Privacy Policy — bw888

bw888 ("we", "us", "our") operates the online casino and sports betting platform accessible at bw888.vu (the "Platform"). We are committed to processing personal data responsibly, transparently, and in accordance with internationally recognised data protection principles.

This Privacy Policy applies to all personal data collected from individuals who access the bw888 Platform, register a player account, engage with our customer support channels, or interact with our promotional communications. It covers data collected through all access points — including desktop browsers, mobile browsers, and any future mobile applications.

Our primary player base consists of users located in Indonesia. Where Indonesian data protection considerations apply — including the Personal Data Protection Law (UU PDP) — bw888 acknowledges its obligations and will continue to maintain compliance with applicable regulations as they evolve.

2.1 Identity of the Controller. bw888 acts as the data controller for all personal data collected through the Platform. As data controller, bw888 determines the purposes and means by which personal data is processed.

2.2 Contact for Data Enquiries. All privacy-related enquiries, data subject requests, and data protection concerns should be directed to our dedicated support team at the contact details provided in Section 14 of this Policy. bw888 will respond to all verified data subject requests within 30 calendar days of receipt.

bw888 collects and processes the following categories of personal data in connection with the operation of the Platform and delivery of its services:

bw888 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly required for responsible gaming assessments (e.g., self-exclusion records and deposit limit history).

bw888 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, updating your account profile, or contacting our customer support team.
• Automated collection: Technical and usage data collected automatically via cookies, web beacons, and server-side logging each time you access or interact with the bw888 Platform. See Section 7 for full details on our cookie practices.
• Third-party sources: Identity verification and fraud screening data received from licensed KYC service providers; transaction confirmation data received from payment processors (including local Indonesian bank transfer gateways and e-wallet platforms); risk and compliance data from anti-money-laundering (AML) screening services.
• Customer support interactions: Data generated through live chat sessions, email correspondence, and support ticket submissions, including metadata such as contact timestamps and resolution status.

bw888 processes personal data only where a lawful basis exists. The table below sets out each processing purpose and its corresponding legal basis:

6.1 We Do Not Sell Your Data. bw888 does not sell, rent, trade, or otherwise transfer your personal data to unaffiliated third parties for their own marketing purposes. Your data is shared only in the specific circumstances described below.

6.2 Service Providers and Data Processors. bw888 engages trusted third-party service providers who process personal data on our behalf and strictly in accordance with our written instructions. These include:

• KYC and identity verification providers for age (21+) and identity authentication.
• Payment processing partners facilitating IDR transactions via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Anti-fraud and AML compliance screening services.
• Cloud hosting and data storage infrastructure providers.
• Customer support platform providers (live chat and ticketing systems).
• Game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — limited to session data required for game delivery and dispute resolution.

6.3 Legal and Regulatory Disclosure. bw888 may disclose personal data to competent authorities, law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or enforceable regulatory demand. In all such cases, bw888 will disclose only the minimum data necessary to fulfil the legal obligation.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of bw888's business assets, personal data held by bw888 may form part of the transferred assets. In such circumstances, bw888 will provide advance notice to affected players and ensure that the successor entity is bound by data protection obligations at least as protective as those set out in this Policy.

6.5 Aggregated and Anonymised Data. bw888 may share aggregated, anonymised, or pseudonymised data — which cannot reasonably be used to identify any individual player — with analytics partners, industry bodies, or for publication in platform performance reporting. This does not constitute a disclosure of personal data.

7.1 What Are Cookies. Cookies are small text files placed on your device by a website to store information about your session, preferences, and browsing behaviour. bw888 uses cookies and similar technologies (including web beacons, pixel tags, and local storage objects) to operate and improve the Platform.

7.2 Types of Cookies We Use.

• Strictly Necessary Cookies: Essential for the Platform to function. These enable user authentication, session management, security features, and the delivery of core gambling functionality. They cannot be disabled without rendering the Platform inoperable.
• Performance and Analytics Cookies: Used to collect aggregated data about how players navigate the Platform — pages visited, error messages encountered, and session duration — allowing us to improve performance and fix technical issues.
• Functionality Cookies: Store your preferences such as preferred language settings, recently visited game categories, and responsible gaming limit configurations to deliver a more personalised experience on return visits.
• Marketing and Targeting Cookies: Used — where you have consented — to deliver promotions and bonus offers relevant to your game preferences and betting history. These cookies may be set by bw888 or by our game content delivery partners.

