Privacy Policy

wd126 ("we", "us", "our", or "the Platform") operates the online casino, sportsbook, and gaming services accessible at https://wd126.app and all associated subdomains, mobile interfaces, and applications. wd126 functions as both the data controller and the data processor for all personal information collected from members registered on the Platform.

This Privacy Policy applies to all current and former members of wd126 who are residents of Indonesia, and to any person who visits or interacts with the Platform regardless of whether they have completed registration. For the purposes of this Policy, "personal data" means any information that identifies, or could reasonably be used to identify, a specific individual — including name, email address, phone number, bank account details, IP address, and device identifiers.

Our designated Data Protection contact can be reached at: [email protected]. All data rights requests, privacy concerns, and data breach notifications should be directed to this address.

wd126 collects personal data through several channels: directly from you during registration and use of the Platform, automatically through technical means when you visit the site, and from third-party verification providers during KYC checks. The categories of data we collect are set out in the table below:

wd126 processes your personal data only for the purposes for which it was collected and for compatible purposes that a reasonable person would expect given the nature of the Platform. The primary purposes for which we use personal data are:

• Account Registration and Management: To create, verify, maintain, and secure your member account; to authenticate your identity at each login using session tokens and, where enabled, SMS OTP; and to communicate account-related notifications such as password reset confirmations and security alerts.
• Service Delivery: To process deposits and withdrawals via Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency channels; to record and settle bets placed on the sportsbook and casino products; to award and track bonus funds and wagering requirements; and to provide real-time game access across all product verticals.
• Identity Verification and KYC Compliance: To verify that you meet the minimum age requirement of 21 years and are a resident of Indonesia, as required by our internal eligibility policy; to conduct ongoing identity checks as required by our AML compliance programme; and to screen your identity against international sanctions and politically exposed persons (PEP) lists.
• Anti-Fraud and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and any other prohibited conduct described in the Terms & Conditions; to operate our real-time fraud detection systems; and to share flagged transaction data with financial intelligence bodies where legally obligated.
• Customer Support: To respond to your enquiries, complaints, and support requests via live chat and email; to track open support tickets; and to maintain records of our communications for quality assurance and dispute resolution purposes.
• Responsible Gaming: To monitor gambling behaviour patterns that may indicate problem gambling; to enforce voluntary deposit limits, session time limits, and self-exclusion orders that you request; and to send responsible gaming reminders and resources where appropriate.
• Personalisation and Marketing: To personalise your Platform experience, including recommending game titles and promotions relevant to your play history; and, where you have opted in, to send you promotional communications including bonus offers, seasonal promotions (Ramadhan, Idul Fitri, Imlek, Indonesian Independence Day), and new product announcements. You may withdraw your marketing consent at any time.
• Platform Improvement: To analyse aggregate usage data, identify technical errors, optimise site performance, conduct A/B testing, and improve the overall quality and security of the wd126 Platform — all using anonymised or pseudonymised data where possible.
• Legal Compliance: To comply with applicable international laws and regulations including AML obligations, data retention requirements, and any lawful orders from competent authorities requiring disclosure of member data.

wd126 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contract Performance: Processing that is necessary to fulfil our contractual obligations to you as a registered member — including account creation, bet settlement, payment processing, and customer support — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC identity verification, AML transaction monitoring, sanctions screening, and data retention — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing that serves wd126's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, analytics, and responsible gaming monitoring — is carried out on the basis of legitimate interests. Where we rely on this ground, we have conducted a balancing assessment to confirm that our interests are proportionate and do not override your fundamental rights.
• Consent: Processing for optional purposes — including marketing communications and the use of non-essential cookies — is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

