wd777 Privacy Policy —
Your Data, Our Commitment

This Privacy Policy (the "Policy") is published by wd777 (the "Company", "we", "us", or "our") and governs the collection, use, storage, and disclosure of personal data relating to all registered players, prospective players, and visitors (collectively, "you" or "the User") who access the wd777 Platform at https://wd777.cam.

This Policy forms part of the contractual relationship between you and wd777 and must be read in conjunction with our Terms and Conditions and Responsible Gaming Policy. By registering an Account, depositing funds, or otherwise using the wd777 Platform, you acknowledge that you have read and understood this Policy and consent to the processing activities described herein.

The wd777 Platform is designed to serve players who are resident in Indonesia, aged 21 years or older. While this Policy has been drafted with Indonesian players in mind — referencing local payment methods such as BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay, as well as local regulatory context — it applies to all persons who access or use the Platform regardless of their country of residence.

For the purposes of this Privacy Policy, the following definitions apply:

wd777 collects personal data from you through several distinct channels. The categories of data collected are limited to what is genuinely necessary for the purposes described in Clause 4. We do not collect personal data speculatively or in excess of what the Platform's operations require.

3.1 Registration Data

When you create a wd777 Account, you are asked to provide:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (used to verify that you meet the 21+ age requirement)
• Country of residence (Indonesia by default for this Platform)
• Valid email address
• Mobile phone number registered in Indonesia
• A password of your choosing (stored in hashed, non-reversible form — we never store plaintext passwords)

3.2 Identity Verification (KYC) Data

Prior to processing any withdrawal, and in certain other compliance-triggered circumstances, we may request:

• A copy of a government-issued photo identification document (e.g., Indonesian National ID / KTP, Passport, or Driver's Licence)
• Proof of address dated within the last three months (e.g., a bank statement from BCA, BRI, BNI, or Mandiri, or a utility bill)
• Proof of payment method ownership (e.g., a bank statement or e-wallet screenshot confirming ownership of the OVO, DANA, or GoPay account used for deposits)
• A live or uploaded selfie photograph held alongside your identification document, where required by our compliance workflow

3.3 Financial Transaction Data

Every deposit, withdrawal, bonus credit, wager, and balance adjustment made on your Account is recorded. This includes the transaction amount in Indonesian Rupiah (IDR), the payment method used (e.g., BCA bank transfer, GoPay), the timestamp in WIB (Western Indonesia Time, UTC+7), and the transaction outcome. We do not store complete bank account numbers or full e-wallet credentials on our systems — only masked payment references sufficient to process and reconcile transactions.

3.4 Gameplay & Activity Data

wd777 automatically logs your gameplay activity for product personalisation, fraud detection, and responsible gaming monitoring. This includes bet history, game sessions, wager amounts, win/loss records, time spent on the Platform, and any use of responsible gaming tools such as deposit limits or cool-off periods.

3.5 Technical & Device Data

When you access the Platform, we automatically collect technical data including:

• IP address and approximate geolocation (country/city level — we do not collect precise GPS coordinates)
• Browser type and version, operating system, device type, and screen resolution
• Referring URL and navigation path within the Platform
• Session duration and pages or features accessed
• Cookie identifiers as described in Clause 7

3.6 Customer Support Communications

All communications between you and the wd777 support team — including live chat transcripts, email correspondence, and any attachments you submit — are retained as part of your Account record. These records enable us to maintain continuity of support, resolve disputes, and demonstrate our compliance with applicable obligations.

wd777 uses personal data for the following specific and documented purposes. Where the lawful basis differs by purpose, it is identified in Clause 5.

1. Account creation and management: To register your Account, verify your identity, authenticate your logins, and maintain the integrity of your player profile throughout your relationship with wd777.
2. Service delivery: To enable the core Platform services — accepting bets, processing game rounds, crediting winnings, applying bonuses, and operating the customer support function — on an ongoing contractual basis.
3. Financial transaction processing: To facilitate deposits from and withdrawals to your registered Indonesian bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records as required by our licensing conditions.
4. KYC and compliance: To verify your age and identity as required by our operating licence, and to fulfil our anti-money-laundering (AML) and counter-terrorism-financing (CTF) obligations. KYC data may be processed by authorised third-party verification providers under binding data-processing agreements.
5. Fraud prevention and Platform security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct as defined in the Terms and Conditions. This includes automated risk-scoring of transactions and behavioural pattern analysis.
6. Responsible gaming monitoring: To identify patterns of gameplay that may indicate problem gambling behaviour, to enforce player-set deposit and loss limits, and to process cool-off and self-exclusion requests in accordance with our Responsible Gaming Policy.
7. Customer support: To respond to your enquiries, resolve complaints, and maintain a record of our communications for quality assurance and dispute resolution purposes.
8. Marketing communications (opt-in only): If you have given your explicit consent during registration or through your Account settings, we may send you promotional emails or SMS messages regarding relevant wd777 offers, new game launches, or seasonal promotions (for example, during Idul Fitri, Ramadhan, or the BRI Liga 1 season). You may withdraw this consent at any time through your Account settings or by contacting support.
9. Platform improvement and analytics: To analyse aggregate, anonymised usage data for the purposes of improving the Platform's design, performance, and user experience. Individual players are not identifiable from this analysis.
10. Legal compliance and enforcement: To comply with applicable laws, court orders, regulatory requests, or law enforcement directions, and to establish, exercise, or defend legal claims relating to Platform operations.

