Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how gn168 ("we", "us", "our", or "the Company") collects, uses, processes, stores, shares, and protects your personal information when you access or use our gaming platform at https://gn168.cam (the "Platform" or "Services"). This policy applies to all users, including prospective players, registered account holders, and visitors to our website.

gn168 is committed to protecting your privacy and handling your personal data with the highest standards of security and transparency. We recognize the sensitivity of personal information, particularly in the context of online gaming and financial transactions, and we employ bank-grade security measures to safeguard your data throughout its lifecycle on our Platform.

By creating an account, accessing the Platform, or using our Services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you should not use our Services.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the Platform. Where this Privacy Policy conflicts with the Terms & Conditions regarding data handling, the provisions of this Privacy Policy shall prevail.

2. Data Controller Information

gn168 acts as the data controller for all personal information collected through the Platform. This means we determine the purposes for which and the manner in which your personal data is processed. We are responsible for ensuring that your data is handled in compliance with international data protection standards and the terms set forth in this Privacy Policy.

For questions, concerns, or requests related to your personal data, you may contact our Data Protection Officer at:

Email: [email protected]

Subject Line: "Data Protection Inquiry" or "Privacy Policy Question"

Response Time: We aim to respond to all data protection inquiries within 2-6 hours during business hours (08:00-20:00 WIB, Monday-Saturday) and within 24 hours for weekend or holiday requests.

3. Types of Personal Information We Collect

gn168 collects several categories of personal information necessary to provide secure gaming services, comply with legal obligations, prevent fraud, and enhance user experience. The specific data we collect includes:

3.1 Information You Provide Directly

• Account Registration Data: Full legal name (as shown on your KTP), date of birth, residential address (city, province, postal code), email address, Indonesian mobile phone number, chosen username, and password.
• Identity Verification Documents: Clear photographs or scans of your valid KTP (Kartu Tanda Penduduk) showing your full name, photograph, date of birth, and NIK (Nomor Induk Kependudukan); selfie photographs holding your KTP; and additional documentation such as utility bills or bank statements for address verification when required.
• Financial Information: Bank account numbers and account holder names for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or Bank Danamon accounts; e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja; transaction history including deposit amounts, withdrawal requests, and timestamps.
• Communication Records: Correspondence with our customer support team via email, live chat, or other communication channels including your inquiries, complaints, and our responses.
• Marketing Preferences: Your consent or objection to receiving promotional communications, newsletters, or special offers from gn168.

3.2 Information Collected Automatically

• Device and Technical Information: IP address, device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers, and mobile network information.
• Usage Data: Pages viewed, features accessed, games played, bet history, session duration, time spent on specific pages or games, clickstream data, referring/exit pages, and date/time stamps of all Platform interactions.
• Location Data: General geographic location derived from your IP address (city, province level) to ensure compliance with geographic restrictions and to provide localized customer support during Indonesian public holidays or regional events.
• Cookies and Similar Technologies: Data collected through cookies, web beacons, pixel tags, and local storage technologies to remember your preferences, authenticate your sessions, and analyze Platform performance.

3.3 Information from Third-Party Sources

• Payment Processor Data: Transaction confirmation details from our payment gateway partners handling BCA, BRI, BNI, Mandiri, and e-wallet transactions, limited to transaction status, amounts, and timestamps (we do not receive or store full bank account credentials).
• Identity Verification Services: Confirmation of document authenticity and identity validation results from third-party KYC verification providers, where applicable.
• Fraud Prevention Services: Risk assessment data from specialized anti-fraud and security services that help us detect suspicious activities, multiple account creation attempts, or potential money laundering patterns.

4. Legal Basis and Purposes for Data Processing

gn168 processes your personal information only when we have a valid legal basis to do so. The primary legal bases and corresponding purposes include:

4.1 Contractual Necessity

We process your data to fulfill our contractual obligations under the Terms & Conditions you accepted when creating your account. This includes:

• Creating and maintaining your gaming account;
• Processing deposits and withdrawals through BCA, BRI, BNI, Mandiri, and e-wallet providers;
• Providing access to sports betting, live casino, slots, and other gaming services;
• Calculating and crediting winnings to your account balance;
• Applying bonuses and promotional offers according to stated terms;
• Communicating important account-related information including transaction confirmations, balance updates, and security alerts.

4.2 Legal Obligations

We process your data to comply with legal and regulatory requirements including:

• Verifying your age to enforce the 21+ requirement mandated by Indonesian legal standards;
• Conducting Know Your Customer (KYC) verification through KTP submission to prevent identity fraud and comply with international gaming license requirements;
• Implementing anti-money laundering (AML) measures including transaction monitoring and suspicious activity reporting;
• Maintaining records for tax, accounting, and audit purposes as required by our licensing jurisdiction;
• Responding to lawful requests from government authorities or law enforcement agencies.

