gws88 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "gws88", "we", "us", "our" — the gws88 platform, its operators, and any affiliated entities responsible for operating the betting and gaming services available at https://gws88.ws.
• "Member", "you", "your" — any individual who has registered a gws88 account or who visits and uses the gws88 Platform.
• "Personal Data" — any information that identifies or could reasonably identify a living individual, including but not limited to name, date of birth, national identity number, email address, phone number, financial account details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Platform" — the gws88 website at https://gws88.ws, all sub-pages, game lobbies, account management interfaces, and mobile-optimised versions.
• "KYC" — Know Your Customer, the identity and document verification process gws88 conducts to confirm member identity and eligibility.
• "Third Party" — any person or organisation other than gws88 and the Member.
• "Cookie" — a small text file placed on your device by the Platform for the purposes described in Section 7 of this Policy.

gws88 collects Personal Data across several categories depending on the nature of your interaction with the Platform. The categories and specific data points we may collect are as follows:

gws88 collects Personal Data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated technical collection: Technical Data collected automatically each time you access the Platform via our web server logs, session management systems, and analytics tools. This includes IP addresses, device identifiers, and browser fingerprints used for security and fraud detection purposes.
• Cookies and similar technologies: First-party cookies and local storage tokens placed on your device when you visit the Platform. See Section 7 for full details on our cookie practices.
• Payment processing partners: Transaction confirmation data received from Indonesian banking networks (BI-FAST, RTGS) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you make deposits or request withdrawals. gws88 does not receive or store your full bank account credentials — only the account name, account number tail, and transaction reference are shared with us.
• Game studios and content providers: Aggregated session data from game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft is shared with gws88 in an anonymised or pseudonymised form for game performance analysis and dispute resolution.
• Identity verification services: Where gws88 uses a third-party KYC provider to assist with document verification, that provider returns a verified/not-verified result and a confidence score to gws88. The full document image is processed by the KYC provider under their own data processing agreement and is not stored on gws88's core platform servers beyond the period required for the verification process.

gws88 uses the Personal Data we collect for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account balance in IDR, and provide you with access to all gws88 Services.
• Transaction processing: To process deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja; to reconcile your account balance; and to maintain accurate financial records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, bonus abuse, and other prohibited conduct as described in our Terms & Conditions. Technical Data — particularly IP address, device fingerprint, and login timestamps — is central to this purpose.
• Regulatory compliance: To comply with applicable anti-money laundering (AML), know-your-customer (KYC), and counter-terrorism financing (CTF) obligations applicable to internationally licensed gaming operators.
• Customer support: To respond to your enquiries, resolve disputes, process responsible gaming requests (deposit limits, self-exclusion, cooling-off periods), and send you service-critical notifications.
• Platform improvement: To analyse aggregated and anonymised usage patterns to improve the Platform's performance, game selection, user interface, and overall member experience.
• Promotions and marketing: To send you personalised bonus offers, seasonal promotions (including offers tied to Idul Fitri, Ramadhan, Imlek, and Indonesian Independence Day), and platform updates, where you have not opted out of such communications. You may unsubscribe from marketing communications at any time by contacting our support team.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour and, where appropriate, to proactively reach out to members who may benefit from responsible gaming tools or support resources.

gws88 processes your Personal Data under the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between you and gws88 — specifically, operating your account, processing transactions, and delivering the gaming services you have requested. Without this processing, we cannot provide the Services.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including AML/KYC/CTF requirements, financial record-keeping standards, and cooperation with lawful law enforcement requests.
• Legitimate interests: Processing undertaken to pursue gws88's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, informed consent — specifically, marketing communications and optional analytics. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing or your ability to continue using the Platform.

gws88 does not sell, rent, or trade your Personal Data. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data necessary to process deposits and withdrawals on your behalf.
• KYC and identity verification providers: Third-party KYC services engaged by gws88 to assist with document verification receive Personal Data strictly under a data processing agreement that prohibits any secondary use of your information.
• Game content studios: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive a pseudonymised player identifier and session data to facilitate game delivery and resolve technical disputes. They do not receive your identity or financial data.
• Fraud prevention and security services: Specialist third-party fraud detection tools may receive anonymised or pseudonymised Technical Data (IP address, device fingerprint, session behaviour) to assist in identifying prohibited conduct patterns.
• Legal and regulatory authorities: gws88 will disclose Personal Data to competent authorities, courts, or regulators when required to do so by applicable law, valid legal process, or a lawful order. We will notify you of any such disclosure unless prohibited from doing so by law.
• Corporate successors: In the event of a merger, acquisition, restructuring, or sale of substantially all of gws88's assets, member data may be transferred to the successor entity. You will be notified of any such transfer via your registered contact details prior to your data being subject to a materially different privacy policy.

