Privacy Policy

This Privacy Policy governs the collection, use, storage, and disclosure of personal data by gg288 (hereinafter referred to as "gg288", "we", "us", or "our") in connection with the operation of the online gaming and sportsbook platform accessible at https://gg288.lat (the "Platform").

gg288 acts as the data controller in respect of all personal data collected through the Platform. As data controller, gg288 determines the purposes for which your personal data is processed and the means by which that processing takes place. Where gg288 engages third-party service providers to process data on its behalf, those parties act as data processors and are bound by contractual obligations that require them to handle your data in accordance with this Privacy Policy and applicable data protection standards.

This Policy applies to:

• All registered Player Account holders on the gg288 platform.
• Visitors who access the Platform without registering an account.
• Individuals who contact gg288 through any support channel, including live chat and email.
• Individuals who interact with any gg288 communication, including promotional emails or notifications.

gg288 collects personal data in the categories described in the table below. We collect only what is necessary for the specific purpose identified and do not retain data beyond the periods set out in Section 6 of this Policy.

gg288 collects personal data through the following methods:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automatically: When you visit or interact with the Platform, our servers and analytics systems automatically record technical and usage data including your IP address, browser type, device identifiers, and session activity. This collection occurs regardless of whether you are logged into an account.
• From third-party payment processors: When you initiate a deposit or withdrawal, our payment processing partners transmit transaction confirmation data to gg288, which we use to credit your Balance and maintain accurate financial records.
• From identity verification services: For KYC purposes, gg288 may use third-party identity verification providers to cross-reference the documents you submit against official data sources. These providers are contractually bound to handle your data in accordance with applicable privacy standards.
• From fraud prevention services: gg288 uses third-party risk and fraud-scoring systems that may receive certain technical data (e.g., IP address, device fingerprint) to assess the risk profile of account activity. No individually sensitive data is shared with these systems beyond what is operationally necessary.

gg288 processes your personal data only where a valid legal basis exists. The primary purposes for which we process personal data, together with the corresponding legal basis, are set out below:

• Account creation and management — Processing is necessary to perform the contract between you and gg288 (the Player Agreement established by these Terms and the Privacy Policy).
• Processing deposits and withdrawals — Processing is necessary to perform the contract and to comply with financial record-keeping obligations.
• KYC identity verification — Processing is necessary to comply with gg288's legal obligations under anti-money laundering (AML) and counter-terrorism financing (CTF) standards applicable to online gaming platforms.
• Fraud detection and platform security — Processing is in gg288's legitimate interests to prevent financial crime, protect the integrity of the platform, and safeguard the interests of all players.
• Customer support — Processing is necessary to perform the contract and to respond to your requests and queries in a timely and accurate manner.
• Responsible gaming monitoring — Processing is in both gg288's legitimate interests and your vital interests to detect patterns of potentially harmful gaming behavior and to facilitate access to responsible gaming tools when appropriate.
• Marketing and promotions — Processing is based on your consent, which you may withdraw at any time by updating your communication preferences in your account dashboard or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Platform analytics and improvement — Processing is in gg288's legitimate interests to understand how the Platform is used, to identify technical issues, and to improve the user experience. Analytics data used for this purpose is aggregated or pseudonymized wherever possible.
• Legal and regulatory compliance — Processing is necessary for gg288 to comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.

gg288 does not sell your personal data. We share personal data with third parties only in the following circumstances and only to the minimum extent necessary for the specified purpose:

• Payment processors and banking partners: To facilitate deposits and withdrawals via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners receive only the data required to process your specific transaction.
• KYC and identity verification providers: Third-party verification services receive the documents and personal details you submit during the KYC process for the sole purpose of confirming your identity and age in accordance with gg288's compliance obligations.
• Fraud prevention and risk management providers: Specialized services receive limited technical data (IP address, device identifiers, behavioral signals) to assess risk and detect potentially fraudulent or collusive behavior on the platform.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a pseudonymous player identifier to facilitate game sessions, display correct balances, and return game results. These providers do not receive your full name, contact details, or financial data.
• IT infrastructure and hosting providers: Cloud hosting, content delivery, and server management services that process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: Where required by law or by a valid court order, gg288 may disclose personal data to regulatory bodies, law enforcement agencies, or courts. gg288 will notify you of such disclosures where legally permitted to do so.

gg288 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following general retention periods apply:

