gbk808 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

1. "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, including but not limited to name, date of birth, residential address, email address, mobile telephone number, device identifiers, and financial account details.
2. "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction, whether by automated means or otherwise.
3. "Data Controller" refers to gbk808, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
4. "Data Processor" refers to any third-party service provider engaged by gbk808 to process Personal Data on its behalf, subject to written data processing agreements.
5. "Member" / "You" refers to any individual who has registered an account on the gbk808 Platform.
6. "Cookies" refers to small text files placed on your device by the Platform for the purposes described in Section 7 of this Policy.
7. "KYC" (Know Your Customer) refers to the identity verification process conducted by gbk808 prior to processing withdrawals or as otherwise required.

gbk808 collects only the personal data that is necessary for the lawful operation of the Platform and the delivery of services to Members. The categories of personal data we collect are set out in the table below:

gbk808 collects personal data through the following means:

1. Direct Provision. Data you provide directly when completing the registration form, submitting KYC documents, updating your account profile, contacting customer support, or participating in promotions and surveys.
2. Automated Collection. Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies whenever you access or interact with the Platform. See Section 7 for full details on our use of cookies.
3. Third-Party Sources. Data received from third-party identity verification providers, fraud-detection services, and payment processors when they process transactions on your behalf. For example, when you initiate a deposit via GoPay or OVO, our payment processor may share transaction confirmation details with gbk808.
4. Publicly Available Sources. In certain fraud-prevention or AML (anti-money-laundering) scenarios, gbk808 may cross-reference data against publicly available databases or watchlists. This is performed strictly within the scope of legal compliance obligations.

gbk808 uses the personal data it collects for the following specific purposes. We process personal data only where a valid legal basis exists (see Section 5):

1. Account Management. To create, maintain, and administer your gbk808 Member Account, including processing your login credentials, communicating account-related updates, and maintaining your gaming preferences and responsible gaming settings.
2. Transaction Processing. To process deposit and withdrawal transactions via Indonesian payment channels, including bank transfers to and from BCA, BRI, BNI, Mandiri, and OCBC NISP accounts, as well as e-wallet transactions via OVO, DANA, GoPay, ShopeePay, and LinkAja.
3. Identity Verification (KYC). To verify your identity and age as part of our one-time KYC process, to confirm that you meet the 21+ age requirement, and to satisfy our compliance obligations under applicable anti-money-laundering frameworks.
4. Platform Integrity and Fraud Prevention. To detect, investigate, and prevent fraudulent activity, multiple-account violations, bonus abuse, collusion, money laundering, and other forms of misconduct that could harm the integrity of the Platform or other Members.
5. Customer Support. To respond to your enquiries, resolve disputes, process complaints, and provide assistance through our live chat, email ([email protected]), and WhatsApp (+62 811 0808 808) support channels.
6. Responsible Gaming. To implement and monitor the responsible gaming controls you configure on your Account — including deposit limits, session alerts, cool-off periods, and self-exclusion requests — and to proactively reach out to Members who exhibit patterns consistent with problem gambling behavior.
7. Marketing Communications. To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have expressly opted in to receive such communications. You may withdraw your consent at any time by updating your preferences within your Account settings or by contacting support.
8. Platform Improvement. To analyze aggregated, anonymized usage data for the purpose of improving Platform performance, game selection, user interface design, and customer experience — including for players across Jakarta, Surabaya, Medan, Bandung, Bali, and other major Indonesian cities.
9. Legal Compliance. To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and enforce the gbk808 Terms & Conditions.

gbk808 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

1. Contractual Necessity. Processing is necessary for the performance of the contract between you and gbk808 — specifically, delivering the Platform's gaming and betting services, processing your transactions, and maintaining your Account. Without this processing, gbk808 cannot provide its services to you.
2. Legal Obligation. Processing is required to comply with applicable legal obligations, including KYC/AML requirements, age verification obligations, and responses to lawful authority requests.
3. Legitimate Interests. Processing is carried out for gbk808's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and Platform improvement — provided that these interests are not overridden by your fundamental rights and freedoms.
4. Consent. Where gbk808 relies on your consent as the legal basis for processing (primarily for optional marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

gbk808 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly as necessary and subject to appropriate data protection safeguards:

1. Payment Processors. Indonesian and international payment service providers that facilitate deposit and withdrawal transactions on your behalf. These include the banking partners and e-wallet providers listed in Section 2. These processors receive only the minimum data necessary to complete the transaction.
2. Identity Verification Providers. Third-party KYC and identity verification service providers engaged by gbk808 to confirm Member identities and satisfy age-verification requirements.
3. Game Technology Providers. Third-party game studios and platform technology providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — whose games are integrated into the gbk808 Platform. These providers may receive session identifiers and game-activity data necessary for game operation and dispute resolution.
4. Fraud and Security Partners. Specialist third-party services engaged to detect and prevent fraudulent activity, including cybersecurity firms and AML screening providers.
5. Legal and Regulatory Authorities. Competent legal or regulatory authorities where disclosure is required by law, court order, or valid governmental request. gbk808 will notify affected Members of such disclosures to the extent permitted by law.
6. Business Transfers. In the event of a merger, acquisition, or sale of substantially all assets of gbk808, your personal data may be transferred to the acquiring entity, subject to the same level of data protection commitments set out in this Policy.

