Privacy Policy

1. Introduction

Welcome to the gx88 Privacy Policy. This document explains how gx88 ("we", "us", "our", "Company", "Operator") collects, uses, stores, protects, and discloses personal information from users ("you", "your", "User", "Player") of the gx88 website (gx88.lat) and associated services (collectively, the "Platform"). We are committed to protecting your privacy and ensuring transparency in all data handling practices.

By accessing or using the gx88 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must immediately cease use of the Platform and contact us to request account closure and data deletion.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, which together constitute the complete legal framework governing your use of gx88.

2. Data Controller

For the purposes of applicable data protection laws, gx88 is the data controller responsible for your personal information. Our registered business address and data protection officer contact details are available upon request. If you have questions or concerns about how we handle your personal data, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Inquiry".

3. Information We Collect

gx88 collects several categories of personal information to operate the Platform, provide betting and gaming services, verify your identity, process transactions, prevent fraud, and comply with legal obligations. The information we collect includes:

3.1 Information You Provide Directly

• Account Registration Data: When you create a gx88 account, you provide your full legal name, date of birth, email address, phone number, residential address, preferred currency (Indonesian Rupiah / IDR), username, and password.
• Identity Verification Documents (KYC): To comply with anti-money laundering (AML) and know-your-customer (KYC) regulations, we collect copies of government-issued identification documents such as your Indonesian National Identity Card (KTP), passport, or driver's license. We may also request proof of address (utility bills, bank statements) and proof of payment method ownership (screenshots, statements).
• Payment Information: Bank account details, e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay), and transaction history. We do not store full credit card numbers or CVV codes; payment processing is handled by third-party payment processors who comply with PCI DSS standards.
• Communications: Records of your communications with gx88 customer support, including live chat transcripts, emails, phone call recordings (where applicable and with notice), and support tickets.
• Survey and Feedback Data: If you participate in voluntary surveys, promotions, or provide feedback, we collect your responses and opinions.

3.2 Information Collected Automatically

• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bets placed, transaction amounts, timestamps, session duration, click patterns, and navigation paths through the Platform.
• Location Data: Approximate geographic location derived from your IP address. gx88 does not collect precise GPS coordinates unless you explicitly grant permission through your device settings.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to track user behavior, authenticate sessions, remember preferences, and analyze Platform performance. See Section 10 for detailed information on cookies.

3.3 Information from Third Parties

• Payment Processors: We receive transaction confirmations, payment status updates, and fraud risk assessments from third-party payment gateways.
• Identity Verification Services: We may use third-party KYC verification providers to authenticate your identity documents and cross-reference against public databases or watchlists.
• Affiliate Partners: If you accessed gx88 through an affiliate link, we may receive referral data (but not your personal information) from the affiliate partner.

4. How We Use Your Data

gx88 uses your personal information for the following purposes:

• Account Management: Creating, maintaining, and securing your user account. Processing login requests, password resets, and account settings updates.
• Transaction Processing: Facilitating deposits, withdrawals, and internal fund transfers. Verifying payment method ownership and preventing fraudulent transactions.
• Identity Verification (KYC/AML): Confirming your age (21+ requirement), identity, and address to comply with legal obligations and prevent underage gambling, identity theft, money laundering, and terrorist financing.
• Service Provision: Delivering betting and gaming services, displaying personalized content, calculating odds, settling bets, and awarding winnings.
• Customer Support: Responding to inquiries, resolving disputes, investigating complaints, and providing technical assistance.
• Security and Fraud Prevention: Monitoring for suspicious activity, detecting multi-accounting, identifying collusion or bonus abuse, and protecting the integrity of our Platform.
• Responsible Gaming: Implementing self-exclusion, deposit limits, loss limits, and other responsible gaming tools. Identifying users who may be at risk of problem gambling and proactively reaching out with support resources.
• Marketing Communications: Sending promotional emails, SMS messages, and push notifications about bonuses, tournaments, and new features (with your consent, where required by law). You can opt out at any time via the unsubscribe link or account settings.
• Analytics and Improvement: Analyzing user behavior, Platform performance, and game popularity to improve our services, optimize user experience, and develop new features.
• Legal Compliance: Fulfilling legal, regulatory, and contractual obligations. Responding to law enforcement requests, court orders, and government investigations.

5. Legal Basis for Processing

Under applicable data protection laws, gx88 relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing is necessary to perform our contractual obligations under the Terms & Conditions, including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with AML/KYC regulations, age verification laws, tax reporting obligations, and other legal requirements imposed by licensing authorities or government agencies.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, Platform optimization, and direct marketing (where not subject to consent requirements). We balance these interests against your privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing certain data (e.g., optional marketing communications, precise location tracking). You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing and Disclosure

gx88 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality and data protection obligations:

6.1 Service Providers

We engage third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks, e-wallet providers, and payment gateways that facilitate deposits and withdrawals.
• Identity Verification Services: KYC/AML compliance providers that verify your identity documents and conduct background checks.
• Cloud Hosting Providers: Data centers and cloud infrastructure companies that store and manage our databases and servers.
• Customer Support Tools: Live chat platforms, email service providers, and helpdesk software providers.
• Analytics Providers: Web analytics, user behavior tracking, and A/B testing platforms.
• Game Providers: Licensed third-party studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) that deliver casino games and live dealer services.

