wb304 Privacy Policy

The following definitions apply throughout this Policy. Singular terms include the plural and vice versa where context permits.

wb304 collects Personal Data through three primary channels: data you provide directly, data generated by your use of the platform, and data received from third-party service providers. The specific categories are as follows.

2.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, email address, Indonesian mobile phone number, and chosen username and password.
• KYC Documents: A valid Indonesian national identity card (KTP) or international passport, proof of residential address (e.g., a BCA, BRI, BNI, or Mandiri bank statement dated within 90 days), and proof of ownership of the payment method used for deposits.
• Payment Information: Bank account name, account number, and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja). wb304 does not store full card numbers or CVV codes.
• Support Communications: Any messages, attachments, or other information you submit when contacting [email protected] or using in-platform chat.
• Preference Settings: Responsible gaming limits, notification preferences, and language or display settings you configure in your account.

2.2 Data Generated by Your Use of the Platform

• Transactional Data: Deposit and withdrawal records, bonus activation history, wagering history across all products (sportsbook, slots, live casino, Andar Bahar, esports betting, and togel — Indonesia's traditional numbers lottery), and account balance snapshots.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone setting, and referring URL.
• Session Data: Login timestamps, session duration, pages visited, features accessed, and click-stream behaviour within the platform.
• Cookie Data: As described in Section 6 of this Policy.

2.3 Data Received from Third Parties

• Identity Verification Providers: Results of automated document authentication and liveness checks performed by our KYC service partners.
• Payment Processors: Transaction status confirmations, chargeback notifications, and AML screening flags from Indonesian banking partners and e-wallet providers.
• Fraud Prevention Services: Device fingerprint risk scores and known-fraud-indicator flags from our fraud monitoring partners.
• Game Studio Providers: Round completion data, RTP (Return to Player) records, and jackpot trigger data from game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, which is used to resolve disputes and ensure game integrity.

wb304 uses the Personal Data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes described here without first obtaining your explicit consent.

wb304 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — specifically, to operate your account, process your bets, handle deposits and withdrawals, and provide customer support.
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements, record-keeping obligations, and lawful requests from competent authorities.
• Legitimate Interests: Processing necessary for wb304's legitimate business interests — including fraud prevention, platform security, abuse detection, and business analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5.1 Authorised Data Processors. wb304 shares Personal Data with the following categories of third-party Data Processors, each of whom is bound by a written data processing agreement that restricts their use of your data to the specific purpose for which it was shared:

• KYC & Identity Verification Providers: Document authentication and biometric liveness-check platforms that verify your KTP or passport as part of the account verification process.
• Payment Processors & Banking Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) that process your deposit and withdrawal transactions.
• Fraud Prevention & AML Services: Automated screening platforms that flag transactions or accounts against known fraud indicators, sanctions lists, and politically exposed person (PEP) databases.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session tokens and round IDs to serve game content; they do not receive your full personal profile.
• Cloud Infrastructure Providers: Secure, access-controlled cloud hosting providers that store encrypted platform data on servers with physical and logical access controls.
• Customer Support Platform: A ticketing system used to manage support communications at [email protected]; ticket data is accessible only to authorised wb304 support staff.

5.2 Legal Disclosures. wb304 may disclose Personal Data to competent legal authorities, regulators, or law enforcement agencies where required by applicable law, court order, or regulatory directive. wb304 will notify affected players of such disclosures unless legally prohibited from doing so.

5.3 Business Transfers. In the event of a merger, acquisition, or sale of substantially all assets of wb304, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified by email prior to any such transfer, and the acquiring entity will be bound by the terms of this Policy or a policy that provides equivalent protection.

5.4 No Cross-Border Transfers Without Safeguards. Where Personal Data is transferred to processors located outside Indonesia, wb304 ensures that appropriate safeguards are in place — including contractual data protection clauses consistent with internationally recognised standards — to protect your data to a standard equivalent to the protections described in this Policy.

wb304 uses cookies and similar tracking technologies to operate core platform functions, analyse usage patterns, and improve the player experience. The following categories of cookies are used on the wb304 website.

6.1 Managing Cookies. You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling performance cookies will not affect platform functionality but will limit our ability to improve the product. Your cookie preferences are respected immediately upon change.

