Privacy Policy — wwb09

This Privacy Policy ("Policy") describes how wwb09 ("wwb09", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "Member", "user") who access or use the wwb09 online gaming platform at https://wwb09.net and any associated services, mobile interfaces, or communication channels operated by wwb09.

wwb09 is an internationally licensed and regulated online gaming platform serving Members primarily located in Indonesia. All services are provided in English. Our platform offers football sportsbook, live casino, slots, and togel (Indonesia's traditional numbers lottery) products, among others.

This Policy applies to all personal data processing activities carried out by wwb09 in connection with the operation of the platform, the administration of Member accounts, the processing of deposits and withdrawals in Indonesian Rupiah (IDR), customer support activities, and our compliance with Know Your Customer (KYC) and anti-money-laundering (AML) obligations.

This Policy should be read alongside the wwb09 Terms & Conditions, which govern your overall use of the platform, and the Responsible Gaming page, which describes additional safeguards available to Members.

wwb09 collects personal data in the following categories. We collect only what is necessary and proportionate to the purposes described in this Policy.

2.1 Identity Data

Full legal name, date of birth, nationality, and a copy of one or more government-issued identity documents submitted during the KYC process (national identity card / KTP, passport, or driver's licence).

2.2 Contact Data

Residential address in Indonesia (city, province, postal code), email address, and mobile phone number registered to your account.

2.3 Financial Data

Indonesian bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, or BSI (Bank Syariah Indonesia); e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja; transaction history including deposit amounts, withdrawal requests, game stake values, and balances — all denominated in IDR.

2.4 Account & Usage Data

Username, account creation date, login timestamps, session duration, game history (including bet size, game title, win/loss outcomes), bonus usage history, and any self-imposed responsible gaming limits applied to your account.

2.5 Technical Data

IP address, device type and operating system, browser type and version, screen resolution, referring URL, and unique device identifiers (where applicable). This data is collected automatically when you access the platform.

2.6 Communications Data

Records of all communications between you and the wwb09 support team via live chat, email, or any other channel — including the content of those communications, timestamps, and support agent identifiers.

2.7 Verification & Compliance Data

Results of KYC checks, source-of-funds verification outcomes, PEP (Politically Exposed Person) screening results, and any sanctions-list screening data generated in the course of our AML compliance programme.

wwb09 collects personal data through the following means:

• Direct submission: Information you provide voluntarily when registering an account, completing a KYC verification request, making a deposit or withdrawal, contacting our support team, or responding to any on-platform survey or promotion.
• Automated collection: Technical and usage data collected automatically through cookies, log files, and similar tracking technologies each time you access the wwb09 platform. See Clause 8 for full details of our cookie practices.
• Third-party verification partners: Identity verification and KYC screening data sourced from authorised identity verification service providers, where you have consented to such checks as part of the account registration or withdrawal process.
• Payment service providers: Confirmation data returned by Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) upon processing a deposit or withdrawal transaction.
• Fraud and compliance screening tools: Data sourced from sanctions lists, PEP databases, and fraud-prevention services used as part of our AML compliance programme.

wwb09 processes your personal data for the following purposes, each supported by a lawful basis:

wwb09 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the specified purpose:

5.1 Service Partners

We share data with carefully selected third-party service providers who process data on our behalf under binding data-processing agreements. These include: KYC and identity-verification technology providers; payment processing partners facilitating transactions via BCA, BRI, BNI, Mandiri, and Indonesian e-wallets; game studios and live casino operators (including Evolution Gaming and Pragmatic Play Live) whose software is integrated into the platform; fraud detection and security service providers; and IT infrastructure and cloud hosting providers.

5.2 Legal and Regulatory Disclosure

wwb09 may disclose personal data to a regulatory authority, law enforcement agency, court, or other government body where required to do so by applicable law, a court order, or a lawful regulatory directive. We will, where legally permitted, notify you of any such disclosure request before complying.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of wwb09's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the applicable privacy terms prior to your data being transferred or becoming subject to a different privacy policy.

5.4 Aggregated and Anonymised Data

We may share aggregated, anonymised statistical data (for example, platform-wide game popularity metrics or regional deposit volume data) with business partners or in published research. Such data cannot be used to identify any individual Member.

wwb09 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following retention periods apply as a general guide:

• Account and transaction data: Retained for a minimum of 5 years from the date of the last account transaction, in accordance with standard AML record-keeping obligations applicable to online gaming operators.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification, or from the date of account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the interaction, unless the communication relates to an unresolved complaint or legal matter, in which case it is retained until final resolution.
• Technical and usage data (logs): Retained for up to 18 months from collection, after which it is anonymised or deleted.
• Marketing preference data: Retained until you withdraw consent or for 2 years from the last interaction, whichever is earlier.

