Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out how wso123 ("we", "us", "our") collects, processes, stores, shares, and protects personal data provided by users ("you", "Player") of the website located at https://wso123.cam and all associated sub-domains and mobile interfaces (collectively, the "Platform").

wso123 operates as an international online gaming platform serving players primarily based in Indonesia. We understand that privacy is a fundamental concern for our users, particularly in the context of financial transactions and identity verification required for gaming accounts. This Policy is designed to be transparent, comprehensive, and written in plain language so you understand exactly how your information is handled at every stage of your relationship with us.

This Policy should be read alongside our Terms & Conditions, which govern the overall use of the wso123 Platform. By registering an Account or continuing to use our Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Data Controller

For the purposes of applicable international data protection frameworks, wso123 acts as the data controller in respect of personal data collected through the Platform. This means we determine the purposes for which and the manner in which your personal data is processed.

Where we engage third-party service providers to process data on our behalf — such as payment processors, KYC verification services, or cloud infrastructure providers — those parties act as data processors operating under our instruction and bound by contractual data protection obligations consistent with international data protection standards.

To exercise any of your data rights described in Section 11 of this Policy, or to submit a privacy-related inquiry, please contact our Data Protection team at: [email protected] (plain text — not a clickable link), referencing "Data Privacy Request" in your subject line.

3 Data We Collect

wso123 collects personal data in the following categories. We apply a principle of data minimization — we collect only what is necessary for the specified purpose and do not retain data beyond the period required for that purpose.

4 How We Collect Data

wso123 collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when you: register an Account (name, email, date of birth, phone number); complete KYC verification (identity documents, selfie, proof of address); make a deposit or withdrawal (bank account details, e-wallet details); contact customer support (chat transcripts, emails); set Account preferences including responsible gaming limits; or participate in promotions and surveys.

4.2 Automated Collection

When you use the Platform, our servers and analytics systems automatically collect technical and behavioral data including your IP address, device identifiers, browser fingerprint, session duration, pages visited, and interaction events. This collection occurs through server logs, cookies, pixel tags, and similar tracking technologies described in Section 12 of this Policy.

4.3 Third-Party Sources

In certain circumstances, wso123 may receive personal data about you from third-party sources, including: identity verification agencies used for KYC processing; payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet providers) confirming transaction details; fraud detection and AML screening services; and publicly available sources such as sanctions lists and politically exposed persons (PEP) databases. Data received from third parties is combined with data you have provided directly only to the extent necessary for the stated purpose.

4.4 Referral Sources

If you arrive at the wso123 Platform via an affiliate link or marketing referral, we may collect the referral identifier associated with that link. This data is used solely for affiliate commission tracking and marketing effectiveness analysis. It does not affect the terms of your Account or the services available to you.

5 Purposes of Processing

wso123 processes your personal data for the following specific, identified purposes. We do not use your data for any purpose incompatible with those listed below without first notifying you and, where required, obtaining your additional consent.

5.1 Account Management

To create, maintain, and administer your wso123 Account, including verifying your identity, securing your login credentials, processing password resets, managing Account preferences, and communicating essential Account-related notifications such as security alerts and policy updates.

5.2 Service Delivery

To provide the core Services of the Platform, including sports betting on markets such as BRI Liga 1 (with clubs including Persija Jakarta, Persib Bandung, and Bali United), international leagues (EPL, La Liga, Serie A, Bundesliga, Champions League), togel (Indonesia's traditional numbers lottery) markets, live casino games powered by providers such as Evolution Gaming and Pragmatic Play, slot games, and crash games.

5.3 Payment Processing

To process deposits and withdrawals via Indonesian local banks and e-wallets, verify that payment accounts match the registered Account holder's name, detect and investigate payment anomalies, and maintain financial transaction records for audit and compliance purposes.

5.4 KYC & AML Compliance

To verify your identity and age (minimum 21 years), conduct anti-money laundering (AML) checks, screen against sanctions and PEP lists, perform source-of-funds assessments for high-value accounts, and meet ongoing regulatory obligations under applicable international gaming and financial crime prevention frameworks.