4.3 Legitimate Interests

We process your data based on our legitimate business interests, balanced against your privacy rights, for purposes including:

• Preventing fraud, collusion, bonus abuse, and other forms of platform manipulation;
• Detecting and preventing creation of multiple accounts or use of stolen identities;
• Analyzing Platform usage patterns to improve game selection, user interface, and customer service;
• Conducting internal research on Indonesian player preferences for bandar bola (bookmaker odds), mix parlay (accumulator) betting patterns, and popular game providers like Pragmatic Play and Evolution Gaming;
• Optimizing payment processing times for local banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay);
• Protecting our systems and data from security threats, cyberattacks, and unauthorized access attempts;
• Enforcing our Terms & Conditions and investigating potential violations.

4.4 Your Consent

For certain data processing activities, we rely on your explicit consent, which you may withdraw at any time:

• Sending you promotional emails, SMS messages, or push notifications about bonuses, tournaments, or special offers;
• Using cookies and similar tracking technologies beyond those strictly necessary for Platform functionality;
• Sharing anonymized data with third-party analytics services to improve user experience;
• Conducting customer satisfaction surveys or requesting product feedback.

5. How We Use Your Personal Information

gn168 uses your personal data for specific, legitimate purposes that are transparent to you. The primary uses include:

Purpose	Description	Legal Basis
Account Management	Creating, maintaining, and administering your gn168 account including login authentication and session management	Contractual Necessity
Identity Verification	Verifying your age (21+), identity, and address through KTP submission and selfie verification to prevent fraud and underage gambling	Legal Obligation / Legitimate Interest
Payment Processing	Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay and other supported methods	Contractual Necessity
Service Delivery	Providing access to sports betting on BRI Liga 1, EPL, La Liga, live casino, slots, and other gaming content	Contractual Necessity
Customer Support	Responding to inquiries, resolving disputes, and providing Indonesian-speaking technical assistance via live chat and email	Contractual Necessity / Legitimate Interest
Fraud Prevention	Detecting multiple accounts, collusion, bonus abuse, and suspicious betting patterns that may indicate fraud or money laundering	Legal Obligation / Legitimate Interest
Responsible Gaming	Implementing deposit limits, loss limits, self-exclusion tools, and monitoring for problem gambling indicators	Legal Obligation / Legitimate Interest
Platform Improvement	Analyzing usage data to optimize user experience, game selection, and payment processing specifically for Indonesian market preferences	Legitimate Interest
Marketing Communications	Sending promotional offers, bonuses, and newsletters via email or SMS (opt-out available at any time)	Consent
Legal Compliance	Meeting licensing requirements, responding to legal requests, and maintaining audit-compliant records	Legal Obligation

6. Data Sharing and Third-Party Disclosures

gn168 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with carefully selected third-party service providers and entities under the following circumstances:

6.1 Essential Service Providers

• Payment Processors: We share necessary transaction information with payment gateway providers that handle BCA, BRI, BNI, Mandiri bank transfers and OVO, DANA, GoPay, ShopeePay, LinkAja e-wallet transactions. These providers receive only the data required to process your deposits and withdrawals securely.
• Identity Verification Services: KYC verification providers may receive your KTP images and personal details to authenticate your identity and prevent fraud. These providers are bound by strict confidentiality agreements.
• Game Providers: When you play games from Pragmatic Play, Evolution Gaming, Microgaming, Spribe, or other software providers, your gameplay data (bets, wins, session duration) is shared with these providers to enable game functionality and maintain game integrity.
• Cloud Storage and Hosting: We use secure cloud infrastructure providers to host the Platform and store data. These providers maintain bank-grade security certifications and are contractually obligated to protect your data.
• Customer Support Tools: Live chat and customer support platforms may process your communications with our support team to facilitate quick, efficient assistance from Indonesian-speaking agents.

6.2 Legal and Regulatory Disclosures

We may disclose your personal information to government authorities, regulatory bodies, or law enforcement agencies when:

• Required by law, court order, subpoena, or other legal process;
• Necessary to comply with our international gaming license obligations;
• Required to investigate suspected fraud, money laundering, or other illegal activities;
• Necessary to protect the safety, rights, or property of gn168, our users, or the public;
• Requested by Indonesian government entities in connection with legal investigations.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity or successor organization. You will be notified of any such change via email and/or prominent notice on the Platform, and you will have the opportunity to delete your account before the transfer if you do not wish your data to be transferred.

6.4 Third-Party Safeguards

All third parties with whom we share your data are carefully vetted and bound by contractual agreements requiring them to:

• Process your data only for the specific purposes we authorize;
• Maintain appropriate technical and organizational security measures;
• Not use your data for their own purposes or share it with other parties without our authorization;
• Delete your data when it is no longer needed for the authorized purpose;
• Comply with applicable data protection laws and regulations.

7. Data Security Measures

gn168 implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security infrastructure includes:

While we implement industry-leading security measures, no system is completely invulnerable. You also play a crucial role in protecting your account by using a strong, unique password, not sharing your login credentials with anyone, logging out after each session on shared devices, and promptly reporting any suspected unauthorized access to [email protected].

