win368 Privacy Policy

1. Introduction and Data Controller

win368 (referred to as "we," "us," or "our") operates the online gaming platform located at https://win368.cam. We are committed to protecting the privacy and security of your personal information in accordance with applicable data protection laws, including standards aligned with the General Data Protection Regulation (GDPR) where applicable.

This Privacy Policy applies to all users who access, browse, or register an account on the win368 platform. By using our services, you acknowledge that you have read, understood, and consent to the data practices described in this policy.

For the purposes of data protection law, win368 is the data controller responsible for processing your personal information. If you have any questions or concerns about how we handle your data, please contact us at [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

win368 collects personal data that is necessary to provide our services, comply with legal and regulatory obligations, prevent fraud, and enhance the user experience. The categories of personal data we collect include:

2.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address, username, and password.
• Identity Verification (KYC) Documents: Copy of Indonesian national identity card (KTP) or other government-issued photo identification, selfie photograph holding ID, proof of address documents (utility bills, bank statements).
• Payment Information: Bank account details, e-wallet account information (DANA, GoPay, OVO, ShopeePay, LinkAja), transaction history, deposit and withdrawal records. Note that sensitive payment card details (full card numbers, CVV codes) are processed by our PCI-DSS-compliant payment processors and are not stored on win368 servers.
• Communications: Content of live chat conversations, customer support emails, feedback submissions, and any other correspondence you initiate with win368.

2.2 Information Collected Automatically

• Device and Browser Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers.
• Usage Data: Pages visited, games played, bet history, session duration, referral source, click patterns, and other behavioral analytics.
• Location Data: Approximate geographic location derived from IP address to ensure compliance with jurisdiction-specific gaming regulations.
• Cookies and Similar Technologies: See Section 5 (Cookies and Tracking Technologies) below for detailed information.

2.3 Information from Third Parties

• Payment Processors: Transaction confirmation data, payment method verification, fraud detection signals from banks and e-wallet providers.
• Identity Verification Services: Age verification results, identity document authentication status from third-party KYC service providers.
• Marketing Partners: If you arrive at win368 through an affiliate or marketing campaign, we may receive anonymized referral data (campaign ID, source channel) to measure marketing effectiveness.

3. How We Use Your Personal Data

win368 processes your personal data for the following lawful purposes:

3.1 To Provide and Manage Our Services

• Create and maintain your gaming account.
• Process deposits, withdrawals, and in-game transactions.
• Deliver sports betting, live casino, slot, and lottery products.
• Provide customer support via live chat, email, and WhatsApp.
• Administer VIP loyalty programs, bonuses, and promotional offers.

3.2 To Comply with Legal and Regulatory Obligations

• Verify your identity and age to prevent underage gambling (21+ requirement).
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by our gaming license and financial regulations.
• Maintain transaction records and audit trails for regulatory reporting.
• Respond to lawful requests from regulatory authorities, law enforcement, or courts.

3.3 To Prevent Fraud and Ensure Platform Security

• Monitor account activity for suspicious behavior, including multiple account creation, collusion, bonus abuse, and payment fraud.
• Implement risk-based authentication and fraud detection algorithms.
• Investigate and resolve disputes related to bet settlement, payment issues, or account compromises.

3.4 To Promote Responsible Gaming

• Monitor betting patterns and account activity to identify potential problem gambling behaviors.
• Enforce deposit limits, loss limits, session time caps, and self-exclusion requests.
• Provide access to responsible gaming tools and support resources.

3.5 To Improve Our Services and User Experience

• Analyze aggregated usage data to understand user preferences and optimize platform performance.
• Conduct A/B testing of features and interfaces to enhance usability.
• Develop new games, betting markets, and payment methods based on user demand.

3.6 To Communicate with You

• Send transactional notifications (account verification, deposit confirmations, withdrawal status updates).
• Deliver promotional offers, bonus announcements, and VIP rewards (opt-in only for marketing communications).
• Respond to your inquiries, feedback, and support requests.

Legal Basis for Processing: Our processing of your personal data is based on (a) performance of the contract between you and win368 (Terms and Conditions); (b) compliance with legal obligations; (c) legitimate interests in preventing fraud, ensuring security, and improving our services; and (d) your explicit consent for optional processing activities such as marketing communications.

4. Data Sharing and Third-Party Services

win368 does not sell your personal data to third-party marketing companies. However, we share your data with trusted service providers and partners under strict contractual safeguards in the following circumstances:

4.1 Payment Processors

To facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, DANA, GoPay, OVO, ShopeePay, and LinkAja, we share necessary payment information with licensed payment service providers. These processors operate under PCI-DSS compliance and are contractually obligated to protect your financial data.

4.2 Identity Verification Providers

To comply with KYC and age verification requirements, we use third-party identity verification services that authenticate your government-issued ID documents and cross-check your information against national databases. These providers are bound by strict data protection agreements.

4.3 Game Providers and Platform Integrations

Live casino games, slot machines, and sports betting odds are delivered via integrations with licensed game studios and odds providers (e.g., Evolution Gaming, Pragmatic Play, Microgaming). These providers may receive anonymized session data (user ID, bet amounts, game outcomes) necessary to deliver real-time gaming experiences. Personal identification data is not shared unless required for fraud investigation.

4.4 Cloud Infrastructure and Hosting Services

win368 uses secure cloud hosting services to store data and deliver platform functionality. Our hosting providers operate data centers with ISO 27001 certification and implement physical and technical security controls aligned with industry best practices.

