Privacy Policy

1. Introduction and Scope

Welcome to the Privacy Policy of dw33 (hereinafter referred to as "dw33", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use our online gaming platform located at https://dw33.cam, including all associated services, mobile applications, and related platforms (collectively, the "Platform" or "Services").

At dw33, we are committed to protecting your privacy and handling your personal data with the highest standards of security and transparency. This Privacy Policy is designed to help you understand what information we collect, why we collect it, how we use it, and what rights you have regarding your personal data. We process all personal information in accordance with applicable Indonesian data protection laws and international best practices.

By creating an account, accessing the Platform, or using any of our Services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must immediately discontinue use of the Platform and refrain from creating an account or providing any personal information.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform. Together, these documents form the complete agreement between you and dw33 regarding your use of our Services and the handling of your personal information.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account on dw33, we collect personal information that you voluntarily provide to us, including but not limited to:

Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (Indonesian national identity card/KTP number, passport number, or driver's license number)
Contact Information: Email address, mobile phone number, residential address, postal code, and preferred communication method
Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery
Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay), payment card details (where applicable), transaction history, deposit amounts, withdrawal requests, and associated timestamps
Verification Documents: Copies of identity documents (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and additional documents requested for enhanced due diligence or regulatory compliance
Communication Data: Content of communications sent to our customer support team via email, live chat, or other channels, including support tickets, feedback, complaints, and inquiries

2.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

Device Information: Device type, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID), mobile network information, and device settings
Connection Information: IP address, internet service provider (ISP), geographic location (country, city, timezone based on IP address), connection type (WiFi, cellular), and network quality
Usage Data: Pages visited, games played, betting history, session duration, time and date of access, clickstream data, referring/exit pages, search queries within the Platform, and interaction patterns
Performance Data: Platform load times, error messages, crash reports, and other diagnostic data used to monitor and improve Platform performance
Cookie Data: Cookie identifiers, preferences, settings, and behavioral data collected through first-party and third-party cookies (see Section 8 for detailed cookie information)

2.3 Information from Third-Party Sources

We may receive additional information about you from third-party sources to verify your identity, prevent fraud, and comply with regulatory obligations:

Identity Verification Services: Information obtained from third-party identity verification providers to confirm your identity and detect fraudulent documents
Payment Processors: Transaction confirmation data, payment method verification, and fraud risk assessments from banks and payment service providers
Regulatory Databases: Information from publicly available databases, sanctions lists, and politically exposed persons (PEP) lists to ensure compliance with anti-money laundering (AML) regulations
Credit Reference Agencies: Credit checks and financial background information (where legally permitted and necessary for high-value transactions)

Data Minimization Principle

dw33 adheres to the principle of data minimization. We only collect personal information that is necessary for the specific purposes outlined in this Privacy Policy. We do not collect excessive or irrelevant data.

3. How We Use Your Information

We use the personal information we collect for the following legitimate purposes:

3.1 Account Management and Service Delivery

Create, maintain, and manage your dw33 account
Process your registration and verify your eligibility to use our Services
Authenticate your identity when you log in to the Platform
Provide access to games, sports betting markets, and other gaming products
Enable you to deposit funds, place bets, and withdraw winnings
Track your gaming activity, betting history, and account transactions
Calculate and credit bonuses, rewards, and VIP program benefits
Respond to your customer support inquiries and resolve account issues

3.2 Financial Transactions and Payment Processing

Process deposits, withdrawals, and other financial transactions
Verify payment method ownership and prevent payment fraud
Comply with payment card industry (PCI) security standards
Reconcile financial records and resolve payment disputes
Provide transaction history and financial statements

3.3 Legal Compliance and Regulatory Obligations

Verify that you are at least 21 years of age and legally eligible to gamble
Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
Screen against sanctions lists and politically exposed persons (PEP) databases
Monitor for suspicious activity and report to relevant authorities when required
Respond to legal requests, court orders, and regulatory inquiries
Comply with Indonesian data protection laws and gaming regulations
Maintain records as required by law for audit and compliance purposes

3.4 Security and Fraud Prevention

Detect, investigate, and prevent fraudulent activity, account takeovers, and unauthorized access
Monitor for collusion, bonus abuse, and other forms of gaming fraud
Identify and block access from prohibited jurisdictions or sanctioned entities
Protect the Platform from security threats, cyberattacks, and technical vulnerabilities
Enforce our Terms and Conditions and take action against policy violations

