Privacy Policy

1. Definitions

Throughout this Privacy Policy, the following terms have the meanings set out below:

• "dwslot", "we", "us", "our" — the operator of the online gaming platform accessible at dwslot.cam and all sub-domains or related services.
• "User", "you", "your" — any natural person who visits, registers for, or uses dwslot in any capacity.
• "Personal Data" — any information that, alone or in combination with other information, identifies or can reasonably identify an individual (e.g., full name, email address, national identity number, IP address).
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, deletion, or destruction.
• "Data Controller" — dwslot in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Third Party" — any natural or legal person other than you, dwslot, or dwslot's employees or agents who are authorized to process Personal Data on our behalf.
• "KYC" — Know Your Customer verification; the identity-confirmation process required before certain account functions become available.
• "Cookie" — a small text file placed on your browser or device by a web server for session management, analytics, or preference storage purposes.

2. Personal Data We Collect

dwslot collects only the minimum data necessary to deliver, secure, and improve our services. The categories of Personal Data we process are as follows:

2.1 Identity and Contact Data

• Full legal name (as it appears on your Indonesian national identity card, KTP);
• Date of birth and age confirmation;
• Email address and mobile phone number;
• Physical residential address (city, province, postal code);
• Copies of identity documents submitted during KYC (KTP photograph, selfie verification image, and optional address-proof document).

2.2 Financial Data

• Bank account details (account name, account number, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga) used for deposits and withdrawals;
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) linked to your account;
• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method used;
• Account balance history and betting turnover data (required for bonus wagering compliance and AML monitoring).

2.3 Gaming Activity Data

• Bet history, game selections, wagering amounts, and settlement outcomes;
• Session start and end times, game types played (slots, live casino, sports betting, togel lottery, and other available markets);
• Responsible gaming tool usage (deposit limits set, self-exclusion elections, session time configurations).

2.4 Technical and Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser or application version;
• Cookie identifiers, session tokens, and similar tracking technologies;
• Platform interaction logs (pages viewed, clicks, scroll depth, error reports).

2.5 Communications Data

• Records of your correspondence with dwslot customer support (live chat transcripts, email threads);
• Feedback, complaints, and dispute documentation;
• Marketing preference records (opted-in or opted-out of promotional communications).

3. How We Collect Your Data

dwslot collects Personal Data through the following channels:

• Direct provision: Information you voluntarily submit during account registration, KYC verification, deposit or withdrawal requests, and customer support interactions;
• Automated technologies: Cookies, web beacons, pixel tags, and server logs that automatically record technical and behavioral data when you access our platform;
• Payment processors: Transaction confirmation data provided by our banking and e-wallet partners when you make deposits or withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and similar services;
• Identity verification providers: Results and risk scores from third-party KYC services that verify identity document authenticity and screen against financial crime watchlists;
• Fraud detection systems: Data signals (device fingerprints, behavioral patterns, IP reputation) collected by our fraud prevention infrastructure to protect account security.

4. Purposes of Data Processing

We process your Personal Data exclusively for the following purposes:

5. Legal Basis for Processing

dwslot processes your Personal Data under the following legal grounds, consistent with applicable Indonesian data protection law (UU PDP — Undang-Undang Perlindungan Data Pribadi) and recognized international standards:

• Contractual necessity: Processing required to create and maintain your account, execute financial transactions, and deliver gaming services as described in our Terms & Conditions;
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and tax reporting duties;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights;
• Consent: Processing for direct marketing communications and optional personalization features, which you may withdraw at any time without penalty to your core account services.

6. Data Sharing and Disclosure

dwslot does not sell or commercially exploit your Personal Data. We share data only in the following limited and controlled circumstances:

6.1 Service Providers (Data Processors)

We engage carefully vetted third-party service providers who process data strictly on our behalf under binding contractual data protection obligations. These include:

• Payment processors and banking partners (for transaction execution and reconciliation);
• Identity verification and KYC service providers (for document authentication and watchlist screening);
• Cloud hosting and infrastructure providers (for secure data storage);
• Customer support software providers (for live chat and ticketing infrastructure);
• Fraud detection and cybersecurity vendors (for real-time threat monitoring).

6.2 Legal and Regulatory Disclosure

We may disclose your Personal Data to law enforcement, regulatory authorities, or courts when required by valid legal process, court order, or applicable Indonesian law. We will disclose only the minimum data required to satisfy the specific legal request.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or other corporate reorganization involving dwslot, your Personal Data may be transferred to the acquiring entity as part of the t ransaction assets. You will be notified of any such transfer via email or a prominent notice on our platform, and the acquiring entity will be bound by the same privacy commitments described in this policy.

6.4 What We Never Do

• We never sell your Personal Data to third-party advertisers or data brokers;
• We never share your data with other gambling operators for cross-marketing purposes;
• We never provide your financial account details to any party other than the payment processors required to execute your specific transactions.

7. Cookies and Tracking Technologies

dwslot uses cookies and similar tracking technologies to operate our platform, remember your preferences, analyze usage patterns, and detect fraud. The following categories of cookies are used:

7.1 Strictly Necessary Cookies

These cookies are essential to the operation of our platform and cannot be disabled. They manage your login session, maintain your account security token, remember your language and currency preferences, and protect against cross-site request forgery (CSRF) attacks. Without these cookies, core platform functions would not work correctly.

