gg138 is committed to handling your personal data with care, transparency, and integrity. This Privacy Policy explains exactly what data we collect, why we collect it, how we protect it, and what rights you have over it as a player on our platform.
This document covers our data practices in full detail. These six highlights give you the most important points before you read the complete policy.
Every data transfer between your device and gg138's servers is encrypted with 256-bit TLS — the same standard used by major Indonesian banks for their online and mobile banking services. No data travels in plain text.
gg138 does not sell, rent, or commercially license your personal data to any third party for marketing or advertising purposes. Your data is used only to operate, secure, and improve the services you have chosen to use.
Identity verification (KYC) is required before any withdrawal. This protects your account from fraudulent withdrawal attempts by others. KYC documents are stored encrypted and accessed only by authorised verification staff.
We collect only the personal data that is strictly necessary to deliver our services, comply with legal obligations, and protect platform integrity. We do not collect data speculatively or build profiles beyond what is needed for responsible platform operation.
You have the right to access, correct, or request deletion of your personal data at any time. You can also object to certain types of processing and request data portability. These rights are exercised simply by contacting our support team by email.
gg138 uses a limited set of cookies for platform functionality, performance monitoring, and session security. We do not use third-party advertising cookies. Non-essential cookies can be managed through your browser settings at any time.
gg138 takes data privacy seriously. This Policy applies to all personal data we process in connection with the operation of the gg138 platform — including data collected during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and your general browsing of the site.
This Policy applies to all players who access the platform, with primary relevance to players based in Indonesia. Where applicable, gg138 processes personal data in accordance with internationally recognised privacy principles including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
This Policy does not apply to third-party websites that may be referenced on this platform. If you follow any link that directs you away from gg138, you should review the privacy policy of that third-party site, as we have no control over its data practices.
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that directly or indirectly identifies a living individual, including name, national identity number, email address, IP address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction — whether automated or manual. |
| "Controller" | The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, gg138 is the data controller for all personal data collected through the platform. |
| "Processor" | A third party that processes personal data on behalf of gg138, under written instruction and subject to appropriate data protection safeguards (e.g., KYC providers, payment processors). |
| "KTP" | Kartu Tanda Penduduk — the Indonesian national identity card, which serves as the primary identity document accepted during gg138's KYC verification process. |
| "Sensitive Data" | A sub-category of personal data warranting additional protection, including financial information, government-issued identity numbers, and any data relating to responsible gaming activity. |
| "Cookies" | Small text files placed on your device by the gg138 platform, used to maintain session continuity, remember preferences, and support platform security and analytics. |
gg138 collects personal data across several categories, depending on how you interact with the platform:
Full legal name, date of birth, email address, Indonesian mobile phone number, and the username and password you select during account creation. This data is mandatory to open an account.
Scanned or photographed copy of your Indonesian KTP (national identity card), a selfie photograph for biometric comparison, proof of address, and any additional documentation requested during enhanced verification. KYC data is classified as Sensitive Data.
Bank account number and account holder name for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or Bank Danamon transfers; e-wallet account identifiers for OVO, DANA, GoPay, or ShopeePay. We do not store full debit or credit card numbers on our servers.
All bets placed, game sessions, deposit and withdrawal history, bonus claims, wagering progress, win/loss records, and any self-imposed responsible gaming limit settings. This data is used for account management, fraud prevention, and regulatory compliance.
All messages, emails, and chat transcripts exchanged with gg138's customer support team, including the content of your queries and any attachments you submit. These records are retained for quality assurance and dispute resolution.
IP address, device type and model, operating system version, browser type and version, session timestamps, referring URL, and pages viewed within the platform. This data is collected automatically when you access the site.
gg138 uses the personal data we collect for the following purposes:
gg138 processes your personal data on the following legal grounds, depending on the nature of the processing activity:
6.1 Third-Party Processors. gg138 shares personal data with a limited set of trusted third-party service providers who process data on our behalf under strict contractual data protection obligations. These include:
6.2 Regulatory Disclosure. gg138 may disclose personal data to competent regulatory, law enforcement, or judicial authorities where required to do so by a lawful order, subpoena, or equivalent legal instrument. In such cases, we will disclose only the data specifically required and, where legally permitted, will notify you before complying.
6.3 No Commercial Data Sales. gg138 does not sell, rent, barter, or otherwise commercially transfer your personal data to third parties for marketing, advertising, or data-brokerage purposes. This is an absolute commitment with no exceptions.
