Privacy Policy — war189

war189 ("we", "us", "our", "the Platform") operates the online casino and sportsbook accessible at https://war189.app and all associated sub-domains, mobile interfaces, and API endpoints (collectively, "the Service"). This Privacy Policy describes the personal data we collect from individuals who visit, register on, or transact through the Service, how we process that data, the circumstances under which we disclose it to third parties, and the rights available to you in relation to your personal data.

This Privacy Policy applies to all war189 members, prospective members who commence but do not complete registration, and anonymous visitors who browse the Service without creating an account. It should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which incorporate this Privacy Policy by reference.

By accessing the Service, registering an account, or making a deposit, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree, you must cease using the Service and may request account closure by contacting us at [email protected].

war189 collects personal data through several channels: directly from you when you register or interact with the Service; automatically through your use of the platform; and, in limited circumstances, from trusted third-party sources. The categories of data we collect are described below.

2.1 Registration & Account Data

When you create a war189 account, we collect the following data which is required to open and operate your account:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the minimum age requirement of 21 years)
• Indonesian mobile phone number
• Email address
• Chosen username and encrypted password
• City and province of residence within Indonesia

2.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal, war189 is required to complete a Know Your Customer (KYC) verification. The following documents and data points may be collected as part of this process:

• Copy of your Indonesian National Identity Card (KTP), passport, or driving license (SIM) — front and back
• A selfie photograph or live facial scan taken during the verification process
• Proof of your registered payment method (e.g., a screenshot of your mobile banking profile for BCA, BRI, BNI, Mandiri, CIMB Niaga, or Bank Permata; or your OVO, DANA, GoPay, ShopeePay, or LinkAja account verification screen)
• Source-of-funds declaration for accounts exceeding defined transaction thresholds

2.3 Financial & Transaction Data

We collect records of all financial transactions conducted through the Service, including:

• Deposit amounts, timestamps, and the payment method used (bank name, masked account number, or e-wallet provider)
• Withdrawal requests, amounts, destinations, and processing outcomes
• Bonus credits claimed, wagering progress, and bonus settlement records
• A complete history of all bets placed, game sessions, and outcomes

war189 does not store full bank account numbers or complete card numbers. Payment credentials are handled by our licensed third-party payment processors, who are bound by their own applicable security and data protection standards.

2.4 Technical & Device Data

When you access the Service, our servers and analytics infrastructure automatically collect the following technical data:

• IP address (used to determine approximate geographic location, detect multiple accounts, and identify suspicious access patterns)
• Device type, operating system, and browser version
• Screen resolution and language settings
• Session start and end timestamps, pages visited, and navigation paths within the Service
• Referring URL (the website you visited immediately before arriving at war189.app)

2.5 Communications Data

If you contact war189 via live chat, email, or any other support channel, we retain records of those communications including:

• The content of messages you send to our support team
• Support ticket reference numbers, response timestamps, and resolution notes
• Feedback and satisfaction ratings submitted through the Service

2.6 Responsible Gaming Data

To fulfill our responsible gaming obligations, war189 monitors and records:

• Deposit and loss limits set by the member
• Self-exclusion status and self-exclusion period dates
• Session duration and frequency data used for problem gambling detection algorithms
• Any responsible gaming support interactions

war189 uses the personal data described in Clause 2 for the following specific purposes:

• Account creation and management: To open, maintain, and administer your war189 member account, including processing login authentication, managing account settings, and communicating account-related notifications.
• Identity verification and KYC compliance: To verify that you meet the minimum age requirement of 21 years and to comply with our anti-money laundering (AML) and Know Your Customer obligations.
• Payment processing: To facilitate IDR deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, and other approved bank partners; and withdrawals to registered bank accounts and e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Service delivery and game operation: To deliver the casino, sportsbook, crash game, slot, live dealer, and all other products available on the war189 platform, including passing necessary session data to our game studio partners.
• Bonus and promotion management: To assess your eligibility for promotions, credit bonus amounts to your account, and monitor wagering requirement compliance.
• Fraud prevention and platform security: To detect and investigate unauthorized access, multiple-account registrations, bonus abuse, money laundering, and other prohibited activities as described in the Terms & Conditions.
• Responsible gaming monitoring: To identify indicators of problem gambling behavior, enforce deposit limits and self-exclusions set by members, and proactively reach out to members who may need support.
• Customer support: To respond to queries, complaints, and account-related requests submitted through our live chat, email, or other support channels.
• Analytics and platform improvement: To understand how members use the Service, identify technical issues, and improve the features, performance, and content of the war189 platform. Analytics data is processed in aggregated or pseudonymized form wherever possible.
• Marketing communications: To send you promotional emails, push notifications, and in-platform messages about war189 bonuses, new games, and special offers — subject always to your consent preferences. See Clause 12 for full details on marketing communications and how to opt out.
• Legal and regulatory compliance: To maintain records required by applicable law, to respond to lawful requests from regulatory and law enforcement authorities, and to defend or pursue legal claims.

