Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data collected, processed, and stored by wso33 (referred to herein as "the Company", "we", "us", or "our") in connection with the operation of the online gaming platform accessible at wso33.cam. It governs data collected from registered Players, visitors to the Platform who have not yet registered, and individuals who contact wso33 through any support or communication channel.

wso33 operates as a data controller with respect to the personal data of its Players. We process personal data in accordance with internationally recognized data protection principles, including lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity, and accountability.

This Privacy Policy should be read alongside our Terms & Conditions, which form the principal agreement between wso33 and each registered Player. Capitalized terms used but not defined in this Policy carry the meanings given to them in the Terms & Conditions.

2. Definitions

• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, wso33.
• "Data Processor" means a third party that processes personal data on behalf of wso33 under a contractual agreement (e.g., payment service providers, KYC verification partners).
• "Data Subject" means the identified or identifiable individual to whom personal data relates — in this context, you, the Player or visitor.
• "Personal Data" means any information that directly identifies or can be used to identify a natural person, including name, email address, date of birth, phone number, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Sensitive Data" means personal data that warrants higher protection due to its nature, including identity document numbers, financial account details, and data relating to health or well-being (e.g., responsible gaming declarations).
• "Platform" means the wso33 website at wso33.cam and all associated services.

3. Data We Collect

wso33 collects the following categories of personal data from Players and Platform visitors:

3.1 Registration Data

When you create a wso33 Account, we collect:

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and verify player eligibility, we collect:

3.3 Financial Data

To process deposits and withdrawals via Indonesian payment channels, we collect:

3.4 Gaming Activity Data

3.5 Technical & Device Data

3.6 Communications Data

4. How We Collect Your Data

wso33 collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a survey or promotion.
• Automatically — when you access and browse the Platform, we collect technical and device data through server logs, session tracking, and cookies (see Section 9).
• From third-party verification partners — when we use external KYC/AML service providers to cross-reference identity documents against fraud and sanctions databases.
• From payment service providers — when Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) or e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) confirm the status of a transaction, limited transaction-status data is shared with us.
• From game content providers — game studios such as Pragmatic Play, Evolution Gaming, and Spribe may provide us with game-session outcome data for the purpose of account crediting and dispute resolution.

5. Legal Basis for Processing

wso33 processes your personal data on the following legal grounds:

6. How We Use Your Data

wso33 processes personal data for the following specific purposes:

• Account management: To create, maintain, and administer your Player Account, authenticate your identity each time you log in, and maintain a complete and accurate record of your profile information.
• Transaction processing: To execute deposits and withdrawals via Indonesian banks and e-wallets, reconcile payment confirmations, and maintain a complete audit trail of financial transactions for accounting and compliance purposes.
• Identity verification (KYC): To confirm you are at least 21 years of age, verify your identity against your registered details, screen against fraud and sanctions lists, and satisfy anti-money-laundering (AML) regulatory requirements.
• Game delivery: To provide access to sports betting, live casino, slot games, and togel draws; calculate winnings; credit your account; and resolve disputes regarding game outcomes.
• Bonus administration: To apply promotional bonuses to eligible accounts, track wagering progress, enforce bonus terms, and prevent bonus abuse.
• Customer support: To respond to inquiries, troubleshoot technical issues, escalate and investigate complaints, and maintain records of all support interactions for quality assurance and training purposes.
• Security and fraud prevention: To detect and prevent fraudulent transactions, multiple account registrations, collusion, match-fixing, and other prohibited conduct; to monitor betting patterns for irregularities; and to protect the integrity of the Platform.
• Responsible gaming: To enforce deposit limits, session time limits, and self-exclusion requests; to identify patterns of behavior consistent with problem gambling; and to deliver proactive interventions where appropriate.
• Marketing and communications: To send promotional offers, game updates, and platform announcements to Players who have opted in to marketing communications. You may unsubscribe at any time via the link in any promotional email or by contacting customer support.
• Legal compliance: To fulfill obligations under applicable gaming regulations, AML/CTF frameworks, tax reporting rules, and licensing conditions; and to respond to valid legal requests from authorities.
• Analytics and improvement: To analyze aggregated usage data (how Players interact with the Platform, which games are most popular, peak usage times) in order to optimize performance, improve user experience, and inform product development decisions.

