Privacy Policy

1. Introduction and Scope

1.1 Who We Are

gbk999 (referred to as "we," "us," "our") operates the online betting platform accessible at gbk999.cam and related domains. We provide sports betting, live casino, slot games, lottery (togel), cockfighting streams (sabung ayam), and other gambling services to players across Indonesia and other jurisdictions where we are licensed to operate.

Our platform is licensed and regulated by international gaming authorities, and we are committed to maintaining the highest standards of data protection and privacy in accordance with our licensing requirements and applicable laws.

1.2 Scope of This Policy

This Privacy Policy applies to all personal information collected through:

• The gbk999 website (gbk999.cam) and all associated subdomains
• Mobile-optimized versions of our platform accessed via smartphone or tablet browsers
• Customer support channels including live chat, email, and phone
• Marketing communications and promotional materials
• Any other services or touchpoints where you interact with gbk999

This policy does not apply to third-party websites, services, or applications that may be linked from our platform. We are not responsible for the privacy practices of such third parties.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account, verify your identity, or use gbk999 services, you provide us with personal information including:

• Account Registration Data: Full legal name, date of birth, residential address (street, city, province, postal code), email address, mobile phone number, username, and password.
• Identity Verification Documents: Government-issued photo ID (Indonesian National Identity Card/KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and payment method verification (bank account statements, e-wallet screenshots).
• Payment Information: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga accounts), e-wallet IDs (OVO, DANA, GoPay, ShopeePay accounts), transaction history, deposit amounts, withdrawal requests, and payment method details.
• Communication Records: Content of emails, live chat messages, phone calls, and any other correspondence with gbk999 customer support or compliance teams.
• Self-Exclusion and Responsible Gaming Data: Deposit limits, loss limits, session time limits, self-exclusion periods, and problem gambling assessment responses.

2.2 Information Collected Automatically

When you access and use gbk999, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers.
• Network Information: IP address, internet service provider, approximate geolocation based on IP (city/region level, not precise GPS coordinates), and connection type (WiFi, mobile data).
• Usage Data: Pages visited, features used, games played, bets placed, time spent on platform, clickstream data, referral sources, search queries within the platform, and navigation patterns.
• Transaction Logs: Complete history of all financial transactions including deposits, withdrawals, bet placements, winnings, bonuses claimed, and account balance changes.
• Gameplay Records: Betting patterns, game preferences, favorite sports or casino games, betting amounts, win/loss ratios, and session durations.

2.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from third parties:

• Payment Processors: Transaction confirmation, payment success/failure status, fraud risk assessment, and chargeback notifications from bank partners (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Age verification, identity authentication, address validation, and fraud detection results from third-party KYC (Know Your Customer) service providers.
• Regulatory and Law Enforcement Authorities: Information provided in response to legal requests, court orders, or regulatory investigations related to anti-money laundering, fraud prevention, or other compliance matters.

3. How We Use Your Information

gbk999 uses your personal information for the following purposes:

3.1 Account Management and Service Delivery

• Create, maintain, and manage your gbk999 account
• Process your deposits and withdrawals
• Enable you to place bets and play games
• Calculate and pay out winnings
• Provide customer support and respond to your inquiries
• Send transactional notifications (deposit confirmations, withdrawal approvals, account updates)

3.2 Identity Verification and Compliance

• Verify your identity and age (minimum 21 years) to comply with licensing requirements
• Prevent underage gambling, fraud, money laundering, and terrorist financing
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Investigate and respond to suspected violations of our Terms & Conditions
• Cooperate with law enforcement and regulatory authorities as required by law

3.3 Security and Fraud Prevention

• Detect and prevent fraudulent activity, unauthorized access, and security breaches
• Monitor for suspicious betting patterns, collusion, bonus abuse, and multi-accounting
• Protect gbk999 and our players from hacking, phishing, malware, and other cyber threats
• Maintain platform integrity and ensure fair play for all users

3.4 Responsible Gaming and Player Protection

• Monitor gambling behavior for signs of problem gambling
• Enforce deposit limits, loss limits, and session time limits set by you
• Implement self-exclusion requests and prevent excluded players from accessing the platform
• Provide responsible gaming resources, reality-check reminders, and problem gambling support

3.5 Platform Improvement and Analytics

• Analyze usage patterns to improve platform performance, user experience, and game offerings
• Conduct A/B testing and product development research
• Optimize mobile responsiveness for Indonesian network conditions and device types
• Identify and fix bugs, glitches, and technical issues

3.6 Marketing and Communications (With Your Consent)

• Send promotional offers, bonus announcements, and special event notifications
• Personalize marketing messages based on your game preferences and betting history
• Provide loyalty rewards, VIP tier benefits, and exclusive promotions
• Send newsletters with industry news, responsible gaming tips, and platform updates

You can opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account settings, or contacting customer support. Opting out does not affect transactional communications (account notifications, withdrawal confirmations, security alerts), which we will continue to send as necessary for service delivery.

