Privacy Policy — gws88

gws88 ("gws88", "we", "us", "our") operates the online betting and casino platform accessible at https://gws88.cam (the "Platform"). This Privacy Policy describes how gws88 collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who visit, register on, or use the Platform ("Users", "you").

gws88 acts as the Data Controller in respect of the personal data processed under this Policy. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable international data protection standards, including principles drawn from the General Data Protection Regulation (GDPR) where relevant, and in compliance with our obligations to Indonesian regulatory authorities.

This Policy should be read alongside the gws88 Terms & Conditions, which govern your use of the Platform. By registering a gws88 Account or using any part of our Platform, you acknowledge that you have read and understood this Privacy Policy.

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including but not limited to name, email address, identification number, location data, or online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, gws88.
• "Data Processor" means any third party that processes Personal Data on behalf of gws88, such as payment service providers, fraud detection vendors, or cloud infrastructure providers.
• "KYC Data" means identity verification documentation collected as part of gws88's Know Your Customer process, including government-issued identification, proof of address, and date-of-birth evidence.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including financial information, government-issued ID numbers, and any data relating to health or criminal record, where applicable.
• "Cookie" means a small text file stored on your device by your web browser when you visit a website, used to remember session state and preferences.
• "WIB" means Western Indonesia Time, UTC+7, the primary operating timezone of gws88.

gws88 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

gws88 does not intentionally collect Special Categories of Personal Data (such as health data, religious beliefs, or political opinions) unless specifically required by law or by a responsible gaming intervention triggered at the Player's request.

gws88 collects Personal Data through the following channels:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated technologies: Technical and Usage Data collected automatically when you visit or interact with the Platform, including through cookies, server logs, and analytics tools.
• Third-party sources: Identity verification and fraud screening data from KYC service providers; transaction data from payment processors including Indonesian banks and e-wallet operators; geolocation data from IP intelligence services used to enforce eligibility requirements.
• Responsible gaming tools: Data generated when you activate deposit limits, loss limits, self-exclusion, or reality-check features on your Account.

gws88 processes your Personal Data for the following purposes:

• Account Management: Creating, maintaining, securing, and closing your gws88 Account; authenticating your identity at login; enforcing account-level limits and responsible gaming settings.
• Service Delivery: Processing deposits and withdrawals through BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja; settling bets and game outcomes; delivering promotional offers.
• KYC & AML Compliance: Verifying your identity and age (21+ requirement) as required under our licensing obligations and international anti-money-laundering standards.
• Fraud Prevention & Security: Detecting and investigating suspicious activity, account takeover attempts, bonus abuse, and collusion; protecting the integrity of the Platform and the fairness of all game outcomes.
• Customer Support: Responding to your enquiries, resolving complaints, and providing technical assistance via live chat, email, and WhatsApp.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling; administering self-exclusion, deposit limits, and cooling-off requests; contacting players where intervention is warranted.
• Platform Improvement: Analysing Usage Data in aggregate (anonymised where possible) to improve page performance, game selection, and the overall player experience.
• Legal Obligations: Complying with applicable laws, regulations, court orders, and requests from competent regulatory or law enforcement authorities.

gws88 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to deliver the services you have contracted with us for, including Account management, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC verification, AML reporting, and age verification.
• Legitimate interests: Processing carried out in pursuit of gws88's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent (e.g., for optional marketing communications), you may withdraw that consent at any time by contacting our support team without affecting the lawfulness of processing prior to withdrawal.

gws88 does not sell your Personal Data. We share Personal Data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) for processing deposits and withdrawals. These providers operate under their own privacy policies and relevant Indonesian banking regulations.
• KYC & Identity Verification Vendors: Third-party service providers who assist with identity document verification and fraud screening as part of our KYC process. These vendors are contractually bound to process data only on gws88's instructions.
• Game Content Providers: Platform providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, and Spribe receive anonymised or pseudonymised session tokens to deliver their game content. They do not receive your full identity data.
• Cloud Infrastructure Providers: Secure hosting and database services used to operate the gws88 Platform. These providers are contractually bound to maintain strict data security standards.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or lawful authority instruction, gws88 will disclose Personal Data to competent regulatory or law enforcement bodies.