wd126 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• KYC and Identity Verification Providers: We share identity documents and liveness photographs with accredited third-party KYC verification services to confirm your age and identity. These providers are contractually bound to process data solely for verification purposes and to maintain standards equivalent to this Policy.
• Payment Processing Partners: Financial data necessary to execute your deposit and withdrawal transactions is shared with the relevant payment processors, banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). Data shared is limited to what is required to complete the specific transaction.
• Game Content Providers: To deliver live casino, slot, and other gaming content, wd126 works with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. A member's session token and game history may be shared with the relevant studio solely for the purpose of providing the game session. Each studio operates under its own privacy policy and data processing agreement with wd126.
• Fraud Prevention and AML Networks: In cases where our fraud detection systems flag a transaction or account as high-risk, anonymised or pseudonymised data may be shared with industry fraud prevention networks to cross-reference against known fraud patterns.
• Legal and Regulatory Authorities: wd126 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities if required by a lawful order, warrant, or mandatory reporting obligation. We will notify affected members of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of wd126's assets, member data may be transferred to the acquiring entity subject to that entity assuming all obligations under this Privacy Policy. Members will be notified of any such transfer in advance.
• Analytics and Infrastructure Providers: Anonymised and aggregated usage and technical data is shared with cloud infrastructure providers and analytics platforms to support platform performance, load balancing, and improvement activities. These providers act as data processors on wd126's behalf and are contractually prohibited from using the data for their own purposes.

wd126 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate the Platform, remember your preferences, measure engagement, and serve relevant promotional content. The cookies we use fall into the following categories:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. Essential cookies cannot be disabled without breaking core Platform functionality such as login and payment processing.
• Functional Cookies: Remember your preferences such as language settings, preferred lobby view, and last visited game category. These improve your experience but are not essential to core service delivery. You may disable functional cookies in your browser settings without losing access to the Platform.
• Analytics Cookies: Collect anonymised data about how members navigate and use the Platform, including pages visited, time on site, click paths, and error events. This data helps wd126 identify performance bottlenecks and improve the member experience. Analytics cookies require your consent and may be disabled via the cookie preference panel.
• Marketing Cookies: Track your interaction with wd126 promotional campaigns and, where you have opted in to marketing, help personalise the bonus offers and game recommendations you see. Marketing cookies require your consent and may be withdrawn at any time.

Most modern web browsers allow you to view, manage, and delete cookies through the browser's privacy or settings menu. Please note that disabling essential cookies will prevent you from logging in to your wd126 account. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

wd126 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, to maintain your active account, and to comply with legal obligations. The following retention periods apply:

• Active Account Data: Identity data, contact data, and account credentials are retained for the full duration of your active membership on the wd126 Platform.
• Transaction and Betting Records: All deposit, withdrawal, and bet history records are retained for a minimum of 5 years from the date of each transaction, in compliance with international AML standards and financial record-keeping obligations.
• KYC Documents: Identity documents, verification photographs, and KYC audit trails are retained for a minimum of 5 years from the date of your last transaction or from the date of account closure, whichever is later.
• Customer Support Records: Chat transcripts, email correspondence, and support ticket records are retained for 3 years from the date of resolution, for dispute resolution and quality assurance purposes.
• Marketing Data: Marketing preference records and campaign interaction data are retained for 2 years from the date of your last marketing engagement or until you withdraw consent, whichever is earlier.
• Technical and Analytics Data: Server log files containing IP addresses and device identifiers are retained for 12 months and then automatically purged. Aggregated and anonymised analytics data may be retained indefinitely as it cannot be used to identify individuals.
• Closed Accounts: Upon closure of your account, wd126 will retain your data for the periods described above. At the expiry of the applicable retention period, your personal data will be securely and irreversibly destroyed using certified data erasure or physical destruction methods, as appropriate to the storage medium.

wd126 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Our key security measures include:

• Transport Security: All data in transit between your device and wd126 servers is encrypted using TLS 1.3 with Perfect Forward Secrecy (PFS). Our SSL certificates are issued by a globally trusted Certificate Authority and are renewed proactively before expiry.
• Data Encryption at Rest: All personal data stored in wd126 databases — including identity documents, financial records, and account credentials — is encrypted using AES-256, the same standard used by international banking institutions.
• Access Controls: Access to systems that hold personal data is restricted to authorised wd126 personnel on a strict need-to-know basis, enforced through role-based access control (RBAC). All administrative access requires multi-factor authentication.
• Network Security: wd126's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and web application firewalls (WAF). Regular penetration testing is conducted by independent security firms.
• Vulnerability Management: wd126 operates a continuous vulnerability scanning programme and applies security patches within defined SLA timeframes based on severity classification.
• Incident Response: wd126 maintains a formal data breach response plan. In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, wd126 will notify affected members without undue delay and no later than 72 hours after becoming aware of the breach.

