wla88 Privacy Policy

wla88 ("wla88", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits or registers on the wla88 platform at https://wla88.app (the "Platform"). This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with the Platform and all related services.

This Policy applies to all users of the Platform, including registered Players, visitors who browse without registering, and any other individual whose personal data is processed by wla88 in connection with the services we offer to players across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and throughout Indonesia.

By accessing the Platform, creating an account, making a deposit, or using any wla88 service, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the Platform immediately and contact us to arrange deletion of any data already collected.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming page, both of which form part of the overall agreement between you and wla88.

For clarity throughout this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — wla88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of wla88, under our instruction and subject to a data processing agreement.
• "Player" / "User" / "you" — any individual who accesses, registers on, or uses the wla88 Platform.
• "KYC" — Know Your Customer identity and age-verification procedures conducted to comply with anti-money-laundering and responsible gaming obligations.
• "Cookie" — a small text file placed on your device by a website to store session, preference, or analytics information.
• "Sensitive Data" — a subset of Personal Data afforded additional protection, including government-issued ID numbers, financial account details, and any data that could enable identity theft if disclosed.

wla88 collects the following categories of Personal Data, depending on how you interact with the Platform:

wla88 collects Personal Data through the following mechanisms:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated Technologies: Technical and Usage Data collected automatically as you interact with the Platform, including through cookies, web beacons, pixel tags, and server log files. See Section 8 for full details on our cookie practices.
• Third-Party Sources: Identity verification data from KYC service providers; fraud-risk signals from anti-fraud partners; payment status data from payment processors handling IDR bank transfers and e-wallet transactions.
• Game Studio Partners: Aggregated session data (game outcomes, session duration, bet amounts) passed back from licensed third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. This data is used solely for transaction reconciliation and responsible gaming monitoring.

wla88 processes your Personal Data on one or more of the following legal grounds:

1. Contractual Necessity: Processing required to register your account, accept your bets, process deposits and withdrawals in IDR, and fulfil our obligations under the Terms & Conditions you agreed to when registering.
2. Legal Obligation: Processing necessary to comply with anti-money-laundering obligations, age verification requirements (21+ only), and any other applicable legal or regulatory requirement imposed on wla88 as a licensed gaming operator.
3. Legitimate Interests: Processing for fraud prevention, Platform security, service improvement, and responsible gaming monitoring — where such interests are not overridden by your own privacy rights.
4. Consent: Processing for optional marketing communications, personalised promotions, and non-essential cookies — where you have given us your explicit, freely-given, and withdrawable consent. You may withdraw consent at any time by contacting [email protected].

wla88 uses the Personal Data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and securing your wla88 account, including processing login requests, password resets, and account updates.
• Payment Processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja, and processing withdrawal requests to your verified payment method in IDR.
• Identity & Age Verification: Confirming that you meet the 21+ age requirement and verifying your identity before processing withdrawals or upon reasonable request.
• Fraud & Security: Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, multi-accounting, and other forms of dishonest conduct.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and to enforce any deposit limits, time-outs, or self-exclusion requests you have placed on your account.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Marketing: Sending you promotional offers, seasonal bonuses (such as those tied to Idul Fitri, Ramadhan, and Indonesian Independence Day), and relevant product updates — but only where you have consented and have not opted out.
• Platform Improvement: Analysing aggregated Usage Data to understand how players interact with the Platform, identify technical issues, and develop new features.
• Legal Compliance: Meeting our obligations under applicable licensing conditions, anti-money-laundering regulations, and any lawful request from competent authorities.

wla88 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your Personal Data with the following categories of recipients, strictly to the extent necessary to deliver our services:

• Payment Processors: Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum account and transaction data required to execute your requested deposit or withdrawal in IDR.
• KYC & Identity Verification Providers: Specialist third-party services that verify government-issued identity documents and confirm that Players meet the 21+ age requirement.
• Game Studio Partners: Licensed providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive a pseudonymised Player identifier and session parameters solely to enable game delivery and outcome recording.
• Fraud Prevention & Security Partners: Third-party risk intelligence services that help detect suspicious IP addresses, device fingerprints, and transaction patterns associated with fraud or money laundering.
• IT & Hosting Providers: Cloud infrastructure and platform-hosting vendors who store and process data on our behalf under binding data processing agreements with equivalent security standards.
• Legal & Regulatory Authorities: Where required by law, court order, or the lawful request of a competent regulatory authority, wla88 may disclose Personal Data without prior notice to you.

