Privacy Policy — waw4

In this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" — the waw4 website at https://waw4.cam and all associated services, features, and sub-pages accessible through that domain.
• "We," "Us," "Our," "waw4" — the internationally operated entity that owns and operates the Platform.
• "You," "User," "Data Subject" — any individual who accesses, browses, registers on, or otherwise uses the Platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, including but not limited to name, email address, date of birth, national identity number, IP address, and payment account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" (Know Your Customer) — the identity verification process through which we confirm the identity and age of registered Users before processing withdrawals.
• "Cookies" — small text files placed on your device by the Platform to facilitate session management, analytics, and user experience personalization.
• "Third-Party Processor" — any external service provider that processes Personal Data on waw4's behalf under a data processing agreement, including payment gateways, KYC verification services, and hosting providers.

waw4 acts as the data controller for all Personal Data collected through the Platform. As data controller, we are responsible for determining the purposes for which Personal Data is processed and the means by which that processing takes place.

All enquiries relating to data protection — including requests to access, correct, or delete your Personal Data — should be directed to our dedicated support team via the contact details set out in Section 15 of this Policy. We will acknowledge all data-related requests within 5 business days and aim to resolve them within 30 calendar days.

waw4 collects Personal Data in the following categories. We collect only what is necessary for the stated purpose and do not retain data beyond the periods specified in Section 9.

waw4 collects Personal Data through the following channels:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, submitting a support request, or updating your account profile.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including via server logs, session tracking, and cookies (see Section 8).
• Third-party sources: Identity and fraud-risk data received from KYC verification partners and payment gateway providers in connection with the processing of your transactions and the verification of your account.

We do not purchase Personal Data from data brokers, advertising networks, or any other third-party data marketplaces. All Personal Data in our possession was provided directly by you or generated through your use of the Platform.

waw4 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and waw4 — including account management, processing deposits and withdrawals, and providing access to the Platform's games and betting markets.
• Legitimate interests: Processing that serves waw4's legitimate business interests, where those interests are not overridden by your rights — including fraud detection, security monitoring, platform analytics, and responsible gaming monitoring.
• Legal obligation: Processing required by applicable law, including anti-money laundering (AML) compliance, financial record-keeping requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Consent: Where we rely on consent as the legal basis for processing (for example, for optional marketing communications), you may withdraw that consent at any time by contacting our support team or updating your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

waw4 uses the Personal Data we collect for the following purposes:

• To create, manage, and secure your Account, including authentication, password resets, and account-level security alerts.
• To process deposits and withdrawals via your selected payment methods, including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• To verify your identity and age through our KYC process before authorizing withdrawal requests.
• To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited activities as defined in our Terms & Conditions.
• To monitor gameplay patterns and betting behavior in connection with our responsible gaming obligations, including identifying Users who may be displaying signs of problem gambling.
• To respond to your support enquiries, process complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
• To send you transactional communications — including deposit confirmations, withdrawal status updates, security alerts, and KYC request notifications. These communications are not optional as they are necessary to the performance of the contract between you and waw4.
• To send you optional promotional communications about bonuses, new game releases, and seasonal offers — but only where you have provided your consent or where we have a legitimate interest in doing so and you have not opted out.
• To analyze aggregate, anonymized usage data for the purpose of improving Platform performance, user experience, and game offerings. This analysis does not involve decisions made solely by automated means that produce legal or similarly significant effects on you.
• To comply with applicable laws and regulations, including responding to lawful requests from regulatory bodies, tax authorities, or law enforcement agencies.

waw4 does not sell, rent, or otherwise commercially exploit your Personal Data. We may share your data with the following categories of recipients, strictly for the purposes described:

• Payment processors and banking partners: Financial institutions and payment gateway providers — including those facilitating transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja — receive the minimum financial data necessary to process your deposits and withdrawals securely.
• KYC and identity verification providers: Third-party services that assist us in verifying the identity and age of Users as part of our KYC compliance process. These providers operate under binding data processing agreements and are prohibited from using your data for any purpose beyond the verification service they provide to waw4.
• Cloud hosting and infrastructure providers: Secure, internationally recognized cloud service providers that host the Platform's servers and databases. All such providers are contractually obligated to maintain data confidentiality and implement appropriate security measures.
• Fraud detection and security services: Specialized technology partners that assist waw4 in detecting and preventing fraudulent activity, account abuse, and automated bot traffic. Data shared with these partners is subject to strict usage limitations.
• Legal and regulatory authorities: Where required by applicable law, court order, or the lawful request of a regulatory or law enforcement authority, waw4 will disclose Personal Data to the extent legally required. We will notify affected Users of such disclosures where we are legally permitted to do so.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by waw4 on a confidential basis for the purpose of obtaining professional advice in connection with the Platform's operations.

