Your privacy matters. This policy explains exactly what personal data gg198 collects, how it is used, who it may be shared with, and what rights you hold as a registered player on our platform.
Privacy Commitment: This Privacy Policy ("Policy") describes how gg198 ("Platform", "we", "us", "our") collects, processes, stores, and protects personal data belonging to registered users and visitors of https://gg198.app. By creating an account or continuing to use the Platform, you acknowledge that you have read this Policy and consent to the practices described herein. If you do not agree, please discontinue use of the Platform and contact our support team to request account closure.
gg198 is an internationally licensed online casino and sportsbook platform serving players primarily across Indonesia, including in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and Makassar. As a platform that handles financial transactions and real-money wagering, we are subject to strict data protection, know-your-customer (KYC), and anti-money laundering (AML) requirements, all of which necessitate the collection and processing of personal information.
We are committed to handling your data responsibly, transparently, and securely. This Policy is written in plain, professional English so that every player — regardless of technical background — can understand exactly what happens to their personal information when they use gg198.
This Policy applies to all data processing activities carried out by gg198 in connection with the Platform, including account registration, identity verification, payment processing, gameplay activity, customer support interactions, and marketing communications. It applies to data collected from devices including desktop computers, smartphones, and tablets, whether accessed via a browser or any dedicated application.
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or can reasonably be used to identify a natural person — including name, email address, date of birth, device identifiers, and transaction records. |
| Processing | Any operation performed on personal data, including collection, storage, use, transfer, disclosure, and deletion. |
| Player / User | A natural person who has registered a real-money account on the gg198 Platform or who accesses the Platform as a visitor without an account. |
| Controller | gg198, acting as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Processor | A third-party service provider that processes personal data on behalf of gg198 and under its documented instructions (e.g., payment processors, KYC verification providers). |
| KYC | Know Your Customer — the identity and document verification process required before a Player may withdraw funds from the Platform. |
| Cookies | Small text files placed on your device by the Platform to enable functionality, remember preferences, and support analytics. |
gg198 collects personal data across several categories depending on how you interact with the Platform. The following table provides a comprehensive overview of the categories of data we collect and a representative list of specific data points within each category.
Note on Sensitive Data: gg198 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes beyond what is present in standard government-issued identity documents submitted for KYC verification. If an ID document incidentally contains such information, it is stored solely for verification purposes and is not used for any other processing activity.
gg198 collects personal data through the following channels and mechanisms:
We process your personal data only for specific, legitimate, and documented purposes. The table below maps each data category to the purpose(s) for which it is processed.
| Data Category | Processing Purpose |
|---|---|
| Identity & Registration | Account creation, age verification (21+), KYC compliance, fraud prevention, responsible gaming enforcement |
| Contact Data | Account communications, promotional emails (with consent), two-factor authentication, support ticket routing |
| Financial Data | Processing deposits and withdrawals, AML compliance, source-of-funds checks, chargebacks and dispute resolution |
| Gameplay & Activity | Game integrity, responsible gaming monitoring, bonus eligibility verification, regulatory reporting |
| Technical & Device | Security, fraud detection, multi-account prevention, geo-restriction enforcement, platform performance optimization |
| Communication | Customer support, dispute resolution, service quality monitoring, regulatory audit trails |
We do not use your personal data for any automated decision-making that produces solely automated outcomes with significant legal effects on you, except where such processing is necessary for fraud detection and account security, in which case you retain the right to request human review of any automated decision (see Section 11).
Each processing activity carried out by gg198 rests on one or more of the following legal bases:
gg198 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.
When you launch a game provided by a third-party studio (such as Pragmatic Play, PG Soft, Evolution Gaming, NetEnt, or Microgaming), a unique player session token is transmitted to that provider's servers. This token enables the game to function and records the outcome. Game providers are contractually prohibited from using this data for any purpose other than game delivery and regulatory compliance.
To process deposits and withdrawals in Indonesian Rupiah (IDR), gg198 shares the necessary transaction data with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These parties act as independent controllers for the payment leg of the transaction under their own privacy frameworks.
gg198 engages specialist third-party KYC providers to verify the authenticity of identity documents and cross-reference players against international sanctions, politically exposed persons (PEP), and fraud watchlists. These providers process identity documents solely for verification purposes under binding data processing agreements with gg198.
gg198 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity. Such disclosures are made only to the extent legally required and are logged internally for audit purposes.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of gg198's assets, player personal data may be transferred to the acquiring or succeeding entity as part of the transaction. We will notify affected Players via the registered email address prior to any such transfer and will ensure that the receiving entity agrees to honor this Privacy Policy or provides equivalent protections.
No Cross-Border Transfers Without Safeguards: Where personal data is transferred to a jurisdiction outside Indonesia that does not offer an equivalent level of data protection, gg198 implements appropriate safeguards — including contractual data protection clauses — before any such transfer takes place.
gg198 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or for as long as required by applicable law or regulatory obligation. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | 5 years after account closure | AML / KYC regulatory obligation |
| Financial Transaction Records | 5 years after the transaction date | AML regulatory obligation |
| Gameplay History | 3 years after account closure | Licensing compliance and dispute resolution |
| Support Communication Logs | 2 years after the support interaction | Legitimate interest (dispute resolution) |
| Technical & Device Logs | 12 months from collection | Legitimate interest (security and fraud prevention) |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year | Legal obligation (consent audit trail) |
After the applicable retention period expires, personal data is securely deleted or irreversibly anonymized. Anonymized data (data from which all identifying information has been removed and which cannot reasonably be re-identified) may be retained indefinitely for statistical and analytical purposes.
