idw88 Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "idw88" refers to the idw88 platform, its owners, operators, affiliates, employees, agents, and licensors operating the website at https://idw88.bet.
• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data held by idw88.
• "Account" means the registered user account created on the idw88 platform.
• "User" / "You" means any individual who accesses, browses, registers on, or uses the idw88 platform in any capacity.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Third Party" means any individual or entity other than the User and idw88.
• "KYC" means Know Your Customer — the identity verification process required before withdrawal processing.
• "Cookies" means small text files placed on your device by idw88's website to facilitate platform functionality and analytics.
• "Data Controller" means idw88 in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Retention Period" means the duration for which idw88 stores a given category of Personal Data, as specified in the Data Retention section of this policy.

This Privacy Policy applies to all Personal Data collected by idw88 in connection with the operation of the idw88 platform at https://idw88.bet, including the website, mobile site, and any associated applications or services made available to users.

This policy applies to all users who access or use the idw88 platform, including visitors who browse without registering, prospective users who begin but do not complete the registration process, and fully registered account holders. It applies regardless of the device or browser used to access the platform.

This policy does not apply to third-party websites, applications, or services that may be linked to or from the idw88 platform. idw88 is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external site you visit.

idw88 collects the following categories of Personal Data from users, depending on how they interact with the platform:

idw88 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is necessary for identity verification purposes. If any such data is incidentally disclosed during a support interaction, it will not be processed for any purpose other than resolving the immediate query.

idw88 collects Personal Data through the following methods:

• Direct Collection: Data you provide voluntarily when registering an account, completing the KYC verification process, making a deposit or withdrawal, contacting the support team, or responding to a promotional offer.
• Automated Technical Collection: Data collected automatically when you access the platform, including your IP address, device identifiers, browser characteristics, and session activity logs, collected via server logs, cookies, and similar technologies.
• Payment Processors: Confirmation data received from payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when a transaction is initiated or completed.
• KYC Verification Partners: Identity verification data returned by third-party KYC service providers engaged by idw88 to validate identity documents and cross-reference watchlists.
• Fraud Prevention Services: Risk signals and device fingerprint data from fraud detection partners, used solely to protect the integrity of the platform and prevent unauthorized access or financial crime.

idw88 processes your Personal Data for the following purposes:

• Account Management: Creating and maintaining your account, verifying your identity and age (21+ requirement), and enabling you to log in securely and manage your profile settings.
• Service Delivery: Processing deposits and withdrawals through your chosen Indonesian bank or e-wallet channel, settling bets and gaming rounds, applying bonuses and promotions to your account, and providing customer support.
• Legal Compliance: Satisfying our anti-money-laundering (AML) obligations, conducting KYC checks, maintaining transaction records as required under applicable regulations, and responding to lawful requests from regulatory or law enforcement authorities.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorized account access, collusion, bonus abuse, and other Prohibited Activities as defined in our Terms & Conditions. Monitoring for suspicious transaction patterns consistent with money laundering or terrorist financing.
• Platform Improvement: Analyzing aggregated, anonymized usage data to understand how users interact with the platform, identify technical issues, and prioritize improvements to the user experience across all product verticals — sportsbook, live casino, slots, and poker tournaments.
• Marketing Communications (Opt-In Only): Sending promotional emails, SMS messages, or in-platform notifications about new games, deposit bonuses, seasonal promotions (including Idul Fitri, Ramadhan, and Indonesian Independence Day offers), and other marketing content — but only to users who have explicitly opted in to receive such communications.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling and proactively offering responsible gaming tools, deposit limits, or self-exclusion where appropriate. For more detail, see our Responsible Gaming page.

idw88 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose:

• Contractual Necessity: Processing required to perform the contract between you and idw88 under the Terms & Conditions — including account creation, transaction processing, and dispute resolution.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out in pursuit of idw88's legitimate business interests — including fraud detection, platform security, and aggregate analytics — provided these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain non-essential cookies, where your explicit consent has been obtained and may be withdrawn at any time without affecting the lawfulness of prior processing.

idw88 does not sell your Personal Data to third parties. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors & Banking Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services receive the identity documents and personal data you submit during the KYC process for the sole purpose of verifying your identity and cross-referencing regulatory watchlists.
• Game Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a pseudonymous player identifier and bet data to facilitate game delivery and fair-play auditing. These providers do not receive your full identity data.
• Fraud Prevention & Security Vendors: Specialized fraud detection partners receive device and behavioral signals — not full identity data — to help idw88 identify suspicious activity.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, idw88 will disclose Personal Data to the relevant authority. idw88 will, where legally permitted, notify you of such a disclosure request before complying.
• Professional Advisers: Lawyers, auditors, and accountants engaged by idw88 may have access to Personal Data on a confidential, need-to-know basis in the course of providing their professional services.

All third-party service providers engaged by idw88 are bound by contractual data processing agreements that prohibit them from using your Personal Data for any purpose other than the specific service they provide to idw88.

idw88 uses cookies and similar technologies (including local storage and session tokens) on the platform. The cookies we deploy fall into the following categories:

idw88 does not use advertising or retargeting cookies. You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will impair or prevent access to the platform. For other cookie types, disabling them may reduce the quality of your experience but will not prevent access to core features.

idw88 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account Data & Identity Documents: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with international AML best practice and the record-keeping requirements of idw88's licensing authority.
• Transaction Records: Deposit and withdrawal records, bet history, and bonus activity logs are retained for a minimum of 5 years from the date of the transaction, to support AML compliance, regulatory audits, and dispute resolution.
• KYC Verification Documents: Retained for the duration of your account and for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for up to 3 years from the date of the interaction, to support quality assurance and dispute resolution.
• Technical & Usage Data: Server logs and aggregated analytics data are retained for up to 24 months, after which they are deleted or irreversibly anonymized.
• Marketing Consent Records: Records of your opt-in consent for marketing communications are retained for the duration of your account plus 2 years after account closure, to demonstrate compliance with consent requirements.

