Privacy Policy

1. Introduction

gt018 ("we", "us", "our", or "the Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect the personal data you provide when you access and use the gt018 website located at https://gt018.cam and all associated services (collectively, the "Services"). This Privacy Policy applies to all users of the Services, including visitors, registered members, and former members.

By accessing or using the Services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, you must immediately cease using the Services and, if applicable, close your account. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Services.

gt018 operates as an internationally licensed online betting platform serving customers in Indonesia. We comply with applicable international data protection standards and implement appropriate technical and organizational measures to ensure the security and confidentiality of your personal data. We recognize that privacy is a fundamental right, and we are committed to handling your information responsibly and transparently.

2. Information We Collect

gt018 collects various types of personal information to provide, maintain, protect, and improve our Services, to develop new services, and to protect gt018 and our users. The information we collect falls into the following categories:

2.1 Information You Provide to Us

When you register for a gt018 account, you voluntarily provide us with personal information including:

• Identity Information: Full legal name as it appears on your government-issued identification, date of birth, place of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, residential address (street address, city, province, postal code), and country of residence.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery purposes.
• Identification Documents: Copies of government-issued identification such as Indonesian KTP (national identity card), passport, driver's license, or other official documents submitted during the KYC (Know Your Customer) verification process. This may include a selfie photograph holding your ID next to your face.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), payment card details (if applicable), and transaction history including deposits, withdrawals, and transfers.
• Communications: Any information you provide when you contact customer support via live chat, email, WhatsApp, or other communication channels, including the content of your messages, attachments, and metadata such as timestamps.

2.2 Information We Collect Automatically

When you access and use the Services, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system and version (Windows, macOS, iOS, Android), browser type and version (Chrome, Firefox, Safari, Edge), screen resolution, and device identifiers (IP address, MAC address where permitted).
• Log Data: Date and time of access, pages visited, features used, links clicked, referring/exit pages, search queries within the site, and errors encountered.
• Location Data: Approximate geographic location based on IP address to verify compliance with territorial restrictions and prevent fraud. We do not collect precise GPS location data unless you explicitly grant permission through your device settings.
• Gaming and Betting Activity: Records of all bets placed (sport, event, market, odds, stake amount, payout), game sessions (game title, duration, wagers, wins/losses), bonus claims and usage, and responsible gaming tool settings (deposit limits, self-exclusion status, time-out periods).
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to recognize you, remember your preferences, analyze site performance, and deliver personalized content. For details, see Section 9 (Cookies and Tracking Technologies).

2.3 Information We Receive from Third Parties

In certain circumstances, we may receive information about you from third-party sources:

• Payment Processors: Confirmation of successful deposits and withdrawals, transaction reference numbers, and payment method verification from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers.
• Identity Verification Services: Third-party KYC and identity verification providers may supply verification results, fraud risk assessments, and document authentication status to confirm your identity and prevent fraudulent account creation.
• Game Providers: Game outcome data, RTP (Return to Player) statistics, and session information from game studios such as Pragmatic Play, Evolution Gaming, PG Soft, Habanero, Microgaming, and NetEnt.
• Affiliate and Marketing Partners: If you register through an affiliate link, we may receive information about the referring source, campaign ID, and promotional code used.

3. How We Use Your Information

gt018 uses your personal information for the following purposes, each of which is necessary to provide the Services, comply with legal obligations, or pursue our legitimate business interests while respecting your privacy rights:

3.1 To Provide and Improve the Services

• Create, maintain, and manage your account
• Process deposits, withdrawals, and other financial transactions
• Enable you to place bets and play casino games
• Display your account balance, transaction history, and betting records
• Process bonus claims and track wagering requirements
• Provide customer support and respond to your inquiries
• Analyze usage patterns to improve site functionality, user experience, and game offerings
• Develop new features, products, and services tailored to Indonesian players

3.2 To Ensure Security and Prevent Fraud

• Verify your identity and age (21+ requirement for Indonesia)
• Detect and prevent fraudulent transactions, money laundering, and account abuse
• Monitor for suspicious betting patterns, collusion, bonus abuse, and use of prohibited software
• Enforce our Terms & Conditions and protect the integrity of the platform
• Investigate and resolve disputes, including chargebacks and unauthorized account access
• Maintain security logs and conduct regular security audits

3.3 To Comply with Legal and Regulatory Obligations

• Comply with KYC (Know Your Customer) and AML (Anti-Money Laundering) regulations
• Respond to legal requests from law enforcement, regulators, or courts
• Maintain records required by our international gaming license
• Report suspicious transactions to relevant authorities when legally required
• Verify compliance with territorial restrictions and age requirements