gws88 uses cookies and similar technologies to operate the Platform effectively, maintain your authenticated session, prevent fraud, and understand how members use our services. The cookies we use fall into the following categories:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. You cannot opt out of these cookies and continue to use the Platform.
• Functional cookies: Remember your preferences — such as your preferred language display and responsible gaming settings — so you do not need to re-enter them on each visit.
• Analytics cookies: Collect anonymised data about how members navigate the Platform (pages visited, time on site, game categories browsed) to help us improve the user experience. These cookies do not identify you personally.
• Security cookies: Used specifically for fraud detection and bot prevention. They track device characteristics and session behaviour patterns to identify suspicious activity, including multi-accounting attempts.

gws88 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not affect your ability to use core Platform features, but may limit certain personalisation elements.

gws88 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your active membership plus 5 years following account closure, to meet AML/KYC record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC document copies: Retained for the duration of your membership plus 5 years following account closure. Physical copies, if any, are destroyed securely; digital copies are deleted from active storage and overwritten from backup systems within 90 days of the retention period expiring.
• Betting and gaming history: Retained for 5 years following account closure for dispute resolution and audit purposes.
• Support communications: Retained for 3 years from the date of last contact, or 5 years where the communication relates to a dispute, complaint, or responsible gaming intervention.
• Technical and session data (logs): Retained for 12 months in active storage and then archived for a further 24 months before permanent deletion.
• Marketing consent records: Retained for 3 years from the date consent was last confirmed or withdrawn, for audit purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

gws88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: All data exchanged between your browser and the gws88 Platform is encrypted using TLS 1.2 or higher. HTTPS is enforced across all Platform pages and API endpoints.
• Encryption at rest: Sensitive Personal Data and KYC documents stored on gws88 servers are encrypted using AES-256 encryption.
• Access controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with data access undergo regular security training and are bound by confidentiality obligations.
• Penetration testing: The Platform undergoes regular vulnerability assessments and penetration testing by qualified independent security specialists.
• Incident response: gws88 maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify you and any applicable regulatory authority within the timeframe required by applicable standards.
• Two-factor authentication: 2FA is available and strongly recommended for all member accounts to provide an additional layer of protection against unauthorised login attempts.

As a gws88 member, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

gws88 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it. We will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

The gws88 Platform is strictly for adults aged 21 years or older. We do not knowingly collect Personal Data from any individual under the age of 21. Registration on the Platform constitutes a representation that you are at least 21 years of age.

If gws88 discovers or is notified that Personal Data has been collected from a person under the age of 21, we will:

• Immediately suspend the relevant account pending investigation.
• Delete all Personal Data associated with the underage individual from our active systems.
• Void and forfeit any balance, winnings, or bonus credits associated with that account.
• Take appropriate steps to prevent re-registration by the same individual.

If you believe a minor has registered on the Platform or has accessed your account, please contact us immediately at [email protected].

The gws88 Platform may, on occasion, reference or display the names of third-party services — such as payment providers (BCA, BRI, OVO, DANA) or game studios (Pragmatic Play, Evolution Gaming) — in informational contexts. gws88 does not operate or control any third-party websites, and this Privacy Policy applies solely to data processed by gws88 in connection with the Platform.

If you navigate away from the gws88 Platform to any third-party service (for example, your bank's internet banking portal to initiate a transfer), the privacy practices of that third party govern how your data is handled on their service. gws88 is not responsible for the privacy practices or content of any third-party website or service.

gws88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or Platform features. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify active members via their registered email address or via a prominent notice on the Platform prior to the changes taking effect.
• Where changes involve a new purpose for processing your data or a new category of data recipient, we will seek fresh consent where required.

Your continued use of the Platform after the revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any revised terms, you must cease using the Platform and contact our support team to request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact our dedicated data team through the following channel:

• Email: [email protected] — use the subject line "Privacy / Data Request" for fastest routing.
• Live Chat: Available 24/7 on the gws88 Platform (login required). State "Privacy Request" at the start of your session.
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve or formally respond within 30 days.

Our support team includes native Indonesian-speaking agents available around the clock across WIB, WITA, and WIT time zones, ensuring that members throughout Indonesia — from Jakarta and Surabaya to Bali and Makassar — can communicate with us in their preferred language even though the Platform itself operates in English.