3.5 Platform Improvement and Personalization

Analyze usage patterns to understand how Users interact with the Platform
Improve Platform functionality, performance, and user experience
Develop new features, games, and services based on User preferences
Personalize game recommendations and promotional offers based on your interests
Conduct A/B testing and research to optimize Platform design

3.6 Marketing and Communications

Send promotional emails about new games, bonuses, and special offers (with your consent)
Display targeted advertisements on the Platform based on your preferences
Notify you about important account updates, policy changes, and service announcements
Invite you to participate in surveys, promotions, and tournaments
Provide customer support communications via email, live chat, or phone

You have the right to opt out of marketing communications at any time by clicking the "unsubscribe" link in promotional emails or by adjusting your communication preferences in your account settings. Please note that even if you opt out of marketing communications, we will still send you essential service-related messages such as account security alerts, payment confirmations, and regulatory notices.

4. Legal Basis for Processing (Indonesian Context)

Under Indonesian data protection principles, we process your personal data based on the following legal grounds:

Consent: You have given explicit consent for us to process your personal data for specific purposes (e.g., marketing communications, personalized recommendations)
Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under the Terms and Conditions (e.g., processing deposits and withdrawals, providing access to games)
Legal Obligation: Processing is required to comply with Indonesian laws and regulations, including age verification, AML/KYC requirements, and tax reporting obligations
Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, Platform security, customer support, and service improvement, provided these interests are not overridden by your fundamental rights and freedoms

5. Data Sharing and Disclosure

dw33 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your personal data with the following categories of recipients in limited circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf and provide services to us. These service providers have access to your personal information only to the extent necessary to perform their specific functions and are contractually obligated to maintain confidentiality and security. Categories of service providers include:

Payment Processors: Banks, payment gateways, and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals
Identity Verification Providers: Third-party KYC and AML screening services that verify your identity and screen against sanctions lists
Game Providers: Software providers (Evolution Gaming, Pragmatic Play, Microgaming, Spribe) who supply gaming content and may process technical data related to your gameplay
Technology Infrastructure: Cloud hosting providers, content delivery networks (CDNs), and data storage services that host our Platform and databases
Customer Support Tools: Live chat platforms, email service providers, and customer relationship management (CRM) systems
Analytics and Marketing Services: Web analytics tools, advertising platforms, and marketing automation services that help us understand user behavior and deliver targeted marketing
Security Services: Fraud detection and prevention services, cybersecurity providers, and DDoS protection services

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, regulators, and courts when required by law or when we reasonably believe disclosure is necessary to:

Comply with legal obligations, court orders, subpoenas, or regulatory requests
Enforce our Terms and Conditions and other policies
Protect the rights, property, or safety of dw33, our Users, or the public
Detect, prevent, or investigate fraud, security breaches, or other illegal activity
Respond to claims that content violates the rights of third parties

5.3 Business Transfers

If dw33 is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Platform before your personal information is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated or anonymized data that does not directly identify you with third parties for research, marketing, analytics, and other purposes. This data cannot be used to identify individual Users.

6. Data Security Measures

The security of your personal information is of paramount importance to dw33. We implement industry-standard technical and organizational security measures to protect your data from unauthorized access, disclosure, alteration, and destruction:

Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data stored in our databases, including passwords and financial information, is encrypted at rest using AES-256 encryption
Access Controls: Access to personal data is restricted to authorized personnel only, based on role-based access control (RBAC) principles. All employees and contractors with access to personal data are bound by strict confidentiality obligations
Authentication: We use secure authentication mechanisms including password hashing with bcrypt, multi-factor authentication options, and session management controls to prevent unauthorized account access
Network Security: Our infrastructure is protected by firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and DDoS mitigation services
Security Monitoring: We continuously monitor our systems for suspicious activity, security threats, and potential vulnerabilities using automated security tools and manual security audits
Secure Development: Our software development process follows secure coding practices, regular security testing, vulnerability assessments, and penetration testing
Data Backup: Regular backups of data are performed and stored securely in geographically distributed locations to ensure business continuity and disaster recovery
Third-Party Security: All third-party service providers are carefully vetted for security practices and are required to maintain security standards that meet or exceed our own

While we employ robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you acknowledge that you provide information at your own risk. If you become aware of any security breach or unauthorized access to your account, you must immediately notify us at [email protected] and change your password.