3.4 To Communicate with You

• Send transactional emails and notifications about account activity (deposits, withdrawals, bonus credits, bet confirmations)
• Provide updates about service changes, new features, or policy modifications
• Send promotional offers, bonuses, and marketing communications (you may opt out at any time)
• Conduct customer satisfaction surveys to gather feedback
• Send responsible gaming reminders and notifications about deposit limits or self-exclusion status

3.5 To Promote Responsible Gaming

• Implement and enforce deposit limits, loss limits, and session time limits you set
• Process self-exclusion and cooling-off period requests
• Monitor betting behavior for signs of problem gambling
• Provide reality check reminders and self-assessment tools
• Offer information and resources about responsible gaming and support organizations

4. Legal Basis for Processing (Applicable to Users in Jurisdictions with Data Protection Laws)

gt018 processes your personal data based on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (i.e., to provide the betting and gaming services you requested when you created an account).
• Legal Obligation: Processing is required to comply with legal obligations, including KYC/AML regulations, licensing requirements, tax reporting, and responses to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, service improvement, and direct marketing, provided these interests do not override your fundamental rights and freedoms.
• Consent: In cases where none of the above apply, we will seek your explicit consent before processing your personal data (e.g., for certain marketing activities). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. How We Share Your Information

gt018 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients in the limited circumstances described below:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks and e-wallet providers that facilitate deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Third-party KYC providers that verify your identity documents and assess fraud risk.
• Game Providers: Studios that supply casino games and slots (Pragmatic Play, Evolution Gaming, PG Soft, Habanero, Microgaming, NetEnt). These providers may receive information about your game sessions but not your full personal or financial details.
• Cloud Infrastructure Providers: Companies that host our servers and databases in secure data centers.
• Customer Support Tools: Live chat software providers and ticketing systems that enable our support team to assist you.
• Analytics and Marketing Services: Tools that help us analyze site performance, user behavior, and campaign effectiveness (these tools use pseudonymized or aggregated data where possible).

All service providers are bound by strict contractual obligations to protect your data and use it only for the specific purposes for which it was shared. They are prohibited from using your information for their own purposes or sharing it with other parties.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulators, courts, or other governmental authorities if:

• Required by law, regulation, legal process, or enforceable governmental request
• Necessary to respond to subpoenas, court orders, or similar legal instruments
• We believe in good faith that disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of our users or the public
• Required to comply with our gaming license obligations and regulatory reporting requirements

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity or third party involved in the transaction. We will notify you via email or prominent notice on the website before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with third parties when you have given explicit consent for such sharing (e.g., if you authorize us to share your data with a specific affiliate partner or participate in a joint promotion with a third-party brand).

6. Data Security

gt018 takes data security seriously and implements multiple layers of protection to safeguard your personal information from unauthorized access, alteration, disclosure, or destruction. Our security measures include:

6.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected using SSL/TLS encryption (minimum TLS 1.2). Personal and financial data stored in our databases is encrypted at rest using AES-256 encryption.
• Secure Infrastructure: Our servers are hosted in secure, ISO-certified data centers with 24/7 monitoring, physical access controls, redundant power supplies, and fire suppression systems.
• Firewalls and Intrusion Detection: Network-level firewalls, application-level firewalls, and intrusion detection/prevention systems monitor and block suspicious activity in real time.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on role-based access control (RBAC) principles. All access is logged and audited regularly.
• Secure Password Storage: User passwords are hashed using industry-standard algorithms (bcrypt with salt) and never stored in plain text.

6.2 Organizational Security Measures

• All employees and contractors with access to personal data sign confidentiality agreements and receive regular data protection training
• We conduct background checks on personnel with access to sensitive systems
• Annual third-party security audits and penetration testing are performed to identify and remediate vulnerabilities
• We maintain an incident response plan to quickly detect, contain, and respond to data breaches
• Regular backups are performed and stored in geographically separate secure locations

6.3 Your Role in Security

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password (minimum 8 characters with uppercase, lowercase, numbers, and special characters)
• Never share your password, username, or account credentials with anyone
• Log out of your account after each session, especially on shared or public devices
• Keep your registered email address and phone number secure, as they are used for account recovery
• Be vigilant against phishing attempts—gt018 will never ask for your password via email or phone
• Report any suspicious account activity or security concerns immediately to customer support

7. Data Retention

gt018 retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data type:

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with you. In some cases, we may retain aggregated or anonymized data indefinitely for statistical analysis and business intelligence purposes, but such data cannot be used to identify you personally.

