Privacy Policy

This Privacy Policy describes how gg168 ("we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "your", "Member", "Player") who access or use our online betting and casino platform, accessible at https://gg168.cam and through our mobile applications.

By registering an account with gg168, placing a wager, or otherwise interacting with our platform, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this Policy, you must discontinue use of the gg168 platform immediately.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policies, which together govern your relationship with gg168.

For the purposes of applicable data-protection legislation, the data controller responsible for your personal information is gg168, the entity that operates the online betting and gaming services at https://gg168.cam.

gg168 is licensed and regulated internationally and adheres to strict data-protection standards, including compliance with principles equivalent to the General Data Protection Regulation (GDPR) framework, adapted to the requirements of the jurisdictions in which we operate and serve Members.

All queries, requests, or complaints relating to the processing of your personal data should be directed to our Data Protection Officer via the contact details provided in Clause 14 of this Privacy Policy.

gg168 collects and processes the following categories of personal information about you:

• Account Registration Data: Your full legal name, date of birth, gender, email address, mobile phone number, residential address in Indonesia, and chosen username and password.
• Identity Verification (KYC) Documents: Copies of government-issued identification such as your Indonesian national identity card (KTP), passport, or driving licence (SIM), as well as proof-of-address documentation (utility bills, bank statements) and proof of payment-method ownership.
• Financial and Payment Data: Details of your bank account or e-wallet (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals, transaction history, and source-of-funds documentation where required for anti-money laundering compliance.
• Betting and Gaming Activity: Records of all wagers placed, games played, deposits made, withdrawals requested, bonuses claimed, and account balance movements, including timestamps and stakes for all transactions.
• Device and Technical Information: Your IP address, device type and model, operating system, browser type and version, screen resolution, language preferences, time zone setting, referring/exit pages, and date/time stamps of platform access.
• Communications: Records of all interactions with gg168 customer support — including live chat transcripts, email correspondence, and any feedback, complaints, or queries submitted through our platform.
• Marketing Preferences: Your consent status for receiving promotional communications, preferred communication channels, and response history to promotional campaigns.
• Responsible Gaming Data: Any deposit limits, loss limits, session time limits, or self-exclusion requests you have configured, as well as interaction history with our responsible-gaming tools and support resources.

We may also collect aggregated, anonymized, or statistical data that does not directly identify you. Such data may be used for platform analytics, performance monitoring, and business reporting without restriction.

gg168 processes your personal information for the following purposes:

1. Account Management: To create and maintain your gg168 account, authenticate your login sessions, and enable you to access the full range of betting and gaming products on our platform.
2. Identity Verification and KYC Compliance: To verify that you are at least 21 years of age, that you are a resident of Indonesia, and that the payment methods you use are registered in your name. This is a legal requirement under our operating licence and anti-money laundering obligations.
3. Transaction Processing: To process your deposits via BCA, BRI, BNI, Mandiri, and other supported payment methods; to execute withdrawal requests; to credit bonuses and promotions; and to maintain accurate records of your account balance.
4. Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, collusion, bonus abuse, chargebacks, and other breaches of our Terms & Conditions. This includes monitoring unusual betting patterns, device fingerprinting, and IP geolocation checks.
5. Regulatory Compliance: To comply with applicable laws, regulations, and licence conditions, including reporting obligations to our regulator, cooperation with law-enforcement investigations, and submission of suspicious-activity reports to relevant financial intelligence units.
6. Customer Support: To respond to your queries, complaints, and support requests via live chat, email, and other channels; to troubleshoot technical issues; and to maintain records of all communications for quality assurance and dispute resolution.
7. Responsible Gaming: To administer and enforce the responsible-gaming tools you have configured — including deposit limits, loss limits, session time limits, reality checks, and self-exclusion periods — and to monitor for signs of problem gambling behaviour.
8. Marketing and Promotional Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and updates about new games, features, and events relevant to the Indonesian market (BRI Liga 1, Champions League, Idul Fitri specials, etc.). You may withdraw your consent at any time via your account settings.
9. Platform Improvement and Analytics: To analyze how Members use the gg168 platform, identify popular games and betting markets, optimize user-interface design, and improve overall platform performance and stability.
10. Legal Claims and Dispute Resolution: To establish, exercise, or defend legal claims; to resolve disputes with Members or third parties; and to enforce our Terms & Conditions and other policies.

