gg825 operates the online casino and sportsbook platform accessible at https://gg825.pro (the "Platform"). In the context of this Privacy Policy, gg825 acts as the data controller responsible for the personal data collected from players registered on the Platform. Our primary market is Indonesia, and we serve players across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Palembang, and Makassar, as well as the wider Indonesian archipelago.
This Privacy Policy applies to all data collected through the Platform, including data collected during account registration, gameplay, payment transactions, customer support interactions, and marketing communications. By creating an account and using gg825's services, you acknowledge that you have read, understood, and agreed to the practices described in this policy.
If you have questions about our identity as data controller or wish to exercise any of your data rights, please refer to Section 14 (Contact Us) at the end of this document.
gg825 collects personal data across several categories. The table below summarises the types of data we collect, the purpose for which each category is collected, and the legal basis on which collection is justified:
| Data Category |
Examples |
Primary Purpose |
| Identity Data |
Full legal name, date of birth, nationality, KTP number, passport/driving licence scan |
Age verification, KYC compliance, fraud prevention |
| Contact Data |
Email address, Indonesian mobile number, residential address in Indonesia |
Account communications, support, marketing (with consent) |
| Financial Data |
Bank account name and last-4 digits (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR |
Payment processing, AML compliance, withdrawal verification |
| Technical Data |
IP address, device type, browser type, operating system, session timestamps (WIB) |
Security, fraud detection, platform optimisation |
| Gameplay Data |
Game history, bet amounts (IDR), win/loss records, session duration, sports markets bet (e.g., BRI Liga 1, EPL) |
Dispute resolution, responsible gaming monitoring, product improvement |
| Communication Data |
Live chat transcripts, email correspondence, support ticket records |
Quality assurance, complaint resolution, training |
| Marketing Preferences |
Email/SMS opt-in status, promotion history, bonus redemption records |
Personalised promotions (only with your consent) |
Sensitive Data: gg825 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where you voluntarily disclose health-related information in the context of a responsible gaming self-exclusion request. Such disclosures are handled with strict confidentiality and are accessible only to our responsible gaming team.
gg825 collects personal data through the following means:
- Direct collection at registration: When you create a gg825 account, you voluntarily provide identity, contact, and payment data by completing our registration and KYC verification forms.
- Transactional activity: Every deposit, withdrawal, and in-game wager automatically generates financial and gameplay data records associated with your account.
- Automated technical collection: Our servers automatically log IP addresses, device identifiers, session timestamps, and browser metadata whenever you connect to the Platform. This data is collected using server-side logging and first-party cookies — see Section 7 for details.
- Customer support interactions: When you contact us via live chat, email, or any other support channel, the content and metadata of those communications are recorded and stored against your account.
- KYC document uploads: When you submit identity documents (e.g., KTP — Kartu Tanda Penduduk, passport, or bank statement) via our verification portal, those documents are securely ingested and processed by our compliance team.
- Marketing interactions: If you click on a gg825 promotional email or engage with an on-site promotional banner, interaction data such as click-through rate and redemption behaviour is recorded.
gg825 processes your personal data only where we have a valid legal basis to do so. The legal bases we rely on are as follows:
- Contractual Necessity: Processing your identity, contact, financial, and gameplay data is necessary to fulfil our contract with you — that is, to provide you with access to our gaming platform, process your deposits and withdrawals in IDR, and deliver the services described in our Terms & Conditions.
- Legal Obligation: Certain processing activities — particularly KYC verification, AML transaction monitoring, and the retention of financial records — are required by applicable law and our international operating licence obligations.
- Legitimate Interests: We process technical data (IP addresses, session logs, device identifiers) on the basis of our legitimate interest in maintaining platform security, detecting fraud, preventing multi-accounting, and optimising the user experience for Indonesian players.
- Consent: We process your contact data for marketing communications — including promotional emails, bonus notifications related to events such as Idul Fitri and Ramadhan, and personalised offers — solely on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
gg825 uses the personal data we collect for the following specific purposes:
- Account Management: Creating and maintaining your player account, authenticating your identity at login, enforcing the one-account-per-player rule, and enabling account security features such as two-factor authentication.
