rw888 Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "rw888" refers to the online betting and casino platform at https://rw888.net and all associated services, mobile interfaces, and subdomains operated under that brand.
• "Personal Data" means any information that identifies or could reasonably be used to identify you as a natural person, including your name, email address, Indonesian mobile number, IP address, device identifiers, and financial account details.
• "Member" means any natural person who has registered an active account on the rw888 platform.
• "Processing" means any operation performed on Personal Data — including collection, storage, use, disclosure, transfer, and deletion.
• "KYC Data" means identity verification documents submitted by a Member in connection with the rw888 Know Your Customer process, including government-issued photo ID (Indonesian KTP or passport) and proof of payment method.
• "Cookies" means small text files or similar tracking technologies placed on your device when you access the rw888 platform, used to maintain session state, personalise your experience, and analyse platform usage.
• "Third Party" means any entity other than rw888 and the Member, including payment processors, game studios, identity verification providers, and analytics vendors.
• "Data Breach" means any confirmed incident in which Personal Data is accessed, disclosed, altered, or destroyed by an unauthorised party.

This Privacy Policy applies to all Personal Data collected by rw888 in connection with your use of the rw888 platform, whether accessed via desktop browser, mobile browser, or any rw888-branded application. It applies to registered Members, former Members whose accounts have been closed, and unregistered visitors who browse the rw888 website.

rw888 acts as the data controller in respect of all Personal Data collected through the platform. As data controller, rw888 determines the purposes and means of processing Personal Data and is responsible for ensuring that processing activities are conducted lawfully and transparently.

This policy is specifically designed for Indonesian players accessing rw888 from locations throughout the Indonesian archipelago, including Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, Semarang, Makassar, Palembang, and all other provinces. By creating a rw888 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy.

rw888 collects the following categories of Personal Data from Members and platform visitors:

rw888 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is necessary for identity verification purposes.

rw888 collects Personal Data through the following methods:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, entering a promotion, or contacting rw888 support via live chat or email.
• Automated technical collection: Technical and Usage Data collected automatically when you access the rw888 platform via cookies, server logs, pixel tags, and similar technologies. This data is collected regardless of whether you are logged in to a Member account.
• Payment processors: Transaction confirmation data received from Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) following a completed deposit or withdrawal instruction.
• Identity verification providers: Data returned by third-party KYC and fraud-screening vendors engaged by rw888 to verify the authenticity of documents submitted during the verification process.
• Game providers: Aggregated game session data (bet amounts, game outcomes, RTP calculations) shared by licensed game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft for account management and dispute resolution purposes.

rw888 processes your Personal Data only where a legitimate purpose and an appropriate legal basis exist. The table below sets out rw888's primary processing activities:

rw888 does not sell your Personal Data. We share Personal Data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors and banking partners: Transaction details (name, account number, IDR amount) are shared with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja solely to process deposit and withdrawal instructions initiated by you.
• KYC and identity verification vendors: KYC Documents and Identity Data are transmitted to our contracted verification partners for the sole purpose of confirming your identity and age eligibility (21+). These vendors are bound by strict data processing agreements prohibiting secondary use.
• Licensed game studios: Minimal Usage Data is shared with studios such as Pragmatic Play, Evolution Gaming, and Spribe for the purpose of game session management, dispute resolution, and RNG audit compliance.
• Fraud and risk management providers: Technical and Financial Data may be shared with third-party fraud-screening services to protect the rw888 platform and its Members from financial crime, account takeover, and bonus abuse.
• Legal and regulatory authorities: rw888 will disclose Personal Data to law enforcement, courts, or regulatory bodies when required to do so by valid legal process (such as a court order or statutory obligation), or where rw888 reasonably believes disclosure is necessary to prevent serious harm or illegal activity.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of rw888's assets, Personal Data held by rw888 may be transferred to the acquiring entity, which will be required to honour this Privacy Policy.

All third-party service providers engaged by rw888 are required to process Personal Data only on documented instructions from rw888 and are contractually prohibited from using Member data for their own commercial purposes.

rw888 uses cookies and similar tracking technologies to operate the platform efficiently, maintain session state, prevent fraud, and analyse usage patterns. The following categories of cookies are in use on rw888:

• Strictly necessary cookies: Required for core platform functions such as maintaining your login session, storing your active bet slip, and managing security tokens. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how visitors navigate the rw888 platform — for example, which game categories receive the most traffic or where Members encounter friction in the deposit flow. This data informs ongoing platform improvements.
• Functional cookies: Retain your platform preferences such as preferred language display, last-visited game category, and notification settings, so that they persist across sessions.
• Fraud prevention cookies: Fingerprint your device and session to detect suspicious patterns associated with multi-accounting, credential stuffing, or automated bot activity. These are strictly internal and are not shared with advertising networks.

rw888 does not use third-party advertising cookies or retargeting pixels from external ad networks. You may configure your browser to refuse or delete cookies at any time; however, doing so may impair your ability to log in and use the rw888 platform effectively.

rw888 retains Personal Data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of the Member's account and for a period of 5 years following account closure, to satisfy potential dispute resolution, fraud investigation, and audit requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of submission, consistent with standard AML record-keeping obligations applicable to internationally licensed gaming operators.
• Financial transaction records (deposits, withdrawals in IDR): Retained for a minimum of 5 years from the transaction date.
• Communications Data (live chat, support email): Retained for 2 years from the date of the communication, or longer if the communication is relevant to an unresolved dispute or regulatory inquiry.
• Technical and Usage Data: Retained in aggregated or pseudonymised form for up to 24 months for platform analytics purposes.
• Marketing consent records: Retained for as long as your marketing opt-in remains active, plus 1 year following any opt-out, to demonstrate compliance with consent requirements.