When personal data is no longer required and the applicable retention period has elapsed, it is securely deleted or irreversibly anonymised in accordance with wwb09's internal data lifecycle management procedures.

wwb09 implements a layered security framework designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• Transport layer security: All data transmitted between your device and the wwb09 platform is encrypted using TLS 1.2 or higher. The platform enforces HTTPS at all times.
• Encryption at rest: Sensitive personal data — including identity documents and financial account details — is encrypted at rest using AES-256 or equivalent standard encryption.
• Access controls: Access to Member personal data within wwb09's internal systems is restricted on a strict need-to-know basis. Staff access is role-based and subject to regular access reviews and audit logging.
• Two-factor authentication (2FA): 2FA is available to all Members as an additional layer of account security and is strongly recommended. wwb09's internal administrative systems require 2FA for all staff with data access.
• Intrusion detection and monitoring: The wwb09 platform is monitored around the clock for anomalous access patterns, potential intrusions, and data exfiltration attempts.
• Vulnerability management: Regular penetration testing and vulnerability assessments are conducted by qualified internal and third-party security professionals. Critical vulnerabilities are remediated on a priority basis.
• Staff training: All wwb09 personnel with access to personal data receive regular data protection and security training.

In the event of a personal data breach that poses a risk to Member rights, wwb09 will notify affected Members without undue delay and will take immediate steps to contain and remediate the breach.

wwb09 uses cookies and similar tracking technologies to operate and improve the platform experience. The following types of cookies are used:

wwb09 does not use third-party advertising or retargeting cookies. No cross-site tracking of your activity on other websites is conducted through the wwb09 platform.

Most browsers allow you to manage cookie preferences through their settings panel. Disabling strictly necessary cookies will impair or prevent platform access. Disabling analytical cookies will not affect your ability to play games or manage your account.

As a Member of wwb09, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team as described in Clause 14.

wwb09 operates as an internationally licensed gaming platform. Certain service partners involved in platform delivery — including game studio technology providers and cloud infrastructure partners — may process data in jurisdictions outside Indonesia.

Where personal data is transferred outside Indonesia to a third-party service partner, wwb09 ensures that appropriate safeguards are in place, including:

• Binding contractual obligations on the recipient to process personal data only for the agreed purpose and to protect it to a standard equivalent to that applied by wwb09.
• Use of recognised international transfer mechanisms, such as standard contractual clauses or equivalent data transfer agreements.
• Pre-transfer due diligence to assess whether the destination jurisdiction provides an adequate level of data protection.

Payment transactions involving Indonesian banks and e-wallets (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) are processed within Indonesia and are not subject to international transfer. Financial data associated with these transactions remains within the Indonesian financial system infrastructure.

The wwb09 platform may contain references to or links toward third-party content such as game studio documentation or sports data feeds. Where such links are present, please be aware that wwb09 does not control the privacy practices of those third-party websites or services and is not responsible for their content or data handling.

This Privacy Policy applies solely to data processed by wwb09 in connection with the wwb09 platform. We encourage you to review the privacy policies of any third-party services you access independently of the wwb09 platform.

The wwb09 platform is strictly for adults aged 21 and over. wwb09 does not knowingly collect, store, or process personal data belonging to any person under the age of 21.

If we become aware — through a Member report, internal audit, or any other means — that an account has been registered by or on behalf of a person under 21, we will immediately:

• Suspend the account and freeze any associated balance.
• Delete all personal data associated with the account to the extent not required for regulatory record-keeping or fraud investigation purposes.
• Notify the relevant internal compliance team and take any further action required under our licensing obligations.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on wwb09, please contact our support team immediately via live chat or at [email protected] (plain text — not a clickable link).

wwb09 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. When a material change is made, we will notify active Members by posting a prominent notice on the platform or by sending an email to the address registered on your account, at least 14 days before the change takes effect.

The "Last updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the wwb09 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. The current version of this Policy is always available at https://wwb09.net/privacy-policy and supersedes all previous versions.

If you do not agree with the changes to this Policy, you must cease use of the platform and request account closure before the effective date of the revision.

For any questions about this Privacy Policy, to exercise any of your data rights under Clause 9, or to report a potential data protection concern, please contact the wwb09 data team through the following channels:

• Live Chat: Available 24 hours a day, 365 days a year via your Member account dashboard. For urgent data security concerns, live chat is the fastest route. Average first response: under 90 seconds.
• Email: [email protected] (plain text — not a clickable link). For formal data rights requests (access, erasure, portability), please submit via email with the subject line "Data Rights Request" and include your registered account username for identity verification. Allow up to 72 hours for acknowledgement.
• Support Hours: 00:00 – 24:00 WIB (Western Indonesia Time, UTC+7), every day of the year including Indonesian public holidays such as Idul Fitri, Nyepi, and Indonesian Independence Day (17 August).

This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all previous versions of the wwb09 Privacy Policy.