Privacy Policy — gg668

1 Introduction

gg668 is Indonesia's premier online gaming platform, providing sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), and card games to verified adult Members. In operating these services, gg668 necessarily processes personal data about its Members, prospective Members, and website visitors. We are committed to handling this data responsibly, transparently, and in compliance with internationally recognized data protection principles.

This Policy applies to all personal data processed by gg668, regardless of the channel through which it was collected — whether through account registration, deposit and withdrawal transactions, customer support interactions, marketing communications, or ordinary use of the platform. It should be read alongside our Terms & Conditions, which govern the overall Member relationship.

2 Definitions

• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, either directly (e.g., full name, email address) or indirectly (e.g., device fingerprint combined with location data).
• "Processing" — any operation performed on personal data, including collection, storage, use, transfer, disclosure, and deletion.
• "Controller" — gg668, the entity that determines the purposes and means of processing your personal data.
• "Processor" — a third-party service provider that processes personal data on gg668's behalf and under gg668's documented instructions.
• "Member" — any individual who has registered a verified account on the gg668 platform.
• "KYC Data" — identity and address verification documentation submitted by a Member as part of the Know Your Customer verification process, including government-issued identification, proof of address, and payment method documentation.
• "Cookies" — small text files placed on your device by the gg668 platform to store session state, preferences, and analytics data.

3 Data We Collect

gg668 collects the following categories of personal data, depending on the nature of your interaction with the platform:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you are at least 21 years of age).
• Nationality and country of residence.
• Copies of identity documents: national identity card (KTP), passport, or driver's license, submitted during KYC verification.

3.2 Contact Data

• Email address (primary communication channel for account notifications, security alerts, and promotional communications where consent is given).
• Mobile phone number (used for account verification, two-factor authentication, and customer support).
• Residential address, including city (e.g., Jakarta, Surabaya, Bandung, Bali, Medan) and postal code, as provided during KYC.

3.3 Financial Data

• Bank account details associated with your registered payment methods, including account numbers and account holder names for BCA, BRI, BNI, Mandiri, and other supported Indonesian banks.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja accounts linked to your gg668 profile.
• Transaction history, including deposit amounts, withdrawal requests, and associated timestamps, all denominated in Indonesian Rupiah (IDR).

3.4 Technical Data

• IP address and approximate geographic location derived from IP resolution.
• Device type, operating system, and browser version.
• Session identifiers, login timestamps, and access logs.
• Cookies and similar tracking technologies (see Section 8 for full details).

3.5 Behavioral and Gaming Data

• Betting history across all product verticals, including sportsbook markets, live casino tables, slot sessions, and togel draw participation.
• Bonus claim history, wagering completion records, and promotional engagement data.
• Session duration, game preferences, and responsible gaming tool usage (e.g., deposit limit settings, self-exclusion requests).

3.6 Communications Data

• Records of customer support interactions conducted via live chat or email, including timestamps and message content.
• Survey or feedback responses voluntarily submitted by Members.

4 How We Collect Data

gg668 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, or contacting our support team.
• Automated collection: Technical and behavioral data gathered automatically as you navigate and use the gg668 platform, including through cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data returned by our KYC partners following document authentication checks; fraud and AML screening results from compliance service providers; and, where applicable, payment confirmation data from Indonesian banking and e-wallet partners.

5 Use of Personal Data

gg668 uses your personal data for the following purposes:

Purpose	Data Categories Used
Account registration and authentication	Identity, Contact, Technical
Age and identity verification (KYC)	Identity, Contact, Financial
Processing deposits and withdrawals	Financial, Identity
Delivering gaming services and platform features	Behavioral, Technical
Bonus eligibility assessment and fraud prevention	Behavioral, Financial, Technical
Anti-money laundering (AML) and regulatory compliance	Identity, Financial, Technical
Customer support and dispute resolution	Identity, Contact, Communications
Responsible gaming monitoring and intervention	Behavioral, Contact
Marketing communications (with consent)	Contact, Behavioral
Platform analytics and performance optimization	Technical, Behavioral
Security monitoring and intrusion detection	Technical, Identity

gg668 does not use personal data for automated decision-making that produces solely automated legal effects, beyond the standard fraud screening and AML checks described above. Where such automated processes flag an account for review, a trained compliance team member conducts a manual assessment before any account action is taken.

6 Legal Basis for Processing

gg668 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable AML regulations, KYC obligations, and regulatory reporting requirements imposed by gg668's international operating license.
• Legitimate interests: Processing carried out to protect the security and integrity of the platform, prevent fraud, conduct internal analytics, and improve service quality — where such interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional purposes, such as sending promotional emails, personalized bonus offers, and seasonal marketing communications tied to events such as Idul Fitri, Ramadhan, and BRI Liga 1 milestones. You may withdraw consent at any time by updating your communication preferences in your Account settings or by contacting support.

