Privacy Policy — gg368

This Privacy Policy describes how gg368 ("we", "us", or "our") collects, uses, processes, stores, and protects the personal information of users ("you", "your") who access or use the gg368 platform at https://gg368.cam.

By creating an account on gg368, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Privacy Policy, you must immediately cease using the platform and contact us to close your account.

This Privacy Policy should be read in conjunction with gg368's Terms & Conditions and Responsible Gaming Policy, which together form the complete set of governing documents for your use of gg368.

gg368 is the data controller responsible for the personal information you provide to us. This means we determine the purposes for which, and the manner in which, your personal data is processed.

gg368 operates under an international gaming license and complies with internationally recognized data protection principles, including those set out in the General Data Protection Regulation (GDPR) where applicable to our operations.

For all data protection inquiries, including exercising your privacy rights or lodging complaints, please contact our Data Protection Officer using the contact details provided in Section 14 of this policy.

gg368 collects several categories of personal data to operate the platform, provide services to you, comply with legal obligations, and improve user experience. The data we collect falls into the following categories:

3.1 Special Categories of Data

gg368 does not intentionally collect special categories of personal data (also known as sensitive personal data) such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for unique identification, health data, or data concerning sexual orientation. However, in rare cases, such data may be inadvertently disclosed in free-text communication fields (e.g., live chat messages). If this occurs, the data will be handled with heightened security and deleted when no longer needed.

gg368 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your gg368 account; to authenticate your identity when you log in; to manage your account settings and preferences.
• Transaction Processing: To process deposits, withdrawals, wagers, and payouts; to maintain accurate financial records; to reconcile accounts with payment service providers.
• Regulatory Compliance: To verify your age and identity (KYC); to comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations; to fulfill reporting requirements under applicable gaming regulations; to respond to lawful requests from regulatory authorities or law enforcement.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct; to monitor platform integrity and investigate suspicious transactions or gameplay patterns; to protect gg368 and other users from harm.
• Service Improvement: To analyze how users interact with the platform; to identify bugs, performance issues, or areas for enhancement; to develop new features and optimize user experience.
• Customer Support: To respond to your inquiries, complaints, or support requests; to troubleshoot technical issues; to provide responsible gaming guidance when requested.
• Marketing & Communications: To send you promotional offers, bonus announcements, and product updates (subject to your consent where required); to inform you of changes to our terms, policies, or services.
• Responsible Gaming: To enforce deposit limits, loss limits, and other player-protection tools you have set; to monitor for signs of problem gambling and intervene where appropriate; to process self-exclusion requests.
• Legal Obligations: To comply with applicable laws, regulations, court orders, or government requests; to enforce our Terms & Conditions; to defend or pursue legal claims.

gg368 processes your personal data on the following legal bases, as applicable under data protection law:

• Contractual Necessity: Processing is necessary to perform the contract between you and gg368 (i.e., the Terms & Conditions you accepted when registering). This includes account management, transaction processing, and service delivery.
• Legal Obligation: Processing is necessary for gg368 to comply with legal or regulatory requirements, including KYC/AML obligations, age verification, and cooperation with lawful government requests.
• Legitimate Interests: Processing is necessary for gg368's legitimate business interests, such as fraud prevention, security monitoring, service improvement, and enforcement of platform rules — provided these interests do not override your fundamental rights and freedoms.
• Consent: Where required by law, processing is based on your explicit consent — for example, when sending you marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

gg368 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we may share your personal information with the following categories of recipients where necessary to provide our services or comply with legal obligations:

6.1 Payment Service Providers

To process deposits and withdrawals, gg368 shares necessary financial data (your name, bank account or e-wallet identifier, transaction amount) with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers process your data under their own privacy policies and terms of service.

6.2 Game Studios & Software Providers

When you play casino games or slots, limited gameplay data (user ID, wager amounts, game outcomes) is shared with the respective game studio (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft, etc.) to deliver the gaming experience and ensure fairness. No personally identifiable information beyond what is necessary for the game session is shared.

6.3 Compliance & Security Partners

gg368 works with third-party compliance and fraud-prevention services to verify identities, screen for money laundering risks, and detect prohibited conduct. These partners process data under strict confidentiality agreements and data processing terms.

6.4 Regulatory & Legal Authorities

gg368 may disclose personal data to regulatory authorities, law enforcement agencies, courts, or government bodies when required by law, regulation, legal process, or governmental request; or when necessary to protect the rights, property, or safety of gg368, our users, or the public.

