Privacy Policy — 456wim

In this Privacy Policy, the following terms have the meanings set out below:

• "456wim" / "we" / "us" / "our" — the 456wim online gaming platform operated at https://456wim.app, including all associated sub-domains, mobile interfaces, and API endpoints.
• "Member" / "you" / "your" — any individual who registers an account on, or accesses, the 456wim platform.
• "Personal Data" — any information that identifies, or could reasonably be used to identify, a natural person, including names, email addresses, phone numbers, IP addresses, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "KYC" — Know Your Customer — the identity and address verification process conducted in compliance with international anti-money-laundering (AML) standards.
• "Cookies" — small text files placed on your device by the 456wim platform to maintain session state, remember preferences, and collect aggregate analytics data.
• "Third-Party Processor" — any external organisation that processes Personal Data on behalf of 456wim under a formal data-processing agreement, including payment gateway providers, KYC verification services, and cloud infrastructure providers.
• "Effective Date" — 1 January 2026, the date from which this version of the Privacy Policy applies.

2.1   This Privacy Policy applies to all Personal Data collected by 456wim in connection with the operation of the platform at https://456wim.app. It covers data collected through the website, any associated mobile application, customer support channels (Live Chat, email, WhatsApp), and any promotional activity conducted by 456wim.

2.2   This policy applies to all registered Members and to non-registered visitors who access the 456wim platform. By accessing the platform, you acknowledge that you have read and understood this Privacy Policy.

2.3   This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

2.4   456wim is committed to handling Personal Data responsibly and in accordance with internationally recognised data protection principles. Our primary market is Indonesia, and we apply particular care to the handling of data belonging to Members located across Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, and other Indonesian cities.

3.1   456wim collects Personal Data across several categories depending on how you interact with the platform. The table below summarises the categories, specific data points, and the context in which they are collected:

3.2   Where you choose not to provide Personal Data that is marked as mandatory during registration or KYC, 456wim may be unable to open, maintain, or process withdrawals from your account.

3.3   456wim does not intentionally collect Sensitive Personal Data — such as racial or ethnic origin, religious beliefs, health data, or biometric identifiers — beyond what is strictly necessary for identity verification under applicable AML and KYC frameworks.

4.1   456wim uses the Personal Data collected for the following clearly defined purposes:

• Account Management: Creating and maintaining your 456wim account, authenticating your identity on login, processing password resets, and communicating account-status notifications.
• Transaction Processing: Crediting deposits to your account balance, processing withdrawal requests to your nominated BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI bank account or OVO, DANA, GoPay, ShopeePay, or LinkAja e-wallet, and maintaining complete transaction records.
• KYC & AML Compliance: Verifying your identity and age (21+ requirement), confirming the legitimacy of source-of-funds, and meeting internationally recognised anti-money-laundering obligations.
• Fraud Prevention & Security: Detecting and investigating suspicious account activity, identifying multiple-account registrations, monitoring for bonus abuse, and protecting the platform against unauthorised access.
• Customer Support: Responding to queries submitted via Live Chat, email ([email protected]), and WhatsApp; resolving disputes; and processing responsible gaming requests such as self-exclusion and deposit-limit adjustments.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, platform performance, and user experience across the 456wim website and any associated mobile application.
• Promotional Communications (opt-in only): Sending personalised bonus offers, seasonal promotions (e.g., Idul Fitri, Ramadhan, Indonesian Independence Day), and product updates to Members who have explicitly opted in. You may opt out at any time via your account settings or by contacting support.
• Legal Obligations: Retaining records as required by applicable law, responding to lawful requests from competent authorities, and exercising or defending legal claims.

4.2   456wim will not use your Personal Data for any purpose materially different from those listed above without first obtaining your explicit consent or notifying you in accordance with Clause 14 (Policy Amendments).

