gg368 Privacy Policy

gg368 is a premium online casino and sportsbook platform that has served Indonesian players since 2016. We are deeply committed to safeguarding the personal information entrusted to us by our Members. This Policy has been written in plain, professional English to ensure every Member can understand how their data is handled — regardless of their technical background.

We process personal data only for specific, legitimate purposes and we never sell your information to unaffiliated third parties for their own marketing use. Every data-processing activity carried out by gg368 is governed by the principle of data minimisation: we collect only what is necessary, retain it only as long as required, and protect it throughout its lifecycle using industry-standard controls.

This Policy applies to all personal data processed in connection with your use of the gg368 Platform, including the sportsbook, live casino, slot games, Domino QQ, Capsa Susun, and togel (Indonesia's traditional numbers lottery) services, as well as customer support interactions and marketing communications.

gg368 collects the following categories of Personal Data from Members and Platform visitors:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you are at least 21 years of age)
• Nationality and country of residence
• Indonesian National Identity Card number (NIK / KTP number), passport number, or SIM number, provided during KYC verification
• Selfie photograph or video submitted for liveness verification during KYC

3.2 Contact Data

• Email address (used as your primary Account identifier and communication channel)
• Mobile phone number (used for two-factor authentication and transactional notifications via SMS or WhatsApp)
• Residential address including city (Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, or other Indonesian cities) and postal code

3.3 Financial Data

• Bank account number and account holder name for withdrawal processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, or other supported banks)
• E-wallet account details for OVO, DANA, GoPay, ShopeePay, or LinkAja where used for deposits or withdrawals
• Transaction history including deposit amounts, withdrawal requests, bonus claims, and wager records — all denominated in Indonesian Rupiah (IDR)

3.4 Technical Data

• IP address and approximate geolocation (city/province level) at the time of login and significant Account events
• Device type, operating system, browser type and version
• Session duration, page views, click-through patterns, and in-game behaviour data
• Cookies and similar tracking technologies (detailed in Clause 10)

3.5 Communications Data

• Records of support interactions (live chat transcripts, email correspondence) with the gg368 customer support team
• Feedback, survey responses, and any information you voluntarily provide when contacting us

3.6 Responsible Gaming Data

• Self-imposed deposit limits, session time limits, cooling-off periods, and self-exclusion requests submitted via your Account dashboard
• Responsible gaming flags raised by our monitoring systems where unusual patterns of play are detected

gg368 collects Personal Data through the following channels:

• Direct submission: Information you provide when creating an Account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or responding to a survey.
• Automated collection: Technical Data collected automatically when you access and interact with the Platform, including via browser cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data returned by licensed KYC providers; fraud-risk scores provided by payment processors; geolocation data supplied by IP-intelligence services. All third-party sources used by gg368 are contractually bound to share data only for the purposes described in this Policy.
• Payment processors: Transaction confirmation and status data from Indonesian banking partners (BCA, BRI, BNI, Mandiri, and others) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) upon completion of a deposit or withdrawal.

gg368 processes your Personal Data under the following legal bases:

The Personal Data gg368 collects is used exclusively for the following purposes:

1. Account Management. Creating, verifying, and maintaining your gg368 Account; authenticating your identity at login; processing password resets and security changes.
2. Service Delivery. Enabling access to all betting and gaming products on the Platform; processing deposits and withdrawals in IDR via your chosen Indonesian bank or e-wallet; settling wagers and crediting winnings.
3. KYC & Compliance. Verifying your identity and age (21+); conducting AML screening; complying with the conditions of gg368's international gaming licence and applicable financial regulations.
4. Fraud Prevention & Security. Detecting and preventing unauthorised Account access, multi-accounting, bonus abuse, money laundering, and other fraudulent or criminal activity on the Platform.
5. Customer Support. Responding to your enquiries, complaints, and support requests; escalating issues to specialist teams where necessary; maintaining records of interactions for quality and training purposes.
6. Responsible Gaming. Monitoring wagering patterns for signs of problem gambling; administering self-exclusion and deposit limits; proactively contacting Members where our systems flag potential harm.
7. Personalisation & Marketing. Delivering bonus offers, seasonal promotions (including Idul Fitri / Lebaran, Ramadhan, and other Indonesian holidays), and personalised content — subject to your marketing preferences and the consent you have provided.
8. Platform Improvement. Analysing aggregated usage data to identify performance issues, improve navigation, and develop new features across the gg368 Platform.

