Privacy Policy — win456

In this Privacy Policy, the following terms carry the meanings defined below:

2.1 This Privacy Policy applies to all Personal Data collected by win456 in connection with the operation of the Platform at https://win456.beer, including data collected through the web interface, customer support channels, email communications, and any other means by which a Player interacts with win456.

2.2 win456 is the Data Controller in respect of all Personal Data collected from Players. As Data Controller, win456 is responsible for ensuring that Personal Data is collected, used, and protected in accordance with the commitments set out in this Policy and in compliance with applicable internationally recognized data protection standards.

2.3 This Policy is directed specifically at Players in Indonesia and is written to reflect the data rights and reasonable expectations of Indonesian residents who use the win456 Platform. win456 serves players across major Indonesian cities including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Palembang, and Makassar.

2.4 This Policy should be read alongside win456's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

3.1 win456 collects Personal Data from Players through several channels and at several stages of the player lifecycle. The categories of data we collect are set out in the table below:

3.2 win456 does not collect special category data — such as racial or ethnic origin, political opinions, religious beliefs, or health data — except where a Player voluntarily discloses such information in the context of a responsible gaming support interaction. In such cases, the data is used solely to deliver the requested support and is treated with the highest level of confidentiality.

4.1 win456 uses the Personal Data it collects for the following purposes:

• Account Creation and Management: To register your Account, verify your identity, maintain your Account settings and preferences, and communicate important Account-related information to you.
• Payment Processing: To process deposits and withdrawals via your nominated bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate transaction records denominated in IDR.
• KYC and AML Compliance: To verify your age, identity, and eligibility to use win456, and to fulfill our obligations under internationally recognized anti-money-laundering and counter-terrorism-financing standards.
• Fraud Prevention and Security: To detect, investigate, and prevent unauthorized Account access, fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct as defined in the win456 Terms & Conditions.
• Platform Personalization: To tailor the win456 experience to your preferences — including recommending relevant sports markets such as BRI Liga 1, EPL, or badminton events, and surfacing slot titles from studios such as Pragmatic Play or Pocket Games Soft that align with your play history.
• Responsible Gaming: To monitor betting patterns for indicators of problem gambling, to administer the responsible gaming tools you activate (deposit limits, self-exclusion, cooling-off periods), and to ensure that win456 does not market to Players who have activated responsible gaming restrictions.
• Customer Support: To respond to your queries, complaints, and support requests, and to maintain records of interactions for quality assurance and dispute resolution purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and event announcements (subject to your marketing preferences and opt-out rights — see Clause 13).
• Platform Improvement: To analyze aggregated, anonymized usage data in order to improve the win456 Platform, fix technical issues, and optimize the user experience for Indonesian players.
• Legal and Regulatory Compliance: To comply with any legal obligation, court order, or request from a competent regulatory or law enforcement authority.

4.2 win456 will not use your Personal Data for any purpose that is materially different from those listed above without first obtaining your explicit Consent or providing a new Privacy Policy notice covering the expanded use.

5.1 win456 relies on the following legal bases to process your Personal Data, depending on the specific purpose of the Processing:

• Contractual Necessity: Processing that is required to perform the contract between win456 and you — namely, operating your Account, processing your transactions, and delivering the betting and gaming services you have requested. Without this Processing, win456 cannot provide its services to you.
• Legal Obligation: Processing that win456 is required to carry out in order to comply with applicable laws and regulations — including AML obligations, KYC verification requirements, and cooperation with lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing that is in the legitimate interests of win456 (or a third party) and is not overridden by your rights and freedoms — including fraud prevention, platform security, detection of prohibited conduct, and improvement of Platform services through anonymized analytics.
• Consent: Processing for which win456 has obtained your explicit, freely given Consent — including the sending of direct marketing communications. Where Consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of Processing carried out before withdrawal.

5.2 Where win456 processes Responsible Gaming Data disclosed voluntarily during a support interaction, this Processing is based on your explicit Consent combined with the substantial public interest in preventing gambling-related harm.

