Your privacy matters to won91. This policy explains exactly what personal data we collect, why we collect it, how it is used and protected, and what rights you hold over your own information as a player on our platform.
Six core principles that define the way won91 handles personal information across every interaction on our platform.
All data transmitted between your device and the won91 platform is protected by industry-standard 256-bit SSL/TLS encryption. This applies to account login, deposits, withdrawals, and every support interaction — ensuring no third party can intercept your data in transit.
won91 does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Data sharing is limited strictly to the service providers and regulated bodies necessary to operate the platform — payment processors, identity verifiers, and compliance authorities.
We only collect personal data that is directly necessary for providing, securing, and improving our services. We do not collect sensitive data beyond what is required for KYC compliance and responsible gaming obligations. Every data point we hold has a documented lawful basis.
As a won91 player, you have the right to access, correct, and request deletion of your personal data at any time. You may also object to specific types of processing, request data portability, and withdraw marketing consent. All requests are handled within 30 days of receipt.
Personal data is retained only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal and regulatory retention obligations. Account data is held for a minimum of five years following account closure to meet international AML standards.
In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, won91 will notify affected players within 72 hours of becoming aware of the breach, where technically and legally feasible, and will take immediate steps to contain and remediate the incident.
This Privacy Policy applies to all personal data processed by won91 in connection with the operation of the won91 online betting and casino platform accessible at https://won91.cam. It covers data collected through the website, customer support channels, payment processing interactions, and any other means by which you engage with won91's services.
won91 is primarily designed to serve English-preference players resident in Indonesia. Accordingly, this Policy is written in English and references the Indonesian regulatory and banking context where relevant. It does not, however, constitute legal advice specific to your individual circumstances, and you are encouraged to seek independent legal counsel if you have specific concerns about your data rights under Indonesian law or other applicable frameworks.
This Policy should be read alongside the won91 Terms & Conditions, which govern the overall contractual relationship between you and won91, and our Responsible Gaming page, which describes additional data uses related to player protection tools.
For the purposes of this Policy, won91 acts as the data controller in respect of all personal data collected from players and visitors to the platform. As the data controller, won91 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection standards.
If you have any questions about how won91 handles your personal data, or if you wish to exercise any of your rights described in Section 10 of this Policy, you may contact our Data Protection contact point at:
won91 collects personal data from you in the following categories. We collect only what is necessary for the stated purpose and do not retain data beyond the applicable retention period described in Section 9.
| Data Category | Specific Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, KYC document scans (KTP, passport) | Registration form; KYC verification process |
| Contact Data | Email address, Indonesian mobile phone number, residential address | Registration form; account settings updates |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | Payment processing; transaction records |
| Account Data | Username, encrypted password, account tier, bonus history, betting history, session logs, responsible gaming limit settings | Platform activity; account management |
| Technical Data | IP address, device type, operating system, browser type and version, time zone (WIB/WITA/WIT), screen resolution, referral URL | Automatic collection via cookies and server logs |
| Usage Data | Pages visited, games played (including togel, slots, live dealer), bet types placed, session duration, click patterns, search queries within the platform | Analytics tools; platform event tracking |
| Communications Data | Support ticket content, live chat transcripts, email correspondence, complaint records | Customer support channels |
won91 uses the personal data we collect for the following purposes. Each purpose is linked to a lawful basis described in Section 5.
For each category of data processing, won91 relies on one or more of the following lawful bases. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
| Processing Activity | Lawful Basis |
|---|---|
| Account registration and management | Performance of contract — necessary to provide you with the services you have requested by creating an account. |
| Payment processing | Performance of contract — necessary to process deposits and withdrawals as part of the service. |
| KYC and identity verification | Legal obligation — required to comply with international AML, CTF, and age-verification standards. |
| Responsible gaming monitoring | Legitimate interests — won91 has a legitimate and ethical interest in protecting players from gambling-related harm; this interest is not overridden by your privacy rights given the protective nature of the processing. |
| Fraud and security monitoring | Legitimate interests — protecting the platform and other players from fraud, collusion, and abuse is a legitimate interest that overrides any privacy impact given the minimal intrusiveness of the monitoring. |
| Marketing communications | Consent — we will only send you promotional communications if you have explicitly opted in during registration or through your account settings. You may withdraw consent at any time. |
| Analytics and service improvement | Legitimate interests — improving our services using aggregated and pseudonymized data represents a legitimate interest with minimal privacy impact on individual players. |
| Legal compliance and regulatory reporting | Legal obligation — we are required to retain certain records and respond to lawful authority requests. |
6.1 What Are Cookies. Cookies are small text files placed on your device when you visit the won91 platform. They allow the platform to recognize your device across sessions, maintain your login state, remember your preferences, and collect analytics data about how you interact with the site.
6.2 Types of Cookies We Use. won91 uses the following categories of cookies:
6.3 Managing Cookies. You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. won91 does not use third-party advertising cookies or retargeting pixels.
won91 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
8.1 Cross-Border Processing. As an internationally licensed platform, won91 may process and store your personal data on servers located outside of Indonesia. This may include data centers in jurisdictions that have different data protection standards from those applicable in Indonesia.
