Privacy Policy

1. Introduction

Welcome to the wonsot Privacy Policy. wonsot ("we," "us," or "our") operates an online sports betting and casino gaming platform at wonsot.cam (the "Platform") specifically designed for Indonesian players. We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws and industry best practices.

This Privacy Policy explains what personal information we collect from you when you use the wonsot platform, how we use that information, with whom we share it, how we protect it, and what rights you have regarding your personal data. By creating an account and using our services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy. If you have any questions about how we handle your personal data, please contact us at [email protected].

2. Information We Collect

To provide you with a secure, personalized, and compliant gaming experience, wonsot collects several categories of personal information. The types of data we collect include:

2.1 Information You Provide Directly

When you register for a wonsot account, verify your identity, or communicate with us, you voluntarily provide the following personal information:

• Account Registration Information: Full legal name, date of birth, gender, email address, mobile phone number, residential address in Indonesia, username, password, preferred currency (Indonesian Rupiah / IDR), and security questions/answers.
• Identity Verification Documents (KYC): Government-issued identification such as Indonesian National Identity Card (KTP), passport, or driver's license; proof of address documents such as utility bills or bank statements; proof of payment method ownership such as bank account screenshots or payment card images (with sensitive numbers masked).
• Financial Information: Bank account details (account number, bank name such as BCA, BRI, BNI, or Mandiri), e-wallet account information (OVO, DANA, GoPay, ShopeePay), payment card details (cardholder name, card number, expiration date, CVV - processed securely through our payment processors and not stored on our servers), transaction history including deposits, withdrawals, bets placed, and winnings.
• Communications: When you contact customer support via live chat, email, or phone, we collect and store the content of your communications, including any attachments, screenshots, or documents you provide to help us resolve your inquiry.

2.2 Information We Collect Automatically

When you access and use the wonsot platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device and Browser Information: IP address, device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version (Chrome, Safari, Firefox, Edge), screen resolution, device identifiers, and mobile network information.
• Usage Data: Pages viewed, features accessed, games played, bets placed, time spent on pages, click patterns, navigation paths through the Platform, referral sources (how you arrived at wonsot), date and time stamps of activities, and session duration.
• Location Data: Your approximate geographic location based on your IP address to verify that you are accessing the Platform from within Indonesia as required by our Terms and Conditions. We do not collect precise GPS location data unless you explicitly grant permission through your device settings.
• Gameplay Data: Detailed records of your gaming activity including games played, bet amounts, win/loss outcomes, bonus usage, active promotions, game preferences, and betting patterns. This data is used to provide gameplay history, settle bets accurately, detect fraud, prevent bonus abuse, and comply with our responsible gaming obligations.

2.3 Information From Third-Party Sources

In some cases, we may receive information about you from third-party sources to verify your identity, prevent fraud, or comply with legal requirements:

• Payment Processors: Information from banks, e-wallet providers, and payment gateways to verify payment method ownership and process transactions securely.
• Identity Verification Services: Data from third-party identity verification and anti-fraud services to confirm your identity and comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Responsible Gaming Databases: Information about self-exclusion registrations from gambling industry databases to prevent access by individuals who have voluntarily excluded themselves from gambling activities.

3. How We Use Your Information

wonsot collects and processes your personal data for specific, legitimate purposes. We use your information for the following reasons:

3.1 To Provide and Improve Our Services

• Create, maintain, and manage your wonsot account
• Process deposits, withdrawals, bets, and other financial transactions
• Deliver the games, betting markets, and services you request
• Provide personalized game recommendations and promotions based on your preferences and gaming history
• Maintain gameplay records and transaction history accessible through your account dashboard
• Improve Platform functionality, user experience, and performance through analysis of usage patterns
• Develop new features, games, and services tailored to Indonesian player preferences

3.2 To Ensure Security and Prevent Fraud

• Verify your identity and age to ensure you are 21 years or older and meet eligibility requirements
• Detect, prevent, and investigate fraudulent activity, money laundering, bonus abuse, collusion, and other prohibited conduct
• Monitor betting patterns and gameplay for signs of irregular activity or Terms violations
• Protect the integrity of our games and ensure fair play for all users
• Secure your account against unauthorized access and protect Platform infrastructure from cyber attacks
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations

3.3 To Comply With Legal and Regulatory Obligations

• Fulfill obligations under applicable Indonesian and international gaming regulations
• Respond to lawful requests from government authorities, law enforcement, and regulatory bodies
• Maintain records as required by financial regulations and gaming licenses
• Report suspicious transactions to relevant authorities as mandated by AML laws
• Protect our legal rights and enforce our Terms and Conditions in disputes

