Privacy Policy — waw4d

This Policy governs the collection, processing, storage, and disclosure of personal data in connection with the waw4d Platform and all services offered through it — including sports betting, live casino, togel (Indonesia's traditional numbers lottery), fish shooting, and slot games.

waw4d acts as the data controller in respect of the personal data of its Members and visitors. This means that waw4d determines the purposes for which personal data is processed and the means by which that processing is carried out. Where waw4d engages third-party service providers to process personal data on its behalf, those providers act as data processors under the direction of waw4d and are contractually required to maintain standards of data protection at least equivalent to those described in this Policy.

This Policy applies to:

• Registered Members who hold an active Account on the Platform
• Former Members whose Accounts have been closed, to the extent that waw4d is required to retain their data under applicable law or its own legitimate interests
• Visitors who browse the Platform without registering, to the extent that anonymous or pseudonymous browsing data is collected via cookies and analytics tools
• Individuals who contact waw4d's support team via live chat or email without holding an Account

waw4d collects personal data across several distinct categories. The following table summarizes the types of data collected and their primary purpose:

waw4d collects personal data through the following channels:

3.1 Data You Provide Directly

When you register an Account, you submit identity and contact data directly via the registration form. During KYC verification, you upload identity documents and photographs. When you contact our support team via live chat or email at [email protected], the content of those communications is retained. When you respond to surveys or participate in promotions, any data submitted in those contexts is collected by waw4d.

3.2 Data Collected Automatically

When you visit or interact with the Platform, technical and usage data is collected automatically through server logs, session analytics, and in-platform event tracking. This includes your IP address, device identifiers, and a record of all actions taken within the Platform — including bets placed, games launched, and pages viewed. This automatic collection begins the moment you load any page of the Platform, regardless of whether you are logged in.

3.3 Data from Third-Party Sources

waw4d may receive personal data about you from trusted third-party sources in the following circumstances:

• Payment processors: Transaction confirmation data, including payer name and payment method reference, received from BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja payment infrastructure.
• Identity verification providers: Results of automated document verification or database checks conducted by certified KYC service providers on behalf of waw4d.
• Fraud and AML screening services: Risk signals and watchlist matches returned by third-party anti-fraud and anti-money-laundering screening tools.
• Game studios: Session data and round outcomes returned by certified studios such as Evolution Gaming, Pragmatic Play, Spribe, and Pocket Games Soft in connection with the games you play on the Platform.

waw4d processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes of processing and the corresponding legal bases relied upon:

Where processing is based on your consent, you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

waw4d does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below:

5.1 Service Providers (Data Processors)

waw4d engages carefully selected third-party service providers to support the operation of the Platform. These providers are permitted to process your data only as instructed by waw4d and are bound by contractual data processing agreements that require them to maintain confidentiality and implement appropriate technical safeguards. Categories of service providers include:

• Payment gateway and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja)
• KYC and identity verification providers
• Anti-fraud and AML screening platforms
• Game content studios (Evolution Gaming, Pragmatic Play, Spribe, Pocket Games Soft, NetEnt, Microgaming)
• Cloud hosting and infrastructure providers
• Customer support software providers (live chat and ticketing systems)
• Analytics and platform monitoring services (data processed in aggregated, pseudonymized form wherever possible)

5.2 Legal and Regulatory Disclosures

waw4d may disclose your personal data to competent authorities, law enforcement agencies, financial intelligence units, or courts where required to do so by applicable law, court order, or regulatory direction — including in connection with the investigation of financial crime, fraud, or the prevention of harm to any person.

5.3 Business Transfers

In the event that waw4d undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material change to the privacy terms that governs your data as a result.

5.4 No Unauthorized Third-Party Marketing

waw4d will never share your contact details (email address, mobile number) with unaffiliated third parties for the purpose of sending you unsolicited marketing communications. Any promotional communications you receive from waw4d will relate exclusively to waw4d's own products and services, and will be sent only where you have consented or where a legitimate interest exists.

waw4d retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or legitimate business needs. The following retention guidelines apply:

• Active Account data: Retained for the full duration of your membership on the Platform and for a period of five (5) years following Account closure, in order to satisfy anti-money-laundering record-keeping obligations and to respond to any post-closure disputes or regulatory inquiries.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in line with standard AML compliance requirements applicable to financial services operators.
• KYC documents and verification media: Retained for five (5) years from the date of submission or from the date of Account closure, whichever is later.
• Support communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Anonymized usage and analytics data: May be retained indefinitely in aggregated, anonymized form that cannot be used to identify any individual Member.
• Marketing consent records: Retained for the duration of your consent and for twelve (12) months following withdrawal, as evidence of lawful processing.

