Data Protection & Transparency
This Privacy Policy explains in plain terms what personal data win288 collects, why we collect it, how we protect it, and what rights you hold as a Member of our platform. We are committed to full transparency and the responsible handling of your information.
Our Privacy Commitments
All data transmitted between your device and win288 servers is protected by 256-bit SSL/TLS encryption. Your personal and financial information is never exposed in transit under any circumstances.
win288 will never sell, rent, or trade your personal data to third-party marketers. Data sharing occurs only with essential service partners — payment processors, game providers — strictly to deliver platform services.
We collect only the data we need to operate your account, process transactions, and meet our legal obligations. We do not collect data speculatively or for undefined future use.
You may request correction of inaccurate data or deletion of your profile at any time. Requests are processed within 30 days, subject to legal retention requirements applicable to online betting operations.
win288 complies with applicable international data protection standards and anti-money-laundering obligations. KYC data is retained for the minimum period required by our licensing authority.
In the unlikely event of a data security incident affecting your personal information, win288 will notify you and the relevant authority within 72 hours of becoming aware of the breach, in line with international best practice.
Throughout this Privacy Policy, the following terms carry the meanings set out below:
win288 collects Personal Data across several categories depending on the nature of your interaction with the Platform. The table below summarizes what we collect and why:
| Data Category | Specific Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, national ID (NIK), KTP / passport scan | KYC verification, age confirmation, account ownership |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung) | Account communications, support, security alerts |
| Financial Data | Bank account number, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet ID (OVO, DANA, GoPay), deposit/withdrawal history | Transaction processing, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, login history | Platform security, fraud detection, service optimization |
| Usage Data | Pages visited, games played, wager amounts, bet history, session duration, navigation path | Responsible gaming monitoring, personalization, analytics |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Dispute resolution, service quality improvement, training |
| Marketing Preferences | Opt-in / opt-out status for promotional emails and SMS notifications | Compliant delivery of promotional offers and bonus communications |
Sensitive Data: win288 does not intentionally collect sensitive personal data (such as health records, religious beliefs, or political opinions) except where directly relevant to responsible gaming assessments or legally required KYC checks.
win288 collects your Personal Data through the following channels:
Information you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a survey. This is the primary source of identity and contact data.
Technical and usage data is collected automatically when you access the Platform, via server logs, session tracking technologies, and first-party cookies. This data is collected regardless of whether you hold a registered account.
In certain circumstances, win288 may receive data about you from third parties, including:
In limited circumstances, win288 may cross-reference publicly available records — such as government sanction lists — to fulfill anti-money-laundering and compliance obligations.
win288 processes your Personal Data for the following specific and legitimate purposes:
Purpose Limitation: win288 does not process your Personal Data for any purpose beyond those listed above without first obtaining your explicit consent or establishing a new lawful basis, which will be communicated to you in advance.
win288 relies on one or more of the following lawful bases when processing your Personal Data, consistent with internationally recognized data protection principles:
win288 shares Personal Data with trusted third-party service providers who act as data processors on our behalf. These include:
All service providers are contractually bound to process your data only for the specified purpose and to maintain appropriate security standards. win288 does not permit any service provider to use your data for their own independent purposes.
win288 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. In such cases, win288 will disclose only the minimum data necessary to satisfy the legal requirement.
In the event of a merger, acquisition, or sale of all or substantially all of win288's assets, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer via email and by prominent notice on the Platform at least 30 days before the transfer occurs. The successor entity will be required to honor the terms of this Privacy Policy.
win288 does not sell, rent, or otherwise transfer your Personal Data to any third party for commercial or marketing purposes, under any circumstances.
win288 uses cookies and similar tracking technologies to operate and improve the Platform. We use only first-party cookies; we do not place third-party advertising cookies on the Platform.
You can control non-essential cookies via your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or security settings. Please note that disabling strictly necessary cookies may prevent the Platform from operating correctly. Full details on browser cookie management are available in your browser's help documentation.
win288 respects browser-level "Do Not Track" (DNT) signals for analytics and non-essential tracking. When a DNT signal is detected, win288 will limit processing to strictly necessary cookies only.
win288 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML / licensing obligation |
| KYC Documents | 5 years from date of verification | Regulatory requirement |
| Transaction Records | 7 years from transaction date | Financial record-keeping law |
| Support Communications | 3 years from last interaction | Dispute resolution / legitimate interest |
| Technical & Usage Data | 13 months on a rolling basis | Security monitoring / analytics |
| Marketing Preferences | Until opt-out or account closure | Consent |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized such that it can no longer be linked to an identifiable individual.
As a win288 Member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at the email address listed in Section 13 of this Policy.
Request a copy of the Personal Data we hold about you, along with information on how it is processed. We will respond within 30 days of a verified request.
Request correction of any inaccurate or incomplete Personal Data. Corrections to identity data may require re-submission of KYC documents.
Request deletion of your Personal Data where it is no longer needed, subject to our legal retention obligations under AML and licensing law.
Request that we pause processing of your data while a complaint or correction request is under review, without deleting the data entirely.
Request your Personal Data in a structured, machine-readable format (CSV or JSON) that you can transfer to another service provider.
Object to processing based on legitimate interests — including direct marketing — at any time. win288 will cease such processing unless compelling grounds override your objection.
Where processing is based on consent, withdraw that consent at any time by updating your account preferences or contacting support. Withdrawal does not affect prior lawful processing.
Request human review of any fully automated decision that produces significant legal or material effects on you, including account suspension triggered by automated fraud detection.
Response Timeline: win288 will acknowledge all data rights requests within 5 business days and provide a full response within 30 calendar days. Complex requests may be extended by an additional 30 days with written notice.
win288 operates as an international platform and may process or store your Personal Data on servers located outside Indonesia. Where data is transferred internationally, win288 ensures that appropriate safeguards are in place, including:
Regardless of where your data is processed, win288 applies the same level of protection described in this Privacy Policy to all Personal Data, irrespective of location. You may request details of the safeguards applicable to a specific transfer by contacting us at the email address in Section 13.
The win288 Platform is strictly intended for adults aged 21 years or older. win288 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step of our KYC process and is enforced before any account is granted full withdrawal access.
If win288 discovers that Personal Data has been collected from a person under 21 years of age, we will immediately suspend the associated account, erase the collected data, and return any deposited funds less any bonuses claimed, in accordance with our Terms & Conditions.
Parents and guardians who believe that a minor in their care may have registered on win288 are urged to contact us immediately at the support email listed in this Policy. We take such reports seriously and will investigate all notifications with priority.
win288 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will:
Your continued use of the win288 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with any material update, you are entitled to close your account and request deletion of your data prior to the effective date, subject to our legal retention obligations.
We encourage you to review this Privacy Policy periodically to remain informed about how win288 protects your personal information.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact win288's Data Protection team through the following channel:
When submitting a data rights request, please include your registered account username and a clear description of your request to help us locate your records efficiently. We may request additional verification of your identity before processing sensitive requests such as account erasure or data portability exports.
Acknowledgment: By using the win288 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your Personal Data as described herein. If you do not agree with any provision of this Policy, you must discontinue use of the Platform immediately.
Review our Terms & Conditions, visit our FAQ for quick answers, or return to the homepage to explore everything win288 has to offer.