Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, identification numbers, location data, email addresses, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, 456win.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of 456win under a binding data processing agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "Platform" means the 456win website, mobile interfaces, APIs, and all associated services available at https://456win.cam.
• "Player" / "User" / "you" means any individual who registers an account on or accesses the Platform.
• "KYC Documents" means identity and address verification documents submitted by Players as part of the Know Your Customer process.

456win is the Data Controller for all personal data processed in connection with the Platform. As Data Controller, 456win determines the purposes for which your personal data is collected and the manner in which it is processed.

456win operates as an internationally licensed online gaming platform serving players primarily in Indonesia. The Platform is operated in accordance with the terms of its international gaming license and applicable data protection standards. For all data-related inquiries, players should contact 456win directly using the contact details provided in Clause 16 of this Policy.

456win collects the following categories of pe rsonal data from Players:

456win collects personal data through the following channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, session duration, and clickstream data, through cookies, web beacons, and server log files.
• Payment Processors: Transaction confirmation data received from Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate deposits or withdrawals.
• Identity Verification Providers: Confirmation signals from third-party KYC service providers used to verify the authenticity of identity documents and cross-check against sanctions or fraud watchlists.
• Third-Party Analytics: Aggregated, anonymized behavioral data from analytics providers used to understand platform usage patterns and improve user experience. This data cannot be used to directly identify individual Players.

456win processes your personal data on the following legal grounds, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to fulfill the contractual relationship created when you register an account and agree to our Terms & Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and fraud prevention duties imposed by our licensing authority.
• Legitimate Interests: Processing carried out to pursue the legitimate business interests of 456win, including fraud detection and prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of your data for optional purposes, such as sending you promotional offers, bonus notifications, and personalized marketing communications via email, SMS, or push notification — where you have given clear, affirmative consent. You may withdraw this consent at any time.

456win uses the personal data we collect for the following specific purposes:

• Account Management: Creating, maintaining, and securing your 456win account; verifying your identity and age; managing login authentication and password resets.
• Service Delivery: Processing deposits and withdrawals via Indonesian banks and e-wallets; crediting winnings; settling bets across all product verticals including sports betting (BRI Liga 1, EPL, Champions League), casino games, and other available titles.
• KYC & Compliance: Verifying identity documents, conducting sanctions screening, meeting anti-money laundering obligations, and fulfilling all requirements of our international gaming license.
• Customer Support: Responding to inquiries, resolving disputes, handling complaints, and maintaining records of support interactions for quality assurance and training purposes.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators; administering self-exclusion, deposit limits, and time-out requests; contacting Players where responsible gaming concerns arise.
• Fraud Prevention & Security: Detecting and investigating suspected fraud, cheating, money laundering, multi-accounting, and other prohibited activities; protecting the integrity of the platform and its users.
• Marketing Communications (with consent): Sending you promotional offers, bonus alerts, seasonal campaigns (including Idul Fitri, Ramadhan, and Indonesian Independence Day promotions), and personalized recommendations based on your gaming preferences — only where you have opted in.
• Platform Improvement: Analyzing aggregated usage data to improve platform performance, user interface design, game selection, and overall player experience.
• Legal & Regulatory: Complying with court orders, regulatory requests, law enforcement demands, and other legally mandated disclosure obligations.

456win does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to confidentiality obligations:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals on your behalf.
• KYC & Identity Verification Providers: Third-party identity verification services engaged to authenticate KTP, passport, and other documents as part of our compliance obligations.
• Game Content Providers: Software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session-level technical data (user token, bet amount, game ID) necessary to deliver their games through the 456win platform.
• IT Infrastructure & Cloud Providers: Hosting, database, and cloud computing providers who store and process Platform data under binding data processing agreements that prohibit independent use of your data.
• Analytics Providers: Web analytics services that receive anonymized, aggregated behavioral data to help us understand Platform usage. These providers do not receive personally identifiable information.
• Regulatory & Law Enforcement Authorities: Where legally required, we may disclose personal data to our licensing authority, financial intelligence units, law enforcement agencies, or courts.
• Business Transfers: In the event of a merger, acquisition, asset sale, or restructuring involving 456win, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

456win operates as an international platform and some of our service providers are located outside Indonesia. As a result, your personal data may be transferred to and stored in countries other than Indonesia. When such transfers occur, 456win ensures that appropriate safeguards are in place, which may include:

• Binding contractual clauses between 456win and the receiving party that impose data protection obligations equivalent to those described in this Policy.
• Transfers to jurisdictions that maintain data protection standards recognized as adequate by international benchmarks.
• Technical encryption measures ensuring that data is protected during transit and at rest, regardless of the jurisdiction in which it is stored.