5.5 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity including bonus abuse, multi-accounting, chargeback fraud, money laundering, unauthorized Account access, and exploitation of game mechanics or technical vulnerabilities. This includes the use of automated pattern-recognition systems that analyze betting behavior and transaction patterns.

5.6 Responsible Gaming

To monitor player behavior for indicators of problem gambling; to implement deposit limits, loss limits, session time limits, and self-exclusion requests; to send reality check notifications; and to proactively reach out to players whose behavioral data suggests they may be experiencing gambling-related harm. All responsible gaming processing is conducted in the interest of the Player and is not used for any commercial profiling purpose.

5.7 Customer Support

To respond to your inquiries, resolve disputes over bet settlements or payments, investigate complaints, and maintain records of support interactions for quality assurance, staff training, and regulatory audit purposes.

5.8 Marketing & Promotions

Where you have provided explicit consent, to send you promotional offers, bonus notifications, seasonal campaign communications (such as during Ramadhan, Idul Fitri, or Indonesian Independence Day on 17 August), and personalized game recommendations. You may withdraw consent for marketing communications at any time via your Account notification preferences or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing prior to withdrawal.

5.9 Platform Improvement

To analyze aggregated, anonymized usage data to improve Platform performance, optimize user experience, identify technical issues, prioritize feature development, and enhance the quality of our games and betting markets. Data used for this purpose is de-identified wherever technically feasible.

5.10 Legal & Regulatory Obligations

To comply with applicable laws and licensing requirements, respond to lawful requests from competent authorities, enforce our Terms & Conditions, protect the legal rights of wso123 and its users, and maintain records required under international AML and gaming regulatory frameworks for the mandatory retention periods described in Section 9.

6 Legal Basis for Processing

wso123 processes personal data on the following legal bases in accordance with internationally recognized data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and wso123 — specifically, providing the gaming Services you have registered for, processing your deposits and withdrawals, and managing your Account. Without this processing, we cannot deliver the Services.
• Legal Obligation: Processing required for wso123 to comply with applicable legal and regulatory requirements, including AML obligations, KYC requirements, record-keeping mandates, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of wso123's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, security monitoring, Platform optimization, and responsible gaming analytics. We conduct a balancing assessment for each legitimate-interest purpose to confirm that your interests and rights are appropriately protected.
• Consent: Processing based on your freely given, specific, and informed consent — principally marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing or your continued use of the core Services.
• Vital Interests: In exceptional circumstances, we may process data where necessary to protect the vital interests of a user or another person — for example, where a Player's responsible gaming interactions suggest an immediate risk to their wellbeing.

7 Data Sharing & Disclosure

wso123 does not sell, rent, or trade your personal data to third parties for their independent commercial use. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

7.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process data strictly on our behalf and under our instruction, bound by contractual data processing agreements. These include: KYC identity verification platforms; payment gateway and banking partners (including the Indonesian banks and e-wallet providers listed in our Terms & Conditions); cloud hosting and infrastructure providers; customer support platform vendors; fraud detection and AML screening services; game content providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft); and email and notification delivery services.

7.2 Regulatory & Law Enforcement Authorities

wso123 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts when required to do so by law, when responding to a legally valid request, or when we believe disclosure is necessary to prevent a crime, protect national security, or protect the safety of any person. We will notify you of such disclosures where we are legally permitted to do so.

7.3 Licensing Authorities

As a condition of our international gaming licence, wso123 may be required to provide player data to our licensing authority for audit, compliance, or investigation purposes. Such disclosures are governed by the licence agreement and applicable regulatory frameworks.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of wso123's business, personal data held by us may be transferred to the acquiring entity as part of that transaction, subject to that entity assuming equivalent data protection obligations. You will be notified of any such transfer that materially affects your privacy rights.

7.5 Affiliate Partners

Where you arrived at the Platform via an affiliate marketing channel, we may share limited, aggregated conversion data (e.g., whether a referral resulted in a registered Account) with the referring affiliate for commission calculation purposes. We do not share identifiable personal data such as your name, financial details, or betting history with affiliate partners.

