hw168 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by hw168 ("the Platform", "we", "us", "our") in connection with the operation of the online casino and sportsbook available at hw168.app, including all associated sub-domains, mobile interfaces, and customer support channels.

hw168 takes its obligations as a data processor seriously. We operate with the principles of data minimisation, purpose limitation, and transparency. We collect only the data that is genuinely necessary to deliver the services you have requested, to comply with our legal and regulatory obligations, and to maintain the security and integrity of the platform.

By registering an hw168 account, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not use the hw168 platform. For questions about how hw168 handles your data, you can reach our team at any time via [email protected] or through the 24/7 live chat inside the platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other information held by hw168.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Subject" means the individual whose personal data is being processed — in most cases, a registered hw168 account holder or a visitor to the hw168 platform.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, hw168.
• "KYC" means Know Your Customer — the identity verification process used by hw168 to confirm the identity of account holders before processing certain withdrawals or at the platform's discretion.
• "Cookies" means small text files placed on a user's device by the hw168 platform for the purposes described in Clause 8 of this policy.
• "Third-Party Providers" means game studios, payment processors, identity verification services, fraud prevention partners, and other service providers engaged by hw168 who may process personal data on hw168's behalf.

hw168 collects the following categories of personal data in the course of operating the platform and delivering services to Indonesian players:

hw168 collects personal data through the following methods:

• Direct Provision: Data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated Technical Collection: Data collected automatically during your platform sessions, including IP address, device identifiers, session timestamps, and browsing behaviour within the hw168 platform, via server logs and analytics tools.
• Cookies and Tracking Technologies: Data collected via cookies and similar technologies as described in Clause 8 of this policy.
• Payment Providers: Transaction confirmation data received from Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency processing services when you make deposits or receive withdrawals.
• Identity Verification Partners: Where KYC is required, hw168 may use third-party identity verification services to cross-check the documents you provide against authoritative data sources. These services return only a verification result to hw168; raw document images are not retained by third-party providers beyond the verification process.
• Fraud Prevention and Security Tools: Data received from fraud prevention and device fingerprinting services that help hw168 identify unusual account activity, multi-accounting, and other prohibited conduct.

hw168 processes personal data for the following specific and documented purposes:

• Account Creation and Administration: To create, manage, and maintain your hw168 account, including verifying your identity, managing your balance, and maintaining your betting and gaming history.
• Payment Processing: To facilitate deposits and withdrawals via your chosen Indonesian bank, e-wallet, or cryptocurrency method, and to maintain accurate transaction records.
• Identity Verification (KYC): To verify your identity and age (21+) as required for certain transactions and in accordance with our internal compliance framework.
• Platform Security and Fraud Prevention: To detect and prevent unauthorised account access, multi-accounting, money laundering, bonus abuse, and other fraudulent or prohibited activities.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to administer responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods in accordance with your instructions.
• Customer Support: To respond to your support requests via live chat, email, WhatsApp, or Telegram, and to maintain records of support interactions for quality assurance and dispute resolution.
• Platform Improvement: To analyse aggregate usage data to improve platform performance, game selection, and user experience. This analysis is conducted on anonymised or pseudonymised data where possible.
• Marketing Communications: To send you promotional offers, bonus notifications, and hw168 news via your preferred channel — only where you have opted in to receive such communications. You may withdraw consent for marketing communications at any time via your account settings or by contacting support.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including record-keeping requirements and responses to lawful requests from competent authorities.

hw168 relies on the following legal bases to process personal data, depending on the purpose of processing:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the hw168 Terms & Conditions — including account administration, payment processing, and platform access.
• Legitimate Interests: Processing carried out for hw168's legitimate interests in operating a secure, fraud-free platform and improving our services, provided that those interests are not overridden by your rights and interests.
• Consent: Processing carried out based on your freely given, specific, and informed consent — in particular, the sending of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
• Legal Obligation: Processing required to comply with a legal obligation applicable to hw168, including record-keeping, identity verification, and responses to lawful authority requests.

hw168 does not sell personal data to any third party under any circumstances. Personal data is shared only in the following limited and documented situations:

• Payment Processors: Your financial data is shared with the payment provider you use to deposit or withdraw — for example, BCA, BRI, OVO, DANA, GoPay, or a cryptocurrency network — solely to process the transaction you have initiated.
• Identity Verification Services: Where KYC is required, identity documents and verification data may be shared with a licensed identity verification partner. These partners are bound by strict data processing agreements and may not use your data for any purpose other than the verification task.
• Game Studio Providers: When you play a live casino game or slot title on hw168, your session data (player identifier, bet amounts, game results) is transmitted to the relevant game provider — such as Evolution Gaming, Pragmatic Play, PG Soft, or Microgaming — to deliver the game and maintain round records. These providers are licensed operators and maintain their own data protection standards.
• Fraud and Security Partners: Device and session data may be shared with fraud prevention tools to protect the platform and its players from malicious activity.
• Legal Authorities: hw168 may disclose personal data to competent law enforcement or regulatory authorities where required to do so by law, court order, or lawful regulatory request. hw168 will notify affected account holders of such disclosures to the extent permitted by law.
• Corporate Transactions: In the event of a merger, acquisition, or sale of hw168's business or assets, personal data held by hw168 may be transferred to the acquiring entity, subject to equivalent data protection commitments being assumed by that entity.

hw168 uses cookies and similar tracking technologies to operate the platform, maintain session state, and analyse usage patterns. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to or using the hw168 platform. hw168 does not use third-party advertising cookies or share cookie data with advertising networks.

hw168 implements a multi-layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the hw168 platform is encrypted using TLS 1.3 (Transport Layer Security). The platform is served exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data — including identity verification documents, payment method details, and hashed credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within hw168's systems is restricted to personnel who require it to perform their job functions. Access is granted on a need-to-know basis and is subject to role-based access control, audit logging, and regular access reviews.
• Password Security: Player passwords are stored as salted cryptographic hashes. hw168 never stores passwords in plaintext and support staff cannot retrieve your password — only reset it through a verified process.
• Two-Factor Authentication (2FA): hw168 provides 2FA for all account holders and strongly recommends its activation. Platform-side 2FA is enforced for all administrative and support system access.
• Intrusion Detection and Monitoring: hw168's infrastructure is monitored continuously for anomalous activity, and automated alerting is in place for suspected security incidents.

In the event of a personal data breach that is likely to result in risk to affected individuals, hw168 will notify impacted account holders without undue delay via the email address on record, and will take all reasonable steps to contain and remediate the breach.

hw168 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

At the end of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is applied, the resulting data may be retained indefinitely for aggregate analytical purposes, as it can no longer be used to identify any individual.

As a data subject, you have the following rights in relation to the personal data hw168 holds about you. To exercise any of these rights, contact the hw168 support team at [email protected]. hw168 will respond to all data rights requests within 30 calendar days of receipt.

The hw168 platform is strictly intended for adults aged 21 and over. hw168 does not knowingly collect personal data from any person under the age of 21. If hw168 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. Any funds deposited to such an account will be returned to the payment source after verification.

If you are a parent or guardian and believe that your child has registered an hw168 account or provided personal data to the platform, please contact us immediately at [email protected]. hw168 will investigate and take corrective action promptly.

The hw168 platform does not include links to third-party websites for browsing or commercial purposes. Game content is delivered within the platform via embedded iframes from licensed game providers; these providers operate under their own data protection frameworks. When you play a game on hw168, your session data is shared with the relevant provider as described in Clause 7.

hw168 accepts no responsibility for the privacy practices of any third party whose services are accessed independently by the user outside of the hw168 platform. This Privacy Policy applies solely to data collected and processed by hw168 in connection with the hw168 platform.

hw168 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory requirements, or platform features. Material changes will be communicated to registered account holders via the platform inbox or the email address on record at least 14 days before the changes take effect.

The current version of the Privacy Policy is always accessible at hw168.app/privacy-policy. The "Last updated" date at the top of this document reflects the most recent revision. Your continued use of the hw168 platform following the effective date of any update constitutes your acceptance of the revised policy.

For all data privacy enquiries, rights requests, or concerns about how hw168 handles your personal data, please use the following contact channels. All privacy-related requests are handled by the hw168 compliance team:

• Email: [email protected] — include "Privacy Request" in the subject line for priority routing. Responses within 30 calendar days.
• Live Chat: Available 24/7 within the hw168 platform after login. Live chat agents can escalate privacy requests to the compliance team on your behalf.
• WhatsApp: Official hw168 WhatsApp number displayed inside your Account dashboard.
• Telegram: Official hw168 support channel link available inside the platform.

When submitting a rights request, please include your registered username or email address and a brief description of the request. hw168 may need to verify your identity before processing certain requests — particularly access, portability, or erasure requests — to ensure that personal data is not disclosed to or actioned by an unauthorised party.

If you are dissatisfied with hw168's handling of a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.