At gt0108, protecting your personal data is a core responsibility — not an afterthought. This Privacy Policy explains exactly what data we collect, why we collect it, how we use and store it, and what rights you have as a player based in Indonesia.
Last Updated: 1 January 2026These six principles guide every decision we make about your personal data on the gt0108 platform.
All data transmitted between your device and gt0108's servers is protected by industry-standard TLS 1.3 encryption. Stored personal data, including KYC documents, is encrypted at rest using AES-256. Your information is never transmitted over unencrypted channels.
gt0108 does not sell, rent, or trade your personal data to third-party marketing companies. Data is shared only with service providers essential to Platform operations — payment processors, KYC verification partners, and fraud-prevention systems — under strict confidentiality agreements.
You have the right to access, correct, export, and request deletion of your personal data at any time, subject to legal retention obligations. Data subject requests are handled within 30 days of receipt and at no charge to the player for standard requests.
We collect only the personal data that is strictly necessary for the stated purpose. We do not collect sensitive categories of data (such as racial or ethnic origin, religious beliefs, or health data) beyond what is required for responsible gaming compliance screening.
We use strictly necessary cookies to keep you logged in and secure, performance cookies to understand how the Platform is used, and analytics cookies to improve our service. We do not use third-party advertising or tracking cookies that follow you across unaffiliated websites.
We retain your personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law. Account data is retained for a minimum of 5 years after account closure to meet AML and financial regulatory obligations, then securely deleted.
Notice to Players: This Privacy Policy ("Policy") is issued by gt0108 ("Platform", "we", "us", "our") and applies to all personal data collected from players and visitors ("you", "your") through the gt0108 website at https://gt0108.cam and all related services. This Policy forms part of our Terms & Conditions. By using the Platform, you confirm that you have read and understood this Policy and consent to the collection and use of your data as described herein.
gt0108 is committed to protecting the privacy and personal data of every player who accesses our online gaming and sports betting platform. We recognize that players in Indonesia entrust us with sensitive personal and financial information as part of the registration, verification, and payment process, and we take that responsibility seriously.
This Policy has been drafted to meet the standards of internationally recognized data protection frameworks, including the General Data Protection Regulation (GDPR) principles where applicable, and to align with the spirit of Indonesia's Personal Data Protection Law (UU Perlindungan Data Pribadi). We aim to be transparent about every aspect of our data practices so that you can make an informed decision about using the gt0108 Platform.
This Policy covers data collected through the gt0108 website, any mobile web interface, customer support interactions (email, live chat, WhatsApp), and any other touchpoint between you and gt0108. It does not cover the privacy practices of third-party game providers, payment processors, or any external website that may be linked to from the Platform.
The following table summarizes the categories of personal data we collect, the source of that data, and the purpose for which it is collected:
| Data Category | Examples | Source | Purpose |
|---|---|---|---|
| Registration Data | Full name, email address, date of birth, username, password (hashed) | Provided by you at registration | Account creation and authentication |
| KYC Documents | KTP/SIM/passport scan, selfie with ID, proof of address | Uploaded by you during verification | Age and identity verification; AML compliance |
| Financial Data | Bank account number, e-wallet ID, transaction history, deposit/withdrawal amounts in IDR | Provided by you; generated by Platform activity | Payment processing; fraud prevention; AML monitoring |
| Gaming Activity Data | Bet history, game sessions, win/loss records, bonus usage, responsible gaming tool settings | Generated by your gameplay and account activity | Service provision; game fairness auditing; responsible gaming compliance |
| Device & Technical Data | IP address, browser type, device model, operating system, screen resolution, language settings | Automatically collected when you visit the Platform | Security monitoring; fraud detection; service optimization |
| Communications Data | Live chat transcripts, email correspondence, phone call recordings (with notice), support ticket contents | Generated through customer support interactions | Customer service; complaint resolution; service improvement |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS, push notifications | Provided by you via account settings | Delivering promotional communications you have consented to receive |
When you register an Account on gt0108, you actively provide your full legal name, email address, date of birth, and create a password. When you submit a deposit or withdrawal request, you provide your bank account number or e-wallet ID. When you upload KYC documents, you provide government-issued identity proof and optionally proof of address. When you contact customer support, you provide the content of your inquiry and any additional information you choose to share.
The Platform automatically logs certain technical information each time you visit or interact with gt0108. This includes your IP address (which may indicate your general geographic location within Indonesia, such as Jakarta, Surabaya, or Bali), your browser type and version, the pages you visit on the Platform, the time and date of each visit, the time spent on each page, and the referring URL if you arrived via a search engine or external link. Device information such as your operating system (Android, iOS, Windows) and device model may also be logged for security and troubleshooting purposes.
gt0108 may receive data from trusted third-party service providers to support Platform operations. For example, payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay processors) confirm the success or failure of your transactions and may provide transaction reference numbers. KYC verification partners validate the authenticity of your submitted identity documents. Fraud-prevention systems may provide risk scores based on device fingerprints or behavioral patterns. We ensure that all such third parties are contractually bound to protect your data and use it only for the specified purpose.