7 Data Sharing & Disclosure

gg668 does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

7.1 Service Providers (Processors)

We engage vetted third-party processors to support platform operations, including KYC and identity verification partners, payment gateway providers, cloud infrastructure providers, fraud detection and AML screening services, and customer support tooling providers. All processors are bound by data processing agreements that restrict their use of your data strictly to the services they provide on gg668's behalf.

7.2 Legal and Regulatory Disclosure

gg668 may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required by applicable law, court order, or regulatory directive. In such cases, gg668 will disclose only the minimum data necessary to satisfy the legal obligation and will, where legally permitted to do so, notify the affected Member of the disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of substantially all of gg668's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the identity of the new data controller prior to the transfer taking effect, and your rights under this Policy will be preserved.

7.4 Aggregated Analytics

gg668 may share aggregated, anonymized statistical data — from which no individual Member can be identified — with business partners or publish such data for research and reporting purposes. This aggregated data does not constitute personal data disclosure.

8 Cookies & Tracking Technologies

gg668 uses cookies and similar technologies to operate core platform functionality, maintain your authenticated session, remember your preferences, and gather analytics data that helps us improve the user experience. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential to the operation of the platform. These enable secure login sessions, maintain your authenticated state across pages, and prevent cross-site request forgery (CSRF). These cookies cannot be disabled without significantly impairing your ability to use gg668.
• Functional Cookies: Used to remember your preferences, such as language settings and previously selected deposit methods (e.g., BCA or OVO), so you do not need to re-enter this information on each visit.
• Analytics Cookies: Used to collect aggregated information about how Members interact with the platform — including pages visited, session duration, and feature engagement — to inform platform improvements. Analytics data is processed in anonymized form where possible.
• Marketing Cookies: Used, where you have given consent, to deliver relevant promotional content and track the effectiveness of bonus campaigns. You may withdraw marketing cookie consent at any time via your Account settings.

Most web browsers provide controls that allow you to view, manage, and delete cookies. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features.

9 Data Retention

gg668 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. Our standard retention periods are as follows:

• Account and KYC data: Retained for the duration of the Member relationship and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for two (2) years from the date of the interaction, unless the communication forms part of an ongoing dispute or legal proceeding.
• Marketing preference records: Retained until consent is withdrawn and for one (1) year thereafter to document compliance with the withdrawal.
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which it is deleted or anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized using industry-standard data destruction procedures.

10 Data Security

gg668 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and loss. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gg668 platform.
• Encrypted storage of sensitive data fields, including payment method details and KYC document files, at rest using AES-256 encryption.
• Role-based access controls ensuring that employee access to personal data is limited strictly to what is required for each role's operational function.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Two-factor authentication (2FA) available to all Members and mandatory for staff accessing internal administrative systems.
• Comprehensive intrusion detection and real-time security monitoring across all platform infrastructure.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, gg668 will notify affected Members without undue delay and take all reasonable steps to contain the incident and mitigate harm.

11 Your Rights

Subject to applicable law and the conditions described in this Policy, you hold the following rights with respect to your personal data held by gg668:

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verified request. We may ask you to confirm your identity before processing a rights request to protect against fraudulent or unauthorized requests.

12 International Data Transfers

gg668's platform infrastructure and some of our third-party service providers operate in jurisdictions outside Indonesia. As a result, your personal data may be transferred to, stored in, and processed in countries other than your country of residence. Where such transfers occur, gg668 ensures that appropriate safeguards are in place — including contractual data protection clauses with processors — to ensure that your data receives a standard of protection consistent with this Policy.

By registering a gg668 account and using the platform's services, you acknowledge that your personal data may be transferred internationally as described in this section.

13 Minors

gg668 strictly prohibits the use of its platform by individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age. If gg668 discovers that personal data has been collected from a person under 21, the associated account will be closed immediately, all data will be deleted as soon as technically feasible, and any funds held in the account will be handled in accordance with applicable law.

If you believe that a minor has registered on gg668 or that we may hold data belonging to a person under 21, please contact us immediately at [email protected].

14 Policy Changes

gg668 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. When material changes are made, we will notify active Members by email and/or by displaying a prominent notice within the platform dashboard for a period of at least 14 days before the changes take effect. The updated Policy will be published at /privacy-policy with a revised "Last Updated" date.

Your continued use of the gg668 platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the platform and request account closure prior to the effective date of the changes.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or gg668's data practices, our Data Protection team is available to assist you:

• Email: [email protected] — please use the subject line "Privacy Inquiry" or "Data Rights Request" to ensure prompt routing.
• Live Chat: Available 24/7 within the gg668 platform dashboard after logging in to your Member Account. Indonesian-speaking agents are available on every shift.
• Response Time: Privacy-related email inquiries are prioritized and typically receive an initial response within 4 business hours during standard operating hours (08:00–24:00 WIB, UTC+7).

We are committed to resolving all privacy-related concerns fairly and transparently. If you remain dissatisfied after engaging with our support team, you retain the right to escalate your concern to the relevant data protection authority or seek independent legal advice.