windah Privacy Policy

What Data We Collect on windah

We collect your personal information during account signup and throughout your use of windah. During signup, we ask for your full name, date of birth, email address, phone number, and a valid ID number (such as a KTP or passport). We use this information to verify your identity and comply with Indonesian financial regulations. This verification process is mandatory and protects your account from unauthorized access.

When you deposit on windah, we collect payment information. If you use DANA, e-wallet, mobile banking, local payment, or online payment, we receive confirmation that the transaction succeeded but do not store your e-wallet credentials. If you use a bank transfer via e-wallet, mobile banking, local payment, or online payment, we record your bank account details to ensure your withdrawal returns to the same account. We never store your banking password or PIN.

We collect information about your gameplay on windah—which games you play, how long you play, your bet amounts, and your account balance. We use this data to personalize your experience, detect fraud, and comply with regulations. We also collect technical information: your device type (Android or iOS), your IP address, your browser type, and your connection speed. This helps us optimize windah for different devices and networks.

How We Use Your Data on windah

We use your personal data for account verification, payment processing, fraud prevention, and regulatory compliance. When you deposit on windah, we verify that your payment method matches your account details. When you withdraw, we confirm that your withdrawal destination is the same account you used to deposit. This protects you from unauthorized withdrawals and helps us comply with anti-money-laundering regulations.

We analyze your gameplay data to detect fraud patterns. If we notice unusual activity—such as multiple failed login attempts, a withdrawal to a different account than your deposit origin, or a sudden large bet after months of small bets—we flag your account for manual review. Our team contacts you to confirm the activity is legitimate. This review typically takes one business day.

We use your email and phone number to send you account notifications. We notify you when your account is created, when your deposit is confirmed, when your withdrawal is approved, and when your account is accessed from a new device. You can control which notifications you receive in your account settings. We never send unsolicited marketing; every notification relates to your active account or gameplay.

We at windah use your data only for the purposes you authorize—account management, payment processing, and fraud prevention.

Third-Party Processors and Data Sharing

We share your data with third-party processors only when necessary to provide our service. Our payment gateway partners (such as e-wallet, mobile banking, local payment, online payment, e-wallet, and our bank partners mobile banking, local payment, online payment, e-wallet) receive your payment information to process deposits and withdrawals. These partners are bound by confidentiality agreements and use your data only for payment processing.

We may share your data with regulatory authorities if required by law. Indonesian financial regulators may request information about your account, your deposits, or your withdrawals. We comply with these requests to maintain our operating license. We do not share your data with law enforcement or third parties without a valid legal order.

Our servers may sit outside your jurisdiction. We use cloud infrastructure to store your data securely, and some of that infrastructure may be located in other countries. Regardless of where your data is stored, we apply the same security standards and privacy protections. We encrypt your data in transit and at rest, and we limit access to authorized personnel only.

Your Rights on windah

You have the right to access your personal data on windah. You can view your account information, transaction history, and gameplay data anytime from your account dashboard. You can download a copy of your data by contacting our support team. We will provide your data in a standard format within a reasonable timeframe.

You have the right to correct your personal data. If your name, email, or phone number is incorrect on windah, contact our support team and we will update it after verifying your identity. You have the right to delete your account and associated data. If you request account deletion, we will close your account and remove your personal information from our active systems. We may retain some data for regulatory or legal reasons, but we will not use it for any other purpose.

You have the right to object to certain uses of your data. If you do not want to receive account notifications, you can disable them in your settings. If you do not want us to analyze your gameplay data for personalization, contact our support team and we will limit our analysis to fraud prevention and regulatory compliance only.

• 1
  Identity verificationDuring signup

  We collect your name, date of birth, and ID number to verify your identity and comply with regulations.

• 2
  Payment processingDuring deposits and withdrawals

  We collect payment information to process your transactions through mobile banking, local payment, online payment, e-wallet, mobile banking, or bank transfer.

• 3
  Fraud detectionOngoing

  We analyze your account activity to detect fraud patterns and protect your account from unauthorized access.

• 4
  Regulatory complianceAs required by law

  We share data with regulatory authorities when required by Indonesian financial law.

Cookies and Tracking on windah

We use cookies to keep you logged into windah and to remember your preferences. When you log into windah on your phone, we store a session cookie that keeps you authenticated. This cookie expires after a period of inactivity, and you must log in again. You can disable cookies in your browser settings, but this may prevent windah from functioning properly.

We use analytics cookies to understand how users interact with windah. These cookies help us identify which games are popular, which payment methods users prefer, and where users experience technical issues. We use this information to improve windah's performance and user experience. Analytics cookies do not identify you personally—they track aggregate usage patterns.

We do not use tracking cookies to follow you across other websites. We do not sell your browsing data to advertisers. Our cookies are used only to operate windah and improve our service.

Data Security and Encryption

We protect your data through encryption, secure servers, and access controls. All data transmitted between your phone and our servers is encrypted using industry-standard TLS (Transport Layer Security). Your password is hashed and never stored in plain text. Your payment information is processed through certified payment gateways that comply with international security standards.

Our servers are protected by firewalls, intrusion detection systems, and regular security audits. We limit access to your data to authorized personnel only. Our team members sign confidentiality agreements and receive training on data protection. We monitor our systems for unauthorized access and respond immediately to any security incidents.

We cannot guarantee absolute security—no system is non-specific info secure. If we detect a data breach, we will notify you immediately via email and push notification. We will explain what data was compromised and what steps we are taking to protect your account.

How Long We Keep Your Data

We retain your personal data for as long as your windah account is active. If you close your account, we delete your personal information from our active systems within a reasonable timeframe. We may retain some data for regulatory or legal reasons—for example, we may keep transaction records for seven years to comply with Indonesian financial regulations.

We retain your gameplay data (such as bet history and game outcomes) for as long as your account is active. This data helps us detect fraud and resolve disputes. If you request account deletion, we will remove this data as well, except where we are required to retain it for regulatory purposes.

Contact Us About Your Data

If you have questions about our privacy practices, want to access your data, or want to request deletion of your account, contact our support team. We provide English support and are available to help with privacy inquiries. You can reach us through the contact form on windah or via email. We will respond to your request within a reasonable timeframe.

If you believe we have violated your privacy rights, you can file a complaint with the Indonesian Data Protection Authority. We are committed to resolving privacy concerns and will cooperate with any investigation.

Changes to This Privacy Policy

We may update this privacy policy at any time. We will notify you of material changes via email or push notification. Your continued use of windah after such notification constitutes acceptance of the updated policy. If you do not agree with the changes, you may close your account.

We encourage you to review this privacy policy regularly to stay informed of any updates. The most current version is always available on the windah website.