5.1   456wim processes Personal Data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and 456wim — specifically, operating your account, processing transactions, and providing access to platform Games.
• Legal Obligation: Processing required to comply with applicable AML, KYC, CFT (counter-financing-of-terrorism), and record-retention obligations under the laws and regulations applicable to our operating licence.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and aggregated analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for promotional communications and non-essential cookies, where you have given explicit, freely-given, and withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1   456wim may share your Personal Data with the following categories of recipients, solely for the purposes identified:

• Payment Processors: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data strictly necessary to credit or debit your nominated account.
• KYC & Identity Verification Providers: Certified third-party KYC service providers receive copies of identity documents for the purpose of verifying your identity against your registration details. These providers operate under formal data-processing agreements and are prohibited from using your data for any other purpose.
• Cloud Infrastructure & Hosting Providers: 456wim's platform is hosted on secure cloud infrastructure. The hosting provider has access to servers on which Personal Data is stored, subject to strict contractual confidentiality obligations.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a session token and anonymised player identifier to initialise game sessions. They do not receive your full name, bank details, or contact information.
• Regulatory and Law Enforcement Authorities: 456wim will disclose Personal Data to competent authorities where required by a valid legal obligation, court order, or regulatory request. Where legally permissible, we will notify affected Members prior to disclosure.
• Professional Advisers: Legal counsel, auditors, and compliance consultants may access Personal Data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

6.2   All Third-Party Processors are required to implement technical and organisational measures that provide an equivalent level of data protection to that applied by 456wim directly.

7.1   456wim uses the following categories of cookies and similar tracking technologies on the platform:

• Strictly Necessary Cookies: Essential to the operation of the platform. These cookies maintain your login session, remember your account preferences, and enable core security features. They cannot be disabled without breaking platform functionality.
• Performance & Analytics Cookies: Collect aggregate, anonymised data about how Members use the platform — for example, which game categories are most visited, average session length, and page-load performance metrics. This data is used solely to improve platform performance and is never linked to your personal identity.
• Functional Cookies: Remember your preferences such as preferred language, last-visited game category, and display settings, so that you do not need to re-configure them on each visit.

7.2   456wim does not use advertising cookies, cross-site tracking cookies, or any technology that tracks your browsing activity on websites other than https://456wim.app for the purpose of building an advertising profile.

7.3   Most web browsers are configured to accept cookies by default. You may configure your browser to block or delete cookies at any time; however, doing so may impair the functionality of the 456wim platform, including your ability to stay logged in and access certain features.

7.4   Strictly necessary cookies are placed on the basis of contractual necessity. Performance and functional cookies are placed on the basis of your consent, which you may withdraw by adjusting your browser settings.

8.1   456wim retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

8.2   At the end of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity.

8.3   Where you request erasure of your Personal Data under Clause 10 and a legal retention obligation applies, 456wim will retain the minimum data necessary to fulfil that obligation and will suppress all other processing of your data pending final deletion.

9.1   The following technical and organisational security measures are applied to Personal Data held by 456wim:

• Transport Encryption: All data transmitted between your browser or app and 456wim servers is encrypted using TLS 1.2 or higher with 256-bit symmetric encryption. The padlock icon in your browser's address bar confirms this protection is active.
• At-Rest Encryption: Personal Data stored in 456wim databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to systems holding Personal Data is restricted to authorised 456wim personnel based on the principle of least privilege. Multi-factor authentication (MFA) is enforced for all internal system access.
• Intrusion Detection: 456wim operates continuous intrusion-detection and anomaly-monitoring systems across its infrastructure. Alerts are reviewed by a dedicated security team operating on a 24/7 basis.
• Penetration Testing: The platform undergoes periodic independent penetration testing. Critical findings are remediated within defined SLA timelines before the report is finalised.
• Incident Response: In the event of a confirmed data breach affecting your Personal Data, 456wim will notify affected Members via their registered email address within 72 hours of confirming the breach, detailing the nature of the incident, the data affected, and the steps taken to contain it.

9.2   You are responsible for maintaining the security of your own account credentials. 456wim will never ask you for your password via email, Live Chat, WhatsApp, or any other communication channel. If you receive such a request, treat it as a phishing attempt and report it to [email protected] immediately.

10.1   As a Member of 456wim, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] or via Live Chat, quoting your registered username and the specific right you wish to exercise.