6.1 win456 uses cookies and similar tracking technologies on the Platform to support core functionality, improve performance, and deliver a more relevant experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable you to log in, maintain your session across pages, and complete transactions. These cookies cannot be disabled without impairing core Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymized information about how Players navigate and use the Platform — such as which pages are visited most frequently and where technical errors occur. This data is used exclusively to improve Platform performance and is never used to identify individual Players.
• Functional Cookies: These cookies remember your preferences — such as your preferred display language, time-zone setting (WIB, WITA, or WIT), and recently viewed betting markets — so that you do not need to reconfigure these settings on each visit.
• Targeting and Personalization Cookies: These cookies enable win456 to deliver promotional content and bonus offers that are relevant to your play history and interests. These cookies are only activated with your Consent and can be disabled through your Account settings.

6.2 You may manage your cookie preferences through your browser settings at any time. Please note that disabling Strictly Necessary Cookies will prevent you from using key Platform features, including Account login and payment processing.

7.1 win456 engages a limited number of carefully vetted third-party Data Processors to assist in delivering the Platform's services. Each Processor is engaged under a binding data processing agreement that restricts their use of your Personal Data to the specific purpose for which they have been contracted, and prohibits them from using your data for their own commercial purposes.

7.2 The categories of third-party Processors that win456 currently engages include:

• Payment Processing Partners: Indonesian banking and e-wallet infrastructure providers (including integrations with BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja) that facilitate secure deposit and withdrawal processing.
• KYC and Identity Verification Providers: Third-party identity verification services that assist in confirming a Player's identity, age, and document authenticity during the KYC process.
• Fraud Detection and AML Screening Services: Services that analyze transaction patterns and device fingerprints to detect fraudulent activity, unauthorized Account access, and potential money-laundering indicators.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive only the minimum session data required to deliver their games — typically a session token and, where required for fairness certification, anonymized game outcome data.
• Cloud Infrastructure and Hosting Providers: Secure, internationally recognized cloud infrastructure providers that host the Platform's servers, databases, and backup systems under strict data security standards.
• Customer Support Platform: The live chat and ticketing system used by win456's Indonesian-speaking support team to manage and respond to Player enquiries.

7.3 win456 does not share your Personal Data with third-party advertising networks, data brokers, or social media platforms for commercial marketing purposes. Any sharing of data is strictly limited to the operational purposes described above.

8.1 As an internationally operated platform serving Indonesian players, win456 may transfer your Personal Data to servers or service providers located outside of Indonesia. Such transfers may be necessary for the provision of cloud hosting, KYC verification, or fraud detection services.

8.2 Where Personal Data is transferred internationally, win456 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Indonesia. These safeguards include:

• Binding contractual clauses that impose equivalent data protection obligations on the recipient entity.
• Transfer only to jurisdictions that maintain internationally recognized data protection standards.
• Technical security measures — including end-to-end encryption — applied to data in transit to minimize exposure during cross-border transfer.

8.3 By registering a win456 Account, you acknowledge that your Personal Data may be transferred, stored, and processed in jurisdictions outside Indonesia. win456 will always ensure that such transfers are conducted in a manner that preserves the security and confidentiality of your data.

9.1 win456 retains your Personal Data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, in order to satisfy AML record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in line with international AML standards applicable to online gaming operators.
• KYC Verification Documents: Retained for five (5) years following the completion of verification, or for five (5) years after Account closure, whichever is later.
• Behavioral and Betting Data: Retained for the duration of your Account plus two (2) years, for fraud prevention and responsible gaming monitoring purposes. Anonymized, aggregated versions of this data may be retained indefinitely for Platform analytics.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your marketing subscription plus three (3) years following opt-out, to demonstrate compliance with consent obligations.

9.2 Upon the expiry of the applicable retention period, win456 will securely delete or irreversibly anonymize your Personal Data. Where anonymization is applied, the resulting data no longer constitutes Personal Data and may be retained and used indefinitely for statistical and analytical purposes.

10.1 As a win456 Player, you have the following rights in respect of your Personal Data. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your Account. win456 will respond within 30 calendar days of receiving a verified request.

10.2 win456 will not charge a fee for handling data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied. win456 will inform you of any applicable fee before proceeding.

10.3 Where win456 is unable to fulfill a data rights request — for example, because fulfilling it would conflict with a legal retention obligation — win456 will explain the reason in writing within the 30-day response window.

