Privacy Policy — How gt108 Protects Your Data

In this Privacy Policy, the following terms carry the meanings set out below:

• "gt108" / "we" / "us" / "our" — the operator of the gt108 online betting and gaming platform, accessible at https://gt108.bio and all associated interfaces.
• "Player" / "you" / "your" — any individual who visits, registers on, or uses the gt108 platform in any capacity.
• "Personal Data" — any information that directly or indirectly identifies a natural person, including but not limited to name, date of birth, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, modification, retrieval, use, disclosure, and deletion.
• "KYC" (Know Your Customer) — the identity and age verification process through which gt108 confirms a player's eligibility to hold an account and transact on the platform.
• "Cookies" — small text files placed on your device by the gt108 platform to facilitate session management, analytics, and personalization.
• "Third-Party Service Provider" — any external company engaged by gt108 to perform specific services on its behalf, including payment processors, identity verification partners, and fraud detection services.
• "Sensitive Data" — a subset of Personal Data warranting heightened protection, including government-issued identification documents, financial account details, and data relating to health or responsible gaming status.

This Privacy Policy applies to all Personal Data collected by gt108 in connection with the operation of the gt108 platform, including data collected through:

• The gt108 website at https://gt108.bio and any associated mobile interfaces or applications.
• Account registration and KYC verification processes.
• Deposit, withdrawal, and other financial transaction activities.
• Customer support interactions via live chat, email, or any other communication channel.
• Participation in promotions, surveys, competitions, or loyalty programs operated by gt108.
• Automated technical data collection through cookies, log files, and analytics tools during platform use.

By creating an account on gt108, you confirm that you have read and understood this Privacy Policy and consent to the processing of your Personal Data as described herein. If you do not agree with any provision of this policy, you should refrain from using the gt108 platform.

gt108 collects the following categories of Personal Data, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identification document.
• Date of birth (used to confirm the 21+ age eligibility requirement).
• Indonesian national identity number (NIK) or passport number, where required for KYC.
• Residential address, city (e.g., Jakarta, Surabaya, Bandung, Bali, Yogyakarta), and postal code.
• Email address and Indonesian mobile phone number.
• Username and encrypted password credentials.

3.2 Financial & Transaction Data

• Bank account details for supported local banks: BCA, BRI, BNI, Mandiri, CIMB Niaga, and OCBC NISP.
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Deposit and withdrawal amounts, timestamps, and transaction reference numbers.
• Betting history, wagering amounts, game outcomes, and account balance records.
• Bonus eligibility status, rollover progress, and promotional redemption history.

3.3 KYC & Verification Documents

• Copies or photographs of government-issued identification (KTP — Kartu Tanda Penduduk, SIM, or passport).
• Proof of address documentation (utility bill, bank statement) where required for enhanced verification.
• Selfie or liveness-check image captured during the identity verification process.
• Source-of-funds documentation for accounts subject to enhanced due diligence.

3.4 Technical & Behavioral Data

• IP address, device type, operating system, browser version, and unique device identifiers.
• Session logs including login timestamps, pages visited, features accessed, and session duration.
• Geolocation data (country and city level) derived from IP address at the time of login.
• Clickstream data, search queries within the platform, and game launch history.

3.5 Customer Support Data

• Records of all communications with the gt108 support team, including live chat transcripts, email correspondence, and call recordings where applicable.
• Complaint and dispute records, including supporting evidence submitted by the player.

gt108 uses the Personal Data it collects exclusively for the following purposes:

• Account Management: Creating and maintaining your gt108 player account, authenticating your identity at login, and managing your account preferences and settings.
• Age & Identity Verification: Confirming that you meet the minimum age requirement of 21 years and that your identity details are accurate and consistent with our KYC obligations.
• Transaction Processing: Facilitating deposits to and withdrawals from your account via supported Indonesian banks and e-wallets, reconciling transaction records, and issuing receipts.
• Fraud & Risk Management: Monitoring account activity to detect and prevent fraudulent behavior, money laundering, unauthorized access, and abuse of promotional offers.
• Responsible Gaming Compliance: Monitoring betting patterns to identify players who may be exhibiting signs of problem gambling, applying self-exclusion or deposit limit restrictions where requested, and fulfilling our duty-of-care obligations.
• Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of our communications as required for quality assurance and regulatory compliance.
• Legal & Regulatory Compliance: Meeting obligations imposed by anti-money laundering (AML) regulations, player protection standards, and any other applicable legal requirements.
• Platform Improvement: Analyzing aggregated behavioral data to improve the user experience, optimize platform performance, and develop new product features. This analysis is conducted on anonymized or pseudonymized data sets where possible.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates via email or in-platform messaging, subject to your communication preferences. You may opt out of marketing communications at any time without affecting your access to gt108 services.

gt108 processes your Personal Data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing your registration data, financial information, and KYC documents is necessary for gt108 to perform its obligations under the agreement created when you register an account and accept the gt108 Terms & Conditions.
• Legal Obligation: Certain processing activities — particularly those related to identity verification, transaction record-keeping, and responsible gaming monitoring — are mandated by applicable anti-money laundering, consumer protection, and gaming regulation frameworks.
• Legitimate Interests: gt108 has a legitimate interest in processing technical and behavioral data to maintain platform security, prevent fraud, and improve the quality and reliability of its services, provided that this interest is not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — for example, in connection with optional marketing communications or the use of non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent does not affect your ability to use core gt108 services.

gt108 does not sell, rent, or trade your Personal Data. We share your data only with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

• Payment Processors & Banking Partners: To facilitate deposits and withdrawals, gt108 shares transaction-relevant data with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These institutions process your data under their own regulated privacy frameworks.
• KYC & Identity Verification Providers: gt108 engages licensed third-party identity verification services to validate documents submitted during the KYC process. These providers are bound by strict data-processing agreements and are prohibited from using your data for any purpose other than verification.
• Fraud Prevention & Risk Services: Transaction monitoring data and device fingerprinting information may be shared with specialist fraud prevention partners to identify and block suspicious activity across the platform.
• Game Content Providers: When you launch a game from a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — limited session data (player ID, stake, and game outcome) is transmitted to that studio's game server to render the game correctly. No identifiable personal data beyond a pseudonymous player ID is shared with game studios.
• Regulatory & Law Enforcement Authorities: gt108 will disclose Personal Data to competent authorities when required to do so by law, court order, or binding regulatory instruction. gt108 will notify affected players of such disclosures where legally permissible.
• Corporate Restructuring: In the event of a merger, acquisition, or sale of all or part of the gt108 business, player data may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations. Players will be notified in advance of any such transfer.

All Third-Party Service Providers engaged by gt108 are required to maintain data security standards at least equivalent to those described in this Privacy Policy, and are prohibited from using player data for their own independent commercial purposes.

The gt108 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalized experience. The following categories of cookies are employed:

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing gt108 services, though certain personalization features may be reduced. Disabling essential or security cookies may impair platform functionality or prevent login.

gt108 does not use third-party advertising cookies or cross-site tracking technologies that share your browsing behavior with advertisers outside the gt108 platform.

gt108 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized so that it can no longer be associated with an identifiable individual. Data that has been anonymized for statistical purposes may be retained indefinitely.

As a gt108 player, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact the gt108 Data Protection team using the contact details in Clause 14:

• Right of Access: You may request a copy of all Personal Data gt108 holds about you, together with information about how it is being processed. gt108 will respond to such requests within 14 business days.
• Right of Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., phone number updates) can often be made directly through your account settings.
• Right of Erasure ("Right to Be Forgotten"): You may request that gt108 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. This right is subject to gt108's legal data retention obligations; we cannot delete data that we are legally required to retain.
• Right to Restrict Processing: You may request that gt108 limit how it uses your Personal Data while a dispute or correction request is being resolved, or where you have objected to processing pending a determination of legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that gt108 provide your Personal Data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object at any time to the processing of your Personal Data for direct marketing purposes. You also have the right to object to processing based on gt108's legitimate interests, though this right may be overridden where gt108 demonstrates compelling grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

gt108 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the gt108 platform is protected by TLS 1.3 encryption. HTTPS is enforced across all pages and API endpoints.
• Encryption at Rest: Sensitive data stored on gt108 servers — including payment details, KYC documents, and authentication credentials — is encrypted using AES-256 standards.
• Access Controls: Access to player data within the gt108 organization is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular audit. All gt108 personnel with access to Personal Data are bound by confidentiality obligations.
• Two-Factor Authentication: gt108 supports and encourages the use of 2FA for all player accounts. Internal administrative systems require 2FA for all personnel.
• Penetration Testing & Security Audits: The gt108 platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: gt108 maintains a documented data breach response procedure. In the event of a security incident that poses a material risk to player data, affected players will be notified without undue delay, and all necessary remedial actions will be taken immediately.

While gt108 takes all reasonable precautions to protect your Personal Data, no digital system can guarantee absolute security. Players are reminded to maintain strong, unique passwords and to notify gt108 support immediately if they suspect any unauthorized access to their account.

gt108 employs age verification checks during the registration process and through the KYC documentation review. If gt108 discovers that Personal Data has been collected from a player who is under 21 years of age, the following actions will be taken immediately:

• The player's account will be suspended pending investigation.
• All Personal Data associated with the account will be permanently deleted from gt108 systems.
• Any deposits made to the account will be returned via the original payment method after identity verification of the rightful account holder.
• The incident will be documented and, where legally required, reported to the relevant regulatory authority.

If you have reason to believe that a minor has registered or is using a gt108 account, please contact our support team immediately using the contact details in Clause 14.

The gt108 platform may contain references to third-party service brands — such as game studios, payment providers, and sports leagues — for informational and user-experience purposes. gt108 does not maintain outbound links to external websites from within the platform itself. However, should any such link appear in a communication from gt108 (such as a promotional email), please be aware that:

• gt108 is not responsible for the privacy practices of third-party websites.
• Each third-party service operates under its own privacy policy, which you should review independently before providing any personal information.
• The inclusion of a brand name or logo on the gt108 platform does not constitute an endorsement of that party's privacy or security practices.

gt108 recommends that players exercise caution when navigating away from the official gt108.bio domain and verify the authenticity of any website claiming to be affiliated with gt108 before submitting personal or financial information.

gt108 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, the introduction of new services, amendments to applicable regulations, or other operational developments.

When material changes are made to this Privacy Policy, gt108 will:

• Update the "Last updated" date at the top of this page.
• Send a notification to all registered players via their registered email address at least 14 days before the changes take effect.
• Display a prominent in-platform notice upon your next login following the update.

Your continued use of the gt108 platform following the effective date of any Privacy Policy update constitutes your acceptance of the revised terms. If you do not accept the changes, you have the right to close your account and request deletion of your Personal Data in accordance with Clause 9 of this policy, subject to applicable legal retention obligations.

We encourage all players to review this Privacy Policy periodically to stay informed about how gt108 is protecting their data. The current version is always available at https://gt108.bio/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by gt108, please contact us through the following official channels:

• Live Chat: Available 24/7 through the gt108 account portal. Our support agents — including native Indonesian-speaking staff — are on hand to assist you in real time. Average first-response time during peak hours (08:00–22:00 WIB) is under 2 minutes.
• Email: [email protected] (displayed as plain text — not a clickable link). Data-related requests submitted by email are assigned to our Data Protection team and receive a substantive response within 5 business days.

When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. For security purposes, gt108 may require you to verify your identity before processing any access, rectification, or deletion request.

gt108 is committed to resolving all privacy-related inquiries fairly and promptly. We view player trust as the foundation of a long-term relationship, and we treat every privacy concern with the seriousness it deserves.