Privacy Policy

This Privacy Policy ("Policy") describes how gt168 ("the Company", "we", "us", or "our"), operator of the online betting platform accessible at https://gt168.cam, collects, uses, stores, discloses, and protects the personal information of individuals ("you", "Player", or "User") who access or use our Platform.

gt168 serves primarily the Indonesian market, providing sports betting (including BRI Liga 1, EPL, Champions League, and Timnas Indonesia fixtures), live casino, togel (Indonesia's traditional numbers lottery) draws, and online slot games to registered players aged 21 and above. As a platform handling financial transactions and sensitive personal data, we take our privacy and data protection obligations extremely seriously.

By registering an account or using any part of the gt168 Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should not use the Platform and should contact our support team to close any existing account.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can be used to identify a living individual, directly or indirectly — including name, email address, phone number, national ID number, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means gt168, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of gt168, under our instructions and subject to contractual data protection obligations.
• "Cookies" means small text files stored on your device by your browser at the request of our Platform, used to remember your preferences and analyze Platform usage.
• "KYC" (Know Your Customer) means the identity and age verification process required before processing withdrawals or high-value deposits.
• "IDR / Rp" means Indonesian Rupiah, the primary currency of transactions on the Platform.

gt168 collects the following categories of personal data, depending on your level of engagement with the Platform:

gt168 collects personal data through the following channels:

• Direct input: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical and behavioral data collected automatically via server logs, cookies, pixel tags, and similar tracking technologies when you browse or use the Platform.
• Payment processors: Transaction metadata (amount, timestamp, reference number) received from payment processors when you make deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or ShopeePay. We do not receive or store full bank card numbers.
• Identity verification providers: Identity confirmation data returned by our KYC verification partners when you submit your KTP, passport, or other identity documents.
• Game providers: Game session data and Round IDs transmitted by third-party game providers (Pragmatic Play, Evolution Gaming, Microgaming, etc.) to our platform for bet settlement and audit purposes.
• Fraud prevention services: Risk signals and device fingerprint data provided by fraud detection services to protect your account from unauthorized access.

gt168 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, verify your identity and age, maintain your account settings, and provide access to the Platform's features.
• Transaction processing: To process deposits and withdrawals via your chosen payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), maintain transaction records, and generate account statements.
• KYC and regulatory compliance: To fulfill mandatory know-your-customer obligations, anti-money-laundering (AML) screening, and responsible gaming age checks.
• Game delivery and bet settlement: To connect you with our game providers, settle bets accurately, and maintain auditable records of all gaming activity.
• Customer support: To respond to your queries, resolve complaints, and provide technical assistance via Live Chat, email, or WhatsApp.
• Fraud detection and security: To monitor for suspicious activity, prevent unauthorized account access, detect bonus abuse, and protect the integrity of the Platform.
• Platform improvement: To analyze usage patterns, identify technical issues, test new features, and enhance the overall user experience for Indonesian players.
• Marketing communications: To send you promotional offers, bonus notifications, and Platform updates — only where you have explicitly opted in and subject to your right to opt out at any time.
• Responsible gaming: To monitor gaming behavior for signs of problem gambling, enforce deposit limits and self-exclusion requests, and refer players to support resources where appropriate.
• Legal and dispute resolution: To comply with applicable laws, respond to legal requests, enforce our Terms & Conditions, and resolve any disputes that may arise.

gt168 processes your personal data under one or more of the following legal grounds:

gt168 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja — to process your financial transactions. These processors receive only t he minimum data necessary to execute the transaction.
• KYC and identity verification providers: Third-party services that verify your government-issued ID (KTP or passport) and confirm your age and residential address as part of our mandatory verification process.
• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, and other licensed game studios receive your account identifier and session data solely for the purpose of delivering games and settling bets.
• Fraud prevention and security services: Specialized providers that analyze transaction patterns and device signals to detect and prevent unauthorized access, bonus abuse, and money laundering.
• IT infrastructure providers: Cloud hosting, database management, and content delivery network (CDN) providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when we are legally required or compelled to disclose data, or when disclosure is necessary to protect gt168's legal rights.
• Professional advisors: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations and who assist us in operating our business lawfully.