When personal data is no longer required for any of the purposes described above and no legal retention obligation applies, waw4d will securely delete or irreversibly anonymize the data in accordance with its internal data destruction policy.

waw4d employs a layered approach to data security, combining technical, organizational, and procedural controls to protect your personal data against unauthorized access, loss, alteration, or disclosure. Key security measures include:

• Encryption in transit: All data transmitted between your device and the waw4d Platform is protected using TLS 1.2 or higher (256-bit SSL encryption). This applies to all Platform pages, the login process, deposit and withdrawal flows, and support communications.
• Encryption at rest: Sensitive data stored in waw4d's databases — including identity information, financial records, and KYC documents — is encrypted at rest using industry-standard symmetric encryption.
• Access controls: Access to personal data within waw4d's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum permissions necessary to perform their role, and all access is logged and audited.
• Two-factor authentication (2FA): waw4d's internal systems require multi-factor authentication for all staff access. Members are also encouraged to enable 2FA on their Accounts for additional login security.
• Intrusion detection and monitoring: waw4d operates continuous network monitoring and intrusion detection systems to identify and respond to unauthorized access attempts in real time.
• Third-party audits: waw4d's security infrastructure is subject to periodic independent security audits and penetration testing. Game outcomes and RNG systems are certified by accredited third-party testing laboratories.
• Staff training: All waw4d staff who handle personal data receive mandatory training on data protection obligations, secure data handling practices, and the recognition of social engineering attacks.

waw4d uses cookies and similar tracking technologies to operate the Platform effectively, personalize your experience, and gather analytics data that helps us improve our services. A cookie is a small text file placed on your device by the Platform when you visit it.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. They enable core features such as session management, login state persistence, security token validation, and load balancing. These cookies cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your preferences — such as your preferred language, currency display (IDR), and bet type defaults — so that you do not need to reconfigure them on each visit.
• Analytics Cookies: Collect pseudonymized information about how you interact with the Platform — which pages you visit, how long you spend on them, and which features you use most frequently. This data is used to improve the Platform's design and performance.
• Security and Fraud Prevention Cookies: Help waw4d identify unusual behavior patterns that may indicate account takeover attempts, automated bot activity, or multi-accounting. These are essential to the Platform's fraud prevention infrastructure.

8.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging in and using the Platform's core features. Disabling functional cookies will result in the loss of your saved preferences. Disabling analytics cookies will not affect your ability to use the Platform but will reduce waw4d's ability to personalize your experience and improve the service over time.

For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation. Common browsers — including Chrome, Firefox, Safari, and Edge — each provide granular cookie management controls in their settings menus.

As a data subject, you hold a number of rights in relation to the personal data that waw4d holds about you. waw4d is committed to honoring these rights promptly and without undue complication. To exercise any of the rights described below, contact our support team at [email protected] or via live chat, clearly identifying yourself and the right you wish to exercise.

waw4d will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, with prior notification. waw4d will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

waw4d operates a strict 21+ only policy across all products and services. The Platform is not intended for, and does not knowingly collect personal data from, any person under the age of 21. waw4d's registration process requires users to declare their date of birth, and all Accounts are subject to mandatory age verification as part of the KYC process.

Where waw4d discovers — through its KYC processes, fraud detection systems, or any other means — that a registered Member is under the age of 21, it will immediately close the Account, void any pending bets, and return any deposited funds to the original payment method. Any personal data collected in connection with that Account will be securely deleted as promptly as applicable legal obligations permit.

Parents and guardians who are concerned that a minor may have accessed or registered on the Platform are encouraged to contact waw4d's support team immediately at [email protected]. waw4d takes such reports seriously and will investigate and act on them as a priority matter.

waw4d primarily serves Members located in Indonesia and processes the majority of personal data within secure facilities covered by its operational jurisdiction. However, given the global nature of the internet infrastructure, cloud hosting, and the international presence of certain third-party service providers (such as game studios certified in Malta, Gibraltar, or Isle of Man), some personal data may be transferred to, stored in, or processed in countries outside Indonesia.

Where such transfers occur, waw4d ensures that appropriate safeguards are in place to protect the transferred data to a standard at least equivalent to that described in this Policy. These safeguards may include:

• Contractual clauses that bind the recipient to obligations equivalent to those imposed on waw4d under applicable data protection frameworks
• Certification of the recipient under a recognized international data protection standard or scheme
• Transfer to jurisdictions that have been assessed as providing an adequate level of data protection by relevant authorities

You may request details of the specific safeguards applied to any particular international transfer by contacting our support team at [email protected].

waw4d reserves the right to update, revise, or replace this Privacy Policy at any time in response to changes in applicable law, evolving best practices, new features on the Platform, or changes in our data processing activities. The date of the most recent revision is displayed prominently at the top of this page.

When material changes are made to this Policy — particularly where those changes affect the legal basis for processing, introduce new categories of data collection, or alter the rights available to Members — waw4d will notify registered Members by email to their registered address and/or by displaying a conspicuous notice on the Platform prior to the changes taking effect. The notice period will be at least 14 days for material changes, unless a shorter period is required by applicable law.

Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised terms, you must discontinue use of the Platform and contact support to arrange Account closure.

If you have any questions, concerns, or requests in connection with this Privacy Policy — including requests to exercise your data rights — please contact our Data Protection team using the following details:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the Platform. Click the live chat icon visible on any page after logging in for the fastest response.
• Email: [email protected] — please include "Privacy Request" or "Data Rights Request" in the subject line to ensure your message is routed to the correct team.
• Response Time: Live chat inquiries are typically answered within 2 minutes. Privacy and data rights email requests are acknowledged within 24 hours and fully resolved within 30 days (WIB, UTC+7).
• Language: Our support team includes native Indonesian-speaking agents available around the clock, in addition to English-language support.

For formal privacy complaints, please clearly state "Formal Privacy Complaint" in your initial message, provide your registered username and Account email address, and describe the concern in as much detail as possible. waw4d takes all privacy complaints seriously and will investigate each one thoroughly.