Privacy Policy — wso38

Introduction & Scope

wso38 ("we", "us", "the Platform") operates an online betting and casino service primarily directed at residents of Indonesia who are at least 21 years of age. As part of delivering this service, we necessarily collect and process certain personal data relating to our members ("you", "the Member"). This Privacy Policy describes our data processing practices in full.

This policy applies to all personal data collected through:

• The wso38 website at https://wso38.cam and all subdomains.
• Account registration and management processes.
• Deposit and withdrawal transactions.
• Identity verification and KYC procedures.
• Customer support communications via live chat, email, and other channels.
• Cookies, analytics tools, and similar technologies deployed on the Platform.

This policy does not apply to third-party websites or services that may be referenced from the Platform. wso38 has no control over, and accepts no responsibility for, the privacy practices of such third parties.

Data We Collect

wso38 collects personal data across the following categories. We apply strict data minimization principles — we collect only what is genuinely required for the purposes described in Section 4.

wso38 does not intentionally collect special category data (as defined under international privacy frameworks) such as health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data for identification purposes, except where a liveness check photograph is required during KYC — and in that case the photograph is processed solely for identity verification and is not stored beyond the KYC review period.

How Data Is Collected

Personal data is collected through the following means:

Purposes of Processing

wso38 processes personal data for the following clearly defined purposes. We do not use personal data for any purpose not listed here without first updating this policy and, where required, obtaining fresh consent.

• Account Registration and Management: Creating and maintaining your wso38 account, authenticating your identity at login, and communicating platform-related updates.
• Payment Processing: Executing deposits and withdrawals in IDR through your registered bank or e-wallet, reconciling transactions, and maintaining financial records.
• Identity Verification (KYC): Confirming your identity, age, and residency to comply with anti-money laundering obligations and to enforce the 21+ age restriction.
• Fraud Prevention and Platform Security: Detecting and investigating suspicious account activity, unauthorized access attempts, bonus abuse, and other forms of fraudulent conduct.
• Responsible Gaming: Monitoring account behavior to identify potential problem gambling patterns and to apply any self-imposed limits, time-outs, or self-exclusions the Member has activated.
• Customer Support: Responding to your inquiries, processing complaints, and maintaining records of support interactions for quality assurance purposes.
• Platform Improvement: Analyzing aggregated usage data to optimize platform performance, game selection, payment flows, and user experience.
• Legal Compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.
• Marketing Communications: Sending promotional offers, bonus notifications, and event updates to Members who have opted in. You may opt out at any time.

Legal Basis for Processing

wso38 relies on the following legal bases when processing your personal data:

Data Sharing & Disclosure

wso38 does not sell personal data. We share personal data with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:

Cookies & Tracking Technologies

wso38 uses cookies and similar technologies to deliver core platform functionality, maintain session security, and analyze platform usage. The following cookie categories are employed:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without disabling core Platform functionality.
• Functional Cookies: Remember your preferences — such as your language or display settings — to provide a more personalized experience. These are enabled by default but may be disabled without affecting core functionality.
• Analytics Cookies: Collect aggregated, anonymized data about how members interact with the Platform — page visits, session duration, game launch rates — enabling us to improve the service. These require your consent.
• Security Cookies: Assist in fraud detection by tracking session behavior and flagging anomalies such as account access from unrecognized devices or unusual geographic locations.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the Platform.

Data Retention

wso38 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where anonymization is not technically feasible, data is archived with access controls restricting its use to legal compliance purposes only.

Security Measures

wso38 applies a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• Transport Security: All data in transit is protected by TLS 1.2 or higher with 256-bit AES encryption, enforced on every page of the Platform without exception.
• Data at Rest: Sensitive personal data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Strict role-based access controls ensure that personal data is accessible only to wso38 personnel with a documented legitimate need. Access logs are maintained and reviewed regularly.
• Penetration Testing: The Platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses proactively.
• Incident Response: wso38 maintains a documented data breach response plan. In the event of a breach affecting Members' personal data, affected Members will be notified within a reasonable timeframe alongside any required regulatory notifications.
• Staff Training: All wso38 personnel who handle personal data receive regular data protection training covering both technical security practices and applicable privacy obligations.

While wso38 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials.

Minors & Age Restriction

The wso38 Platform is strictly prohibited to individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age. If we become aware that personal data belonging to a minor has been collected on our Platform, we will take immediate steps to delete that data and close the associated account.

Age verification is a mandatory step in the KYC process for all Members. Any Member who submits false documentation to misrepresent their age will have their account permanently closed and all associated winnings forfeited.

International Data Transfers

wso38 operates infrastructure and engages service providers in multiple jurisdictions. As a result, personal data collected from Indonesian Members may be processed or stored in locations outside Indonesia. Where such transfers occur, wso38 ensures they are conducted under appropriate safeguards, which may include:

• Standard contractual clauses incorporating data protection obligations equivalent to those in this policy.
• Processing agreements with third-party providers that meet internationally recognized data protection standards.
• Transfers to jurisdictions that provide an adequate level of data protection as recognized by relevant authorities.

You may request further information about specific international transfer mechanisms by contacting us at the details in Section 14.

Exercising Your Rights

To exercise any of the data rights described in this policy, please submit a written request to the wso38 Data Protection team. We will acknowledge your request within two business days and provide a substantive response within five business days. Complex requests may require up to 30 days; we will notify you if an extension is necessary.

wso38 will not charge a fee for processing a data rights request unless the request is manifestly unfounded, repetitive, or excessive — in which case we will notify you of any applicable fee before proceeding.

Policy Amendments

wso38 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. Material changes — those that significantly affect your rights or how we handle your data — will be communicated to active Members by email at least seven days before taking effect.

The current version of this policy is always available at https://wso38.cam/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following an amendment constitutes acceptance of the updated policy.

Contact & Data Protection Officer

For any questions, concerns, or formal requests relating to this Privacy Policy or wso38's data processing practices, please contact our Data Protection team using the following details. All privacy-related communications should be submitted in writing via email.

If you are not satisfied with our response to a privacy-related concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.