Data & Privacy
Your privacy matters to win78. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used and protected, and what rights you hold as a player on our platform. We encourage you to read it carefully alongside our Terms & Conditions.
Effective Date: 1 January 2026 | Last Updated: 1 January 2026Throughout this Privacy Policy, the following terms carry the meanings defined below:
| Term | Definition |
|---|---|
| "win78" / "we" / "us" | The operator of the win78 online betting and casino platform accessible at win78.lol, including its affiliated entities and data-processing service providers acting on its behalf. |
| "you" / "player" / "user" | Any individual who visits the win78 website, creates a player account, or uses any service offered on the platform, regardless of whether a financial transaction has occurred. |
| "Personal Data" | Any information that identifies or can reasonably be used to identify a living individual, including name, date of birth, mobile number, bank account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or any combination thereof. |
| "KYC" | Know Your Customer — the identity and age verification process carried out by win78 to confirm a player's eligibility and comply with anti-money-laundering obligations. |
| "Third-Party Processor" | Any external service provider to whom win78 transfers Personal Data for a defined and limited processing purpose, including payment processors, game-studio providers, and fraud-prevention platforms. |
| "Cookies" | Small text files placed on your device by the win78 website or by authorised third-party tools, used to remember preferences, maintain session state, and collect analytics data. |
win78 acts as the data controller in respect of all Personal Data collected from players through the win78 platform. As data controller, win78 determines the purposes for which Personal Data is processed and the means by which that processing occurs.
For all privacy-related inquiries, requests to exercise your data rights, or concerns about how your Personal Data is handled, you may contact us at the details set out in Section 15 of this Privacy Policy. win78 is committed to responding to all substantive privacy inquiries within 30 calendar days of receipt.
win78 collects Personal Data across several categories depending on the nature of your interaction with the platform. The following table provides a detailed breakdown:
| Category | Data Elements | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP, SIM, or passport number) | Account registration and KYC verification |
| Contact Data | Indonesian mobile number, email address (where provided) | Account registration and support interactions |
| Financial Data | Bank account number, account holder name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit amounts, withdrawal amounts | Deposit and withdrawal processing; KYC for withdrawals |
| Account Data | Username, hashed password, account creation date, account status, login timestamps, session duration | Ongoing account operation |
| Betting & Gaming Data | Wager history, game selections, win/loss records, bonus redemption history, responsible gaming tool settings | Platform use — ongoing |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (WIB/WITA/WIT) | Every session via automatic collection |
| Behavioural Data | Pages visited, features accessed, click paths, session frequency, search queries within the platform | Ongoing, via cookies and analytics tools |
| Communications Data | Content of live chat transcripts, support ticket submissions, feedback messages | Customer support interactions |
| KYC Documents | Scanned or photographed copies of government-issued identity documents and selfie verification images submitted during the identity verification process | KYC verification — on request |
win78 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data (other than what may be disclosed voluntarily during responsible gaming support interactions), or biometric data beyond identity document photographs submitted for KYC purposes.
win78 collects Personal Data through the following channels and mechanisms:
win78 processes your Personal Data for the following specific and legitimate purposes:
win78 processes Personal Data on the following legal bases depending on the purpose of processing:
win78 does not sell your Personal Data to third parties. Data is shared with external parties only in the following defined circumstances and to the minimum extent necessary for the stated purpose:
All Third-Party Processors engaged by win78 are contractually bound to process Personal Data only for the defined purposes, to maintain appropriate security standards, and not to use the data for any independent commercial purpose.
win78 retains Personal Data for as long as your account remains active and for such additional periods as are required by law or legitimate business necessity. The following retention standards apply:
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. win78 does not retain Personal Data beyond retention periods solely for convenience or commercial value.
win78 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure:
win78 uses cookies and similar tracking technologies on its website to maintain session state, remember your preferences, and collect analytics data that helps us improve the platform. The following cookie categories are in use:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your language preference, ensure secure page navigation. Without these cookies, the win78 platform cannot function correctly. | No — required for platform operation |
| Functional | Remember your preferred game lobby view, currency display format (IDR/Rp), and other personalised settings. | Yes — disabling may reduce personalisation |
| Analytics | Collect aggregated data on page views, session duration, device types, and feature engagement to help win78 improve platform performance and product design. | Yes — no impact on core functionality |
| Fraud Prevention | Device fingerprinting and session risk signals used to detect and prevent fraudulent login attempts, account takeovers, and multi-accounting. | No — required for security |
You can manage cookie preferences through your browser settings. Note that disabling functional or analytics cookies will not prevent you from accessing the win78 platform but may affect your experience. Disabling strictly necessary or fraud-prevention cookies is not supported, as these are integral to platform security and session management.
