Privacy Policy

1. Introduction

gb007 ("we", "us", "our", "Platform") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data you provide when accessing or using our website, mobile applications, and gaming services (collectively, the "Services"). This Privacy Policy applies to all users who register an account, access the Platform, or interact with our Services in any capacity.

By creating an account, using our Services, or providing personal information to gb007, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must immediately cease using our Platform and Services. We reserve the right to update or modify this Privacy Policy at any time without prior notice. Your continued use of the Platform following any changes constitutes acceptance of the updated Privacy Policy.

2. Data Controller

For the purposes of applicable data protection legislation, gb007 is the data controller responsible for your personal information. Our designated contact for privacy-related inquiries is:

• Email: [email protected]
• Live Chat: Available 24/7 through the Platform
• Subject Line: "Privacy Inquiry" for priority handling

3. Information We Collect

3.1 Personal Information Provided by You

When you register for a gb007 account, we collect the following personal information directly from you:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP or passport number)
• Contact Information: Email address, mobile phone number, residential address (street address, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay account information), and payment card details (for supported payment methods)
• Verification Documents: Copies of identity documents (KTP, passport), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification
• Communication Content: Messages sent to customer support, live chat transcripts, email correspondence, and feedback submissions

3.2 Information Collected Automatically

When you access or use our Platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: Device type (mobile, tablet, desktop), operating system, browser type and version, device identifiers, screen resolution, and language settings
• Connection Information: IP address, internet service provider, geographic location (country, city), time zone, and network connection type
• Usage Data: Pages visited, features accessed, time spent on pages, click patterns, navigation paths, referring URLs, search queries, and session duration
• Gaming Activity: Bets placed, games played, wagered amounts, win/loss records, bonus claims, transaction history, and gameplay patterns
• Performance Data: Page load times, error messages, system crashes, and technical issues encountered

3.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction verification data, fraud detection signals, and payment authentication results from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay)
• Identity Verification Services: KYC verification results, identity document validation, and fraud prevention checks from third-party verification providers
• Marketing Partners: Referral source information and campaign attribution data (if you access gb007 through affiliate links or promotional campaigns)
• Public Databases: Information from publicly accessible sources for identity verification and anti-money laundering compliance purposes

4. How We Use Your Information

gb007 processes your personal information for the following legitimate business purposes:

4.1 Account Management and Service Provision

• Creating and maintaining your user account
• Verifying your identity and age (21+ requirement enforcement)
• Processing deposits, withdrawals, and financial transactions
• Providing access to gaming products including sports betting, casino games, and slots
• Processing bets, determining outcomes, and crediting winnings
• Managing bonuses, promotions, and loyalty rewards

4.2 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, and unauthorized access
• Monitoring for terms of service violations including bonus abuse and prohibited betting patterns
• Investigating suspicious transactions and account behavior
• Complying with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• Protecting the integrity of gaming systems and ensuring fair play

4.3 Customer Support and Communication

• Responding to inquiries, support requests, and complaints
• Sending transactional notifications including deposit confirmations, withdrawal updates, and account alerts
• Providing customer support via live chat, email, and WhatsApp
• Conducting customer satisfaction surveys and collecting feedback

4.4 Marketing and Promotions (With Consent)

• Sending promotional offers, bonus notifications, and marketing communications via email and SMS
• Personalizing marketing content based on gaming preferences and activity patterns
• Conducting promotional campaigns and tournaments
• You may opt out of marketing communications at any time through account settings or unsubscribe links

4.5 Platform Improvement and Analytics

• Analyzing usage patterns to improve user experience and platform functionality
• Conducting A/B testing for feature optimization
• Identifying technical issues and improving system performance
• Developing new features, games, and services tailored to Indonesian player preferences

4.6 Legal Compliance and Regulatory Obligations

• Complying with applicable gambling regulations and licensing requirements
• Responding to legal process including court orders, subpoenas, and regulatory requests
• Maintaining records required by law for audit and compliance purposes
• Reporting suspicious activity to relevant authorities when legally required

5. Legal Basis for Processing

gb007 processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to provide Services under our Terms and Conditions including account management, transaction processing, and gameplay
• Legal Obligation: Processing required to comply with KYC, AML, age verification, and other regulatory requirements
• Legitimate Interests: Processing for fraud prevention, security, platform improvement, and business analytics, balanced against your privacy rights
• Consent: Processing for marketing communications and certain analytics activities, where you have provided explicit consent (which can be withdrawn at any time)

