gt018 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by gt018 in connection with the operation of the gt018 online betting and gaming platform, accessible at gt018.app and all associated digital properties operating under the gt018 brand.

gt018 is committed to handling personal data responsibly and in a manner consistent with applicable international data protection standards. This Policy is designed to give Indonesian players — and all other users of the gt018 platform — a clear and transparent account of how their data is handled from the moment they interact with the platform.

This Policy should be read alongside the gt018 Terms & Conditions and the Responsible Gaming Policy, both of which reference data processing activities that are integral to the safe and lawful operation of the gt018 platform.

2.1 For the purposes of this Privacy Policy, the data controller responsible for the personal data of gt018 platform users is the gt018 operating entity — the legal entity that holds the international gaming license under which the gt018 platform operates.

2.2 All data protection inquiries, access requests, correction requests, and erasure requests should be directed to the gt018 Data Protection contact at: [email protected] with the subject line "Data Protection Request." gt018 will respond to all data subject requests within 30 calendar days of receipt.

2.3 gt018 is accessible to players from across Indonesia, including Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, Semarang, Palembang, and Makassar. All processing of personal data for Indonesian players is conducted in accordance with the standards described in this Policy.

3.1 gt018 collects personal data from you through several channels — directly when you register an account, interact with the platform, or contact support; automatically through technical mechanisms when you use the platform; and, where applicable, from third-party sources such as payment processors and identity verification providers.

3.2 Data Collected Directly from You

3.3 Data Collected Automatically

4.1 gt018 uses personal data strictly for the purposes described below. Personal data is not processed for purposes incompatible with those listed without obtaining fresh consent or establishing a new legitimate legal basis.

• Account Management: Creating, maintaining, securing, and closing your gt018 Account; authenticating your identity on login; managing account settings and preferences.
• Transaction Processing: Processing IDR deposits and withdrawals via your registered bank account or e-wallet; verifying transaction authenticity; managing wallet balances; issuing winnings.
• Identity Verification & KYC Compliance: Verifying your age (21+), identity, and source of funds in accordance with our regulatory obligations under the platform's international gaming license and applicable anti-money laundering standards.
• Fraud Detection & Security: Monitoring account activity for suspicious behavior, unauthorized access, multi-accounting, bonus abuse, and money laundering indicators; triggering security alerts; protecting the integrity of the platform and its members.
• Responsible Gaming Monitoring: Tracking betting patterns to identify potential problem gambling behavior; enforcing self-set limits; applying mandatory restrictions where necessary; directing at-risk players to support resources.
• Customer Support: Responding to inquiries, resolving disputes, processing complaints, and providing technical assistance via live chat, email, and WhatsApp.
• Platform Improvement: Analyzing aggregated usage data to improve platform performance, game library curation, and user experience design. Analytics are conducted on anonymized or pseudonymized data wherever practicable.
• Marketing Communications: Sending promotional offers, bonus notifications, and news about new games or features — only where you have given consent or where legitimate interest applies. You may withdraw consent at any time.
• Legal & Regulatory Compliance: Complying with applicable legal obligations, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records as required under the platform's operating license.

5.1 gt018 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between gt018 and you (i.e., the Terms & Conditions) — including account creation, transaction processing, and winnings disbursement.
• Legal Obligation: Processing required to comply with legal obligations — including KYC/AML requirements, age verification, responsible gaming obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing for gt018's legitimate business interests — including fraud prevention, security monitoring, platform improvement, and support service delivery — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookie placement, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 General Principle. gt018 does not sell, rent, or trade your personal data to third parties. Personal data is shared only in the limited circumstances described in this Section and only to the extent strictly necessary for the stated purpose.

6.2 Service Providers. gt018 engages third-party service providers who process personal data on our behalf as data processors. These include:

• Payment processors and banking partners — including BCA, BRI, BNI, Mandiri, and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) — for the purpose of processing IDR deposits and withdrawals.
• Identity verification providers — for conducting KYC checks, age verification, and AML screening on new and existing members.
• Game studios and content providers — including Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, and Spribe — who receive session tokens and game-state data for the purpose of delivering their certified game products within the gt018 platform environment.
• Customer support technology providers — providing the live chat and ticketing infrastructure used by gt018's support team.
• Analytics and fraud detection providers — receiving pseudonymized usage and behavioral data for platform security and performance monitoring purposes.

All third-party service providers engaged by gt018 are subject to data processing agreements that restrict their use of personal data to the specific processing tasks for which they are engaged.

6.3 Legal Disclosures. gt018 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where it is legally required to do so under applicable law or pursuant to a valid legal order. gt018 will notify you of such a disclosure where legally permitted to do so.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of gt018 or its business assets, personal data held by gt018 may be transferred to the acquiring entity as part of the transaction. gt018 will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations substantially equivalent to those described in this Policy.

7.1 The gt018 platform uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to operate core platform functionality, maintain your login session, remember your preferences, detect fraud, and analyze platform usage.