6.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the successor entity. You will be notified of any such change via email and will have the opportunity to close your account if you do not wish your data to be transferred.

gg368 operates internationally and may transfer your personal data to servers and service providers located outside Indonesia. Where such transfers occur, gg368 ensures that your data is protected by implementing appropriate safeguards, including:

• Contractual data processing agreements incorporating Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.
• Transferring data only to jurisdictions that have been recognized as providing an adequate level of data protection.
• Implementing technical and organizational security measures equivalent to those used within Indonesia.

For more information about the safeguards we use for international data transfers, or to obtain a copy of the relevant transfer mechanisms, please contact our Data Protection Officer using the details in Section 14.

gg368 takes data security seriously and has implemented comprehensive technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and gg368's servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data at rest (including passwords and financial information) is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who require access to perform their job functions. All access is logged and regularly audited.
• Authentication: gg368 offers two-factor authentication (2FA) to add an extra layer of security to your account. We strongly recommend enabling this feature.
• Regular Security Audits: gg368's infrastructure undergoes regular penetration testing and security assessments by independent third-party auditors.
• Incident Response: gg368 maintains a data breach response plan to detect, investigate, and respond to security incidents. In the event of a data breach affecting your personal information, we will notify you and relevant authorities in accordance with applicable law.

Despite these safeguards, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and should immediately notify gg368 if you suspect unauthorized access to your account.

gg368 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data category:

• Account Information: Retained for the duration of your active account, plus 7 years following account closure to comply with financial and gaming regulatory requirements.
• Transaction Records: Retained for 7 years following the transaction date, as required by anti-money laundering regulations and tax law.
• KYC Documentation: Retained for 7 years following account closure or the date of last verification, whichever is later.
• Communication Records: Retained for 3 years following the date of communication, or longer if required for ongoing dispute resolution.
• Marketing Data: Retained until you withdraw consent or request deletion, or for 2 years following your last interaction with marketing communications, whichever comes first.
• Usage Data & Analytics: Aggregated and anonymized usage data may be retained indefinitely for statistical analysis and service improvement purposes.

At the end of the applicable retention period, personal data will be securely deleted or anonymized such that it can no longer be associated with you.

Subject to applicable data protection law, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data gg368 holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update most account information directly in your account settings.
• Right to Erasure (Right to be Forgotten): In certain circumstances, you may request deletion of your personal data — for example, if the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent. Note that we may be required to retain certain data to comply with legal obligations.
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain situations — for example, while we verify the accuracy of data you have contested.
• Right to Data Portability: You have the right to receive your personal data in a portable format and to request that we transfer it to another service provider where technically feasible.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, provided you can demonstrate grounds relating to your particular situation.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: If you believe gg368 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with a data protection supervisory authority.

To exercise any of these rights, please contact gg368's Data Protection Officer using the contact details in Section 14. We will respond to your request within 30 days (or within the timeframe required by applicable law).

gg368 uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content. A cookie is a small text file placed on your device that allows us to recognize you on return visits.

Types of Cookies We Use:

• Essential Cookies: Required for the platform to function properly — for example, to keep you logged in during a session. These cannot be disabled without breaking core functionality.
• Analytical Cookies: Help us understand how users interact with gg368 by collecting aggregated usage statistics. This data is used to improve platform performance and user experience.
• Functional Cookies: Remember your preferences and settings (e.g., language, layout preferences) to provide a more personalized experience.
• Marketing Cookies: Track your browsing behavior across sessions to deliver targeted promotional offers and measure the effectiveness of marketing campaigns. These cookies are only placed with your consent.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit your ability to use some features of the gg368 platform. For more details on our cookie practices, please refer to our Cookie Policy (available within the platform).

gg368 is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. All users are required to verify their age during the KYC process by providing government-issued identification.

If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that information and close the associated account. Any deposits made will be returned to the original payment method, less any administrative fees incurred.

Parents and guardians who believe their child has provided personal information to gg368 should contact us immediately using the details in Section 14.

gg368 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to registered users via email at least 14 days before the new policy takes effect, unless immediate changes are required by law.

The "Last Updated" date at the top of this page indicates when the policy was most recently revised. We recommend reviewing this Privacy Policy periodically to stay informed of how we protect your data.

Your continued use of the gg368 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should close your account prior to the effective date.

For questions, concerns, or requests related to this Privacy Policy or how gg368 handles your personal data — including exercising any of your privacy rights set out in Section 10 — please contact our Data Protection Officer:

• Email: [email protected] (mark your email subject line "Privacy Inquiry" for faster routing)
• WhatsApp: +62 811 0368 368 (available 07:00–24:00 WIB)
• Live Chat: Available 24/7 via the gg368 platform interface

We aim to respond to all privacy-related inquiries within 14 business days. For urgent data protection concerns, please indicate "URGENT" in your message subject line.