war189 processes your personal data under the following legal bases, consistent with internationally recognized data protection principles:

war189 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances:

• Payment processors and banking partners: We share transaction-relevant data (your name, account reference, and transaction amount) with the payment processors and banking institutions required to execute your deposit or withdrawal — including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Game studio providers: We pass a pseudonymized session token and your account balance to the relevant game studio (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, JILI) to enable you to play their games on our platform. Game studios do not receive your full name, contact details, or payment information.
• Identity verification providers: We share KYC document data with our licensed identity verification partner to validate the authenticity of documents submitted during the verification process. This partner is contractually obligated to process your data solely for verification purposes and to delete it upon completion.
• Fraud prevention and security partners: We share IP addresses, device fingerprints, and behavioral signals with fraud detection technology providers to identify suspicious activity and protect the integrity of the platform.
• Analytics providers: We share anonymized or aggregated usage data with analytics providers to understand platform performance. No directly identifiable personal data is shared for analytics purposes.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where we are legally required to do so — for example, in response to a lawful court order, a request from a financial intelligence authority, or where disclosure is necessary to prevent imminent harm.
• Business transfers: In the event that war189 undergoes a merger, acquisition, sale of assets, or other corporate restructuring, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via email or an in-platform notification before your data is transferred and becomes subject to a different privacy policy.

war189 operates as an internationally licensed online gaming platform. Some of our technology infrastructure, game studio partners, and third-party service providers are located in jurisdictions outside Indonesia. As a result, your personal data may be transferred to, and processed in, countries other than Indonesia.

When we transfer personal data internationally, we implement appropriate safeguards to ensure that your data receives a comparable level of protection to that which it receives in Indonesia. These safeguards include:

• Contractual data processing agreements with all third-party processors that include standard data protection clauses requiring them to process your data only as instructed by war189 and to maintain appropriate security measures.
• Transfer only to processors located in jurisdictions that war189 has assessed as providing an adequate level of data protection, or where appropriate contractual safeguards are in place.
• Technical measures including encryption in transit and at rest, and access controls limiting which personnel of our service providers can access your data.

By using the war189 Service, you acknowledge and consent to the transfer of your personal data to our servers and third-party partners as described in this clause.

war189 retains your personal data for as long as is necessary to fulfill the purposes described in this Privacy Policy, subject to the following specific retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where anonymization is used, the resulting data may be retained indefinitely for statistical analysis purposes as it no longer constitutes personal data.

war189 uses cookies and similar tracking technologies (including local storage and session storage) on the war189.app domain. The following categories of cookies are in use:

You can manage your cookie preferences at any time through your war189 account settings panel. Please note that disabling functional or analytics cookies will not affect your ability to place bets or make transactions, but may reduce the quality of your platform experience.

war189 does not use third-party advertising networks that place cookies on your device for cross-site behavioral advertising purposes.

war189 implements a multi-layered security framework to protect your personal data against unauthorized access, loss, destruction, or alteration. Our key security measures include:

• TLS Encryption in Transit: All data exchanged between your browser or mobile device and war189 servers is encrypted using TLS 1.2 or higher. Look for the padlock icon and "https://" in your browser's address bar when using the Service.
• AES-256 Encryption at Rest: Sensitive data stored in our databases — including identity document scans and KYC verification data — is encrypted at rest using AES-256, an industry-standard encryption algorithm.
• Password Hashing: Member passwords are never stored in plain text. war189 uses a strong one-way cryptographic hashing algorithm with per-account salts to store password credentials.
• Two-Factor Authentication (2FA): war189 offers optional 2FA for member accounts using one-time passwords delivered via SMS to your registered Indonesian mobile number. We strongly recommend enabling 2FA to maximize your account security.
• Access Controls: Access to production systems containing personal data is restricted to a minimal set of authorized war189 personnel on a need-to-know basis. All access is logged and audited.
• Penetration Testing: war189 commissions independent security assessments of its platform infrastructure on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, war189 will notify affected members without undue delay and will take all reasonable steps to contain the breach and prevent recurrence.