3.4 To Communicate With You

• Send important account notifications such as registration confirmation, password resets, withdrawal approvals, and policy updates
• Provide customer support and respond to your inquiries via live chat, email, or phone
• Notify you about bonus offers, promotions, tournaments, and new games (with your consent - you may opt out of marketing communications at any time)
• Send responsible gaming reminders and notifications about deposit limits, loss limits, or self-exclusion settings you've configured

3.5 For Responsible Gaming

• Monitor your gaming behavior for signs of problem gambling such as excessive losses, frequent deposits, or irregular patterns
• Implement and enforce deposit limits, loss limits, session time limits, and self-exclusion periods you set through responsible gaming tools
• Provide reality-check reminders displaying your session duration and win/loss balance
• Intervene proactively if we detect concerning gambling patterns that may indicate harmful behavior
• Comply with our obligations to promote responsible gaming and protect vulnerable players

4. Data Sharing and Disclosure

wonsot does not sell your personal information to third parties for their marketing purposes. However, we may share your data with carefully selected partners and service providers under strict confidentiality agreements in the following circumstances:

4.1 Service Providers and Business Partners

We share your information with trusted third-party service providers who assist us in operating the Platform and delivering services to you:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay, ShopeePay), and payment gateways process your deposits and withdrawals securely.
• Game Providers: Licensed casino game studios and sports data providers supply the games and betting markets offered on wonsot. They may collect gameplay data to operate games and detect irregular activity.
• Identity Verification Services: Third-party KYC and AML compliance services verify your identity documents and screen against fraud and self-exclusion databases.
• Cloud Hosting and IT Infrastructure: Secure cloud service providers host our Platform, store encrypted data, and maintain system security.
• Customer Support Tools: Live chat software and customer service platforms enable our support team to assist you efficiently.
• Analytics and Marketing Services: Tools that help us understand user behavior, optimize Platform performance, and deliver relevant promotions (with appropriate consent for marketing cookies).

All service providers are contractually obligated to protect your data, use it only for the purposes we specify, and comply with applicable data protection laws. We conduct due diligence to ensure our partners maintain appropriate security standards.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, courts, and regulatory bodies when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or lawful government request
• Enforce our Terms and Conditions and investigate violations
• Detect, prevent, or address fraud, security breaches, or technical issues
• Protect the rights, property, or safety of wonsot, our users, or the public as required or permitted by law
• Report suspicious transactions under Anti-Money Laundering (AML) regulations

4.3 Business Transfers

In the event that wonsot undergoes a business transition such as a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on the Platform before your data becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy if we obtain your explicit consent to do so. You can withdraw your consent at any time by contacting us.

5. Data Security Measures

Our comprehensive security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology with 256-bit encryption - the same standard used by online banking platforms.
• Secure Data Storage: Personal information stored on our servers is encrypted at rest using advanced encryption algorithms. Access to data storage systems is restricted to authorized personnel only.
• PCI DSS Compliance: Payment card information is processed in accordance with Payment Card Industry Data Security Standards (PCI DSS). We do not store full credit card numbers, CVV codes, or other sensitive payment details on our servers - this data is handled securely by certified payment processors.
• Firewalls and Intrusion Detection: Multi-layered firewalls and intrusion detection systems protect our infrastructure from unauthorized access attempts and cyber attacks.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data, and only to the extent necessary for their job functions. All access is logged and monitored.
• Regular Security Audits: We conduct regular security assessments, vulnerability scans, and penetration testing to identify and remediate potential security risks.
• Employee Training: All wonsot employees undergo mandatory data protection and security training to ensure they understand their obligations to protect user privacy.
• Secure Password Storage: User passwords are hashed using one-way cryptographic algorithms (bcrypt) and never stored in plain text. We cannot retrieve your password - if you forget it, you must reset it.

While we implement robust security measures, please understand that no method of electronic transmission or storage is 100% secure. You also play a crucial role in protecting your account by choosing a strong password, keeping it confidential, logging out after use, and notifying us immediately if you suspect unauthorized access.

6. Data Retention and Deletion

wonsot retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Retention Periods

• Active Account Data: As long as your account remains active, we retain all personal information, transaction history, and gameplay records to provide ongoing services.
• Closed Account Data: If you voluntarily close your account or we terminate it for Terms violations, we retain essential data (identity information, transaction records, and communications) for a minimum of 5 years to comply with financial regulations, AML requirements, and to resolve any potential disputes or claims.
• Financial and Transaction Records: Deposit and withdrawal records, bet settlement data, and related financial information are retained for at least 7 years as required by Indonesian financial regulations and international AML standards.
• Communications and Support Records: Customer support interactions, complaints, and dispute resolution records are retained for 3-5 years for quality assurance, training, and legal protection purposes.
• Marketing Consent: If you opt out of marketing communications, we retain a minimal record of your opt-out preference indefinitely to ensure we do not contact you again for marketing purposes.

