wa777 Privacy Policy

Introduction

wa777 ("we", "us", "our", "the Platform") operates the online gaming and sportsbook platform accessible at wa777.lat. As a platform that serves players across Indonesia — from Jakarta and Surabaya to Bandung, Medan, and Bali — we handle a significant volume of personal data on a daily basis. We take that responsibility seriously.

This Privacy Policy sets out, in plain and transparent terms, the categories of personal data wa777 collects from users and Members, the purposes for which that data is processed, the conditions under which it may be shared with third parties, and the rights that you hold as a data subject. Where technical or legal language is unavoidable, we have provided plain-English explanations alongside it.

This Privacy Policy should be read in conjunction with the wa777 Terms & Conditions and the wa777 Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy prevails.

Definitions

The following terms carry specific meanings throughout this Privacy Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person ("data subject"). An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, account number, email address, device identifier, or IP address.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, wa777 acts as the Data Controller in respect of all Member data collected through the wa777 platform.
• "Data Processor" — a third party that processes Personal Data on behalf of wa777 under a written data-processing agreement, such as a KYC verification provider or payment processor.
• "Member" / "User" / "you" — any individual who accesses, browses, registers on, or transacts through the wa777 platform.
• "KYC" — Know Your Customer identity verification process, including document checks, liveness checks, and source-of-funds verification.
• "Cookies" — small text files placed on your device by the wa777 platform for session management, analytics, and personalisation purposes.

Data We Collect

wa777 collects Personal Data across several categories, depending on how you interact with the platform. The table below summarises the main categories of data collected and representative examples within each category.

We do not collect Special Categories of Personal Data (for example, health data, racial or ethnic origin, religious beliefs, or biometric data used solely for identification purposes) unless required to do so by applicable anti-money-laundering law or at your explicit request in a support context.

How We Collect Data

wa777 collects Personal Data through the following channels:

4.1 Direct Collection

Data you provide directly when you: create an Account, complete the KYC verification process, make a deposit or withdrawal, contact support via live chat or email, participate in promotions, or submit feedback through the platform.

4.2 Automated Collection

Data collected automatically as you interact with the wa777 platform, including IP address, device fingerprint, browser session data, and in-platform behavioral signals (pages visited, time spent, games launched). This data is collected via server logs, cookies, and similar tracking technologies described in Section 8 of this Policy.

4.3 Third-Party Sources

In limited circumstances, wa777 may receive Personal Data from third-party sources, including:

• KYC and identity verification providers — who return verification decisions and risk flags associated with the identity documents you submit.
• Payment processors and Indonesian banking partners — who provide transaction confirmation data for deposits and withdrawals made via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Fraud prevention and anti-money-laundering screening services — which cross-reference Member data against sanctions lists and fraud databases as required by wa777's compliance obligations.

Legal Basis for Processing

wa777 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a Contract: Processing that is necessary to provide you with the wa777 Services — including account creation, transaction processing, and support — is carried out to fulfil the contractual obligations set out in the wa777 Terms & Conditions.
• Compliance with a Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML), counter-terrorism-financing (CTF), KYC, and financial reporting obligations.
• Legitimate Interests: Processing necessary for wa777's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your own rights and interests.
• Consent: Where wa777 relies on your consent as the legal basis for a specific processing activity (for example, sending you promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

wa777 uses the Personal Data we collect for the following purposes:

