Privacy Policy

1. Introduction

At gwg288, protecting the privacy of our players is as important to us as delivering a world-class betting and casino experience. This Privacy Policy explains, in plain and transparent terms, exactly what personal data we collect, how and why we use it, with whom we share it, how long we retain it, and what controls you have over your own information.

Our platform primarily serves players based in Indonesia, where we support local payment methods including BCA, BRI, BNI, and Mandiri as well as e-wallets such as OVO, DANA, and GoPay. Because we handle financial and identity data, we apply stringent data security standards aligned with internationally recognized best practices.

This Policy applies to all data collected through our website (https://gwg288.cam), our mobile web application, customer support channels, and any related communications. Please read it carefully. If you have questions, contact us at [email protected] or via 24/7 Live Chat.

Your Consent: By registering a gwg288 account, placing a bet, or using any feature on our platform, you confirm that you have read and accepted this Privacy Policy in full.

2. Definitions

For clarity throughout this Policy, the following terms carry the meanings assigned below:

"Personal Data" — any information that directly or indirectly identifies a natural person, such as a name, ID number, email address, IP address, or transaction history.
"Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
"Data Controller" — gwg288, which determines the purposes and means of processing your Personal Data.
"Data Processor" — a third party that processes Personal Data on behalf of gwg288 under a written agreement (e.g., payment gateways, KYC providers, game studios).
"User" / "Player" / "you" — any individual who accesses or uses gwg288 services.
"KYC" — Know Your Customer — the identity verification process required by anti-money laundering (AML) regulations.
"Cookies" — small text files placed on your device to recognize your browser and store session information.

3. Data We Collect

gwg288 collects Personal Data through several channels depending on how you interact with our platform.

3.1 Data You Provide Directly

Registration data: full name, date of birth, email address, mobile phone number, residential address, and a chosen username and password.
KYC / Identity documents: national ID (KTP), passport, driving license, and/or proof of address (utility bill, bank statement) when verification is requested.
Payment information: bank account numbers (BCA, BRI, BNI, Mandiri), e-wallet identifiers (OVO, DANA, GoPay), and transaction references. We do not store full card numbers on our servers.
Communications: messages sent to our Live Chat, email support ([email protected]), or WhatsApp support line, including any attachments you share.
Responsible Gaming declarations: self-exclusion requests, deposit limits, and session-time preferences.

3.2 Data Collected Automatically

Device & browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
Usage data: pages visited, time on site, features used, bet history, game session data, search queries within the platform, and clickstream data.
Cookies and similar technologies: session cookies, persistent cookies, web beacons, and local storage objects. See Section 9 for full Cookie details.
Geolocation data: approximate location derived from your IP address. We do not collect precise GPS location without explicit permission.
Referral data: the URL or affiliate code through which you arrived at gwg288, where applicable.

3.3 Data from Third Parties

Identity verification results from licensed KYC/AML service providers.
Fraud-prevention signals from payment processors and financial intelligence platforms.
Publicly available data (e.g., sanctions lists, politically exposed person databases) used for compliance screening.

4. How We Use Your Data

gwg288 processes your Personal Data only for specific, lawful purposes. The table below maps each primary purpose to its legal basis:

Purpose	Examples	Legal Basis
Account Management	Creating your account, authenticating logins, password resets	Contractual necessity
Payment Processing	Crediting deposits via BCA/BRI/BNI/Mandiri, processing withdrawals, issuing VIP bonuses	Contractual necessity
Identity Verification (KYC)	Confirming age (21+), verifying identity documents, screening against sanctions lists	Legal obligation
Anti-Fraud & AML	Detecting suspicious betting patterns, monitoring irregular transactions, preventing money laundering	Legal obligation / Legitimate interests
Customer Support	Responding to Live Chat inquiries, resolving disputes, processing complaints	Contractual necessity
Personalization	Recommending games or markets based on your preferences, displaying relevant promotions	Legitimate interests / Consent
Marketing Communications	Sending promotional emails, bonus notifications, sports betting alerts (opt-in only)	Consent
Responsible Gaming	Monitoring for problem gambling indicators, applying self-exclusion or deposit limits	Legal obligation / Legitimate interests
Analytics & Improvement	Understanding platform usage, improving UX, fixing bugs, enhancing security	Legitimate interests
Legal Compliance	Responding to lawful regulatory requests, maintaining audit trails	Legal obligation

5. How We Share Your Data

gwg288 does not sell your Personal Data to any third party for commercial purposes. We share data only in the limited circumstances described below, and only to the extent necessary for each purpose.

5.1 Service Providers (Data Processors)

We engage trusted third-party processors under strict data processing agreements to help operate our platform:

Payment gateways: for processing deposits and withdrawals via Indonesian banks and e-wallets.
KYC / identity verification providers: for document verification and anti-fraud screening.
Game software providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe receive session data necessary to operate their games.
Cloud hosting and cybersecurity providers: for platform infrastructure, DDoS protection, and data backup.
Customer communication tools: for delivering Live Chat, email, and WhatsApp support.

5.2 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to governmental or regulatory authorities, law enforcement agencies, or courts when required by applicable law, a valid legal order, or to protect the rights, safety, or property of gwg288, our players, or the public.

5.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of gwg288 assets, Personal Data may be transferred to the successor entity. You will be notified via email or a prominent site notice before your data is transferred and becomes subject to a different privacy policy.

No Data Selling: gwg288 has never sold, and will never sell, your Personal Data to advertisers, data brokers, or any other commercial third party.

