Privacy Policy — waq89

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, national identity number, date of birth, email address, IP address, and payment account details.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means waq89, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of waq89, under written instruction and subject to contractual data-protection obligations.
• "Player" / "User" / "you" means any natural person who accesses, browses, or registers an account on the waq89 Platform.
• "KYC" means the Know Your Customer identity and age-verification process that waq89 applies prior to processing withdrawals and certain account features.
• "Services" means all products and features offered on the Platform, including sports betting, live casino, togel (Indonesia's traditional numbers lottery), slot gacor (high-payout slot games), and customer support functions.
• "Cookies" means small text files stored on your device by the Platform for session management, analytics, and personalisation purposes.

waq89 collects only the Personal Data that is necessary for the lawful operation of its Services and for compliance with applicable regulatory obligations. The categories of data we collect are detailed in the table below:

waq89 collects Personal Data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically through Cookies, server logs, and analytics tools as you interact with the Platform.
• Third-party sources: Identity verification agencies used for KYC; payment processors including Indonesian local banks and e-wallet providers; fraud-detection and AML screening services; and, where applicable, publicly available registries or regulatory databases.
• Referrals: If you arrive at waq89 through an affiliate or referral link, the referring party may transmit limited data (such as a referral code) to attribute your registration. waq89 does not receive your pre-registration browsing history from third-party sites.

waq89 uses your Personal Data exclusively for the following purposes:

• Account management: Creating, maintaining, and securing your account; verifying your identity and age (21+); managing account settings and preferences.
• Service delivery: Processing deposits and withdrawals in IDR via BCA, BRI, BNI, Mandiri, and e-wallets; settling bets and game outcomes; delivering customer support in Bahasa Indonesia and English.
• Legal and regulatory compliance: Meeting anti-money-laundering (AML) obligations; complying with Know Your Customer (KYC) requirements; responding to lawful requests from competent authorities; maintaining records required under applicable law.
• Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, payment fraud, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring player activity for indicators of problem gambling; facilitating deposit limits, session controls, and self-exclusion requests; complying with our responsible gaming commitments.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the functionality, design, and content of the waq89 Platform.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal promotions to Players who have expressly opted in to receive such communications. You may opt out at any time by contacting support.

waq89 processes your Personal Data only where a valid legal basis exists. The applicable legal bases are:

• Contractual necessity: Processing required to perform our contract with you — specifically, to provide the betting and gaming Services you have registered to use, including processing transactions and resolving disputes.
• Legal obligation: Processing required to comply with AML regulations, KYC obligations, age-verification requirements, and any other applicable regulatory duties.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit, freely given, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

waq89 shares your Personal Data only with carefully selected third parties, and only to the extent necessary for the purposes described in this Policy. Categories of recipients include:

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC agencies receive your identity documents and personal details to conduct age and identity checks required before withdrawal.
• Game studios and platform providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, and Pocket Games Soft may receive pseudonymised player identifiers and game session data to deliver their games and resolve game-outcome disputes.
• Fraud prevention and AML screening services: Specialised security vendors receive transaction data and behavioural signals to detect and prevent financial crime on the Platform.
• Customer support infrastructure: Live-chat and ticketing platform providers process communications data solely to facilitate support interactions on waq89's behalf.
• Regulatory and law enforcement authorities: Where required by applicable law or court order, waq89 may disclose Personal Data to competent government bodies, financial intelligence units, or law enforcement agencies.
• Corporate transactions: In the event of a merger, acquisition, or transfer of substantially all of waq89's assets, your Personal Data may be transferred to the successor entity, subject to equivalent data-protection obligations.

All third-party processors are bound by contractual data-processing agreements that require them to process your Personal Data only for the specific, permitted purposes described above and to maintain security standards consistent with those applied by waq89.

waq89 retains your Personal Data only for as long as is necessary to fulfil the purposes described in this Policy or to comply with applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual. Where anonymised data is retained for aggregate analytics, it is no longer considered Personal Data under applicable privacy law.

