gsd108 Privacy Policy

For the purposes of this Privacy Policy, the following definitions apply:

gsd108 collects Personal Data across several categories, depending on how you interact with the Platform:

2.1 Registration Data. When you create a gsd108 account, we collect your full legal name, date of birth, phone number, email address, city of residence (e.g., Jakarta, Surabaya, Bandung, Bali), and your chosen username. This information is required to open and administer your account.

2.2 Identity Verification (KYC) Data. To comply with our anti-money-laundering obligations and to verify your age, we collect copies of government-issued identification documents (Indonesian KTP, passport, or SIM), a selfie or video verification image, and — where required — proof of address and proof of the payment method registered to your account.

2.3 Financial Data. We collect bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records, IDR amounts, and timestamps associated with all financial activity on your account.

2.4 Transactional & Betting Data. We maintain a full record of all bets, wagers, game sessions — including slots, live casino, sportsbook events (BRI Liga 1, EPL, Champions League, togel lottery), and poker tournament entries — along with the corresponding outcomes, stakes, and winnings. This data is used for account management, dispute resolution, and responsible gaming monitoring.

2.5 Technical & Device Data. We automatically collect IP addresses, device type and model, operating system, browser type and version, session duration, page navigation paths, and unique device identifiers (including mobile advertising IDs where applicable). This data helps us secure your account, detect fraud, and optimise Platform performance.

2.6 Communications Data. We retain records of all communications between you and gsd108, including live chat transcripts, support ticket histories, email correspondence, and any responsible gaming requests or self-exclusion instructions you submit.

gsd108 collects Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact support, or update your account settings;
• Automatically from your device — through cookies, server logs, device fingerprinting, and analytics tools as you interact with the Platform;
• From payment providers — BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other payment processors confirm transaction status and may share limited transaction metadata with gsd108 to reconcile deposits and withdrawals;
• From identity verification services — third-party KYC and document verification providers used to authenticate identity documents and confirm age eligibility;
• From fraud prevention partners — risk-scoring and device-intelligence services that help gsd108 detect account compromise, bot activity, and fraudulent betting patterns.

gsd108 processes Member Personal Data for the following specific, documented purposes:

gsd108 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human oversight, except in fraud-detection scenarios where automated risk scoring is used as an initial filter prior to human review.

gsd108 processes your Personal Data under the following legal bases:

• Contractual necessity: Processing required to open and maintain your gsd108 account, execute deposits and withdrawals, and deliver gaming services you have requested;
• Legal obligation: Processing required to comply with applicable anti-money-laundering laws, age verification obligations, record-keeping requirements, and lawful requests from competent authorities;
• Legitimate interests: Processing undertaken to prevent fraud, maintain Platform security, conduct analytics, and enforce our Terms & Conditions — where these interests are not overridden by your fundamental rights;
• Consent: Processing for optional promotional communications, where your explicit opt-in consent has been obtained. You may withdraw consent for marketing communications at any time via your account settings or by contacting support.

6.1 Third-Party Service Providers. gsd108 shares Member data with carefully selected third-party providers who process data solely on our behalf and under contractual confidentiality obligations. These include:

• Payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) — to process deposits and withdrawals;
• KYC and identity verification providers — to authenticate identity documents and confirm age;
• Game technology providers (including Pragmatic Play, Evolution Gaming, PGSoft, Microgaming, NetEnt, Spribe) — to deliver gaming services and record game outcomes;
• Fraud prevention and device intelligence services — to detect and prevent unauthorised account access and betting fraud;
• IT infrastructure providers — cloud hosting, database management, and security monitoring services.

6.2 Legal Disclosures. gsd108 may disclose Personal Data to law enforcement agencies, regulatory authorities, or judicial bodies where required by a lawful order, warrant, or applicable legal obligation. We are not required to notify you of such disclosures where doing so is prohibited by law or would undermine an active investigation.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of gsd108's assets, Member Personal Data may be transferred to the successor entity, which will be required to honour this Privacy Policy or provide equivalent protections.