gg368 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own commercial purposes. We share your data only in the circumstances described below, and only to the minimum extent necessary:

• Payment Processors. Your bank account or e-wallet details are shared with the relevant payment processor (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja) solely to execute a deposit or withdrawal you have initiated. Each processor acts as an independent data controller for their own services and is governed by their own privacy policy.
• KYC & Identity Verification Providers. Identity documents and photographs submitted during KYC verification are processed by licensed third-party identity verification providers under strict data-processing agreements. These providers verify your identity and return a verification result; they do not retain your documents beyond their contractual obligations.
• Game Content Providers. Gameplay data (wager amounts, game session IDs) may be shared with licensed game providers — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — solely for game operation, RTP certification, and dispute resolution. These providers do not receive your identity or financial data.
• Fraud Prevention Services. Device fingerprints, IP addresses, and behavioural signals may be processed by fraud-intelligence partners to generate risk scores. No directly identifying information is shared beyond what is strictly required for risk assessment.
• Legal & Regulatory Authorities. gg368 will disclose Personal Data to government bodies, regulators, courts, or law-enforcement agencies where required to do so by applicable law, court order, or the conditions of our international gaming licence. We will notify you of such disclosure where we are legally permitted to do so.
• Corporate Transactions. In the event of a merger, acquisition, or sale of all or part of gg368's business, Personal Data may be transferred to the acquiring entity, subject to the same protections described in this Policy. Members will be notified before any such transfer takes effect.

gg368 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

gg368 applies a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our core security controls include:

• TLS/SSL Encryption: All data transmitted between your device and the gg368 Platform is encrypted in transit using TLS 1.2 or higher. The padlock icon in your browser confirms that your connection is secure.
• Encryption at Rest: Sensitive data fields — including identity document images, bank account numbers, and password hashes — are encrypted at rest using AES-256 or equivalent industry-standard algorithms.
• Access Controls: Access to systems holding Personal Data is restricted to authorised gg368 personnel on a strict need-to-know basis, enforced via role-based access controls and multi-factor authentication.
• Penetration Testing: The Platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
• Incident Response: gg368 maintains a documented data-breach incident response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected Members within 72 hours of becoming aware of the incident, to the extent required by applicable law.
• Staff Training: All gg368 personnel with access to Personal Data receive regular training on data protection obligations and security best practices.

gg368 uses cookies and similar technologies (including web beacons and local storage) to operate the Platform, remember your preferences, and understand how Members interact with our services. The cookies we use fall into three categories:

You can manage or delete cookies at any time using your browser settings. Please note that disabling functional or analytics cookies will not prevent you from accessing the Platform, but some personalisation features may not work as expected. For instructions on managing cookies in your specific browser, refer to your browser's official help documentation.

As a Member of the gg368 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

During registration and KYC verification, gg368 takes active steps to verify that every Member meets the minimum age requirement of 21 years. If gg368 discovers — whether through KYC verification, a third-party report, or any other means — that an Account has been registered by or on behalf of an individual under 21, we will immediately suspend the Account, void any wagering activity, and permanently delete all Personal Data associated with that Account, subject only to any mandatory legal retention obligations.

If you are the parent or guardian of an individual you believe has registered an Account on the gg368 Platform without meeting the age requirement, please contact us immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving your report.

gg368 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or the scope of our services. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Display a prominent notice on the gg368 homepage for a minimum of 14 days following the update; and
• Send an email notification to all registered Members at the email address associated with their Account.

Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you have the right to close your Account before the change takes effect by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a potential data-protection concern, please contact the gg368 Data Protection team using the details below. All data-rights requests are handled by a dedicated team member and are treated with strict confidentiality.

gg368 is committed to resolving all data-protection concerns promptly and fairly. Where you remain dissatisfied with our handling of a concern, you retain the right to escalate the matter to the relevant supervisory authority in the jurisdiction governing our international gaming licence.