gg8 Privacy Policy
This page describes what we collect when you use gg8 and how we keep that data protected. We at gg8 collect only the information necessary to operate our platform, process your deposits and withdrawals, and comply with banking regulations. We do not sell your data to third parties, and we do not use your information for marketing outside our own service.
When you create an account on gg8, you provide your email, name, and government-issued ID for verification. When you deposit or withdraw, we record the transaction, amount, and payment method. When you play our live-dealer tables, sportsbook, or slot games, we track your account activity and balance changes. All of this data is encrypted and stored securely on our servers.
Our policy covers what data we collect, how we use it, who has access to it, your rights, and how to contact us if you have questions. This is a legal document, but we have written it in plain language so you understand exactly what happens to your information.
What Data We Collect on gg8
We collect data in three categories: account creation, transaction records, and gameplay activity.
- Account creation: We collect your email address, full name, date of birth, and government-issued ID number. We use this information to verify your identity and prevent fraud. We store your ID document temporarily during verification and delete it once confirmed.
- Transaction records: When you deposit or withdraw, we record the date, time, amount, payment method, and account balance before and after. This creates a complete audit trail of your account activity.
- Gameplay activity: When you play a live table, place a sportsbook bet, or spin a slot game, we record the game type, stake, outcome, and balance change. We do not record video of your gameplay or monitor your personal behavior.
We also collect technical data: your IP address, browser type, device type, and approximate location (country or region level, not precise). We use this data to detect suspicious account access, prevent unauthorized withdrawals, and comply with banking regulations. For example, if your account normally accesses gg8 from Jakarta but suddenly shows activity from Semarang, we may flag it for verification.
We collect only what we need to operate gg8 securely and legally. Everything else stays private.
How We Use Your Data on gg8
We use your data for five purposes: account verification, transaction processing, fraud prevention, regulatory compliance, and service improvement.
Account verification: We verify your ID to confirm you are who you claim to be. This is required by banking regulations in Indonesia and is non-negotiable. We do not share your ID information with third parties beyond payment processors who need to confirm your identity before processing withdrawals.
Transaction processing: When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or a bank transfer (mobile banking, local payment, online payment, e-wallet), we send your account details to that payment processor so they can complete the transaction. We do not store your payment credentials—your bank or wallet provider does.
Fraud prevention: We monitor your account for suspicious activity. If we detect an unauthorized login attempt, an unusual withdrawal to a new account, or betting patterns that suggest account compromise, we lock your account and contact you immediately. This protection applies even if it means temporarily blocking a legitimate withdrawal.
Regulatory compliance: Indonesian banking regulations require us to keep transaction records for seven years. We maintain these records in secure storage and never disclose them unless required by law enforcement or a court order.
Service improvement: We analyze aggregate gameplay data to understand which games are popular, which payment methods users prefer, and where our platform has performance issues. This analysis uses anonymized data—we never identify individual players in these reports.
Who Can Access Your Data on gg8
Only a limited number of people at gg8 can access your account data. Our engineering team has access to encrypted databases for troubleshooting. Our finance team has access to transaction records to reconcile deposits and withdrawals. Our support team has access to account information to help resolve disputes or answer questions.
We use third-party payment processors to handle deposits and withdrawals. These processors receive your account name, ID number, and account balance so they can confirm your identity and process funds. We contract with these processors to keep your data confidential and never use it for any purpose beyond payment processing.
Our servers may be located outside your jurisdiction. This means your data may be stored in a different country. However, our encryption and security practices remain the same regardless of server location. We undertake the same data protection standards everywhere we operate.
- Data retention
- We keep transaction records for seven years as required by law. Account data is kept for as long as your account is active.
- Encryption
- All data in transit and at rest is encrypted using standard industry protocols. We do not store unencrypted passwords or payment details.
- Third-party access
- Payment processors receive only the data necessary to complete transactions. We do not authorize them to use your data for any other purpose.
- Legal requests
- We comply with lawful requests from Indonesian authorities. We do not disclose user data to private parties or foreign governments without legal process.
Your Rights on gg8
You have the right to know what data we hold about you. You can request a copy of your account information, transaction history, and personal data at any time. We will provide this information within one business day in a format you can read and understand.
You have the right to correct inaccurate data. If your name, email, or ID number is wrong, contact our support team and we will update it. You must provide proof of the correct information—for example, a copy of your updated ID if you have changed your legal name.
You have the right to request deletion of your account and associated data, with one exception: we must retain transaction records for seven years to comply with banking regulations. Once the seven-year retention period ends, we delete all remaining account data. If you delete your account before seven years, your data becomes inaccessible to you, but we keep transaction records in secure archive storage that is not connected to our live systems.
You have the right to know if your data has been compromised. If we detect unauthorized access to user accounts or a security breach, we notify all affected users by email within one business day. We explain what data may have been exposed and what steps we have taken to prevent further unauthorized access.
Cookies and Tracking on gg8
We use cookies to keep you logged into gg8 and to remember your preferences (such as your preferred language or theme). These cookies are essential—without them, you would have to log in every time you load a page.
We do not use tracking cookies that follow you across the internet or sell browsing data to advertisers. Our cookies stay within gg8. When you log out or close your browser, session cookies expire. Persistent cookies (which remain longer) are encrypted and do not contain sensitive information like passwords or payment details.
Contact Us About Your Data on gg8
If you have questions about our privacy practices, want to request your data, or believe we have mishandled your information, contact us via the support form on gg8. We respond to all data requests and privacy inquiries within one business day. Your privacy matters to us, and we take every concern seriously.
This policy applies to all users of gg8, whether you access the platform from Jakarta, Surabaya, Bandung, Medan, Semarang, or anywhere else where our services are available under local law. We update this policy periodically as our practices evolve. When we make material changes, we notify all active users by email and display a notice on our site for at least one month.