fw888 Privacy Policy

The data controller responsible for the personal information processed in connection with the fw888 platform (accessible at fw888.vip) is the operating entity behind the fw888 brand. Throughout this Privacy Policy, references to "fw888", "we", "us", or "our" refer to that entity.

fw888 is an internationally licensed and regulated online gaming platform. Our primary user base is located in Indonesia, with players in Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, Yogyakarta, and other cities across the archipelago. While Indonesian law does not currently provide a comprehensive personal-data-protection framework equivalent to the EU GDPR, fw888 voluntarily applies data-protection principles consistent with internationally recognised standards, including purpose limitation, data minimisation, storage limitation, integrity, confidentiality, and accountability.

fw888 collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you browse or use our services, and occasionally from trusted third-party sources where permitted. The categories of data we process are set out in the table below.

We do not collect or store full payment-card numbers. Where card payment options are offered in future, card processing is handled end-to-end by a PCI-DSS-certified payment gateway; fw888 receives only a tokenised reference.

fw888 relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to open and maintain your account, process deposits and withdrawals, settle bets, and provide customer support. Without this processing, fw888 cannot deliver its services.
• Legal Obligation: fw888 is required by its international gaming licence and applicable anti-money-laundering (AML) regulations to carry out KYC verification, retain financial records for a minimum period, and report suspicious activity to the relevant authorities.
• Legitimate Interests: fw888 processes technical and usage data to maintain platform security, detect fraud, prevent bonus abuse, optimise user experience, and conduct internal analytics. We ensure these interests do not override your fundamental rights to privacy.
• Consent: Where we send you optional marketing communications or deploy non-essential tracking cookies, we do so only on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment to your account.

fw888 uses the personal data described in Section 2 for the following purposes:

• Account Management: Creating, maintaining, and securing your fw888 account, processing login authentication, and enabling account recovery.
• Transaction Processing: Handling deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja, and processing withdrawal requests to your registered payment method.
• Identity Verification (KYC): Confirming that you meet the minimum age requirement of 21 years and verifying that payment accounts are held in your own name, as required by our licensing obligations.
• Fraud Prevention & Security: Monitoring for suspicious account activity, detecting multiple accounts, identifying unusual betting patterns, and protecting the platform from automated bot activity.
• Regulatory Compliance: Maintaining records required by our AML programme, responding to lawful requests from regulatory or law-enforcement authorities, and fulfilling our responsible-gaming obligations.
• Customer Support: Responding to your support tickets, resolving disputes, and maintaining records of interactions to ensure continuity of service.
• Promotions & Personalisation: Delivering bonus offers, seasonal promotions (e.g., Idul Fitri, Imlek, Indonesian Independence Day on 17 August), and personalised game recommendations based on your activity — subject to your marketing preferences.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, site performance, and the overall user experience for Members across Indonesia.
• Legal Claims: Establishing, exercising, or defending legal claims where necessary.

fw888 will not use your personal data for any purpose incompatible with those listed above without first informing you and, where required, obtaining your consent.

fw888 uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate the platform, remember your preferences, maintain your logged-in session, and analyse how Members interact with the site. The cookies we deploy fall into four categories:

You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Most modern browsers (Chrome, Firefox, Safari, Samsung Internet) allow you to view, block, or delete cookies via the browser's settings menu.

fw888 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share your name, registered bank account or e-wallet details, and transaction amounts with BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja as required to process your deposit or withdrawal. Each provider is bound by its own privacy obligations.
• KYC & Identity Verification Partners: Identity documents and liveness-check data are processed by contracted KYC service providers operating under strict data-processing agreements with fw888.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive your account identifier (a pseudonymised token, not your full name) and game-session data solely for the purpose of delivering game content, resolving round disputes, and calculating RTP compliance.
• Cloud & Hosting Infrastructure: fw888's platform is hosted on third-party cloud infrastructure. Those providers act as data processors under contractual terms that prohibit use of your data for their own purposes.
• Regulatory & Law-Enforcement Authorities: We will disclose personal data where required to do so by a valid legal order, regulatory directive, or court judgment. We will notify you of such a disclosure unless legally prohibited from doing so.
• Business Transfers: In the event of a merger, acquisition, or sale of fw888's business assets, Member data may be transferred to the acquiring entity, which will be required to honour this Privacy Policy or obtain fresh consent from Members.

All third parties with whom fw888 shares personal data are required to implement appropriate technical and organisational security measures, and are prohibited from using that data for any purpose beyond the specific service they provide to fw888.

fw888 operates internationally, and some of the third-party service providers described in Section 6 are located outside Indonesia. Where personal data is transferred to a country that does not provide a level of data protection equivalent to that described in this Policy, fw888 puts in place one or more of the following safeguards:

• Contractual clauses requiring the recipient to protect the data to the same standard as fw888;
• Confirmation that the recipient organisation holds an internationally recognised security certification (e.g., ISO 27001);
• Your explicit consent, where obtained for a specific transfer.

By registering an account on fw888 and accepting these terms, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia. We take reasonable steps to ensure that any such processing meets the standards described in this Privacy Policy.

fw888 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any overriding legal or regulatory obligation to retain it for a longer period. The table below sets out our standard retention periods:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

fw888 respects your rights over your personal data. Depending on your circumstances, you may be entitled to exercise some or all of the following rights by contacting us at [email protected]:

fw888 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key technical and organisational measures include:

• TLS/SSL Encryption: All data transmitted between your device and fw888's servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Encryption at Rest: Sensitive data fields (including KYC documents and financial identifiers) are encrypted in our database using AES-256.
• Access Controls: Personal data is accessible only to fw888 staff and contractors who require it to perform their specific job function. Role-based access controls and multi-factor authentication are enforced for all administrative systems.
• Penetration Testing: fw888 commissions regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: fw888 maintains a documented data-breach response plan. In the event of a breach that is likely to result in risk to your rights and freedoms, we will notify affected Members without undue delay and, where required, notify the relevant authorities.
• Secure Development: Security is integrated into fw888's software development lifecycle. Code changes undergo security review before deployment to production.

fw888 services are strictly reserved for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and accounts where the Member is found to be under 21 will be immediately closed and all associated data deleted.

If you are a parent or guardian and believe that a minor in your care has registered on fw888 without your knowledge, please contact us immediately at [email protected]. We will investigate and close the account promptly, deleting all associated personal data in accordance with our deletion procedures.

fw888 may update this Privacy Policy periodically to reflect changes in our data practices, applicable regulations, or the services we offer. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page;
• Send a notification to your registered email address at least seven (7) days before the changes take effect;
• Display a prominent notice on the fw888 platform for a period of at least fourteen (14) days following the update.

Your continued use of the fw888 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should stop using the platform and close your account before the changes take effect. We will return any verified real-money balance to your registered payment method upon account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how fw888 handles your personal information, please contact our Data Protection Officer (DPO) using the details below. Our Indonesian-speaking support team is available 24 hours a day, 7 days a week across WIB, WITA, and WIT time zones.

• Email: [email protected]
• Subject Line: Include "Privacy Request" or "Data Rights" in your subject line for fastest routing
• Response Time: Privacy-related requests acknowledged within 2 business days; substantive response within 5 business days
• Live Chat: Available through the fw888 platform after login for general queries

We encourage you to contact us first if you have a concern, as we are committed to resolving privacy issues directly and promptly. You also have the right to lodge a complaint with the data- protection supervisory authority in the jurisdiction from which you access our services.