wdboyPrivacy Policy

This page describes what we collect when you use wdboy and how we keep that data protected. Your privacy is central to how we operate—we collect only the information we need to verify your account, process your deposits and withdrawals, and comply with law. We do not sell your data to third parties, and we encrypt all communication between your phone and our servers.

We at wdboy understand that account holders access our platform from across Indonesia—from Jakarta to Medan, via Android APK or iOS Safari—and trust us with personal details. Our privacy commitments apply equally whether you're depositing via DANA from Surabaya, withdrawing to a e-wallet account in Bandung, or logging in during Idul Fitri. This policy explains our data practices in plain language so you know exactly what information we hold and why.

If you have questions about how we handle your data, contact our support team via in-app chat or email. We respond to privacy inquiries without delay.

What data we collect on wdboy

When you register on wdboy, we collect your email address, a password of your choosing, your full name, date of birth, national ID number, and your residential address. This is KYC (Know Your Customer) verification—a legal requirement that protects you and us from fraud and money laundering. We store this data on encrypted servers and never share it with third parties except payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) and regulators when legally required.

Beyond KYC, we log your betting history, deposit records, withdrawal requests, and account login timestamps. This audit trail helps us detect unauthorized access and assists you in reviewing your account activity anytime. We also track which games you play, which sports markets you browse, and session duration—this helps us understand how our platform is used and identify technical issues.

We collect your IP address (the digital identifier your phone broadcasts when connecting to the internet) and your device type (Android or iOS). This data is used for security checks and to detect suspicious activity, such as multiple failed login attempts. We may also use it to enforce our jurisdiction-restricted access policy—our services are available only where local law permits.

How we use your wdboy data

We use your KYC information to verify your identity before approving your first withdrawal. This verification typically completes within one hour. Your payment details (bank account or e-wallet) are used only to process deposits and withdrawals—we never use them for marketing or share them with advertisers. Your phone number (if provided) is used for two-factor authentication (2FA) and account recovery if you forget your password.

Your betting history is used to detect fraud (e.g., if someone accesses your account without permission and places unusual bets) and to comply with regulatory reporting requirements. We may also use anonymized betting data to improve our odds calculations and game offerings. Anonymized means we remove your name and ID number, so the data cannot identify you personally.

Your IP address and device type are logged primarily for security. If your account is accessed from an unusual location or device, we may flag it for review or ask you to confirm via 2FA. This protects your funds even if your password is compromised.

Our wdboy third-party processors

We share your data with payment processors only to the extent necessary to process your transactions. When you deposit via mobile banking or local payment, those providers receive your e-wallet account identifier and transaction amount. When you withdraw to a online payment or e-wallet account, those banks receive your account number and withdrawal amount. These processors handle data according to their own privacy policies and are bound by banking secrecy laws.

We also share anonymized data with analytics providers to understand traffic patterns and user behavior on wdboy. This helps us optimize our mobile app and website performance. Our servers may be located outside Indonesia—we use cloud providers in multiple regions for redundancy and speed. Your data is encrypted in transit and at rest, so geographic location does not increase privacy risk.

We do not share your data with marketing partners, advertisers, or data brokers. If we ever merge with or are acquired by another company, you will be notified and given the option to opt out of any new data uses.

Your rights regarding wdboy account data

You have the right to access, correct, and delete your personal data. To request your data, contact our support team. We will provide a copy of all information we hold about you within ten business days. If your information is inaccurate (e.g., your name is misspelled in our KYC records), we will correct it promptly upon your request.

You can request deletion of your account and associated data anytime. We will retain your transaction history for seven years as required by law, but we will delete all other personal information. Once deleted, you cannot recover your account, so consider this carefully.

You also have the right to object to certain data uses (e.g., if you do not want your anonymized betting data used for analytics). Submit your objection via support, and we will honor it within thirty days.

Password security and two-factor authentication

We hash your password using a secure algorithm called bcrypt, which means we do not store your actual password. Even our staff cannot see your password. When you log in, we compare the hashed version of what you enter to the stored hash; if they match, access is granted. If you forget your password, you reset it from the login screen by verifying your identity via email or 2FA.

We strongly recommend enabling two-factor authentication (2FA) in your account settings. When 2FA is active, even if someone learns your password, they cannot enter your account or withdraw funds without the one-time code sent to your phone. This is the single most effective defense against account hijacking.

Jurisdiction and legal compliance

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law. We comply with applicable data protection regulations and banking rules in jurisdictions where we operate. If we receive a legal order to disclose your data, we will comply and notify you unless prohibited by law.

Changes to our wdboy privacy policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. If we make material changes (such as increasing the types of data we collect or the ways we use it), we will notify you via email and in-app message at least thirty days before the change takes effect. Your continued use of wdboy after the notice period means you accept the updated policy.

Related policies and guides

Contact us regarding privacy

If you have questions about how we handle your data, or if you want to exercise your rights (access, correction, deletion, or objection), contact our support team. We are available via in-app chat, email, and during business hours. Your privacy inquiry will be treated as a priority and resolved within ten business days.

We take data protection seriously because we understand that your trust is essential to the wdboy experience. Whether you access our platform during a Liga 1 weekend or during the quieter Imlek period, your personal information remains encrypted, secure, and used only for the purposes we describe here.