4. Legal Basis for Processing

Under data protection laws, gbk999 must have a lawful basis to collect and use your personal information. Our legal bases include:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing betting services as outlined in our Terms & Conditions). This includes account management, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing is required to comply with laws and regulations, including age verification, anti-money laundering checks, identity verification, tax reporting, and cooperation with regulatory and law enforcement authorities.
• Legitimate Interest: Processing is necessary for our legitimate business interests, including fraud prevention, security protection, platform improvement, and business analytics. We balance these interests against your privacy rights and only process data where our interests are not overridden by your fundamental rights.
• Consent: For certain processing activities (primarily marketing communications and non-essential cookies), we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5. Data Sharing and Disclosure

5.1 When We Share Your Information

gbk999 does not sell or rent your personal information to third parties. We share your data only in the following limited circumstances:

5.2 Service Providers and Business Partners

We share data with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive your payment information to process deposits and withdrawals.
• Identity Verification Services: KYC providers receive your identity documents to verify age, identity, and address for regulatory compliance.
• Cloud Hosting and IT Infrastructure: Secure data centers and cloud service providers host our platform and store your data with strict confidentiality agreements.
• Customer Support Tools: Live chat software and helpdesk platforms process your support inquiries and communication records.
• Game Providers: Third-party casino game studios (live dealer providers, slot game developers) may receive limited gameplay data to deliver their games through our platform.

All service providers are contractually obligated to protect your data, use it only for the purposes we specify, and maintain confidentiality. They may not use your data for their own marketing or other purposes.

5.3 Legal and Regulatory Requirements

We may disclose your information to:

• Gaming regulators and licensing authorities to demonstrate compliance with licensing conditions
• Law enforcement agencies in response to valid legal requests, court orders, or subpoenas
• Tax authorities as required by tax reporting obligations
• Financial intelligence units for anti-money laundering investigations
• Other government authorities where disclosure is required by applicable law

5.4 Business Transfers

If gbk999 is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you of such a transfer and any resulting changes to this Privacy Policy.

5.5 With Your Consent

We may share your information with third parties for purposes not described in this policy if we obtain your explicit consent to do so.

6. Data Security and Protection

6.1 Security Measures

gbk999 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS 256-bit encryption. Sensitive data stored in our databases (passwords, payment details) is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized gbk999 employees and contractors on a need-to-know basis. All personnel with data access undergo background checks and sign confidentiality agreements.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, DDoS protection, and regular security audits by independent third-party specialists.
• Secure Data Centers: Your data is stored in ISO 27001-certified data centers with physical security controls (24/7 surveillance, biometric access, redundant power and cooling).
• Regular Security Testing: We conduct penetration testing, vulnerability assessments, and security audits to identify and address potential weaknesses.
• Incident Response Plan: We maintain a documented incident response plan to quickly detect, contain, and remediate security breaches.

6.2 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if offered
• Log out after each session, especially on shared or public devices
• Do not respond to phishing emails or suspicious messages claiming to be from gbk999
• Keep your registered email and phone number secure and up-to-date
• Immediately notify customer support if you suspect unauthorized account access

6.3 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant regulatory authorities within 72 hours of becoming aware of the breach, as required by applicable data protection laws. Our notification will include the nature of the breach, the data affected, and steps you should take to protect yourself.

7. Data Retention and Deletion

7.1 How Long We Retain Your Data

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory obligations:

• Active Accounts: As long as your account remains active and you continue to use gbk999 services.
• Closed Accounts: After account closure, we retain your data for up to 7 years to comply with financial record-keeping requirements, anti-money laundering regulations, and potential legal claims or disputes.
• Transaction Records: Financial transaction data (deposits, withdrawals, bets) is retained for up to 7 years for accounting, tax compliance, and regulatory audit purposes.
• Identity Verification Documents: KYC documents are retained for the duration required by our gaming license and applicable AML regulations (typically 5-7 years after the customer relationship ends).
• Marketing Communications: If you opt out of marketing, we retain your contact information on a suppression list to ensure we do not contact you again.

