gbk99 Privacy Policy

1.1 This Privacy Policy applies to all personal data processed by gbk99 in connection with the operation of its platform, including data collected through the website at https://gbk99.cam, customer support interactions, identity verification processes, and payment transactions.

1.2 Indonesian Market Context. gbk99 principally serves players based in Indonesia, with operations conducted through an internationally licensed entity. Indonesian players are entitled to the data protections set out in this Policy. Where Indonesian data protection law imposes obligations beyond those described herein, gbk99 will comply with those additional obligations to the extent they are applicable.

1.3 This Policy does not cover the privacy practices of third-party services linked to or integrated with the Platform, including payment processors, game studios, or identity verification providers. Players are encouraged to review those parties' own privacy notices separately.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

3.1 gbk99 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

3.2 gbk99 does not intentionally collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where a Player voluntarily discloses such information during a support interaction. Such data, if received, is not stored beyond the resolution of the relevant interaction unless legally required.

4.1 Directly from You. The majority of Personal Data is provided by you voluntarily during: (a) Account registration; (b) KYC verification; (c) deposit and withdrawal transactions; (d) contact with customer support; (e) participation in promotions or surveys.

4.2 Automatically via the Platform. When you access the Platform, technical and behavioural data is collected automatically through server logs, cookies, and analytics tools. This includes your IP address, session timing, pages visited, and in-platform actions such as bets placed and games launched.

4.3 From Third Parties. gbk99 may receive Personal Data from: (a) identity verification service providers conducting KYC checks; (b) fraud prevention and anti-money-laundering screening services; (c) payment processors confirming transaction details; (d) publicly available sources used to verify information you have provided.

5.1 gbk99 processes your Personal Data only for legitimate, specified purposes. The primary purposes are:

• Account management: Creating, maintaining, and administering your Account, including authentication and balance tracking.
• Service delivery: Enabling you to place wagers, participate in live casino games, access togel lottery draws, and use all other Platform products.
• Payment processing: Executing deposits and withdrawals via Indonesian banking and e-wallet channels in IDR, and maintaining transaction records.
• Identity verification (KYC): Confirming your identity, age (21+), and residential address as required by our licensing obligations.
• Fraud prevention & security: Detecting and preventing fraudulent activity, money laundering, multiple account registration, collusion, and other prohibited conduct.
• Responsible gaming: Monitoring player behaviour to identify potential problem gambling indicators and to administer deposit limits, cooling-off periods, and self-exclusion requests.
• Customer support: Responding to Account queries, payment disputes, technical issues, and responsible gaming requests.
• Legal compliance: Meeting obligations under our international gaming license and any applicable data protection laws.
• Marketing communications: Sending you promotional offers, bonus notifications, and product updates — only where you have not opted out and where permitted by applicable law.
• Platform improvement: Analysing aggregated usage data to improve Platform performance, product range, and user experience.

5.2 gbk99 does not use Personal Data for automated decision-making that produces legal or similarly significant effects, except where required for fraud detection or regulatory screening, in which case you may request human review of any automated decision that adversely affects your Account.

6.1 gbk99 processes Personal Data on the following legal grounds:

• Contract performance: Processing necessary to deliver the Platform services you have contracted for by accepting the Terms & Conditions.
• Legal obligation: Processing required to comply with licensing conditions, anti-money-laundering laws, and other applicable regulations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications, where consent is the applicable legal basis. You may withdraw consent to marketing at any time by contacting support at [email protected].

7.1 No Sale of Data. gbk99 does not sell, rent, or trade your Personal Data to unaffiliated third-party commercial organisations for their own marketing purposes.

7.2 Authorised Processors. gbk99 shares your data with carefully selected third-party Processors who are contractually bound to process data only on our instructions, maintain appropriate security standards, and not use the data for any purpose other than that specified. Current categories of Processors include:

• Payment processors facilitating IDR transfers via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja);
• KYC and identity verification service providers;
• Fraud detection and anti-money-laundering screening platforms;
• Cloud infrastructure and data hosting providers;
• Customer support platform providers;
• Game studio software providers (to the extent necessary to resolve game disputes or audit outcomes).

7.3 Regulatory Disclosure. gbk99 may disclose Personal Data to gaming regulatory authorities, law enforcement agencies, or courts where required by a valid legal order, subpoena, or licensing obligation. We will notify you of such a disclosure to the extent permitted by law.

7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of gbk99's assets, Personal Data held by the Company may be transferred to the acquiring entity, provided that entity agrees to be bound by privacy protections no less stringent than those in this Policy.