gws88 retains Personal Data for no longer than is necessary for the purposes described in this Policy, or as required by applicable regulatory obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

gws88 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction:

• Transport security: All data in transit between your device and gws88 servers is encrypted using TLS 1.3 with 256-bit encryption keys.
• Data-at-rest encryption: Sensitive Personal Data stored in gws88 databases is encrypted using AES-256 symmetric encryption.
• Access controls: Access to Personal Data is restricted to authorised gws88 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Regular audits: gws88 conducts periodic internal security reviews and commissions independent penetration tests to identify and remediate vulnerabilities in our infrastructure.
• Incident response: gws88 maintains a documented data breach response plan. In the event of a security incident that poses a high risk to your rights and freedoms, we will notify affected Users without undue delay and in accordance with applicable reporting obligations.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be completely secure. If you believe your Account has been compromised, please contact our support team immediately at [email protected] (plain text).

gws88 uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management, login persistence, and security token validation. These cannot be disabled without breaking Platform functionality.
• Performance & Analytics Cookies: Used to measure Platform performance metrics, identify pages with technical errors, and understand aggregate user behaviour patterns. Data collected is anonymised where possible and not attributed to individual users.
• Fraud Prevention Cookies: Used to identify and flag suspicious access patterns, bot activity, and multi-account behaviour. These serve a legitimate security interest.

gws88 does not use third-party advertising cookies, social media tracking pixels, behavioural retargeting technologies, or any cookie that shares your data with advertising networks.

As an internationally operated platform, gws88 may transfer your Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, gws88 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that provided under this Policy.

Safeguards employed for international transfers include:

• Data processing agreements with receiving entities that include standard contractual clauses aligned with internationally recognised data protection standards.
• Transfer only to jurisdictions with adequate data protection frameworks, or to entities that have implemented equivalent technical and organisational controls.
• Restriction of transferred data to the minimum necessary for the specific processing purpose.

As a gws88 Account holder, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team at [email protected] (plain text — not a clickable link). gws88 will respond within 30 days of receiving a verifiable request.

Where gws88 relies on your consent for a specific processing activity, you may withdraw that consent at any time by contacting our support team. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

gws88 is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. All Account registrations are subject to mandatory age verification as part of the KYC process.

If gws88 discovers that Personal Data has been collected from an individual who is under 21, we will immediately suspend the relevant Account, return any real-money balance to the source payment method, and delete all Personal Data associated with that Account, subject only to any mandatory regulatory retention obligations.

If you have reason to believe that a person under 21 has registered an Account on gws88, please contact us immediately at [email protected] (plain text) so that we can investigate and take appropriate action without delay.

gws88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as a change to the categories of data we collect, new third-party sharing arrangements, or changes to retention periods — we will provide advance notice via email to your registered Account address and/or by displaying a prominent notification on the Platform at least 14 days before the changes take effect.

The version number and "Last Updated" date displayed at the top of this document indicate the current applicable version. Continued use of the gws88 Platform after the effective date of an updated Policy constitutes your acknowledgement of the changes. If you do not agree to a material change, you may request Account closure in accordance with the gws88 Terms & Conditions.

All prior versions of this Privacy Policy are superseded by the current version. Historical versions are available upon request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by gws88, please contact us through any of the following channels:

• Email (Data & Privacy): [email protected] (plain text — not a clickable link). Mark your subject line "Privacy Request". Response within 4 business hours.
• Live Chat: Available 24/7 on the Platform. Indonesian-speaking agents on duty. Average first-response time: under 90 seconds.
• WhatsApp: +62 811 0000 8888 (plain text — not a clickable link). Available 06:00–24:00 WIB.

All formal data subject requests will be acknowledged within 3 business days and resolved within 30 calendar days. Where a request is complex or where gws88 receives a high volume of requests, the resolution period may be extended by a further 60 days, with notice provided to you within the initial 30-day period explaining the reason for the extension.