Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected, processed, and stored by hw168 in connection with the operation of the hw168 online gaming platform at https://hw168.cam (the "Platform"). It governs the personal data of all registered users, prospective users who browse the Platform without registering, and any other individuals whose data hw168 may process in connection with its business operations.

By accessing or using the hw168 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact our support team to request account closure and data erasure.

hw168 operates with a user base that is primarily located in Indonesia. While our Platform is offered in English, we recognise the Indonesian regulatory context and handle all personal data with the same standard of care required by internationally recognised data-protection frameworks.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person (a "data subject"). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" refers to hw168 as the entity that determines the purposes and means of processing personal data.
• "Data Processor" refers to any third party that processes personal data on behalf of hw168 under a formal data-processing agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC" means Know Your Customer, the process of verifying a user's identity in compliance with international anti-money-laundering (AML) standards.

3. Data We Collect

3.1 Information You Provide Directly

When you register for, use, or communicate with hw168, we collect personal data that you voluntarily provide. This includes:

• Registration data: Full legal name, date of birth, email address, phone number, residential address, and preferred currency (IDR).
• Identity verification (KYC) data: Copies of your national identification card (KTP), proof of address (utility bill or bank statement dated within three months), and a selfie photograph holding your identification document.
• Payment data: Bank account details (bank name, account number, account holder name), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction records. hw168 does not store full payment credentials; sensitive payment data is handled by our certified payment processing partners.
• Communication data: Records of your correspondence with our customer support team via live chat, WhatsApp, or email, including the content of messages and any attachments you send.

3.2 Information We Collect Automatically

When you access or use the Platform, certain technical data is collected automatically through cookies, web beacons, and server logs. This includes:

• IP address and approximate geographic location (country and city level).
• Device type, operating system, and browser type and version.
• Pages visited, time spent on each page, click-through paths, and referral URLs.
• Session identifiers and authentication tokens.
• Betting and gaming activity logs, including stakes placed, games accessed, wager outcomes, and withdrawal requests.

3.3 Data Received from Third Parties

hw168 may receive personal data about you from third parties in limited circumstances, including:

• Payment processors, who may share transaction verification data to confirm the legitimacy of deposits and withdrawals.
• Identity verification service providers, who may cross-check your KYC documents against public and commercial databases.
• Fraud prevention and AML screening partners, who may flag accounts or transactions that appear on international watchlists.

4. How We Use Your Personal Data

hw168 processes your personal data only for lawful, specified, and legitimate purposes. The primary legal bases on which we rely are: (a) performance of a contract (your use of the Platform); (b) compliance with a legal obligation (KYC, AML); (c) our legitimate interests (fraud prevention, security); and (d) your consent (marketing communications).

Purpose	Data Used	Legal Basis
Account registration and management	Registration data, contact details	Contract performance
Identity verification (KYC)	KYC documents, selfie photograph	Legal obligation
Processing deposits and withdrawals	Payment data, transaction records	Contract performance
Fraud prevention and AML compliance	All categories above, device data	Legal obligation, legitimate interests
Customer support	Communication data, account data	Contract performance
Responsible gaming monitoring	Betting activity logs, session data	Legitimate interests, legal obligation
Platform security and technical operations	Device data, IP address, session logs	Legitimate interests
Promotional communications (opt-in only)	Email address, phone number	Consent

5. Cookies and Tracking Technologies

hw168 uses cookies and similar tracking technologies to operate the Platform efficiently, improve user experience, and comply with regulatory requirements. Cookies are small text files stored on your device that enable us to recognise your browser, maintain your login session, and remember your preferences.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login sessions, security tokens, and load-balancing functions. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences (such as language settings and notification preferences) to personalise your experience.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform to help us improve navigation, content, and performance.
• Security Cookies: Detect and mitigate fraud, bot activity, and unauthorised access attempts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

6. Data Sharing and Third-Party Disclosure

hw168 does not sell, rent, or trade your personal data to third parties for marketing purposes. We share your data only in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). Each processor operates under a formal data-processing agreement and is required to maintain confidentiality.
• Identity verification providers: To verify KYC documents and screen against AML and sanctions lists.
• Game studio providers: Limited technical identifiers (not your full name or financial data) may be shared with certified game providers to resolve disputes about game outcomes, RTP audits, or technical malfunctions.
• Regulatory and law-enforcement authorities: Where required by the laws of the jurisdiction in which hw168 holds its gaming licence, or in response to a lawful order from a competent authority. hw168 will notify affected users of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of hw168's assets, your personal data may be transferred as part of that transaction. Affected users will be notified in advance.

7. International Data Transfers

Because hw168 operates as an internationally licensed platform, your personal data may be transferred to and processed in countries other than Indonesia. In such cases, hw168 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require recipient entities to maintain data-protection standards equivalent to those described in this Policy.

Users in Indonesia acknowledge that their data may be processed in the jurisdiction where hw168 holds its operating licence and that the data-protection laws of that jurisdiction may differ from those of Indonesia.

8. Data Retention

hw168 retains your personal data for as long as your account is active and for a minimum of five (5) years following account closure. This retention period is required to meet our obligations under international AML regulations, resolve disputes, and enforce our agreements.

Betting activity logs, transaction records, and KYC documents are retained for a minimum of seven (7) years to comply with anti-money-laundering record-keeping requirements. After applicable retention periods expire, data is securely and permanently deleted or anonymised.

9. Data Security

hw168 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular third-party security audits and penetration testing.
• Intrusion detection and real-time anomaly monitoring systems.
• Two-factor authentication (2FA) available for all user accounts.

While hw168 takes all reasonable steps to protect your data, no system of security is completely impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, hw168 will notify you promptly and take all necessary steps to contain and remediate the breach.

10. Your Rights as a Data Subject

Subject to applicable law, you hold the following rights with respect to your personal data held by hw168:

• Right of Access: You may request a copy of the personal data hw168 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to our legal obligations to retain certain records.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact our support team at [email protected] (plain text — not a clickable link). hw168 will respond to all data subject requests within 30 days. Complex or high-volume requests may take up to 60 days, in which case we will notify you of the expected timeline.

11. Children's Privacy

The hw168 Platform is strictly for adults aged 21 and over. hw168 does not knowingly collect or process personal data from individuals under 21 years of age. If we become aware that we have collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that we may have inadvertently collected personal data from a minor, please contact us immediately at [email protected].

12. Links to Third-Party Sites

The hw168 Platform does not contain outbound links to third-party websites. This Privacy Policy applies solely to the hw168 Platform at https://hw168.cam. hw168 is not responsible for the privacy practices of any third-party payment processors or game studio providers accessed through their own interfaces.

13. Changes to This Privacy Policy

hw168 reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or in-platform notification. Your continued use of the Platform following notification of changes constitutes acceptance of the revised Privacy Policy.

14. Contact — Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact hw168 using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the hw168 Platform
• Response Time: Data-related enquiries are handled within 30 days of receipt
• Support Hours: 24 hours a day, 7 days a week (WIB, WITA, WIT)