• Right of Access: You may request a copy of the Personal Data we hold about you. We will provide a structured, commonly used, machine-readable export within thirty (30) calendar days of a verified request.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request correction. Account name changes require supporting identity documentation consistent with KYC standards.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data. Erasure requests will be honoured except where retention is required by applicable legal obligation (see Clause 8). In such cases, we will suppress further processing and delete the data as soon as the retention period expires.
• Right to Restrict Processing: You may request that we limit processing of your Personal Data to storage only, pending the resolution of a rectification or objection request.
• Right to Data Portability: You may request that your Personal Data be provided to you in a portable format (JSON or CSV) so that it can be transferred to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Objections to direct marketing are absolute and will be acted on within five (5) business days. Objections to legitimate-interests processing will be assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on consent — such as promotional communications or non-essential cookies — you may withdraw consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent for promotional communications can be done via your account settings or by contacting support.

10.2   456wim will acknowledge all rights requests within five (5) business days and will complete the request within thirty (30) calendar days. Where a request is complex or voluminous, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and its reason within the initial five-day window.

10.3   456wim will not charge a fee for exercising your rights in normal circumstances. Where a request is manifestly unfounded or excessive — in particular, because of its repetitive character — a reasonable fee may be applied, and you will be informed before any charge is levied.

11.1   456wim applies mandatory age verification at registration and during KYC review. Accounts identified as belonging to individuals under the age of 21 are permanently closed without recovery of funds.

11.2   If you believe that a minor has registered an account or has accessed the platform through an existing adult account, please notify us immediately at [email protected]. We will investigate and take prompt action, including closing the account and ensuring no Personal Data collected from the minor is retained beyond what is necessary for the investigation.

11.3   Adults who share a device with minors are encouraged to use device-level parental controls and to ensure that their 456wim account credentials are not accessible to the minor. 456wim accepts no liability for platform access by minors where an adult failed to maintain reasonable control over their account credentials.

12.1   The 456wim platform does not contain outbound links to third-party websites. This Privacy Policy applies exclusively to data collected through https://456wim.app and its associated interfaces.

12.2   If 456wim were to add links to third-party platforms in the future, such links would be clearly identified. 456wim accepts no responsibility for the privacy practices of any third-party website; you should review each third party's own privacy policy before submitting any personal information to them.

13.1   456wim's primary servers are located within secure data-centre facilities. Some Third-Party Processors — including cloud infrastructure providers and KYC verification services — may process Personal Data in jurisdictions outside Indonesia. Where such transfers occur, 456wim ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to apply data-protection standards equivalent to those described in this policy.
• Transfers only to recipients in jurisdictions that provide an adequate level of data protection under applicable international frameworks.
• Use of certified cloud providers who maintain ISO 27001 accreditation or equivalent international security certifications.

13.2   You may request details of any international transfer arrangement affecting your Personal Data by contacting [email protected].

14.1   456wim reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, platform features, or our data-processing practices. Material amendments — those that expand the categories of data collected, introduce new sharing arrangements, or reduce Member rights — will be communicated to registered Members via their registered email address at least seven (7) calendar days before the amendment takes effect.

14.2   Minor amendments — including clarifications that do not alter substantive meaning, corrections of typographical errors, and updates to reflect new payment method partner names — may take effect immediately upon publication at https://456wim.app/privacy-policy.

14.3   The "Last Updated" date at the top of this page always reflects the most recent revision. We encourage Members to review this page periodically. Continued use of the platform following the effective date of an amendment constitutes acceptance of the revised policy.

15.1   For any privacy-related queries, rights requests, or complaints, please contact the 456wim Data Privacy team through the following channels. All contact details are displayed as plain text — they are not clickable links.

• Email: [email protected]
• WhatsApp: +62 811-456-9461
• Live Chat: Available 24/7 directly on this website
• Support Hours: 24 hours a day, 7 days a week — WIB (UTC+7)

15.2   When contacting us regarding a specific privacy matter, please include your registered username, registered email address, and a clear description of your request or complaint. This enables our team to locate your records promptly and respond within the timelines set out in Clause 10.

15.3   If you are not satisfied with our handling of a privacy complaint, you may escalate the matter to the relevant data protection authority or the dispute resolution body associated with 456wim's operating licence . We will cooperate fully with any such authority in the resolution of your complaint.

15.4   456wim aims to resolve all privacy complaints within fifteen (15) business days of receipt. Complex matters requiring third-party input may take longer; we will keep you informed of progress throughout the resolution process.