Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by war168 (referred to herein as "war168," "we," "us," or "our") in connection with all services offered through the war168 online betting platform, including but not limited to sports betting, live casino games, slot machines, togel (Indonesia's traditional lottery game), and sabung ayam (cockfighting) markets.

This Policy applies to all individuals who visit, register with, or otherwise interact with the war168 platform, including residents of Jakarta, Surabaya, Bandung, Medan, Semarang, Bali, Makassar, and every other region of Indonesia. By creating an account or continuing to use our platform, you confirm that you have read, understood, and consent to the practices described in this Privacy Policy.

If you do not agree with any part of this Policy, you should discontinue use of the war168 platform and close your account. For questions or concerns, contact us at [email protected].

2. Definitions

• "Personal Data" — Any information that identifies or can reasonably be used to identify a natural person, including name, email address, phone number, bank account details, IP address, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — war168, which determines the purposes and means of processing your personal data.
• "Data Processor" — Any third party that processes personal data on behalf of war168, such as payment gateways and KYC verification providers.
• "Cookies" — Small text files placed on your device by a website to store preferences and tracking information.
• "KYC" — Know Your Customer: identity verification procedures required before withdrawals can be processed.

3. Personal Data We Collect

war168 collects personal data through several channels. The categories of data collected and the means of collection are described below.

3.1 Data You Provide Directly

• Account Registration: Full name, date of birth, email address, mobile phone number, and preferred username.
• Identity Verification (KYC): Government-issued ID (KTP or passport), selfie photographs, and proof of address documents required to comply with anti-money laundering (AML) regulations.
• Payment Information: Indonesian bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals.
• Customer Support Communications: Records of chats, emails, or WhatsApp messages exchanged with our support team.
• Preferences and Settings: Communication preferences, marketing opt-in status, and account configuration choices.

3.2 Data Collected Automatically

• Device and Technical Data: IP address, browser type and version, operating system, device model, screen resolution, and referring URL.
• Usage Data: Pages visited, features used, session duration, click paths, bet history, game history, and deposit/withdrawal history.
• Location Data: Country and approximate city inferred from IP address. war168 does not request or store precise GPS location data.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies used for authentication, analytics, and fraud prevention.

4. How war168 Uses Your Personal Data

war168 processes your personal data only for specified, legitimate purposes. We do not use your data in ways that are incompatible with those purposes. The primary uses of your data are:

1. Account Management: Creating, maintaining, and securing your war168 account; processing deposits and withdrawals in Indonesian Rupiah (IDR); verifying your identity through KYC procedures.
2. Service Delivery: Providing access to sports betting (bandar bola), live casino, slot games, togel, and all other war168 Services; settling bets and crediting winnings.
3. Security and Fraud Prevention: Detecting and preventing unauthorized account access, fraudulent transactions, bonus abuse, and other prohibited activities outlined in our Terms & Conditions.
4. Legal Compliance: Fulfilling anti-money laundering (AML), Know Your Customer (KYC), and other regulatory obligations applicable to our international gaming license.
5. Customer Support: Responding to your inquiries, resolving disputes, and improving support quality through interaction analysis.
6. Platform Improvement: Analyzing usage patterns, game performance, and betting behavior to improve platform stability, feature set, and user experience.
7. Marketing Communications (with consent only): Sending promotional emails, SMS, or WhatsApp messages about bonuses, events, and new features if you have opted in to receive such communications.
8. Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and proactively reaching out to players who may benefit from responsible gaming resources.

5. Disclosure of Personal Data to Third Parties

war168 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following limited categories of third parties, strictly on a need-to-know basis:

5.1 Trusted Service Providers

We engage carefully vetted third-party providers who assist in operating the war168 platform. These include payment processing partners (bank gateway providers), KYC and identity verification services, cloud infrastructure providers, fraud detection technology vendors, and customer support software platforms. Each provider is bound by a Data Processing Agreement (DPA) that prohibits them from using your data for any purpose other than fulfilling services to war168.

5.2 Legal and Regulatory Authorities

war168 may disclose personal data to government bodies, law enforcement agencies, or financial intelligence units when required to do so by applicable law, court order, or regulatory instruction — for example, in connection with AML investigations, fraud cases, or court-ordered discovery proceedings.

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of war168's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the associated privacy implications before the transfer takes place.

