wa365 Privacy Policy

wa365 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our platform — whether as a registered Member, a prospective player browsing our site, or a visitor reading our informational pages. This Privacy Policy ("Policy") sets out, in plain and transparent language, how wa365 collects, processes, stores, and protects personal data in connection with the provision of our online sportsbook, casino, togel (Indonesia's traditional numbers lottery), and slot gaming services.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between wa365 and its Members. By registering for a wa365 account, depositing funds, or otherwise using our services, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy.

wa365 operates primarily for players based in Indonesia, including those located in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, and other major cities. We recognise the data-protection expectations of our Indonesian Member base and apply internationally recognised privacy standards across all data handling activities.

The following terms are used throughout this Policy with the meanings assigned below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, organisation, retrieval, use, disclosure, or deletion.
• "Data Controller" — wa365, as the entity that determines the purposes and means of processing Personal Data collected via the Platform.
• "Data Processor" — any third party that processes Personal Data on behalf of wa365 under a contractual data-processing agreement.
• "Member" — a natural person who has completed the wa365 registration process and holds an active account on the Platform.
• "KYC" (Know Your Customer) — the identity and age verification process applied by wa365 to confirm a Member's identity, residency, and eligibility to use the Platform.
• "Cookie" — a small text file stored on a user's device by a web server, used to remember preferences, maintain sessions, and support analytics.
• "Wallet Balance" — the real-money funds held within a Member's wa365 account, denominated in Indonesian Rupiah (IDR / Rp).
• "Sensitive Data" — a subset of Personal Data that warrants heightened protection, including government-issued identity document numbers, financial account details, and biometric data where applicable.

wa365 collects the minimum Personal Data necessary to deliver a secure, compliant, and high-quality gaming experience. The categories of data we collect are described below.

3.1 Registration Data

When you create a wa365 account, we collect your full legal name, date of birth, gender, residential address, email address, and the username and password you select. This data is required to establish your account identity and to confirm your eligibility to use the Platform.

3.2 Identity Verification (KYC) Data

To comply with our anti-money-laundering obligations and to enforce the 21+ age restriction, we collect copies of government-issued identity documents such as your Indonesian National Identity Card (KTP), passport, or driving licence. We may also collect a selfie or proof-of-address document (utility bill or bank statement dated within three months) during an enhanced KYC review.

3.3 Financial Data

We collect information about your payment methods, including bank account names and masked account numbers for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, and BSI transfers, as well as registered e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja. Full financial account credentials are never stored by wa365 — they are handled directly by the respective payment providers via encrypted channels.

3.4 Transaction Data

All deposit and withdrawal transactions are logged, including the amount in IDR, the payment method used, the timestamp in WIB (UTC+7), and the transaction status. This data is retained for compliance auditing and for the resolution of any payment disputes.

3.5 Gameplay Data

We record your wagering activity across all product verticals — sportsbook (including mix parlay and voor bola markets), live casino, slots from Pragmatic Play, Microgaming, NetEnt, and other studios, and togel draw participation. Gameplay data is used to personalise your experience, to detect problem-gambling patterns, and to comply with our responsible-gaming obligations.

3.6 Technical and Device Data

We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, device model and operating system, screen resolution, session duration, pages visited, and referring URL. This data helps us maintain platform security, prevent fraud, and improve site performance.

3.7 Communications Data

If you contact wa365 via Live Chat, email, or any other support channel, we retain a record of the communication including your messages, the agent's responses, and any attachments or screenshots submitted. This data is used for quality assurance, dispute resolution, and training purposes.

wa365 collects Personal Data through the following means:

• Directly from you: Registration forms, KYC document uploads, payment method entries, support communications, and any information you voluntarily provide through your account dashboard or profile settings.
• Automatically: Through server logs, cookies, pixel tags, and similar tracking technologies embedded in the Platform that capture technical and behavioural data as you navigate the site.
• From payment providers: Transaction confirmation data returned by BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other integrated payment gateways following a deposit or withdrawal instruction.
• From identity verification services: wa365 may use third-party KYC service providers to assist in verifying the authenticity of identity documents. These providers return a verification result to wa365; original document images may be retained by the KYC provider subject to their own privacy policies, a summary of which is available upon request.
• From publicly available sources: In connection with fraud prevention and compliance screening, wa365 may cross-reference data against publicly available registers, sanction lists, or politically exposed person (PEP) databases.

