Privacy Policy

In this Privacy Policy, the following terms carry the meanings defined below unless the context clearly indicates otherwise.

hwg88 is the Data Controller in respect of all Personal Data collected from Members and visitors of the Platform. As Data Controller, hwg88 is responsible for determining the purposes for which your Personal Data is Processed and for ensuring that all Processing activities comply with applicable data protection standards.

Where third-party service providers assist in the delivery of Platform services — such as KYC verification providers, payment processors, and platform security vendors — those parties act as Data Processors operating under contractual obligations that restrict their use of your data to the specific services they provide on our behalf. hwg88 remains accountable for the data-handling conduct of all third-party Data Processors engaged in connection with the Platform.

If you have any question about how hwg88 handles your Personal Data, or if you wish to exercise any of the rights described in Clause 10, you may contact our privacy team at any time using the details set out in Clause 14.

hwg88 collects Personal Data through several channels: directly from you when you register an Account or interact with the Platform; automatically through your use of the Platform; and from regulated third-party sources where necessary for compliance and fraud-prevention purposes. The categories of data we collect are detailed below.

hwg88 processes your Personal Data for the following defined purposes. We do not use your data for any purpose that is incompatible with the original basis on which it was collected, without seeking your explicit consent to do so.

• 4.1 Account Administration. To create, maintain, and manage your Member Account, including authenticating your identity at login, communicating Account-related notifications, and enforcing the one-account-per-person rule.
• 4.2 Contract Performance. To process deposits and withdrawals, settle wagers, apply bonuses, and generally deliver the sports betting and gaming services you have contracted with hwg88 to receive.
• 4.3 Legal and Regulatory Compliance. To fulfil Know Your Customer (KYC) obligations, conduct anti-money laundering (AML) screening, verify minimum age (21+), and meet any reporting requirements imposed by the regulatory authorities in the Company's licensing jurisdiction.
• 4.4 Fraud Prevention and Security. To detect, investigate, and prevent fraudulent activity, account takeovers, multi-accounting, chargeback abuse, and any other prohibited conduct described in the hwg88 Terms and Conditions.
• 4.5 Responsible Gaming. To monitor gaming patterns for indicators of problem gambling behaviour, enforce self-exclusions and deposit limits set by the Member, and proactively reach out to Members whose activity triggers responsible gaming alerts. This processing is in the Member's vital interest.
• 4.6 Customer Support. To respond to enquiries, process complaints, and maintain records of support interactions for quality-assurance purposes.
• 4.7 Platform Improvement. To analyse aggregated and anonymised usage data in order to improve Platform performance, game selection, and user experience. Individual Member identities are not used in this analysis.
• 4.8 Promotional Communications. Where you have provided consent, to send you promotional notifications about bonuses, seasonal offers, and Platform updates. You may withdraw consent at any time by contacting support or updating your notification preferences in Account settings.

hwg88 processes your Personal Data on one or more of the following legal bases, as applicable to each specific Processing activity.

hwg88 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Data is disclosed only in the limited circumstances described below, and only to recipients who are contractually obligated to handle your data with the same level of care we apply.

• 6.1 KYC Verification Providers. Licensed identity-verification service providers receive KYC Documents solely to perform age, identity, and address verification on hwg88's behalf. These providers are prohibited from using the data for any other purpose.
• 6.2 Payment Processors. Financial data is shared with the payment infrastructure providers that facilitate deposits and withdrawals — including the banking networks serving BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, and e-wallet platforms OVO, DANA, GoPay, ShopeePay, and LinkAja. This sharing is essential for contract performance.
• 6.3 Game Content Providers. Where necessary to facilitate the delivery of a specific game session, limited session data (such as a session token and bet amount) is exchanged with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. No personally identifiable registration data is transmitted to game studios.
• 6.4 Fraud and Security Vendors. Anonymised or pseudonymised device and behavioural data may be shared with third-party fraud-detection services to identify and prevent platform abuse.
• 6.5 Legal and Regulatory Authorities. hwg88 will disclose Personal Data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a valid court order, or a lawful request from a competent regulatory authority in connection with the Company's licensing obligations.
• 6.6 Corporate Transactions. In the event of a merger, acquisition, or sale of all or part of the Company's assets, Member Personal Data may be transferred to the acquiring entity, subject to the same privacy protections set out in this Policy. Members will be notified of any such transfer in advance.

hwg88 uses cookies and similar technologies to operate the Platform, maintain session security, and gather anonymised performance data. We do not use third-party advertising cookies or cross-site tracking technologies.

• 7.1 Strictly Necessary Cookies. These cookies are essential for the Platform to function and cannot be disabled. They maintain your login session, remember your preferences during a session, and protect against cross-site request forgery (CSRF). No consent is required for these cookies.
• 7.2 Performance and Analytics Cookies. We use anonymised first-party analytics to understand how Members navigate the Platform — which pages are visited most, where sessions tend to end, and how performance can be improved. The data collected is aggregated and cannot be used to identify individual users. These cookies are only placed with your consent.
• 7.3 Functional Cookies. These cookies remember your language preference, notification settings, and last-used payment method to provide a more personalised experience on return visits. They are used with your consent.
• 7.4 Session Duration. Strictly necessary session cookies expire when you close your browser. Functional and analytics cookies have a maximum retention period of 12 months.
• 7.5 Managing Cookies. You may disable non-essential cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from logging in to your Account. Note that cookie preferences set at the browser level will apply across all websites you visit, not only hwg88.

hwg88 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply.