7. Data Sharing & Disclosure

wso33 does not sell, rent, or trade your personal data to unaffiliated third parties for their marketing purposes. We share personal data only in the following limited circumstances:

7.1 Essential Service Providers

We share data with trusted third-party processors who provide essential services on our behalf:

• Payment processors — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive your account name and transaction amount solely to execute deposits and withdrawals.
• KYC verification partners — Third-party identity verification services receive copies of your identity documents to validate authenticity and screen against fraud databases. These partners operate under strict data protection agreements.
• Game content providers — Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive limited session data (account identifier, bet amount, game round ID) to deliver gameplay and settle outcomes. They do not receive personally identifiable contact information.
• Cloud infrastructure providers — wso33 uses secure cloud hosting services to store encrypted data backups. These providers have no access to unencrypted personal data and act solely as data processors.

7.2 Legal Obligations

We may disclose personal data where required by law, court order, or regulatory directive, including:

• Responding to lawful requests from Indonesian law enforcement or regulatory authorities;
• Complying with anti-money-laundering (AML) reporting obligations, including filing Suspicious Activity Reports (SARs) where appropriate;
• Defending legal claims or enforcing our Terms & Conditions in formal dispute resolution proceedings;
• Protecting the safety, rights, or property of wso33, our Players, or the public where we have a good-faith belief that disclosure is necessary.

7.3 Business Transfers

In the event that wso33 undergoes a merger, acquisition, asset sale, or insolvency proceeding, personal data may be transferred to the acquiring entity or administrator as part of the business assets. We will notify affected Players via email prior to any such transfer and provide information on how to exercise data subject rights under the new data controller.

8. Data Retention

wso33 retains personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. Specific retention periods are as follows:

• Active account data: Retained for the duration of your active account plus 7 years from the date of account closure to satisfy financial audit and AML compliance requirements.
• Transaction records: Retained for a minimum of 7 years from the transaction date as required by Indonesian financial regulations and international AML standards.
• KYC documents: Retained for 7 years from the date of collection or account closure, whichever is later, to satisfy regulatory audit requirements.
• Customer support communications: Retained for 3 years from the date of the last interaction for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your consent plus 2 years to demonstrate compliance with data protection obligations.
• Technical logs (IP addresses, session data): Retained for 180 days for security monitoring and fraud detection purposes, then automatically purged unless required as evidence in an active investigation.
• Self-exclusion records: Retained permanently to prevent re-registration during exclusion periods and to comply with responsible gaming obligations.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymized such that it can no longer identify an individual.

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They enable the website to remember your actions and preferences (such as login credentials, language selection, and display settings) and recognize you on return visits.

9.2 How wso33 Uses Cookies

wso33 uses the following categories of cookies:

• Essential cookies: Required for core Platform functionality, including session authentication, account login persistence, and transaction security. These cannot be disabled without breaking critical features.
• Performance cookies: Collect aggregated data on how Players use the Platform (pages visited, time on site, navigation paths) to identify performance bottlenecks and optimize user experience. These cookies do not identify you personally.
• Functional cookies: Remember your preferences such as language selection, currency display, and odds format. Disabling these cookies will require you to re-enter preferences on each visit.
• Analytical cookies: Used to understand Player behavior in aggregate (which games are most popular, peak traffic times, device types) to inform product development decisions.