8. Your Privacy Rights

You have the following rights regarding your personal data held by gt018. To exercise any of these rights, please contact our customer support team:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (typically PDF or CSV) within 30 days of your request. There is no charge for the first copy requested in a 12-month period; subsequent requests may incur a reasonable administrative fee.

8.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most of your account information directly through your account settings. For changes to verified information (name, date of birth, ID documents), you must contact customer support and may be required to provide supporting documentation.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, you withdraw consent (where consent was the basis for processing), or you object to processing. However, we may be unable to delete your data if retention is required by law, necessary to comply with legal obligations, or needed to establish, exercise, or defend legal claims. In such cases, we will restrict processing instead of deletion.

8.4 Right to Restrict Processing

You may request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data, when processing is unlawful but you prefer restriction over deletion, or when we no longer need the data but you require it for legal claims.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider, where technically feasible. This right applies to data you have provided to us with your consent or as part of our contract with you.

8.6 Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis (e.g., direct marketing, fraud prevention). Upon receiving your objection, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. You can manage marketing communication preferences in your account settings or by clicking the unsubscribe link in promotional emails.

8.8 Right to Lodge a Complaint

If you believe gt018 has not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with a supervisory authority in the jurisdiction where you reside or where the alleged infringement occurred.

9. Cookies and Tracking Technologies

gt018 uses cookies, web beacons, pixel tags, and similar technologies to enhance your experience, analyze site usage, remember your preferences, and deliver personalized content. A cookie is a small text file stored on your device by your web browser. Cookies contain information that is transferred to your device's hard drive and can be accessed by our web servers when you return to our site.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the website. These cookies enable core functionality such as security, account login, session management, and load balancing. The website cannot function properly without these cookies, and they cannot be disabled.
• Performance and Analytics Cookies: Collect information about how you use the website (pages visited, time spent, links clicked, errors encountered) to help us improve site performance and user experience. These cookies do not identify you personally; data is aggregated and anonymized.
• Functional Cookies: Remember your preferences and choices (language preference, display settings, recently viewed games, favorite sports) to provide a more personalized experience. Without these cookies, you would need to set your preferences each time you visit.
• Targeting and Advertising Cookies: Track your browsing activity across websites to build a profile of your interests and deliver more relevant advertising. These cookies may be set by gt018 or by third-party advertising networks. You can opt out of targeted advertising through your browser settings or third-party opt-out tools.

9.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may impact your ability to use certain features of the website. To manage cookies:

• Browser Settings: Configure your browser to block all cookies, accept only first-party cookies, or prompt you before accepting each cookie. Refer to your browser's help documentation for specific instructions.
• Cookie Preference Center: Use the cookie management tool available in your gt018 account settings to opt out of non-essential cookies.
• Third-Party Opt-Out Tools: Visit industry opt-out pages to control advertising cookies from multiple networks at once.

10. Third-Party Links

The gt018 website may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to such third-party sites, and we are not responsible for the privacy practices or content of external sites. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link does not imply endorsement by gt018.

11. Children's Privacy

gt018 services are strictly intended for individuals who are 21 years of age or older, in compliance with Indonesian gambling age restrictions. We do not knowingly collect personal information from anyone under the age of 21. Our KYC verification process is designed to prevent underage access. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information and permanently close the associated account. If you believe we may have inadvertently collected information from a minor, please contact us immediately.

12. International Data Transfers

gt018 operates internationally and may transfer, store, and process your personal data in countries outside of Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer your data internationally, we implement appropriate safeguards to ensure your data remains protected, including:

• Selecting data processors in jurisdictions with adequate data protection laws
• Implementing standard contractual clauses approved by recognized data protection authorities
• Ensuring encryption during transmission and at rest
• Conducting due diligence on third-party data processors to verify their security practices

By using the Services, you consent to the transfer of your information to countries outside Indonesia for the purposes described in this Privacy Policy.

13. Changes to This Privacy Policy

gt018 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will notify you by:

• Posting a prominent notice on the website homepage
• Sending an email to the address registered on your account
• Displaying a notification when you log into your account
• Updating the "Last Updated" date at the top of this document

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the changes, you must stop using the Services and close your account.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our customer support team through the following channels:

• Email: [email protected] (Privacy inquiries will be forwarded to our Data Protection Officer)
• Live Chat: Available 24/7 through the website
• WhatsApp: Available 24/7 (number displayed in your account)

We are committed to resolving privacy concerns promptly and professionally. We aim to respond to all privacy-related inquiries within 48 hours during business days. For data access requests and other formal privacy rights requests, we will respond within 30 days as required by applicable data protection regulations.