waq89 implements a multi-layered security framework to protect your Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and waq89's servers is protected by industry-standard Transport Layer Security. You will see the padlock indicator and "https" in your browser's address bar at all times on the Platform.
• Encrypted data storage: Personal Data and financial records stored on waq89's infrastructure are encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel on a strict need-to-know basis.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. waq89 staff accounts with access to player data are required to use 2FA at all times.
• Access controls and audit logging: Internal access to player data is controlled by role-based permissions. All access events are logged and subject to regular audit review to detect anomalous access patterns.
• Penetration testing and vulnerability management: waq89 conducts regular third-party security assessments of its platform infrastructure. Identified vulnerabilities are triaged and remediated according to a risk-prioritised schedule.
• Staff training: All employees and contractors with access to player data receive mandatory data-protection training upon onboarding and at regular intervals thereafter.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, waq89 will notify affected Players without undue delay and take all reasonable steps to contain and remediate the breach.

waq89 uses Cookies and similar tracking technologies to deliver a functional, secure, and personalised experience on the Platform. The categories of Cookies we use are as follows:

• Strictly necessary Cookies: These Cookies are essential for the Platform to function. They manage your login session, maintain your cart or bet-slip state, and ensure security tokens are passed correctly. These Cookies cannot be disabled without preventing the Platform from working.
• Performance and analytics Cookies: These Cookies collect anonymised data about how Players interact with the Platform — which pages are visited most, where errors occur, and how users navigate between sections. This data is used exclusively to improve the Platform's performance and user experience.
• Functional Cookies: These Cookies remember your preferences, such as your preferred language (English), display settings, and notification options, so you do not need to reconfigure them on each visit.
• Fraud prevention and security Cookies: These Cookies help waq89 detect and block suspicious activity, including bot access, multi-accounting attempts, and unusual geographic access patterns.

waq89 does not use third-party advertising Cookies or cross-site tracking Cookies that build profiles of your browsing activity beyond the Platform for advertising targeting purposes.

You may manage Cookie preferences through your browser settings. However, disabling strictly necessary Cookies will impair your ability to use the Platform's core features, including account login and bet placement.

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you hold the following rights in respect of your Personal Data held by waq89. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving a verified request.

The waq89 Platform is strictly for adults aged 21 years and above. waq89 does not knowingly collect Personal Data from individuals under the age of 21, and no part of our Services is directed at minors.

• Age verification is a mandatory step in the KYC process, conducted prior to any withdrawal from the Platform.
• If we become aware that Personal Data has been collected from an individual under the age of 21, we will immediately close the associated account, return any deposits to the source payment method, and delete all Personal Data relating to that individual as promptly as legally permissible.
• Parents and guardians who believe that a minor has registered on the waq89 Platform should contact our support team immediately at [email protected]. We will treat such reports as urgent and investigate within 24 hours.

waq89 operates an internationally distributed platform infrastructure. As a result, your Personal Data may be processed by servers or third-party processors located outside Indonesia, including jurisdictions in Asia-Pacific, Europe, or other regions where waq89's technology or service partners are based.

Where Personal Data is transferred outside Indonesia, waq89 ensures that adequate safeguards are in place to protect your data to a standard equivalent to that applied within Indonesia. These safeguards include:

• Contractual clauses in data-processing agreements that impose privacy and security obligations on the recipient consistent with this Policy.
• Transfers to jurisdictions that maintain data protection standards recognised as adequate by applicable international frameworks.
• Technical and organisational measures — including encryption in transit and at rest — that protect data regardless of the geographic location of processing.

By using the waq89 Platform, you acknowledge and consent to the transfer of your Personal Data to international locations for the purposes described in this Policy, subject to the safeguards outlined above.

waq89 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the Services we offer. When material changes are made, we will notify registered Players via the email address on file at least 7 days before the revised Policy takes effect, or display a prominent notice on the Platform.

• The "Last Updated" date at the top of this page reflects the date of the most recent revision. The version published on the Platform at any given time is the current binding version.
• Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.
• If you do not agree with a material change to this Policy, you may close your account before the effective date. Your remaining Balance will be returned to your registered payment method in accordance with our Terms & Conditions.
• We encourage you to review this page periodically to stay informed about how waq89 protects your personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way waq89 processes your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy / Data Rights" for the fastest routing to our data protection team. We aim to respond within 2 business days for general queries and within 30 calendar days for formal data-subject rights requests.
• Live Chat: Available 24/7 on the Platform in Bahasa Indonesia and English. For complex data-protection matters, we recommend the email channel to ensure a written record of your request.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to seek legal redress through the appropriate courts.