• Active account data: Retained for the duration of your Player Account and for a minimum of five (5) years following account closure, in compliance with standard financial record-keeping requirements applicable to online gaming operators.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in compliance with anti-money laundering obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the last interaction, unless the communication relates to a dispute or compliance matter in which case it is retained for the duration of that matter plus three (3) years.
• Technical and usage data: Retained for a maximum of thirteen (13) months in identifiable form, after which it is aggregated or deleted.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized such that it can no longer be linked to an identifiable individual.

gg288 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. Our primary security controls include:

• Transport security: All communication between your browser or app and gg288 servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. Our domain is protected by HSTS (HTTP Strict Transport Security) to prevent downgrade attacks.
• Data-at-rest encryption: Databases containing personally identifiable information are encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management service with role-based access controls.
• Access controls: Internal access to production systems and player data is governed by the principle of least privilege. All access events are logged and subject to periodic review. Multi-factor authentication (MFA) is mandatory for all gg288 staff with access to production environments.
• Penetration testing: gg288 conducts regular third-party security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: gg288 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the incident, to the extent possible.
• Password security: Player account passwords are stored as salted cryptographic hashes. gg288 staff cannot retrieve your password in plain text. If you forget your password, a reset flow will issue a new credential to your registered email address.

While gg288 takes all reasonable precautions to protect your data, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should contact gg288 support immediately if you suspect any unauthorized access to your account.

gg288 uses cookies and similar tracking technologies to operate and improve the Platform, to remember your preferences, and to analyze usage patterns. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot be used to access other data on your device.

gg288 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account balance display, and ensure secure transmission of data. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language, game layout settings, and responsible gaming tool configurations — so that you do not need to reset them on every visit.
• Analytics cookies: gg288 uses internal analytics tools that set cookies to collect aggregated data about how players navigate and use the Platform. This data is used exclusively to identify technical issues and improve the user experience. Where possible, analytics data is processed in pseudonymized form.
• Security cookies: Short-lived cookies used by our fraud detection systems to identify unusual patterns in session behavior and flag potential account security risks for investigation.

You may control cookie behavior through your browser settings. Most modern browsers allow you to block or delete cookies. However, blocking strictly necessary cookies will prevent you from logging in or using core Platform features. gg288 does not use third-party advertising or retargeting cookies.

As an individual whose personal data is processed by gg288, you hold the following rights in relation to your data. You may exercise any of these rights at any time by submitting a written request to [email protected]. gg288 will respond to all verifiable requests within 30 days.

The gg288 Platform is strictly intended for adults aged 21 years and above. gg288 does not knowingly collect personal data from individuals under the age of 21. Registration of a Player Account constitutes a representation by the registering individual that they meet this minimum age requirement.

As part of our KYC process, all players are required to submit valid government-issued identification confirming their date of birth. Any account found to belong to an individual under 21 years of age will be closed immediately, all associated balances will be forfeited, and the matter will be referred to the appropriate responsible gaming support resources.

Parents and guardians who believe that a minor may have accessed the gg288 platform or submitted personal data to gg288 without authorization are encouraged to contact our support team immediately at [email protected] so that appropriate action can be taken without delay.

gg288 is an internationally operated platform and some of the third-party service providers we use — including cloud infrastructure providers, game content studios, and identity verification services — may process your personal data in jurisdictions outside Indonesia.

Where personal data is transferred internationally, gg288 takes appropriate steps to ensure that your data receives an equivalent level of protection to that afforded within Indonesia. These steps may include:

• Entering into standard contractual data protection clauses with the receiving party that impose obligations equivalent to those in this Privacy Policy.
• Transferring data only to jurisdictions that maintain recognized adequate data protection frameworks.
• Applying additional technical safeguards — such as end-to-end encryption — for data in transit across borders.

You may request details of the specific safeguards applied to any international transfer of your personal data by contacting gg288 support at [email protected].

gg288 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. When material changes are made, gg288 will:

• Update the "Last Updated" date displayed at the top of this page.
• Display a prominent notice on the Platform for a minimum of seven (7) days following the change going live.
• Send an email notification to all registered Players with a verified email address on file, where the changes materially affect how your data is used or your rights in relation to that data.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you disagree with the changes, you should stop using the Platform and request account closure, following which your data will be retained only for the periods required by law before being securely deleted.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data gg288 holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected] — Please mark the subject line as "Privacy Request" and include your registered username and a clear description of your request. We respond to all verifiable privacy requests within 30 days.
• Live Chat: Available 24/7 directly through the Platform. For formal data subject rights requests, we recommend using email to ensure your request is properly documented and tracked.

gg288 takes all privacy enquiries seriously. Where a complaint is not resolved to your satisfaction through our internal process, you have the right to escalate the matter to the data protection authority in your jurisdiction or to seek independent legal advice.