Privacy Policy

1 Introduction

war148 ("we", "us", "our") operates the online betting and gaming platform accessible at https://war148.cam. We are committed to protecting the privacy and personal data of every individual who interacts with our platform — whether as a registered Member, a visitor browsing our pages, or a person who contacts our support team.

This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the conditions under which it may be shared, how long it is retained, and the rights available to you as a data subject. This Policy applies to all data-processing activities carried out by war148 in connection with the operation of the Platform.

By registering for a war148 account or by continuing to use the Platform after being presented with this Policy, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you should discontinue use of the Platform and, if applicable, request closure of your account.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person. This includes names, contact details, identity document numbers, financial data, IP addresses, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, war148 is the Data Controller.
• "Data Processor" — A third party that processes personal data on behalf of war148, under a binding data-processing agreement, for specified purposes only.
• "Member" — Any individual who has successfully registered an account on the war148 Platform.
• "Cookies" — Small text files placed on a user's device by a website, used to store preferences, session identifiers, and analytical data.
• "KYC" — Know Your Customer: the process of verifying a Member's identity and age before allowing withdrawals or other regulated actions.

3 Data We Collect

war148 collects personal data in the following categories. We do not collect special-category sensitive data (such as health data, religious beliefs, or biometric data) unless it is strictly necessary and you have provided explicit consent.

4 How We Collect Your Data

war148 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically as you navigate the Platform, through server logs, cookies, and similar tracking technologies (see Clause 8).
• Third-Party Payment Providers: Confirmation data received from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a transaction.
• Identity Verification Services: Where we engage a third-party KYC service to assist in verifying the authenticity of submitted identity documents, that service may return a verification result to war148.
• Fraud-Prevention Systems: We may receive risk signals from fraud-detection and anti-money-laundering partners, which are used in combination with your account data to assess transaction risk.

5 Why We Use Your Data

war148 processes personal data only for specific, legitimate purposes. The table below maps each purpose to the data categories it relies on:

• Account Creation & Management: Identity, Contact, and Account Data — to create and maintain your Member account, authenticate logins, and administer your profile.
• Age & Identity Verification (KYC): Identity Data and KYC Document Data — to confirm that you are at least 21 years of age and to verify your identity before processing withdrawals, as required by our responsible gaming and anti-fraud obligations.
• Payment Processing: Financial Data and Identity Data — to credit deposits, process withdrawals, and maintain an accurate transaction ledger for your account.
• Fraud Prevention & Security: Technical Data, Financial Data, and Betting & Gaming Data — to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as defined in the war148 Terms & Conditions.
• Platform Improvement: Usage Data and Technical Data — to analyse how Members use the Platform, identify technical issues, and improve the overall user experience.
• Marketing Communications: Contact Data and Marketing Preference Data — to send promotional offers, bonus notifications, and platform updates to Members who have opted in. You may withdraw this consent at any time.
• Responsible Gaming: Betting & Gaming Data and Account Data — to monitor for signs of problem gambling behaviour and to administer self-exclusion, deposit limit, and session-limit tools where requested.
• Legal & Regulatory Compliance: Identity Data, Financial Data, and Communications Data — to meet obligations under applicable anti-money-laundering, counter-terrorist-financing, and data-protection frameworks.
• Customer Support: Communications Data and Account Data — to respond to enquiries, resolve disputes, and manage complaints submitted through live chat, WhatsApp, or email.

6 Legal Bases for Processing

war148 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are as follows:

• Contractual Necessity: Processing required to perform the contract between you and war148 — including account management, payment processing, and KYC verification.
• Legitimate Interests: Processing necessary for the legitimate interests of war148 — including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: Processing required to comply with applicable law — including anti-money-laundering regulations, record-keeping obligations, and responses to lawful orders from competent authorities.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without penalty, though withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7 Data Sharing & Disclosure

war148 does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Service Providers: We share transaction-related data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposits and withdrawals.
• KYC & Identity Verification Partners: Where we engage a third-party verification service to authenticate identity documents, we share only the data necessary for that verification. Such partners are bound by strict data-processing agreements.
• Fraud Prevention & Security Vendors: We may share technical and transaction data with specialist anti-fraud and risk-management providers to protect the integrity of the Platform and the interests of all Members.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session and game-play identifiers required to deliver their games within the war148 platform. These providers do not receive personally identifiable information beyond what is operationally necessary.
• Law Enforcement & Regulatory Authorities: We will disclose personal data to competent governmental or regulatory authorities where required to do so by applicable law, court order, or lawful regulatory direction — without prior notice to you where legally required.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of war148's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

8 Cookies & Tracking Technologies

war148 uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, maintain your session security, and understand how the Platform is used. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Used to remember your preferences — such as your chosen language display and notification settings — so you do not need to re-enter them on each visit.
• Analytical Cookies: Used to collect anonymised data about how Members navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve the Platform experience.
• Marketing & Retargeting Cookies: Used only where you have given explicit consent, to personalise promotional content and measure the effectiveness of marketing campaigns. You may withdraw consent to these cookies at any time.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use key Platform features. war148's cookie implementation does not include third-party advertising network cookies.

