Contents
- 1. Definitions
- 2. Data We Collect
- 3. How Data Is Collected
- 4. Legal Basis for Processing
- 5. How We Use Your Data
- 6. Data Sharing & Disclosure
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Data Security
- 10. Your Rights
- 11. Minors & Age Restriction
- 12. Third-Party Services
- 13. International Data Transfers
- 14. Policy Amendments
- 15. Contact & Complaints
1. Definitions
In this Privacy Policy, the following terms carry the meanings set out below:
- "gama69", "we", "us", or "our" refers to the operator of the gama69 platform at gama69.cam.
- "Member", "you", or "your" refers to any individual who registers an account or uses the Platform in any capacity.
- "Personal Data" means any information relating to an identified or identifiable natural person — including name, date of birth, national ID number (KTP), email address, phone number, device identifiers, IP address, and financial account details.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
- "KYC Documents" means government-issued identity documents submitted by a Member for account verification purposes, including KTP, SIM, passport, and proof of address.
- "Platform" refers to the gama69 website, web applications, and all associated digital services accessible at gama69.cam.
- "Third-Party Providers" means external service providers who process Personal Data on gama69's behalf under data processing agreements, including payment processors, game studios, and fraud prevention services.
2. Data We Collect
gama69 collects the following categories of Personal Data from Members:
2.1 Account & Identity Data
- Full legal name as it appears on your government-issued ID.
- Date of birth (required to verify you are at least 21 years of age).
- National ID number (KTP) or passport number, collected during KYC verification.
- Registered email address and mobile phone number.
- Username and encrypted password hash.
2.2 Financial Data
- Bank account numbers and account holder names for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata accounts used for deposits and withdrawals.
- E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja accounts registered to your profile.
- Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.
2.3 KYC & Verification Data
- Scanned or photographed copies of government-issued identity documents.
- Selfie photographs taken for facial liveness verification where required.
- Proof of address documents such as utility bills or bank statements.
2.4 Usage & Technical Data
- IP address and approximate geolocation (city/region level).
- Device type, operating system, browser type and version.
- Session start and end times, pages visited, features accessed.
- Betting and gaming history including game selections, stake amounts, and outcomes.
- Communication records including live chat transcripts and support emails.
2.5 Responsible Gaming Data
- Deposit limit settings, session time limits, cool-off periods, and self-exclusion records.
- Internal behavioral flags generated by gama69's responsible gaming monitoring system.
3. How Data Is Collected
gama69 collects Personal Data through the following means:
- Registration forms: Information you provide when creating your Account.
- KYC submissions: Documents and photographs uploaded during identity verification.
- Deposit and withdrawal requests: Financial details provided when transacting on the Platform.
- Platform usage: Automatically collected technical and behavioral data as you navigate and use the Platform.
- Customer support interactions: Information you share with support agents via live chat or email.
- Cookies and similar tracking technologies: See Section 7 for full details.
- Third-party verification services: Identity and fraud-check data returned by KYC providers who process documents on our behalf.
4. Legal Basis for Processing
gama69 processes Personal Data on the following legal grounds:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (Member Agreement) |
| KYC identity and age verification | Legal obligation (AML / age-gate compliance) |
| Processing deposits and withdrawals | Performance of contract |
| Fraud detection and prevention | Legitimate interests of gama69 and Members |
| Responsible gaming monitoring | Legitimate interests; duty of care to Members |
| Customer support communications | Performance of contract |
| Platform analytics and improvement | Legitimate interests of gama69 |
| Promotional communications (where opted in) | Consent |
5. How We Use Your Data
Personal Data collected by gama69 is used for the following purposes:
5.1 Core Platform Operations
To create and manage your Account, process deposits and withdrawals in Indonesian Rupiah (IDR) via supported banks and e-wallets, settle bets and gaming sessions, and provide customer support across all communication channels.
5.2 Identity Verification & Compliance
To verify that you meet the minimum age requirement of 21 years, confirm your identity before processing withdrawals, comply with anti-money laundering (AML) obligations, and detect unauthorized or fraudulent Account activity.
5.3 Responsible Gaming
To monitor play patterns for indicators of problematic gambling behavior, enforce deposit limits and self-exclusion settings applied by the Member, and proactively contact Members whose activity suggests they may benefit from responsible gaming support.
5.4 Platform Security
To detect and prevent unauthorized Account access, identify and block malicious actors, monitor for bonus abuse and multi-accounting, and maintain the integrity of betting markets on gama69.