gg168 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and gg168 as set out in our Terms & Conditions — including account creation, transaction processing, and delivery of betting and gaming services.
• Legal Obligation: Processing is necessary for compliance with applicable laws and regulations, including anti-money laundering (AML) legislation, counter-terrorism financing rules, taxation obligations, and licensing requirements.
• Legitimate Interests: Processing is necessary for gg168's legitimate business interests, including fraud prevention, platform security, customer support, business analytics, and risk management — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have provided explicit, freely given, informed consent for specific processing activities, such as receiving marketing communications or participating in optional surveys and research studies. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

gg168 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Payment Service Providers: Your financial data is shared with our payment gateway partners and banking institutions (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, and e-wallet providers OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of processing deposits and withdrawals. These providers operate under strict data-protection and PCI-DSS compliance standards.
• KYC and Identity Verification Services: Your identity documents and personal details may be shared with third-party KYC verification providers who assist gg168 in confirming your identity, age, and address. These providers are contractually obligated to process your data only for identity-verification purposes and to maintain confidentiality.
• Game Providers and Software Suppliers: Anonymized or pseudonymized data relating to your gaming activity may be shared with our game-studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others) for the purpose of game-performance analytics and fraud detection. No directly identifying personal information is shared unless required for technical troubleshooting or dispute resolution.
• Regulatory Authorities: gg168 is obligated to report certain information to the licensing authority under which we operate, and may be required to disclose Member data in response to lawful requests from regulators, law-enforcement agencies, or courts of competent jurisdiction.
• Professional Advisors: We may share your data with external legal counsel, accountants, auditors, and compliance consultants where necessary for the provision of professional services, subject to strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, corporate reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections set out in this Policy.

As an internationally licensed online betting platform, gg168 may transfer and process your personal data in jurisdictions outside Indonesia, including data centers and service providers located in Singapore, the European Union, and other regions with robust data-protection frameworks.

Where data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that available in Indonesia or the European Union, gg168 implements appropriate safeguards such as standard contractual clauses (SCCs), binding corporate rules, or other internationally recognized data-transfer mechanisms to ensure your data remains protected.

By using the gg168 platform, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia for the purposes described in this Privacy Policy.

gg168 employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data stored on our servers — including passwords, payment details, and KYC documents — is encrypted at rest.
• Access Controls: Access to Member data is restricted to authorized gg168 personnel on a strict need-to-know basis. All employees with access to personal data undergo background checks and receive regular data-protection training.
• Secure Payment Processing: All payment transactions are processed via PCI-DSS Level 1 compliant payment gateways. gg168 does not store full credit card numbers or CVV codes on our own servers.
• Regular Security Audits: Our platform undergoes regular penetration testing, vulnerability assessments, and third-party security audits to identify and remediate potential weaknesses.
• Intrusion Detection and Monitoring: We operate 24/7 security monitoring systems to detect and respond to suspicious activity, unauthorized access attempts, and potential data breaches in real time.
• Incident Response Plan: In the event of a data breach affecting your personal information, gg168 will notify you and the relevant supervisory authority within 72 hours in accordance with applicable data-breach notification requirements.

While we implement robust security measures, no system is entirely immune to attack. You are responsible for maintaining the confidentiality of your gg168 login credentials and for notifying us immediately if you suspect unauthorized access to your account.

gg168 retains your personal information for as long as necessary to fulfill the purposes for which it was collected, subject to applicable legal and regulatory retention requirements.

