Privacy Policy — ggg88

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "Platform" means the ggg88 website at https://ggg88.cam, including all subdomains and mobile-optimized versions.
• "Company," "ggg88," "we," "us," or "our" means the internationally licensed entity that owns and operates the Platform.
• "Player," "you," or "your" means any individual who accesses, registers on, or uses the Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, location data, online identifiers, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means ggg88 as the entity that determines the purposes and means of processing your Personal Data.
• "Third-Party Processor" means any third-party entity that processes Personal Data on behalf of ggg88 pursuant to a written data processing agreement.
• "KYC" means Know Your Customer, the identity and age-verification process applicable to all Players prior to withdrawal of funds.
• "Cookies" means small text files placed on your device by the Platform to store session, preference, and analytics data.

2.1 ggg88 collects the following categories of Personal Data in the course of providing its services to you:

2.2 ggg88 does not collect or store sensitive categories of Personal Data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming support interaction.

2.3 We do not collect full payment card numbers or full bank account credentials. All payment data is tokenized and handled exclusively by our PCI-DSS-compliant payment processor partners.

3.1 Directly from You. The majority of Personal Data ggg88 holds is provided directly by you in the following circumstances:

• Completing the account registration form on the Platform;
• Submitting KYC documents for identity and age verification;
• Making a deposit or requesting a withdrawal, which requires you to provide payment method details;
• Contacting the customer support team via live chat or email;
• Completing responsible gaming assessment forms or self-exclusion requests;
• Participating in promotions or completing bonus claim forms.

3.2 Automatically via the Platform. When you access and use the Platform, certain Technical Data and Usage Data is collected automatically via server logs, session management systems, and analytics tools. This includes your IP address, device fingerprint, and behavioral interaction data. This collection is necessary for the Platform to function securely and to detect fraudulent or suspicious activity.

3.3 From Third Parties. In limited circumstances, ggg88 may receive Personal Data about you from third-party sources, including:

• KYC and identity verification service providers who confirm identity document authenticity;
• Payment processors who confirm transaction status and flag suspicious payment activity;
• Fraud detection and anti-money-laundering screening services;
• Publicly available sources, such as sanctions lists and politically exposed persons (PEP) databases, reviewed as part of enhanced due diligence.

4.1 ggg88 processes your Personal Data only where a lawful basis for doing so exists. The following table sets out our primary processing purposes and the corresponding legal basis for each:

4.2 Where ggg88 relies on legitimate interests as its legal basis, we have conducted a balancing assessment and are satisfied that our processing interests do not override your fundamental privacy rights. You have the right to object to processing carried out on this basis — see Section 9 for details.

4.3 Where ggg88 relies on consent as its legal basis (primarily for promotional communications), you may withdraw that consent at any time by updating your communication preferences in the Account dashboard or by contacting customer support.

5.1 ggg88 does not sell your Personal Data. We share Personal Data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: We share transaction-relevant data with payment processing partners including integrations supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors handle payment data under their own PCI-DSS compliance frameworks and are contractually prohibited from using your data for any purpose other than payment processing.
• KYC & Identity Verification Providers: We share identity documents and data with licensed KYC verification service providers to confirm your identity and age. These providers operate under data processing agreements with ggg88 and are bound by strict confidentiality obligations.
• Fraud & AML Screening Services: Transaction data and identity data may be shared with anti-fraud and anti-money-laundering screening platforms to protect the integrity of the Platform and comply with applicable regulations.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive anonymized session data to ensure fair game delivery. No personally identifiable data is shared with game studios beyond what is technically necessary for game delivery.
• Legal and Regulatory Authorities: ggg88 will disclose Personal Data to law enforcement, regulatory authorities, or courts where required to do so by applicable law, a valid legal order, or to protect the rights, property, or safety of ggg88, its players, or the public.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving ggg88, Personal Data held by ggg88 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via a Platform notice prior to its completion.

6.1 The Platform uses cookies and similar tracking technologies to ensure the correct and efficient operation of the site, maintain your logged-in session, remember your preferences, and collect aggregated analytics data about how players interact with the Platform.

6.2 The following categories of cookies are deployed on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in during a browsing session. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language selection, display settings, and responsible gaming tool configurations. These are set for your convenience and persist between sessions.
• Analytics Cookies: Collect anonymized or aggregated data about Platform usage — pages visited, features used, session duration — to help us understand how the Platform is used and improve it over time. No personally identifiable data is shared with analytics platforms.
• Security Cookies: Used by our fraud detection systems to identify suspicious device behavior and protect your account from unauthorized access attempts.

6.3 You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the Platform. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

7.1 ggg88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements.

7.2 The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five years following permanent Account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, consistent with AML and financial compliance obligations.
• KYC Documents: Retained for the duration of the Account relationship and for five years following Account closure. Documents may be retained for a longer period where required by a specific regulatory or legal obligation.
• Customer Support Communications: Retained for three years from the date of the last interaction, to support dispute resolution and quality assurance.
• Technical and Usage Data: Retained in aggregated or anonymized form for up to two years for analytics and platform improvement purposes. Raw session logs are retained for up to 12 months and then purged or anonymized.
• Marketing Consent Records: Retained for the duration of consent and for three years following withdrawal of consent, to demonstrate compliance with consent obligations.

