Privacy Policy
How gt188 Protects Your Data

Introduction

gt188 operates the online casino and sportsbook platform accessible at https://gt188.pro (the "Platform"). We serve Indonesian players who prefer an English-language international gaming experience, offering live casino games, sports betting, slot gacor (high-payout slot machines), poker tournaments, and more. In delivering these services, we necessarily collect and process certain personal data about our Members and visitors.

This Privacy Policy has been prepared in accordance with internationally recognized data protection principles, including the principles of purpose limitation, data minimization, storage limitation, integrity, confidentiality, and accountability. We treat every Member's personal data with the same level of care and discretion we would want applied to our own.

Throughout this document, "gt188", "we", "us", and "our" refer to the operator of the gt188 Platform. "Member", "you", and "your" refer to any registered user of the Platform. "Personal Data" means any information relating to an identified or identifiable natural person. This Privacy Policy applies to all data collected via the Platform, our support channels, email correspondence, and any other interaction you have with gt188.

This Privacy Policy is incorporated by reference into our Terms & Conditions and forms part of the binding agreement between gt188 and each Member. We encourage you to read it in full alongside the Terms & Conditions and our Responsible Gaming Policy.

Definitions

The following definitions apply throughout this Privacy Policy. They are consistent with the definitions used in the gt188 Terms & Conditions.

Data We Collect

gt188 collects Personal Data through several distinct channels: directly from you during registration and account management, automatically through your use of the Platform, and in some cases from third-party verification and fraud-prevention services. Below is a comprehensive account of the categories of data we collect.

• Registration Data. When you create a gt188 account, we collect your full legal name, date of birth, email address, residential address in Indonesia (including city — for example Jakarta, Surabaya, Bandung, or Bali), chosen username, and the Indonesian payment method you register (bank account number with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, or Bank Permata; or e-wallet identifier with OVO, DANA, GoPay, ShopeePay, or LinkAja).
• Identity Verification (KYC) Data. To comply with our anti-money-laundering obligations and to protect all Members, we collect copies of government-issued photo identification (Indonesian KTP or passport), proof of residential address (utility bill or bank statement), and proof of payment method ownership. These documents are processed by our secure KYC verification partner and stored in an encrypted document vault.
• Financial Transaction Data. We record the details of every deposit, withdrawal, bonus credit, wagering transaction, and balance adjustment made on your gt188 account. This includes transaction amounts in Indonesian Rupiah (IDR/Rp), timestamps, payment method references, and transaction status.
• Gaming and Betting Activity Data. We log your game sessions, wager amounts, game results, sports markets bet on, and session durations. This data is used for account settlement, dispute resolution, responsible gaming monitoring, and product improvement purposes.
• Technical and Device Data. We automatically collect your IP address, browser type and version, operating system, device type (desktop or mobile), screen resolution, referring URL, pages visited, session duration, and clickstream data. This information is collected via server logs and analytics cookies.
• Communications Data. When you contact gt188 via live chat, email, or any other support channel, we retain transcripts and correspondence for quality assurance, training, dispute resolution, and compliance purposes.
• Marketing Preference Data. Where you have opted in to promotional communications, we record your marketing preferences including your chosen communication channels (email, on-platform notifications) and the types of promotions you are interested in.
• Responsible Gaming Data. Where you use gt188's responsible gaming tools — deposit limits, session timers, self-exclusion, or reality checks — we record these settings and the history of changes to them. This data is treated with the highest level of confidentiality and is accessible only by authorized compliance personnel.

How We Use Your Data

Every use of your Personal Data by gt188 is grounded in a lawful basis. The primary lawful bases we rely on are: contractual necessity (processing is required to perform the Member agreement), legal obligation (processing is required by applicable law or regulatory requirement), legitimate interests (processing is necessary for gt188's legitimate business interests, balanced against your privacy rights), and consent (where you have actively opted in to a specific use).

gt188 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects on you without human review, except where such processing is expressly permitted by applicable law or where you have provided explicit consent. Fraud-detection and AML screening systems may flag accounts for human review automatically, but final account action decisions involve a trained compliance analyst.

Six Pillars of gt188 Data Protection

These are the core data protection standards that every gt188 team member, system, and third-party partner is required to uphold when handling Member Personal Data.

Data Sharing

gt188 does not share your Personal Data with third parties except in the circumstances described below. In all cases where data is shared with a third-party processor, that processor is bound by a data processing agreement that restricts them to using the data only for the specified purpose and to the same standard of protection as gt188 itself applies.

