Privacy Policy

1 Introduction

ggk33 ("we", "us", "our") operates the online betting and gaming platform accessible at https://ggk33.cam. We recognise that your personal data belongs to you, and we treat its protection as a fundamental obligation — not merely a compliance requirement.

This Privacy Policy describes our practices regarding the collection, use, storage, sharing, and deletion of personal data that you provide to us, or that we collect automatically, when you access or use the Platform. It also sets out the rights you hold over your personal data and the mechanisms available to exercise those rights.

ggk33 serves players primarily based in Indonesia and operates in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and data subject rights. Where Indonesian data protection legislation applies to specific processing activities, ggk33 will comply with those requirements.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information that directly or indirectly identifies a living individual, including name, identification number, contact details, location data, online identifiers, and financial account information.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — ggk33, which determines the purposes and means by which Personal Data is processed.
• "Data Processor" — any third party that processes Personal Data on behalf of ggk33 under a written data processing agreement.
• "Data Subject" — you, the individual whose Personal Data is being processed.
• "Cookies" — small text files placed on your device by the Platform that enable session management, preference retention, and analytical tracking.
• "KYC" — Know Your Customer; the identity, age, and document verification process conducted prior to withdrawal activation.

3 Data We Collect

ggk33 collects the following categories of Personal Data:

4 How We Collect Data

We collect Personal Data through the following mechanisms:

• Direct submission: Information you actively provide during account registration, the KYC verification process, deposit and withdrawal requests, contact form submissions, and live support conversations.
• Automated collection: Technical and behavioural data collected automatically when you access the Platform, including via server-side logging, browser cookies, web beacons, and session tracking scripts.
• Third-party identity verification partners: Where ggk33 engages accredited KYC/AML service providers to verify the authenticity of identity documents and prevent fraud, those partners may provide us with verification status and fraud risk scores derived from publicly available data sources and credit bureaus. ggk33 does not receive raw credit data or scores unrelated to identity verification.
• Payment service providers: When you deposit funds via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or other supported methods, we receive transaction confirmation data including transaction ID, amount, timestamp, and payment method identifier. We do not store full bank account numbers or e-wallet credentials on our servers.

5 How We Use Your Data

ggk33 processes your Personal Data exclusively for the following lawful purposes:

• Account creation and management: To set up and maintain your player account, enable login functionality, and store your account preferences and responsible gaming settings.
• Identity and age verification: To confirm that you are at least 21 years of age, a resident of Indonesia, and the legitimate holder of the payment methods you use. This protects both ggk33 and other players from fraud and underage gambling.
• Transaction processing: To accept deposits, process withdrawal requests, calculate balances, apply currency conversions (where applicable), and maintain accurate financial records.
• Service delivery: To enable you to place bets on sports events (including BRI Liga 1, EPL, Champions League, and other markets), access live casino games, play togel (Indonesia's traditional numbers lottery) draws, and participate in promotional offers.
• Bonus and promotion management: To determine eligibility for bonuses, track wagering requirements, distribute promotional credits, and prevent bonus abuse through multi-account detection.
• Customer support: To respond to your inquiries, resolve account issues, investigate disputes, and provide technical assistance in English or via Indonesian-speaking agents as appropriate.
• Platform security and fraud prevention: To monitor for suspicious activity patterns (such as rapid IP address changes, coordinated betting rings, or payment method fraud), detect and block automated bots, and protect the integrity of game outcomes.
• Responsible gaming enforcement: To implement deposit limits, cooling-off periods, and self-exclusion requests; to monitor play patterns that may indicate problem gambling; and to enforce the mandatory 21+ age restriction.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and gaming licence obligations, and to respond to valid legal process including court orders and regulatory inquiries.
• Platform improvement and analytics: To analyse aggregated, anonymised usage data in order to improve site navigation, optimise game offerings, identify technical issues, and enhance the overall player experience.

