Privacy Policy

dwg168 ("dwg168", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy sets out, in clear and plain English, the categories of personal data we collect from members and visitors, the purposes for which that data is processed, the circumstances in which it may be shared with third parties, and the rights available to you as a data subject.

dwg168 operates as an online casino and sportsbook platform serving members primarily located in Indonesia. Our platform offers live casino games, thousands of slot titles from providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe, as well as competitive sportsbook markets covering BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, Champions League, and a broad range of other sporting events popular with Indonesian audiences.

The data controller responsible for your personal information is dwg168. If you have any questions about this Policy or wish to exercise your data rights, you may contact our Data Support team at [email protected] or via live chat, available 24 hours a day, 7 days a week including Indonesian public holidays such as Idul Fitri and Indonesian Independence Day.

dwg168 collects personal data through several channels: directly from you when you register an account or contact support, automatically through your use of the platform, and from third-party service providers such as payment processors and KYC verification partners. The categories of data we collect are set out below.

dwg168 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification (for example, we do not collect religious affiliation, political opinions, or health data). Where identity document photographs incidentally reveal sensitive information (such as religion as listed on Indonesian KTP cards), that information is not recorded or processed separately from the document as a whole.

dwg168 uses the personal data described above for the following specific purposes. We process your data only where we have a legitimate reason to do so, as set out in Section 4 (Legal Basis for Processing) below.

• Account Registration & Management: To create and maintain your dwg168 member account, authenticate your identity at login, and update your account details when you request changes.
• KYC & Age Verification: To confirm that you meet the 21+ age requirement and are an eligible user under our Terms & Conditions. This is a regulatory obligation and cannot be waived.
• Payment Processing: To process deposits and withdrawal requests via your nominated Indonesian bank account (BCA, BRI, BNI, Mandiri, etc.) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records in IDR.
• Platform Operation & Game Delivery: To deliver the games, live dealer tables, sportsbook markets, and other features that make up the dwg168 platform experience.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming Compliance: To monitor gaming behaviour for indicators of problem gambling, apply deposit limits and self-exclusion requests, and fulfil our responsible gaming obligations. See our Responsible Gaming page for details.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat, email, or WhatsApp.
• Legal & Regulatory Compliance: To fulfil obligations under applicable laws, including anti-money-laundering (AML) record-keeping requirements, and to respond to lawful requests from regulatory authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, usability, and content of the dwg168 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and information about new games or features — but only where you have consented to receive such communications. You may withdraw consent at any time by contacting support.

dwg168 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and dwg168 — specifically, to operate your account, process transactions, and deliver the platform services you have signed up to use.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including KYC and AML requirements that mandate identity verification and transaction record-keeping.
• Legitimate Interests: Processing is necessary for dwg168's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities — particularly the sending of marketing and promotional communications — dwg168 relies on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

dwg168 does not sell your personal data. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share the financial data necessary to process your deposit or withdrawal with the relevant Indonesian bank or e-wallet provider (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay). These institutions operate under their own privacy frameworks and regulatory obligations.
• KYC & Identity Verification Partners: We share identity document data with our trusted KYC verification service providers solely for the purpose of confirming your identity and age eligibility. These providers are contractually bound to process your data only for this purpose and to maintain appropriate security standards.
• Game Content Providers: Technical session data (such as player ID and game session identifiers) is shared with integrated game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe) to the extent necessary to deliver their games within the dwg168 platform. These providers do not receive your full personal profile.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by law or where we believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Professional Advisers: We may share data with our legal, compliance, and financial advisers under strict confidentiality obligations where necessary to seek professional advice or manage legal proceedings.
• Business Transfers: In the event of a merger, acquisition, or sale of dwg168's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

dwg168 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the dwg168 website. The following categories of cookies are used:

You may control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the dwg168 platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

dwg168 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your membership with dwg168, plus a minimum of 5 years following account closure to satisfy AML record-keeping obligations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history in IDR, are retained for a minimum of 5 years from the date of the transaction in accordance with financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Customer Support Communications: Live chat transcripts, email records, and support ticket data are retained for 2 years from the date of the interaction, unless retention for a longer period is required by an ongoing dispute or legal proceeding.
• Gaming Activity Logs: Detailed game session logs are retained for 2 years from the date of the session; aggregated anonymised statistics may be retained indefinitely for platform improvement purposes.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for the duration of your membership and for 1 year following withdrawal of consent or account closure.

Once the applicable retention period has expired and no legal obligation requires further retention, your personal data is securely deleted or anonymised in a manner that prevents re-identification.

dwg168 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the dwg168 platform is encrypted in transit using TLS 1.2 or higher. Our SSL certificate is maintained and renewed regularly.
• Encrypted Data Storage: Sensitive personal data fields — including identity document references and payment details — are encrypted at rest using AES-256 encryption.
• Access Control: Access to member data is restricted on a strict need-to-know basis. Employees, contractors, and third-party partners are granted only the minimum level of access required to perform their designated function. All access is authenticated, logged, and subject to periodic review.
• Two-Factor Authentication (2FA): dwg168 offers 2FA for member accounts and mandates it for all staff accessing internal systems containing member data.
• Regular Security Audits: Our platform and infrastructure undergo periodic security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses.
• Incident Response: dwg168 maintains a documented data breach response procedure. In the event of a breach that poses a material risk to affected members, dwg168 will notify impacted individuals and relevant authorities as required by applicable law.

As a dwg168 member, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] or via live chat. We aim to respond to all data rights requests within 30 days.

Please note that certain rights are subject to limitations. For example, we cannot delete data that we are legally required to retain for AML or regulatory compliance purposes. Where a request cannot be fulfilled in full, we will explain the reasons and advise on any alternative options available to you.

If you are a parent or guardian and you believe that a person under 21 in your care has registered a dwg168 account without your knowledge, please contact us immediately at [email protected]. We take underage gambling prevention extremely seriously and we will act swiftly on any such report.

dwg168 actively uses KYC age verification tools during the registration and account review processes to detect and prevent underage access. We encourage all members to use the parental control and filtering tools available from Indonesian internet service providers and device manufacturers to prevent minors from accessing online gambling platforms.

As an internationally operated platform, dwg168 may transfer personal data to servers or service providers located outside Indonesia. This can occur in connection with KYC verification partners, game content providers, and cloud infrastructure services. When personal data is transferred internationally, dwg168 ensures that appropriate safeguards are in place, including:

• Transfers to entities in jurisdictions that provide an adequate level of data protection as recognised by applicable standards.
• The use of standard contractual clauses or equivalent data processing agreements with overseas service providers, requiring them to maintain data security standards consistent with this Policy.
• Strict prohibition on overseas recipients using your data for any purpose other than the service they are providing to dwg168.

Regardless of where your data is processed, dwg168 remains responsible for ensuring it is handled in accordance with this Privacy Policy and applicable data protection standards.

dwg168 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our platform. When material changes are made, we will notify active members by email or via an in-platform notification at least 7 days prior to the changes taking effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

We encourage you to review this Policy periodically to stay informed about how dwg168 protects your data. Continued use of the dwg168 platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you disagree with any changes, you have the right to close your account and request deletion of your data, subject to our legal retention obligations, by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dwg168 handles your personal data, please do not hesitate to reach out to our Data Support team through any of the following channels:

We are committed to resolving all privacy-related enquiries promptly and transparently. If you submit a formal data rights request, we will acknowledge receipt within 3 business days and provide a full response within 30 calendar days. In cases of particular complexity, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.