Your privacy matters to us. This policy explains exactly what personal data wa338 collects, how it is used, who it may be shared with, and the rights you hold as a member of our platform.
Our Privacy Commitments at a Glance
Every byte of data transmitted between your device and wa338's servers is protected by TLS 1.3 with 256-bit AES encryption. Your personal details, financial information, and wagering history are never transmitted in plaintext.
wa338 collects only the data that is strictly necessary to provide our services, verify member identity, process transactions, and comply with our international licensing obligations. We do not collect data speculatively or for resale.
wa338 does not sell, rent, or trade your personal data to advertising networks, data brokers, or third-party marketers. Your information remains within the wa338 ecosystem and is shared only as described in this policy.
Our platform is designed for English-preference players across Indonesia — including Jakarta, Surabaya, Bandung, Bali, and beyond. We handle local bank and e-wallet data (BCA, BRI, OVO, DANA, GoPay) with heightened care and store it in access-controlled encrypted environments.
You have the right to access, correct, export, and request deletion of your personal data at any time. wa338's support team processes all data-rights requests within 21 calendar days and acknowledges receipt within 5 business days.
Promotional emails, SMS messages, and in-platform notifications are consent-based. You may withdraw marketing consent and update your notification preferences at any time via your account settings or by contacting our 24/7 support team.
1.1 Scope. This Privacy Policy applies to all personal data collected and processed by wa338 in connection with: (a) your access to and use of the wa338 website at https://wa338.app and all its sub-pages; (b) your registration and maintenance of a wa338 member account; (c) any transaction you conduct on the platform, including deposits, withdrawals, and wagers; and (d) any communication you initiate with our customer support team.
1.2 Data Controller. The data controller responsible for your personal data is the internationally licensed offshore gaming operator that owns and operates the wa338 platform. For all privacy-related inquiries, you may contact us at [email protected].
1.3 Relationship to Terms & Conditions. This Privacy Policy forms part of the wa338 Terms & Conditions and should be read alongside them. In the event of a conflict between this policy and the Terms & Conditions on a privacy matter, this Privacy Policy prevails.
wa338 collects personal data through several channels: directly from you at registration and during account use, automatically through your interactions with the platform, and in limited cases from third-party verification providers. The categories of data we collect are set out in the table below.
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number (KTP), passport number, selfie photograph for KYC | Provided by you at registration or KYC verification |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bali) | Provided by you at registration |
| Financial Data | Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal amounts in IDR | Provided by you when making transactions |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (WIB/WITA/WIT) | Collected automatically on platform access |
| Usage Data | Pages visited, games played, bet amounts and outcomes, session duration, click path, search queries within the platform | Collected automatically via server logs and analytics |
| Communications Data | Live chat transcripts, support email contents, any attachments you send to our team | Collected when you contact support |
| Marketing Preferences | Consent status for promotional emails, SMS, and push notifications; opted-out categories | Recorded at registration and updated via account settings |
2.1 Sensitive Data. wa338 does not intentionally collect special-category sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond identity verification photographs). If you voluntarily disclose sensitive information during a support interaction, we will treat it with a heightened level of care and will not process it beyond what is strictly necessary to resolve your query.
wa338 uses the personal data described in Section 2 for the following purposes:
wa338 processes your personal data on the following legal bases:
5.1 Service Providers. wa338 shares limited personal data with carefully vetted third-party service providers that assist us in operating the platform. These include: payment processors and banking partners (for deposit and withdrawal handling); identity verification providers (for KYC); game studios (for game delivery and fair-play certification, e.g., Pragmatic Play, Evolution Gaming); cloud hosting and CDN providers; and fraud detection services. All service providers are bound by data processing agreements and may only use your data for the specific purpose for which it was shared.
5.2 Legal Disclosures. wa338 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where we are required to do so by a valid legal order, warrant, or where disclosure is necessary to protect the rights, property, or safety of wa338, its members, or the public.
5.3 Business Transfers. In the event of a merger, acquisition, or sale of substantially all assets of the wa338 operating entity, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms governing your data under the new entity.
5.4 No Sale of Data. wa338 does not sell, rent, license, or trade your personal data to advertisers, data brokers, or any other commercial third parties for their independent use. This commitment is unconditional and applies regardless of the commercial context.
6.1 Active Accounts. Personal data associated with an active wa338 account is retained for the duration of the account's existence plus the periods described in Section 6.2 below.
6.2 Post-Closure Retention. Following account closure — whether initiated by you or by wa338 — we retain your personal data for a minimum period of five (5) years to meet our international licensing record-keeping requirements, resolve any outstanding disputes, and comply with applicable anti-money-laundering obligations. Financial transaction records may be retained for up to seven (7) years.