wa365 processes Personal Data on one or more of the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a Member — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of our agreement with you.
• Legal obligation: Certain processing activities — particularly KYC verification, anti-money-laundering record-keeping, and transaction logging — are carried out to comply with applicable legal and regulatory requirements under internationally recognised standards.
• Legitimate interests: Processing for fraud prevention, platform security, responsible-gaming monitoring, and service improvement is carried out on the basis of wa365's legitimate interests in maintaining a safe, fair, and commercially viable platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where wa365 sends you direct marketing communications (promotions, bonus offers, seasonal campaigns), we do so on the basis of your explicit consent, which you may withdraw at any time by contacting our support team or adjusting your communication preferences in the account dashboard.

wa365 uses the Personal Data we collect for the following specific purposes:

6.1 Account Management

To create and maintain your wa365 account, verify your identity, process login requests, reset passwords, manage account settings, and communicate essential account-related notifications to you.

6.2 Payment Processing

To initiate, execute, and reconcile deposit and withdrawal transactions via your selected local payment method, including bank transfers (BCA, BRI, BNI, Mandiri) and e-wallet channels (OVO, DANA, GoPay, ShopeePay, LinkAja), all denominated in Indonesian Rupiah (IDR).

6.3 Regulatory Compliance & KYC

To verify that you meet the eligibility requirements to use wa365 — specifically that you are a natural person, that you are at least 21 years of age, and that your identity and source of funds meet our compliance standards. This includes ongoing monitoring of account activity for suspicious patterns consistent with money laundering or fraud.

6.4 Responsible Gaming

To monitor gameplay patterns for indicators of problem gambling, to enforce deposit limits and self-exclusion instructions you have set, and to contact you proactively if our systems flag a concern about your gaming behaviour. Your safety is a legal and ethical priority for wa365.

6.5 Platform Security & Fraud Prevention

To detect and prevent unauthorised access, account takeovers, bonus abuse, collusion, use of prohibited automation tools, and any other activity that threatens the integrity of the Platform or the safety of other Members.

6.6 Personalisation & Marketing

To tailor the platform experience — including game recommendations, promotional offers, and bonus eligibility — to your preferences and activity history, where you have consented to receive such communications. wa365 does not use Personal Data to build profiles for sale to third-party advertisers.

6.7 Customer Support

To respond to your queries, process complaints, and maintain a record of support interactions for quality assurance and dispute resolution purposes.

6.8 Legal Proceedings

To establish, exercise, or defend legal claims in the event of a dispute between wa365 and a Member, or where wa365 is required to respond to a lawful request from a regulatory or law-enforcement authority.

wa365 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

7.1 Payment Service Providers

We share transaction-related data with integrated payment providers — including domestic banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely for the purpose of processing your deposit and withdrawal requests. Each provider is bound by its own privacy and data-security obligations under applicable financial regulations.

7.2 Identity Verification Providers

We engage accredited third-party KYC service providers to assist with identity document verification. These providers act as Data Processors under contractual agreements that restrict their use of your data to the provision of verification services for wa365 only.

7.3 Game Studios & Platform Providers

To deliver casino and slot content from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, limited technical data (such as a pseudonymous session token and bet amount) is transmitted to the game server. Game providers do not receive your full name, contact details, or financial account information.

7.4 Legal and Regulatory Authorities

wa365 will disclose Personal Data to competent regulatory or law-enforcement authorities where required to do so by law, court order, or legitimate regulatory request. Where permitted by law, we will notify the affected Member of such a request before complying.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of wa365's assets, Personal Data held by wa365 may be transferred to the acquiring entity as part of the transaction. Members will be notified of any such transfer via a platform notice and/or email, and the acquiring entity will be bound by the terms of this Policy (or a materially equivalent replacement) with respect to their data.

wa365's primary data infrastructure is designed to serve Members across Indonesia, with servers and processing facilities located in jurisdictions that maintain high standards of data protection. However, given the global nature of our technology stack — including cloud infrastructure, game studio integrations, and KYC providers — some Personal Data may be transferred to, and processed in, countries outside Indonesia.

When such transfers occur, wa365 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses with recipient entities that impose data-protection obligations equivalent to those described in this Policy.
• Transfers only to entities located in jurisdictions recognised as maintaining adequate data-protection standards by applicable international benchmarks.
• Encryption of data in transit using TLS 1.2 or higher for all cross-border data flows.