9 Data Retention

war148 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any overriding legal obligations requiring a longer retention period. Our general retention schedule is as follows:

• Active Account Data: Retained for the full duration of your membership and for a period of 5 years following permanent account closure.
• KYC & Identity Documents: Retained for 5 years from the date of submission, in line with standard anti-money-laundering record-keeping requirements.
• Transaction & Financial Records: Retained for 5 years from the date of each transaction, or for such longer period as required by applicable law.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, for dispute resolution and quality-assurance purposes.
• Marketing Preference Data: Retained until you withdraw your consent or until your account is permanently closed, whichever is earlier.
• Technical & Usage Data (Logs): Retained for a rolling period of 12 months, after which they are automatically purged or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, such that it can no longer be associated with any identifiable individual.

10 Data Security

war148 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and our servers is protected using TLS 1.2 or higher (256-bit SSL encryption).
• Encryption at Rest: Sensitive personal data stored on our servers — including identity document data and financial account references — is encrypted at rest using AES-256 encryption.
• Password Hashing: Member passwords are never stored in plain text. They are salted and hashed using a one-way cryptographic algorithm before storage.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required for their specific role.
• Two-Factor Authentication (2FA): war148 offers 2FA for Member accounts and mandates it for all internal administrative access to production systems.
• Regular Security Audits: The Platform undergoes periodic penetration testing and vulnerability assessments conducted by independent security professionals.
• Incident Response: In the event of a personal data breach that poses a material risk to affected individuals, war148 will notify affected Members and relevant authorities within the timeframe required by applicable data-protection law.

11 Your Rights

As a data subject, you hold the following rights in relation to the personal data that war148 holds about you. To exercise any of these rights, please contact our support team via live chat or email (see Clause 15). We will respond within 30 calendar days of receiving a verifiable request.

Please note that some rights are not absolute and may be subject to exceptions — for example, we may be required to retain certain data for legal compliance purposes even following a deletion request. Where an exception applies, we will explain the reason in our response to your request.

12 Children's Privacy

The war148 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from anyone under the age of 21. If you are under 21, you must not register for or use the Platform.

If war148 discovers — through KYC verification or any other means — that a Member is under 21 years of age, the account will be immediately suspended, all pending transactions will be cancelled, and any deposited funds will be returned via the original payment method. Winnings accrued on an underage account will not be paid out under any circumstances.

If you believe that a person under the age of 21 has registered an account on war148, please notify us immediately via live chat or email. We take underage gambling extremely seriously and will act on all credible reports without delay.

13 Third-Party Links

The war148 Platform may contain references to, or contextual mentions of, third-party services — such as Indonesian banks, e-wallet providers, or game studios — in connection with the services we offer. This Privacy Policy applies solely to data processed by war148 in the operation of the Platform.

war148 is not responsible for the privacy practices of any third-party organisation. If you interact directly with a third-party service — for example, by initiating a bank transfer through your BCA or BRI mobile banking application — the privacy policy of that third party will govern the processing of your data by them. We encourage you to review the privacy policies of any third-party services you use.

14 Changes to This Policy

war148 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, operational requirements, or applicable legal obligations. When material changes are made, we will notify registered Members by email to their registered address and by displaying a prominent notice on the Platform, at least 7 calendar days before the changes take effect.

The date on which this Policy was last revised is shown at the top of this page. We recommend reviewing this page periodically. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

If a proposed change is material and you do not agree with it, you may close your account and withdraw your remaining balance by contacting support before the effective date of the revision.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data-subject rights, or wish to raise a complaint about war148's data-processing practices, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the war148 Platform. This is the fastest channel for privacy-related requests.
• WhatsApp: Available 24/7 — contact details are listed within the Platform's Support section.
• Email: [email protected] — please include "Privacy Request" or "Data Subject Request" in the subject line to ensure your message is routed to the correct team. Response time: within 24 hours during WIB business hours.

We take all privacy complaints seriously and will acknowledge receipt of your complaint within 5 business days. If you are not satisfied with our response, you have the right to escalate your complaint to the competent data-protection authority in your jurisdiction.