These service providers are contractually obligated to use your data solely for the purposes we specify and to implement adequate security measures. They are prohibited from using your data for their own purposes.

6.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, tax authorities, or other government entities when required by law, court order, subpoena, or legal process. We may also voluntarily disclose data when we believe disclosure is necessary to protect our legal rights, prevent fraud, enforce our Terms & Conditions, or protect the safety of users or the public.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, bankruptcy, or other corporate restructuring, your personal information may be transferred to the acquiring entity as part of the business assets. We will notify you via email or prominent Platform notice before your data is transferred and becomes subject to a different privacy policy.

6.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes. This data does not constitute personal information under data protection laws.

7. Data Security

gx88 employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, destruction, or loss. Our security measures include:

• Encryption: All data transmitted between your device and gx88 servers is encrypted using 256-bit SSL/TLS (Secure Sockets Layer / Transport Layer Security) protocols — the same encryption standard used by major banks.
• Secure Data Storage: Personal data is stored on secure servers with restricted access, firewall protection, and intrusion detection systems. Sensitive data (KYC documents, payment details) is encrypted at rest.
• Access Controls: Only authorized personnel with a legitimate business need can access personal data. All employees and contractors sign confidentiality agreements and undergo security training.
• Regular Audits: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses.
• Incident Response: In the unlikely event of a data breach, we have an incident response plan in place to contain the breach, assess the impact, notify affected users, and report to relevant authorities as required by law.

While we implement robust security measures, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials. Do not share your username or password with anyone. If you suspect unauthorized access to your account, change your password immediately and contact [email protected].

8. Data Retention

gx88 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Data is retained for the duration of your active account plus a reasonable period to handle any post-closure inquiries or disputes.
• Closed Accounts: After you close your account, we retain certain data (identity documents, transaction records, communications) for up to seven (7) years to comply with AML/KYC regulations, tax laws, and legal hold obligations.
• Marketing Data: If you unsubscribe from marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you again.
• Cookies and Tracking Data: Session cookies are deleted when you close your browser. Persistent cookies expire according to their defined lifespan (typically 30-365 days). See Section 10 for details.

Once personal data is no longer needed, it is securely deleted or anonymized. Anonymized data may be retained indefinitely for statistical and analytical purposes.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data. gx88 respects these rights and provides mechanisms for you to exercise them:

• Right to Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (e.g., PDF, CSV) within 30 days of your request.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, you withdraw consent, or you object to processing. Note that we may be legally required to retain certain data even after a deletion request (e.g., for AML compliance).
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances (e.g., while we verify the accuracy of disputed data).
• Right to Data Portability: You have the right to receive your personal data in a portable format and transmit it to another service provider (where technically feasible).
• Right to Object: You may object to processing of your data for direct marketing purposes at any time. You can unsubscribe from marketing emails via the link provided or by contacting support.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: If you believe we have violated your privacy rights, you have the right to file a complaint with your local data protection authority.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days and may request additional information to verify your identity before processing your request.

10. Cookies and Tracking Technologies

gx88 uses cookies and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These cookies enable account login, session authentication, and secure transactions. You cannot disable these cookies without losing access to essential features.
• Performance Cookies: Collect anonymous data on how users interact with the Platform (pages visited, errors encountered). Used to improve Platform performance and user experience.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a more personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. These cookies require your consent in jurisdictions with strict privacy laws.

10.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when a cookie is being set. Instructions for managing cookies are available in your browser's help menu. Note that disabling certain cookies may impair Platform functionality.

You can also opt out of interest-based advertising by visiting industry opt-out pages such as the Digital Advertising Alliance (DAA) opt-out portal or the Network Advertising Initiative (NAI) opt-out tool.

11. International Data Transfers

gx88 operates internationally and may transfer your personal data to servers located outside Indonesia, including jurisdictions that may not offer the same level of data protection as your home country. When we transfer data internationally, we implement appropriate safeguards to protect your information, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission or other relevant authorities.
• Adequacy decisions recognizing that the recipient country provides adequate data protection.
• Binding Corporate Rules (BCRs) for intra-group transfers within multinational corporate structures.

By using the gx88 Platform, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.

12. Children's Privacy

gx88 does not knowingly collect, use, or solicit personal information from anyone under the age of 21. Our Platform is intended solely for adults who meet the legal gambling age in their jurisdiction (21+ for Indonesia). If we discover that we have inadvertently collected data from a minor, we will delete that information immediately and close the associated account. Parents or guardians who believe their child has provided personal information to gx88 should contact us at [email protected] with the subject line "Minor Privacy Concern".

13. Changes to This Privacy Policy

gx88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you via email (to the address on file) or through a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after the effective date of the revised Privacy Policy constitutes acceptance of the changes.

We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal information. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:

• Email: [email protected] (for general privacy inquiries)
• Data Protection Officer: [email protected] with subject line "Privacy Inquiry"
• Live Chat: Available 24/7 via the chat icon on the Platform
• Postal Address: gx88 Data Protection Department (address available upon request for formal legal correspondence)

We will respond to all privacy inquiries within 30 days. For urgent matters such as suspected data breaches or unauthorized access, please use live chat for the fastest response.