retained for a minimum of five years following submission, or longer if required by an ongoing regulatory investigation or legal proceeding.
• Gameplay & Bet History: Retained for three years following the date of the relevant session or bet, to support dispute resolution and responsible gaming monitoring.
• Customer Support Records: Retained for two years from the date of the last interaction, to support quality assurance and the resolution of any follow-on disputes.
• Marketing Consent Records: Retained for the duration of your marketing opt-in and for two years following any opt-out, to demonstrate compliance with consent management obligations.
• Technical & Log Data: Retained for a maximum of 12 months in identifiable form, after which logs are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is used rather than deletion, the resulting data can no longer be linked to you as an individual and is no longer subject to this Privacy Policy.

waw33 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• TLS 1.3 encryption for all data in transit between your browser or mobile device and the Platform.
• AES-256 encryption for sensitive data fields stored at rest, including passwords (stored as salted hashes only) and payment method identifiers.
• Role-based access controls (RBAC) ensuring that waw33 staff can only access personal data that is strictly necessary for their designated job function.
• Regular penetration testing and vulnerability assessments conducted by qualified independent security professionals.
• 24/7 intrusion detection and monitoring systems that alert our security team to anomalous access patterns in real time.
• Formal incident response procedures, including a defined breach notification process under which affected players will be notified without undue delay in the event of a data breach that is likely to result in a high risk to their rights and freedoms.

As a player on the waw33 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to our support team at [email protected] with the subject line "Data Rights Request — [Your Account Username]".

• Right of Access: You have the right to request a copy of all personal data waw33 holds about you, together with information about how that data is being used. We will respond to access requests within 30 days of receipt.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may update most account details directly within your account settings panel; for changes to identity or KYC documents, please contact our support team.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations.
• Right to Restrict Processing: You have the right to request that waw33 suspend active processing of your data — for example, while the accuracy of the data is being contested — without requiring deletion of the data itself.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on waw33's legitimate interests. Upon receipt of a valid objection, waw33 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

waw33 will acknowledge all data rights requests within 72 hours and will provide a substantive response within 30 days. In cases of complexity or high volume, this period may be extended by a further 30 days, in which case you will be notified of the extension and its reasons.

The waw33 Platform is strictly intended for adults aged 21 and over. waw33 does not knowingly collect, process, or retain any personal data from individuals under the age of 21. Age verification is a mandatory component of the account registration and KYC process, and waw33 employs automated and manual controls to identify and block underage registrations.

If waw33 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all data collected will be securely deleted, and any funds held in the account will be returned to the originating payment method after verification. If you have reason to believe that a minor has registered an account on the Platform, please report this immediately to [email protected].

The waw33 Platform may contain references to third-party services — including game studios, payment providers, and sports data feeds — whose own privacy practices are governed by their respective privacy policies. waw33 is not responsible for the data collection or processing practices of any third-party service accessible through or referenced on the Platform. We encourage you to review the privacy policies of any third-party service you interact with independently of waw33.

waw33 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. Material amendments — defined as changes that substantially affect how we process your personal data or the rights available to you — will be communicated to registered players by email at least 14 days before the amended Policy takes effect.

Non-material amendments (including clarifications and corrections) will be reflected by updating the "Last Updated" date at the top of this page and will take effect immediately upon publication. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way waw33 processes your personal data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — subject line "Privacy Enquiry" — responses within 24 hours on business days.
• Live Chat: Available 24/7 via the in-app Live Chat widget on the Platform.
• WhatsApp: Available 08:00–24:00 WIB — contact details provided within your account dashboard.