6. Data Sharing and Disclosure

gb007 does not sell your personal information to third parties. We may share your information only in the following circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers who process personal data on our behalf under strict contractual obligations:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallet providers (OVO, DANA, GoPay), and payment gateway operators for deposit and withdrawal processing
• Identity Verification Services: KYC and AML compliance providers who verify identity documents and conduct fraud screening
• Gaming Providers: Licensed software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt) who power games on our platform
• Customer Support Tools: Live chat platforms, email service providers, and ticketing systems
• Analytics and Marketing Platforms: Analytics tools, email marketing services, and advertising networks (subject to your consent)
• Cloud Infrastructure: Hosting providers and data storage services that maintain our technical infrastructure

6.2 Legal and Regulatory Disclosure

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with court orders, legal process, or government requests
• Respond to regulatory inquiries from gambling authorities or financial crime agencies
• Enforce our Terms and Conditions and protect our legal rights
• Investigate fraud, security breaches, or terms violations
• Protect the safety and security of users, staff, or the public

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate transaction involving gb007, your personal information may be transferred to the successor entity, subject to the same privacy protections outlined in this Privacy Policy.

7. Data Security Measures

gb007 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Personal data access is restricted to authorized personnel on a need-to-know basis, with multi-factor authentication required for administrative access.
• Password Security: Passwords are stored using industry-standard cryptographic hashing algorithms and are never stored in plain text.
• Network Security: Firewalls, intrusion detection systems, and security monitoring tools protect our infrastructure from cyberattacks.
• Regular Audits: Security audits, vulnerability assessments, and penetration testing are conducted periodically to identify and address potential weaknesses.
• Staff Training: All employees undergo data protection training and are bound by confidentiality obligations.

8. Data Retention

gb007 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

• Active Accounts: Personal data is retained for the duration your account remains active plus a retention period as required by law.
• Closed Accounts: Following account closure, we retain personal data for 7 years to comply with financial record-keeping requirements, fraud prevention, and legal defense purposes.
• Transaction Records: Financial transaction records are retained for 10 years in accordance with anti-money laundering regulations.
• Marketing Data: If you opt out of marketing communications, we retain minimal information (email address, opt-out status) to honor your preferences.
• Legal Holds: Data subject to ongoing legal disputes or regulatory investigations is retained until the matter is resolved.

After applicable retention periods expire, we securely delete or anonymize personal data so it can no longer identify you.

9. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Restriction: Request temporary restriction of data processing in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to data processing based on legitimate interests or for marketing purposes.
• Right to Withdraw Consent: Withdraw consent for marketing communications or optional data processing at any time.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond to verified requests within 30 days. Note that certain rights may be limited by legal obligations or legitimate business interests.

10. Cookies and Tracking Technologies

gb007 uses cookies, web beacons, and similar tracking technologies to enhance platform functionality, analyze usage patterns, and deliver personalized experiences. Cookies are small text files stored on your device. We use the following types of cookies:

• Essential Cookies: Required for platform operation, login authentication, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences, language settings, and customization choices.
• Analytics Cookies: Collect aggregated usage statistics to help us understand how users interact with the platform.
• Marketing Cookies: Enable personalized advertising and track campaign effectiveness (requires your consent).

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit platform functionality. For more detailed information about our cookie practices, refer to our Cookie Policy available on the Platform.

11. International Data Transfers

gb007 primarily operates within Indonesia and processes data on servers located in secure facilities. However, some service providers may process data in countries outside Indonesia. When we transfer personal data internationally, we ensure adequate safeguards are in place including standard contractual clauses, data processing agreements, and adherence to international data protection frameworks to protect your information.

12. Children's Privacy

gb007 services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect, use, or solicit personal information from anyone under the age of 21. If we discover that we have inadvertently collected information from an individual under 21, we will immediately delete such information from our systems. Parents or guardians who believe their child has provided personal information to gb007 should contact us immediately.

13. Changes to This Privacy Policy

gb007 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We will notify users of material changes by posting a notice on the Platform or sending an email notification. The "Last Updated" date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the Platform following any updates constitutes acceptance of the revised Privacy Policy.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through the Platform
• WhatsApp: Available 08:00-22:00 WIB daily
• Subject: "Privacy Inquiry" for priority handling

We will respond to all privacy-related inquiries within 30 days of receipt. For urgent security concerns, please identify your message as "Urgent - Security Issue" for immediate attention.