gg198 implements a layered information security program designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Key technical and organizational measures include:
While gg198 takes robust measures to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying gg198 immediately if you suspect unauthorized access to your account.
gg198 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyze usage patterns that help us improve the service. The following categories of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for the Platform to function — session management, login authentication, fraud prevention signals, and responsible gaming tool enforcement. | Session / up to 24 hours |
| Functional | Remember your preferences such as language, preferred game lobby view, and last-used payment method to improve your experience on return visits. | Up to 12 months |
| Analytics | Aggregate, anonymized data on how players navigate the Platform — used to identify usability issues, popular game categories, and conversion funnel drop-off points. No individual profiling. | Up to 24 months |
| Marketing | Used to deliver relevant promotional content to Players who have consented to marketing communications. May track which promotions a Player has viewed or interacted with. | Up to 12 months |
Strictly necessary cookies are deployed without requiring your consent because they are essential to the delivery of the service. All other cookie categories are deployed only with your explicit consent, which you may grant or withdraw at any time by adjusting your browser settings or contacting our support team.
Most browsers allow you to block or delete cookies through their settings. Note that blocking strictly necessary cookies will prevent the Platform from functioning correctly and may prevent you from logging in to your account.
As a Player whose personal data is processed by gg198, you hold a set of rights in relation to that data. gg198 is committed to honoring these rights promptly and without charging a fee for standard requests. To exercise any of the rights listed below, contact us at the address in Section 15.
gg198 respects your rights over your personal data. Here is a plain-English summary of each right and what it means for you as a player.
Request a copy of all personal data gg198 holds about you, along with information on how it is being processed. We will respond within 30 days of your verified request.
Request correction of any personal data we hold that is inaccurate or incomplete. Updates to registered name, address, or contact details can also be made directly through account settings.
Request deletion of your personal data where processing is no longer necessary, consent has been withdrawn, or data has been processed unlawfully. This right is subject to mandatory regulatory retention periods described in Section 8.
Request that we limit the processing of your data — for example, while a rectification request is being assessed, or where you have objected to processing and the outcome is pending determination.
Request that we provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider where technically feasible.
Object at any time to processing based on legitimate interests — including profiling for marketing purposes. Where you object to direct marketing, we will cease that processing immediately without requiring justification.
How to Exercise Your Rights: Submit a data rights request by emailing [email protected] with the subject line "Data Rights Request" and your registered account username. We may ask you to verify your identity before processing the request. We will respond within 30 calendar days; complex requests may require up to 90 days, in which case we will notify you of the extension and the reason within the initial 30-day window.
gg198 enforces a strict minimum age requirement of 21 years for all registered players. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory step in the KYC process, and accounts found to belong to underage individuals are closed immediately with all associated funds withheld pending parental or guardian contact.
Parents and guardians are responsible for supervising minors' internet usage and for preventing access to online gambling platforms. If you believe that a minor has registered an account on gg198 using false age information, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act within 24 hours of a credible report.
21+ Age Restriction: gg198 is intended exclusively for adults aged 21 and above. Gambling by persons under 21 is strictly prohibited. If we have reasonable grounds to suspect a Player is underage, the account will be suspended and all funds withheld pending age verification.
The gg198 Platform integrates content and services from licensed third-party providers, including game studios and payment processors. While these providers are carefully vetted and operate under data processing agreements with gg198, each third party operates its own privacy framework.
gg198 is not responsible for the privacy practices of third-party game providers, payment operators, or any external websites that may be linked to or from the Platform. We encourage you to review the privacy policies of any third-party services you interact with. This Policy applies solely to data processing conducted by gg198 in its capacity as a data controller.
gg198 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Players by email to the address on file, no fewer than 7 calendar days before the revised Policy takes effect.
The effective date of the current version is displayed at the top of this page. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgment of the updated Policy. If you do not agree with any change, you must cease using the Platform and request account closure before the revision's effective date.
The current version of this Policy is always available at https://gg198.app/privacy-policy. We recommend reviewing this page periodically to stay informed of any updates.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the gg198 Data Privacy team through the following channels:
Please include your registered account username and a brief description of your inquiry to enable us to locate your records and respond efficiently. Standard data rights requests are acknowledged within 5 business days and fully resolved within 30 calendar days.
This Privacy Policy was last reviewed and updated in January 2026. gg198 reserves the right to update this Policy at any time in accordance with Section 14 above.
From encryption to access controls, here is a plain-English summary of the technical and organizational measures gg198 uses to keep your personal data safe.
Every connection between your device and gg198's servers is protected by TLS encryption — the same standard used by BCA, BRI, and other Indonesian banks. Your login credentials and financial data are never transmitted in plain text.
All Players are required to complete identity verification before withdrawing funds. This protects you against identity theft and ensures only legitimate account holders can access funds — keeping the platform safe for everyone.
gg198 operates a robust anti-money laundering program. Transaction monitoring, source-of-funds checks, and sanctions screening protect the platform's integrity and comply with international regulatory standards applicable to our operating license.
Internal access to personal data is granted on a strict need-to-know basis. Role-based permissions, multi-factor authentication for all staff, and comprehensive activity logging ensure that your data is only accessed by authorized personnel with a legitimate reason.
Sensitive personal data stored on gg198's servers — including KYC documents, bank account details, and transaction records — is encrypted at rest using AES-256. Even in the unlikely event of a server breach, your data remains unreadable without the decryption keys.
In the event of a confirmed data breach that poses a risk to Players, gg198 commits to notifying all affected individuals within 72 hours of identification — giving you the earliest possible opportunity to protect your accounts and credentials.
Now that you understand how we protect your personal data, explore everything gg198 has to offer — from live football betting and thousands of slots to immersive live casino tables, all built for Indonesian players.