8.2 Transfer Safeguards. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, won91 ensures that appropriate safeguards are in place. These safeguards include contractual clauses that impose data protection obligations on the recipient equivalent to those described in this Policy, and technical measures such as encryption of data in transit and at rest.
8.3 Your Rights on Transfer. If you have concerns about international data transfers in respect of your personal data, you may contact us at [email protected] with the subject line "International Transfer Inquiry" and we will provide additional information about the specific safeguards applicable to your data.
won91 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention schedule applies as a general guide:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML / legal compliance |
| KYC documents | Duration of account + 5 years post-closure | Regulatory obligation |
| Financial transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Betting history | Duration of account + 3 years post-closure | Dispute resolution; responsible gaming audit |
| Support communications | 3 years from last interaction | Legitimate interests; dispute resolution |
| Marketing preferences | Until consent is withdrawn or account is closed | Consent-based processing |
| Technical / server logs | 90 days (rolling) | Security monitoring; fraud detection |
| Self-exclusion records | Duration of exclusion + 7 years | Responsible gaming; legal obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that makes re-identification impossible. Where anonymization is used rather than deletion, the resulting data may be retained indefinitely as it no longer constitutes personal data.
Depending on your location and the applicable data protection framework, you may hold some or all of the following rights in respect of your personal data held by won91. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request".
The won91 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, access the platform, or submit any personal data to won91.
If won91 discovers or is notified that personal data has been collected from a player who was under 21 years of age at the time of registration, we will immediately suspend the account, delete all associated personal data to the extent permitted by our legal obligations, void any transactions, and decline to pay any winnings generated during the period of underage use.
Parents and guardians are encouraged to use parental-control software to prevent minors from accessing online gambling platforms. If you believe a minor has registered on won91 using your payment details or personal information, please contact us immediately at [email protected].
12.1 Opt-In Basis. won91 sends promotional emails, bonus notifications, and seasonal offer announcements exclusively to players who have opted in to receive marketing communications. Opt-in consent is requested at the point of registration and can be updated at any time in your account settings.
12.2 Content of Communications. Marketing communications from won91 may include details of welcome bonuses, reload promotions, seasonal offers tied to Indonesian events (such as Idul Fitri, Ramadhan, and Indonesian Independence Day), new game launches from studios such as Pragmatic Play and Evolution Gaming, and platform updates relevant to your account.
12.3 Opting Out. You may opt out of marketing communications at any time by:
Opting out of marketing communications does not affect the delivery of transactional communications (e.g., deposit confirmations, withdrawal processing notices, security alerts, and responsible gaming notifications), which are sent regardless of marketing preference.
13.1 Technical Safeguards. won91 employs a layered approach to data security. Key technical measures include:
13.2 Organizational Measures. Beyond technical controls, won91 maintains organizational safeguards including staff data protection training, a documented data breach response procedure, vendor due diligence processes for all third-party data processors, and a designated data protection contact point responsible for overseeing compliance with this Policy.
13.3 Player Responsibilities. Notwithstanding the security measures described above, the security of your account also depends on your own behavior. You are responsible for maintaining the confidentiality of your login credentials, enabling two-factor authentication on your account, and notifying won91 immediately if you suspect unauthorized access. See the Terms & Conditions (Clause 3) for full details of your account security obligations.
The won91 platform does not contain links to third-party websites for commercial or affiliate purposes. All navigational links on won91 lead to pages within the won91 domain (https://won91.cam). In the event that any won91 communication (such as a promotional email) contains a link to a third-party resource, that resource is governed by its own privacy policy, and won91 accepts no responsibility for the data practices of external websites.
won91 does not operate affiliate tracking programs that involve embedding third-party scripts on the won91 domain. Third-party game studio content is delivered through secure API integrations and does not involve third-party JavaScript tracking code executing in the player's browser session.
15.1 Right to Update. won91 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or platform features. The "Last Updated" date at the top of this page will be revised accordingly on each update.
15.2 Notification of Material Changes. Where a change to this Policy materially affects your privacy rights or our data processing activities, we will notify registered players by email to the address on file at least 14 days before the change takes effect. Continued use of the platform after the effective date of an updated Policy constitutes your acceptance of the revised terms.
15.3 Previous Versions. Previous versions of this Privacy Policy are available on request by contacting [email protected] with the subject line "Previous Privacy Policy Version".
If you have any questions, concerns, or complaints about the way won91 handles your personal data, we encourage you to contact us in the first instance so we can address your concern directly.
Please include the following details in any privacy complaint: your registered username, a clear description of your concern, the specific data or processing activity in question, and the resolution you are seeking. Anonymous complaints cannot be fully investigated as we would be unable to locate and verify the relevant records.
won91 is committed to resolving all privacy complaints promptly and fairly. If, after contacting us, you remain dissatisfied with the outcome, you retain the right to escalate the matter to the relevant data protection authority or seek resolution through the dispute process described in the Terms & Conditions (Clause 14).
This Privacy Policy was last reviewed and updated in January 2026. By continuing to use the won91 platform after this date, you confirm that you have read, understood, and accepted this Policy in full.
Our support team is available 24/7 to address any data protection concerns. You can also review our full Terms & Conditions or visit our FAQ for quick answers.