6 Legal Basis for Processing

Under internationally recognised data protection principles, every processing activity must have a valid legal basis. ggk33 relies on the following legal grounds:

• Contractual Necessity: Processing is required to perform the contract between you and ggk33 as set out in our Terms & Conditions. This covers account management, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing is required to comply with AML/CTF regulations, gaming licence conditions, tax reporting obligations, and valid legal process such as court orders.
• Legitimate Interests: Processing is necessary for ggk33's legitimate business interests in preventing fraud, ensuring platform security, improving service quality, and protecting the rights of other players — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on consent (such as marketing communications or optional data collection), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

7 Data Sharing & Disclosure

ggk33 does not sell, rent, or trade your Personal Data to third parties for marketing purposes. We may share your Personal Data only in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals, we share your name and payment method details with licensed payment service providers operating BCA, BRI, BNI, Mandiri, and e-wallet gateways for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
• KYC/AML verification partners: We share copies of identity documents with accredited third-party verification services that confirm the authenticity of KTP cards and assess fraud risk scores. These partners are contractually bound to process data only for verification purposes and to delete documents upon completion.
• Game providers: Aggregated, anonymised play data may be shared with licensed game studios such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft solely for game integrity monitoring and RTP (return to player) audits. Individual player identities are not disclosed.
• Legal and regulatory authorities: We may disclose Personal Data to Indonesian government agencies, international gaming regulators, law enforcement bodies, or courts where required by law, court order, or regulatory demand. This includes AML/CTF reporting obligations and responses to valid subpoenas.
• Professional advisors: We may share Personal Data on a confidential basis with our lawyers, accountants, auditors, and compliance consultants where necessary to obtain professional advice or prepare for legal proceedings.
• Corporate transactions: In the event of a merger, acquisition, asset sale, or bankruptcy proceeding involving ggk33, your Personal Data may be transferred to the successor entity, subject to the protections of this Privacy Policy.

8 Data Retention

ggk33 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following retention schedules apply:

• Active accounts: All account data, transaction records, and gaming history are retained for the duration of your account's active status plus a minimum of 7 years following account closure to comply with AML record-keeping requirements and to defend potential legal claims.
• KYC documents: Copies of identity documents (KTP, proof of payment method) are retained for a minimum of 5 years following account closure to satisfy regulatory requirements. After the retention period expires, documents are securely deleted.
• Communications records: Live chat transcripts, support emails, and complaint records are retained for 3 years to enable dispute resolution and quality assurance.
• Marketing consent records: Records of consent or withdrawal of consent for marketing communications are retained indefinitely to ensure we never contact individuals who have opted out.
• Technical logs: Server logs, IP addresses, and device identifiers are retained for 90 days for security monitoring and troubleshooting, after which they are automatically purged unless required as evidence in an ongoing investigation.

Upon expiry of the applicable retention period, Personal Data is either securely deleted or anonymised such that it can no longer identify you.

9 Data Security

ggk33 employs industry-standard technical and organisational measures to protect Personal Data from unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• SSL/TLS encryption: All data transmitted between your device and ggk33 servers is encrypted using 256-bit SSL/TLS protocols, including login credentials, financial transactions, and KYC document uploads.
• Access controls: Personal Data is accessible only to authorised ggk33 staff members whose job functions require such access. All employees are bound by confidentiality agreements and receive regular data protection training.
• Secure storage: Personal Data is stored on servers located in secure data centres with physical access restrictions, fire suppression systems, backup power supplies, and 24/7 monitoring.
• Password hashing: Account passwords are never stored in plain text. They are hashed using bcrypt with per-user salts and cannot be reversed by ggk33 staff.
• Multi-factor authentication: ggk33 staff access to production databases and administrative systems requires multi-factor authentication.
• Regular security audits: ggk33 conducts annual penetration testing and vulnerability assessments conducted by independent third-party security firms.
• Incident response plan: In the event of a data breach that poses a risk to your rights and freedoms, ggk33 will notify affected individuals within 72 hours and report the breach to relevant supervisory authorities where required by law.