As a player on the win78 platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact win78 support as described in Section 15:
win78 does not knowingly collect Personal Data from individuals under the age of 21. The win78 platform is intended exclusively for adults aged 21 years and above. Age verification is a mandatory component of the win78 account registration and withdrawal process.
If win78 becomes aware that Personal Data has been collected from an individual who is under 21 years of age, that data will be deleted promptly and the associated account closed. If you believe that a minor has submitted Personal Data to win78, please contact our support team immediately so the matter can be investigated and resolved.
The win78 platform may contain links to third-party websites or services operated by game studio partners, payment providers, or sports data providers. This Privacy Policy applies solely to Personal Data collected and processed by win78 on the win78.lol domain and any subdomain directly operated by win78.
win78 is not responsible for the privacy practices or data handling standards of third-party websites or services accessed via links on the win78 platform. We encourage you to read the privacy policy of any third-party service before submitting Personal Data to that service. The presence of a link to a third-party service on the win78 platform does not constitute an endorsement of that service's privacy practices.
win78 reviews this Privacy Policy periodically and will update it when our data practices change, when applicable law requires amendments, or when we introduce new products or processing activities that involve Personal Data. Material updates to this Privacy Policy will be communicated to registered players via SMS notification to the mobile number registered on your account, or through a prominent notice displayed on the win78 platform, prior to the effective date of the change.
The version of this Privacy Policy current at the time any particular data collection event occurs governs the processing of that data. By continuing to use the win78 platform after a revised Privacy Policy has been published and communicated, you acknowledge the updated terms. If you do not agree to the revised Privacy Policy, you must cease using the platform and contact win78 support to arrange account closure and deletion of your Personal Data subject to mandatory retention obligations.
The effective date at the top of this document reflects the date of the most recent update. Previous versions of the Privacy Policy are available from win78 support on request.
To exercise any of your data protection rights, to submit a privacy-related complaint, or to ask any question about how win78 handles your Personal Data, please use one of the following contact channels:
win78 will verify your identity before processing any data rights request to protect against unauthorised access to or deletion of another person's data. You may be asked to provide your registered mobile number, a recent transaction reference, or other verification information as part of this process.
If you are not satisfied with win78's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or dispute resolution body in your jurisdiction.
Your Data Rights
These rights are available to every registered win78 player. Contact our support team to exercise any of them — there is no charge for reasonable requests.
Request a copy of all Personal Data win78 holds about you, including your account data, transaction history, and KYC records.
Request correction of any inaccurate or incomplete Personal Data held on your win78 account.
Request deletion of your Personal Data where win78 no longer has a lawful basis to retain it. Note that mandatory legal retention periods (e.g., five-year AML records) limit this right in some cases.
Request that win78 limit the processing of your Personal Data while a complaint or accuracy dispute is being investigated.
Request that win78 provide your Personal Data in a structured, machine-readable format so you can transfer it to another service if you choose.
Object to win78 processing your Personal Data for marketing communications at any time. You can also object to processing based on legitimate interests where your individual circumstances justify it.
Data Protection
Security is built into every layer of the win78 platform — from the moment you connect to the moment you log out.
Every connection to win78 is encrypted with 256-bit SSL/TLS, the same standard used by major Indonesian banks. Your login credentials, financial data, and Personal Data are never transmitted in plain text.
Withdrawals and sensitive account changes on win78 require confirmation via a one-time password sent to your registered Indonesian mobile number — adding a critical second layer of security beyond your password alone.
win78 verifies the identity of every player requesting a withdrawal, cross-referencing submitted KTP, SIM, or passport data with account registration details to prevent fraud and protect player funds.
win78 runs continuous automated monitoring across all player accounts, detecting anomalous login patterns, suspicious transaction sequences, and multi-account signals in real time — with flagged accounts quarantined pending review.
KYC documents including identity card scans and selfie verification images are stored in encrypted databases with role-based access restricted to a small number of authorised compliance personnel.
win78 does not sell, rent, or trade your Personal Data to third parties for any commercial purpose. Data sharing is limited strictly to the payment, gaming, and verification partners required to operate the platform — and only to the minimum extent necessary.
If you have any questions about how win78 handles your Personal Data, want to exercise a data right, or simply want to understand our security practices in more detail — our support team is available 24/7. You can also explore our full Terms & Conditions or visit our FAQ for quick answers.