All third-party service providers who receive your personal data are contractually required to process it only in accordance with our instructions, maintain appropriate security standards, and not use it for any independent purpose.

gt168 uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your experience. The following categories of cookies are used:

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain parts of the Platform from functioning correctly. Withdrawing consent for analytics or marketing cookies will not affect your ability to use core Platform features.

gt168 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as standard guidelines:

When personal data is no longer required and there is no legal obligation to retain it, we will securely delete or anonymize it so that it can no longer be associated with you as an individual.

Protecting your personal data is one of gt168's highest operational priorities. We implement a comprehensive, layered security framework that includes:

• SSL/TLS encryption: All data in transit between your browser and our servers is encrypted using industry-standard TLS 1.2 or higher protocols.
• Encryption at rest: Sensitive personal data stored in our databases — including KYC documents and financial records — is encrypted using AES-256 encryption.
• Access controls: Personal data is accessible only to authorized gt168 staff with a documented, role-based business need. Access logs are maintained and reviewed regularly.
• Two-factor authentication (2FA): Internal systems containing personal data require multi-factor authentication for all staff access.
• Network security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and regular vulnerability scanning.
• Penetration testing: We conduct regular third-party penetration tests and security audits to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that may affect your personal data, gt168 will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

As a gt168 Player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days.

The gt168 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

As part of our registration and KYC process, we verify each Player's date of birth against their government-issued ID. If we become aware — through the KYC process, a third-party report, or any other means — that a Player is under 21, we will:

• Immediately suspend and permanently close the account.
• Void all bets placed and return the original deposited real-money balance (net of any withdrawals already made) to the payment source.
• Securely delete all personal data associated with the underage account within 30 days, except where retention is legally required for AML reporting purposes.
• Report the incident to relevant authorities where legally required to do so.

If you are a parent or guardian and believe that your child has registered an account on gt168, please contact us immediately at [email protected] so we can take appropriate action without delay.

As an internationally operated platform serving Indonesian players, gt168 may transfer personal data to servers and service providers located outside of Indonesia. Where such transfers occur, we ensure that your data receives an equivalent level of protection through one or more of the following safeguards:

• Standard contractual clauses: Legally binding data transfer agreements with all international service providers that impose equivalent data protection obligations.
• Adequacy decisions: Where applicable, reliance on recognized adequacy determinations that confirm a destination country provides an equivalent level of data protection.
• Binding corporate rules: Where transfers occur within our corporate group, binding internal data protection policies that apply equivalent standards across all entities.

You may request details of the specific safeguards in place for any international data transfer by contacting us at [email protected].

The gt168 Platform integrates with third-party game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and others) to deliver casino and slot content. While we carefully vet all our game providers and require them to adhere to data protection standards, their internal data practices are governed by their own privacy policies. gt168 is not responsible for the privacy practices of third-party game studios beyond the scope of our data processing agreements with them.

The Platform does not contain links to external third-party websites. Should any such links appear in the future, we will update this Policy accordingly. gt168 accepts no responsibility for the privacy practices of any external website you choose to visit independently.

gt168 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify you by:

• Displaying a prominent notice on the Platform upon your next login.
• Sending an email notification to your registered email address at least 14 days before the changes take effect.
• Updating the "Last Updated" date at the top of this page.

Your continued use of the Platform after any changes take effect constitutes your acceptance of the revised Policy. If you do not agree with the updated terms, you must discontinue use of the Platform and request account closure. We encourage you to review this Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way gt168 handles your personal data, please contact our Data Protection team using any of the following channels:

• Email: [email protected] — Please use the subject line "Privacy Inquiry" or "Privacy Rights Request" for faster routing.
• Live Chat: Available 24/7 via the website widget on gt168.cam. Our agents speak both Indonesian and English.
• WhatsApp: +62-812-3456-7890 — Available 9 AM to 11 PM WIB.

We commit to acknowledging all privacy-related inquiries within 48 hours and providing a substantive response within 30 calendar days. If your complaint remains unresolved after our internal review, you may escalate it to the relevant international data protection authority applicable to our operating jurisdiction.