At gt1008, your privacy is not an afterthought — it is a foundational principle. This Privacy Policy explains precisely what personal data we collect, how we use it, who we share it with, and the rights you hold over your own information as a Member of our platform.
gt1008 operates the online gaming and sports betting platform accessible at https://gt1008.app (the "Platform"). In the course of providing our services — including casino games, sportsbook markets, live dealer tables, and payment processing — we necessarily collect and process personal data about the individuals who use our Platform.
This Privacy Policy applies to all personal data collected by gt1008 in connection with the Platform, regardless of how you access it (desktop browser, mobile browser, or any application). It covers data collected directly from you, data generated by your activity on the Platform, and data we receive from third-party sources in the course of operating our services.
We are committed to handling personal data with the highest standards of care, transparency, and security. gt1008 does not sell personal data to third parties for commercial purposes, and we process data only to the extent necessary to deliver a high-quality, secure, and compliant gaming experience tailored to Indonesian players across cities including Jakarta, Surabaya, Medan, Bandung, Bali, and beyond.
The following terms are used throughout this Privacy Policy with the meanings set out below:
gt1008 collects the following categories of personal data from Members and Visitors:
| Data Category | Examples | Collected From |
|---|---|---|
| Identity | Full name, date of birth, KTP/passport number | Registration form, KYC submission |
| Contact | Email address, phone number, home address | Registration form, account settings |
| Financial | Bank account number, e-wallet ID, transaction history | Deposit/withdrawal requests, payment processor |
| Gaming & Behavioral | Bet history, game sessions, bonus activity | Platform activity (automatically generated) |
| Technical & Device | IP address, browser, device type | Automatic collection via cookies and server logs |
| Communications | Support chat transcripts, email records | Direct interaction with support team |
gt1008 collects personal data through the following mechanisms:
The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotion. You are under no legal obligation to provide this data, but failure to do so will prevent you from accessing certain features of the Platform, including account registration and withdrawal processing.
When you visit or use the gt1008 Platform, certain technical and behavioral data is collected automatically via server logs, cookies, pixel tags, and similar tracking technologies. This automatic collection occurs regardless of whether you have a registered account. See Section 12 for full details of our cookies and tracking practices.
gt1008 may receive personal data about you from the following third-party sources:
Where gt1008 receives personal data from third parties, we ensure that those third parties have a lawful basis to share the data with us, and we process the received data strictly in accordance with this Privacy Policy.
gt1008 processes personal data for the following specific, documented purposes:
Creating and maintaining your Member account, authenticating your identity at login, storing your preferences, processing password resets, and communicating account-related notifications.
Facilitating deposits and withdrawals via local Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), reconciling transactions, and issuing receipts and transaction records.
Verifying that each Member is a real person, is at least 21 years of age, and meets all eligibility requirements stated in our Terms & Conditions. This verification is a legal and operational necessity for the responsible operation of a gaming platform.
Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited conduct. This includes automated risk scoring, IP analysis, device fingerprinting, and manual review of flagged accounts.
Meeting our obligations under applicable international gaming regulations, anti-money laundering (AML) frameworks, and counter-terrorism financing (CTF) requirements, including the maintenance of records as required by law.
Monitoring gaming patterns to identify Members who may be at risk of problem gambling, enforcing self-exclusion elections, applying deposit limits and cooling-off periods, and reaching out to Members whose behaviour triggers responsible gaming protocols.
Analysing aggregated and anonymised Platform usage data to improve our game selection, payment options, website performance, and user interface. Individual behavioural data is aggregated before being used for platform-level analytics decisions.
Sending promotional communications about bonuses, tournaments, and new features to Members who have not opted out of marketing communications. Personalising the Platform experience based on your game history and stated preferences. You may opt out of marketing communications at any time by updating your account notification preferences or by contacting our support team.
Responding to your inquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance and training purposes.
gt1008 processes personal data on one or more of the following legal grounds:
gt1008 does not sell, rent, or trade personal data to any third party for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:
We engage carefully selected third-party service providers who process personal data on our behalf and strictly under our instruction. These providers are contractually bound to handle data securely and in accordance with this Privacy Policy. Categories of providers include:
gt1008 may disclose personal data to governmental authorities, law enforcement agencies, regulators, or courts where required to do so by applicable law, valid legal process, or court order. In all such cases, gt1008 will disclose only the minimum data required by the specific legal demand and will, where legally permissible, notify the affected Member of the disclosure.
In the event of a merger, acquisition, restructuring, or sale of all or part of gt1008's business, personal data held by gt1008 may be transferred to the acquiring or successor entity as part of the transaction. Members will be notified of any such transfer and of any material change to this Privacy Policy that results from it, with at least 30 days' advance notice where legally permissible.
Some of the third-party service providers engaged by gt1008 are located outside of Indonesia, which means that your personal data may be transferred to and processed in countries other than your country of residence. These transfers occur in connection with payment processing, identity verification, cloud hosting, and live game delivery.