7.2 Data Deletion

After the applicable retention period expires, we securely delete or anonymize your personal information using industry-standard data sanitization methods. Anonymized data (data that cannot reasonably identify you) may be retained indefinitely for analytics and research purposes.

8. Your Privacy Rights

8.1 Rights Under Data Protection Laws

Subject to applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you, including information about how we process it.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data where there is no compelling legal reason for its continued processing (subject to exceptions for legal and regulatory obligations).
• Right to Restriction: Request that we limit the processing of your data in certain circumstances (e.g., while verifying accuracy of disputed data).
• Right to Data Portability: Receive your personal data in a structured, machine-readable format and request transfer to another service provider where technically feasible.
• Right to Object: Object to processing based on legitimate interests or for marketing purposes.
• Right to Withdraw Consent: Withdraw consent for processing activities that rely on your consent (e.g., marketing communications) at any time.
• Right to Lodge a Complaint: File a complaint with a data protection supervisory authority if you believe your rights have been violated.

8.2 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer:

• Email: [email protected] or general support at [email protected] with subject line "Privacy Rights Request"
• Required Information: Include your full name, registered email address, account username (if applicable), and a clear description of your request.
• Identity Verification: For security purposes, we may require proof of identity before fulfilling your request (e.g., copy of government-issued ID matching your registered account details).
• Response Time: We will respond to your request within 30 days of verification. Complex requests may require an additional 30 days; we will notify you of any extension and the reason.

8.3 Exceptions and Limitations

Your privacy rights are not absolute. We may deny or limit your request if:

• Fulfillment would violate legal or regulatory obligations (e.g., required record retention periods)
• The request is manifestly unfounded, excessive, or repetitive
• Disclosure would adversely affect the rights and freedoms of others
• The data is necessary for the establishment, exercise, or defense of legal claims

If we deny your request, we will explain the reason and inform you of your right to lodge a complaint with a supervisory authority.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They enable websites to remember your preferences, recognize you on return visits, and analyze how you use the site.

9.2 Types of Cookies We Use

• Essential Cookies: Strictly necessary for platform functionality (session management, security, load balancing). These cannot be disabled as the platform would not function without them.
• Functional Cookies: Remember your preferences (language, timezone, display settings) and enhance user experience.
• Performance Cookies: Collect anonymous usage statistics (page views, navigation paths, error rates) to help us improve platform performance.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. Requires your consent.

9.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive alerts before a cookie is stored. Note that disabling essential cookies may impair platform functionality (e.g., you may not be able to log in or place bets).

10. International Data Transfers

gbk999 operates internationally and may transfer your personal data to countries outside Indonesia, including to our servers, data centers, and service providers located in various jurisdictions. Some of these countries may have data protection laws that differ from Indonesian laws.

When we transfer data internationally, we implement appropriate safeguards including:

• Standard contractual clauses approved by regulatory authorities
• Ensuring service providers are located in jurisdictions deemed to provide adequate data protection
• Binding corporate rules and data transfer agreements

By using gbk999 services, you consent to the international transfer of your data as described in this policy.

11. Children's Privacy

gbk999 services are intended exclusively for adults aged 21 and above. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process includes age verification, and we require users to confirm they meet the minimum age requirement.

If we discover that we have inadvertently collected personal data from a person under 21, we will delete that information immediately and close the associated account. If you believe a minor has accessed gbk999 services, please contact us immediately at [email protected].

Parents and guardians are encouraged to monitor their children's internet usage and prevent underage access to gambling platforms by using parental control software and device restrictions.

12. Changes to This Privacy Policy and Contact

12.1 Policy Updates

gbk999 reserves the right to modify this Privacy Policy at any time to reflect changes in:

• Our data processing practices or service offerings
• Applicable laws and regulatory requirements
• Industry best practices and security standards
• Corporate structure or business operations

Notification of Changes: We will notify you of material changes by email, platform notification, or prominent website announcement at least 7 days before the changes take effect. The "Last Updated" date at the top of this document indicates when the policy was most recently revised.

Acceptance of Changes: Your continued use of gbk999 services after the effective date constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you must stop using our services and may request account closure.

12.2 Contact Information

For privacy-related questions, requests to exercise your rights, or concerns about how we handle your data, please contact:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on the gbk999 platform

We will respond to all privacy inquiries within 30 days of receipt.