8 International Data Transfers

wso123 operates as an international platform. Your personal data may be transferred to, stored in, and processed in countries other than Indonesia, including countries where our cloud infrastructure providers, game studios, or KYC processing partners maintain data centers or operations.

Whenever we transfer personal data internationally, we implement appropriate safeguards to ensure that your data receives a level of protection consistent with internationally recognized data protection standards. These safeguards may include: standard contractual clauses binding the receiving party to specific data protection obligations; adequacy assessments confirming that the destination country maintains an acceptable data protection framework; or binding corporate rules where applicable within a corporate group.

By using the wso123 Platform, you acknowledge that your data may be processed in international locations as described above. If you have concerns about specific transfer mechanisms, please contact our Data Protection team at the address in Section 16.

9 Data Retention

wso123 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Active Account data (identity, contact, financial, transactional) is retained for the duration your Account is open and active.
• KYC documentation (identity cards, proof of address, source-of-funds records) is retained for a minimum of five (5) years following Account closure, consistent with international AML regulatory requirements.
• Financial transaction records (deposit and withdrawal history, betting records) are retained for a minimum of five (5) years following the date of the transaction.
• Customer support communications are retained for three (3) years following the closure of the support interaction, or five (5) years where the interaction relates to a formal complaint or dispute.
• Marketing consent records are retained for the duration of the consent plus two (2) years to demonstrate compliance with consent obligations.
• Technical and behavioral logs (IP logs, session data) are retained for up to twelve (12) months from collection, unless a longer period is required for an active fraud investigation or legal proceeding.
• Dormant Account data: Accounts inactive for 24 consecutive months are flagged under our dormancy policy. We will notify you at the email address on record before initiating any data deletion process under the dormancy policy.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Anonymized data derived from your usage may be retained indefinitely for aggregate analytical purposes.

10 Security Measures

wso123 implements a multi-layered security framework designed to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our security measures include, but are not limited to, the following:

• TLS/SSL Encryption: All data transmitted between your device and the wso123 Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). Look for the padlock icon in your browser's address bar when using our Platform.
• Encryption at Rest: Sensitive data stored in our databases — including KYC documents, financial account details, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): We strongly encourage all Players to enable 2FA on their Accounts. 2FA adds a second layer of protection by requiring a one-time code from your registered mobile number in addition to your password at each login.
• Access Controls: Access to personal data within wso123 is restricted on a strict need-to-know basis. Internal staff members can access only the categories of data necessary for their specific role. Access rights are reviewed quarterly.
• Penetration Testing: Our Platform undergoes regular third-party security penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: wso123 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay and take immediate remedial action.
• Staff Training: All wso123 employees and contractors with access to personal data receive mandatory data protection training at onboarding and annually thereafter.

11 Your Privacy Rights

wso123 respects your rights over your personal data. Subject to applicable law and certain legitimate exceptions (such as legal retention obligations and ongoing investigations), you have the following rights:

11.1 How to Exercise Your Rights

To exercise any of the rights listed above, submit a written request to our Data Protection team at [email protected] with the subject line "Data Rights Request — [Right Type]". Include your registered Account username and email address so we can verify your identity before processing the request. We will respond within 30 days of receiving a verifiable request. Complex or multiple simultaneous requests may require an extension of up to an additional 60 days, of which we will notify you promptly.

11.2 Exceptions & Limitations

Certain rights are subject to limitations under applicable law. For example, the right to erasure cannot override our legal obligation to retain KYC and financial records for AML compliance purposes. Where we are unable to fulfill a request in full, we will explain the specific legal basis for any limitation and, where possible, fulfill the request partially.

12 Cookies & Tracking Technologies

wso123 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a web server. Cookies allow us to recognize your device on return visits, maintain your session, and collect behavioral analytics data.

12.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies. These cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as language settings, last-used deposit method, responsible gaming limit preferences, and display settings. Disabling these cookies may reduce the personalization of your experience.
• Analytics Cookies: Collect anonymized or pseudonymized data about how users navigate and use the Platform — pages visited, features clicked, session duration, error occurrences. This data helps us identify usability issues and prioritize improvements. Analytics cookies are set by our internal systems and may also include third-party analytics tools.
• Marketing & Affiliate Cookies: Track referral source identifiers when you arrive via an affiliate link and, where consent is given, monitor the effectiveness of promotional campaigns. These cookies are only set with your consent.