11.1 The win456 Platform is strictly intended for adults aged 21 and over. win456 does not knowingly collect Personal Data from any person under the age of 21.

11.2 If win456 becomes aware, at any point, that an Account has been registered by a person under 21 years of age, it will immediately suspend the Account, delete all Personal Data associated with the Account to the extent not required for legal retention purposes, return any deposits net of any winnings, and forfeit any Bonus Credit.

12.1 win456 implements a comprehensive, layered security architecture to protect your Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our key technical and organizational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the win456 Platform is encrypted using industry-standard TLS 1.3 protocols, ensuring that your data cannot be intercepted in transit.
• AES-256 Encryption at Rest: All Personal Data stored on win456 servers — including KYC documents, financial records, and Account credentials — is encrypted at rest using AES-256 standards.
• Access Controls: Access to Personal Data within win456 is granted on a strict need-to-know basis. Only personnel whose role specifically requires access to a given category of data are authorized to view or process it. All access is logged and audited.
• Two-Factor Authentication (2FA): win456 strongly recommends that all Players enable 2FA on their Accounts. 2FA adds a second layer of protection to your login by requiring a one-time code in addition to your password.
• Penetration Testing: win456's infrastructure is subject to regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses proactively.
• Data Breach Response: win456 maintains a formal incident response plan. In the event of a data breach that is likely to result in risk to affected Players, win456 will notify affected Players and relevant authorities within the timeframes required by applicable standards.

12.2 While win456 takes every reasonable measure to protect your Personal Data, no digital platform can guarantee absolute security. You also play a role in protecting your Account — please use a strong, unique password, enable 2FA, and never share your login credentials with any other person.

13.1 win456 may send you marketing communications — including promotional bonus offers, new game announcements, BRI Liga 1 seasonal promotions, Piala AFF special odds, and seasonal campaigns tied to Indonesian events such as Idul Fitri, Ramadhan, and Indonesian Independence Day — via email or SMS, subject to your marketing consent preferences.

13.2 win456 will only send marketing communications to Players who have given their explicit Consent to receive them. Consent is collected at the point of Account registration and can be updated at any time through your Account settings.

13.3 You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email.
• Updating your communication preferences in your Account settings.
• Contacting the win456 support team at [email protected] and requesting to be removed from all marketing lists.

13.4 Opting out of marketing communications will not affect the delivery of transactional and Account-related communications — such as deposit confirmations, withdrawal processing notifications, and security alerts — which are sent as a necessary part of managing your Account and cannot be disabled.

13.5 win456 will never send marketing communications to Players whose Accounts are subject to a cooling-off period, self-exclusion, or any other active responsible gaming restriction, regardless of their stated marketing consent preferences.

14.1 win456 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform operations. All amendments will be published on this page with an updated "Last Updated" date.

14.2 Where an amendment constitutes a material change to the way in which win456 uses your Personal Data — such as the introduction of a new Processing purpose or a new category of third-party Processor — win456 will notify you by email at least seven (7) days before the change takes effect. Material changes that involve a new legal basis (such as relying on Consent for a previously legitimate-interest Processing activity) will require you to affirmatively re-consent before the new Processing begins.

14.3 Non-material amendments — such as typographical corrections, contact detail updates, or clarifications that do not change the substance of the Policy — may take effect immediately upon publication without prior notice.

14.4 Your continued use of the win456 Platform after the effective date of any Policy amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with any amendment, you should cease using the Platform and may request Account closure by contacting our support team.

15.1 If you have any questions, concerns, or complaints relating to this Privacy Policy or to the way in which win456 handles your Personal Data, please contact our Data Protection team using the details below:

15.2 win456 takes all privacy complaints seriously and will acknowledge receipt of your complaint within two (2) business days. We will investigate your complaint thoroughly and provide a substantive written response within the timeframes stated above.

15.3 If you are not satisfied with win456's response to your complaint, you have the right to escalate the matter to an independent dispute resolution body or to seek legal remedy through the appropriate channels available in your jurisdiction.

15.4 For information about your rights and how to exercise them, please refer to Clause 10 of this Policy. For questions about responsible gaming or to activate a responsible gaming tool, please visit our Responsible Gaming page or contact support directly.