10 Cookies & Tracking Technologies

ggk33 uses cookies and similar tracking technologies to enable core platform functionality, remember your preferences, and analyse usage patterns. Cookies are small text files stored on your device by your web browser.

The Platform uses the following types of cookies:

• Essential cookies: Required for login authentication, session management, secure transaction processing, and basic platform navigation. These cookies cannot be disabled without breaking core functionality.
• Preference cookies: Remember your language preference, timezone setting, odds format display, and other customisation choices to enhance your experience.
• Analytics cookies: Collect anonymised data about page views, click paths, device types, and geographic distribution (aggregated at city level: Jakarta, Surabaya, Bandung, etc.) to help us improve the Platform. We use self-hosted analytics software; no data is shared with third-party advertising networks.
• Security cookies: Detect suspicious login patterns, rapid IP address changes, and automated bot activity to protect your account from unauthorised access.

Most web browsers allow you to manage cookie preferences via the browser settings menu. Disabling essential cookies will prevent you from logging in and accessing your account. You can delete cookies from your device at any time; however, this will log you out and reset your preferences.

11 Your Rights

As a Data Subject, you hold the following rights over your Personal Data processed by ggk33:

To exercise any of these rights, contact our data protection team at [email protected] with the subject line "Data Subject Rights Request". Include your registered account username and a clear description of your request. We will respond within 30 calendar days. If your request is complex or we receive a high volume of requests, we may extend this period by an additional 30 days with notice to you.

ggk33 may require additional identity verification before fulfilling requests to ensure we do not inadvertently disclose Personal Data to an unauthorised third party.

12 Protection of Minors

ggk33 strictly prohibits the creation of accounts or participation in real-money gambling by individuals under 21 years of age. Our registration process requires users to confirm their date of birth, and KYC verification cross-references this against government-issued identity documents.

We do not knowingly collect or process Personal Data from individuals under 21. If we discover that an account has been opened by a minor, the account will be closed immediately, all wagers will be voided, and any winnings will be forfeited. Deposits made by the minor will be returned where technically and legally possible.

Parents and guardians are encouraged to use parental control software and router-level filtering to prevent minors from accessing online gambling platforms. If you become aware that a minor has registered an account on ggk33, please contact our support team immediately at [email protected].

13 Third-Party Services

The Platform integrates third-party services including payment gateways (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), game content providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Pocket Games Soft), and KYC verification partners. Each of these third parties operates under its own privacy policy, which governs how it processes data shared with it.

ggk33 conducts due diligence on all third-party service providers to ensure they maintain adequate data protection standards. However, ggk33 is not responsible for the privacy practices of third-party websites or services that you access via links from the Platform. We encourage you to review the privacy policies of any third-party service before providing Personal Data to them.

14 International Data Transfers

While ggk33 primarily serves players in Indonesia, some of our technical infrastructure, data processors, and service providers are located outside Indonesia. This may result in your Personal Data being transferred to, stored in, or processed in jurisdictions that may have different data protection laws than Indonesia.

Where we transfer Personal Data outside Indonesia, we implement appropriate safeguards including:

• Standard contractual clauses approved by international data protection authorities
• Binding corporate rules for transfers within multinational service provider groups
• Adequacy decisions confirming that the destination country provides an equivalent level of data protection

You may obtain further information about the safeguards in place for specific international transfers by contacting our data protection team.

15 Policy Amendments

ggk33 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or service offerings. Material changes will be communicated to registered players via email at least 14 days before the revised policy takes effect, and a prominent notice will be displayed on the Platform.

Continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised policy, you must cease using the Platform and may request account closure and data deletion, subject to applicable retention obligations.

The "Last Updated" date at the top of this document indicates when the most recent version became effective.

16 Contact & Complaints

If you have questions, concerns, or complaints about this Privacy Policy or ggk33's data processing practices, please contact our data protection team:

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.