Privacy Policy

we368 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect the personal data of Indonesian players who use our online betting platform. By creating an account and using we368 services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

This Privacy Policy applies to all information collected through the we368 website, mobile applications, and related services. It should be read in conjunction with our Terms & Conditions, which govern your use of our platform.

1. Introduction and Scope

we368 operates as an online betting platform serving Indonesian players with sports betting, live casino games, slot machines, and lottery products. As a data controller, we368 determines the purposes and means of processing your personal information. We are committed to transparency about our data practices and compliance with international data protection standards.

This Privacy Policy covers all personal information we collect from you directly, through your use of our services, from third parties such as payment processors and identity verification providers, and through automated technologies including cookies and similar tracking tools.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a we368 account, you provide personal information including:

• Identity Information: Full legal name, date of birth, gender, Indonesian national ID card (KTP) number, and copies of identity documents submitted for KYC verification.
• Contact Information: Email address, telephone number, and residential address in Indonesia.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers.
• Financial Information: Bank account details (bank name, account holder name, account number) for deposits and withdrawals, e-wallet account identifiers, transaction history, and payment method preferences.
• Communication Content: Content of your communications with we368 customer support via live chat, email, WhatsApp, or other channels, including queries, complaints, feedback, and support tickets.
• Verification Documents: Photographs and scans of government-issued ID cards, proof of address documents (utility bills, bank statements), selfie photos holding ID cards, and any additional documentation requested for enhanced verification.

2.2 Information Collected Automatically

When you access and use the we368 platform, we automatically collect:

• Device Information: Device type, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID), and hardware model.
• Usage Data: Pages visited, features used, time spent on pages, navigation paths, links clicked, games played, bets placed, search queries, and interaction patterns with the platform.
• Location Data: IP address, approximate geographic location based on IP address, and time zone settings. We use location data to verify compliance with geographic restrictions and detect suspicious activity.
• Transaction Data: Complete records of all deposits, withdrawals, bets placed, bet outcomes, bonus claims, wagering activity, account balance changes, and payment method usage.
• Technical Data: Connection type, internet service provider, server logs, error reports, crash data, and performance metrics.

2.3 Information from Third-Party Sources

We may receive information about you from third-party service providers:

• Payment Processors: BCA, BRI, BNI, Mandiri, and other Indonesian banks, plus e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) provide transaction confirmation data and may share fraud prevention information.
• Identity Verification Services: Third-party KYC verification providers confirm identity document authenticity, detect fraudulent documents, and provide verification status reports.
• Fraud Prevention Services: Services that screen for suspicious activity patterns, flag accounts associated with fraud, and provide risk scoring.
• Affiliate Partners: If you accessed we368 through an affiliate link or referral, we receive information about the referral source but not your personal information from the affiliate.

3. How We Use Your Information

3.1 Core Service Provision

we368 uses your personal information to:

• Create and manage your betting account
• Process your deposits and withdrawals through Indonesian banks and e-wallets
• Enable you to place bets on sports events, play casino games, and participate in lottery draws
• Calculate and credit winnings to your account balance
• Maintain accurate records of your betting activity and transaction history
• Provide customer support and respond to your inquiries
• Communicate important service announcements, security alerts, and policy updates

3.2 Verification and Security

Your information is used to:

• Verify your identity and age (21+ requirement) through KYC procedures
• Prevent underage gambling, fraud, money laundering, and identity theft
• Detect and investigate suspicious account activity or betting patterns
• Enforce our Terms & Conditions and prevent prohibited activities
• Comply with anti-money laundering regulations and reporting obligations
• Prevent multiple account abuse and bonus exploitation
• Protect we368 systems from unauthorized access, cyberattacks, and technical threats

3.3 Personalization and Improvement

We use your data to:

• Personalize your betting experience based on your preferences and activity patterns
• Recommend games and betting markets that may interest you
• Calculate and award VIP tier benefits based on your wagering volume
• Analyze platform usage to identify bugs, improve performance, and enhance user experience
• Develop new features and services tailored to Indonesian player preferences
• Conduct market research and understand betting trends

3.4 Marketing and Promotions

With your consent, we may use your information to:

• Send promotional emails about bonuses, special offers, and new game releases
• Provide personalized bonus offers based on your betting preferences
• Notify you about tournaments, competitions, and special events
• Deliver targeted promotions relevant to Indonesian cultural events (Indonesian Independence Day, Idul Fitri, etc.)