Under international data protection standards, we must have a lawful basis for every Processing activity. gt0108 relies on the following legal bases:
gt0108 uses the Personal Data we collect for the following purposes:
We use your Registration Data to create and maintain your Account, authenticate you when you log in, and allow you to recover your Account if you forget your password. Your password is stored in hashed form using bcrypt or equivalent cryptographic hashing so that even gt0108 personnel cannot view your plaintext password.
We use your Financial Data to process deposits from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), credit your Account balance, process withdrawal requests, and maintain accurate transaction records. All IDR transactions are logged for audit and dispute-resolution purposes.
We use your KYC Data to verify that you are at least 21 years of age, that the identity on your Account matches the identity on your payment method (preventing third-party deposits), and to comply with AML and CTF regulations. KYC documents are reviewed by trained compliance personnel and, where necessary, by third-party verification services operating under strict confidentiality agreements.
We use Device & Technical Data to detect suspicious activity patterns such as multiple accounts originating from the same device or IP address, bot activity, bonus abuse across coordinated accounts, and unauthorized access attempts. IP geolocation helps us identify access from restricted jurisdictions. If our systems flag your Account for unusual activity, we may temporarily restrict access pending manual review.
We use Communications Data to respond to your inquiries via email, live chat, or WhatsApp, troubleshoot technical issues, investigate complaints, and resolve disputes. Support interactions are logged to maintain a record of issue resolution and to train support staff on common player concerns.
We use Gaming Activity Data to monitor for signs of problem gambling behavior (such as chasing losses, frequent failed deposit attempts, large deposits out of proportion to historical activity), to enforce deposit limits and loss limits you have set via the Responsible Gaming tools, and to facilitate self-exclusion requests. Where legally permitted, we may proactively contact you if our systems detect concerning patterns and offer information about responsible gaming resources.
We use aggregated and anonymized data (from which individual players cannot be identified) to understand which games are most popular among Indonesian players, which deposit methods are preferred, what times of day see peak activity, and which parts of the Platform may be causing user experience friction. This analysis helps us optimize game offerings, improve payment processing times, and design better user interfaces.
If you have opted in to receive promotional communications, we use your email address to send newsletters, bonus offers, tournament invitations, and announcements about new game releases. We may personalize these communications based on your gameplay preferences (e.g., if you primarily play slots rather than sports betting, we prioritize slot-related promotions). You can opt out at any time.
gt0108 shares your Personal Data with carefully vetted third-party service providers who perform essential functions on our behalf. These include:
All service providers are bound by written data processing agreements that require them to process your data only according to our instructions, maintain appropriate security measures, and not use your data for their own purposes.
When you play a game supplied by a third-party provider (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, etc.), your gameplay session data (bet amounts, win/loss outcomes, game RTP) is transmitted to that provider's servers. Providers receive your player ID (a pseudonymized identifier, not your real name) and gameplay telemetry. They do not receive your KYC documents, email address, or bank account details. Game providers process this data to deliver the game, maintain game fairness, and generate audit logs.
gt0108 may disclose your Personal Data if required to do so by law, court order, subpoena, or valid legal process. This includes sharing data with licensing authorities for regulatory audits, with tax authorities if requested under mutual legal assistance treaties, or with law enforcement investigating fraud, money laundering, or other serious crimes. We will notify you of such disclosure where legally permitted to do so.
In the event that gt0108 is acquired by or merges with another company, or undergoes a corporate restructuring, your Personal Data may be transferred to the acquiring or successor entity as part of the business assets. We will notify you via email and Platform announcement before any such transfer occurs, and the new entity will be bound by the commitments made in this Policy unless you are given an opportunity to consent to a new privacy policy.
gt0108 does not sell, rent, or trade your Personal Data to data brokers, marketing companies, or any other third party for their own commercial purposes. Your data is shared only as described in this section and always under contractual protections.
Contractual Safeguards: Every third-party service provider with access to your Personal Data is contractually required to meet the same data protection standards that gt0108 itself follows. We conduct regular vendor audits to ensure compliance.
gt0108 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
When data reaches the end of its retention period, it is securely deleted using industry-standard erasure methods that prevent recovery. For data stored on third-party systems (such as cloud backups), we issue deletion instructions to the service provider and verify that deletion has been completed.
gt0108 employs a multi-layered security approach to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:
All data transmitted between your device and gt0108's servers is encrypted using TLS 1.3 (Transport Layer Security) with forward secrecy. Sensitive Personal Data stored in our databases — including KYC documents, hashed passwords, and financial records — is encrypted at rest using AES-256 encryption. Encryption keys are managed using hardware security modules (HSMs) and are rotated on a regular schedule.
Access to Personal Data is restricted on a need-to-know basis. Only authorized personnel with a legitimate business reason (such as compliance officers reviewing KYC documents or support agents resolving a player inquiry) are granted access. All access is logged and audited. Multi-factor authentication (MFA) is required for all staff accessing sensitive systems.
gt0108's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation services. Regular vulnerability scans and penetration tests are conducted by independent security firms to identify and remediate potential weaknesses.