When a Retention Period expires, idw88 will securely delete or irreversibly anonymize the relevant Personal Data. Where deletion is not immediately technically practicable (e.g., data in backup systems), the data will be isolated from active processing and deleted at the next scheduled backup cycle.

idw88 implements a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and idw88's servers is encrypted using TLS 1.2 or higher (256-bit SSL). HTTPS is enforced across all pages of the platform.
• Encryption at Rest: Sensitive fields within idw88's databases — including identity document data and financial account references — are encrypted at rest using AES-256 encryption.
• Password Security: Passwords are stored as salted, one-way cryptographic hashes (bcrypt). idw88 staff do not have access to plaintext passwords and will never request your password via any channel.
• Access Controls: Access to systems containing Personal Data is restricted to authorized personnel on a strict need-to-know basis. All internal access is authenticated, logged, and subject to regular audit review.
• Infrastructure Security: idw88's servers are hosted in enterprise-grade data centers with physical security controls, redundant power supplies, and regular penetration testing by independent security assessors.
• Incident Response: idw88 maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a material risk to affected users, idw88 will notify impacted account holders without undue delay.

As an internationally operated platform serving Indonesian players, some of the Personal Data that idw88 processes may be transferred to and stored in countries outside Indonesia. This may occur, for example, when idw88 uses a game software provider, KYC verification service, or infrastructure partner whose servers are located in a different jurisdiction.

Where such transfers take place, idw88 ensures that appropriate safeguards are in place to protect your Personal Data to a standard at least equivalent to the protections described in this policy. These safeguards include contractual data processing agreements incorporating internationally recognized data transfer clauses and, where applicable, reliance on an adequacy determination or equivalent framework.

By registering an account on idw88 and accepting the Terms & Conditions and this Privacy Policy, you acknowledge and consent to your Personal Data being transferred to and processed in countries outside Indonesia as described above.

As a user of the idw88 platform, you have the following rights with respect to your Personal Data, subject to applicable law and idw88's legal retention obligations:

• Right of Access: You may request a copy of the Personal Data idw88 holds about you. idw88 will provide this within a reasonable timeframe following identity verification.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held in your account. Some data fields can be updated directly within your account settings; others require a formal support request.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to idw88's legal obligations to retain certain records (see Data Retention, Clause 9). Deletion requests from accounts with open regulatory investigations, pending withdrawals, or active AML holds will be assessed on a case-by-case basis.
• Right to Restrict Processing: You may request that idw88 restricts the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your Personal Data for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to withdrawal.
• Right to Object: You may object to processing based on idw88's legitimate interests, including profiling for fraud prevention. idw88 will assess your objection and cease processing unless compelling legitimate grounds override your objection.

To exercise any of the above rights, please contact the idw88 support team via live chat or by email at [email protected] (plain text — not a clickable link). idw88 may require you to verify your identity before processing any data rights request. We aim to respond to all requests within 30 days; where a request is complex or numerous, this period may be extended by a further 30 days with prior notice.

idw88 strictly enforces a minimum age requirement of 21 years to register an account and use any idw88 service. The platform is not intended for, and does not knowingly collect Personal Data from, individuals under the age of 21.

If idw88 becomes aware that Personal Data has been collected from a person under the age of 21, the account will be immediately suspended, all funds will be frozen pending investigation, and the Personal Data will be securely deleted in accordance with applicable legal requirements. Any winnings generated on an underage account will be forfeited.

Parents and guardians who believe a minor in their care has registered an idw88 account should contact the support team immediately via live chat so that appropriate action can be taken without delay.

The idw88 platform does not include links to third-party websites or external services beyond those necessary for the integrated operation of the platform (e.g., game software delivery). Where any third-party content is integrated into the platform (such as game software from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), those providers' own privacy policies govern the processing of any data they collect directly through their software.

idw88 is not responsible for the content, privacy practices, or data security of any third-party provider. We recommend that you review the privacy policies of any game software provider whose games you play through the idw88 platform if you have concerns about their data practices.

idw88 reserves the right to update or amend this Privacy Policy at any time. Material changes — such as new categories of data being collected, new sharing arrangements with third parties, or changes to retention periods — will be communicated to registered account holders via email or in-platform notification at least 7 days before the change takes effect.

Non-material changes, such as typographical corrections or clarifications that do not alter your rights or idw88's data practices, may be made without prior notice and will be effective immediately upon publication on this page.

The current version of this Privacy Policy, including the "Last Updated" date shown at the top of the page, is always available at https://idw88.bet/privacy-policy. Your continued use of the idw88 platform after any amendment constitutes your acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Clause 12, or wish to raise a concern about how idw88 handles your Personal Data, please contact the idw88 support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the idw88 platform. This is the fastest channel for account-specific queries and urgent data concerns. Indonesian-speaking agents are available at all times.
• Email: [email protected] (plain text — not a clickable link). Please allow up to 24 hours for a response during peak periods, and up to 30 days for formal data rights requests as described in Clause 12.

When submitting a data rights request by email, please include your registered account username, the email address associated with your account, and a clear description of the right you wish to exercise. idw88 will verify your identity before processing any request that involves the disclosure, correction, or deletion of Personal Data.