Specifically:

• Active Accounts: While your gg168 account remains active, we retain all account data, transaction history, KYC documents, and communications to enable ongoing platform access and customer support.
• Closed Accounts: Following voluntary or involuntary account closure, gg168 retains your data for a minimum regulatory retention period of seven years from the date of closure. This retention is required under anti-money laundering and licensing obligations to support potential regulatory audits, tax investigations, and legal claims.
• Self-Exclusion Records: Records of self-exclusion requests are retained permanently to prevent inadvertent re-opening of excluded accounts and to support responsible-gaming compliance.
• Marketing Data: If you withdraw consent to receive marketing communications, we will suppress your contact details from future campaigns but retain a record of your opt-out preference indefinitely to ensure we do not contact you again.

After the applicable retention period expires, your personal data will be securely deleted or anonymized such that it can no longer be associated with you as an individual. Anonymized data may be retained indefinitely for statistical and business-intelligence purposes.

Under applicable data-protection laws, you have the following rights in relation to your personal information held by gg168:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how we process it. The first copy is provided free of charge; subsequent requests may incur a reasonable administrative fee.
• Right to Rectification: If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. Most account details can be updated directly via your gg168 account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request deletion of your personal data. However, this right is subject to overriding legal obligations — for example, we are required to retain certain data for seven years under anti-money laundering regulations, and therefore cannot delete it upon request during that period.
• Right to Restriction of Processing: You may request that we limit the processing of your personal data in certain circumstances, such as while a dispute about its accuracy or lawfulness is being resolved.
• Right to Data Portability: You have the right to receive the personal data you provided to gg168 in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You may object to processing of your personal data where it is based on legitimate interests or for direct-marketing purposes. If you object to marketing, we will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: If you believe gg168 has processed your personal data in violation of applicable data-protection laws, you have the right to lodge a complaint with the relevant data-protection supervisory authority in your jurisdiction.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Clause 14. We will respond to your request within 30 days, or within such shorter period as required by applicable law.

gg168 uses cookies and similar tracking technologies to enhance your experience on our platform, deliver personalized content, and analyze site usage. Cookies are small text files stored on your device when you access our website.

We use the following categories of cookies:

• Essential Cookies: Strictly necessary for the operation of the platform, including session management, authentication, and load balancing. These cookies cannot be disabled without severely impairing platform functionality.
• Functional Cookies: Enable enhanced features such as remembering your language preference, time-zone setting, and display preferences. These improve usability but are not strictly necessary.
• Analytics Cookies: Collect aggregated data about how visitors use the gg168 platform — including page views, time on site, navigation paths, and popular content. We use this data to improve platform design and performance. gg168 uses first-party analytics tools that do not share your data with external advertising networks.
• Marketing Cookies: Track your interactions with promotional campaigns and may be used to deliver targeted bonus offers relevant to your betting preferences. These cookies are set only with your consent and can be disabled via your browser settings or account preferences.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit your ability to access some features of the gg168 platform. We do not use third-party advertising cookies or participate in behavioral advertising networks.

gg168 does not knowingly collect or process personal information from individuals under the age of 21. Our platform is intended exclusively for adults who meet the minimum age requirement of 21 years as mandated by Indonesian law and our Terms & Conditions.

All account registrations are subject to mandatory age verification. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe your child has provided personal information to gg168, please contact us immediately via the details in Clause 14 so that we can take appropriate action.

gg168 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, legal or regulatory requirements, or platform features. Where a material change is made, we will notify affected Members via email or an on-platform notification with at least seven days' notice before the updated Policy takes effect, except where an immediate change is required by law.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

Your continued use of the gg168 platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the gg168 Data Protection Officer:

• Email (plain text — not a link): [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the on-platform live-chat widget. Average response time is under 45 seconds.

We aim to respond to all privacy-related inquiries within 30 days. For urgent matters — such as suspected unauthorized access to your account — please contact our live-chat support immediately for real-time assistance.