7.2 Performance and Analytics Cookies

We use analytics cookies to understand how users interact with dwslot — which pages are visited most often, where users experience difficulty, and how long sessions last on average. This data is aggregated and anonymized before analysis. We use this information exclusively to improve platform performance and user experience.

7.3 Fraud Detection Cookies

Our security infrastructure uses device fingerprinting and persistent identifiers to recognize returning devices and flag anomalous access patterns that may indicate account takeover attempts, multi-accounting, or other fraudulent activity. These cookies directly protect your account security.

7.4 Marketing Cookies (Consent-Based)

Only with your explicit consent do we deploy cookies that help us tailor promotional content and offers to your gaming preferences. You may withdraw this consent at any time by adjusting your account notification settings or by contacting customer support.

8. Data Retention

dwslot retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable Indonesian law. Our retention schedule is summarized in the table in Section 4. Key principles governing retention are:

• Active accounts: All Personal Data is retained for the full duration of your account relationship with dwslot;
• Closed accounts: Financial records and KYC documentation are retained for a minimum of 7 years following account closure in compliance with AML and tax record-keeping obligations;
• Inactive accounts: Accounts with no login or transaction activity for 24 consecutive months will be considered inactive. We will notify you before initiating any data minimization or deletion process;
• Marketing data: Contact data held solely for marketing purposes is deleted promptly upon withdrawal of consent;
• Security incidents: Data related to confirmed fraud or security breaches may be retained for up to 10 years to support legal proceedings and prevent future harm.

Upon expiration of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be linked to any identifiable individual.

9. Data Security Measures

dwslot employs a comprehensive, layered security program to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in transit: All data transmitted between your browser or app and our servers is encrypted using TLS 1.2 or higher (256-bit SSL), preventing eavesdropping and man-in-the-middle attacks;
• Encryption at rest: Sensitive data fields — including identity document images, financial account numbers, and authentication credentials — are encrypted at the database level using AES-256;
• Access controls: Personal Data is accessible only to dwslot employees and contractors with a documented business need. Role-based access control (RBAC) and multi-factor authentication (MFA) are enforced for all internal systems;
• Intrusion detection: Our infrastructure is monitored 24/7 by automated intrusion detection systems and a security operations team that investigates anomalous access in real time;
• Regular audits: We conduct periodic internal security reviews and engage independent third-party auditors to test our systems for vulnerabilities through penetration testing and code review;
• Staff training: All dwslot employees who handle Personal Data receive mandatory data protection and information security training at onboarding and annually thereafter.

Despite our extensive security measures, no internet transmission or electronic storage system is completely immune to risk. If you suspect that your dwslot account has been compromised, please contact our security team immediately at [email protected].

10. Your Privacy Rights

As a dwslot user and a data subject under applicable Indonesian and international data protection principles, you have the following rights with respect to your Personal Data:

10.1 Right of Access

You have the right to request a copy of all Personal Data we hold about you, along with information about how it is being processed. We will provide this in a readable format within 30 calendar days of a verified request.

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update certain information directly within your account settings. For changes to identity documents or verified details, please contact support with supporting documentation.

10.3 Right to Erasure

You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests. This right is subject to overriding legal retention obligations — for example, we cannot delete financial records required by law to be retained for 7 years.

10.4 Right to Restriction of Processing

You may request that we restrict the processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested or while an objection to processing is being evaluated. During a restriction period, we may store your data but will not actively process it beyond storage.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service provider.

10.6 Right to Object

You have the right to object at any time to processing based on our legitimate interests, including profiling for fraud detection purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests. You also have an unconditional right to object to processing for direct marketing purposes.

10.7 How to Exercise Your Rights

11. Minors and Age Restrictions

dwslot's services are strictly intended for adults aged 21 years and older. We do not knowingly collect or process Personal Data from individuals under the age of 21. If we become aware that a minor has provided Personal Data and created an account, we will immediately close the account, delete all associated data, and return any deposited funds to the originating payment method.

If you are a parent or guardian and believe your child has registered with dwslot, please contact us immediately at [email protected]. We take underage gambling extremely seriously and have strict age verification procedures in place during the KYC process to prevent minors from accessing our platform.

12. International Data Transfers

dwslot primarily stores and processes your Personal Data on servers located in secure data centers serving the Southeast Asian region. Some of our trusted service providers — including cloud infrastructure partners, KYC verification vendors, and cybersecurity tools — may process data in jurisdictions outside Indonesia.

Where such international transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to Indonesian data protection requirements. These safeguards include:

• Standard contractual clauses binding the recipient to comply with data protection obligations;
• Transferring only to jurisdictions with data protection laws deemed adequate by Indonesian standards;
• Applying technical controls (encryption, pseudonymization) that protect data even if transferred across borders.

13. Changes to This Privacy Policy

dwslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When we make material changes — meaning changes that significantly affect how we process your Personal Data or reduce your rights — we will notify you by:

• Sending a notification to your registered email address at least 14 days before the changes take effect;
• Displaying a prominent notice on the dwslot platform on your next login.

Non-material changes (such as clarifications of existing language, updated contact details, or formatting corrections) may be made without prior notice and will be reflected in the "Last Reviewed" date at the top of this page. Your continued use of dwslot after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

14. Contact and Data Protection Inquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way dwslot handles your Personal Data, please reach out to our dedicated support team:

We are committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant Indonesian data protection authority in accordance with applicable law.