You can opt out of marketing communications at any time through your account settings or by clicking the unsubscribe link in promotional emails. Opting out does not affect essential service communications such as security alerts, transaction confirmations, and policy updates.

3.5 Legal Compliance

we368 processes your information to:

• Comply with legal obligations under Indonesian and international law
• Respond to lawful requests from government authorities, courts, and regulators
• Investigate potential criminal activity and cooperate with law enforcement
• Resolve disputes, enforce our agreements, and defend legal claims
• Maintain records required by gaming regulations and anti-money laundering laws

4. Legal Basis for Processing

we368 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing necessary to fulfill our contract with you (providing betting services, processing transactions, managing your account) under our Terms & Conditions.
• Legal Obligation: Processing required to comply with legal and regulatory obligations including age verification, anti-money laundering requirements, and tax reporting.
• Legitimate Interests: Processing necessary for our legitimate business interests including fraud prevention, security, platform improvement, and customer support, balanced against your privacy rights.
• Consent: Processing based on your explicit consent, particularly for marketing communications and optional data collection, which you can withdraw at any time.

5. Information Sharing and Disclosure

5.1 Service Providers and Business Partners

we368 shares your information with trusted third-party service providers who assist in operating our platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction information necessary to process deposits and withdrawals.
• Game Providers: Licensed casino game and slot providers receive gameplay data to deliver game content, calculate outcomes, and track progressive jackpots.
• Identity Verification Services: KYC verification providers receive copies of your identity documents to verify authenticity and prevent fraud.
• Customer Support Tools: Live chat and helpdesk platforms store support conversations and ticket histories.
• Cloud Infrastructure Providers: Hosting services store and process data on our behalf with strict confidentiality and security obligations.
• Analytics Providers: Services that help us understand platform usage, identify technical issues, and improve performance.

All third-party service providers are contractually bound to protect your information, use it only for specified purposes, and comply with applicable data protection standards.

5.2 Legal and Regulatory Disclosure

we368 may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal processes, court orders, government requests, or regulatory investigations
• Enforce our Terms & Conditions and other agreements
• Investigate and prevent fraud, security threats, or illegal activity
• Protect the rights, property, and safety of we368, our users, and the public
• Report suspicious transactions to financial intelligence units as required by anti-money laundering laws

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent website notice before your information is transferred and becomes subject to a different privacy policy.

5.4 What We Never Share

we368 never sells your personal information to third parties for marketing purposes. We do not share your information with advertisers or data brokers. Your betting activity, financial records, and personal details remain confidential except as explicitly described in this Privacy Policy.

6. Data Security Measures

6.1 Technical Security Controls

we368 employs comprehensive security measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive information including passwords and financial data is encrypted at rest using industry-standard encryption algorithms.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical access controls, 24/7 monitoring, redundant power supplies, and disaster recovery systems.
• Network Security: Firewalls, intrusion detection systems, and DDoS protection defend against cyberattacks and unauthorized access attempts.
• Access Controls: Strict role-based access controls limit employee access to personal information based on job responsibilities. All access is logged and regularly audited.
• Secure Development: Our development team follows secure coding practices, conducts regular security testing, and promptly patches vulnerabilities.

