Account creation and KYC verification on win123
Creating a win123 account takes five minutes. You provide your email, create a password (minimum 8 characters, mixed case and numbers recommended), and confirm your email address via a verification link. Once confirmed, you're prompted to complete KYC (Know Your Customer) verification before your first deposit or withdrawal.
KYC requires a government-issued ID (passport, national ID card, or driver's license) and proof of address (utility bill, bank statement, or rental agreement dated within the last three months). You upload these documents through our app or website. Our verification team reviews them subject to standard processing windows—typically one business day. If documents are unclear or incomplete, we request resubmission via email.
After verification, your account is flagged as "verified" and you can deposit and withdraw without further delays. We keep your documents encrypted and separate from your account balance. You can request deletion of your documents after 12 months of account inactivity.
KYC verification protects both you and us. It confirms your identity and prevents account takeover, fraud, and money laundering.
Password and two-factor authentication
Your password is hashed using industry-standard encryption. We never store your password in plain text. When you log in, our system compares your input against the hashed version—if it matches, you're authenticated.
We strongly recommend enabling two-factor authentication (2FA) on your account. Once enabled, every login requires a one-time code sent to your registered email or phone number. This adds a second layer of protection: even if someone obtains your password, they cannot access your account without the 2FA code.
To enable 2FA, go to Account Settings → Security → Two-Factor Authentication. Choose email or SMS delivery. You'll receive a code each time you log in from a new device. Codes expire after subject to verification. If you lose access to your email or phone, contact our support team to disable 2FA temporarily while we verify your identity.
Enable 2FA before your first deposit
Two-factor authentication is optional but recommended. It takes 30 seconds to set up and protects your account from unauthorized access.
Session management and timeouts
When you log into win123, a session token is created and stored on your device. This token expires after subject to verification of inactivity. If you step away from your phone or computer, your session automatically ends. The next time you try to place a bet or access your account, you'll be prompted to log in again.
This timeout protects you if your device is lost or borrowed. Even if someone picks up your phone while you're away, they cannot access your account after subject to verification. You can manually log out at any time by tapping "Logout" in Account Settings.
On shared devices (family computer, internet café), always log out after your session. Do not check "Remember me" or save your password in your browser. Clear your browser cache and cookies after each session to prevent credential theft.
Password recovery and account lockout
If you forget your password, tap "Forgot Password" on the login screen. Enter your email address, and we'll send a password-reset link. Click the link, create a new password, and log in. The reset link expires after 24 hours for security.
If you enter your password incorrectly five times in a row, your account is temporarily locked for subject to verification. This prevents brute-force attacks (automated attempts to guess your password). After subject to verification, you can try logging in again. If you're locked out and cannot reset your password, contact our support team with your email address and a photo of your government ID for verification.
Account recovery takes one business day. Our team verifies your identity, confirms your email, and resets your account access. We do not reset passwords over the phone or via chat without identity verification.
Unauthorized activity and fraud reporting
Review your account activity regularly. Go to Account → Transaction History to see all deposits, withdrawals, bets, and wins. If you spot a transaction you did not authorize, report it immediately to our support team.
We investigate fraud claims within 24 hours. If we confirm unauthorized activity, we reverse the transaction and credit your account. We also reset your password and recommend enabling 2FA if you haven't already. In cases of account compromise, we may temporarily freeze your account while we investigate.
Common fraud vectors include phishing emails (fake win123 login pages), malware on your device, and password reuse across multiple sites. Protect yourself by:
- Never clicking links in unsolicited emails claiming to be from win123. Always navigate to win123.best directly.
- Using a unique password for win123 that you don't use on other sites.
- Keeping your device updated with the latest security patches.
- Enabling 2FA on your account.
- Logging out after each session, especially on shared devices.
Payment security and withdrawal verification
Deposits on win123 are processed through encrypted payment gateways. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, your payment details are never stored on our servers. Your bank or e-wallet provider handles the transaction. We receive only a confirmation that the payment succeeded.
Withdrawals require additional verification. Your first withdrawal triggers a KYC check if you haven't completed one already. Subsequent withdrawals may require re-verification if you change your withdrawal method or if we detect unusual activity (large withdrawal, withdrawal to a new bank account, etc.).
Withdrawal verification takes one business day. We confirm your identity, match your withdrawal method to your account, and process the transfer. Your bank or e-wallet provider then settles the funds—this typically takes 1–3 business days depending on your provider.
Data encryption and privacy
All communication between your device and win123 servers is encrypted using TLS 1.2 or higher. This means your login credentials, account balance, and transaction history are protected from interception.
Your personal data (name, ID number, address, email, phone) is stored in encrypted databases. Only authorized staff can access this data, and access is logged. We do not sell your data to third parties. We share data with payment processors and regulatory authorities only when required by law.
You can request a copy of your personal data at any time. Go to Account Settings → Privacy → Download My Data. We'll compile your account information, transaction history, and documents into a file and email it to you within 7 business days.
Security best practices
- Enable 2FA on your account
- Use a unique, strong password
- Log out after each session
- Review transaction history regularly
Security risks to avoid
- Clicking links in unsolicited emails
- Reusing passwords across sites
- Logging in on public WiFi without a VPN
Contacting support for security issues
If you have security concerns, contact our support team immediately. We're available via in-app chat during standard business hours (9 AM–6 PM Indonesia Standard Time, Monday–Friday). For urgent issues outside business hours, email us at [email protected] with "URGENT: Security Issue" in the subject line.
When reporting a security issue, provide as much detail as possible: the date and time of the incident, what you observed, and any error messages. Do not share your password or 2FA codes with support staff. Our team will never ask for these credentials.
For account recovery or fraud investigation, we may ask you to verify your identity by providing a photo of your government ID. This is standard procedure and protects your account from unauthorized access.