5.5 Service Improvement
To analyze aggregated usage patterns and improve the Platform's performance, navigation, game offering, and payment flow. Analytics data used for this purpose is aggregated and does not identify individual Members.
5.6 Communications
To send transactional communications (deposit confirmations, withdrawal notifications, account alerts), respond to support requests, and — where you have provided explicit consent — to deliver promotional offers relevant to your activity on gama69.
6. Data Sharing & Disclosure
6.1 No Sale of Personal Data. gama69 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes under any circumstances.
6.2 Authorized Third-Party Providers. gama69 shares Personal Data with third-party service providers strictly to the extent necessary to deliver Platform services. All such providers are bound by data processing agreements that restrict their use of your data to the specified purpose only. Categories of authorized providers include:
- Payment processors: Banks and e-wallet operators (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and others) to process deposit and withdrawal transactions.
- KYC verification providers: Third-party identity verification services that review and validate KYC documents on gama69's behalf.
- Fraud prevention services: Risk-assessment tools that analyze login patterns, device fingerprints, and transaction behavior to detect fraudulent activity.
- Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe receive session identifiers and wager data necessary to operate game rounds.
- Cloud infrastructure providers: Secure server hosting and data storage providers operating under confidentiality obligations.
6.3 Legal Disclosure. gama69 may disclose Personal Data to law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive. In such cases, gama69 will disclose only the minimum data required and will notify the affected Member where legally permitted to do so.
6.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all of gama69's assets, Personal Data held by gama69 may be transferred to the successor entity, subject to equivalent data protection commitments.
7. Cookies & Tracking Technologies
7.1 What Are Cookies. Cookies are small text files placed on your device by your browser when you visit a website. gama69 uses cookies and similar technologies (including local storage and session storage) to enable core Platform functionality, maintain your logged-in session, and collect usage data for analytics purposes.
7.2 Types of Cookies Used.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain login session, load balancing, security tokens | Session |
| Functional | Remember language preference, display settings, deposit method shortcuts | 30 days |
| Analytics | Aggregate usage metrics to improve Platform performance | 90 days |
| Fraud Prevention | Device fingerprinting to detect unauthorized access attempts | 180 days |
7.3 Managing Cookies. You may disable non-essential cookies through your browser settings at any time. However, disabling strictly necessary cookies will impair core Platform functionality, including the ability to log in and maintain a session. gama69 does not use third-party advertising cookies or share cookie data with any advertising network.
8. Data Retention
8.1 Active Accounts. Personal Data associated with an active Member Account is retained for the duration of the Account's existence and for a minimum of 5 years following Account closure, in accordance with anti-money laundering record-keeping obligations.
8.2 KYC Documents. Identity verification documents are retained for a minimum of 5 years following the closure or termination of the Member Account, as required by applicable AML regulations.
8.3 Transaction Records. Financial transaction records, including deposit and withdrawal history, are retained for a minimum of 5 years following the date of each transaction.
8.4 Support Communications. Live chat transcripts and email support records are retained for 2 years from the date of the interaction, unless the communication relates to an ongoing dispute or regulatory matter, in which case records are retained until the matter is fully resolved.
8.5 Responsible Gaming Records. Records of self-exclusion requests, deposit limit applications, and responsible gaming interventions are retained for a minimum of 5 years following Account closure to support any future re-application and regulatory compliance.
9. Data Security
9.1 Technical Measures. gama69 employs industry-standard technical security measures to protect your Personal Data against unauthorized access, loss, destruction, or alteration. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
- Encrypted storage of passwords using one-way cryptographic hashing — gama69 staff cannot view your plaintext password under any circumstances.
- Encrypted storage of KYC documents and financial identifiers at rest using AES-256 encryption.
- Firewall protection, intrusion detection systems, and regular penetration testing of Platform infrastructure.
- Two-factor authentication (2FA) available to all Members as an optional additional layer of Account security.
9.2 Organizational Measures. Access to Personal Data within gama69 is restricted on a strict need-to-know basis. Staff members who handle Personal Data are subject to confidentiality obligations and receive regular data protection training. KYC documents are accessible only to authorized compliance personnel.
9.3 Data Breach Response. In the event of a Personal Data breach that poses a risk to affected Members, gama69 will notify impacted Members as promptly as practicable following discovery of the breach, and will take immediate steps to contain and remediate the incident. gama69 maintains an internal data breach response protocol reviewed annually.