9.3 Managing Cookies

You can manage or delete cookies through your browser settings. Most browsers allow you to block all cookies, accept only first-party cookies, or receive a notification before a cookie is stored. Note that blocking essential cookies will prevent you from logging into your Account or placing bets. Instructions for managing cookies in common browsers:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data

10. Data Security

wso33 employs industry-standard technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL encryption: All data transmitted between your device and wso33 servers is encrypted using TLS 1.3 (Transport Layer Security) protocols, the same encryption standard used by banks.
• Encrypted data storage: All personal data and financial records are stored in encrypted databases. Sensitive fields (passwords, identity document numbers) are additionally hashed using bcrypt or equivalent one-way cryptographic functions.
• Access controls: Personal data is accessible only to authorized wso33 personnel who require it to perform their job functions. All access is logged and audited. Multi-factor authentication (MFA) is required for all staff accounts with access to production systems.
• Regular security audits: wso33 undergoes annual third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Firewalls and intrusion detection: Network-level protections prevent unauthorized access to wso33 infrastructure. Real-time monitoring detects and blocks suspicious activity.
• Secure data disposal: When personal data reaches the end of its retention period, it is securely deleted using methods that render recovery impossible, in accordance with data protection best practices.

11. Your Rights as a Data Subject

You have the following rights with respect to your personal data held by wso33:

• Right of access: You may request a copy of the personal data wso33 holds about you. We will provide this in a structured, commonly used, and machine-readable format (typically PDF or CSV) within 30 days of a verified request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly via your Account settings; for changes to verified identity information, contact customer support.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) you object to processing and there are no overriding legitimate grounds. Note that wso33 may be required to retain certain data (transaction records, KYC documents) for legal compliance purposes even after account closure.
• Right to restrict processing: You may request that wso33 limit processing of your personal data in certain circumstances, such as while a dispute regarding accuracy or lawfulness is being resolved.
• Right to data portability: You have the right to receive personal data you provided to wso33 in a portable format and to transmit that data to another service provider where technically feasible.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time by clicking "unsubscribe" in promotional emails or contacting customer support. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to lodge a complaint: If you believe wso33 has processed your personal data in violation of applicable data protection laws, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

How to exercise your rights: Submit a written request to [email protected] from your registered email address, clearly stating which right you wish to exercise and providing sufficient information to verify your identity. We aim to respond to all requests within 30 days.

12. Children's Privacy

wso33 strictly prohibits account registration and Platform access by individuals under the age of 21. We do not knowingly collect personal data from minors. Our KYC verification process is designed to detect and prevent underage access. If we become aware that a Player is under 21 years of age, we will immediately close the Account, forfeit any balance to the extent permitted by law, and delete all associated personal data.

If you are a parent or guardian and believe your child has accessed wso33 or provided personal data to us, please contact customer support immediately at [email protected] so that we can take appropriate action.

13. International Data Transfers

wso33 primarily processes and stores personal data within secure cloud infrastructure operated by international service providers. Some of these providers maintain data centers outside of Indonesia. Where personal data is transferred internationally, wso33 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses with all international processors;
• Encryption of data in transit and at rest;
• Selection of processors certified under recognized international data protection frameworks;
• Regular audits of processor security and compliance practices.

By using the wso33 Platform, you acknowledge and consent to the international transfer and processing of your personal data as described in this Policy.

14. Third-Party Services & Links

The wso33 Platform integrates third-party game content (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) and payment services (Indonesian banks and e-wallets). These third parties operate under their own privacy policies and terms of service. wso33 is not responsible for the privacy practices of external services.

We recommend reviewing the privacy policies of any third-party service you interact with through the Platform. While wso33 conducts due diligence when selecting partners and requires contractual data protection commitments, we cannot control or guarantee the data practices of independent third parties.

15. Changes to This Privacy Policy

wso33 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to registered Players via email and/or a prominent notice on the Platform at least 14 days before the updated Policy takes effect.

The "Effective Date" at the top of this document indicates when the current version came into force. We encourage you to review this Privacy Policy periodically. Continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the revised terms.

Previous versions of this Privacy Policy are archived and available upon request for Players who wish to review historical data practices.

16. Contact & Data Protection Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or wso33's data practices, please contact our customer support team. We are committed to resolving privacy inquiries promptly and transparently.

For formal complaints regarding data protection, you may also contact the relevant data protection authority in your jurisdiction. wso33 is committed to cooperating with regulatory authorities to resolve any concerns.