When personal data is transferred internationally, gt1008 ensures that appropriate safeguards are in place to protect the data during transit and in the destination jurisdiction. These safeguards may include:
If you have questions about the specific safeguards in place for any particular international transfer, please contact us at the details provided in Section 15.
gt1008 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:
| Data Category | Standard Retention Period | Basis |
|---|---|---|
| Identity & Registration Data | Duration of membership + 5 years after account closure | Legal obligation (AML/KYC record-keeping) |
| Financial & Transaction Data | Duration of membership + 5 years after last transaction | Legal obligation (financial record-keeping) |
| Gaming & Behavioral Data | Duration of membership + 2 years after account closure | Legitimate interests (dispute resolution, responsible gaming) |
| Technical & Device Data | 13 months from collection date | Legitimate interests (security monitoring) |
| Support Communications | 3 years from last interaction | Legitimate interests (dispute resolution, quality assurance) |
| Marketing Preferences | Until opt-out or account closure | Consent |
When personal data is no longer required and the applicable retention period has elapsed, gt1008 securely deletes or irreversibly anonymises the data. Anonymised data — which can no longer be linked back to any individual — may be retained indefinitely for statistical and analytical purposes.
gt1008 implements a comprehensive set of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Despite these measures, no internet-based system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, gt1008 will notify affected Members without undue delay and will take all reasonable steps to mitigate the impact of the breach.
As a Member of the gt1008 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verifiable requests within 30 days.
gt1008 will not charge a fee for processing any of the above requests in standard circumstances. We may ask you to verify your identity before fulfilling a request to ensure that personal data is not disclosed to an unauthorised party. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline the request, providing written reasons for doing so.
The gt1008 Platform uses cookies and similar tracking technologies to deliver core functionality, improve the user experience, and — where you have consented — to analyse Platform performance and deliver relevant promotional content.
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing, fraud prevention flags. The Platform cannot function without these. | No — exempt |
| Functional | Remembering your language preferences, game lobby layout preferences, and responsible gaming settings. | No — legitimate interest |
| Analytics | Counting page visits, measuring session durations, identifying popular game categories, and diagnosing platform performance issues. Data is aggregated and anonymised. | Yes |
| Marketing / Targeting | Tracking visits across sessions to measure promotional campaign effectiveness and deliver relevant bonus offers. | Yes |
You may manage non-essential cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive notifications when cookies are set. Please note that disabling strictly necessary cookies will impair the functionality of the gt1008 Platform and may prevent you from logging in or completing transactions. Detailed browser-specific instructions for managing cookies are available through your browser's Help menu.
Some cookies placed on the gt1008 Platform are set by third-party service providers (for example, analytics platforms and live game providers). These third-party cookies are governed by the respective providers' privacy policies. gt1008 does not control the operation of third-party cookies and recommends reviewing the privacy policies of any third-party services whose cookies may be active on the Platform.
The gt1008 Platform is strictly for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. All registration submissions are reviewed against the declared date of birth, and KYC verification is used to confirm age eligibility before any withdrawal is processed.
If gt1008 discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated personal data that does not need to be retained for legal purposes, and return any real-money balance to the payment source from which it originated.
If you are a parent or guardian and believe that a minor in your care has registered an account on the gt1008 Platform, please contact our support team without delay at [email protected]. We will take prompt action to investigate and resolve the matter.
gt1008 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When a material change is made, we will notify Members by sending an email to the address registered to their account and by displaying a prominent notice on the Platform for at least 14 days prior to the change taking effect.
The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the gt1008 Platform following the effective date of any revision constitutes your acceptance of the updated policy. If you do not agree with a revised policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.
For non-material changes — such as corrections to typographical errors, clarifications that do not alter the substance of the policy, or formatting updates — we may update this page without sending advance notice to Members.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data gt1008 holds about you, please reach out to our data privacy team through one of the following channels :
When submitting a data rights request by email, please include your registered username, the email address associated with your account, and a brief description of your request. We may ask you to verify your identity before processing the request to protect your personal data from unauthorised disclosure.
Six core practices that define our approach to data privacy and security on the gt1008 Platform.
Every byte of data transmitted between your device and our servers is protected by industry-standard TLS encryption, making it unreadable to any third party in transit.
Our rigorous Know Your Customer process confirms the identity and age (21+) of every Member before withdrawals are processed, protecting both our players and the integrity of the platform.
gt1008 has a firm policy of never selling, renting, or trading personal data to third parties for commercial gain. Your information is used solely to deliver and improve our services.
Only authorised personnel with a documented business need may access Member data. All internal data access is logged, monitored, and subject to regular audit review.
Independent third-party penetration testers conduct scheduled and unscheduled security assessments of our infrastructure to identify and remediate vulnerabilities proactively.
Access, correct, export, or request deletion of your personal data at any time. Our dedicated privacy team responds to all requests within 30 days — no exceptions.
Now that you understand how gt1008 protects your data, dive into our full range of games and betting markets — all backed by our commitment to security and fairness.
Minimum deposit Rp 25.000. Adults only (21+). Please gamble responsibly. Terms & Conditions apply.