gcs108 Privacy Policy

The following terms are used throughout this Privacy Policy with the meanings assigned below:

gcs108 collects Personal Data through two primary channels: data you provide directly, and data collected automatically through your use of the platform.

2.1 Data You Provide Directly. When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you may provide:

• Identity data: Full legal name, date of birth, nationality, government-issued identification number (e.g., Indonesian KTP number, passport number)
• Contact data: Email address, mobile phone number, city and province of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali)
• Financial data: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction history
• KYC documents: Scanned or photographed copies of government-issued identity documents and proof of address, submitted for age and identity verification
• Communications data: Records of your correspondence with gcs108 customer support, including live chat transcripts and email exchanges

2.2 Data Collected Automatically. When you visit or use the gcs108 platform, our systems automatically collect:

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone (defaulting to WIB, UTC+7)
• Usage data: Pages visited, games played, bet amounts, session duration, login timestamps, and navigation paths within the platform
• Cookie and tracking data: Session identifiers, preference cookies, and analytics identifiers as described in Section 6 of this policy
• Geolocation data: Approximate geographic location derived from your IP address, used to detect access from Restricted Territories

gcs108 uses the Personal Data it collects for the following specific and documented purposes:

gcs108 processes your Personal Data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing that is required to perform the contract between you and gcs108 — specifically, to register your account, process transactions, provide game access, and deliver customer support.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations under the international licensing framework under which gcs108 operates, and financial record-keeping requirements.
• Legitimate Interests: Processing conducted for gcs108's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, analytics, and service improvement. gcs108 conducts a balancing assessment before relying on this basis.
• Consent: Processing carried out with your explicit, freely given, specific, and informed consent — in particular, the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

gcs108 does not sell your Personal Data. We share your data only in the following limited and documented circumstances:

5.1 Third-Party Processors. gcs108 engages carefully selected Third-Party Processors who handle Personal Data strictly on our behalf and under binding contractual obligations. These include:

• Payment processors and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, and others) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data necessary to process your transactions.
• KYC and identity verification providers: Specialist third-party services that authenticate identity documents and perform age verification checks. These providers receive only the data required for verification and are contractually prohibited from using it for any other purpose.
• Game studios: Certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive pseudonymised session identifiers for the purpose of game delivery and fairness certification. No directly identifiable data is shared with game studios beyond what is technically necessary.
• Analytics providers: Aggregated, anonymised platform usage data may be shared with analytics services to support platform improvement. No individually identifiable data is included in analytics reports.

5.2 Legal Disclosure. gcs108 may disclose your Personal Data to law enforcement, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law, valid legal process, or in order to protect the rights, property, or safety of gcs108, its Members, or third parties.

5.3 Business Transfers. In the event that gcs108 undergoes a merger, acquisition, or sale of substantially all of its assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change in the applicable privacy policy prior to the transfer taking effect.

The gcs108 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in and use core gcs108 features. Disabling analytics or marketing cookies will not affect your ability to play or transact.

gcs108 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal, regulatory, or contractual retention obligations.

• Active account data: Retained for the duration of your membership and for a period of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction records: Financial transaction records including deposits, withdrawals, and bet history are retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: Identity verification documents are retained for five (5) years following account closure, or longer if required by applicable law or an ongoing investigation.
• Customer support communications: Support correspondence is retained for three (3) years from the date of the last communication in a thread, for dispute resolution and quality assurance purposes.
• Marketing data: Where you have opted in to marketing, your contact details and preferences are retained until you withdraw consent, after which they are removed from active marketing lists within 30 days.
• Anonymised analytics data: Aggregated, non-identifiable analytics data may be retained indefinitely for statistical and platform improvement purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised.

gcs108 implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport security: All data transmitted between your device and gcs108 servers is encrypted using 256-bit TLS (Transport Layer Security). Our SSL certificate is maintained current and audited regularly.
• At-rest encryption: Sensitive data stored on gcs108 infrastructure — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to systems containing Personal Data is restricted on a strict need-to-know basis. All internal access is logged, monitored, and subject to multi-factor authentication.
• Penetration testing: gcs108 conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: gcs108 maintains a documented data breach response procedure. In the event of a breach that poses a risk to Members, affected individuals will be notified within 72 hours of gcs108 becoming aware of the breach, to the extent operationally practicable.

Your Responsibilities. You also play an important role in protecting your data. You should keep your gcs108 login credentials confidential, use a strong and unique password, enable two-factor authentication where available, and contact gcs108 support immediately if you suspect unauthorised access to your account.

gcs108 respects your rights over your own Personal Data. The following rights are available to all gcs108 Members. To exercise any of these rights, contact our support team at [email protected]. We will respond within 30 calendar days of receiving a valid request.

Verification. To protect the security of your data, gcs108 will verify your identity before processing any data rights request. Verification may require you to confirm account details or submit a copy of a government-issued identity document. gcs108 does not charge a fee for processing data rights requests unless the request is manifestly unfounded, repetitive, or excessive.

The gcs108 platform is strictly intended for adults aged 21 years and over. gcs108 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and accounts where the Member cannot confirm they meet the 21+ age requirement will not be permitted to deposit, play, or withdraw.

If gcs108 becomes aware that Personal Data has been collected from an individual under the age of 21 without verified parental or guardian consent, that data will be deleted promptly and the associated account permanently closed. If you believe a minor has registered on the gcs108 platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

gcs108 operates as an internationally licensed platform. As such, some of your Personal Data may be transferred to, stored in, or processed in countries outside of Indonesia. This may occur when data is handled by Third-Party Processors such as KYC verification providers, game studios (including Pragmatic Play, Evolution Gaming, NetEnt, and Spribe), or cloud infrastructure providers whose servers are located outside Indonesia.

Where such transfers occur, gcs108 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to the protections afforded under this Privacy Policy. These safeguards include contractual data processing agreements with all Third-Party Processors that impose binding data protection obligations consistent with internationally recognised standards.

By registering a gcs108 account, you acknowledge and consent to the transfer of your Personal Data to international locations for the purposes described in this policy.

gcs108 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify you by email to the address registered on your account and by posting a prominent notice on the gcs108 platform homepage, with at least seven (7) days' advance notice before the changes take effect.

Your continued use of the gcs108 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The version number and effective date displayed at the top of this document confirm which version currently applies. If you do not agree with the updated policy, you should cease using the platform and request account closure before the effective date.

Prior versions of this Privacy Policy are retained internally and are available upon written request to [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how gcs108 handles your Personal Data, please contact our support team:

If you are dissatisfied with gcs108's response to a privacy complaint, you may escalate your concern to the relevant data protection authority or regulatory body applicable under gcs108's international operating jurisdiction.