Your privacy matters to us. This policy explains exactly what personal data gg28 collects from Indonesian players, how we use it, who we share it with, how long we keep it, and what rights you hold over your own information.
Six core principles that govern every decision gg28 makes about your personal data.
We collect only the personal data that is strictly necessary to provide the gg28 service, comply with legal obligations, and verify your identity. We do not harvest data speculatively or for sale.
All personal data is stored on encrypted servers protected by TLS 1.3 encryption in transit and AES-256 encryption at rest. Access is restricted to authorized personnel on a strict need-to-know basis.
gg28 will never sell, rent, or broker your personal data to third-party advertisers, data brokers, or marketing companies. Your information exists to serve you, not to generate revenue for others.
You have the right to access, correct, export, and in certain circumstances delete your personal data. We process these requests promptly and without unnecessary bureaucratic hurdles.
Promotional emails and SMS messages are sent only with your consent. You may withdraw that consent at any time via your account settings or by contacting our support team, and we will stop marketing communications promptly.
This policy is written in plain English so you understand exactly what happens to your data. We update it whenever our practices change and notify registered players of material changes before they take effect.
gg28 ("we", "us", "the Company") operates the online gaming platform accessible at https://gg28.cam (the "Platform"), serving registered players primarily in Indonesia. We are committed to protecting the personal information of everyone who uses our services, and we take our data protection responsibilities seriously.
This Privacy Policy explains how gg28 collects, uses, stores, and discloses personal data in connection with the Platform. It applies to all registered players, prospective players who browse the Platform, and anyone who contacts our customer support team. This Policy should be read alongside our Terms & Conditions.
By registering a gg28 account, depositing funds, or continuing to browse the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices it describes. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
Sc ope: This policy covers data collected through the gg28 website, mobile browser interface, live chat system, email correspondence, and any other channel through which you interact with gg28. It does not cover third-party websites or services that may be linked from our Platform.
Throughout this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion. |
| "Controller" | The entity that determines the purposes and means of processing personal data — in this context, gg28. |
| "Processor" | A third party that processes personal data on gg28's behalf, such as a payment gateway or KYC verification provider. |
| "KYC" | Know Your Customer — the identity and age verification process mandated by our licensing obligations. |
| "Sensitive Data" | A subset of personal data requiring heightened protection, including government-issued ID numbers, financial account details, and health-related information. |
| "Cookie" | A small text file placed on your device by the Platform to enable functionality, remember preferences, and support analytics. |
gg28 collects personal data from you through multiple channels and at different stages of your relationship with the Platform. The categories of data we collect include:
3.1 Registration Data
When you create a gg28 account, we collect your full legal name, date of birth, email address, mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung, Medan, or elsewhere in Indonesia), preferred username, and account password (stored in hashed form — we never store passwords in plain text).
3.2 Identity Verification (KYC) Data
To comply with our licensing obligations and prevent underage gambling, we collect copies of government-issued identity documents such as your Indonesian National ID Card (KTP), passport, or driver's license (SIM). We also collect selfie photographs for facial matching, proof of address documents, and where required, documentation of the source of your funds.
3.3 Financial Data
When you make a deposit or request a withdrawal, we collect your bank account name, bank account number, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI), and e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja. We do not store full card numbers or CVV codes. Transaction histories — amounts, timestamps, and payment method used — are retained for audit and compliance purposes.
3.4 Gaming Activity Data
We record all wagers placed on the Platform, including game type, stake amounts in IDR, outcomes, session durations, and betting patterns. This data is used to deliver the service, detect fraud, and support responsible gaming monitoring.
3.5 Technical & Device Data
We automatically collect IP address, browser type and version, operating system, device model, screen resolution, referring URL, pages visited, session duration, and clickstream data. This information helps us maintain platform security, diagnose technical issues, and improve the user experience.
3.6 Communications Data
When you contact our support team via live chat, email, or WhatsApp, we retain transcripts of those communications for quality assurance, dispute resolution, and training purposes.