At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Deletion requests submitted under Clause 10 that conflict with a live regulatory retention obligation will be addressed by anonymising all data elements that are not legally required to be retained in identifiable form.

hwg88 implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. The following measures form the core of our data security programme.

• 9.1 Transport Security. All data in transit between your device and hwg88 servers is encrypted with 256-bit SSL/TLS. Our SSL certificates are maintained with valid, unexpired credentials at all times.
• 9.2 Data at Rest. Personal Data and KYC Documents stored on hwg88 infrastructure are encrypted at rest using AES-256 encryption. Storage systems are located in access-controlled data centres with physical security controls.
• 9.3 Access Controls. Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to Member data are subject to binding confidentiality obligations and regular data protection training.
• 9.4 Monitoring and Intrusion Detection. hwg88's infrastructure is continuously monitored for anomalous activity, intrusion attempts, and potential data breaches. Automated alert systems and manual security reviews operate around the clock.
• 9.5 Data Breach Response. In the event of a confirmed data breach that poses a risk to Member rights and freedoms, hwg88 will notify affected Members and relevant regulatory authorities within the timeframes required by applicable law — and in any event no later than 72 hours after the breach is confirmed.
• 9.6 Member Responsibilities. You are responsible for maintaining the security of your Account credentials. hwg88 recommends using a strong, unique password that is not shared with any other service. Enabling two-factor authentication where available significantly reduces the risk of unauthorised Account access.

As a data subject whose Personal Data is Processed by hwg88, you hold the following rights. These rights may be exercised at any time by submitting a written request to our privacy team at the contact address in Clause 14. hwg88 will respond within 30 calendar days.

To exercise any of the above rights, please submit your request in writing to [email protected] with the subject line "Data Rights Request" and include your registered full name and Account email address so that we can verify your identity before processing the request. hwg88 will not charge a fee for first-time requests. Manifestly unfounded or excessive repeat requests may be subject to a reasonable administrative charge.

hwg88 is an internationally operated platform. As a result, your Personal Data may be transferred to and stored on servers located outside Indonesia. Where such transfers occur, hwg88 takes the following safeguards to ensure your data receives an equivalent level of protection.

• 11.1 Contractual Safeguards. All cross-border data transfers to Data Processors outside Indonesia are governed by contractual clauses that impose obligations on the receiving entity equivalent to those applicable in jurisdictions with recognised data-protection standards.
• 11.2 Adequacy Decisions. Where available, hwg88 will transfer data to jurisdictions that have been recognised as providing an adequate level of data protection by relevant international standards.
• 11.3 Limited Scope. International transfers are limited to those strictly necessary for the provision of Platform services — specifically, the operation of cloud hosting infrastructure, game platform delivery, and fraud-detection systems.
• 11.4 Further Information. You may request information about the specific safeguards in place for any international transfer of your Personal Data by contacting our privacy team at the address in Clause 14.

The hwg88 Platform is strictly for adults aged 21 and over. hwg88 does not knowingly collect Personal Data from any individual under the age of 21. Registration on the Platform requires confirmation that the applicant meets the minimum age requirement, and this is subsequently verified through the KYC process described in the hwg88 Terms and Conditions.

If hwg88 becomes aware or has reasonable grounds to suspect that Personal Data has been collected from a person under 21 years of age, the following steps will be taken without delay: the Account will be suspended pending investigation; all Personal Data associated with the underage individual will be permanently deleted from our systems upon confirmation; any deposits made by the underage individual will be returned using the same payment method where technically possible; and any winnings associated with the Account will be voided.

If you believe that a person under 21 has registered on the hwg88 Platform, please notify us immediately at [email protected]. We take every such report seriously and will investigate and respond within 48 hours.

hwg88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. The following procedures govern how changes are communicated to Members.

• 13.1 Notification. Material changes to this Privacy Policy will be communicated to active Members via their registered email address no less than 14 days before the amended Policy takes effect. Non-material changes (such as typographic corrections or clarifications that do not alter the substance of any clause) may be made without advance notice.
• 13.2 Effective Date. The effective date of the current version of this Policy is displayed at the top of this page. Continued use of the Platform following the effective date of an updated Policy constitutes acceptance of the revised terms.
• 13.3 Prior Versions. Archived versions of this Privacy Policy are available upon written request to [email protected]. Please include "Privacy Policy Archive Request" in the subject line.

For all privacy-related enquiries, data rights requests, or complaints about how hwg88 handles your Personal Data, please contact our privacy team using the details below. All privacy communications are handled confidentially by dedicated staff with data protection responsibilities.

When submitting a data rights request, please include your full registered name and Account email address so that we can verify your identity before accessing or modifying your records. hwg88 cannot action data rights requests that cannot be associated with a verified Account.