The Platform's codebase follows secure coding standards to prevent common vulnerabilities such as SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF). All software dependencies are kept up to date with security patches. Code changes are reviewed by multiple engineers before deployment.
In the event of a data breach that poses a risk to your rights and freedoms, gt0108 will notify affected players within 72 hours of becoming aware of the breach, as required by data protection best practices. Notifications will include the nature of the breach, the categories of data affected, and the steps we are taking to remediate the issue and prevent recurrence. We will also notify relevant regulatory authorities where required by law.
Your Responsibility: While gt0108 implements robust security measures, you also play a critical role in protecting your Account. Use a strong, unique password, enable two-factor authentication, never share your login credentials, and log out after each session on shared devices. If you suspect unauthorized access to your Account, contact support immediately.
Cookies are small text files placed on your device by websites you visit. They allow the website to remember your actions and preferences (such as login state, language, font size) over a period of time, so you don't have to re-enter them each time you return to the site or navigate between pages.
gt0108 uses the following categories of cookies:
Some of the game content providers whose games are embedded on the gt0108 Platform may set their own cookies to maintain game state or deliver personalized game recommendations. We do not control these third-party cookies. We recommend reviewing the privacy policies of game providers if you have concerns about their data practices.
Most web browsers allow you to manage cookies through the browser settings. You can block or delete cookies, or set your browser to notify you when a cookie is being set. However, please note that blocking strictly necessary cookies will prevent you from logging in to your Account or using core Platform features. Blocking performance or analytics cookies will not impair your ability to play but may limit our ability to improve the Platform based on usage insights.
Under internationally recognized data protection principles, you have the following rights regarding your Personal Data held by gt0108:
Request a copy of all Personal Data gt0108 holds about you, including data categories, processing purposes, and recipients of your data.
Request correction of inaccurate or incomplete Personal Data. You can update most data directly via your Account settings.
Request deletion of your Personal Data, subject to legal retention obligations (such as AML record-keeping requirements).
Request that we limit how we use your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
Receive your Personal Data in a structured, machine-readable format (JSON or CSV) for transfer to another service provider.
Object to Processing based on legitimate interest grounds, or object to direct marketing at any time without providing a reason.
To exercise any of the above rights, send an email to [email protected] with the subject line "Data Subject Rights Request". Include your Account username and a description of the specific right you wish to exercise. We will respond within 30 calendar days of receipt. For security purposes, we may ask you to verify your identity by providing a copy of your KTP/SIM or by answering security questions about your Account activity.
gt0108 does not charge a fee for processing data subject rights requests, unless your request is clearly excessive, repetitive, or manifestly unfounded. In such cases, we may charge a reasonable administrative fee or refuse to process the request, and we will explain our reasoning.
gt0108 is strictly an adults-only Platform. No person under the age of 21 is permitted to register an Account, submit KYC documents, deposit funds, or place bets on gt0108. We do not knowingly collect Personal Data from minors.
If we discover that a person under 21 has created an Account by misrepresenting their age, we will immediately close the Account, void all gameplay activity, and return deposited funds (subject to verification of the source of funds). Any winnings generated from underage gameplay will be forfeited and donated to a registered Indonesian charity supporting responsible gaming initiatives.
Parents and guardians are encouraged to use parental control software or device-level restrictions to prevent minors from accessing online gambling sites. If you believe a minor has accessed gt0108 and submitted Personal Data, please notify us immediately at [email protected] so we can take corrective action.
gt0108 operates under an international gaming license and maintains infrastructure in multiple jurisdictions to deliver fast, reliable service to Indonesian players. As a result, your Personal Data may be transferred to, stored on, and processed by servers located outside Indonesia. These jurisdictions may have data protection laws that differ from Indonesian law.
Where we transfer your Personal Data to a country not recognized as offering an adequate level of data protection, we implement appropriate safeguards such as:
You may request a copy of the specific safeguards we use for international data transfers by contacting our privacy team.
gt0108 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service offerings. When we make material changes that reduce your rights or expand our data uses, we will notify you by email to your registered address and by displaying a prominent notice on the Platform for at least 14 days before the changes take effect.
The "Last Updated" date at the top of this page indicates when the current version was published. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree to the changes, you should cease using the Platform and may request Account closure and data deletion, subject to legal retention obligations.
We encourage you to review this Policy periodically to stay informed about how we are protecting your Personal Data.
If you have any questions, concerns, or complaints about this Privacy Policy or about how gt0108 handles your Personal Data, please contact our Privacy Team using the following information. All contact details are provided as plain text only.
We aim to acknowledge all privacy inquiries within 24 hours and to provide a substantive response within 30 days. If your inquiry is complex and requires additional investigation time, we will notify you of the delay and provide an estimated response date.
Complaint Escalation: If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the data protection authority in your country of residence or in the jurisdiction where gt0108 holds its gaming license. We will provide contact details for the relevant authority upon request.
This Privacy Policy works hand-in-hand with our Terms & Conditions and Responsible Gaming commitments. Review all three to understand the full picture of how gt0108 operates.
Your data is protected with AES-256 encryption and TLS 1.3 secure transmission.