Privacy Policy — wp888

wp888 ("we", "us", "our", "the Platform") operates the online gaming and sports betting platform accessible at wp888.bio. We are committed to protecting the privacy and personal data of every individual who interacts with our Platform, whether as a registered Member, a visitor browsing our public pages, or a user of our customer support channels.

This Privacy Policy ("Policy") describes the types of personal information we collect, the lawful bases upon which we process that information, the purposes for which it is used, the parties with whom it may be shared, and the rights available to you as a data subject. This Policy applies to all services offered through the wp888 Platform and supplements our Terms & Conditions.

By creating an account on wp888, using any feature of the Platform, or submitting personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and use of your data as described herein. If you do not agree with this Policy, you should not use the Platform.

• "Personal Data" means any information that identifies or can reasonably identify a natural person, directly or indirectly — including name, email address, phone number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, and destruction.
• "Controller" means wp888, the entity that determines the purposes and means of processing Personal Data.
• "Processor" means a third-party service provider that processes Personal Data on wp888's behalf and under wp888's documented instructions.
• "Member" / "You" means any registered user of the wp888 Platform who has completed account registration.
• "KYC Data" means identity verification documentation submitted by a Member, including government-issued ID, proof of address, and payment method verification materials.
• "Cookies" means small text files placed on your device by the Platform to support session management, personalisation, analytics, and fraud prevention.

wp888 collects Personal Data across the following categories:

wp888 collects your Personal Data through the following channels:

• Direct Submission: When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, or interact with any form or input field on the Platform.
• Automated Collection: When you browse or use the Platform, our servers and analytics tools automatically record technical and behavioural data including IP address, device identifiers, session timestamps, and gameplay activity logs.
• Cookies and Similar Technologies: The Platform uses first-party cookies and similar tracking technologies to maintain your login session, remember your preferences, prevent fraudulent activity, and generate aggregate analytics. See Section 11 for full details.
• Payment Processors: When you initiate a deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment processor may share transaction confirmation data with wp888 to reconcile the transfer against your account. wp888 does not receive or store your full bank card number or e-wallet PIN.
• Third-Party KYC Providers: Where wp888 engages an independent identity verification partner to authenticate KYC documents, that partner will share the verification outcome and confidence score with wp888. The raw document images are handled according to that partner's own privacy practices, which are contractually required to meet standards equivalent to this Policy.
• Fraud Detection Services: wp888 may receive signals from fraud-scoring and device-fingerprinting services to identify high-risk account activity. These services process device and behavioural data on our behalf.

wp888 processes your Personal Data for the following specific purposes:

• Account Creation and Management: To register your account, authenticate your identity at login, maintain your account profile, and administer your preferences and responsible gaming settings.
• Service Delivery: To provide access to the gaming Platform, process bets and game rounds, display your account balance, and deliver the specific features you use — including the sportsbook, live casino, slots, and promotional offers.
• Payment Processing: To process deposits and withdrawal requests via Indonesian bank transfers (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain transaction audit trails as required by financial compliance obligations.
• Identity Verification (KYC / AML): To comply with anti-money-laundering obligations, verify that you are who you claim to be, confirm that you are at least 21 years of age, and satisfy our international licensing requirements.
• Fraud Prevention and Security: To detect and prevent unauthorised account access, duplicate account creation, collusion, bonus abuse, money laundering, and other prohibited activities outlined in our Terms & Conditions.
• Customer Support: To respond to enquiries, resolve account disputes, process complaints, and provide assistance in English and Indonesian through our 24/7 support team.
• Responsible Gaming: To administer your self-exclusion status, deposit limits, loss limits, cooling-off periods, and session time reminders, and to flag accounts that exhibit signs of problem gambling for proactive intervention.
• Platform Improvement: To analyse aggregate behavioural data (in anonymised or pseudonymised form where possible) to improve the Platform's user experience, performance, and game offerings.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from competent regulatory or law enforcement authorities.
• Marketing Communications: Where you have provided separate, explicit consent, to send you personalised promotional emails or in-Platform messages about offers, new games, and seasonal promotions relevant to Indonesian players. You may withdraw this consent at any time by contacting [email protected].

wp888 relies on one or more of the following lawful bases when processing your Personal Data:

• Contractual Necessity: Processing is required to perform the contract between you and wp888 — specifically, to deliver the gaming services, process payments, and manage your account as set out in our Terms & Conditions. Without this data, wp888 cannot provide its services to you.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering (AML) regulations, international licensing obligations, and know-your-customer (KYC) requirements imposed by wp888's licensing jurisdiction.
• Legitimate Interests: Processing is necessary for wp888's legitimate interests — specifically, fraud prevention, network security, responsible gaming enforcement, and internal analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: For optional processing activities such as marketing communications, personalised promotional offers, and non-essential cookies, wp888 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

wp888 does not sell, rent, or trade your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data necessary to process your deposit or withdrawal transaction.
• KYC and Identity Verification Partners: Independent verification services engaged by wp888 to authenticate identity documents submitted during the KYC process. These partners act as Processors under our instruction.
• Game Studio Providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Habanero, Spribe, and Pocket Games Soft receive a player session token and game-relevant data (e.g., stake amount, currency) to run their games within the Platform. They do not receive your name, email, or financial account details.
• Fraud Detection and Cybersecurity Providers: Vendors supplying device-fingerprinting, IP-risk scoring, and anomaly-detection services. These vendors process technical data under strict contractual data processing obligations.
• Customer Support Software: Cloud-based customer service platforms used to manage live chat and email support. Support communications are stored on these platforms subject to encryption and access controls.
• Legal and Regulatory Authorities: wp888 will disclose Personal Data to competent law enforcement agencies, regulatory bodies, or courts when legally compelled to do so — for example, pursuant to a valid court order, a request from an anti-money-laundering authority, or an international mutual legal assistance treaty (MLAT) process.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of wp888's assets, your Personal Data may be transferred to the acquiring entity, which will be required to honour the terms of this Policy or provide you with adequate notice and choice prior to any material change in data handling.