6.2 Data Deletion

After the applicable retention period expires and we no longer have a legitimate business or legal reason to retain your data, we securely delete or anonymize your personal information so that it can no longer be associated with you. Anonymized data (data that cannot identify you individually) may be retained indefinitely for statistical analysis and service improvement purposes.

7. Your Privacy Rights

Under applicable data protection laws, you have certain rights regarding your personal information. wonsot respects these rights and provides mechanisms for you to exercise them:

7.1 Right to Access

You have the right to request access to the personal data we hold about you. You can view much of your information directly through your account dashboard, including profile details, transaction history, and gameplay records. For additional information not available in your account, contact our support team at [email protected] and we will provide a copy of your data within 30 days.

7.2 Right to Rectification

If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly through your account settings. For changes requiring verification (such as name or date of birth corrections), contact customer support with supporting documentation.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, please note that we may be required to retain certain information to comply with legal obligations (financial records, AML requirements) or to establish, exercise, or defend legal claims. If you wish to request deletion, contact us and we will assess your request in accordance with applicable law.

7.4 Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store your data but not actively use it except with your consent or for legal claims.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another service provider. To request a data export, contact our support team.

7.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes. You can opt out of marketing emails by clicking the "unsubscribe" link in any promotional email or by adjusting your communication preferences in your account settings. You may also object to other types of processing based on your particular situation, and we will assess your request in accordance with applicable law.

7.7 Right to Withdraw Consent

Where we process your data based on your consent (such as for marketing communications or optional data collection), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with "Privacy Rights Request" in the subject line. Include your full name, account username, and specify which right you wish to exercise. We may need to verify your identity before processing your request to ensure we do not disclose personal data to unauthorized individuals. We will respond to verified requests within 30 days.

8. Cookies and Tracking Technologies

wonsot uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on repeat visits.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These cookies enable core features such as user authentication, security, and payment processing. You cannot opt out of essential cookies as the Platform would not work without them.
• Performance and Analytics Cookies: Help us understand how users interact with the Platform by collecting anonymous usage data such as page views, session duration, and navigation patterns. This information is used to improve Platform performance and user experience.
• Functionality Cookies: Remember your preferences such as language selection, currency, and display settings to provide a personalized experience on repeat visits.
• Marketing and Advertising Cookies: Used to deliver relevant promotional offers and track the effectiveness of marketing campaigns. These cookies require your consent and can be disabled through your browser settings or our cookie consent tool.

8.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may limit your ability to use certain features of the wonsot platform. For instructions on managing cookies in popular browsers, visit the browser's help section or support page.

9. Third-Party Services

The wonsot platform may contain links to third-party websites, services, or advertisements operated by partners such as payment processors, game providers, or social media platforms. These third parties have their own privacy policies and data practices, which may differ from ours.

wonsot is not responsible for the privacy practices or content of third-party services. We encourage you to read the privacy policies of any third-party sites you visit. When you click on a third-party link or provide information to a third-party service, your interaction is governed by that party's privacy policy, not this one.

10. Children's Privacy

wonsot is an adult-oriented online gambling platform. Our services are strictly for individuals aged 21 years or older, in accordance with Indonesian regulations and our Terms and Conditions. We do not knowingly collect, use, or solicit personal information from anyone under the age of 21, nor do we knowingly allow individuals under 21 to register for accounts or use our services.

If we discover that we have inadvertently collected personal information from a person under 21 years of age, we will immediately delete that information and terminate the associated account. If you believe a person under 21 has provided personal data to wonsot, please contact us immediately at [email protected] so we can take appropriate action.

Parents and guardians are encouraged to monitor their children's internet usage and ensure minors do not access age-restricted content including online gambling platforms.

11. Changes to This Policy

wonsot reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you by:

• Updating the "Last Updated" date at the top of this page
• Sending an email notification to the email address associated with your account (for significant changes affecting your rights)
• Displaying a prominent notice on the Platform homepage or through an in-app notification

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of the wonsot platform after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the changes, you should discontinue use of the Platform and contact us to close your account.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how wonsot handles your personal data, we are here to help. Please contact our dedicated privacy team:

• Email: [email protected] (please copy and paste into your email client - this is not a clickable link)
• Subject Line: Please use "Privacy Inquiry" or "Data Protection Question" in your email subject line for faster routing
• Live Chat: Available 24/7 through the wonsot website for immediate assistance
• Response Time: We aim to respond to all privacy inquiries within 48 hours, with most requests addressed within 24 hours

When contacting us about privacy matters, please provide your account username and sufficient detail about your inquiry so we can assist you effectively. For identity verification purposes, we may ask security questions before discussing sensitive account information.