Your Role in Account Security

You are responsible for maintaining the confidentiality of your password and account credentials. Never share your password with anyone, use a strong unique password, enable two-factor authentication if available, and log out after each session, especially on shared devices.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods depend on the nature of the information and the purpose for which it was collected:

Account Information: Retained for the duration of your active account and for 7 years after account closure to comply with financial record-keeping requirements and potential legal claims
Financial Transaction Records: Retained for 7 years after the transaction date as required by Indonesian tax and financial regulations
Identity Verification Documents: Retained for 7 years after account closure to comply with AML/KYC regulatory requirements
Communications and Support Tickets: Retained for 3 years to provide ongoing support and resolve potential disputes
Marketing Consent Records: Retained until you withdraw consent or for 3 years after your last interaction with marketing communications
Technical Logs and Analytics Data: Retained for 12-24 months for security monitoring, fraud detection, and Platform optimization

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data retention schedule. Anonymized data that cannot identify you may be retained indefinitely for statistical and analytical purposes.

8. Your Privacy Rights

Under Indonesian data protection principles and in line with international best practices, you have the following rights regarding your personal information:

Right of Access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of your personal information in a structured, commonly used, and machine-readable format
Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings
Right to Erasure: You have the right to request deletion of your personal data under certain circumstances, subject to legal retention obligations and legitimate business needs
Right to Restriction: You have the right to request restriction of processing of your personal data in certain circumstances (e.g., while we verify the accuracy of disputed data)
Right to Object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications through your account settings or by clicking "unsubscribe" in emails
Right to Withdraw Consent: Where we process your personal data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another service provider where technically feasible
Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant Indonesian data protection authority if you believe we have violated your privacy rights

To exercise any of these rights, please contact our Data Protection team at [email protected] or through the contact information provided in Section 11. We will respond to your request within 30 days. Please note that we may need to verify your identity before processing certain requests to ensure we are disclosing information only to the rightful account holder.

9. Cookies and Tracking Technologies

dw33 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you on subsequent visits.

9.1 Types of Cookies We Use

Essential Cookies: Necessary for the Platform to function properly. These cookies enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies without affecting Platform functionality
Performance Cookies: Collect information about how you use the Platform, such as which pages you visit and which links you click. This data helps us improve Platform performance and identify technical issues
Functionality Cookies: Remember your preferences and settings (such as language preference, timezone, and display preferences) to provide a more personalized experience
Advertising Cookies: Track your browsing activity across websites to deliver targeted advertisements based on your interests. These cookies are set by us and third-party advertising partners
Analytics Cookies: Help us understand user behavior through aggregate statistical analysis. We use services like Google Analytics to measure traffic and engagement

9.2 Managing Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies or to delete existing cookies. However, blocking certain cookies may impact your ability to use some features of the Platform. Please note that opting out of advertising cookies does not mean you will stop seeing advertisements; it means the advertisements you see will be less relevant to your interests.

10. International Data Transfers

Your personal information may be transferred to, stored in, and processed in countries outside of Indonesia where our service providers and data centers are located. These countries may have data protection laws that differ from Indonesian laws. When we transfer your personal data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

We implement safeguards such as standard contractual clauses, data processing agreements, and security certifications to ensure that your data receives adequate protection regardless of where it is processed.

11. Changes to This Privacy Policy

We reserve the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Any changes will be effective immediately upon posting the updated Privacy Policy on the Platform, and the "Last Updated" date at the top of this page will be revised accordingly.

Material changes that significantly affect how we collect, use, or share your personal information will be communicated to you via email notification to your registered email address or through a prominent notice on the Platform homepage. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the updated Privacy Policy, you must discontinue use of the Platform and close your account.

12. Contact Information and Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy, our data practices, or if you wish to exercise your privacy rights, please contact us through the following channels:

Data Protection Email: [email protected]
General Support Email: [email protected]
Live Chat: Available 24/7 through the chat icon on our website
Response Time: We aim to respond to all privacy-related inquiries within 30 days

For data protection matters, please clearly indicate "Privacy Request" or "Data Protection Inquiry" in the subject line of your email to ensure your message is routed to the appropriate team for prompt handling.