You may request further information about the safeguards applicable to any specific international transfer by contacting our support team at the details set out in Section 16.

wa365 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

wa365 implements a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Our core security commitments include:

• 256-bit TLS Encryption: All data transmitted between your device and the wa365 Platform is encrypted using TLS 1.2 or higher, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted Data at Rest: Sensitive Personal Data — including KYC documents and financial account identifiers — is stored using AES-256 encryption at rest within our secure data infrastructure.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. wa365 employees and contractors with access to Member data are subject to confidentiality agreements and receive regular data-protection training.
• Anomaly Detection: Our platform employs automated systems to detect unusual account activity, including multiple failed login attempts, IP address changes, and atypical transaction patterns, triggering alerts and protective responses in real time.
• Regular Security Audits: wa365 engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of our platform infrastructure.
• Incident Response: In the event of a confirmed Personal Data breach that is likely to result in risk to your rights and freedoms, wa365 will notify affected Members without undue delay, providing a clear account of what data was affected, the likely consequences, and the remedial steps we are taking.

As a wa365 Member, you hold the following rights with respect to your Personal Data. These rights may be subject to certain limitations where data is being retained to comply with a legal obligation or to defend a legal claim, but wa365 will always respond transparently to any request you make.

How to Exercise Your Rights

To exercise any of the rights listed above, submit a written request to wa365 support via Live Chat (available 24/7 from your account dashboard) or via email at [email protected] (plain text — not a clickable link). Please include your registered username and a description of the right you wish to exercise. We will respond to all data-rights requests within thirty (30) calendar days of receipt. Where a request is complex or we have received a high volume, we may extend this period by a further two months, of which we will notify you within the initial thirty-day window.

We may require you to verify your identity before processing a data-rights request to ensure we do not disclose or delete data at the request of an unauthorised party.

wa365 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session, and to gather analytics that help us improve the user experience. Below is a summary of the cookie categories we use:

Managing Cookies

You can manage or delete cookies through your browser's settings at any time. Note that disabling non-essential cookies may affect certain features of the wa365 platform, such as saved preferences and session continuity. Most modern browsers provide options to block third-party cookies, clear cookies on exit, and receive notifications when a new cookie is set. Please consult your browser's help documentation for specific instructions.

Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal. wa365 currently does not alter its data-collection practices in response to DNT signals, as no universally accepted standard for DNT compliance has been established. We will revisit this position as industry standards evolve.

The wa365 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Our KYC process is specifically designed to verify age eligibility prior to any withdrawal transaction, and our registration flow includes an explicit age declaration.

If wa365 becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds (net of any completed wagers) to the originating payment method.

If you are a parent or guardian and believe your child has registered on the wa365 Platform without your knowledge, please contact our support team immediately at [email protected] (plain text — not a clickable link) and we will take prompt action.

The wa365 Platform may contain links to or integrations with third-party services, including payment gateways and game studio interfaces. These third-party services operate under their own privacy policies, which are independent of this Policy. wa365 is not responsible for the privacy practices of any third-party service provider and encourages Members to review the relevant privacy policies before providing personal data to any external service.

Our integration with payment providers such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja means that when you initiate a transaction, you will interact with those providers' own interfaces. Any data you enter directly into a payment provider's interface is governed by that provider's privacy policy, not by wa365's.

wa365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or the services we offer. We will communicate material changes to this Policy by posting a prominent notice on the Platform and, where we hold your email address, by sending a direct notification to your registered email account — with a minimum of seven (7) days' advance notice before the change takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent substantive revision. We encourage you to review this Policy periodically so that you remain informed of how wa365 handles your Personal Data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the updated terms, you must cease using the Platform and contact support to arrange account closure.

For any questions, concerns, or requests relating to this Privacy Policy or to your Personal Data held by wa365, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly within your wa365 account dashboard. Average first-response time is under 90 seconds.
• Email (plain text — not clickable): [email protected]
• Subject Line for Data Requests: "Data Privacy Request — [Your Username]"
• Support Hours: 24 hours a day, 7 days a week, 365 days a year — including all Indonesian public holidays such as Idul Fitri, Idul Adha, and Hari Kemerdekaan.
• Languages: Support is available in both English and Bahasa Indonesia.
• Timezone: WIB (UTC+7) — covering Jakarta, Surabaya, Medan, Bandung, and all of Western Indonesia.

wa365 aims to acknowledge all privacy-related requests within 24 hours and to provide a substantive response within thirty (30) calendar days. For formal complaints that remain unresolved after our internal process, you may seek recourse through internationally recognised dispute resolution channels as described in our Terms & Conditions.