• Account Administration: creating and managing your wa777 Account, processing login sessions, resetting credentials, and maintaining your Account history.
• Transaction Processing: verifying, authorizing, and recording all deposits and withdrawals in Indonesian Rupiah (IDR) across supported payment channels.
• Identity Verification (KYC): verifying your identity, age (21+ requirement), and payment method ownership in accordance with wa777's compliance obligations.
• Fraud Prevention and Security: detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, multi-accounting, and other prohibited conduct described in the wa777 Terms & Conditions.
• Responsible Gaming: monitoring gaming patterns to identify signs of problem gambling and proactively offering responsible gaming tools where appropriate, in accordance with wa777's Responsible Gaming Policy.
• Customer Support: responding to Account queries, processing complaints, and providing assistance to Members via live chat and email.
• Marketing Communications: sending promotional emails, in-platform notifications, or bonus offers to Members who have not opted out of such communications. You may opt out at any time by contacting wa777 support.
• Platform Improvement: analyzing aggregated, anonymized usage data to improve the wa777 platform, optimize game performance, and enhance the user experience for Indonesian players.
• Legal and Regulatory Compliance: retaining records as required by applicable financial, gaming, or data-protection law, and cooperating with lawful requests from competent authorities.

Data Sharing

wa777 does not sell, rent, or trade your Personal Data to third parties for their own independent marketing or commercial purposes. Data may be shared in the following circumstances only:

7.1 Service Providers (Data Processors)

wa777 engages trusted third-party service providers to assist in delivering the platform's services. These providers process Personal Data solely on wa777's instructions and under written data-processing agreements that include confidentiality obligations. Categories of service providers include:

• KYC and identity verification technology providers
• Indonesian banking partners and e-wallet payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Fraud screening and AML/CTF compliance services
• Cloud infrastructure and data hosting providers
• Customer support software providers
• Game studio technical integration partners (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe — limited to game-session technical data only)

7.2 Legal and Regulatory Disclosure

wa777 may disclose Personal Data to law enforcement agencies, courts, regulators, or other competent authorities where required by applicable law, court order, or regulatory directive. wa777 will use reasonable efforts to notify the affected Member of any such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of wa777's business assets, Member Personal Data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained. Affected Members will be notified of any such transfer and any consequential changes to this Privacy Policy.

Cookies & Tracking Technologies

wa777 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, maintain your login session, and understand how Members interact with the site. The principal categories of cookies used on wa777 are as follows:

• Strictly Necessary Cookies: essential to the operation of the wa777 platform. These cookies maintain your authenticated session, enforce security controls, and enable core functionality such as the cashier and game launcher. These cookies cannot be disabled without rendering the platform non-functional.
• Functional Cookies: store user preferences such as selected payment method, language settings, and display configurations to improve your experience on return visits.
• Analytics Cookies: collect aggregated, anonymized data about how visitors use the wa777 platform — pages visited, session duration, navigation paths — to help wa777 identify areas for improvement. No personally identifiable information is included in analytics data sets.
• Security and Fraud Prevention Cookies: fingerprint devices and detect anomalous session behavior to protect Members from account takeover and unauthorized login attempts.

You may configure your browser to refuse or delete cookies; however, doing so may impair the functionality of certain wa777 features, including the Member login session and the payment cashier.

Data Retention

wa777 retains Personal Data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. The following indicative retention periods apply:

• Account and Identity Data: retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure, to comply with applicable financial record-keeping obligations.
• Transaction and Financial Data: retained for a minimum of five (5) years from the date of the relevant transaction, in accordance with standard financial record-keeping requirements applicable to gaming and payment processing operations.
• KYC Documents (copies of identity documents and verification media): retained for five (5) years following the completion of the KYC check or Account closure, whichever is later.
• Communications Data (support transcripts, emails): retained for a minimum of two (2) years from the date of the last communication, or longer where the communication relates to an active or pending dispute or complaint.
• Technical and Log Data: retained for twelve (12) months, after which it is anonymized or deleted.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

Data Security

wa777 implements a comprehensive set of technical and organizational security measures designed to protect Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• Encryption in Transit: all data transmitted between your device and the wa777 platform is protected by 256-bit SSL/TLS encryption. wa777 enforces HTTPS across all platform endpoints; unencrypted HTTP access is automatically redirected.
• Encryption at Rest: sensitive Personal Data stored in wa777's databases — including identity data, financial data, and KYC documents — is encrypted at rest using industry-standard encryption protocols.
• Credential Security: Member passwords are never stored in plain text. wa777 uses a strong one-way cryptographic hashing algorithm to store password data. Login session tokens are time-limited and invalidated on logout.
• Access Controls: access to Member Personal Data within wa777's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access events are logged and audited.
• Infrastructure Security: wa777's hosting infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments. Critical systems are subject to regular independent security audits.