The gbk808 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session integrity, and gather analytics data. The following categories of cookies are used:

1. Strictly Necessary Cookies. These cookies are essential for the Platform to function correctly. They enable secure login sessions, maintain your Account authentication state, and preserve your in-session preferences (such as language or game lobby state). You cannot opt out of strictly necessary cookies without ceasing to use the Platform.
2. Performance and Analytics Cookies. These cookies collect anonymized data on how Members interact with the Platform — including which pages are visited most frequently, how long sessions last, and which game categories attract the most traffic. This data helps gbk808 improve the Platform for all users. The data collected is aggregated and does not identify individual Members.
3. Functionality Cookies. These cookies remember choices you make on the Platform — such as your preferred deposit method or responsible gaming settings — so that you do not have to re-enter them on each visit.
4. Targeting and Marketing Cookies. With your consent, these cookies track your Platform activity to deliver promotional content that is relevant to your gaming preferences. You may withdraw consent for targeting cookies at any time by updating your cookie preferences within the Platform settings.

gbk808 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual Member.

gbk808 implements robust technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit TLS/SSL Encryption: All data transmitted between your device and the gbk808 Platform is encrypted using industry-standard 256-bit TLS/SSL protocols, ensuring that your personal and financial data cannot be intercepted in transit.
• Encrypted Data Storage: Personal data held in gbk808's databases is encrypted at rest using AES-256 encryption. Financial data, including bank account details and e-wallet identifiers, is stored using additional tokenization layers.
• Access Controls: Access to personal data is strictly limited to gbk808 staff and authorized third-party processors who require such access to perform their specific role. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Intrusion Detection and Monitoring: gbk808's systems are continuously monitored for unauthorized access attempts, suspicious activity patterns, and security vulnerabilities. Automated alerting systems are in place to trigger rapid incident response procedures.
• Penetration Testing: gbk808 conducts periodic independent security assessments and penetration tests to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to Member rights, gbk808 will notify affected Members and relevant authorities as promptly as reasonably possible, providing details of the breach, the data affected, and the remedial steps being taken.

As a Member of gbk808, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 15:

1. Right of Access. You have the right to request a copy of the personal data that gbk808 holds about you, along with information about how it is being processed. We will respond to access requests within 30 calendar days of receipt.
2. Right to Rectification. You have the right to request correction of any personal data that is inaccurate or incomplete. You may update basic profile information directly within your Account settings. For changes to identity or financial data, please contact support.
3. Right to Erasure. You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. Please note that certain data may be retained beyond your erasure request where we have a legal obligation to do so (see Section 8).
4. Right to Restriction of Processing. You have the right to request that gbk808 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
5. Right to Data Portability. You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that this data be transferred to another controller, where technically feasible.
6. Right to Object. You have the right to object to processing carried out on the basis of gbk808's legitimate interests. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time.
7. Right to Withdraw Consent. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw marketing consent, update your preferences within your Account settings or email [email protected].

The gbk808 Platform is strictly for adults aged 21 years and above. gbk808 does not knowingly collect personal data from any individual under the age of 21. The Platform employs age-verification measures at the point of registration and during KYC verification to enforce this restriction.

If gbk808 discovers or has reason to believe that personal data has been collected from an individual under 21 years of age, the Account will be immediately suspended, all associated funds will be handled in accordance with applicable law, and the personal data in question will be deleted without undue delay.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has created an Account on gbk808, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

The gbk808 Platform may contain references to, or integrations with, third-party game studios and payment service providers. These third parties operate under their own privacy policies, which are independent of this Policy. gbk808 is not responsible for the privacy practices of third-party providers, and we encourage you to review their privacy policies before providing any personal data directly to them.

Game content provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe is delivered through secure API integrations. These studios may receive anonymized session identifiers necessary for game operation; they do not receive your full identity or financial data.

gbk808's primary operations are oriented toward the Indonesian market, and the Platform serves players across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Palembang, Makassar, and throughout Indonesia. However, certain technical infrastructure, third-party game providers, and payment processors may be located in jurisdictions outside Indonesia.

Where personal data is transferred internationally, gbk808 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions by relevant data protection authorities.

By using the gbk808 Platform, you consent to the transfer of your personal data to jurisdictions outside Indonesia where necessary for the delivery of the Platform's services, subject to the safeguards described above.

gbk808 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. The following procedure applies to all amendments:

1. Notification. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — gbk808 will notify Members by displaying a prominent notice on the Platform or by sending an email to the registered address on file, at least 7 days before the changes take effect.
2. Effective Date. The revised Policy will carry an updated "Effective Date" at the top of the document. The most current version of this Policy is always accessible at gbk808.bio/privacy-policy.
3. Continued Use. Continued use of the gbk808 Platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to any amendment, you must cease using the Platform and may request Account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gbk808, please reach out through one of the following channels:

When contacting gbk808 regarding a data rights request, please have your registered Account username and a government-issued identification document available for identity verification purposes.