All third-party Data Processors engaged by wla88 are bound by contractual confidentiality and data security obligations consistent with this Policy. wla88 remains the Data Controller and retains responsibility for ensuring that any processing carried out by Data Processors on our behalf meets the standards set out herein.

wla88 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are in use:

You may manage your cookie preferences at any time via your browser settings. Please note that disabling strictly necessary or functional cookies may impair your ability to use certain features of the Platform, including the login flow and game loading.

wla88 retains your Personal Data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the lifetime of your account and for a minimum of 5 years after account closure, in order to meet anti-money-laundering record-keeping obligations.
• Transaction & Bet History: Retained for a minimum of 5 years from the date of the transaction, for financial audit and dispute resolution purposes.
• KYC Documents: Retained for a minimum of 5 years after account closure or the completion of the KYC process, whichever is later.
• Support & Communications Data: Retained for 3 years from the date of the last interaction, for quality assurance and dispute resolution.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is sooner.
• Technical & Usage Data: Retained in aggregated or anonymised form for up to 2 years for analytics purposes.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

wla88 implements a multi-layered security framework to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. Our core security measures include:

• Transport Encryption: All data transmitted between your device and the wla88 Platform is protected by 256-bit SSL/TLS encryption. Our SSL certificate is kept current and renewed proactively.
• At-Rest Encryption: Personal Data and financial records stored on our servers are encrypted at rest using AES-256.
• Password Security: Account passwords are stored as salted cryptographic hashes. wla88 staff cannot view your plaintext password under any circumstances.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with access rights undergo background screening and regular privacy training.
• Fraud Monitoring: Real-time systems monitor login attempts, transaction patterns, and device behaviour for anomalies indicative of account takeover or fraudulent activity.
• Penetration Testing: The Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.

Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by wla88:

1. Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is being used.
2. Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. For basic profile updates (email, phone number), you can make changes directly within your account settings.
3. Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. Note that we may be legally required to retain certain data (e.g., transaction records for 5 years) even after an erasure request.
4. Right to Restrict Processing: You may request that we limit how we use your Personal Data in certain circumstances — for example, while a dispute about accuracy is being resolved.
5. Right to Data Portability: You may request that we provide your Personal Data in a structured, commonly-used, and machine-readable format so that you can transfer it to another service provider.
6. Right to Object: You may object to processing based on our legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing your data for that purpose immediately.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 days and may request identity verification before fulfilling the request to protect against unauthorised access to your data.

The wla88 Platform is strictly for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, we will immediately close the account, void any associated transactions, and delete all Personal Data associated with that account to the extent permitted by law.

If you are a parent or guardian and believe that a minor in your care has registered an account or provided Personal Data to wla88, please contact us immediately at [email protected] so that we can take prompt action.

wla88 operates as an internationally licensed gaming platform. Some of our Data Processors — including cloud infrastructure providers and certain game studio partners — may be located outside Indonesia. Where Personal Data is transferred to countries that do not have data protection laws equivalent to those in Indonesia, wla88 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses incorporated into data processing agreements with the relevant third party;
• Binding corporate rules or equivalent internal data transfer mechanisms;
• Certification under recognised international data protection frameworks.

By using the wla88 Platform, you acknowledge and consent to the transfer of your Personal Data to countries outside Indonesia as described in this section, subject to the safeguards outlined above.

The wla88 Platform does not contain links to external third-party websites for general browsing purposes. However, certain game content delivered by third-party studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) is loaded within the Platform environment via embedded iframes or APIs. These game providers operate under their own privacy standards, and wla88 is not responsible for the data practices of those providers in relation to data they collect independently on their own infrastructure.

wla88 selects game studio partners that maintain data security standards consistent with industry best practice and requires them to process Player data only for the purpose of delivering game services to wla88 Players.

wla88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered Players by email to the address on their account at least 14 days before the changes take effect, except where an immediate amendment is required to comply with a legal obligation, in which case the updated Policy will take effect upon publication.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. The current version of this Policy is always available at https://wla88.app/privacy-policy. We encourage you to review the Policy periodically to stay informed about how we protect your data.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised terms, you must cease using the Platform and contact us to arrange closure of your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wla88 handles your Personal Data, please contact our privacy team through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24/7 directly within the wla88 Platform — ask to be connected to the privacy or compliance team.
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days. Complex requests (e.g., full data-subject access requests) may require the full 30-day period.
• Operating Hours: Our support team covers all Indonesian time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) — around the clock, every day of the year.

For related legal documents, please refer to our Terms & Conditions and Responsible Gaming pages. For general questions about your account or our games, visit our FAQ page.