12.2 Cookie Control

You may control non-essential cookies via your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, manage, and delete cookies through the browser's privacy settings panel. Please note that blocking strictly necessary cookies will prevent the Platform from functioning correctly, as it relies on session cookies to maintain your authenticated state during gameplay and financial transactions.

12.3 Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. wso123 currently does not alter its data collection practices in response to DNT signals because there is no universally accepted standard for interpreting these signals. We are committed to monitoring the evolution of DNT standards and will update this Policy accordingly if we implement DNT support.

13 Protection of Minors

The wso123 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires you to confirm your date of birth, and KYC verification includes age confirmation against government-issued identity documents.

If we become aware that personal data has been submitted by a person under the age of 21 — whether through a misrepresentation during registration, a third-party report, or our own detection processes — we will immediately suspend the Account, reverse any remaining balance to the originating payment source, delete the personal data collected, and, where appropriate, report the matter to relevant authorities.

If you are a parent or guardian and believe that a minor under your supervision has created a wso123 Account without your knowledge, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and act on all credible reports within 24 hours.

14 Third-Party Services & Linked Content

The wso123 Platform integrates games and services from third-party studios and technology providers, including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft. When you access these games within our Platform, the game content is delivered via the provider's technology infrastructure. wso123's data processing agreements with these studios govern how technical data is handled in the delivery of game content.

Some game studios may operate their own analytics or fraud detection systems in connection with game delivery. These are subject to the studios' own privacy policies in addition to the contractual obligations they owe to wso123. We recommend reviewing the privacy policies of major game providers if you have specific concerns about game-level data processing.

The wso123 Platform does not contain links to third-party websites that are unrelated to our Services. Any content linked from within the Platform (such as responsible gaming resources) is reviewed for relevance and trustworthiness. wso123 is not responsible for the privacy practices of any external website you may visit independently.

15 Amendments to This Policy

wso123 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes — those that significantly affect your privacy rights or the way we process your personal data — we will notify you via email to your registered address and via an on-screen notification at your next login, no less than seven (7) days before the change takes effect.

Minor or administrative amendments (such as correcting typographical errors, clarifying existing provisions, or updating contact details) may be made without advance notice and will take effect upon publication on this page. The "Effective Date" displayed at the top of this Policy reflects the date of the most recent substantive revision.

Your continued use of the wso123 Platform after the effective date of any a mendment constitutes your acceptance of the revised Policy. If you do not agree with any changes, you must cease using the Platform and may request Account closure by contacting our support team.

16 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wso123 handles your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy inquiries promptly, professionally, and in accordance with applicable data protection standards.

16.1 Data Protection Contact

Email (plain text — not a clickable link): [email protected]

Please use the subject line format: "Privacy Inquiry — [Nature of Request]" (e.g., "Privacy Inquiry — Data Access Request", "Privacy Inquiry — Marketing Opt-Out", "Privacy Inquiry — Data Breach Concern"). This ensures your message is routed to the correct team member without delay.

Our Data Protection team is staffed during WIB business hours (Monday to Saturday, 09:00–21:00 WIB, UTC+7), with email monitoring extended to cover WITA (UTC+8) and WIT (UTC+9) time zones where operationally feasible. We target a first response within 24 hours and a full resolution within 30 calendar days for standard requests.

16.2 Complaints

If you are not satisfied with our response to a privacy complaint, or if you believe that wso123 has processed your personal data in a manner inconsistent with this Policy or applicable data protection law, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. Indonesian residents may wish to consult Kominfo (the Ministry of Communication and Information Technology) regarding data protection matters, noting that Indonesia's Personal Data Protection Law (UU PDP) establishes baseline rights for data subjects within the jurisdiction.

We encourage you to contact us directly before pursuing a formal regulatory complaint, as the majority of privacy concerns can be resolved quickly and informally through our internal resolution process.