Privacy Policy — wb403

Introduction

This Privacy Policy applies to all personal data processed by wb403 in connection with the operation of the online betting and casino platform accessible at wb403.onl and any associated mobile or web applications. It governs the collection, use, storage, sharing, and deletion of personal data relating to registered Members, prospective Members who visit the Platform without registering, and any individual who communicates with wb403 via our support channels.

wb403 operates primarily in the Indonesian market, serving English-preference users who engage with our sportsbook, live casino, togel (Indonesia's traditional numbers lottery), slots, and virtual sports products. We take our obligations as a data controller seriously and have designed our data practices to align with internationally recognised privacy principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

This policy is intended to be transparent and accessible. If any section is unclear or if you have specific questions about how your data is handled, please contact our Data Protection team at [email protected] before registering an account.

Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is wb403, the operator of the platform accessible at wb403.onl. As data controller, wb403 determines the purposes for which personal data is collected and the means by which it is processed.

All data protection queries, subject access requests, and privacy-related complaints should be directed to:

• Contact: [email protected]
• Subject Line: "Privacy / Data Protection Request"
• Response Time: We aim to acknowledge all privacy requests within 5 business days and to provide a substantive response within 30 calendar days.

Personal Data We Collect

wb403 collects different categories of personal data depending on the nature of your interaction with the Platform. The following table summarises the main categories of data we process:

We do not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by applicable law or with your explicit consent.

How We Collect Your Data

wb403 collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal via a local Indonesian bank (BCA, BRI, BNI, Mandiri) or e-wallet (OVO, DANA, GoPay), contacting customer support, or responding to a promotional survey. This is the primary source of identity, contact, financial, and KYC data on the Platform.

4.2 Automated Collection

When you visit or interact with the wb403 Platform, certain technical and usage data is collected automatically through server-side logging, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser fingerprint data, session activity, and clickstream data. This automated collection occurs whether or not you are logged in to an account.

4.3 Third-Party Sources

We may receive supplementary data from third-party service providers engaged to assist with identity verification, fraud prevention, and payment processing. For example, if our KYC provider independently verifies the validity of your KTP against an official database, the outcome of that check is recorded against your wb403 account. We do not receive raw data from third-party social networks or advertising platforms in connection with account registration.

Purpose & Legal Basis for Processing

wb403 processes personal data only for specified, explicit, and legitimate purposes. The table below maps our primary processing activities to their corresponding purpose and legal basis:

Sharing Your Personal Data

wb403 does not sell, rent, or trade your personal data to unaffiliated third parties for their independent commercial or marketing purposes. We share personal data only in the following limited circumstances:

6.1 Payment Processing Partners

To process deposits and withdrawals, we share necessary financial and identity data with the payment service providers you select — including local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent data controllers in respect of the transaction data they process on their own systems and are bound by their own privacy policies.

6.2 KYC and Identity Verification Providers

We engage licensed third-party KYC and identity verification providers to assist with document authentication and age verification (21+). These providers receive a copy of the identity documents you submit and return a verification outcome to wb403. They are contractually prohibited from using your data for any purpose beyond the scope of identity verification services provided to wb403.

6.3 Game Content Providers

Casino games on the wb403 Platform are delivered by third-party studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft. These studios may receive anonymised session tokens and game-round data necessary to render the game and calculate outcomes. They do not receive your full identity or contact information unless specifically required for the provision of their service and disclosed at the point of collection.

6.4 Legal and Regulatory Disclosures

wb403 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. We will notify affected Members of such disclosures where legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of wb403's assets, Member personal data may be transferred to the successor entity. You will be notified of any such transfer by email to your registered address before your data is transferred and becomes subject to a different privacy policy.

Cookies & Tracking Technologies

wb403 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your authenticated session, to measure traffic and usage patterns, and to support fraud detection mechanisms. The categories of cookies we deploy are as follows:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to operate. They maintain your login session, remember your language preference, prevent cross-site request forgery, and enable basic security features. These cookies cannot be disabled without significantly impairing Platform functionality.

7.2 Analytics Cookies

We use anonymised analytics tools to understand how visitors navigate the Platform — which pages are visited most frequently, where users exit the registration flow, and which game categories attract the most engagement. This data is aggregated and does not identify individual Members.