Data You Choose to Provide: Some data fields during registration are optional (for example, a secondary phone number). Providing optional data is entirely your choice and does not affect your ability to use the core Platform features.
gg28 uses your personal data for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation & management | Registration data, device data, communication preferences |
| Age & identity verification (KYC) | KYC documents, selfie photos, registration data |
| Processing deposits & withdrawals | Financial data, KYC data, transaction history |
| Delivering gaming services | Gaming activity data, account data, device data |
| Fraud prevention & security | Technical data, financial data, gaming activity data |
| Responsible gaming monitoring | Gaming activity data, account data, communications data |
| Customer support | Communications data, account data, transaction history |
| Marketing & promotions (with consent) | Registration data, gaming activity data, preferences |
| Legal compliance & reporting | All categories as required by applicable law |
| Platform analytics & improvement | Technical data, gaming activity data (aggregated/anonymized) |
We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. Where automated tools flag an account for review (for example, for suspected fraud or bonus abuse), a member of our compliance team will review the case before any enforcement action is taken.
gg28 processes your personal data only where a lawful basis exists to do so. The applicable legal bases are as follows:
gg28 does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:
Third-Party Contracts: All third parties with whom we share personal data are required to handle it in accordance with applicable data protection standards. We maintain data processing agreements with all processors that impose equivalent confidentiality and security obligations.
gg28 operates internationally and some of the third-party processors we engage — including game studios and KYC providers — may store or process data on servers located outside Indonesia. Where personal data is transferred outside your home jurisdiction, gg28 takes appropriate safeguards to ensure that your data receives an equivalent level of protection, including:
By using the gg28 Platform, you acknowledge and consent to the international transfer of your personal data as described in this clause.
gg28 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. The types of cookies we use are:
Your browser settings may allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or marketing cookies will not affect core functionality.
gg28 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to overriding legal retention requirements. Our standard retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure |
| KYC / identity documents | Duration of account plus 5 years after closure |
| Financial transaction records | 7 years from the date of each transaction |
| Gaming activity logs | Duration of account plus 3 years after closure |
| Customer support transcripts | 3 years from the date of each interaction |
| Technical / server logs | 12 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, plus 2 years thereafter |
When personal data reaches the end of its retention period, it is securely deleted or irreversibly anonymized. Where a legal hold is in place (for example, due to ongoing litigation or a regulatory investigation), data will be retained until the hold is lifted.
As a player whose personal data is processed by gg28, you hold the following rights. You may exercise any of these rights by contacting us at [email protected] with the subject line "Data Rights Request — [Your Username]".
We will respond to all data rights requests within 30 days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 60 days and will notify you accordingly. We will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.
gg28 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process requires you to confirm that you are at least 21 years of age, and our KYC process verifies this through identity document checks.
If we become aware that personal data has been collected from a person under 21 — whether through a fraudulent registration or any other means — we will immediately suspend the relevant account, delete the associated personal data (subject to any legal retention requirements for fraud investigation purposes), and, where appropriate, report the matter to relevant authorities.
If you are a parent or guardian and believe your child may have accessed or registered on the gg28 Platform, please contact us immediately at [email protected].
21+ Policy: Online gaming is for adults only. gg28 enforces a strict minimum age of 21 in alignment with responsible gaming best practices for the Indonesian market. Any attempt to circumvent this restriction is a serious violation of our Terms & Conditions.
gg28 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
While we employ industry-standard security practices, no online platform can guarantee absolute security. You play an important role in your own data protection by choosing a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with others.
The gg28 Platform may display content from, or reference, third-party services such as game studios, payment providers, or sports data feeds. These third parties operate under their own privacy policies, which are entirely separate from and independent of this Privacy Policy.
gg28 is not responsible for the privacy practices, data security measures, or content of any third-party service. We recommend reviewing the privacy policy of any third-party service before providing them with your personal information. The presence of a third-party name or logo on the gg28 Platform does not constitute an endorsement of that party's privacy or data practices.
gg28 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business oper ations. When we make material changes to this Policy, we will:
Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the Platform and may request account closure by contacting our support team.
We encourage you to review this Privacy Policy periodically so that you remain informed about how gg28 protects your personal data. The most current version of this Policy is always available at https://gg28.cam/privacy-policy.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how gg28 has handled your personal data, please contact us through one of the following channels:
We aim to resolve all privacy-related enquiries within 14 business days. For formal data rights requests, the 30-day response window described in Section 10 applies.
If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the data protection authority or regulatory body in your jurisdiction, or to the licensing authority that oversees gg28's operations. We take all complaints seriously and will cooperate fully with any regulatory investigation.
Data Protection Contact: For all formal data protection enquiries and data rights requests, please email [email protected] with clear details of your request and your registered account username. We will acknowledge your request within 48 hours and keep you informed of progress throughout.
Our support team is available around the clock to answer any questions about how gg28 handles your personal data. You can also explore our FAQ, review our full Terms & Conditions, or learn about our Responsible Gaming commitment.