By using the 456win Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia for the purposes described in this Policy.

456win uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session integrity, and gather analytical insights. The following categories of cookies are used:

Most web browsers allow you to manage cookie settings through their privacy or settings menus. You may disable non-essential cookies; however, disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in and place bets. 456win does not use cookies to serve third-party advertising.

456win retains your personal data for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account relationship with 456win, plus a minimum of five (5) years following account closure, to satisfy AML and regulatory record-keeping requirements.
• Transaction Records: Financial transaction data, including all deposit and withdrawal records denominated in Rupiah (IDR), is retained for a minimum of seven (7) years to comply with financial regulation and audit requirements.
• KYC Documents: Identity verification documents are retained for five (5) years from the date of submission, or longer if required by our licensing authority or by a regulatory investigation.
• Support Communications: Customer service records are retained for three (3) years from the date of the last interaction, after which they are securely deleted unless they form part of an active dispute or legal proceeding.
• Marketing Preferences: Consent records and opt-out logs are retained indefinitely to demonstrate compliance with marketing regulations and to honor your stated preferences.
• Technical / Log Data: Server logs and technical access records are retained for up to twelve (12) months for security and fraud investigation purposes, then deleted or anonymized.

When the applicable retention period expires, 456win will securely delete or irreversibly anonymize your personal data in accordance with our internal data lifecycle management procedures.

As a Player on 456win, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data 456win holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update basic profile information directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we are required by law to retain certain data (e.g., transaction records) regardless of erasure requests.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a rectification request is under review.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, and to object at any time to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, use the unsubscribe link in any promotional email or contact support.

456win implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the 456win Platform is encrypted using 256-bit SSL/TLS protocols. Our platform enforces HTTPS across all pages without exception.
• Encryption at Rest: Sensitive data fields — including financial data, KYC documents, and authentication credentials — are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within 456win's systems is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for administrative accounts, and comprehensive access logging.
• Infrastructure Security: 456win's servers and databases are hosted in secure, access-controlled data centers with physical security controls, redundant power systems, and continuous monitoring.
• Penetration Testing: The Platform undergoes periodic independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 456win maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify affected Players promptly in accordance with applicable regulatory requirements.

While 456win employs robust security measures, no internet-based system is completely immune to risk. Players are strongly encouraged to use a strong, unique password for their 456win account, enable any available two-factor authentication, and notify support immediately at [email protected] if they suspect unauthorized account access.

456win does not knowingly collect personal data from individuals under the age of 21. Access to the Platform is strictly restricted to adults aged 21 and over, consistent with the minimum age policy applicable to the Indonesia market.

If 456win becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, that data will be deleted immediately, the associated account will be suspended, and any deposits will be returned. We apply age-verification checks during registration and may conduct additional age verification at any stage of the account lifecycle.

If you are a parent or guardian and believe that your child has registered an account on 456win, please contact us immediately at [email protected] so that we can take appropriate action.

The 456win Platform may contain references to third-party game studios, payment providers, and sports leagues for informational context. 456win does not control the privacy practices of any third-party websites or services, and this Privacy Policy does not apply to any third-party platforms you may access independently of 456win.

We recommend that you review the privacy policies of any third-party services you use in connection with your gaming activity — including your bank's online banking platform and any e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja) — as their data practices are governed by their own policies.

456win reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Display a prominent notice on the Platform for a minimum of 7 days following the update.
• Send a notification to your registered email address summarizing the key changes where those changes materially affect your rights or our data processing activities.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. We encourage you to review this Policy periodically. Archived versions of previous policies are available upon request by contacting support.

If you have any questions, concerns, or requests regarding this Privacy Policy or 456win's data processing practices, please reach out to our Data Protection team using the contact details below. We are committed to responding to all privacy-related inquiries promptly and thoroughly.

When submitting a data rights request, please include your registered account username and a clear description of your request in the email subject line (e.g., "DATA RIGHTS REQUEST — ACCESS" or "DATA RIGHTS REQUEST — ERASURE") to help us process your request efficiently.

This Privacy Policy was last reviewed and updated in January 2026. The English version of this document is the authoritative version and shall prevail in the event of any conflict with any translated or paraphrased version.