Your privacy matters to us. This Privacy Policy explains exactly what personal data pw128 collects from Members, how we use it, who we share it with, and what rights you have over your information.
Last Updated: 1 January 2026A quick summary of the key points in this policy — the full legal text follows below.
Identity, contact, financial, and usage data only
Account management, KYC, fraud prevention, service improvement
Regulated payment processors and verification partners only
256-bit TLS encryption, access controls, audit trails
Access, correction, deletion, and data portability requests
[email protected] for all privacy-related queries
For the purposes of this Privacy Policy, the following definitions apply:
pw128 collects only the Personal Data that is necessary to deliver the platform's services securely and in compliance with our regulatory obligations. The categories of data we collect are as follows:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, KTP / passport number, selfie or photo ID | Account registration, KYC age and identity verification |
| Contact Data | Email address, Indonesian mobile number, city of residence (e.g., Jakarta, Surabaya, Bandung) | Account communications, security alerts, promotional messages (where opted in) |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history denominated in IDR | Payment processing, fraud prevention, withdrawal verification |
| Account & Activity Data | Username, password hash, login timestamps, betting history, game session logs, bonus redemption records | Account management, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, browser type and version, operating system, device identifiers, referring URL, session duration | Platform security, fraud detection, service optimisation |
| Cookie & Tracking Data | Session cookies, analytics cookies, preference cookies | Session continuity, platform analytics, personalised experience |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Customer support, quality assurance, dispute records |
The majority of Personal Data pw128 holds is provided directly by Members at the following touchpoints:
Certain Technical Data and Cookie Data is collected automatically when you visit or interact with the pw128 platform, including your IP address, device information, browser type, and in-session navigation data. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 9 of this policy.
pw128 may receive limited Personal Data from trusted third-party sources, including:
pw128 uses Personal Data only for the purposes for which it was collected, or for purposes that are reasonably compatible with the original collection purpose. The primary uses of Member Personal Data are:
pw128 processes Member Personal Data on the following legal grounds:
pw128 does not sell, rent, or trade Member Personal Data to third parties for their own commercial purposes. We share Personal Data only with carefully selected service providers who process data on our behalf under strict contractual data protection obligations. These include:
pw128 may disclose Member Personal Data to regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of pw128, its Members, or the general public.
In the event that pw128's business or substantially all of its assets are acquired by or merged with another entity, Member Personal Data may be transferred as part of that transaction. Members will be notified of any such transfer via the registered email address and will be given reasonable notice before any change in data controller takes effect.
pw128 primarily operates its data infrastructure within secure data centres. Some of the third-party service providers we engage (including global game studios and cloud infrastructure vendors) may process data in jurisdictions outside Indonesia. Where Personal Data is transferred internationally, pw128 takes appropriate safeguards to ensure that your data receives a level of protection consistent with applicable data protection principles, including:
If you would like further information about the safeguards pw128 applies to international data transfers, please contact our support team at the address provided in Section 15.
pw128 retains Member Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Regulatory and AML compliance obligations |
| Financial Transaction Data | 7 years from transaction date | Financial record-keeping and audit requirements |
| KYC Documents | 5 years post-account closure | Regulatory requirements for identity verification records |
| Customer Support Records | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical & Cookie Data | Up to 13 months from collection | Analytics, fraud detection, and platform security |
| Marketing Preferences | Until opt-out or account closure | Consent-based marketing communications |
Once the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual Member.
The pw128 platform uses the following categories of cookies:
You may control and delete cookies through your browser settings at any time. Please note that disabling Strictly Necessary Cookies may impair your ability to log in to and use the pw128 platform. For guidance on managing cookies in your specific browser, refer to the help documentation provided by your browser vendor.
pw128 recognises browser-level Do-Not-Track (DNT) signals where technically feasible. However, because there is no universally accepted standard for DNT implementation across all third-party service providers, pw128 cannot guarantee that all tracking activities will cease in response to a DNT signal. For the strongest privacy protections, we recommend managing cookie preferences directly via your browser settings.
pw128 implements a comprehensive set of technical and organisational security measures designed to protect Member Personal Data against unauthorised access, accidental loss, destruction, or disclosure:
As a Member of pw128, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us using the details in Section 15:
You have the right to request a copy of the Personal Data pw128 holds about you, together with information about how it is used and with whom it is shared. pw128 will respond to verified access requests within 30 days of receipt.
If any Personal Data pw128 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly via your Account settings; for data that cannot be self-corrected, please contact customer support.
You may request that pw128 delete your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that pw128 is required to retain certain data for regulatory and legal compliance purposes as described in Section 8, and erasure requests that conflict with these obligations cannot be fulfilled in their entirety.
In certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved — you may request that pw128 restricts its processing of your Personal Data. During a restriction period, pw128 will retain your data but will not actively process it beyond what is strictly required.
Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive a copy of your Personal Data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
You have the right to object to pw128 processing your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, although pw128 may continue processing where it can demonstrate compelling legitimate grounds that override your interests.
Where pw128 processes your Personal Data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
The pw128 platform is strictly intended for adults aged 21 and above. pw128 does not knowingly collect Personal Data from individuals under the age of 21. If you believe that pw128 has inadvertently collected data from a person under 21, please contact us immediately at [email protected] and we will take prompt steps to delete the relevant data and close the associated Account.
pw128 implements age verification as a mandatory step in the KYC process to minimise the risk of underage access to the platform. Parents and guardians who are concerned about a minor accessing the pw128 platform are encouraged to use internet filtering and parental control software to restrict access to gambling-related websites.
The pw128 platform integrates third-party game content from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These studios operate under their own privacy policies with respect to any data they independently process. pw128 recommends that Members review the privacy documentation of any third-party provider whose services they access through the pw128 platform.
pw128 is not responsible for the privacy practices of any third-party websites or services that are not operated by pw128. Links to such services that may appear in informational content on the platform are provided for reference only and do not constitute an endorsement of those services' privacy practices.
pw128 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material, pw128 will notify Members via the registered email address or via an in-platform notification at least 7 days before the updated policy takes effect. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
Continued use of the pw128 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree to the amended policy, you must stop using the platform and may request Account closure as described in the Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or pw128's handling of your Personal Data, please contact our Data Protection team:
If you are not satisfied with pw128's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. pw128 takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.
The principles and technologies that underpin our commitment to Member privacy
Every byte of data transmitted between your device and pw128 is protected by TLS 1.3 with 256-bit AES encryption. Your account credentials, payment details, and personal information never travel across the internet in plain text.
pw128 does not sell, rent, or broker your Personal Data to any third party for their own commercial purposes — ever. Data sharing is limited strictly to regulated service providers who process data on pw128's behalf under binding data protection agreements.
pw128 gives every Member the right to access, correct, restrict, and delete their Personal Data. Submit a privacy rights request via email and our team will respond within 30 days — no hoops, no runaround.
All financial data related to your BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja transactions is transmitted exclusively via encrypted channels and is never stored beyond the minimum required for withdrawal verification and regulatory record-keeping.
pw128 uses industry-leading fraud detection and anti-money-laundering screening to protect every Member's account and funds. These security measures process data under strict confidentiality constraints and are never used for marketing or profiling purposes.
pw128 retains Personal Data only for as long as required by law or for legitimate operational purposes, and then deletes or anonymises it securely. We publish clear retention periods in this policy so you always know how long your data is kept and why.
Now that you understand how pw128 protects your data, log in and explore our full range of sports betting, live casino, slot games, and more — all backed by the security and transparency described in this policy.
Login to pw128 Terms & Conditions Read Our FAQ