Privacy Policy

1 Introduction

This Privacy Policy governs the collection, use, storage, and disclosure of personal data by wso606 (referred to as "we", "us", or "our") in connection with your use of the wso606 online betting platform, accessible at https://wso606.cam (referred to as "the Platform" or "the Site").

This Privacy Policy applies to all users ("you" or "your") who register an account, place bets, access content, or otherwise interact with the Platform. By creating an account or using our services, you acknowledge that you have read, understood, and agreed to the collection and use of your personal data as set out in this Privacy Policy.

If you do not agree with any aspect of this Privacy Policy, you must cease using the Platform immediately and contact us to request account closure and data deletion in accordance with Section 8 of this policy.

2 Data Controller

wso606 acts as the data controller for all personal information collected through the Platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws.

Our contact details for data protection inquiries are provided in Section 14 of this Privacy Policy. You may contact us at any time if you have questions about how your data is processed or if you wish to exercise your privacy rights as outlined in Section 8.

3 Data We Collect

wso606 collects several categories of personal data to provide, maintain, and improve our services. The types of data we collect include:

3.1 Account Registration Data

When you create an account on wso606, we collect the following mandatory information:

• Full legal name (as it appears on your Indonesian National Identity Card / KTP)
• Date of birth (to verify that you are at least 21 years of age)
• Email address
• Mobile phone number (Indonesian +62 numbers preferred for SMS verification)
• Residential address (street, city, province, postal code)
• Username and encrypted password
• Preferred currency (Indonesian Rupiah / IDR by default)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) regulations and verify your identity before processing withdrawals, we collect:

• Government-issued identification document (typically Indonesian KTP, or passport for non-residents)
• Selfie photograph holding your ID document (to match facial biometrics)
• Proof of address documents (utility bill, bank statement, or government correspondence dated within the last 3 months)
• Additional verification documents may be requested for high-value transactions or enhanced due diligence requirements

3.3 Financial & Transaction Data

When you deposit or withdraw funds, we collect:

• Bank account details (bank name, account number, account holder name) or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers or account IDs)
• Transaction history (deposit amounts, withdrawal amounts, timestamps, payment method used, transaction status)
• Betting history and wagering activity (bets placed, outcomes, stakes, winnings, game types, session duration)
• Bonus claims and wagering requirement progress

3.4 Technical & Usage Data

We automatically collect technical information when you use the Platform:

• IP address and geolocation data (to verify you are accessing from a permitted jurisdiction)
• Device information (operating system, browser type and version, device model, screen resolution, language settings)
• Cookies and similar tracking technologies (see Section 9 for details)
• Log files (timestamps, pages visited, features used, clickstream data, referral URLs)
• Session data (login times, logout times, session duration, active gaming sessions)

3.5 Communications Data

When you contact our customer support team or communicate with us through any channel, we collect:

• Content of live chat conversations, email correspondence, and phone call recordings (where applicable and with notice)
• Support ticket history, complaint records, and feedback submissions
• Survey responses and promotional preferences

4 How We Use Your Data

wso606 processes your personal data for the following lawful purposes:

5 Data Sharing & Disclosure

wso606 does not sell, rent, or trade your personal data to third parties. However, we may share your data with trusted service providers and partners in the following circumstances:

• Payment Processors: We share financial data with licensed payment service providers (banks, e-wallet operators, payment gateways) strictly for the purpose of processing your deposits and withdrawals. These providers are contractually bound to use your data only for transaction processing and are prohibited from using it for marketing or other purposes.
• Identity Verification Services: We share KYC documents with third-party identity verification and fraud prevention agencies to confirm your identity, verify document authenticity, and screen against global watchlists. These services comply with international data protection standards.
• Game Studios & Content Providers: When you play games from providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, or Spribe, session data (username, bet amounts, game outcomes) may be shared with these studios to operate the games and generate fair outcomes. These providers process data as independent controllers under their own privacy policies.
• Customer Support Tools: We use third-party live chat and ticketing platforms to deliver customer support. Support agents may access your account information and communication history to resolve inquiries efficiently.
• Analytics & Marketing Platforms: We share anonymized or pseudonymized usage data with analytics providers (Google Analytics, similar tools) to measure platform performance and user engagement. Marketing platforms may receive hashed email addresses or device identifiers for retargeting campaigns (only if you have consented to marketing communications).
• Legal & Regulatory Authorities: We may disclose your data to law enforcement, regulatory bodies, courts, or government agencies when required by applicable law, court order, subpoena, or to protect our legal rights, prevent fraud, or ensure user safety.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change and given the option to request data deletion if you do not wish to continue under the new ownership.

All third-party service providers with whom we share your data are required to maintain confidentiality, implement appropriate security measures, and process your data only for the purposes specified in their agreements with wso606.