6.3 Marketing Data. If you withdraw consent for marketing communications, we will cease sending promotional content within five (5) business days and remove your contact details from active marketing lists. A suppression record — containing only your email or phone number and a flag indicating your opt-out — is retained indefinitely to ensure we do not inadvertently re-add you to marketing campaigns.
6.4 Deletion. Upon expiry of the applicable retention period, your personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with you.
wa338 employs a layered security architecture to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Our security measures include:
While wa338 takes all reasonable technical and organizational measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect unauthorized access to your account.
8.1 What Are Cookies? Cookies are small text files placed on your device by a website to store preference and session information. wa338 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform.
8.2 Types of Cookies We Use.
8.3 Managing Cookies. You may control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Disabling performance or marketing cookies will not affect your ability to place wagers or access games.
As a wa338 member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team with your account username and a description of your request. We will acknowledge within five (5) business days and respond substantively within twenty-one (21) calendar days.
Request a copy of all personal data wa338 holds about you, along with information about how it is used and with whom it is shared.
Request correction of any inaccurate or incomplete personal data held in your account. Name corrections may require supporting identity documentation.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that wa338 restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
Request your personal data in a structured, machine-readable format (JSON or CSV) for transfer to another service, where technically feasible.
Object to the processing of your personal data for marketing purposes or on the basis of legitimate interests. Marketing objections are actioned within five business days.
10.1 Age Restriction. The wa338 platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and accounts found to belong to persons under 21 will be permanently closed with all associated balances forfeited.
10.2 Parental Notification. If you believe a person under 21 has registered a wa338 account or accessed the platform using your details, please contact us immediately at [email protected]. We will investigate promptly and take all necessary remedial action, including account closure and data deletion, within the bounds of our legal obligations.
11.1 Game Studio Integrations. The wa338 platform integrates game content from third-party studios including Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and others. When you launch a game, certain technical data (your session token, game preferences, bet size) is transmitted to the relevant studio's game server for the purpose of delivering the game. This data exchange is governed by data processing agreements between wa338 and each studio.
11.2 Payment Provider Redirects. When processing deposits or withdrawals via Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), you may interact directly with those providers' interfaces. wa338 is not responsible for the privacy practices of these payment providers; please review their respective privacy policies.
11.3 No External Links in This Policy. wa338 does not include links to external third-party websites within this Privacy Policy. Any reference to third-party brands is for informational purposes only and does not constitute an endorsement of their privacy practices.
12.1 Cross-Border Processing. As an internationally licensed offshore gaming operator, wa338 processes and stores data on servers located outside Indonesia. Your personal data may therefore be transferred to, and processed in, countries other than your country of residence. These countries may have data protection laws that differ from those in Indonesia.
12.2 Transfer Safeguards. Where personal data is transferred internationally, wa338 ensures appropriate safeguards are in place through: (a) standard contractual clauses (SCCs) in data processing agreements with service providers; (b) transfers only to jurisdictions with an adequate level of data protection as assessed by wa338's compliance team; or (c) your explicit consent where no other safeguard applies.
12.3 Licensing Jurisdiction. The primary data processing jurisdiction is the country in which wa338 holds its international gaming licence. These Terms are written in English, and in the event of any conflict arising from a translation, the English version prevails — consistent with Section 13.3 of the wa338 Terms & Conditions.
13.1 Right to Amend. wa338 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, operational structure, or applicable legal obligations. Material changes will be communicated to registered members via a platform notification or email to the registered account address at least seven (7) days before the revised policy takes effect.
13.2 Continued Use. Your continued use of the wa338 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised policy, you must cease using the platform and contact support to arrange account closure.
13.3 Version History. The "Last Updated" date displayed in the hero section of this page reflects the most recent revision. Previous versions of this Privacy Policy are available upon written request to our support team.
For all privacy-related inquiries, data-rights requests, or complaints regarding wa338's handling of your personal data, please contact our Data Protection team through the following channels:
wa338 maintains Indonesian-speaking support agents on all shifts, so members across Jakarta, Surabaya, Bandung, Bali, Semarang, Medan, Makassar, and the wider Indonesian archipelago can communicate with our team in their preferred language. The Platform and all formal policy documents, including this Privacy Policy, are maintained in English as the governing language.
If you are not satisfied with wa338's response to a privacy complaint, you may escalate to the relevant data protection supervisory authority in the jurisdiction where wa338 holds its international gaming licence.
Have more questions about how wa338 handles your data? Our support team is available around the clock. Or explore our platform and start playing with full confidence in your data security.