6.2 Organizational Security Measures

• Employee Training: All staff receive mandatory data protection and security training, including confidentiality obligations and incident response procedures.
• Background Checks: Employees with access to sensitive information undergo background verification.
• Confidentiality Agreements: All employees, contractors, and service providers sign confidentiality agreements prohibiting unauthorized disclosure of personal information.
• Incident Response: We maintain documented procedures for detecting, responding to, and recovering from data breaches and security incidents.
• Regular Audits: Internal and external security audits assess our controls and identify improvement opportunities.

6.3 Account Security Best Practices

You play a vital role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if available
• Log out after each session, especially on shared devices
• Keep your email account secure as it's used for account recovery
• Avoid accessing your account over public Wi-Fi networks
• Be cautious of phishing emails pretending to be from we368
• Immediately report any suspicious account activity to customer support

7. Data Retention and Deletion

7.1 Retention Periods

we368 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:

• Active Account Data: Information is retained throughout your account lifetime and for a period after account closure to resolve disputes, prevent fraud, and comply with legal retention requirements.
• Transaction Records: Betting history, deposits, and withdrawals are retained for at least 5 years after the transaction date to comply with financial record-keeping regulations.
• Identity Verification Documents: KYC documents are retained for at least 5 years after account closure to meet anti-money laundering requirements.
• Communication Records: Customer support conversations may be retained for up to 3 years for quality assurance and dispute resolution.
• Marketing Data: If you opt out of marketing communications, your contact information is retained in our suppression list to ensure we don't contact you again.

7.2 Data Deletion

After applicable retention periods expire, we368 securely deletes or anonymizes your personal information. Deletion methods include:

• Secure overwriting of data on storage media
• Physical destruction of hardware containing sensitive data
• Anonymization rendering information no longer personally identifiable

Some information may be retained in anonymized form for statistical analysis and platform improvement without identifying you personally.

8. Your Privacy Rights

As a we368 user, you have the following rights regarding your personal information:

8.1 Right to Access

You can request a copy of the personal information we hold about you. This includes your account details, betting history, transaction records, and communications. Requests are fulfilled within 30 days.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you can update it through your account settings or contact customer support to request corrections.

8.3 Right to Erasure

You can request deletion of your personal information in certain circumstances, subject to our legal retention obligations. Note that we must retain some information for regulatory compliance even after account closure.

8.4 Right to Restrict Processing

You can request that we limit how we use your information in specific situations, such as while disputing data accuracy or contesting the lawfulness of processing.

8.5 Right to Data Portability

You can request a machine-readable copy of your personal information to transfer to another service provider.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

8.7 Right to Withdraw Consent

Where processing is based on consent (such as marketing communications), you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

8.8 Exercising Your Rights

To exercise any of these rights, contact our customer support team at [email protected] with your account details and specific request. We will verify your identity before fulfilling requests and respond within 30 days.

9. Cookies and Tracking Technologies

we368 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content:

9.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including login, session management, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous usage data to understand how visitors interact with our platform and identify technical issues.
• Functionality Cookies: Remember your preferences such as language settings, favorite games, and display options.
• Analytics Cookies: Help us measure traffic, understand user behavior, and improve our services.

9.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may limit platform functionality. Most browsers allow you to refuse cookies, delete existing cookies, or receive notification before cookies are stored.

10. International Data Transfers

we368 primarily operates within Indonesia to serve Indonesian players. However, some of our service providers and infrastructure may be located outside Indonesia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place through:

• Standard contractual clauses approved for international data transfers
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for transfers within our corporate group
• Your explicit consent for specific transfers where required

11. Children's Privacy

we368 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors. Our age verification procedures are designed to prevent underage access. If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information and permanently close the account. Parents or guardians who believe a minor has accessed our platform should contact us immediately at [email protected].

12. Changes to This Policy

we368 may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated via:

• Email notification to your registered email address
• Prominent notice on our website before changes take effect
• Updated "Last Modified" date at the top of this policy

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. Continued use of we368 services after changes take effect constitutes acceptance of the updated policy.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: