Your privacy is a fundamental obligation at we888. This Privacy Policy explains what personal data we collect from Indonesian players, how we use and protect it, the third parties we may share it with, and the rights available to you regarding your information. We encourage you to read this document carefully alongside our Terms & Conditions.
Effective Date: 1 January 2026 · Last Reviewed: 1 January 2026Six principles that govern how we888 handles every piece of personal data we receive from our players.
we888 collects only the personal data that is strictly necessary to provide our gaming and sportsbook services, comply with KYC and anti-money-laundering obligations, and process your deposits and withdrawals. We do not harvest data for resale or advertising profiling.
All data transmitted between your device and the we888 platform is protected by 256-bit SSL/TLS encryption. Sensitive fields such as payment details and identity documents are encrypted at rest using AES-256. Encryption keys are rotated on a scheduled basis by our security infrastructure team.
Personal data collected for a specific purpose — for example, KYC identity verification — is used only for that purpose. we888 does not repurpose your KYC documents for marketing analysis, does not share your KTP data with advertisers, and does not use your transaction history to build third-party commercial profiles.
we888 does not sell, rent, or lease your personal data to any third party under any circumstances. Data may be shared with contracted service providers (payment processors, fraud detection vendors, KYC verification bureaus) solely to deliver the services you have requested, and only under strict data processing agreements.
we888 maintains accurate, current records of your personal information and provides straightforward mechanisms for you to review and correct your data. If your registered mobile number, email address, or payment method details change, you can update them through the account settings panel or by contacting support.
we888 retains personal data only for as long as it is required to fulfil the purpose for which it was collected, or to comply with legal and regulatory obligations. Account data is retained for a minimum of five years following account closure to satisfy anti-money-laundering record-keeping requirements.
The following terms have the meanings given below when used in this Privacy Policy.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living natural person, directly or in combination with other data. Examples include your full name, KTP number, date of birth, mobile number, email address, and IP address. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration, archiving, or deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data — in this context, we888 (https://we888.games). |
| "Data Processor" | A third party engaged by we888 to process Personal Data on we888's behalf, under a binding data processing agreement. Examples include KYC verification bureaus and payment gateway operators. |
| "Player" / "you" / "your" | Any natural person who has registered a we888 account or accesses any part of the we888 platform, as defined in the Terms & Conditions. |
| "KTP" | Kartu Tanda Penduduk — the Indonesian National Identity Card, which serves as the primary identity document for KYC verification at we888. |
| "Cookie" | A small text file stored on your device by a web server, used to recognise returning visitors, maintain session state, and collect aggregate usage analytics. |
we888 (operating at https://we888.games) is the Data Controller responsible for your Personal Data. we888 is an internationally licensed online gaming platform. All data protection queries, subject access requests, and privacy complaints should be directed to the we888 Privacy Team via email at [email protected]. We aim to acknowledge all privacy-related correspondence within 2 business days and to resolve substantive requests within 30 calendar days of receipt.
we888 collects the following categories of Personal Data in the course of operating our platform and serving Indonesian players.
When you create a we888 account, we collect your full legal name as it appears on your KTP, your date of birth, your registered Indonesian (+62) mobile number, your email address, and your chosen username. This information is required to open your account and cannot be omitted.
To enable withdrawal access and comply with international anti-money-laundering (AML) standards, we collect a clear photograph or scan of your KTP showing all four corners, a selfie photograph of you holding your KTP, and — where required by our compliance team — supporting documentation evidencing ownership of your registered payment method. KYC documents are handled under the additional protections described in Section 9.
we888 records every deposit transaction, withdrawal request, bonus credit, wager, and game result associated with your account. For each transaction we store the amount in IDR, the timestamp (in WIB, UTC+7), the payment method used (e.g., BCA, BRI, OVO, DANA, GoPay), and the transaction reference number issued by the payment provider. we888 does not store full bank account numbers or complete e-wallet credential strings; only masked identifiers sufficient to match transactions to your account are retained.
When you access the we888 platform we automatically collect your IP address, device type and operating system, browser type and version, screen resolution, referring URL, and session duration. This data is used for fraud detection, platform security, and aggregate performance analytics.
we888 records gameplay activity including game titles accessed, wager amounts, bet frequency, session start and end times, and sportsbook market selections. This data is used to personalise your experience, detect responsible gaming risk signals, and — in aggregated and anonymised form — improve platform performance and game selection.
When you contact we888 via live chat or email, we retain a record of the conversation, including the contents of your messages, the date and time of the interaction, and the resolution outcome. This data is used for quality assurance, staff training, and dispute resolution.
The majority of Personal Data we hold is provided directly by you — through the account registration form, KYC document upload, deposit and withdrawal interfaces, and your communications with our support team.
Technical and behavioural data is collected automatically when you use the we888 platform, through server logs, session tracking systems, and first-party cookies. See Section 8 for a full description of our cookie practices.
When you initiate a deposit or withdrawal, our payment processing partners (including the operators of BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja integrations) may return transaction status data and masked account identifiers to we888's systems to confirm or reject the transaction.
we888 uses contracted KYC verification bureaus to cross-check identity documents against authoritative databases. These bureaus return a verification outcome (pass, fail, or refer) and a confidence score to we888; they do not store your documents on our behalf beyond the period required to complete verification.
we888's fraud detection infrastructure analyses device fingerprints, IP geolocation signals, and behavioural patterns to identify accounts associated with bonus abuse, money laundering, or multi-accounting. This analysis is automated and may result in account flags that are then reviewed by our compliance team.
we888 processes your Personal Data for the following specific purposes.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, device data |
| Identity verification (KYC) | Identity verification data, registration data |
| Deposit and withdrawal processing | Financial and transaction data, identity verification data |
| Fraud detection and prevention | Device data, financial data, behavioural data, communications data |
| Responsible gaming monitoring | Behavioural and gaming data, financial data |
| Regulatory and AML compliance | All categories as required by applicable law |
| Customer support and dispute resolution | Communications data, transaction data, account data |
| Platform analytics and improvement | Anonymised and aggregated behavioural data, technical data |
| Promotional communications (with consent) | Registration data (email, mobile number), gaming preference data |
Processing your registration data, identity documents, and transaction records is necessary for we888 to perform its obligations under the Terms & Conditions — specifically to open your account, verify your identity, process your deposits and withdrawals, and settle your wagers. Without this processing, we888 cannot provide you with our services.
we888 is obligated under the terms of its international gaming licence and applicable AML regulations to collect and retain KYC documentation, transaction records, and account activity logs for a minimum defined period. We process data for these purposes to comply with our legal obligations, regardless of your preferences.
we888 processes technical, device, and behavioural data on the basis of its legitimate interests in maintaining platform security, detecting fraud and multi-accounting, and protecting the integrity of games and sportsbook markets. We have conducted a legitimate interests assessment and determined that these processing activities do not override the fundamental rights and freedoms of players, given the security benefits they deliver to all users of the platform.
Where we888 sends you promotional communications — including bonus offers aligned to Indonesian seasonal events such as Idul Fitri, Imlek (Chinese New Year), and Ramadhan — we do so only where you have provided explicit consent at account registration or have subsequently opted in through your account notification settings. You may withdraw consent at any time as described in Section 11.
we888 engages the following categories of contracted Data Processors who may access your Personal Data solely to deliver services on we888's behalf and under binding data processing agreements that prohibit secondary use:
Live dealer games on the we888 platform are streamed from studios operated by Evolution Gaming, Pragmatic Play Live, Dream Gaming, and SA Gaming. These studios receive only the minimum session-level data necessary to serve the game stream; they do not receive your KYC documents, payment data, or full registration details.
we888 will disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, court order, or formal regulatory demand. we888 will, where legally permitted, notify the affected player of such a disclosure request before complying.
we888 does not sell, rent, lease, or otherwise commercially exploit your Personal Data to any third party. This prohibition is absolute and applies regardless of whether the data has been anonymised or pseudonymised.
we888 uses first-party cookies only. We do not use third-party advertising cookies or cross-site tracking pixels. Our cookies fall into the following categories:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your account preferences, and prevent cross-site request forgery (CSRF) attacks. | Session / 24 hours |
| Functional | Remember your preferred language display, last-visited game category, and notification settings. | 30 days |
| Analytics | Collect anonymised page view, click-path, and session duration data to improve platform navigation and game discovery. No personally identifiable information is retained in analytics cookies. | 12 months |
| Fraud Detection | Fingerprint device and browser characteristics to detect multi-account access, bot activity, and suspicious login patterns. | Session / 7 days |
You may disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your we888 account. Disabling fraud detection cookies may result in additional identity verification steps being required at login. Disabling analytics cookies has no impact on platform functionality.
we888 does not embed Facebook Pixel, Google Ads conversion tags, programmatic advertising scripts, or any other third-party tracking technology that would allow external parties to profile your browsing behaviour across sites. All analytics data collected by we888 is processed in-house and is not shared with advertising platforms.
KYC documents — including KTP scans and selfie photographs — are treated as a sensitive subcategory of Personal Data at we888. They are stored in an isolated, access-controlled document vault that is segregated from the main player database. Access to the KYC vault is restricted to members of the we888 compliance team and contracted KYC verification bureaus on a need-to-know basis.
All KYC documents stored by we888 are encrypted at rest using AES-256 encryption. The encryption keys are managed separately from the document vault and are rotated on a 90-day cycle. In the event of a data breach affecting the main player database, KYC documents remain protected by the separate encryption layer.
KYC documents are retained for a minimum of five years following account closure or the date of the player's last verified transaction, whichever is later, to satisfy the record-keeping obligations imposed by we888's international gaming licence and applicable AML standards. Following the expiry of this retention period, KYC documents are securely and permanently deleted from the KYC vault.
Where we888 is not subject to a legal obligation that requires continued retention of your KYC documents — for example, where no transactions have been processed and the account is closed — you may request deletion of your KYC documents as described in Section 14. we888 will assess each deletion request against its legal retention obligations and respond within 30 calendar days.
we888 stores masked payment identifiers — for example, the last four digits of a bank account number or a partially masked e-wallet phone number — sufficient to allow our finance team to match withdrawal requests to verified payment accounts. we888 does not store complete bank account numbers, full e-wallet credentials, or payment card numbers.
All payment transactions are processed by contracted payment gateway operators whose systems are certified to applicable financial industry security standards. we888's payment infrastructure uses tokenisation so that sensitive payment credentials never transit through or are stored on we888's primary application servers.
Full transaction histories — including deposit amounts, withdrawal amounts, wager totals, and bonus credits, all denominated in IDR — are retained in your we888 account history for the duration of your account and for a minimum of five years following account closure, in accordance with AML record-keeping requirements. You may view your transaction history at any time through the we888 account dashboard.
we888 sends promotional communications — including bonus offers, seasonal promotions (Idul Fitri, Imlek, Ramadhan, Indonesian Independence Day), new game announcements, and sportsbook enhanced-odds alerts — only to players who have opted in to receive them. Consent is requested at account registration and can be reviewed at any time through the notification settings panel of your we888 account.
Marketing communications are delivered by email to your registered email address and by SMS to your registered Indonesian (+62) mobile number. we888 does not send promotional communications via WhatsApp, Telegram, or other third-party messaging applications unless you have separately consented to that specific channel.
You may withdraw your consent to receive marketing communications at any time by adjusting your notification preferences in account settings, or by contacting [email protected] with the subject line "Unsubscribe". Withdrawal of marketing consent does not affect the lawfulness of communications sent before you withdrew consent, and does not affect we888's ability to send you transactional or account-security notifications which are not marketing in nature.
we888 uses your gaming preferences and activity data to personalise the promotional offers we send you through our own channels. This data is never shared with external advertisers, advertising networks, or data brokers for the purpose of third-party marketing profiling.
we888 retains different categories of Personal Data for different periods, determined by the purpose of collection and applicable legal obligations.
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account + 5 years following closure |
| KYC identity documents | Minimum 5 years from last verified transaction or account closure (whichever is later) |
| Transaction and financial records | Minimum 5 years from account closure (AML requirement) |
| Gameplay and behavioural logs | 2 years from last session, then anonymised for aggregate analytics |
| Customer support communications | 3 years from the date of the interaction |
| Marketing consent records | Duration of consent + 3 years following withdrawal of consent |
| Technical / server logs | 90 days rolling (fraud detection and security monitoring) |
| Analytics data (anonymised) | Indefinite (no Personal Data retained post-anonymisation) |
Following the expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised using industry-standard data destruction procedures. we888 conducts a quarterly retention audit to identify and delete data whose retention period has expired.
we888 implements the following technical security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure:
All we888 personnel with access to Personal Data are required to complete data protection and security awareness training at onboarding and annually thereafter. Access to production systems is logged and audited on a monthly basis. Any staff member who accesses Personal Data outside their authorised scope is subject to immediate disciplinary action.
In the event of a data security incident that may compromise your Personal Data, we888 will notify affected players by email to their registered address within 72 hours of becoming aware of the breach, to the extent that notification is technically and operationally feasible within that timeframe. The notification will describe the nature of the breach, the categories of data affected, the steps we888 has taken to contain the breach, and recommended actions for affected players such as changing passwords or monitoring payment accounts for unusual activity.
As a player on the we888 platform, you have the following rights in respect of your Personal Data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". we888 will respond within 30 calendar days and may request proof of identity before processing your request.
The we888 platform is strictly for adults aged 21 and above. we888 does not knowingly collect Personal Data from any person under the age of 21. If we888's KYC verification process identifies that a player is under 21, the account will be immediately suspended, all Personal Data collected will be flagged for deletion following the conclusion of any regulatory reporting obligations, and the matter will be referred to the we888 compliance team.
If you are a parent or guardian and believe that a person under 21 in your care has registered a we888 account, please contact [email protected] immediately. we888 will investigate and take appropriate action, including permanent account closure and deletion of the minor's Personal Data subject to any mandatory legal retention obligations.
we888 operates on cloud infrastructure that may involve the storage and processing of Personal Data in jurisdictions outside Indonesia. Where Personal Data is transferred internationally — for example, to KYC verification bureaus or cloud hosting providers located outside Indonesia — we888 ensures that such transfers are made only to recipients who provide an equivalent level of data protection through one or more of the following safeguards:
we888 does not transfer Personal Data to jurisdictions known to have inadequate data protection frameworks without implementing compensating contractual safeguards. Requests for information about specific cross-border transfer arrangements may be submitted to [email protected].
we888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material — meaning they affect the categories of data we collect, the purposes for which we use it, or the rights available to you — we888 will notify you by email to your registered address at least 7 calendar days before the changes take effect. The updated Policy will be published at https://we888.games/privacy-policy with a revised "Last Reviewed" date. Continued use of the we888 platform after the effective date of the updated Policy constitutes your acceptance of the revised terms.
For all privacy-related queries, subject access requests, data deletion requests, or formal complaints regarding the handling of your Personal Data by we888, please contact us through the following channel:
we888 acknowledges all privacy correspondence within 2 business days and resolves substantive requests within 30 calendar days. Complex requests — for example, a full subject access request covering multiple years of account history — may take up to 60 calendar days, in which case we888 will notify you of the extension and provide a revised response date.
If you are not satisfied with we888's response to your privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction in which we888 holds its international gaming licence.
A summary of the rights available to you as a we888 player. Contact [email protected] to exercise any of these rights.
Request a copy of all Personal Data we hold about you, including your registration details, transaction history, KYC status, and communications records.
Request correction of any inaccurate or incomplete Personal Data we hold about you, such as a misspelled name or an outdated mobile number.
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected and we888 has no legal obligation requiring its continued retention.
Request that we888 temporarily halt processing of your data — for example, while a dispute about its accuracy is being resolved — without deleting it.
Request a structured, machine-readable export of the Personal Data you provided to we888, such as your account registration data and transaction history, to transfer to another service provider.
Object to we888 processing your Personal Data on the basis of legitimate interests, including automated fraud-detection profiling, where you believe your individual circumstances warrant an override of those interests.
Your data is protected. Your games are certified fair. Join thousands of Indonesian players on a platform built for security, speed, and serious entertainment.