- Payment Processing: Facilitating IDR deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and Bank Permata; processing e-wallet transactions through OVO, DANA, GoPay, ShopeePay, and LinkAja; and executing withdrawal requests to your verified payment method.
- KYC & Compliance: Verifying your age (minimum 21 years) and identity in accordance with our responsible gaming commitments, confirming your Indonesian residency, and meeting our international AML compliance obligations.
- Responsible Gaming: Monitoring gameplay patterns to identify potential signs of problem gambling; enforcing deposit limits, cooling-off periods, and self-exclusion requests; and proactively reaching out to players who show at-risk behaviour patterns.
- Customer Support: Responding to your queries, resolving disputes, processing bonus claims, and maintaining quality assurance records of all support interactions in English and Indonesian.
- Platform Security: Detecting and preventing fraud, unauthorised account access, collusion, use of automated betting software, and any other activity that violates our Terms & Conditions.
- Service Improvement: Analysing aggregated, anonymised gameplay and usage data to improve platform performance, expand our game library (including slot gacor titles from Pragmatic Play and NetEnt), and enhance the sportsbook coverage of BRI Liga 1, EPL, Champions League, and MotoGP Mandalika.
- Marketing Communications: Sending you personalised promotions, bonus offers, and event-related communications — for example, special deposit bonuses during Ramadhan or Idul Fitri — provided you have given your explicit consent to receive such communications.
No Automated Decision-Making with Legal Effect: gg825 does not use fully automated decision-making processes that produce legal effects or similarly significant outcomes for players, without human review. Where automated tools assist in fraud detection or responsible gaming assessments, a member of our compliance team reviews any resulting action before it is applied to your account.
gg825 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited and controlled circumstances:
- Payment Processors: Your financial data is shared on a need-to-know basis with our Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of executing your requested transactions. These providers are bound by their own strict data protection obligations.
- KYC & Identity Verification Providers: Your identity documents may be processed by a third-party KYC verification service provider engaged by gg825 under a data processing agreement that prohibits any use of your data outside of the verification mandate.
- Game Studio Providers: When you play a live casino game operated by Evolution Gaming or Pragmatic Play Live, or a slot title by NetEnt, Microgaming, Spribe, or Pocket Games Soft, limited technical session data (such as session tokens) is shared with those studios to facilitate gameplay. These studios operate under strict licensing agreements and do not receive your personal identity or financial data.
- Legal & Regulatory Authorities: gg825 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, court order, or applicable law. We will notify you of such disclosures where legally permitted to do so.
- Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of gg825's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and given the opportunity to close your account before the transfer takes effect.
No Cross-Border Data Transfers Without Safeguards: Where any of the above third-party sharing involves transferring your data outside of Indonesia, gg825 ensures that appropriate contractual safeguards — such as standard data processing clauses — are in place to protect your data to a standard equivalent to that applied within Indonesia.
gg825 uses cookies and similar tracking technologies to operate the Platform effectively and deliver a personalised experience. The following categories of cookies are used:
- Strictly Necessary Cookies: These are required for the Platform to function. They maintain your login session, remember your wallet balance state, and enable core security features such as CSRF protection. These cookies cannot be disabled without rendering the Platform inoperable.
- Functional Cookies: These remember your preferences — such as your preferred game category, language setting, and notification preferences — so that you do not need to re-enter them on each visit.
- Analytical Cookies: These help us understand how players interact with the Platform — for example, which game categories are most visited and which deposit flows have the highest completion rates. Analytical data is aggregated and anonymised before being used for product decisions.
- Security Cookies: These support our fraud detection and account security systems by recording session fingerprints and detecting anomalous access patterns across Indonesian cities and time zones (WIB, WITA, WIT).
You can control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent you from logging in to your gg825 account. gg825 does not use third-party advertising or retargeting cookies on the Platform.
gg825 implements a comprehensive, multi-layered security programme to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:
- Encryption at Rest: All personal data stored on gg825 servers — including identity documents, financial records, and gameplay history — is encrypted using AES-256. Encryption keys are managed through a dedicated hardware security module (HSM).