When Personal Data is no longer required, rw888 will securely delete or permanently anonymise it in accordance with its internal data disposal procedures.

rw888 implements a multi-layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport encryption: All data exchanged between your device and the rw888 platform is encrypted using TLS 1.2 or higher with 256-bit AES cipher suites. The rw888 domain enforces HTTPS at all times; plaintext HTTP connections are automatically redirected.
• At-rest encryption: Personal Data and KYC Documents stored in rw888's data infrastructure are encrypted at rest using AES-256. Encryption keys are managed separately from the data they protect.
• Access controls: Access to Member Personal Data within rw888's internal systems is restricted on a need-to-know basis. All staff access is authenticated, logged, and subject to periodic access reviews.
• Two-factor authentication: rw888 strongly recommends that all Members enable two-step verification (2SV) on their accounts. Internal rw888 systems requiring access to Member data mandate multi-factor authentication for all personnel.
• Penetration testing: rw888's platform and infrastructure are subject to regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses proactively.
• Incident response: rw888 maintains a documented Data Breach Response Plan. In the event of a confirmed Data Breach affecting Member Personal Data, rw888 will notify affected Members within a reasonable timeframe and take immediate steps to contain and remediate the incident.

As a Member of rw888, you have the following rights in respect of your Personal Data. To exercise any of these rights, contact the rw888 support team via live chat or at [email protected]. rw888 will respond to all verified requests within 30 days.

• Right of access: You may request a copy of the Personal Data rw888 holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: If any Personal Data rw888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Note that certain data (e.g., KYC-verified name and date of birth) cannot be amended without re-submission of supporting documentation.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and no overriding legitimate interest exists. This right does not apply to data rw888 is required to retain by law (e.g., AML transaction records).
• Right to restriction: You may request that rw888 restrict the processing of your Personal Data in certain circumstances — for example, while a rectification request is under review.
• Right to data portability: For data processed on the basis of consent or contract, you may request that rw888 provide your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) so that it can be transferred to another service provider.
• Right to object: You may object to processing of your Personal Data where rw888 relies on legitimate interest as the legal basis. rw888 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

rw888 is strictly an adults-only platform. Individuals under the age of 21 are prohibited from registering an account or using any rw888 service. rw888 does not knowingly collect Personal Data from persons under 21 years of age.

rw888 employs automated age-screening during the registration process and requires KYC verification — including submission of a government-issued photo ID — to confirm that all Members meet the 21+ age requirement. Accounts found to belong to individuals under 21 will be immediately suspended, all balances forfeited, and any associated Personal Data deleted in accordance with applicable legal obligations.

If you are a parent or guardian and believe that a minor under your care has registered an account on rw888 without your knowledge, please contact rw888 support immediately at [email protected] so that the account can be investigated and closed promptly.

The rw888 platform may contain references or links to third-party game studios, payment service providers, or sports data feeds that operate under their own privacy policies. rw888 is not responsible for the privacy practices of any third-party website or service, and this Privacy Policy does not extend to those entities.

rw888 recommends that you review the privacy policy of any third-party service you interact with in connection with your rw888 account — for example, the privacy practices of your chosen e-wallet provider (OVO, DANA, GoPay, ShopeePay, or LinkAja) or your Indonesian bank (BCA, BRI, BNI, Mandiri, etc.) when initiating a deposit or withdrawal transaction.

rw888 may update this Privacy Policy periodically to reflect changes in our data processing practices, technology, applicable law, or regulatory guidance. When material changes are made — for example, a change to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — rw888 will notify active Members by posting a prominent notice on the platform and, where practicable, by sending a notification to your registered email address at least 7 days before the revised policy takes effect.

For minor amendments (such as typographical corrections or clarifications that do not alter the substantive meaning of any provision), rw888 may update the policy without prior notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the rw888 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with the revised policy, you must cease using rw888 and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or rw888's handling of your Personal Data, please contact our support team using the following channels:

• Live Chat: Available 24/7 directly within the rw888 platform after logging in. Live chat agents are available in both English and Indonesian (Bahasa Indonesia).
• Email: [email protected] (displayed as plain text — not a clickable link). rw888 aims to respond to all privacy-related email enquiries within 48 hours (WIB, UTC+7).
• Subject line guidance: When emailing regarding a data rights request, please include "Privacy Request — [Your Registered Username]" in the subject line to ensure prompt routing to the rw888 data team.

For responsible gaming concerns, self-exclusion requests, or account closure, please visit the Responsible Gaming page or initiate a live chat session directly. For general platform questions, visit the FAQ page.