At gg228, your privacy is treated with the same seriousness as the security of your funds. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over your own information as a member of Indonesia's leading online gaming platform.
gg228 does not sell, rent, or trade your personal information to unaffiliated third parties for commercial marketing purposes — ever. Data sharing is strictly limited to verified service partners and regulatory requirements.
All data transmitted between your device and gg228 servers is protected by TLS 1.3 encryption — the same standard used by BCA Mobile Banking — ensuring your account credentials, payment details, and personal records remain private in transit and at rest.
As a gg228 member, you retain the right to access, correct, restrict processing of, and request deletion of your personal data at any time, subject to legal retention obligations. Submit requests directly to our support team via live chat or email.
Data handling practices at gg228 are designed with Indonesian members in mind — including KTP-based identity verification aligned with local banking norms and payment processing through BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay infrastructure.
gg228 uses cookies and similar tracking technologies solely to maintain session state, detect fraud, and improve platform performance. We do not use third-party advertising cookies that track your browsing activity across unrelated websites.
Promotional communications from gg228 — including bonus offers, seasonal promotions tied to Idul Fitri, Ramadhan, and national holidays — are sent only where you have opted in. You may withdraw marketing consent at any time from your account settings or by contacting support.
Throughout this Privacy Policy, the following terms carry the meanings set out below:
gg228 collects the minimum Personal Data necessary to operate the Platform safely, comply with applicable legal and licensing obligations, and deliver a high-quality gaming experience. The categories of Personal Data we collect are as follows:
| Category | Examples | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, KTP number, selfie photograph with identity document | Yes — required for KYC |
| Contact Data | Email address, Indonesian mobile phone number | Yes — required for account creation |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifier (OVO, DANA, GoPay, ShopeePay, LinkAja) | Yes — required for deposits and withdrawals |
| Technical Data | IP address, browser type and version, device type and operating system, session timestamps, referral URL | Collected automatically |
| Usage Data | Games played, wagers placed, deposit and withdrawal history, promotional interactions, login frequency | Collected automatically |
| Communications Data | Records of live chat transcripts, support emails, and any correspondence you initiate with gg228 | Collected when you contact us |
| Marketing Preferences | Your opt-in or opt-out status for promotional emails, SMS notifications, and platform push alerts | Optional — based on your choices |
We do not intentionally collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond the facial photograph required for KYC identity matching. Where KYC photographs are processed, they are handled exclusively by our certified identity verification partner under strict contractual data-protection obligations.
The majority of Personal Data we hold is provided directly by you during the account registration process, KYC verification submission, payment method setup, and any subsequent communications you initiate with our support team. You choose what information to share; however, withholding mandatory fields will prevent account creation or withdrawal processing.
When you access or use the Platform, our servers and analytics systems automatically record Technical Data and Usage Data. This collection occurs via Cookies, web server logs, and in-platform event tracking. This data is used primarily for security monitoring, fraud detection, platform performance optimisation, and responsible gaming pattern analysis — it is not used to build advertising profiles for third-party marketing networks.
When you submit your KYC documents, our identity verification partner may cross-reference the data you provide against official Indonesian identity registries and international sanctions databases to confirm authenticity. The results of these checks — a pass, fail, or escalation flag — are shared with gg228; the underlying raw data from external registries is not retained by gg228 beyond what is required for the verification record.
Indonesian payment processors — including local bank transfer gateways connected to BCA, BRI, BNI, and Mandiri networks, and e-wallet providers such as OVO, DANA, and GoPay — confirm transaction completion status, transaction reference numbers, and in some cases the registered account name associated with a payment. This information is used exclusively for transaction reconciliation and fraud prevention.
gg228 processes your Personal Data for the following specific, clearly defined purposes:
Each Processing activity carried out by gg228 rests on one or more of the following legal bases:
gg228 does not sell your Personal Data. Disclosure to third parties is limited to the following categories, each bound by contractual data-protection obligations consistent with this Privacy Policy:
All third-party Processors engaged by gg228 are subject to data processing agreements that prohibit them from using your data for any purpose beyond the specific task for which they were engaged.
gg228 operates servers and engages service providers across multiple jurisdictions. As a result, your Personal Data may be transferred to and stored in countries outside Indonesia. Where such transfers occur, gg228 ensures that appropriate safeguards are in place, including:
If you would like further information about the specific safeguards applied to any international transfer of your Personal Data, please contact us using the details in Section 14.