wp888's Platform infrastructure and some of its third-party Processors operate in jurisdictions outside Indonesia. When your Personal Data is transferred internationally, wp888 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses (SCCs) or equivalent contractual protections imposed on the receiving party;
• Transfer to jurisdictions assessed as providing an adequate level of data protection equivalent to the standards under wp888's licensing jurisdiction;
• Binding corporate rules where the recipient is part of the same corporate group.

Indonesian Members may request information about the specific safeguards applied to international transfers of their data by contacting [email protected]. wp888 will respond within ten (10) business days.

wp888 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following indicative retention periods apply:

Upon expiry of the applicable retention period, wp888 will securely delete or anonymise your Personal Data so that it can no longer be associated with you. Where complete deletion is temporarily prevented by backup or archival system constraints, the data will be isolated from active processing until deletion is executed.

wp888 implements a layered security framework designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher. The padlock indicator in your browser confirms an active secure connection at all times.
• Password Hashing: Member passwords are stored exclusively as salted cryptographic hashes using industry-standard algorithms. wp888 staff cannot retrieve your plaintext password; if forgotten, a secure reset process is required.
• Encryption at Rest: Sensitive data fields — including KYC document references, bank account numbers, and e-wallet identifiers — are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data within wp888's internal systems is restricted on a strict need-to-know basis using role-based access controls (RBAC). All internal access is logged and subject to periodic audit.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts. 2FA is mandatory for all wp888 internal staff accounts with access to member data.
• Vulnerability Management: The Platform undergoes regular penetration testing and automated vulnerability scanning. Critical findings are remediated on an expedited basis.
• Data Breach Response: In the event of a Personal Data breach that poses a risk to affected Members, wp888 will notify impacted individuals without undue delay and will take all reasonable steps to contain and remediate the breach.

The wp888 Platform uses cookies and similar technologies to support core functionality and improve your experience. The cookies we use fall into the following categories:

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. wp888 does not use third-party advertising cookies or retargeting pixels.

As a data subject, you hold the following rights with respect to your Personal Data held by wp888. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". wp888 will acknowledge receipt within two (2) business days and fulfil the request within thirty (30) calendar days, or notify you of any extension.

• Right of Access: You have the right to request a copy of the Personal Data wp888 holds about you, along with information about how it is processed, its legal basis, and the categories of recipients with whom it has been shared.
• Right to Rectification: If any Personal Data wp888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account profile data, some corrections can be made directly from within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that wp888 may be unable to delete data that it is legally required to retain under AML, KYC, or licensing obligations.
• Right to Restrict Processing: You may request that wp888 restrict processing of your Personal Data — for example, while the accuracy of the data is being contested, or where processing is unlawful but you do not wish the data to be erased.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You may object at any time to processing based on wp888's legitimate interests, including profiling for fraud prevention purposes, unless wp888 can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection supervisory authority in wp888's jurisdiction of incorporation if you believe your rights have been violated. wp888 encourages you to contact us directly first so we can address your concern promptly.

The wp888 Platform is strictly intended for adults aged 21 years and older. wp888 does not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you are not permitted to register an account, use the Platform, or provide any personal information to wp888.

If wp888 discovers — through KYC review, self-disclosure, or other means — that it has inadvertently collected Personal Data from an individual under 21, it will immediately suspend the relevant account, delete all associated Personal Data, and reverse any financial transactions to the extent technically possible.

If you believe that a minor has registered an account on the Platform, please notify us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving a credible report.

The wp888 Platform may reference or display content associated with third-party game studio providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Habanero, Spribe, Pocket Games Soft). When you launch a game supplied by a third-party studio, the game engine runs within an iframe or dedicated interface that is governed by that studio's own data practices.

wp888 is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party provider whose services you interact with through the Platform. The game studios listed above are contractually required by wp888 to process only the minimum data necessary to operate the game session and to maintain data security standards consistent with internationally recognised information security frameworks.

wp888 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, wp888 will:

• Update the "Effective Date" displayed at the top of this page.
• Display a prominent notice on the Platform homepage for a minimum of seven (7) days following the change.
• Where operationally practical, send an email notification to the registered email address of active Members summarising the key changes.

Your continued use of the Platform after the updated Policy takes effect constitutes acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Platform and request account closure by writing to [email protected] before the effective date of the change.

The most current version of this Privacy Policy is always available at wp888.bio/privacy-policy. wp888 recommends reviewing this Policy periodically, particularly before providing any new category of Personal Data.

For any privacy-related enquiry, data rights request, or complaint regarding how wp888 handles your Personal Data, please contact our Data Protection team using the details below. All communications should be written in English to ensure accurate and timely handling.

wp888 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant supervisory authority in wp888's jurisdiction of incorporation.