7.3 Managing Cookies. You may control and delete cookies through your browser settings at any time. Please note that disabling cookies beyond strictly necessary categories may impair Platform functionality, including the ability to stay logged in, access game history, or retain responsible gaming settings. Detailed browser-level cookie management instructions are available from your browser provider's help documentation.

8.1 Retention Periods. bw888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Active account data: Retained for the lifetime of the player's account plus a minimum of five (5) years following permanent account closure, to satisfy AML record-keeping obligations and potential dispute resolution requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in line with standard anti-money-laundering regulatory expectations applicable to gaming operators.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, consistent with financial record-keeping best practices.
• Customer support communications: Retained for two (2) years from the date of each communication, or longer where a dispute or investigation is ongoing.
• Marketing preference records: Retained for the duration of the account plus two (2) years to evidence consent history where required.

8.2 Data Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Players who request account closure before the end of any applicable retention period should note that bw888 is legally obligated to retain certain data categories for the minimum periods described above, even after the account is closed.

bw888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the bw888 servers.
• Cryptographic password hashing — bw888 never stores passwords in plain text. Account credentials are hashed using industry-standard algorithms.
• Role-based access controls — internal access to personal data is restricted to authorised personnel on a strict need-to-know basis.
• Regular independent security audits and penetration testing conducted by third-party cybersecurity specialists.
• Firewalls, intrusion detection systems, and DDoS mitigation infrastructure protecting the Platform's server environment.
• Data minimisation practices — bw888 collects and retains only the personal data that is strictly necessary for the stated purposes.

9.1 Security Breach Notification. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bw888 will notify affected players without undue delay and, where legally required, will report the breach to the relevant supervisory authority within the timeframe prescribed by applicable law.

As a bw888 player, you hold the following rights in relation to your personal data. bw888 will respond to all verified data subject requests within 30 calendar days. Requests may be submitted via the contact details in Section 14.

• Right of Access: You have the right to request a copy of the personal data bw888 holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by bw888 be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing is based. This right is subject to bw888's legal retention obligations as described in Section 8.
• Right to Restriction of Processing: You may request that bw888 restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or have objected to processing pending verification of bw888's legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where bw888 relies on legitimate interests as its legal basis, and where you believe your interests, rights, or freedoms override those legitimate interests.
• Right to Withdraw Consent: Where bw888 processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team using the details in Section 14. bw888 may request verification of your identity before processing any data subject request, to prevent unauthorised access to another player's data.

bw888 is a strictly 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of bw888's KYC process — all players are required to submit valid government-issued identification confirming their date of birth before withdrawal privileges are activated.

If bw888 discovers or is notified that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the data will be securely deleted (or retained only to the minimum extent required to investigate and prevent re-registration), and any funds associated with the account will be handled in accordance with bw888's Terms and Conditions.

If you are a parent or guardian and believe your child has registered on bw888 without your knowledge, please contact us immediately at [email protected] so we can take prompt action.

The bw888 Platform may contain references to game providers, payment networks, or other services operated by third parties. bw888 is not responsible for the privacy practices of any third-party service, and this Privacy Policy does not extend to any external website, application, or service that is not directly operated by bw888.

If you navigate away from the bw888 Platform to a third-party service — for example, to your bank's internet banking portal or e-wallet application to complete a deposit — any personal data you provide to that third party is governed exclusively by that third party's own privacy policy. bw888 encourages you to review the privacy policies of any third-party services you interact with.

13.1 Right to Update. bw888 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or Platform functionality. The updated Policy will be published on this page with a revised effective date.

13.2 Notification of Material Changes. Where amendments are material — for example, a change to the categories of data collected, the purposes of processing, or data sharing arrangements — bw888 will notify registered players via email or a prominent in-platform notice prior to the changes taking effect.

13.3 Continued Use. Your continued use of the bw888 Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the Platform and may close your account by contacting customer support.

For any privacy-related enquiry, data subject access request, or complaint regarding bw888's handling of your personal data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line for prompt routing to our data protection team.
• Live Chat: Available 24/7 directly within the bw888 Platform. Our Indonesian-speaking support agents can assist with privacy enquiries in English and Indonesian across all three Indonesian time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9).
• Response Commitment: bw888 will acknowledge all privacy enquiries within 3 business days and provide a full substantive response within 30 calendar days of receiving a verified request.

bw888 is committed to resolving all data protection concerns promptly and fairly. If you are not satisfied with our response, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.