Privacy Policy

gsg108 collects personal information through several channels — directly from you during registration, automatically as you use the Platform, and from third-party verification partners where required for KYC compliance. The categories of data we collect are set out below.

1.1 Registration & Account Data

When you open an Account on gsg108, we collect the following information that you provide directly:

• Full legal name — as it appears on your Indonesian government-issued identification document.
• Date of birth — used to verify that you meet the 21+ age requirement applicable to Indonesian players.
• Residential address — your current address within Indonesia, used for identity verification and fraud prevention.
• Email address — used for Account communications, security alerts, and (where consented) marketing messages.
• Contact number — used for two-factor authentication and support communications.
• Username and encrypted password — passwords are stored using one-way cryptographic hashing; gsg108 staff cannot read your plain-text password.

1.2 KYC & Identity Verification Data

Before processing your first withdrawal, gsg108 requires documentary evidence of identity in accordance with international AML standards. KYC documents we may collect include:

• Indonesian National ID Card (KTP), Passport, or Driver's License (SIM) — front and back images.
• Proof of address dated within three months — utility bill, bank statement, or official correspondence issued at your Indonesian address.
• Bank account or e-wallet screenshots confirming ownership of the payment method used (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja).
• Selfie photograph alongside your identity document, requested in higher-risk scenarios.

1.3 Financial Transaction Data

Every deposit and withdrawal you make on gsg108 generates a transaction record, which includes the amount (denominated in IDR), the timestamp (in WIB, UTC+7), the payment channel used, and the transaction reference ID. gsg108 does not store complete card numbers or e-wallet credentials — payment tokenization is handled by our licensed payment processor partners.

1.4 Gameplay & Wagering Data

We maintain a detailed log of your wagering activity on the Platform, including game sessions, bet amounts, outcomes, and bonus redemptions. This data is used to calculate winnings accurately, audit game fairness, fulfill regulatory record-keeping obligations, and deliver personalized promotional offers where you have consented to marketing communications.

1.5 Technical & Device Data

When you access gsg108, our servers and analytics infrastructure automatically collect the following technical information:

• IP address — used for geo-compliance checks, fraud detection, and session security.
• Device identifiers — browser type and version, operating system, device model, and screen resolution.
• Session data — pages visited, session duration, click-path, and referral source.
• Cookies and local storage — see Clause 5 for full details on our cookie usage.

1.6 Communications Data

When you contact gsg108 via live chat, email at [email protected], or any other channel, we retain a record of that interaction — including your messages, our responses, and any attachments submitted — for quality assurance, staff training, and dispute resolution purposes.

gsg108 uses the personal data it collects for clearly defined purposes. We do not repurpose your data for uses materially incompatible with those purposes without seeking fresh consent. The primary purposes for which we process your data are:

Every data-processing activity carried out by gsg108 rests on one or more recognized lawful bases. We rely on the following bases as applicable to each processing purpose:

• Contractual Necessity: Processing required to fulfill the Terms & Conditions you entered into when opening your Account — including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable AML regulations, KYC requirements, age-verification mandates, and internationally recognized gaming-license conditions. gsg108 cannot waive these obligations at a player's request.
• Legitimate Interests: Processing undertaken in pursuit of gsg108's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, dispute resolution, and service-quality improvements. We conduct a balancing test before relying on this basis.
• Consent: Processing for purposes where you have freely given, specific, informed, and unambiguous consent — primarily direct marketing communications and the use of non-essential analytics cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

gsg108 does not sell your personal data. We share your information only with the categories of third parties set out below, and only to the extent necessary for the stated purpose:

4.1 Payment Processors

To execute your deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja, and QRIS, gsg108 shares transaction reference data with our licensed payment processor partners. These partners are contractually bound to process your payment data solely for transaction execution and are prohibited from using it for any secondary purpose.

4.2 KYC & Identity Verification Partners

gsg108 uses third-party identity verification services to conduct automated and manual KYC checks. Your identity documents and biometric data (where applicable) are shared with these partners under strict data-processing agreements. KYC partners are prohibited from retaining your documents beyond the period required to complete verification.

4.3 Game Content Providers

Licensed game studios — including Evolution Gaming, Pragmatic Play, PGSoft (Pocket Games Soft), Microgaming, NetEnt, Spribe, and others — may receive pseudonymized session identifiers necessary to deliver their game content within the Platform. Game providers do not receive your name, address, payment details, or identity documents.

4.4 Fraud Prevention & AML Services

To detect and prevent fraud, money laundering, and multi-accounting, gsg108 may share technical identifiers (IP address, device fingerprint, behavioral data) with specialist fraud-prevention platforms. These services process data under gsg108's instructions as data processors.

