Privacy Policy

1 Definitions

The following definitions apply throughout this Privacy Policy:

2 Data Controller

gg189 operates as the data controller in respect of Personal Data collected from Members and visitors through the Platform. As data controller, gg189 is responsible for determining the purposes and means of processing your Personal Data and for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all data protection enquiries, requests to exercise your rights, or concerns regarding the handling of your Personal Data, you may contact gg189 directly using the details provided in Section 16 of this Policy.

3 Data We Collect

gg189 collects the following categories of Personal Data from Members and Platform visitors:

gg189 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance (e.g., copies of a government-issued ID that may reveal national origin). Where such data is collected, it is treated with the highest level of security and access control.

4 How We Collect Data

gg189 collects Personal Data through the following channels:

• Direct Submission: Information you provide voluntarily when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a promotion.
• Automated Technologies: Data collected automatically when you access the Platform, including through cookies, web beacons, server log files, and similar tracking technologies. See Section 11 for full details on cookies.
• Third-Party Verification Providers: Identity and age verification data returned by KYC service providers following document checks. gg189 does not receive raw biometric data from these providers — only a pass/fail verification result and risk score.
• Payment Processors: Transaction confirmation data, masked payment account references, and fraud-screening signals shared by payment network partners (e.g., bank transfer confirmations from BCA, BRI, BNI, and e-wallet providers).
• Analytics Providers: Anonymised and aggregated usage statistics from analytics tools used to measure Platform performance and user behaviour patterns.

5 Lawful Basis for Processing

gg189 processes your Personal Data only where a valid lawful basis exists. The primary bases on which gg189 relies are as follows:

• Contractual Necessity: Processing required to fulfil gg189's obligations under the Terms & Conditions you agreed to at registration — including operating your Account, processing transactions, and providing customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out to pursue gg189's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, service improvement, and responsible gaming monitoring.
• Consent: Where you have given specific, informed, freely given consent to a particular processing activity — for example, receiving optional promotional communications from gg189. You may withdraw consent at any time by contacting support or updating your Account preferences, without affecting the lawfulness of processing carried out before withdrawal.

6 How We Use Your Data

gg189 uses the Personal Data it collects for the following purposes:

• Account Management: Creating, maintaining, and securing your Account; verifying your identity and age; processing login requests and Account settings changes.
• Transaction Processing: Handling deposits and withdrawals via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja); resolving payment queries.
• Fraud & Security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeovers, and other security threats; enforcing gg189's Terms & Conditions.
• Regulatory Compliance: Meeting KYC, AML, and other applicable regulatory obligations; responding to lawful requests from government authorities or regulatory bodies.
• Customer Support: Responding to queries, resolving disputes, handling complaints, and providing assistance via live chat and email.
• Platform Improvement: Analysing usage patterns to improve platform performance, game selection, and user experience — using anonymised or aggregated data where possible.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling behaviour and proactively offering responsible gaming resources where appropriate.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Members who have consented to receive such communications. All marketing emails include a clear unsubscribe mechanism.
• Personalisation: Tailoring game recommendations, bonus offers, and platform content based on your usage history and stated preferences, where you have not opted out of personalisation.

7 Data Sharing & Disclosure

gg189 may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• KYC & Identity Verification Providers: Third-party services that process identity documents and perform age and address verification checks on gg189's behalf. These providers operate under contractual data processing agreements with gg189.
• Payment Processors & Financial Institutions: Banks, e-wallet operators, and payment gateway providers involved in processing your deposits and withdrawals. Data shared is limited to what is necessary to complete the transaction.
• Fraud Prevention & AML Services: Specialist providers that screen transactions and account activity against known fraud patterns, sanction lists, and financial crime indicators.
• Customer Support Infrastructure: Providers of live chat platforms, ticketing systems, and communication tools used to deliver gg189's support services.
• Analytics & Performance Providers: Services that help gg189 understand how the Platform is used, using anonymised or pseudonymised data wherever possible.
• Regulatory & Law Enforcement Authorities: Where gg189 is legally compelled to disclose data by a court order, regulatory directive, or lawful request from a competent authority.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of gg189's business, Personal Data may be transferred to the successor entity, subject to the same privacy protections as those described in this Policy.

gg189 does not share Personal Data with any recipient for purposes beyond those described above without your explicit prior consent.

