This Privacy Policy describes how wso168 collects, uses, stores, and protects your personal data. We treat the confidentiality of your information with the same degree of care that we apply to your funds. Please read this document carefully.
Last Updated: 1 January 2026Summary: wso168 collects only the data needed to operate your account, process transactions in IDR, comply with anti-money laundering obligations, and keep the platform secure. We never sell your personal data to third parties. This policy explains your rights and how to exercise them.
This Privacy Policy governs the collection and use of personal data by the entity that owns and operates the wso168 platform (referred to as "the Company", "we", "us", or "our" in this document). This policy applies to all visitors, registered Members, and users of the wso168 website and associated mobile interfaces.
By accessing or using the wso168 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this policy, you must discontinue use of the platform immediately.
This policy is intended to operate in conjunction with our Terms & Conditions. In the event of any conflict between the two documents, the Terms & Conditions will govern your use of the platform, and this Privacy Policy will govern the handling of your personal data.
wso168 collects the following categories of personal data. We only collect data that is reasonably necessary to deliver our services and to satisfy our legal and regulatory obligations:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, gender, Indonesian KTP (National Identity Card) number, and a photograph of your identity document. |
| Contact Data | Email address, mobile phone number, residential address, and preferred language of communication. |
| Financial Data | Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, and transaction records in IDR. |
| Account Data | Username, login credentials, betting history, game activity, bonus claims, and loyalty status. |
| Technical Data | IP address, device type, browser type, operating system, screen resolution, and general location data derived from your connection. |
2.1 Special Categories. wso168 does not collect special categories of sensitive personal data — such as data concerning race, religion, health, or political opinions — except where such data is voluntarily disclosed by you in the course of a support interaction. Any such data is processed only to the extent necessary to respond to your enquiry.
wso168 processes your personal data for the following purposes:
3.1 Marketing. Where you have opted in, wso168 may send promotional communications about new products, exclusive promotions, and platform updates. You may withdraw this consent at any time by adjusting your marketing preferences in the account settings menu or by contacting our support team.
Where required by applicable data protection law, wso168 relies on the following lawful bases for processing your personal data:
wso168 uses cookies and similar technologies to enhance your browsing experience, maintain session security, and gather anonymised analytics. The platform uses the fo llowing categories of cookies:
5.1 Cookie Consent. By continuing to use the wso168 platform after being presented with our cookie notice, you consent to the use of non-essential cookies as described above. You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the platform.
5.2 Third-Party Tracking. wso168 does not permit third-party advertising networks or social media platforms to place tracking cookies on the platform. Any third-party technology integrated into the platform (such as game engines from providers including Pragmatic Play, Evolution Gaming, or Spribe) operates under its own data processing agreement with the Company and is not permitted to use Member data for its own commercial purposes.
wso168 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be disclosed to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:
6.1 International Transfers. Some of our service providers are located outside Indonesia. Where your personal data is transferred internationally, the Company ensures that appropriate contractual safeguards are in place — such as standard data protection clauses — to maintain a level of protection equivalent to that required under applicable data protection law.
7.1 Active Accounts. While your wso168 Account remains active, we retain all personal data associated with your account, including your identity documents, transaction records, and betting history. This data is required to operate your account and to comply with ongoing KYC and AML obligations.
7.2 Closed Accounts. Upon closure of your account — whether at your request or following a suspension — wso168 will retain your personal data for a minimum period of five (5) years from the date of account closure. This retention period reflects our obligations under applicable anti-money laundering regulations and allows us to respond to any post-closure disputes, legal claims, or regulatory enquiries.
7.3 Marketing Data. Where you have consented to receive marketing communications, your contact data will be retained for marketing purposes until you withdraw that consent. Following withdrawal of consent, your data will be removed from active marketing lists within 30 calendar days, though records of your withdrawal of consent will be retained for compliance purposes.
7.4 Anonymisation. Following the expiry of the applicable retention period, personal data that is no longer required will either be securely deleted or irreversibly anonymised so that it can no longer be linked to any identifiable individual. Anonymised data may be retained indefinitely for aggregate analytics and platform improvement purposes.
Depending on applicable data protection law, you may have the following rights in relation to the personal data that wso168 holds about you. To exercise any of these rights, please contact our support team at the details provided in Section 12.
You may request a copy of the personal data that wso168 holds about you, along with information about how it is being used and on what legal basis.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to our legal data retention obligations described in Section 7.
You may request that we limit how we use your data in specific circumstances, for example while a rectification request is being assessed.
Where processing is based on your consent or the performance of a contract, you may request your personal data in a structured, machine-readable format.
You may object to processing based on our legitimate interests, including profiling for fraud prevention purposes, where your individual circumstances justify an override.
wso168 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will notify you in writing of the reason for the extension. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.
9.1 Technical Safeguards. wso168 implements a layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our technical measures include:
9.2 Organisational Safeguards. Access to personal data within the Company is restricted on a strict need-to-know basis. All staff with access to Member data are bound by confidentiality obligations and receive regular training on data protection best practices. KYC documents are accessible only to authorised compliance personnel.
9.3 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, wso168 will notify affected Members as promptly as practicable following discovery and confirmation of the breach. We will provide details of the nature of the breach, the categories of data affected, and the steps taken to mitigate the impact.
9.4 Your Responsibilities. While we take every reasonable step to protect your data on our end, you are equally responsible for maintaining the security of your account credentials. Do not share your password with any third party, use a strong and unique password, and log out from shared or public devices after each session.
The wso168 platform is strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will suspend the associated account, delete the data in question without delay, and, where appropriate, report the matter to the relevant authorities.
If you believe that a minor has registered an account on wso168, we urge you to contact our support team immediately so that appropriate action can be taken. Parents and guardians are encouraged to use filtering software and parental control tools to prevent minors from accessing online gambling platforms.
wso168 reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable data protection law, our business operations, or regulatory guidance. When material changes are made, we will notify registered Members via an in-platform notification or email at least seven (7) days before the revised policy takes effect.
The "Last Updated" date displayed in the page header of this document reflects the date on which the most recent revision was made. We encourage you to review this policy periodically to remain informed about how we protect your data. Your continued use of the wso168 platform following the effective date of any revision constitutes your acceptance of the updated policy.
If you have questions, concerns, or requests relating to this Privacy Policy or the way wso168 handles your personal data, please reach out to us through any of the channels below:
We will acknowledge all privacy-related enquiries within 48 hours and aim to resolve them fully within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
Six pillars that define how wso168 approaches personal data protection for every Member across Indonesia.
Your personal information is never sold, rented, or traded to third-party advertisers or data brokers. What you share with wso168 stays within wso168 and its strictly vetted service partners.
Every data transmission between your browser or app and our servers is protected with 256-bit SSL/TLS encryption — the same standard used by global financial institutions and major international banks.
Our data security infrastructure is tested regularly by accredited third-party cybersecurity firms. Audit results inform continuous improvements to our defences and data handling procedures.
We collect only the data that is genuinely necessary to deliver our services, comply with KYC and AML regulations, and keep your account secure. We do not gather data speculatively or without a clear purpose.
As a wso168 Member, you hold the rights to access, correct, restrict, port, or request deletion of your personal data at any time. Our support team will action all valid requests within 30 days.
Financial data shared with Indonesian payment providers — including BCA, BRI, BNI, Mandiri, OVO, and DANA — is transmitted under strict data processing agreements and used solely to execute your IDR transactions.
Our support team is available around the clock to address any privacy-related concern. You can also review our full Terms & Conditions or browse the FAQ for quick answers.