• Payment Processors and Banking Partners. To process deposits and withdrawals in Indonesian Rupiah, gt188 shares transaction data — including account reference numbers and transfer amounts — with our integrated banking and e-wallet partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja). These institutions process data under their own regulatory obligations as licensed Indonesian financial institutions.
• Identity Verification (KYC) Providers. gt188 uses a specialist third-party KYC platform to verify Member identity documents. This provider processes document images and identity data solely for verification purposes and is contractually prohibited from using Member data for any other purpose.
• Game Studio Providers. When you play games hosted by third-party studios (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Pocket Games Soft), your in-session game data — including wager amounts and game results — is processed by those studios' game servers. Studio partners are bound by their own data protection policies and by gt188's partner agreements.
• Fraud Detection and Security Services. gt188 employs third-party fraud detection and cybersecurity tools that process Technical Data (IP addresses, device fingerprints, login patterns) to identify suspicious activity and protect the Platform and its Members from unauthorized access and financial crime.
• Regulatory and Law Enforcement Authorities. gt188 will disclose Personal Data to competent authorities where required to do so by law, court order, or regulatory instruction — for example, in connection with an anti-money-laundering investigation or an underage gambling inquiry. gt188 will notify the affected Member of such a disclosure where permitted to do so by law.
• Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of gt188's assets, Member Personal Data may be transferred to the successor entity as part of that transaction, subject to the same privacy protections described in this Policy. Affected Members will be notified of any such change via their registered email address with a minimum of 30 days' advance notice.

Data Retention

gt188 retains Personal Data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law or regulatory obligation. The following retention schedule applies to the main categories of Personal Data we hold.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized, aggregated data (which cannot be used to identify any individual) may be retained indefinitely for statistical and product development purposes.

Security Measures

gt188 implements a layered, defense-in-depth approach to information security. Our security program is designed to protect Member Personal Data against unauthorized access, accidental loss, alteration, disclosure, and destruction.

• Transport Security. All data transmitted between your browser or app and the gt188 Platform is protected by TLS 1.3 with 256-bit AES encryption. HTTP connections are automatically redirected to HTTPS. Our SSL certificate is verified and renewed on a rolling basis.
• Storage Encryption. Databases containing Personal Data and KYC documents are encrypted at rest using AES-256. Encryption keys are managed in a dedicated key management service with hardware security module (HSM) backing, separate from the encrypted data stores.
• Access Control Architecture. All internal systems follow a zero-trust, least-privilege access model. Multi-factor authentication (MFA) is mandatory for all gt188 staff accessing production systems. Access rights are reviewed quarterly and revoked immediately upon role change or staff departure.
• Network Security. The gt188 Platform is hosted behind enterprise-grade firewalls with intrusion detection and prevention systems (IDS/IPS). DDoS mitigation services are active at the network perimeter. Regular penetration testing is conducted by independent security firms.
• Vulnerability Management. gt188 maintains a continuous vulnerability scanning program. Critical and high-severity vulnerabilities are patched within 24 hours of disclosure; medium-severity within 7 days. A responsible disclosure program is available for external security researchers.
• Security Awareness Training. All gt188 personnel who handle Member data undergo mandatory data protection and security awareness training upon joining and annually thereafter. Phishing simulation exercises are conducted quarterly.
• Incident Response. gt188 maintains a documented incident response plan. In the event of a security incident, a dedicated response team is activated within 1 hour. Affected Members are notified in accordance with the breach notification commitment described in Section 4.

Cookies & Tracking Technologies

gt188 uses cookies and similar tracking technologies to deliver a functional, personalized, and secure Platform experience. The following table describes the types of cookies we use, their purpose, and their retention duration.

gt188 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform. Members may manage cookie preferences through their browser settings. Disabling strictly necessary cookies will impair or prevent access to the Platform, as these are required for session integrity and security.

International Data Transfers

The gt188 Platform is operated by an internationally licensed gaming entity. Some of the third-party processors we work with — including game studios, fraud detection services, and cloud infrastructure providers — may process data in jurisdictions outside Indonesia.

• Transfer Safeguards. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection to Indonesia's personal data protection framework, gt188 implements appropriate transfer safeguards. These include contractual clauses that impose data protection obligations on the recipient equivalent to those described in this Privacy Policy.
• Game Studio Data Processing. Third-party game studios (e.g., Evolution Gaming, Pragmatic Play) that operate the live casino and slot game servers may process in-session data in their own server jurisdictions. These studios are subject to binding data processing agreements with gt188 and are required to maintain security and confidentiality standards consistent with this Privacy Policy.
• Cloud Infrastructure. gt188's primary Platform infrastructure is hosted on enterprise-grade cloud services operating in the Asia-Pacific region, minimizing latency for Indonesian players (WIB UTC+7) while maintaining high availability and data residency within the region where possible.
• Your Rights on Transfers. You may request details of any specific international transfer of your Personal Data, including the identities of the receiving entities and the safeguards in place, by contacting our data protection contact at [email protected].