Notwithstanding these measures, no method of transmission over the internet and no method of electronic storage is completely secure. wa777 cannot guarantee absolute data security. In the event of a data breach that is reasonably likely to result in a high risk to your rights and interests, wa777 will notify affected Members without undue delay in accordance with applicable law.

Your Rights

Subject to applicable law, you hold the following rights in relation to the Personal Data that wa777 processes about you. To exercise any of these rights, please contact wa777 using the details provided in Section 16 of this Policy.

• Right of Access: you have the right to request confirmation of whether wa777 processes Personal Data about you, and if so, to obtain a copy of that data along with information about how it is processed.
• Right to Rectification: you have the right to request correction of inaccurate or incomplete Personal Data that wa777 holds about you. For certain Account data fields, you may update your own information directly in the Member dashboard after re-authentication.
• Right to Erasure ("Right to be Forgotten"): you have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing was unlawful. This right is subject to wa777's statutory data retention obligations — data that must be retained by law cannot be deleted ahead of the applicable retention period.
• Right to Restriction of Processing: you have the right to request that wa777 restricts the processing of your Personal Data in certain circumstances, for example while the accuracy of data you have contested is being verified.
• Right to Data Portability: where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: you have the right to object to processing of your Personal Data where wa777 relies on legitimate interests as its legal basis. wa777 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

International Data Transfers

wa777 serves players primarily in Indonesia and processes the majority of Member data on infrastructure located in the Asia-Pacific region. In limited cases, Personal Data may be transferred to, or accessible by, service providers operating in other jurisdictions — for example, cloud infrastructure providers, fraud screening services, or game studio technical partners located outside Indonesia.

Where Personal Data is transferred internationally, wa777 takes appropriate steps to ensure that an adequate level of data protection is maintained, including requiring third-party processors in other jurisdictions to adhere to data security standards equivalent to those set out in this Privacy Policy. Such measures may include standard contractual clauses, binding corporate rules, or reliance on jurisdictions recognized as providing adequate data protection.

Minors

wa777 enforces a strict minimum age requirement of 21 years. The wa777 platform is not directed at, and does not knowingly collect Personal Data from, any individual under the age of 21. If wa777 becomes aware that it has inadvertently collected Personal Data from a minor, that data will be deleted promptly and the associated Account will be closed immediately.

If you are a parent or guardian and believe that a minor in your care has registered an Account on wa777 or provided Personal Data to wa777, please contact us immediately using the details in Section 16. wa777 will investigate and take appropriate action without delay.

Third-Party Links

The wa777 platform may contain references to third-party services — for example, payment providers such as BCA internet banking or e-wallet applications such as GoPay and OVO — which operate under their own privacy policies and data practices. wa777 is not responsible for the privacy practices of any third-party service. When you are redirected to a third-party site or application (for example, to authenticate a bank transfer), the privacy policy of that third party governs the data collected by them during that interaction.

Amendments to This Policy

wa777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The revised Privacy Policy will be published on this page with an updated Effective Date. Where amendments are material — for example, where we introduce a new category of data collection or a new purpose for processing — wa777 will notify active Members via on-platform notification or registered email prior to the change taking effect.

Your continued use of the wa777 platform after the Effective Date of any revised Privacy Policy constitutes your acknowledgment of the amended terms. If you do not agree to the revised Policy, you should cease using the platform and close your Account.

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to the Personal Data that wa777 holds about you, please contact us through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: available 24/7 directly within the wa777 platform for all registered Members, including Indonesian-speaking agents.
• Response Time: wa777 aims to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 calendar days.

If you are dissatisfied with wa777's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in the jurisdiction applicable to you, or to seek resolution through the dispute resolution mechanism specified in the wa777 Terms & Conditions.