4.5 Analytics and Advertising Partners

We use analytics tools (e.g., Google Analytics) to understand aggregate user behavior and measure marketing campaign effectiveness. These tools use cookies and similar tracking technologies. You can opt out of analytics tracking through your browser settings or by using privacy extensions. We do not share personally identifiable information with advertising networks without your explicit consent.

4.6 Legal and Regulatory Authorities

win368 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required by law, court order, or to protect the rights, property, or safety of win368, our users, or the public. Examples include AML investigations, fraud reports, and responses to subpoenas.

4.7 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change in data controller and your rights regarding your data.

5. Cookies and Tracking Technologies

win368 uses cookies and similar tracking technologies to enhance platform functionality, improve user experience, and analyze usage patterns. A cookie is a small text file stored on your device that allows us to recognize your browser and remember certain information.

5.1 Types of Cookies We Use

• Essential Cookies: Required for platform operation, including session management, authentication, and security features. These cannot be disabled without affecting core functionality.
• Performance Cookies: Collect anonymized data on how users interact with the platform (page views, click paths, error messages) to identify performance bottlenecks and improve stability.
• Functional Cookies: Remember your preferences (language selection, display settings, VIP tier) to provide a personalized experience across sessions.
• Marketing Cookies: Track referral sources and campaign IDs to measure the effectiveness of marketing efforts. These cookies may be set by third-party advertising partners.

5.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, although this may impact platform functionality. To opt out of third-party advertising cookies, visit industry opt-out tools such as the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA). Note that essential cookies cannot be disabled without preventing access to core platform features.

6. Data Security Measures

win368 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols.
• Secure Data Storage: Personal data is stored in encrypted databases with access restricted to authorized personnel on a need-to-know basis.
• Multi-Factor Authentication (MFA): Available for all user accounts to prevent unauthorized access even if login credentials are compromised.
• Regular Security Audits: Our infrastructure undergoes independent third-party security audits and penetration testing at regular intervals to identify and remediate vulnerabilities.
• Employee Training: All staff members with access to personal data undergo mandatory data protection and security awareness training.
• Incident Response Plan: In the event of a data breach, win368 has a documented incident response plan to contain the breach, notify affected users, and report to relevant authorities as required by law.

While we employ industry-leading security measures, no method of electronic transmission or storage is 100% secure. Users are responsible for maintaining the confidentiality of their login credentials and should report any suspected unauthorized access immediately.

7. Data Retention and Deletion

win368 retains personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal, regulatory, and audit requirements.

7.1 Active Account Data Retention

Personal data associated with active accounts is retained for the duration of your account's active status. This includes profile information, transaction history, bet records, and communications.

7.2 Closed Account Data Retention

When you close your account, win368 may retain certain data for up to 7 years to comply with financial record-keeping obligations, AML regulations, and to resolve any outstanding disputes or legal claims. After this period, data is securely deleted or anonymized.

7.3 Inactive Account Purging

Accounts that remain inactive (no login or transaction activity) for 3 consecutive years are subject to data purging. You will receive email notification 60 days prior to data deletion, providing an opportunity to reactivate your account if desired.

7.4 Right to Erasure

You have the right to request deletion of your personal data, subject to certain exceptions (e.g., data required for legal compliance, fraud prevention, or resolution of disputes). To exercise this right, contact our privacy team at [email protected].

8. Your Privacy Rights

win368 respects your data protection rights and provides mechanisms to exercise them. Under applicable data protection laws, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you, including account information, transaction history, and communications.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal and regulatory retention requirements.
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances (e.g., while we verify data accuracy or assess a legal claim).
• Right to Data Portability: Request a machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: Object to processing of your personal data for direct marketing purposes or based on legitimate interests. You can opt out of marketing communications via account settings or unsubscribe links in emails.
• Right to Withdraw Consent: If processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our privacy team at [email protected] with your request and proof of identity. We will respond within 30 days of receiving a valid request.

9. International Data Transfers

win368 operates from an international jurisdiction and may transfer your personal data to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by recognized data protection authorities.
• Adequacy decisions confirming that the destination country provides an adequate level of data protection.
• Binding corporate rules and certification schemes where applicable.

By using win368, you acknowledge and consent to the transfer of your personal data to jurisdictions that may have different data protection standards than Indonesia, subject to the safeguards described above.

10. Children's Privacy

win368 is strictly for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory date-of-birth verification, and KYC procedures require government-issued photo identification to confirm age eligibility.

If we become aware that a user is under 21 years of age, we will immediately suspend the account, confiscate any funds or winnings, and delete all associated personal data. Parents or guardians who believe a minor has accessed win368 should contact us immediately at [email protected].

11. Changes to This Privacy Policy

win368 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform functionality. Material changes will be communicated to users via:

• Email notification to the address registered on your account.
• Prominent on-platform notification upon your next login.
• Updated "Last Updated" date at the top of this Privacy Policy page.

Continued use of the platform after changes have been posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our privacy and data protection team:

Email (plain text): [email protected]
Subject Line: Privacy Inquiry / Data Protection Request
Live Chat: Available 24/7 for general inquiries (escalate privacy matters to the privacy team)
Response Time: We aim to respond to all privacy inquiries within 5 business days, and data subject access requests within 30 days as required by law.