wd777 processes personal data only where a valid lawful basis exists. The following table summarises the lawful basis applicable to each primary processing purpose:

Where wd777 relies on legitimate interests as the lawful basis for processing, we have conducted and documented a legitimate-interests assessment (LIA) confirming that our interests do not override your fundamental privacy rights. You may request a summary of any LIA by contacting our data protection contact at the address in Clause 13.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent for marketing does not affect the processing of your data for contractual or compliance purposes.

wd777 does not sell, rent, or commercially trade your personal data. Personal data is shared with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Authorised Service Providers

We engage the following categories of third-party Data Processors to support Platform operations. All processors are bound by contractual data-processing agreements requiring them to handle data securely and solely for specified purposes:

• KYC and identity verification providers: Specialist services that authenticate the identity documents you submit during account verification, operating under strict data-confidentiality obligations.
• Payment processors and banking partners: Indonesian banks (including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data necessary to execute and confirm financial transfers.
• Fraud detection and risk management vendors: Third-party services that analyse transactional and behavioural data to detect suspicious activity. These vendors are not permitted to retain or use wd777 player data for any purpose beyond providing fraud-prevention services.
• Customer support platform providers: Software vendors who power the live chat and ticketing system used by our support team. Access is limited to authorised support personnel and is subject to access controls.
• IT infrastructure and cloud hosting providers: wd777 uses internationally hosted infrastructure. All hosting providers are required to maintain appropriate data security standards. See Clause 9 for information on international data transfers.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session data necessary for game delivery and fairness certification. They do not receive your registration or financial data.

6.2 Legal and Regulatory Disclosures

wd777 may disclose personal data to regulatory authorities, law enforcement bodies, tax authorities, or courts where required by law, pursuant to a legally binding court order, or where we are obligated to do so under our gaming licence conditions. We will, where legally permitted, notify you before making such a disclosure. Where notification is legally prohibited, we will document the disclosure and provide notice as soon as the prohibition is lifted.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of wd777 or any of its material assets, personal data held on the Platform may be transferred to the acquiring or successor entity. If such a transfer occurs, the successor entity will be required to honour the commitments described in this Privacy Policy. wd777 will notify affected players of any such transfer in advance where reasonably practicable.

wd777 uses cookies and similar tracking technologies on the Platform to maintain session continuity, remember your preferences, prevent fraud, and understand aggregate usage patterns. By continuing to use the Platform with cookies enabled in your browser, you consent to the cookie practices described in this clause.

7.1 Cookie Categories

7.2 Managing Cookies

You can manage or restrict cookies through your browser's privacy settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, delete, and block specific cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your wd777 Account. Instructions for managing cookies in popular browsers are available through each browser's built-in help documentation.

wd777 does not currently support a per-category cookie consent widget embedded in the Platform UI. If you wish to opt out of analytical cookies specifically, disabling all non-essential cookies in your browser settings will achieve this outcome.

wd777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing conditions, applicable law, or legitimate business needs. The following retention schedule summarises our standard approach:

When a retention period expires and no legal obligation requires continued storage, personal data is either permanently deleted from our systems or anonymised so that it can no longer be linked to a specific individual. Anonymised data may be retained indefinitely for aggregate statistical purposes.

You may request the deletion of your personal data at any time. However, wd777 reserves the right to retain data beyond a deletion request where an applicable legal obligation, ongoing dispute, or open regulatory inquiry requires us to do so. In such cases, we will notify you of the specific reason for continued retention and the anticipated date of deletion.

wd777 operates using internationally hosted infrastructure and engages third-party service providers whose servers may be located outside Indonesia. As a result, your personal data may be transferred to, and stored in, countries or territories that are not Indonesia (referred to in this Policy as Third Countries).

wd777 takes all reasonable steps to ensure that any international transfer of personal data is conducted in compliance with applicable data protection principles. Specifically:

• Contractual safeguards: Where personal data is transferred to a Data Processor in a Third Country, wd777 implements binding contractual clauses that require the recipient to handle the data in accordance with this Policy and applicable data protection obligations.
• Adequacy and security standards: wd777 selects hosting and processing partners that demonstrate adherence to internationally recognised security standards (including ISO 27001 certification or equivalent) and are subject to credible independent auditing.
• Data minimisation in transfers: Cross-border transfers are limited to the minimum volume of personal data necessary for the specific processing task. No bulk transfer of the full wd777 player database to any Third Country is conducted for purposes other than infrastructure backup and disaster recovery.
• Encryption in transit: All personal data transferred across networks — whether domestically within Indonesia or to Third Country servers — is encrypted using 256-bit TLS encryption for data in transit and AES-256 encryption for data at rest.

