Your privacy is a foundational commitment at gg138. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is stored and protected, who we share it with, and what rights you hold over your own information. We encourage all members to read this document carefully before registering an account.
Every data exchange between your browser and gg138 is protected by 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal information are never transmitted in plain text under any circumstances.
gg138 never sells, rents, or trades your personal information to unaffiliated third parties for marketing purposes. Your data is shared only with licensed payment processors, KYC verification partners, and regulatory bodies as required.
We collect only the data necessary to provide the Services, verify your identity, process transactions, and meet our compliance obligations. We do not engage in excessive data collection or behavioral profiling beyond what is required to operate a secure gaming platform.
You have the right to access, correct, or request deletion of your personal data at any time. gg138 provides clear processes through which members can exercise these rights by contacting our support team directly.
All member data is stored on hardened, access-controlled servers with regular security audits. Data at rest is encrypted and subject to strict internal access policies — only authorised personnel with a legitimate operational need may access personal records.
gg138 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international licensing obligations. Upon expiry of the retention period, data is securely deleted or anonymised.
This Privacy Policy ("Policy") applies to all visitors, registered members, and users of the gg138 online gaming and sportsbook platform accessible at https://gg138.pro ("Platform"). By accessing the Platform or registering a Member account, you acknowledge that you have read, understood, and agree to the practices described in this Policy. This Policy is incorporated by reference into gg138's Terms & Conditions.
gg138 acts as the data controller in respect of all personal data collected from members and platform visitors. As data controller, gg138 determines the purposes and means by which your personal data is processed. All data-related enquiries, access requests, and complaints should be directed to our dedicated privacy team at the contact details provided in Section 15 of this Policy.
gg138 operates as an internationally licensed gaming platform. While our primary audience is located in Indonesia — including users across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and Semarang — the Platform is governed by the data protection standards of the jurisdiction in which our operating licence is held, supplemented by our own internal Privacy Framework which aligns with internationally recognised best practices.
gg138 collects the following categories of personal data from members and platform visitors. The specific data points collected in each category depend on the nature of your interaction with the Platform:
| Data Category | Specific Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (e.g., Indonesian KTP or passport number), and a copy of the identity document itself for KYC verification purposes. |
| Contact Data | Email address, Indonesian mobile phone number (including WhatsApp-registered numbers), and residential address including city (e.g., Jakarta, Bandung, Surabaya) and province. |
| Account Data | Username, hashed password, account registration date, account status, VIP tier, and all communications exchanged between you and gg138 customer support. |
| Financial Data | Bank account details for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records, wallet balance history, and IDR transaction amounts. |
| Transactional Data | Full betting and wagering history including game type (e.g., slot gacor, live casino, togel, sportsbook), stake amounts in Rupiah (IDR), odds accepted, settlement outcomes, and bonus fund usage records. |
| Technical Data | IP address, device type and model, operating system and version, browser type and version, screen resolution, session timestamps, login history, and geolocation data derived from your IP address. |
| Usage Data | Pages visited within the Platform, links clicked, game sessions initiated, session duration, search queries entered, promotional content interacted with, and feature usage patterns. |
| Marketing Preferences | Your stated preferences regarding promotional communications, opted-in channels (email, WhatsApp, SMS), and opted-out categories as registered through your account settings or communicated to support. |
Special Category Data: gg138 does not intentionally collect special category data (i.e., data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required for KYC compliance. If you voluntarily disclose such information in support communications, gg138 will handle it with heightened care and will not use it for any purpose beyond the immediate support query.
gg138 collects personal data through the following mechanisms:
gg138 processes your personal data only for clearly defined, legitimate purposes. The table below maps each processing activity to the data categories used and the corresponding legal basis (detailed in Section 5):
| Processing Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity Data, Contact Data, Account Data |
| KYC identity and age verification (21+ compliance) | Identity Data, Contact Data, Technical Data |
| Processing deposits and withdrawals in IDR | Financial Data, Identity Data, Account Data |
| Providing gaming and sportsbook services | Account Data, Transactional Data, Technical Data |
| Fraud prevention and AML compliance | All categories where relevant |
| Customer support and dispute resolution | Identity Data, Account Data, Transactional Data, Contact Data |
| Personalising your platform experience | Usage Data, Transactional Data, Marketing Preferences |
| Sending promotional communications (opt-in only) | Contact Data, Marketing Preferences |
| Platform security and abuse prevention | Technical Data, Account Data, Usage Data |
| Legal and regulatory compliance and reporting | Identity Data, Financial Data, Transactional Data |
gg138 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
gg138 does not sell your personal data. We share personal data only with the categories of third parties listed below, and only to the extent necessary for the stated purpose:
No Unauthorized Disclosure: Any third party that receives personal data from gg138 is required to process that data only for the specific purpose for which it was shared, under contractual data processing obligations consistent with this Policy. gg138 does not authorise third parties to use member data for their own independent marketing or commercial purposes.