6. Cookies and Similar Technologies

war168 uses cookies and similar browser-based technologies to enhance your experience, maintain session security, and gather analytics data. The types of cookies we use are:

• Essential Cookies: Required for the platform to function. They manage your login session, maintain game state, and ensure secure transactions. These cannot be disabled without breaking core functionality.
• Analytics Cookies: Used to understand how users navigate the platform, which pages are visited most frequently, and where users encounter difficulties. This data is aggregated an d anonymized.
• Preference Cookies: Store your language settings, display preferences, and other customization choices so they persist across sessions.
• Security Cookies: Assist in detecting fraudulent activity, bot traffic, and unauthorized login attempts by analyzing behavioral patterns.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect certain platform features. Most modern browsers allow you to block third-party cookies, clear existing cookies, and set preferences for specific websites independently.

7. Data Security Measures

war168 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and war168 servers is encrypted using 256-bit TLS (Transport Layer Security), the same standard used by major international banks.
• Access Controls: Personal data is accessible only to authorized war168 personnel who require it to perform their job functions. Access is managed through role-based permissions and multi-factor authentication.
• Server Security: Our servers are hosted in hardened data centers with physical security controls, 24/7 monitoring, and intrusion-detection systems.
• Regular Audits: We conduct periodic internal security reviews and engage independent cybersecurity firms to perform penetration testing and vulnerability assessments.
• Password Hashing: Account passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms to protect your credentials.
• Incident Response: In the event of a confirmed data breach affecting your personal data, we will notify affected users within 72 hours of becoming aware of the incident and outline the steps taken to mitigate harm.

Despite these measures, no system connected to the internet can guarantee absolute security. You are responsible for keeping your account password confidential and for logging out of your session on shared devices.

8. Your Data Rights

As a war168 user, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond to verified requests within 30 calendar days.

1. Right of Access: You may request a copy of all personal data war168 holds about you, including your account details, bet history, KYC records, and communication logs.
2. Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You may update basic account details directly within your account settings.
3. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations (such as AML record-keeping requirements of up to 7 years).
4. Right to Restriction of Processing: You may request that we temporarily restrict processing of your data while a dispute regarding its accuracy or our use of it is being resolved.
5. Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service provider where technically feasible.
6. Right to Object: You may object at any time to processing of your personal data for direct marketing purposes. Once you object, we will cease marketing communications immediately.
7. Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9. Children's Privacy and Age Restriction

war168 is strictly an adults-only platform. You must be at least 21 years of age to register and use our Services. We do not knowingly collect personal data from individuals under the age of 21. If we discover that a user is underage, we will immediately close the account, refund any remaining balance where legally required, and permanently delete all associated personal data.

If you are a parent or guardian and believe that your child has registered with war168 without your knowledge, please contact us immediately at [email protected] and we will take prompt corrective action.

10. International Data Transfers

war168 operates as an international platform with servers located outside of Indonesia. By using our Services, you acknowledge that your personal data may be transferred to, stored in, and processed in countries other than Indonesia. These countries may have data protection laws that differ from those applicable in Indonesia.

Wherever personal data is transferred internationally, war168 ensures that appropriate safeguards are in place — including contractual data protection clauses with receiving parties — to maintain a level of protection consistent with this Privacy Policy. If you have questions about the international transfer of your data, contact us at [email protected].

11. Third-Party Services and Links

The war168 platform may reference or integrate third-party services such as payment gateways (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) and game content providers (Pragmatic Play, Evolution Gaming, Spribe, Microgaming, Pocket Games Soft, NetEnt). When you interact with these third-party services, their own privacy policies govern the collection and use of your data by those providers.

war168 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you interact with through the platform.

12. Data Retention

war168 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods for each data category are outlined in the table in Section 3 of this Policy.

When data is no longer required, it is securely deleted or anonymized so that it can no longer be linked to any individual. Anonymized aggregate data (for example, statistical reports on platform usage) may be retained indefinitely for analytical purposes.

13. Changes to This Privacy Policy

war168 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will update the "Last Updated" date at the top of this document and, where appropriate, notify registered users via email or an in-platform notification.

Your continued use of the war168 platform after the updated Privacy Policy is posted constitutes your acceptance of the revised terms. We encourage you to review this page periodically so you remain informed about how we protect your personal data.

14. Contact and Data Protection Inquiries

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please reach out to our team using the contact details below. We are committed to addressing all privacy inquiries promptly and transparently.