If you wish to obtain further information about the specific Third Countries to which your personal data may be transferred, or the safeguards in place for such transfers, please contact us using the details in Clause 13.

The wd777 Platform is strictly intended for adults aged 21 years and older. wd777 does not knowingly collect, store, or process personal data relating to any individual under the age of 21. Gambling services are age-restricted for reasons of player protection and are not appropriate for minors.

wd777 takes proactive steps to prevent underage access:

• Date of birth is a mandatory field during registration, and date of birth verification is applied before any Account is activated.
• KYC verification, which is mandatory before the processing of any withdrawal, requires a government-issued photo identification document that confirms the player's date of birth.
• Accounts where age verification cannot be completed within a reasonable period will be suspended pending resolution, and any real-money balance will be held in trust until identity is confirmed.
• Where wd777 discovers or has reasonable grounds to believe that a registered player is under the age of 21, the Account will be closed immediately. Any winnings accumulated by an underage player will be forfeited in accordance with the Terms and Conditions.

As an individual whose personal data is processed by wd777, you hold a set of rights over that data. wd777 is committed to honouring these rights and will respond to all valid requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days with notification to you.

To exercise any of the rights described above, please contact the wd777 data protection team using the details provided in Clause 13. We may ask you to verify your identity before acting on a request. wd777 does not charge a fee for processing data subject rights requests in standard circumstances.

wd777 implements a multi-layered technical and organisational security programme designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

1. Transport Layer Security (TLS): All communication between your browser or device and the wd777 Platform is encrypted using industry-standard 256-bit TLS. Our SSL certificate is maintained continuously, and HSTS (HTTP Strict Transport Security) headers are enforced to prevent downgrade attacks.
2. Data at Rest Encryption: Sensitive Personal Data stored on wd777 servers — including KYC documents, financial records, and authentication credentials — is encrypted using AES-256 encryption. Database servers are not exposed to the public internet and require multi-factor authenticated access for administrative operations.
3. Password Security: User passwords are stored as salted cryptographic hashes using a strong hashing algorithm. Plaintext passwords are never stored, logged, or transmitted in any internal system. wd777 strongly recommends all players to enable two-factor authentication (2FA) on their Account.
4. Access Controls: Access to production systems and player databases is restricted to authorised personnel based on the principle of least privilege. All internal access is logged, and privileged access reviews are conducted on a regular schedule. Remote access to backend systems requires VPN and multi-factor authentication.
5. Intrusion Detection and Monitoring: wd777 operates real-time monitoring of network traffic and application-layer activity. Anomalous access patterns trigger automated alerts and human review. Regular penetration testing is conducted by independent third-party security firms.
6. Incident Response: wd777 maintains a documented data breach response plan. In the event of a security incident that affects your personal data, we will notify you and relevant authorities within the timeframes required by applicable law, and will take immediate containment measures to limit the impact of any breach.
7. Third-Party Security Assessments: All Data Processors engaged by wd777 are required to demonstrate equivalent security standards before onboarding. Processor security posture is reviewed periodically through due-diligence assessments and contractual audit rights.
8. Physical Security: Data centre facilities used by wd777's hosting providers are subject to physical access controls including badge authentication, CCTV monitoring, and restricted server room access. wd777 does not operate its own on-premises data centre.

13.1 Contacting the wd777 Data Protection Team

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have concerns about how your personal data is being handled, please contact the wd777 data protection team using the following details:

All data subject requests must be submitted in writing (email is acceptable). To protect your privacy, wd777 will verify your identity before processing any request that involves access to, modification of, or deletion of personal data. We may ask you to confirm your registered email address, provide the last four digits of your registered bank account, or complete a further identity check using the same process as our standard KYC workflow.

13.2 Updates to This Privacy Policy

wd777 reviews this Privacy Policy at regular intervals and updates it when necessary to reflect changes in our processing activities, applicable laws, or industry standards. When we make a material change to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page
• Post a notice on the Platform's homepage or within your Account dashboard for a period of at least 14 days following the change
• Send an email notification to all registered players where the change materially affects their rights or the way their data is used

Your continued use of the wd777 Platform following notification of a material update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must close your Account and cease using the Platform. Account closure requests should be directed to the support team at the contact address above.

13.3 Complaints

If you are unsatisfied with wd777's response to a data protection concern or data subject rights request, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. wd777 takes all privacy complaints seriously and will cooperate fully with any supervisory authority investigation.

We strongly encourage you to contact us directly in the first instance so that we have the opportunity to address your concern before any formal escalation. The vast majority of data protection concerns can be resolved through direct communication with our support team.