9.4 Member Responsibilities. While gama69 implements robust security measures on its end, the security of your Account also depends on the actions you take. You are responsible for keeping your login credentials confidential, logging out of shared devices, enabling 2FA, and notifying support immediately if you suspect any unauthorized access to your Account.
10. Your Rights
As a Member of gama69, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request".
10.1 Right of Access
You have the right to request a copy of the Personal Data gama69 holds about you. We will respond to verified access requests within 30 calendar days of receipt.
10.2 Right to Rectification
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that corrections to identity data (name, date of birth) may require resubmission of updated KYC documentation.
10.3 Right to Erasure
You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that gama69 is required by law to retain certain data (including KYC documents and transaction records) for a minimum of 5 years following Account closure, and such data cannot be deleted in response to an erasure request during that retention period.
10.4 Right to Restriction of Processing
You may request that gama69 restrict the processing of your Personal Data in specific circumstances — for example, while the accuracy of data is being contested, or where you object to processing based on legitimate interests pending verification of gama69's grounds.
10.5 Right to Data Portability
Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON).
10.6 Right to Object
You have the right to object to the processing of your Personal Data where gama69 relies on legitimate interests as its legal basis. You may also object to receiving marketing communications at any time, regardless of any prior consent given.
10.7 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
11. Minors & Age Restriction
11.1 Minimum Age. gama69 does not knowingly collect Personal Data from individuals under the age of 21. The Platform is strictly for use by adults aged 21 and over. All Members are required to confirm their age at registration and to submit KYC documentation confirming their date of birth prior to processing any withdrawal.
11.2 Discovery of Underage Users. If gama69 discovers or has reasonable grounds to suspect that a Member is under the age of 21, it will immediately suspend that Account, halt all pending transactions, and initiate a review. Any deposits made by an underage individual will be returned to the original payment source following the completion of the review. No winnings will be paid to an underage Member under any circumstances.
11.3 Parental Awareness. If you are a parent or guardian and believe your child has accessed or registered on gama69, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving your report.
12. Third-Party Services
12.1 Game Studios. Games provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — are embedded within the gama69 Platform and operate under their respective privacy frameworks. When you launch a game, session data including your Member identifier and wager amounts is transmitted to the relevant studio's servers for the purpose of game operation and outcome generation.
12.2 Payment Processors. When you make a deposit or withdrawal via a bank (BCA, BRI, BNI, Mandiri, and others) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), your financial transaction data is processed by that institution in accordance with its own privacy policy. gama69 does not receive or store your full bank account password or e-wallet PIN.
12.3 No Responsibility for Third-Party Practices. gama69 selects third-party providers carefully and requires them to maintain adequate data protection standards. However, gama69 does not accept liability for the independent data handling practices of third-party providers once data leaves gama69's systems pursuant to a legitimate data-sharing arrangement described in Section 6.
13. International Data Transfers
13.1 Cross-Border Processing. gama69 operates as an internationally licensed platform and may process or store Personal Data on servers located outside of Indonesia. Where Personal Data is transferred to countries that may not provide the same level of data protection as Indonesian regulations, gama69 ensures appropriate safeguards are in place — including contractual data transfer agreements or equivalent mechanisms — before authorizing such transfers.
13.2 Server Locations. Primary Platform data is hosted on secure cloud infrastructure in data centers that operate under internationally recognized security certifications. gama69 does not disclose specific server locations for security reasons but confirms that all hosting providers are subject to contractual data protection obligations consistent with the principles described in this Privacy Policy.
14. Policy Amendments
14.1 Right to Update. gama69 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, Platform operations, or data processing practices. The revised policy will be published on this page with an updated "Last Updated" date at the top of the document.
14.2 Notification of Material Changes. Where amendments are material — for example, a change in the categories of data collected or a new category of data-sharing partner — gama69 will notify registered Members via their registered email address at least 7 days prior to the changes taking effect.
14.3 Continued Use. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of, and agreement to, the revised terms. If you do not agree to the updated policy, you must cease using the Platform and request Account closure as described in the Terms & Conditions.
15. Contact & Complaints
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the gama69 Data Protection team:
- Email: [email protected] (subject line: "Privacy Inquiry" or "Data Rights Request")
- Live Chat: Available 24/7 via the Platform interface — Indonesian-speaking agents available on all shifts (WIB timezone).
- Response Time: Privacy and data rights inquiries are acknowledged within 2 business days and resolved within 14 business days wherever possible.
If you are not satisfied with gama69's response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in your jurisdiction. gama69 will cooperate fully with any such inquiry.