6. International Data Transfers

Because gwg288 operates internationally with game studios and cloud infrastructure across multiple regions, your Personal Data may be transferred to and processed in countries outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard contractual clauses approved by relevant data protection authorities
Transfers only to countries or organizations that maintain adequate data protection standards
Technical and organizational security measures applied uniformly regardless of geography

By using gwg288, you acknowledge that your data may be processed outside your country of residence. We take all reasonable steps to ensure your data remains protected to the same standard regardless of where it is processed.

7. Data Retention

gwg288 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. The following general retention periods apply:

Account data: retained for the duration of your active account, plus 5 years after account closure to satisfy AML record-keeping requirements.
KYC / identity documents: retained for at least 5 years from the date of account closure or last transaction, as required by anti-money laundering regulations.
Transaction and betting records: retained for 5 years minimum to comply with financial reporting and regulatory obligations.
Customer support communications: retained for 2 years from the date of the last interaction.
Marketing preferences: retained until you withdraw consent or close your account.
Cookie and analytics data: session data is deleted when you close your browser; persistent cookie data is retained for up to 12 months.

When Personal Data is no longer required, gwg288 deletes or anonymizes it securely so that it can no longer be associated with you.

8. Your Data Rights

You have the following rights with respect to your Personal Data held by gwg288:

Right of Access: You may request a copy of the Personal Data we hold about you at any time, free of charge.
Right to Rectification: If any of your data is inaccurate or incomplete, you may ask us to correct it.
Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restrict Processing: You may request that we limit the ways we use your data while a dispute is being resolved.
Right to Data Portability: You may request a copy of data you provided to us in a structured, machine-readable format.
Right to Object: You may object to processing based on legitimate interests, or to direct marketing at any time.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team via Live Chat or email at [email protected]. We will respond within 30 days of receiving your request. In certain circumstances we may need to verify your identity before processing your request.

Data Requests: Send your data access, correction, or deletion request to [email protected] with the subject line "Data Rights Request" and your registered account email address.

9. Cookies and Tracking Technologies

gwg288 uses cookies and similar technologies to ensure our platform functions correctly, remember your preferences, analyze usage patterns, and deliver relevant promotions. Below is a summary of the cookie categories we use:

Cookie Type	Purpose	Duration
Strictly Necessary	Enable core functions such as login sessions, security tokens, and shopping cart equivalents (bet slip). Cannot be disabled.	Session
Functional	Remember your preferences (language, odds format, preferred payment method) so you don't need to reconfigure on each visit.	Up to 12 months
Analytical / Performance	Collect anonymized data about how players navigate the site, which pages are most visited, and where errors occur — used to improve the platform.	Up to 12 months
Marketing / Targeting	Track which promotions you have seen or clicked, and help us display relevant bonus offers. Only activated with your consent.	Up to 6 months

You can manage or withdraw your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies may impair platform functionality. Disabling analytical or marketing cookies will not affect your ability to place bets or access your account.

10. Data Security

gwg288 implements a comprehensive set of technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure:

256-bit SSL/TLS encryption on all data in transit between your browser and our servers.
AES-256 encryption for sensitive data at rest, including identity documents and payment references.
Two-factor authentication (2FA) available for all player accounts and mandatory for staff accounts.
Regular penetration testing and third-party security audits conducted at least annually.
Strict access controls: only authorized personnel with a demonstrable need are permitted to access Personal Data, and all access is logged and audited.
Intrusion detection systems and real-time DDoS protection to prevent unauthorized access attempts.
Secure data centers with physical access controls, environmental monitoring, and redundant power and network connections.

Despite these measures, no system connected to the internet can guarantee absolute security. In the unlikely event of a data breach that poses a significant risk to your rights, gwg288 will notify affected users and relevant authorities as required by applicable law, within 72 hours of becoming aware of the incident.

11. Minors and Age Verification

gwg288 strictly prohibits use of its platform by individuals under 21 years of age. We do not knowingly collect Personal Data from anyone under 21. Age verification is a mandatory step during account registration and KYC processes.

If we discover or are notified that we have inadvertently collected data from a person under 21, we will immediately suspend the relevant account, delete all associated Personal Data, and reverse any financial transactions to the extent possible. If you believe a minor has accessed our platform, please notify us immediately at [email protected].

12. Third-Party Services

Our platform integrates with third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) and payment processors. When you interact with a third-party game environment or payment interface embedded within gwg288, that third party may independently collect data governed by its own privacy policy.

gwg288 is not responsible for the privacy practices of third-party game providers or payment gateways beyond the data processing agreements we hold with them. We encourage you to review the privacy policies of any third-party service you interact with.

13. Changes to This Privacy Policy

gwg288 may update this Privacy Policy periodically to reflect changes in our data practices, applicable regulations, or platform features. When we make material changes, we will:

Update the "Last Updated" date at the top of this page.
Display a prominent notice on the gwg288 homepage for at least 14 days following publication.
Send a notification to your registered email address for significant changes that affect your rights.

Your continued use of gwg288 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should close your account and cease using our Services before the updated Policy takes effect.

14. Contact and Data Protection Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the gwg288 Data Protection team through any of the following channels:

24/7 Live Chat: Available on every page of the gwg288 website — the fastest way to reach us.
Email: [email protected] — please include "Privacy Inquiry" in the subject line along with your registered username.

We are committed to addressing all privacy-related concerns promptly, fairly, and in full compliance with applicable data protection standards. Your trust is the foundation of everything we do at gwg288.