8. Data Retention and Deletion

8.1 Retention Periods

gn168 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations. Specific retention periods include:

• Active Account Data: Retained for the duration of your account lifetime plus an additional period to handle potential disputes or chargebacks.
• KYC Documentation: KTP images and identity verification records are retained for five (5) years after account closure to comply with anti-money laundering regulations.
• Financial Transaction Records: Deposit, withdrawal, bet, and payout records are retained for seven (7) years to meet tax, accounting, and audit requirements.
• Communication Records: Customer support correspondence is retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing Preferences: Records of your consent or objection to marketing communications are retained indefinitely to ensure we respect your preferences.
• Security Logs: IP addresses, login attempts, and security event logs are retained for two (2) years for fraud investigation and system security purposes.

8.2 Account Deletion

You may request permanent deletion of your account and personal data by contacting [email protected] with the subject line "Account Deletion Request." Upon verification of your identity, we will:

• Permanently close your account and disable all access;
• Process any remaining balance withdrawal (subject to completing any pending wagering requirements);
• Delete or anonymize your personal information within thirty (30) days, except for data we are legally required to retain;
• Confirm deletion completion via email to your registered address.

Please note that certain data may be retained in anonymized or aggregated form for statistical analysis, and data required for legal compliance (KYC documents, transaction records) will be retained for the mandatory periods described above before deletion.

9. Your Privacy Rights

As a gn168 user, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected]:

9.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to receive a copy of that data. We will provide this information free of charge within thirty (30) days of your request.

9.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact support for assistance with KYC document updates.

9.3 Right to Erasure

You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent (where consent was the legal basis), or when you object to processing based on legitimate interests. This right is subject to our legal obligations to retain certain data.

9.4 Right to Restrict Processing

You have the right to request that we limit how we use your data in specific circumstances, such as when you contest the accuracy of the data or object to our processing while we verify our legitimate grounds.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another controller without hindrance from gn168.

9.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

9.7 Right to Withdraw Consent

Where we process your data based on consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

9.8 Right to Lodge a Complaint

If you believe gn168 has violated your privacy rights or mishandled your personal data, you have the right to lodge a complaint with the data protection authority in the jurisdiction where you reside or where the alleged violation occurred.

10. Cookies and Tracking Technologies

gn168 uses cookies and similar technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device when you visit our website. The types of cookies we use include:

10.1 Essential Cookies

These cookies are strictly necessary for the Platform to function properly. They enable core features such as secure login, session authentication, and access to restricted areas. You cannot opt out of essential cookies without losing access to the Platform.

10.2 Performance and Analytics Cookies

These cookies collect information about how you use the Platform, including pages visited, time spent on pages, game preferences, and error messages encountered. We use this data to improve Platform performance and user experience. These cookies do not identify you personally - all data is aggregated and anonymized.

10.3 Functionality Cookies

These cookies remember your preferences (language, display settings, favorite games) to provide a more personalized experience on return visits. They may also enable enhanced features like live chat support.

10.4 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling cookies may limit your ability to use certain features of the Platform. Instructions for managing cookies in popular browsers:

• Chrome: Settings > Privacy and security > Cookies and other site data
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions > Cookies and site data

11. International Data Transfers

gn168 operates internationally, and your personal data may be transferred to, stored in, and processed in countries outside Indonesia, including jurisdictions where our servers, service providers, or business partners are located. These countries may have different data protection laws than Indonesia.

When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Processing data only in countries recognized as providing adequate data protection;
• Implementing Standard Contractual Clauses (SCCs) approved by relevant data protection authorities;
• Ensuring service providers are certified under recognized data protection frameworks;
• Obtaining your explicit consent where required by law.

12. Children's Privacy

gn168 strictly prohibits use of the Platform by individuals under twenty-one (21) years of age. We do not knowingly collect, use, or disclose personal information from minors. Our age verification procedures through KTP submission are designed to prevent underage account creation.

If we become aware that a user is under 21 years old, we will immediately suspend the account, forfeit all balances, and delete all associated personal data. Parents or guardians who believe their child has provided personal information to gn168 should contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Privacy Policy

gn168 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes, we will notify you by:

• Posting a prominent notice on the Platform homepage;
• Sending an email notification to your registered email address;
• Displaying a pop-up notification when you next log into your account;
• Updating the "Last Updated" date at the top of this Privacy Policy.

Your continued use of the Platform following notification of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using the Platform and may request account deletion.

14. Contact Information for Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection team:

Email: [email protected]

Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"

Response Time: We commit to responding to all privacy-related inquiries within 2-6 hours during business hours (08:00-20:00 WIB, Monday-Saturday) and within 24 hours for requests received on weekends or Indonesian public holidays.

Live Chat: Available 24/7 through your account dashboard for general inquiries (Indonesian-speaking agents available)

For formal data subject access requests or legal inquiries, please include your full name, account username, registered email address, and detailed description of your request to help us process your inquiry efficiently.