7.3 Functional Cookies

Functional cookies remember your preferences within the Platform — such as your preferred deposit method (BCA, OVO, DANA), your last-visited game category, and your display settings. These cookies improve your experience but are not strictly necessary for the Platform to operate.

7.4 Managing Cookies

You may control cookie settings through your browser's privacy settings. Disabling strictly necessary cookies may prevent you from logging in or using certain Platform features. Disabling analytics or functional cookies will not affect your ability to place bets or access games, but some personalisation features may not function correctly. A full list of cookies deployed by wb403 is available on request by emailing [email protected].

Data Retention

wb403 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory retention requirements, and to defend against potential legal claims. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

Data Security

wb403 applies a layered security architecture designed to protect Member personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the wb403 Platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols. This includes all login sessions, financial transactions via BCA, BRI, OVO, DANA, and GoPay, and account management actions.
• Encryption at Rest: Sensitive personal data — including KYC documents and financial identifiers — is encrypted at rest using AES-256 encryption on our secure servers. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to Member personal data within wb403's internal systems is strictly role-based. Only staff with a legitimate operational need are permitted to access Member data, and all access is logged and audited.
• Intrusion Detection: wb403 operates continuous intrusion detection and monitoring systems to identify and respond to anomalous access patterns, brute-force login attempts, and other potential security threats in real time.
• Vendor Security Standards: All third-party vendors (payment processors, KYC providers, game studios) who receive Member data are required to maintain information security standards consistent with those applied by wb403 and to report any data security incident to wb403 without undue delay.

Your Privacy Rights

As a Member of the wb403 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request" from the email address registered to your account. We will respond within 30 calendar days.

wb403 will not charge a fee for exercising any of the above rights in standard circumstances. If a request is manifestly unfounded or excessive — for example, a repetitive series of access requests — we reserve the right to charge a reasonable administrative fee or to decline to act on the request, with written explanation provided to the Member.

Children's Privacy — 21+ Policy

The wb403 Platform is intended exclusively for adults aged 21 years or older. We do not knowingly collect, use, or store personal data relating to any individual under the age of 21. Age is verified during account registration and confirmed again during the KYC process, where Members are required to submit a valid government-issued photo ID (Indonesian KTP or passport) confirming their date of birth.

If wb403 discovers that an account has been registered by or on behalf of an individual under 21 years of age, that account will be immediately closed, any deposits will be returned to the originating payment source, and all winnings generated during the underage period will be forfeited. If you believe that a minor has registered an account on the wb403 Platform, please contact us immediately at [email protected] so that we can take prompt action.

Third-Party Links

The wb403 Platform does not contain links to third-party websites, services, or applications that are outside our control. All internal navigation links on the Platform point exclusively to pages within the wb403.onl domain. In the event that any third-party reference links are introduced in future (for example, links to game studio terms pages), this Privacy Policy will be updated to reflect the introduction of third-party link content, and Members will be notified in accordance with Section 13 below.

wb403 is not responsible for the privacy practices, content, or data security measures of any third-party website or application that a Member independently navigates to outside of the wb403.onl Platform. We encourage Members to review the privacy policy of any external service they use in connection with their online activity.

Changes to This Privacy Policy

wb403 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable privacy law, new product features, or changes in the structure of our third-party vendor relationships. When material changes are made, we will:

• Publish the updated Privacy Policy on this page with a revised "Last Updated" date at the top of the document.
• Send an email notification to all registered Members at their registered email address, summarising the key changes and providing a direct link to the updated policy.
• Where required by applicable law, request fresh consent before processing data under a materially different legal basis than previously disclosed.

Your continued use of the wb403 Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may request account closure in accordance with Clause 3.4 of our Terms & Conditions. We recommend bookmarking this page and reviewing it periodically.

Contact Us

For all privacy-related queries, subject access requests, consent withdrawal requests, or data protection complaints, please contact the wb403 Data Protection team through the following channel:

• Email: [email protected]
• Subject Line: "Privacy / Data Protection Request"
• Availability: 24 hours a day, 7 days a week (WIB, UTC+7)
• Languages: English and Indonesian
• Response Time: Acknowledgement within 5 business days; substantive response within 30 calendar days.

All privacy requests must be submitted from the email address registered to your wb403 account so that we can verify your identity before actioning the request. Requests submitted from unrecognised email addresses may be subject to additional identity verification steps before being processed.

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the independent dispute resolution body designated by wb403's licensing authority, as described in our Terms & Conditions.