8 International Data Transfers

As an internationally operating platform, gg189 may process or store some Personal Data on servers or through service providers located outside Indonesia. Where Personal Data is transferred internationally, gg189 takes appropriate steps to ensure that such transfers are subject to adequate safeguards, including:

• Contractual data processing agreements containing standard data protection clauses with all Third-Party Service Providers handling your data.
• Selecting service providers that maintain internationally recognised security certifications (such as ISO/IEC 27001).
• Implementing technical safeguards including end-to-end encryption for data in transit and encryption at rest for stored data.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia. gg189 will always ensure that an adequate level of protection is in place before any such transfer occurs.

9 Data Retention

gg189 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods applied by gg189 are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be linked to any identifiable individual.

10 Security Measures

gg189 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and the gg189 Platform is encrypted using 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive Personal Data and financial records stored on gg189 servers are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to Personal Data within gg189 is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control systems.
• Two-Factor Authentication: Account access is protected by optional two-factor authentication (2FA), which gg189 strongly recommends all Members enable.
• Penetration Testing & Vulnerability Management: gg189 conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: gg189 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your Personal Data, gg189 will notify affected Members and relevant authorities as required by applicable law.

11 Cookies & Tracking Technologies

gg189 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage, and support security functions. The categories of cookies used on the Platform are as follows:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These cookies enable core functions such as maintaining your login session, securing your Account, and processing transactions. They cannot be disabled without severely impairing Platform functionality.
• Functional Cookies: Store your preferences (such as preferred language or currency display) to provide a more personalised experience. Disabling these cookies may result in some preferences not being retained between sessions.
• Performance & Analytics Cookies: Collect anonymised data about how visitors use the Platform — such as which pages are visited most frequently and how long sessions last. This data helps gg189 improve the Platform experience. No personally identifiable information is collected through these cookies.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious login attempts. These cookies are strictly necessary for platform integrity.

Most web browsers allow you to manage cookie preferences through the browser's settings menu. You can choose to block or delete cookies; however, disabling strictly necessary cookies will prevent you from using key Platform features including login and transactions.

gg189 does not use third-party advertising cookies or permit advertising networks to place tracking cookies on the Platform for the purpose of targeting you with advertisements on external websites.

12 Your Rights

Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to your Personal Data held by gg189:

• Right of Access: You may request a copy of the Personal Data gg189 holds about you, together with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected or updated without undue delay.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (see Section 9).
• Right to Restrict Processing: You may request that gg189 limits the processing of your Personal Data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contract, you may request that gg189 provides your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests at any time. You also have an unconditional right to object to the use of your Personal Data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact gg189 using the details in Section 16. gg189 will respond to all valid requests within 30 days of receipt. We may need to verify your identity before processing your request to protect against unauthorised access to another Member's data.

13 Minors

The gg189 Platform is strictly intended for adults aged 21 years and over. gg189 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory part of the Account registration and KYC process.

If gg189 becomes aware that Personal Data has been collected from an individual under the age of 21, that Account will be immediately suspended, all associated data will be securely deleted, and any funds deposited will be returned via the original payment method following identity confirmation.

If you are a parent or guardian and believe that a minor in your care has registered an Account on gg189 without your knowledge, please contact our support team immediately at [email protected].

14 Third-Party Links & Services

The gg189 Platform may reference or display content associated with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — whose games are hosted on gg189's platform under licence. When you play these games, your in-game activity data is processed by gg189; your identity is not shared with the game studio beyond what is necessary for game delivery and certification compliance.

gg189 is not responsible for the privacy practices of any third-party websites that may be referenced in informational content on the Platform. This Privacy Policy applies solely to Personal Data collected and processed by gg189 through the Platform at https://gg189.app.

15 Policy Amendments

gg189 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, gg189 will notify active Members via the email address registered on their Account or via a prominent notice on the Platform, at least 14 days prior to the change taking effect where practicable.

The effective date at the top of this Policy will be updated whenever changes are made. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. We encourage you to review this Policy periodically to stay informed of how gg189 protects your data.

16 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way gg189 handles your Personal Data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

For general platform support, account queries, or responsible gaming assistance, visit our FAQ page or our Responsible Gaming page. For the full legal terms governing your use of the Platform, refer to our Terms & Conditions.