6 Data Security

wso606 employs industry-standard technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols, ensuring that sensitive information such as login credentials, financial details, and personal data cannot be intercepted in transit.
• Encrypted Data Storage: Personal data stored in our databases is encrypted at rest using Advanced Encryption Standard (AES) with 256-bit keys. Financial transaction records and KYC documents are subject to additional encryption layers.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on role-based access control (RBAC) principles. Employees and contractors with access to your data are bound by strict confidentiality agreements.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses in our infrastructure.
• Intrusion Detection & Prevention: Our systems employ real-time monitoring, firewalls, and intrusion detection systems (IDS) to detect and block malicious activity, including distributed denial-of-service (DDoS) attacks.
• Secure Development Practices: Our engineering team follows secure coding standards and conducts code reviews to prevent common vulnerabilities such as SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF).
• Incident Response Plan: In the unlikely event of a data breach, wso606 has an incident response plan in place to contain the breach, assess its impact, notify affected users, and report the incident to relevant authorities as required by law.

While we strive to protect your personal data using best-in-class security measures, no method of electronic transmission or storage is 100% secure. You also play an important role in protecting your account by choosing a strong password, enabling two-factor authentication (2FA) where available, and never sharing your login credentials with anyone.

7 Data Retention

wso606 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

• Account Data: Active account information is retained for the duration of your account registration. If you close your account, we will retain basic account records (name, email, registration date) for a minimum of 5 years to comply with AML regulations and to prevent re-registration under the same identity.
• Transaction & Financial Records: Deposit, withdrawal, and betting history are retained for a minimum of 7 years from the date of the transaction to satisfy tax, accounting, and regulatory audit requirements.
• KYC Documents: Identity verification documents are retained for 7 years after account closure to comply with AML record-keeping obligations.
• Communications: Customer support chat logs, emails, and complaint records are retained for 3 years to enable quality assurance, training, and dispute resolution.
• Marketing Preferences: If you opt out of marketing communications, we will retain your email address on a suppression list indefinitely to ensure we do not inadvertently contact you again.
• Technical & Log Data: Server logs, IP addresses, and session data are typically retained for 12–24 months unless longer retention is required for security investigations or legal proceedings.

After the applicable retention period expires, we will securely delete or anonymize your data so that it can no longer be used to identify you. Anonymized data may be retained indefinitely for statistical, analytical, and research purposes.

8 Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data. To exercise any of these rights, please contact us using the details provided in Section 14.

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.
• Right to Rectification: If any of your personal data is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly through your account settings.
• Right to Erasure (Right to Be Forgotten): You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. Note that we may be legally required to retain certain data (e.g., transaction records for AML compliance) even after you request deletion.
• Right to Restriction of Processing: You may request that we limit how we use your data if you contest its accuracy, object to processing, or if we no longer need the data but you require it for legal claims.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another service provider where technically feasible.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time by clicking "Unsubscribe" in any marketing email or by contacting support. You may also object to processing based on legitimate interests by providing reasons specific to your situation.
• Right to Withdraw Consent: Where we process your data based on your consent (e.g., for marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.
• Right to Lodge a Complaint: If you believe your privacy rights have been violated, you have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.

We will respond to all requests within 30 days. In complex cases, we may extend this period by an additional 60 days and will notify you of the extension and the reasons for it.

9 Cookies & Tracking Technologies

wso606 uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on repeat visits.

Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the Platform to function and cannot be disabled. They enable core features such as secure login, session management, and transaction processing.
• Performance Cookies: These cookies collect information about how you use the Platform, such as which pages you visit most often. This data is aggregated and anonymized to help us improve site performance and user experience.
• Functionality Cookies: These cookies allow us to remember your preferences (e.g., language, currency, favorite games) so we can provide a more personalized experience.
• Marketing Cookies: These cookies track your activity across the Platform and other websites to deliver targeted advertisements and measure campaign effectiveness. They are set only if you have consented to marketing communications.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, but doing so may affect your ability to use certain features of the Platform. To opt out of third-party advertising cookies, you can visit industry opt-out tools such as the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA) websites.

10 Third-Party Services

The wso606 Platform may contain links to third-party websites, applications, or services that are not operated or controlled by wso606. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

wso606 is not responsible for the privacy practices, content, or security of any third-party websites or services, even if you access them through a link on our Platform.

11 International Data Transfers

wso606 operates internationally and may transfer your personal data to servers and service providers located outside Indonesia. When we transfer data across borders, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

These safeguards may include standard contractual clauses approved by relevant data protection authorities, adequacy decisions recognizing equivalent data protection standards, or other legally compliant transfer mechanisms.

By using the wso606 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions that may have different data protection standards than Indonesia, subject to the safeguards described above.

12 Children's Privacy

The wso606 Platform is intended exclusively for users who are at least 21 years of age. We do not knowingly collect, use, or disclose personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data from our systems and terminate the associated account. If you believe that a minor has provided personal data to wso606, please contact us immediately at the email address listed in Section 14.

Parents and guardians are encouraged to monitor their children's internet usage and to help enforce this policy by instructing minors never to provide personal information through online services without permission.

13 Changes to This Privacy Policy

wso606 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on the Platform homepage
• Sending an email notification to the email address associated with your account
• Displaying an in-platform notification upon your next login

The updated Privacy Policy will indicate the effective date at the top of the document. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you must cease using the Platform and contact us to close your account.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how wso606 processes your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Inquiry" or "Data Protection Request" in the subject line
• Live Chat: Available 24/7 on any page of the wso606 Platform — our support agents can escalate privacy-related inquiries to the appropriate team
• Response Time: We aim to respond to all privacy inquiries within 48 hours and to fulfill data subject access requests within 30 days as required by law