6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a material portion of gg138's business, personal data held by gg138 may be transferred to the acquiring entity. If such a transfer occurs, the acquiring entity will be required to honour the commitments made in this Policy, and you will be notified via a prominent in-platform notice prior to the transfer taking effect.
Know Your Customer (KYC) verification is a mandatory step before gg138 processes any withdrawal request. The purpose of KYC is threefold: to confirm that the account holder is who they claim to be; to verify that the player is at least 21 years of age; and to satisfy anti-money laundering and counter-terrorist financing obligations that apply to internationally licensed gaming operations.
7.1 Documents Required. Standard KYC requires submission of the following:
7.2 Storage and Access. KYC documents are uploaded over an encrypted channel and stored in an access-controlled environment separate from the main player database. Access is restricted to authorised KYC compliance staff only. Documents are not visible to general customer support agents or technical staff.
7.3 Retention. KYC documents are retained for a minimum of five (5) years following account closure, in accordance with applicable record-keeping obligations. After this retention period, documents are securely and irreversibly destroyed.
gg138 uses a minimal, purposeful set of cookies and similar tracking technologies to operate the platform effectively. We do not use third-party advertising cookies, behavioural tracking pixels, or social media tracking tags.
You can control optional cookies through your browser's privacy settings. Disabling required cookies will prevent the platform from functioning correctly and will log you out of your session. gg138 does not use cookie consent banners that gate access to the platform — required cookies are set automatically upon access, as they are technically necessary for service delivery.
gg138 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any longer retention periods required by law or regulatory obligation. The following retention schedule applies:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of the active account, plus 5 years following account closure. |
| KYC / identity documents | Minimum 5 years following account closure, then securely destroyed. |
| Financial transaction records | 7 years from the date of each transaction, in compliance with financial record-keeping obligations. |
| Gameplay and betting history | 5 years from the date of each session or bet, accessible to the player on request during the retention period. |
| Customer support communications | 3 years from the date of the last interaction, extended where the interaction relates to an open dispute or legal proceeding. |
| Technical and device logs | 90 days for general access logs; up to 2 years where logs are associated with a flagged security incident. |
| Self-exclusion records | Indefinitely — to prevent re-registration by a player who has requested permanent self-exclusion. |
At the end of each applicable retention period, personal data is either securely deleted, anonymised beyond re-identification, or, where required by law, archived in a restricted-access environment with no operational use.
gg138 implements a layered security architecture designed to protect personal data against unauthorised access, accidental loss, and deliberate attack. Our security posture includes, but is not limited to, the following measures:
You have the following rights in relation to the personal data gg138 holds about you. To exercise any of these rights, contact our support team at the email address in Clause 14. We will acknowledge your request within 5 business days and respond in full within 30 days.
Where your rights request conflicts with a mandatory legal retention obligation — for example, a requirement to retain financial records for 7 years — gg138 will inform you clearly of this constraint, retain only the legally required data, and fulfil your request in full with respect to all other data not subject to that obligation.
gg138 is an adult-only platform. Our services are intended exclusively for individuals who are at least 21 years of age. We do not knowingly collect personal data from anyone under the age of 21.
During the KYC verification process, gg138 actively checks each player's date of birth against their submitted identity document. Any account found to belong to a player under the age of 21 will be immediately and permanently closed. All funds associated with an underage account — including any deposits and winnings — will be returned to the originating payment method after deducting any administrative costs associated with the investigation and closure process.
gg138 reviews this Privacy Policy periodically and will update it when our data practices change materially, when new regulatory requirements apply, or when our service offerings evolve in ways that affect how personal data is processed.
When we make material changes, we will update the Effective Date and Version number at the top of this page and, where the changes significantly affect your rights or how your data is used, we will provide advance notice via a prominent in-platform announcement and, where possible, by email to your registered address. We recommend reviewing this page whenever you revisit the platform after a period of absence.
Continued use of the gg138 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any updated version of this Policy, you may close your account and withdraw your Real Money Balance by contacting support as described in Clause 14.
For all privacy-related enquiries — including requests to exercise your data rights, questions about how a specific piece of your information is used, or concerns about a potential data breach affecting your account — please contact gg138's support team. Our team is available 24 hours a day, 7 days a week, including Indonesian public holidays, with native Indonesian-speaking agents always on duty.
If you are not satisfied with how gg138 has handled a privacy concern after contacting our support team, you may escalate the matter through the formal dispute resolution process described in our Terms & Conditions, Clause 13.
Read our full Terms & Conditions for the complete player agreement, check the FAQ for quick answers, or visit our Responsible Gaming page to explore our player protection tools.