Privacy Policy

1. Introduction

This Privacy Policy applies to all personal information collected by ggsoft through our website, mobile applications, and related services (collectively, "Services"). ggsoft operates an online gaming platform serving users in Indonesia, and we are committed to protecting your privacy in accordance with international data protection standards and applicable Indonesian regulations.

By registering an account or using ggsoft services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this policy, you must not use our Services.

2. Information We Collect

ggsoft collects several categories of personal information to provide, maintain, and improve our services, ensure platform security, prevent fraud, and comply with legal obligations.

2.1 Information You Provide Directly

When you register for a ggsoft account, we collect the following information that you provide voluntarily:

• Personal Identification Information: Full legal name, date of birth, gender, nationality, residential address, and contact details (email address, phone number).
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers.
• Identity Verification Documents: Government-issued identification such as Indonesian National ID (KTP), passport, or driver's license; proof of address documents (utility bills, bank statements); selfie photos holding identification documents.
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet account information (OVO, DANA, GoPay), and payment transaction history.
• Communication Data: Messages sent through our customer support channels, feedback forms, or survey responses.

2.2 Information Collected Automatically

When you access and use ggsoft services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Connection Data: IP address, geographic location (city/region level derived from IP), internet service provider, and connection timestamps.
• Usage Information: Pages visited, games played, bet amounts, win/loss records, session duration, click patterns, navigation paths, and feature usage statistics.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track user preferences, maintain session authentication, analyze platform performance, and deliver personalized content.

2.3 Information from Third Parties

In certain circumstances, ggsoft may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data from banks and payment gateways (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) to verify deposits and withdrawals.
• Identity Verification Services: Age and identity verification results from third-party KYC providers.
• Fraud Prevention Services: Risk assessment data from fraud detection and prevention partners.
• Affiliates and Marketing Partners: Referral source information if you accessed ggsoft through an affiliate link or marketing campaign.

3. How We Use Your Information

ggsoft uses your personal information for the following purposes:

3.1 Service Provision and Account Management

• Create, maintain, and manage your ggsoft account.
• Process deposits, withdrawals, and other financial transactions.
• Enable you to access and use gaming products including sports betting, casino games, and lottery services.
• Display account balances, transaction history, and betting records.
• Provide customer support and respond to your inquiries.
• Send important account notifications including transaction confirmations, security alerts, and policy updates.

3.2 Legal and Regulatory Compliance

• Verify your age (21+ requirement) and identity to comply with gaming regulations.
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by law.
• Prevent fraud, money laundering, terrorist financing, and other illegal activities.
• Respond to law enforcement requests, court orders, or legal processes.
• Maintain records for audit and regulatory reporting purposes.
• Enforce our Terms and Conditions and protect our legal rights.

3.3 Security and Fraud Prevention

• Detect and prevent fraudulent transactions, account takeovers, and unauthorized access.
• Monitor for collusion, bonus abuse, arbitrage betting, and other prohibited activities.
• Identify suspicious patterns that may indicate problem gambling or underage access attempts.
• Investigate security incidents and breaches.
• Implement risk-based authentication and access controls.

3.4 Service Improvement and Analytics

• Analyze user behavior to understand how our services are used and identify areas for improvement.
• Conduct research and analytics to enhance platform performance, stability, and user experience.
• Test new features, products, and functionality before public release.
• Measure marketing campaign effectiveness and user acquisition sources.
• Generate aggregated, anonymized statistics for business intelligence purposes.

3.5 Marketing and Promotional Communications

• Send promotional offers, bonus notifications, and VIP program updates (with your consent).
• Deliver personalized recommendations based on your gaming preferences and history.
• Notify you about new games, features, and platform updates.
• Conduct customer satisfaction surveys and request feedback.

Note: You can opt out of marketing communications at any time by adjusting your account preferences or clicking "unsubscribe" in promotional emails. Opting out will not affect essential service notifications.

3.6 Responsible Gaming

• Monitor gaming behavior for signs of problem gambling.
• Implement and enforce responsible gaming tools including deposit limits, loss limits, and self-exclusion.
• Provide support resources and intervention when problematic patterns are detected.
• Generate reports for responsible gaming audits and regulatory compliance.

4. How We Share Your Information

ggsoft does not sell your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who perform services on our behalf:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals.
• Identity Verification Services: KYC and AML screening providers to verify your identity and age.
• Game Providers: Licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe) to deliver gaming content.
• Cloud Infrastructure Providers: Hosting and data storage services for platform operation.
• Customer Support Tools: Live chat and ticketing system providers to deliver customer service.
• Analytics Services: Platform analytics and performance monitoring tools.
• Fraud Prevention Services: Risk assessment and fraud detection partners.

All service providers are contractually obligated to maintain confidentiality and use your information only for the purposes for which it was shared. They are prohibited from using your personal data for their own purposes.

4.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement, regulators, or courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or other legal processes.
• Report suspicious transactions under anti-money laundering regulations.
• Cooperate with law enforcement investigations of criminal activity.
• Respond to regulatory inquiries or audits from gaming authorities.
• Protect the rights, property, or safety of ggsoft, our users, or the public.
• Enforce our Terms and Conditions and investigate violations.

4.3 Business Transfers

In the event that ggsoft undergoes a business transition such as a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

In circumstances other than those described above, we will ask for your explicit consent before sharing your personal information with third parties.