4.5 Legal & Regulatory Disclosure

gsg108 will disclose personal data to law enforcement agencies, regulatory authorities, courts, or other competent bodies where required to do so by law, court order, or in connection with legal proceedings. Where legally permitted, we will notify you of such a disclosure request before complying.

4.6 Business Transfers

In the event that gsg108 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may form part of the transferred assets. We will notify all active Account holders via email prior to any such transfer taking effect and provide an opportunity to close your Account if you do not wish your data to be transferred.

gsg108 uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform efficiently, maintain session security, and improve your experience. The categories of cookies we use are:

You may manage your cookie preferences at any time through your Account settings. Note that disabling functional or strictly necessary cookies may impair certain Platform features. Opting out of analytics and marketing cookies does not affect your ability to use the Platform or qualify for bonuses.

gsg108 retains personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Our standard retention schedules are as follows:

• Active Account data: Retained for the duration of your Account relationship with gsg108, plus a minimum of 5 years following Account closure — in line with AML record-keeping requirements applicable to our licensing jurisdiction.
• KYC documents: Retained for a minimum of 5 years from the date of verification, or 5 years from Account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, to satisfy financial audit and AML obligations.
• Customer support communications: Retained for 3 years from the date of the last interaction, to support dispute resolution and staff training.
• Technical & device log data: Retained for 12 months from collection, after which it is automatically purged or anonymized.
• Marketing consent records: Retained for 3 years from the date consent was given or withdrawn — as evidence of compliance with consent obligations.

Where retention is based solely on our legitimate interests rather than a legal obligation, we may reduce retention periods upon a verified deletion request from you, subject to the conditions set out in Clause 8.

gsg108 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our core security measures include:

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, gsg108 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

As a player on gsg108, you hold the following rights over your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your Account username and registered email address for identity verification.

gsg108 will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for the delay within the initial 30-day window.

gsg108 is strictly an adults-only platform. You must be at least 21 years of age to register an Account or use the Services. This age threshold applies to all players regardless of location within Indonesia — whether in Jakarta, Surabaya, Bali, Bandung, Yogyakarta, Medan, or elsewhere.

We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a player has provided false date-of-birth information during registration to circumvent our age controls, we will immediately suspend the Account, delete the associated personal data to the extent legally permissible, and forfeit any Account Balance in accordance with our Terms & Conditions.

If you are a parent or guardian and have reason to believe that a minor has created an Account on gsg108, please contact us immediately at [email protected] with the subject line "Minor Account Report". We take such reports with the highest priority and will investigate and act within 48 hours.

gsg108 is an internationally licensed platform. As such, some of your personal data may be transferred to, stored in, or processed by servers and service providers located outside Indonesia. This can occur, for example, when KYC verification is conducted by a partner operating data centers in another country, or when game-session data is processed by a studio's servers in Malta, Gibraltar, or the Isle of Man.

Whenever personal data is transferred internationally, gsg108 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding the protections applicable under internationally recognized data-protection frameworks. These safeguards include:

• Contractual protections: All third-party data processors and sub-processors operating outside Indonesia are bound by written data-processing agreements that impose obligations equivalent to those applicable to gsg108 itself — including data minimization, purpose limitation, security requirements, and breach notification obligations.
• Technical protections: Data transmitted across borders is encrypted in transit using TLS 1.3. Access to transferred data is subject to the same role-based access controls and logging requirements that apply to data held domestically.
• Vendor due diligence: Before engaging any sub-processor that will handle personal data of Indonesian players outside Indonesia, gsg108 conducts a documented transfer impact assessment to identify and address any risks arising from the destination jurisdiction's legal environment.

If you would like further information about the specific safeguards in place for any particular international transfer, please contact our support team at [email protected] with the subject line "International Transfer Enquiry".

gsg108 reviews this Privacy Policy on a quarterly basis and updates it as necessary to reflect changes in the Platform's services, applicable data-protection standards, regulatory requirements, or our internal data-handling practices. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the Platform homepage and within the Account dashboard for a minimum of 14 days prior to the new version taking effect.
• Send an email notification to the address registered to your Account where the changes materially affect your rights or our obligations toward you.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of, and agreement to, the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request Account closure by contacting [email protected].

Non-material changes — such as typographical corrections, formatting adjustments, or clarifications that do not alter the substance of the Policy — may be made without prior notice and will be reflected simply by updating the "Last Updated" date.

If you have any questions, concerns, or complaints about how gsg108 collects, uses, or protects your personal data, or if you wish to exercise any of the rights described in Clause 8, please reach out to our support team. We are available 24 hours a day, 7 days a week — including Indonesian public holidays such as Idul Fitri, Imlek, and Indonesian Independence Day (17 August).