gg228 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal and regulatory retention obligations, and resolve any disputes that may arise during or after the membership lifecycle. The following retention periods apply as a general framework:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of membership + 5 years after closure | Regulatory/AML obligation |
| Financial Transaction Records | 7 years from transaction date | Regulatory/AML obligation |
| KYC Documents | Duration of membership + 5 years after closure | Gaming license requirement |
| Customer Support Records | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing Preferences | Until withdrawal of consent + 1 year | Consent record-keeping |
| Technical / Log Data | 13 months on a rolling basis | Security monitoring / fraud detection |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.
gg228 implements a layered security architecture designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
gg228 uses Cookies and similar technologies — including session tokens, local storage objects, and web beacons — to operate essential Platform functions and to improve the Member experience. The categories of Cookies we deploy are as follows:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session management, authentication state, CSRF protection, load balancing | No — essential to Platform operation |
| Security | Device fingerprinting for fraud and multi-account detection, bot filtering | No — legitimate interest basis |
| Performance / Analytics | Aggregated page-load metrics, error reporting, game performance monitoring — data is anonymised before analysis | Yes — opt-in |
| Functional / Preference | Remembering display preferences, language settings, and last-visited game category | Yes — opt-in |
gg228 does not deploy third-party advertising Cookies or participate in cross-site behavioural advertising networks. You can manage Cookie preferences through your browser settings at any time. Note that disabling Strictly Necessary Cookies will prevent the Platform from functioning correctly and you will be unable to log in or place wagers.
As a Member of gg228, you hold the following rights in relation to your Personal Data. These rights are not absolute — in some cases they are subject to overriding legal obligations or legitimate interests — but gg228 will always assess requests fairly and respond within 30 calendar days:
To exercise any of these rights, contact our support team via live chat or email at [email protected] with the subject line "Data Rights Request — [Your Account ID]". We will acknowledge your request within 3 business days and provide a substantive response within 30 calendar days. For complex requests, this period may be extended by a further 30 days with prior notice to you.
gg228 is strictly an adults-only platform. Registration is prohibited for any individual under the age of 21. We do not knowingly collect Personal Data from individuals under 21 years of age. All account registrations are subject to KYC age verification using a valid Indonesian KTP, and the Platform employs automated checks to flag registrations where declared ages appear inconsistent with other data signals.
If gg228 becomes aware that Personal Data has been collected from an individual who was under the age of 21 at the time of registration — whether through our own detection processes or a report from a parent or guardian — the Account will be immediately suspended, all associated balances will be reviewed in line with our Terms & Conditions, and the relevant Personal Data will be securely deleted after any required regulatory reporting is completed.
Parents and guardians who believe a minor may have registered on the Platform are encouraged to contact us immediately at [email protected]. We treat all such reports as high-priority and will respond within 24 hours. Adults only (21+).
gg228 reviews this Privacy Policy at least annually and following any significant change to our data Processing activities, regulatory obligations, or business operations. When material changes are made — such as a new category of data being collected, a new class of third-party recipient being introduced, or a change in the legal basis for any Processing — we will notify active Members via a prominent notice on the Platform homepage and by email to the registered address on file, with a minimum of 14 calendar days before the revised Policy takes effect.
For non-material corrections — such as typographical fixes or clarifications that do not alter your substantive rights — we may update the Policy immediately upon publication, with the "Last Updated" date at the top of this page reflecting the revision date. We encourage you to review this page periodically. Continued use of the Platform after any revised Policy's effective date constitutes your acknowledgment of the updated terms.
If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how your Personal Data has been handled, please contact the gg228 privacy team through the following channels:
We are committed to resolving all privacy-related concerns quickly and fairly through our internal complaints process. If you remain unsatisfied after receiving our response, you may escalate your complaint to the data protection authority or gaming regulator in the jurisdiction under which gg228 holds its operating license.
This Privacy Policy should be read alongside the gg228 Terms & Conditions, which govern your use of the Platform as a whole, and our Responsible Gaming page, which outlines the tools available to help you maintain control of your gaming activity.
Now that you understand how gg228 protects your privacy, experience the platform built for Indonesian players — 2,400+ certified games, real-time BRI Liga 1 sportsbook, and fast IDR withdrawals via BCA, OVO, and DANA. Adults only (21+).
Questions? Our 24/7 support team is ready to help. See also: Terms & Conditions | Responsible Gaming