As a wd126 member, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and your registered email address or Member ID. We will acknowledge your request within 24 hours and fulfil it within 30 calendar days.

wd126 is strictly an adults-only platform. Our services are not directed at, and must not be accessed by, any person under the age of 21. We do not knowingly collect, process, or store personal data from individuals under 21 years of age. Age verification is performed for every new member as part of the registration and KYC process.

If wd126 discovers or has reason to believe that a registered member is under the age of 21, we will immediately suspend the account, reverse any pending transactions, forfeit any bonus funds, and permanently delete all personal data associated with that account from our systems within 30 days, except where retention is required to report the incident to relevant authorities.

If you are a parent or guardian and believe that a minor in your care has registered an account on wd126 without your knowledge, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act on your report as a highest-priority matter.

wd126 operates on internationally distributed cloud infrastructure. As a result, your personal data may be processed and stored on servers located outside of Indonesia, including in jurisdictions across Southeast Asia, Europe, and North America. These transfers are necessary to deliver a globally available, low-latency Platform experience to Indonesian members.

Whenever personal data is transferred to a jurisdiction outside Indonesia, wd126 implements appropriate safeguards to ensure that the transferred data receives a level of protection equivalent to that provided under this Policy. These safeguards include:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with all international sub-processors and cloud infrastructure providers.
• Contractual obligations requiring international recipients to implement security measures equivalent to those described in Section 8 of this Policy.
• Transfer impact assessments conducted prior to engaging any new international sub-processor, to confirm that the destination jurisdiction does not present an unacceptable risk to your rights and freedoms.
• Encryption of all data in transit using TLS 1.3, ensuring that data intercepted during international transmission cannot be read by unauthorised parties.

The wd126 Platform may contain links to third-party websites, game studio portals, or promotional partner pages. This Privacy Policy applies solely to data collected by wd126 directly. Once you navigate away from wd126 to a third-party website, that site's own privacy policy governs the collection and use of your data, and wd126 accepts no responsibility for the privacy practices of any third party.

Game content delivered within the wd126 lobby by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may involve those studios collecting certain technical data — such as your game session token, device type, and browser version — to render the game. This processing is carried out by the studio as an independent data controller or a co-processor under a data processing agreement with wd126. Please review the relevant studio's privacy policy for full details of their data practices.

wd126 recommends that you review the privacy policy of any third-party site or service before providing your personal information. We do not endorse, and have no control over, the content or data practices of any third-party operators accessible via links from our Platform.

wd126 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, Platform features, or regulatory guidance. All amendments will be published on this page at https://wd126.app/privacy-policy with a revised "Last Updated" date at the top of the document.

For material changes — meaning changes that significantly affect your rights or the way we process your personal data — wd126 will provide advance notice through one or more of the following channels: a prominent banner on the wd126 homepage, an in-Platform notification displayed at your next login, or a direct email to your registered email address. Material changes will take effect no sooner than 14 calendar days after the notice is issued, giving you adequate time to review the changes and, if you do not agree, to close your account and request deletion of your data before the changes take effect.

Non-material changes — such as typographical corrections, clarifications of existing practices, or updates to contact information — will take effect immediately upon publication. Your continued use of the wd126 Platform after any amendment has taken effect constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way wd126 handles your personal data, please reach out to our Data Protection team through the following channels:

• Email: [email protected] — use subject line "Privacy Enquiry" for general questions or "Data Rights Request" for formal rights requests.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the Platform after logging in to your wd126 account. Indonesian-speaking support agents are available at all times across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) coverage hours.
• Response Times: Data rights requests receive a written acknowledgement within 24 hours and a full response within 30 calendar days. General privacy enquiries are typically answered within 4 hours via live chat and within 24 hours via email.

When submitting a data rights request, please include your registered email address or Member ID, the nature of your request, and any relevant details to help us locate your records accurately. Providing this information upfront will help us fulfil your request as quickly as possible.