As an internationally operated platform, gg138 may transfer personal data to servers and service providers located outside of Indonesia. Where such transfers occur, gg138 takes appropriate steps to ensure that an adequate level of data protection is maintained, including through the use of contractual data transfer agreements with recipient entities that impose data protection obligations equivalent to those applied by gg138.
In particular, transfers to game content providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) may involve the routing of anonymised session data to servers in the European Economic Area, Isle of Man, Malta, or other regulated gaming jurisdictions. Members located in Jakarta, Surabaya, Bali, Bandung, and other Indonesian cities should be aware that their anonymised gaming session data may be processed on infrastructure located in these jurisdictions as part of the normal operation of the game engines.
gg138 retains personal data for the periods set out below. Where retention is required by our licensing authority or applicable law, we retain data for the legally mandated minimum period even if your account is closed:
| Data Category | Retention Period |
|---|---|
| Identity and KYC documents | 5 years from the date of account closure or last transaction, whichever is later (AML regulatory requirement). |
| Financial transaction records | 5 years from the date of each transaction (AML and licensing requirement). |
| Betting and wagering history | 3 years from the date of each wagering event, or until account closure plus 1 year, whichever is longer. |
| Account and contact data | Duration of the active account relationship, plus 2 years following account closure to facilitate dispute resolution. |
| Customer support communications | 3 years from the date of the support interaction. |
| Technical and usage data (logs) | 13 months from collection, unless retained longer for fraud investigation purposes. |
| Marketing consent records | Duration of active consent, plus 3 years following withdrawal of consent (for proof of consent purposes). |
Upon expiry of the applicable retention period, personal data is securely deleted from gg138's active systems and backup archives within a reasonable operational timeframe, or is irreversibly anonymised so that it can no longer be associated with any identifiable individual.
gg138 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and alteration. These measures include, but are not limited to:
Your Responsibility: While gg138 takes extensive technical measures to protect your data, the security of your account also depends on the strength of your password and the security of your personal device. You should use a unique, strong password for your gg138 account and never share your login credentials with any other person. If you suspect your account has been compromised, contact our support team immediately via live chat or WhatsApp.
gg138 uses cookies and similar tracking technologies (including session tokens, local storage objects, and pixel tags) to operate and improve the Platform. The categories of cookies used are as follows:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your account or accessing the Platform's core features. gg138 does not use third-party advertising or retargeting cookies.
As a member of gg138, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our privacy team at the details provided in Section 15. We will respond to all rights requests within 30 calendar days of receipt:
gg138 is strictly an adults-only platform. You must be at least 21 years of age to register a Member account or access any real-money gaming services on the Platform. This age requirement applies universally to all users, including those located in Jakarta, Surabaya, Bali, Bandung, Yogyakarta, and all other regions of Indonesia.
gg138 does not knowingly collect personal data from individuals under the age of 21. As part of our KYC verification process, all members are required to submit a government-issued identity document confirming their date of birth before any real-money deposit or withdrawal can be processed. Any account found to belong to a person under 21 years of age will be immediately suspended, all balances will be frozen pending investigation, and the matter will be referred to our compliance team.
If you believe a minor has registered an account on gg138, please contact our support team immediately at [email protected] or via live chat. We take age-restriction compliance extremely seriously and will act on all credible reports without delay.
The gg138 Platform may contain references to third-party services — including game studio content provided by Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, and Spribe — that are governed by those third parties' own privacy policies. gg138 is not responsible for the privacy practices or content of any third-party service providers whose software or content is embedded within or linked from the Platform.
When you interact with a live dealer game powered by Evolution Gaming, for example, your in-game session data is processed under Evolution Gaming's own data processing terms in addition to this Policy. We recommend reviewing the privacy documentation of any third-party content providers whose services you use extensively on the Platform. In all cases, gg138 contracts with its content providers to ensure that member data is processed only for the purposes of delivering the contracted gaming services and not for any independent commercial purpose.
gg138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our international licensing requirements. When we make a material change to this Policy, we will notify registered members by posting a prominent notice on the Platform and, where practicable, by sending a notification to your registered email address or WhatsApp number at least 7 days before the change takes effect.
Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with the amended Policy, you must cease using the Platform and contact support to initiate account closure before the effective date of the change. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this page periodically.
If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to raise a concern about how gg138 handles your personal data, please contact our dedicated privacy team through any of the following channels. We are committed to responding to all privacy-related enquiries within 30 calendar days:
To protect your privacy and ensure that personal data is only disclosed to the account holder, all data rights requests will require identity verification before we can action them. Please be prepared to confirm your registered email address, username, and — for sensitive requests — a copy of the identity document on file with your account.
Now that you understand how gg138 handles your personal data, you can enjoy our full range of gaming and betting services with complete peace of mind. From BRI Liga 1 live sportsbook and slot gacor titles to premium live casino tables — all protected by enterprise-grade security. 21+ only. Please gamble responsibly.