7.2 Cookie Categories Used by gt018:

• Essential / Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and wallet session identifiers. These cookies cannot be disabled without preventing core platform functionality from operating.
• Functional / Preference Cookies: Used to remember your platform preferences — such as display language, last-played game category, and notification settings. These cookies improve your experience but are not essential to core function.
• Analytics Cookies: Used to collect aggregated and pseudonymized data about how players interact with the gt018 platform — including page visit frequency, session duration, feature usage, and navigation paths. This data is used exclusively to improve platform design and performance.
• Security & Fraud Detection Cookies: Used to identify suspicious activity patterns, detect unauthorized access attempts, and flag anomalous behavior for security review. These cookies are essential to platform security.

7.3 You may manage cookie preferences through your browser settings. Note that disabling essential or security cookies will impair your ability to use the gt018 platform. gt018 does not currently use third-party advertising or behavioral profiling cookies.

8.1 gt018 retains personal data only for as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Account and KYC Data: Retained for the duration of the Account relationship and for a minimum of five (5) years following permanent Account closure, in accordance with AML and gaming regulatory record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years following the date of each transaction, in accordance with financial record-keeping obligations.
• Support Communications: Live chat transcripts, email correspondence, and WhatsApp message records are retained for a minimum of two (2) years following the close of each support interaction.
• Responsible Gaming Records: Self-exclusion records, limit-setting history, and player welfare notes are retained for a minimum of five (5) years following the expiry of the relevant restriction or the permanent closure of the Account, whichever is later.
• Marketing Preference Records: Consent and opt-out records are retained for a minimum of three (3) years following the last consent event or opt-out action.
• Technical and Usage Logs: Server logs, IP address records, and device data are retained for a maximum of twelve (12) months, after which they are either deleted or anonymized.

8.2 Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized.

9.1 gt018 implements a range of technical and organizational security measures to protect personal data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gt018 platform.
• Encrypted storage of sensitive personal and financial data at rest, using industry-standard encryption algorithms.
• Role-based access controls limiting internal access to personal data to only those staff members who genuinely require it to perform their job functions.
• Multi-factor authentication for all internal staff systems that process or store personal data.
• Regular independent security audits and penetration testing of the gt018 platform and infrastructure.
• Intrusion detection systems and real-time security monitoring for anomalous access patterns.
• Incident response procedures including data breach notification protocols designed to minimize impact and inform affected users and relevant authorities as appropriate.

9.2 While gt018 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for keeping your Account credentials secure and for notifying gt018 immediately if you suspect unauthorized access to your Account.

10.1 As a data subject, you hold a number of rights in relation to the personal data gt018 holds about you. These rights are described below. To exercise any of these rights, please contact gt018 at [email protected] with the subject line "Data Rights Request," including your registered Account username or mobile number and a description of the right you wish to exercise.

10.2 Response Time. gt018 will acknowledge all data rights requests within 5 business days and will complete the request within 30 calendar days. In complex cases, this period may be extended by up to a further 30 days, with notice provided to you of the extension and its reason.

10.3 Identity Verification for Requests. To protect your privacy, gt018 will verify your identity before processing any data rights request. You may be asked to provide confirmation of your Account username, registered mobile number, or a copy of identity documentation.

11.1 The gt018 platform is strictly intended for adults aged 21 and above. gt018 does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an Account or use the gt018 platform in any capacity.

11.2 If gt018 becomes aware that personal data has been collected from a person under the age of 21 — whether through registration, KYC review, or any other means — the relevant Account will be immediately suspended, all associated data will be retained only for the minimum period required for legal and regulatory compliance purposes, and the matter will be reviewed in accordance with gt018's underage gambling policy.

11.3 If you are a parent or guardian and believe your child may have accessed or registered with the gt018 platform, please contact the gt018 support team immediately at [email protected] or via 24/7 live chat so the matter can be investigated and resolved promptly.

12.1 The gt018 platform does not contain links to external third-party websites for browsing purposes. Game interfaces delivered through the gt018 platform by licensed studios (Evolution Gaming, Pragmatic Play, PG Soft, and others) operate within the gt018 platform environment and are subject to those studios' own privacy and data handling policies in respect of game-session data.

12.2 gt018 is not responsible for the privacy practices of third-party studios or payment providers. Where your data is shared with these parties as described in Section 6, it is shared solely for the purposes of service delivery under data processing agreements, not for the third party's own independent marketing or analytics purposes.

13.1 gt018 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or platform functionality. The most current version of this Policy will always be published at gt018.app/privacy-policy, with the effective date noted at the top of the document.

13.2 Where gt018 makes material changes to this Policy — changes that meaningfully affect how your personal data is collected or used — gt018 will provide advance notice via the platform or via your registered contact details. Continued use of the gt018 platform following publication of a revised Policy constitutes acceptance of the revised terms.

14.1 For all privacy-related inquiries, data rights requests, or concerns about how gt018 handles your personal data, please contact us using the details below:

• Email: [email protected] — use subject line "Data Protection Request" for all formal data rights requests.
• Live Chat: Available 24/7 on the gt018 platform — for general privacy questions and urgent data concerns.
• WhatsApp: +62 811 0180 018 — available 08:00 to 24:00 WIB (Western Indonesia Time, UTC+7).

14.2 gt018 will acknowledge all privacy-related inquiries within 5 business days and will provide a substantive response within 30 calendar days, in accordance with the timelines described in Section 10.2.