- Encryption in Transit: All data transmitted between your device and gg825 servers is protected by 256-bit SSL/TLS encryption. Our Platform enforces HTTPS-only connections and uses HTTP Strict Transport Security (HSTS).
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff members are granted only the minimum data access permissions required for their role. All administrative access is logged and audited.
- Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services. Regular penetration testing is conducted by independent security professionals.
- Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, gg825 will notify affected players within 72 hours of becoming aware of the breach, providing details of the nature of the breach, the data affected, and the steps being taken to address it.
Your Role in Security: While gg825 takes every reasonable step to protect your data, the security of your account also depends on you. You should use a strong, unique password for your gg825 account, enable two-factor authentication where available, and never share your login credentials with any third party. gg825 will never ask for your password via email, live chat, or phone.
gg825 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
- Account Data & KYC Documents: Retained for the duration of your active account plus five years following permanent account closure, in accordance with standard AML record-keeping requirements.
- Financial Transaction Records: Retained for seven years from the date of each transaction, as required for financial compliance and audit purposes.
- Gameplay Records: Retained for five years from the date of each gaming session, for dispute resolution and responsible gaming monitoring purposes.
- Customer Support Records: Retained for three years from the date of the last communication, for quality assurance and complaint management purposes.
- Marketing Preference Records: Retained for two years from the date of your last interaction with a gg825 marketing communication, or until you withdraw consent, whichever occurs first.
- Technical Log Data: IP address and session logs are retained for 12 months, after which they are automatically purged from our systems.
When data is no longer required and no legal obligation mandates its retention, gg825 securely destroys it using industry-standard data wiping and shredding procedures.
As a player registered on the gg825 Platform, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting our Data Privacy team at the address in Section 14:
- Right of Access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of your verified request, free of charge for the first request per 12-month period.
- Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Simple corrections (e.g., email address updates) can be made directly from your account dashboard.
- Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw the consent on which processing was based. This right is subject to our legal retention obligations described in Section 9.
- Right to Restrict Processing: You may request that we temporarily suspend processing of your data — for example, while a dispute about data accuracy is being resolved — without requiring deletion.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a structured, machine-readable export of the personal data you have provided to us.
- Right to Object: You may object to processing carried out on the basis of our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
- Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Verification Requirement: To protect your data, gg825 requires identity verification before processing any data rights request. We will ask you to confirm your registered email address and complete a brief security check before acting on your request.
gg825 strictly enforces a minimum age requirement of 21 years for all registered players. The Platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. This policy aligns with responsible gaming best practice for the Indonesia market.
Where gg825 discovers or is notified that an account has been registered by a person under the age of 21, the account will be immediately suspended, all data associated with that account will be securely deleted, and any funds will be returned to the verified payment method of the account holder of record. A comprehensive review of the circumstances will be conducted.
Parents and guardians who believe a minor may have registered an account or accessed the Platform through their device are encouraged to contact gg825 support immediately. We take underage access seriously and will act promptly on all such reports. For guidance on parental controls and internet filtering tools that can be applied on Indonesian network providers (including Telkomsel, Indosat, XL Axiata), please visit our Responsible Gaming page.
The gg825 Platform does not contain outbound links to third-party websites or services outside of the gg825 domain. All navigation — including game access, payment flows, and support — takes place entirely within the gg825 Platform environment. This Policy does not apply to any third-party websites or services that you access independently outside of the Platform.
Game content delivered by our studio partners (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft) is rendered within the gg825 Platform interface. While these studios' own privacy practices govern any data they process directly, gg825 contractually limits the data shared with these studios to the minimum necessary to facilitate the gaming session, as described in Section 6.
gg825 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify you by email to the address on your account and by displaying a prominent notice on the Platform at least 7 days before the changes take effect.
The "Last Updated" date at the top of this page reflects the effective date of the current version. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgement of the updated policy. If you do not agree with the revised policy, you may request account closure in accordance with the procedures described in our Terms & Conditions.
We encourage you to review this Privacy Policy periodically. Previous versions of this policy are available upon request from our Data Privacy team.