5. Data Security

ggsoft employs industry-standard technical and organizational security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction:

5.1 Technical Security Measures

• Encryption: All data transmitted between your device and ggsoft servers is encrypted using 256-bit SSL/TLS protocols. Personal and financial data at rest is encrypted in our databases.
• Secure Infrastructure: Our platform is hosted on secure cloud infrastructure with redundancy, regular backups, and disaster recovery capabilities.
• Firewalls and Intrusion Detection: Network-level firewalls and intrusion detection/prevention systems monitor and block malicious traffic.
• Access Controls: Strict role-based access controls limit employee access to personal data on a need-to-know basis.
• Authentication: Multi-factor authentication and strong password requirements protect account access.
• Security Monitoring: 24/7 security monitoring and logging of system access and data changes.

5.2 Organizational Security Measures

• Employee Training: All staff undergo regular data protection and security awareness training.
• Confidentiality Agreements: Employees and contractors sign confidentiality agreements prohibiting unauthorized use or disclosure of personal information.
• Security Audits: Regular internal and external security audits and penetration testing to identify vulnerabilities.
• Incident Response: Documented incident response procedures for handling data breaches or security events.
• Vendor Management: Due diligence and contractual safeguards for all third-party service providers handling personal data.

6. Data Retention

ggsoft retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Active Account Data

Personal information for active accounts is retained throughout your relationship with ggsoft. This includes account details, transaction history, betting records, and communication logs.

6.2 Closed Account Data

When you close your ggsoft account, we will retain certain information as required by law for regulatory compliance, fraud prevention, and financial record-keeping purposes. Retention periods include:

• Financial Records: Minimum 7 years from account closure for tax and financial audit purposes.
• KYC Documents: Minimum 5 years from account closure as required by anti-money laundering regulations.
• Gaming Records: Minimum 5 years from account closure as required by gaming license conditions.
• Responsible Gaming Records: Self-exclusion records retained for the duration of exclusion plus 3 years.

After applicable retention periods expire, personal information will be securely deleted or anonymized such that it can no longer be used to identify you.

6.3 Legal Hold

If your information is subject to ongoing litigation, investigation, or regulatory inquiry, retention periods may be extended until the matter is resolved, even if you request deletion.

7. Your Privacy Rights

ggsoft respects your privacy rights and provides you with control over your personal information. Depending on your jurisdiction and applicable laws, you may have the following rights:

7.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format. You can also download your transaction history, betting records, and account data directly from your ggsoft account dashboard.

7.2 Correction

You have the right to correct inaccurate or incomplete personal information. You can update your contact details, address, and communication preferences directly in your account settings. For corrections to verified identity information (name, date of birth), please contact customer support with supporting documentation.

7.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions. We may be required to retain certain information for legal, regulatory, or legitimate business purposes as described in Section 6. To request deletion, please contact [email protected] with "Data Deletion Request" in the subject line.

7.4 Object to Processing

You have the right to object to certain types of data processing, particularly for direct marketing purposes. You can opt out of marketing communications at any time through your account settings or by clicking "unsubscribe" in promotional emails.

7.5 Restrict Processing

In certain circumstances, you have the right to request that we restrict the processing of your personal information, such as when you contest the accuracy of the data or object to processing.

7.6 Withdraw Consent

Where processing is based on your consent (such as marketing communications), you have the right to withdraw consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.

7.7 Lodge a Complaint

If you believe ggsoft has violated your privacy rights or data protection laws, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. However, we encourage you to contact us first at [email protected] so we can address your concerns directly.

Exercising Your Rights: To exercise any of these rights, please contact us at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days. We may need to verify your identity before processing your request to protect your personal information from unauthorized access.

8. Cookies and Tracking Technologies

ggsoft uses cookies and similar tracking technologies to enhance your user experience, maintain security, and analyze platform performance.

8.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for platform operation, session authentication, and security. These cannot be disabled.	Session / 1 year
Performance Cookies	Collect anonymous usage data to measure platform performance and identify technical issues.	1-2 years
Functional Cookies	Remember your preferences, language settings, and display options for a personalized experience.	1 year
Analytics Cookies	Track user behavior and interactions to improve our services and understand how features are used.	2 years

8.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling certain cookies may limit your ability to use some features of our platform. Disabling essential cookies will prevent you from logging into your account.

9. International Data Transfers

ggsoft operates internationally and may transfer your personal information to servers located outside Indonesia for processing and storage. When we transfer data across borders, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

10. Children's Privacy

ggsoft services are strictly intended for individuals who are at least 21 years of age. We do not knowingly collect personal information from anyone under the age of 21. If we discover that we have inadvertently collected information from a person under 21, we will delete that information immediately and terminate the associated account. If you believe a minor has provided personal information to ggsoft, please contact us immediately at [email protected].

11. Third-Party Links

The ggsoft platform may contain links to third-party websites, services, or advertisements. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit. ggsoft is not liable for any information you provide to third parties through external links.

12. Changes to This Privacy Policy

ggsoft reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page and notify users via email or through a prominent notice on our website. Your continued use of ggsoft services after such modifications constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or ggsoft's data practices, please contact us:

• Email: [email protected] (Subject: Privacy Inquiry)
• Data Protection Officer: Available through customer support for privacy-specific concerns
• Live Chat: Available 24/7 through the website for immediate assistance
• WhatsApp: Available 24/7 for urgent privacy or security matters

We aim to respond to all privacy inquiries within 48 hours, though most requests are addressed much faster. For data subject rights requests (access, deletion, correction), please allow up to 30 days for processing.