6.2 No Third-Party Advertising Cookies. wb304 does not deploy third-party advertising cookies or retargeting pixels. We do not share cookie data with external advertising networks.

wb304 employs a multi-layered security architecture to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• 256-Bit TLS Encryption in Transit: All data transmitted between your device and wb304 servers is encrypted using TLS 1.2 or higher. Our SSL certificate is issued by a trusted Certificate Authority and renewed automatically.
• Encryption at Rest: Personal Data and payment records stored in our databases are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and rotated on a defined schedule.
• Access Controls: Access to player Personal Data within wb304 is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their role. Access is authenticated via multi-factor authentication (MFA) and logged for audit purposes.
• Penetration Testing & Vulnerability Scanning: wb304 conducts regular penetration tests and automated vulnerability scans across our web application and infrastructure. Critical vulnerabilities are patched within 24 hours of discovery.
• Data Breach Response: In the event of a Personal Data breach that is likely to result in risk to your rights and freedoms, wb304 will notify affected players within 72 hours of becoming aware of the breach, including a description of the nature of the breach, the data affected, and the steps wb304 is taking to mitigate harm.
• Staff Training: All wb304 employees and contractors who handle Personal Data receive mandatory data protection training during onboarding and annually thereafter.

wb304 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

When data reaches the end of its retention period, wb304 securely deletes or anonymises it so that it can no longer be associated with an identified individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and product development purposes.

As a wb304 player, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving a valid request.

9.1 Identity Verification for Requests. To protect your privacy, wb304 will verify your identity before processing any data rights request. You will be asked to confirm your account username and provide one piece of identifying information consistent with your registered account details.

9.2 Requests That Cannot Be Fulfilled. Certain data rights requests may be declined where fulfilling them would: (a) conflict with our legal obligation to retain records; (b) prevent us from detecting or investigating fraud; (c) impair the rights and freedoms of other individuals; or (d) be technically impossible given the anonymised or aggregated nature of the data. Where a request is declined, wb304 will provide a written explanation within the same 30-day response window.

The wb304 platform is strictly for adults aged 21 and over. wb304 does not knowingly collect, process, or retain Personal Data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and accounts where the registered player is found to be under 21 years of age will be immediately suspended and any balance refunded after deducting any bonuses claimed.

10.1 Parental Controls. If you are the parent or legal guardian of a minor and you believe that your child has registered an account on wb304 without your knowledge, please contact [email protected] immediately with the subject line "Minor Account Report". wb304 will investigate the report within 24 hours and take all necessary steps to close the account and delete the associated Personal Data.

10.2 Filtering Software. wb304 strongly encourages parents and guardians to use internet filtering software to prevent minors from accessing online gambling platforms. Tools such as Net Nanny and similar parental control applications are effective supplements to the platform's own age verification controls.

11.1 Game Providers. Games available on the wb304 platform are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These studios may collect limited technical data (such as session tokens and round identifiers) directly through their game clients in order to deliver game content and ensure round integrity. Their data collection is governed by their own privacy policies, which wb304 has reviewed for compliance with acceptable data protection standards prior to integration.

11.2 Payment Gateways. When you make a deposit or withdrawal via Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), your payment details are processed directly by those respective financial service providers. wb304 does not store full payment credentials; instead, we store only the transaction reference required for reconciliation and dispute resolution.

11.3 No Responsibility for Third-Party Privacy Practices. While wb304 carefully selects its service partners and requires contractual data protection commitments from all Data Processors, wb304 cannot be held responsible for the independent data practices of third-party providers operating under their own terms and privacy policies. We encourage you to review the privacy policies of any payment provider or e-wallet service you use in connection with your wb304 account.

11.4 No Third-Party Advertising Networks. wb304 does not integrate third-party advertising networks, social media tracking pixels, or retargeting scripts on the platform. The data generated by your use of wb304 is used exclusively for operating and improving the wb304 platform and is not shared with external advertising or analytics platforms.

12.1 Right to Amend. wb304 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or platform features. The most current version of the Policy will always be available at https://wb304.bet/privacy-policy.

12.2 Notification of Material Changes. Where a proposed amendment materially affects your rights or the way we process your Personal Data, wb304 will notify registered players by email to the address on file at least 14 days before the change takes effect. The notification will describe the nature of the change and, where required, seek your renewed consent.

12.3 Continued Use as Acceptance. Your continued use of the wb304 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the platform and may request account closure by contacting [email protected].

12.4 Version History. wb304 maintains a version history of this Policy. If you wish to review a prior version, you may request it by emailing [email protected] with the subject line "Privacy Policy Version Request" and specifying the approximate date of the version you wish to review.

If you have any questions about this Privacy Policy, wish to exercise a data right, want to withdraw marketing consent, or need to report a suspected privacy breach, please contact the wb304 Data Protection team using the details below.

wb304 customer and data support operates 24 hours a day, 7 days a week, including Indonesian public holidays such as Idul Fitri, Nyepi, and Indonesian Independence Day (17 August). Native Indonesian-speaking support agents are available at all hours for players who prefer to communicate in Bahasa Indonesia, even though the platform and this Policy are written in English.

For responsible gaming requests — including self-exclusion, deposit limit adjustments, or temporary account suspension — please use the subject line "Responsible Gaming Request" so your message is prioritised by the dedicated responsible gaming team.