6.4 No Commercial Data Sales. gsd108 does not sell, rent, or commercially license any Member Personal Data to third parties for their own marketing or commercial purposes under any circumstances.

gsd108 operates a platform that draws on third-party technology and infrastructure providers whose servers may be located outside Indonesia. Where Personal Data is transferred to a jurisdiction that does not offer the same level of data protection as Indonesia, gsd108 implements appropriate safeguards to ensure an equivalent standard of protection applies, including:

• Contractual data processing agreements with all third-party providers that impose binding confidentiality and security obligations;
• Use of technically and organisationally secure data transfer mechanisms;
• Regular review of third-party providers' data security certifications and compliance status.

By registering a gsd108 account, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia in the circumstances described above, subject to the safeguards set out in this clause.

gsd108 retains Personal Data for the periods set out below. Where multiple retention periods could apply to the same data, the longer period governs:

Following the expiry of the applicable retention period, gsd108 will securely delete or irreversibly anonymise your Personal Data in accordance with our internal data disposal procedures.

gsd108 implements industry-standard technical and organisational security measures to protect Member Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and gsd108 servers;
• Encrypted storage of sensitive data fields including passwords (stored as salted hashes), KYC document files, and payment identifiers;
• Role-based access controls restricting access to Member data to authorised gsd108 personnel on a need-to-know basis;
• Multi-factor authentication requirements for internal staff accessing Member data management systems;
• Continuous intrusion detection and security monitoring across all Platform infrastructure;
• Regular penetration testing conducted by independent security specialists;
• Incident response procedures enabling gsd108 to identify, contain, and report data security incidents in a timely manner.

While gsd108 applies rigorous security standards, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your gsd108 account credentials and for notifying us immediately if you suspect unauthorised access to your account.

10.1 What Are Cookies. Cookies are small text files stored on your device by your browser when you visit a website. gsd108 uses cookies and similar technologies (including pixel tags and local storage objects) to operate the Platform, maintain your session security, and understand how members interact with our services.

10.2 Types of Cookies Used.

10.3 Managing Cookies. You may control or disable non-essential cookies through your browser settings. Note that disabling essential cookies will impair your ability to log in and use gsd108. Analytics and preference cookies can be cleared at any time without affecting core Platform functionality.

As a gsd108 member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact gsd108 support via live chat or email — we will respond within 30 days of receiving a valid request.

gsd108 is strictly an adult platform. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under the age of 21. Registration on gsd108 requires confirmation that you are at least 21 years of age, and this is verified through our KYC process.

If gsd108 becomes aware that an individual under the age of 21 has registered an account or submitted Personal Data to the Platform, we will immediately close that account, delete the associated data to the extent permitted by law, void any winnings, and return any real-money deposits in accordance with our standard account closure procedure.

If you are aware of a minor who has accessed gsd108 — including by using your account — please contact gsd108 live support immediately. For more detail on our approach to underage protection, visit the Responsible Gaming page.

gsd108 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered members by displaying a prominent notice on the Platform or by sending a notification to the email address associated with your account. We will always provide at least 7 days' notice before material changes take effect.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. We encourage you to review this policy periodically. Your continued use of the gsd108 Platform after the effective date of any revision constitutes your acceptance of the updated policy. If you do not accept the revised terms, you should close your account before the effective date.

Previous versions of this Privacy Policy are archived internally and are available upon written request to the gsd108 support team.

If you wish to exercise any of your privacy rights, raise a concern about how gsd108 processes your Personal Data, or ask any question about this Privacy Policy, please contact us through the following channels:

• Live Chat: Available 24/7 inside your gsd108 account dashboard — the fastest channel for account-related privacy queries;
• Email: [email protected] (plain text — not a clickable link; please copy manually);
• Support Hours: 00:00 – 24:00 WIB, every day including public holidays.

gsd108 aims to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 days. Complex requests — for example, a full data export or a contested erasure request — may take up to 60 days, in which case we will notify you of the extended timeline.