7.3 Where Personal Data is no longer required for any lawful retention purpose, ggg88 will securely delete or irreversibly anonymize it in accordance with our internal data disposal procedures.

8.1 ggg88 implements a layered information security framework designed to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational security measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is protected by 256-bit SSL/TLS encryption. HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive Personal Data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within ggg88's systems is restricted to authorized personnel on a need-to-know basis, enforced through role-based access control (RBAC) policies and multi-factor authentication on all internal systems.
• Intrusion Detection: Our infrastructure is monitored continuously by automated intrusion detection and anomaly-detection systems. Security events are escalated to our security team in real time.
• Penetration Testing: The Platform undergoes periodic third-party security penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: ggg88 maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify affected Players and relevant authorities within the timeframes required by applicable law.

8.2 While ggg88 takes all reasonable technical precautions, no internet transmission or electronic storage system is completely impenetrable. You are responsible for maintaining the security of your Account credentials. If you suspect that your Account has been compromised, contact our 24/7 support team immediately via live chat.

9.1 As a player based in Indonesia or another jurisdiction that recognizes individual data rights, you hold the following rights with respect to your Personal Data held by ggg88:

• Right of Access: You may request a copy of all Personal Data ggg88 holds about you, together with information about how that data is being used.
• Right of Rectification: You may ask ggg88 to correct Personal Data that is inaccurate or incomplete. For Account information, many details can be updated directly in your Account settings; for KYC data, corrections must be requested via customer support.
• Right of Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you have withdrawn consent and no other legal basis applies; or (c) the data has been processed unlawfully. Please note that some data must be retained for legal compliance purposes even following an erasure request.
• Right to Restriction of Processing: You may ask ggg88 to restrict the processing of your data in certain circumstances, such as while the accuracy of your data is being verified following a rectification request.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing of your Personal Data where ggg88 relies on legitimate interests as its legal basis. You also have an unconditional right to object to processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

9.2 How to Exercise Your Rights. To exercise any of the rights listed above, please contact the ggg88 data protection team via email at [email protected] with the subject line "Data Rights Request." Please include your Account username and a description of the right you wish to exercise. We will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days.

9.3 ggg88 will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We will notify you if a fee applies before processing your request.

10.1 The Platform is strictly intended for adults aged 21 years and older. ggg88 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Account registration requires confirmation that the applicant is at least 21 years of age, and KYC verification is used to enforce this requirement.

10.2 If ggg88 becomes aware that it has inadvertently collected Personal Data from a person under the age of 21, we will take immediate steps to delete that data, close the associated Account, and return any deposited funds to the source payment method where technically possible.

10.3 If you are a parent or guardian and believe that a minor in your care has accessed or registered on the Platform, please contact us immediately via live chat or at [email protected]. We treat all underage access reports with the highest priority.

11.1 ggg88 operates internationally, and your Personal Data may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection as Indonesia. Such transfers are necessary for the operation of the Platform and the provision of our services to you.

11.2 Where Personal Data is transferred outside of Indonesia to a jurisdiction that does not provide an equivalent standard of data protection, ggg88 will implement appropriate safeguards, which may include:

• Standard contractual clauses approved by relevant data protection authorities;
• Binding corporate rules where transfers are made within the ggg88 corporate group;
• Transfers to countries that have been assessed as providing an adequate level of data protection.

11.3 You may request details of the safeguards applicable to a specific cross-border transfer by contacting us at [email protected].

12.1 ggg88 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect your rights or the way we process your Personal Data — will be communicated to you via a prominent notice on the Platform and, where you have a registered Account email address, via direct email notification, at least seven days before the changes take effect.

12.2 Minor or administrative updates (such as clarifications to existing language or corrections of typographical errors) may be made without prior notice. The "Last Reviewed" date at the top of this document will be updated on every revision.

12.3 Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not accept the revised terms, you should discontinue use of the Platform and contact customer support to close your Account.

12.4 The current version of this Privacy Policy is always accessible at https://ggg88.cam/privacy-policy.

13.1 If you have any questions, concerns, or complaints about this Privacy Policy or about how ggg88 processes your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 on the Platform. Recommended for time-sensitive queries regarding account data or suspected unauthorized access.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate. Response time is within 24 hours for standard queries and within 5 business days for formal rights requests .
• Support Hours: 24/7 (WIB / UTC+7). Native Indonesian-speaking agents are available at all times for players based in Jakarta, Surabaya, Medan, Bandung, Bali, and across the archipelago.

13.2 Data Protection Officer. ggg88 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. Formal data protection correspondence, including rights requests and complaints, may be directed to the DPO via the email address above, clearly marked "For the Attention of the Data Protection Officer."

13.3 ggg88 is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response to a complaint, you may have the right to escalate the matter to a competent data protection supervisory authority in your jurisdiction.