The war189 platform is strictly an adults-only service. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires users to confirm their date of birth, and KYC verification is used to confirm that members meet the minimum age requirement before withdrawal rights are activated.

If war189 becomes aware that a member has provided false information about their age during registration and is in fact under 21 years of age, we will immediately close that account, void all bets placed, and refund any remaining real-money balance in accordance with our Terms & Conditions. KYC data collected from a minor will be deleted as soon as the account closure process is complete, subject only to any retention obligations arising from the need to prevent re-registration.

If you are a parent or guardian and believe that your child has created a war189 account without your knowledge, please contact us immediately at [email protected]. We will investigate and take appropriate action as a matter of priority. 21+

As a war189 member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Privacy team at [email protected] from your registered email address, clearly stating the right you wish to exercise and providing sufficient detail to allow us to identify your account:

• Right of Access: You have the right to request a copy of the personal data that war189 holds about you, along with information about how and why we are processing it. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic account details (name, email, mobile number), you may be able to update these directly via your account settings page.
• Right to Erasure ("Right to Be Forgotten"): You may request that war189 delete your personal data. This right is subject to important limitations — we are unable to delete data that we are legally required to retain (for example, KYC and transaction records subject to AML retention obligations). We will inform you of any data we are unable to delete and the reason why.
• Right to Restrict Processing: In certain circumstances, you have the right to request that war189 restrict the processing of your personal data — for example, while we investigate a data accuracy dispute.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to war189 in a structured, commonly used, and machine-readable format (such as JSON or CSV), and to transmit that data to another data controller.
• Right to Object: You have the right to object to war189's processing of your personal data where we rely on legitimate interests as the legal basis for that processing. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where war189 processes your data on the basis of your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to your withdrawal.

war189 may send you promotional communications about our latest bonuses, new game releases from studios such as Pragmatic Play, Evolution Gaming, and Spribe, special event promotions tied to Indonesian holidays such as Idul Fitri, Ramadhan, and Indonesian Independence Day (17 August), and sportsbook offers covering BRI Liga 1, EPL, Champions League, and other major football competitions.

We will only send you marketing communications if you have provided your explicit consent to receive them — either during the registration process or subsequently via your account settings. You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email from war189
• Updating your communication preferences in the Notifications section of your war189 account settings
• Contacting our support team at [email protected] and requesting removal from all marketing communications

Withdrawal of marketing consent does not affect your ability to receive transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal processing updates, account security alerts, and KYC verification requests. These transactional messages will continue to be sent regardless of your marketing preferences, as they are necessary for the performance of your contract with war189.

The war189 platform may contain references to third-party services — for example, links to game studio websites, payment provider help centers, or sports league official pages. These third-party websites operate entirely independently of war189 and are governed by their own privacy policies. war189 has no control over, and accepts no responsibility for, the content or privacy practices of any third-party website.

We strongly recommend that you review the privacy policy of any third-party website you visit before providing any personal data to that site. The inclusion of a reference to a third-party service on the war189 platform does not constitute an endorsement of that service's privacy or security practices.

war189 reserves the right to update or amend this Privacy Policy at any time. When we make material changes — for example, changes to the categories of data we collect, the third parties we share data with, or the rights available to you — we will notify you in advance by:

• Sending an email notification to your registered email address at least 14 days before the updated policy takes effect
• Displaying a prominent in-platform notification when you next log in to your war189 account
• Updating the "Last updated" date at the top of this page

Minor, non-material changes (such as corrections to typographical errors, clarifications that do not alter the substance of our data practices, or updates to contact details) may be made without advance notice, though the "Last updated" date will always reflect the most recent revision.

Your continued use of the war189 Service after the effective date of a revised Privacy Policy constitutes your acceptance of that revised policy. If you do not agree to the updated terms, you must stop using the Service and may request account closure by contacting [email protected] before the effective date.

If you have any questions, concerns, or complaints regarding this Privacy Policy or war189's handling of your personal data, please contact our Data Privacy team using the details below. We are committed to resolving all privacy-related inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include your registered username or the email address associated with your war189 account so that we can verify your identity and locate your records efficiently. Do not include your full password or payment details in any support communication.

All privacy rights requests submitted to war189 are handled by trained personnel and logged in our privacy request tracking system. You will receive a reference number upon submission which you can use to follow up on the status of your request at any time.