All Third-Party Processors engaged by waw4 are bound by data processing agreements that require them to process Personal Data only in accordance with our instructions, to implement appropriate technical and organizational security measures, and to delete or return data upon termination of their engagement.

waw4 uses cookies and similar tracking technologies to operate the Platform effectively and deliver a consistent user experience. The following categories of cookies are in use:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during an active session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without rendering the Platform non-functional.
• Performance and analytics cookies: Used to collect aggregate, anonymized data about how Users interact with the Platform — including which pages are visited most frequently, session duration, and error rates. This data helps us improve Platform performance and user experience. No individual-level profiling is conducted using these cookies.
• Functionality cookies: Store your preferences — such as your preferred language, time zone (WIB, WITA, or WIT), and notification settings — so that they are preserved between sessions without requiring you to reconfigure them each time you log in.
• Security cookies: Used to detect and prevent fraudulent login attempts, account takeovers, and bot activity. These cookies analyze behavioral signals during your session and do not store Personally Identifiable Information in a form accessible to third parties.

waw4 does not use third-party advertising cookies or cross-site behavioral tracking technologies. We do not participate in any advertising network that tracks your activity across websites other than waw4. Most web browsers allow you to control cookie settings at the browser level; however, disabling strictly necessary cookies will prevent you from logging in to your waw4 Account.

waw4 retains Personal Data only for as long as it is necessary for the purposes for which it was collected, or for as long as required by applicable law. The following retention periods apply:

• Active account data (identity, contact, financial, and usage data): Retained for the duration of your active account relationship with waw4 plus an additional 5 years after account closure, in line with standard financial record-keeping obligations.
• KYC documents: Retained for 5 years from the date of account closure or the date of the last transaction, whichever is later. This period reflects the requirements of internationally recognized anti-money laundering standards.
• Transaction records: Retained for 5 years from the date of the transaction for audit and compliance purposes.
• Support correspondence: Retained for 3 years from the date of the final communication, for dispute resolution and quality assurance purposes.
• Technical and session logs: Retained for 12 months from the date of generation, after which they are permanently deleted or anonymized.
• Closed accounts with no outstanding disputes: Core identity and financial data is deleted within 90 days of a verified account closure request, subject to the mandatory retention periods noted above.

When Personal Data is no longer required, it is securely deleted or irreversibly anonymized in a manner that renders identification impossible. Where anonymized data is retained for analytical purposes, it no longer constitutes Personal Data and falls outside the scope of this Policy.

waw4 implements a layered set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and waw4 servers.
• AES-256 encryption for sensitive data at rest, including stored KYC documents and financial records.
• Role-based access controls ensuring that Personal Data is accessible only to employees and contractors who require it to perform their specific job functions.
• Multi-factor authentication for all internal systems that contain or process Personal Data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Automated intrusion detection and monitoring systems that generate real-time alerts for suspicious activity patterns.

While we take every reasonable precaution to protect your data, no security system is entirely impenetrable. You also play an important role in keeping your account secure: use a strong, unique password for your waw4 account, enable any available account security features, and contact our support team immediately if you suspect unauthorized access to your account.

As a User of the waw4 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team using the details in Section 15. We will respond within 30 calendar days and at no cost to you.

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request that we delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our mandatory retention obligations under applicable law.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your Personal Data — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data that is based on waw4's legitimate interests, including processing for direct marketing purposes. Upon receipt of a valid objection to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

If we become aware that we have inadvertently collected Personal Data from an individual who is under 21 years of age, we will take immediate steps to delete that data and close the associated account. All deposits made by an underage user will be returned, and any winnings generated will be forfeited.

If you are a parent or guardian and believe that your child has registered an account on waw4, please contact our support team immediately at [email protected]. We will investigate and resolve all such reports as a priority.

waw4 is an internationally operated platform, and your Personal Data may be transferred to and processed in countries outside Indonesia in connection with our hosting infrastructure, KYC verification services, and other Third-Party Processors. Where such international transfers occur, waw4 takes all reasonable steps to ensure that your data receives an equivalent level of protection to that which applies within Indonesia, including by:

• Engaging only Third-Party Processors that implement security standards consistent with internationally recognized frameworks such as ISO/IEC 27001.
• Entering into data processing agreements with all Third-Party Processors that impose binding obligations regarding data confidentiality, security, and permitted processing purposes.
• Applying additional safeguards — such as data minimization and pseudonymization — before transferring data to jurisdictions with less developed data protection frameworks.

By registering an account on waw4 and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data as described in this section.

waw4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable law. Where changes are material, we will notify registered Users by email or via a prominent notice on the Platform at least 7 days before the revised Policy takes effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes to this Policy, you should cease using the Platform and contact our support team to request account closure. The current version of this Privacy Policy is always accessible at https://waw4.cam/privacy-policy. The "Last Updated" date at the top of this page reflects the most recent revision.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the waw4 data protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the live chat widget on the Platform. Average response time is under 5 minutes.
• Support Hours: 24 hours a day, 365 days a year, covering WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.

All data-related requests will be acknowledged within 5 business days. We aim to resolve all requests fully within 30 calendar days of receipt. Complex requests may require additional time, in which case we will communicate the expected timeline to you promptly.