Your Privacy Rights

gt188 respects and upholds your rights in relation to the Personal Data we hold about you. The following rights are available to all Members. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request" and your registered account username. We will respond within 30 days of receiving a valid request.

• Right of Access. You have the right to request a copy of all Personal Data gt188 holds about you, together with information about how it is being used, who it has been shared with, and how long it will be retained. gt188 will provide this information in a structured, commonly used, machine-readable format upon request.
• Right to Rectification. If any Personal Data gt188 holds about you is inaccurate or incomplete, you have the right to request correction. You may update most account information directly through your gt188 account dashboard; for KYC-related data updates, please contact support.
• Right to Eras ure ("Right to Be Forgotten"). You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been unlawfully processed. Note that certain data must be retained to comply with legal obligations (e.g., AML records) and cannot be erased on request.
• Right to Restriction of Processing. In certain circumstances — for example, where you contest the accuracy of data or have objected to processing — you may request that gt188 restrict the processing of your Personal Data while the matter is under review. Restricted data is stored but not actively used.
• Right to Data Portability. Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to have that data transmitted directly to another controller where technically feasible.
• Right to Object. You have the right to object to processing of your Personal Data where gt188 relies on legitimate interests as its lawful basis. gt188 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to Withdraw Consent. Where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, use the unsubscribe link in any promotional email or contact support directly.
• Right to Lodge a Complaint. If you believe gt188 has failed to handle your Personal Data in accordance with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. gt188 encourages Members to contact us first at [email protected] so that we may attempt to resolve your concern directly and promptly.

Minors and Age Verification

The gt188 Platform is strictly intended for adults aged 21 years and older. gt188 does not knowingly collect Personal Data from individuals under the age of 21. Registration on the Platform requires a declaration that the applicant is at least 21 years of age, and all Members are subject to KYC age verification before withdrawals are processed.

• Age Gate at Registration. gt188's registration flow requires users to confirm their date of birth and attest that they are 21 years of age or older. Users who declare a date of birth indicating they are under 21 are blocked from completing registration.
• KYC Age Verification. All Members are required to complete KYC verification, which includes submission of a government-issued photo ID confirming date of birth. Accounts are restricted from withdrawal processing until KYC age verification is successfully completed.
• Discovery of Underage Registration. If gt188 discovers or has reasonable grounds to believe that a Member is under 21 years of age, the account will be immediately suspended, all wagering activity will be voided in accordance with our Terms & Conditions, and any net deposit balance will be returned to the payment method on file. Any Personal Data of the underage individual will be deleted from our systems as promptly as regulatory record-keeping obligations allow.
• Parental Controls. gt188 strongly encourages parents and guardians to use device-level parental control software to prevent minors from accessing online gambling platforms. If you share a device with a minor, always log out of your gt188 account after every session and enable a strong password or biometric lock on your device.
• Reporting Underage Access. If you have reason to believe that a minor has accessed the gt188 Platform, please report this immediately to [email protected] so that appropriate action can be taken without delay.

Policy Updates

gt188 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, Platform features, regulatory requirements, or applicable law. The "Effective Date" and "Version" indicators displayed in the hero section of this page are updated with every revision.

• Notification of Material Changes. Where an update involves a material change to how we collect, use, or share your Personal Data, we will notify you via a prominent notice on the gt188 Platform and, where feasible, via email to your registered address, at least 14 days before the revised policy takes effect.
• Minor and Clarifying Changes. Non-material updates — such as corrections of typographical errors, clarifications of existing practice, or minor structural reorganizations that do not alter the substance of any data processing activity — may be published without advance notice. The updated version date will be revised accordingly.
• Continued Use as Acceptance. Your continued use of the gt188 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you must cease using the Platform and request account closure prior to the effective date.
• Version Archive. gt188 maintains a version archive of this Privacy Policy. If you wish to review a previous version, please contact [email protected] with the subject line "Privacy Policy Version Request" and the version number or approximate date you are seeking.

Contact Us

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data by gt188, please reach out using the contact details below. All privacy-related correspondence should be directed in English for the fastest resolution, though our support team is also able to assist in Bahasa Indonesia.

Our support team serves Members across all major Indonesian cities — including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Palembang, and Makassar — and operates on Western Indonesia Time (WIB, UTC+7). For time-sensitive account security matters, live chat is always the fastest available channel.