8.1 gbk99 operates as an offshore platform and its data infrastructure may involve the transfer and storage of Personal Data outside of Indonesia. Where such transfers occur, gbk99 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses;
• Transfers only to jurisdictions with adequate data protection frameworks, as assessed by gbk99's legal and compliance team;
• Technical security controls equivalent to those applied to data stored within Indonesia.

8.2 By using the Platform, Indonesian players acknowledge that their Personal Data may be processed in jurisdictions outside Indonesia. gbk99 takes all reasonable steps to ensure that such processing provides a level of protection consistent with Indonesian data protection standards.

9.1 gbk99 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable law. The indicative retention periods are:

• Account and transaction data: Retained for a minimum of 5 years from the date of the last transaction, in accordance with standard anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years following Account closure.
• Support communications: Retained for 2 years from the date of the last communication in a given thread.
• Technical and session data: Retained for 12 months in active logs; anonymised aggregates may be retained indefinitely for analytics purposes.
• Marketing preference data: Retained until you withdraw consent or until 12 months have elapsed since your last Platform interaction, whichever is earlier.

9.2 Where Personal Data is no longer required for any lawful purpose, gbk99 will securely delete or anonymise it in a manner that prevents reconstruction.

10.1 gbk99 implements a multi-layered technical and organisational security framework to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Encryption at rest: AES-256 encryption applied to all stored Personal Data and KYC documents.
• Encryption in transit: All data exchanged between your browser and our servers is protected by TLS 1.3.
• Access controls: Role-based access permissions ensure that only authorised personnel can access Personal Data, on a strict need-to-know basis.
• Multi-factor authentication: Internal systems used to access player data require multi-factor authentication for all staff.
• Intrusion detection: Continuous monitoring of network traffic for anomalous activity, with automated alerts and incident response procedures.
• Penetration testing: Regular third-party penetration tests are conducted to identify and remediate vulnerabilities.
• Staff training: All gbk99 personnel who handle Personal Data receive mandatory data protection and security awareness training.

10.2 Despite these measures, no internet transmission or electronic storage system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, gbk99 will notify affected individuals and the relevant regulatory authority within the timeframes required by applicable law.

11.1 gbk99 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — including session management (keeping you logged in), security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your language and display preferences, and maintain your session state across page navigation.
• Analytics cookies: Collect anonymised data about how players interact with the Platform — pages visited, session duration, click paths — to help us improve the user experience.
• Marketing cookies: Track whether you arrived at the Platform via a promotional link, to attribute bonuses correctly and to measure campaign performance. These do not share data with external advertisers.

11.2 You can control non-essential cookies through your browser settings. Blocking certain cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled through browser settings and are required for core services.

11.3 gbk99 does not use cookies from third-party advertising networks to serve external advertisements within the Platform.

12.1 As a data subject, you hold the following rights in relation to your Personal Data processed by gbk99. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving a verifiable request.

13.1 The gbk99 Platform is strictly for individuals aged 21 years or older. 21+ Only We do not knowingly collect Personal Data from anyone under the age of 21. If gbk99 becomes aware that Personal Data has been collected from a person under this age threshold, that data will be deleted immediately and the associated Account permanently closed.

13.2 If you believe that a minor has registered an Account on the Platform, please notify us immediately at [email protected]. We take underage access to gambling platforms extremely seriously and will act on any credible report without delay.

14.1 The Platform may contain references to third-party services — including payment providers such as BCA, BRI, GoPay, and OVO, and game studio brands such as Pragmatic Play, Evolution Gaming, and Spribe. These third parties have their own privacy policies that govern their data practices, and gbk99 is not responsible for the privacy standards of those external services.

14.2 When you initiate a payment through a bank or e-wallet provider, your financial data is transmitted directly to that provider under their own terms. gbk99 does not retain full bank account numbers or e-wallet credentials; we store only the masked reference information necessary to match a payment to your Account.

15.1 gbk99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or licensing requirements. Material changes will be communicated to registered Players via email notification at least 7 days before the revised Policy takes effect.

15.2 The current version of this Privacy Policy is always accessible at https://gbk99.cam/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was published. Continued use of the Platform following a Policy update constitutes acceptance of the revised terms.

16.1 For any queries related to this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact the gbk99 data protection team using the details below:

16.2 gbk99 will acknowledge receipt of a data subject request within 3 business days and will provide a substantive response within 30 calendar days. Complex requests may require up to 60 days, in which case you will be informed of the extension and the reasons for it.

16.3 Where you are not satisfied with our response to a data subject request or privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.