Your Privacy Matters
to 168gg

168gg is an internationally licensed online gaming platform serving English-preference players across Indonesia. We take privacy seriously as a matter of principle, not merely as a legal obligation. This Policy is designed to give you complete clarity over what personal data we hold about you and how it is used at every stage of your relationship with us — from the moment you first visit 168gg.bio through the full lifecycle of your player account.

We are committed to processing personal data in a manner that is lawful, fair, and transparent. We collect only the data that is genuinely necessary for us to deliver a secure, fair, and enjoyable gaming experience, to comply with our obligations under international anti-money-laundering standards, and to communicate with you in ways that are relevant to your account.

If you have any questions about this Policy or wish to exercise any of your data rights described in Clause 10, please contact us directly at [email protected]. Our support team is available 24 hours a day, 7 days a week.

The following terms carry the meanings set out below throughout this Policy:

168gg collects the following categories of Personal Data in the course of operating the Platform:

• Registration Data: Full legal name, date of birth, residential address in Indonesia (including city — Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and others), email address, and mobile phone number provided during account creation.
• Identity Verification Data: Copies of government-issued identification (Indonesian KTP, passport, or SIM driver's license), proof-of-address documents, and selfie images submitted during the KYC process.
• Financial Data: Bank account details and e-wallet identifiers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals. We do not store full credit or debit card numbers directly; card processing is handled by PCI-DSS-compliant payment processors.
• Transaction Data: Records of all deposits, withdrawals, wagers, bonus claims, and account adjustments, including timestamps, amounts in Indonesian Rupiah (IDR / Rp), and transaction reference numbers.
• Gaming Activity Data: Game session logs, bet histories, win/loss records, sports-market selections (including mix parlay accumulators and voor bola Asian handicap markets), and togel ticket data.
• Technical Data: IP address, browser type and version, operating system, device model, screen resolution, time zone (WIB / WITA / WIT), session duration, and page-navigation paths collected automatically when you access the Platform.
• Communications Data: The content of any messages you send to us via email at [email protected], live chat transcripts, and details of any complaints or support tickets raised.
• Responsible Gaming Data: Self-exclusion status, deposit limit settings, session-time alerts, and reality-check preferences configured within the Platform's responsible gaming tools.

168gg collects Personal Data through the following channels:

• Directly from you: When you complete the account registration form, submit KYC documents, make a deposit, place a wager, contact support, or interact with any feature of the Platform that requires you to input information.
• Automatically: When you visit any page of 168gg.bio, our web servers and analytics tools automatically collect Technical Data including your IP address, browser fingerprint, and session activity. This data is collected using first-party cookies and server-side logging.
• From payment service providers: When you initiate a deposit or withdrawal through a local Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), we receive a confirmation payload from the payment processor confirming the transaction status, amount, and the identifier of the payment account used.
• From identity verification providers: During KYC, we may use third-party document verification services to authenticate the documents you submit. These providers return a verification status and, where applicable, extracted data fields (name, date of birth, ID number) to us under a binding data-processing agreement.
• From game providers: Our licensed game-content partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — return game-session result data to 168gg in real time. This data is used to update your account balance and maintain the integrity of your game history.

168gg processes your Personal Data on the following legal grounds, as applicable to the type of data and the purpose of processing:

• Contractual necessity: Processing required to fulfill the obligations of the player account agreement — including account creation, payment processing, game delivery, and withdrawal handling — is carried out on the basis that it is necessary to perform the contract between you and 168gg.
• Legal obligation: Certain processing activities — particularly KYC identity verification, transaction monitoring, and the retention of financial records — are required to comply with international anti-money-laundering (AML) standards and the terms of 168gg's international gaming license.
• Legitimate interests: 168gg processes Technical Data (IP addresses, session logs, device identifiers) and Gaming Activity Data for fraud prevention, platform security, responsible gaming monitoring, and aggregate product analytics. These activities are carried out where our legitimate interest in maintaining a secure and fair platform is not overridden by your rights.
• Consent: Where we send you optional marketing communications — such as promotional emails about new bonuses, seasonal offers aligned with Indonesian holidays (Idul Fitri, Ramadhan, Imlek), or new game releases — we do so only with your explicit prior consent, which you may withdraw at any time by contacting [email protected].

168gg uses the Personal Data it collects for the following purposes:

• Account management: To create, maintain, and administer your player account, including authenticating your identity at login and managing your account preferences and settings.
• Payment processing: To process deposits from and withdrawals to your registered Indonesian bank account or e-wallet, to verify that payment accounts are registered in your own name, and to maintain accurate financial records in Indonesian Rupiah (IDR).
• KYC & compliance: To verify your age (21+), identity, and address as required by our international gaming license, and to comply with applicable anti-money-laundering obligations.
• Game delivery: To display your correct account balance, record your wager history, apply bonus credits, and return accurate game outcomes across all game categories including sportsbook, live casino, slots, Sic Bo, Domino QQ, and togel.
• Responsible gaming: To monitor gaming patterns that may indicate problematic behaviour, to enforce deposit limits and self-exclusion orders you have requested, and to deliver session-time and reality-check notifications.
• Fraud prevention & security: To detect and prevent account takeover, bonus abuse, collusion, match-fixing, money laundering, and other prohibited activities described in our Terms & Conditions.
• Customer support: To respond to your inquiries, resolve disputes, process complaints, and maintain records of communications for quality assurance.
• Platform improvement: To analyze aggregate, anonymized usage data to identify technical issues, improve page performance, and enhance the overall player experience. No individual player is identified in these analytics.
• Marketing (with consent): To send you promotional communications about bonuses, new games, and seasonal offers where you have given explicit consent to receive such communications.

168gg does not sell, rent, or trade your Personal Data. We share your data only in the following limited and controlled circumstances:

• Payment service providers: We share the minimum necessary financial data with our local Indonesian banking and e-wallet partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) to process transactions on your behalf. These providers are contractually bound to use your data only to execute the specific payment instruction.
• Identity verification providers: KYC document data is shared with accredited third-party verification services under binding data-processing agreements. These providers are prohibited from using your data for any purpose other than the verification service they provide to 168gg.
• Game content providers: Game-session identifiers and bet data are shared with our licensed game-content partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to deliver game results and resolve disputes. These providers do not receive your identity or financial data.
• IT infrastructure providers: We use cloud-hosting and content-delivery providers to operate the Platform. These providers have access to server-side data as Processors under binding agreements and are prohibited from using that data for their own purposes.
• Legal and regulatory disclosure: We may disclose Personal Data to law enforcement agencies, regulatory authorities, or courts where required by applicable law, a valid legal order, or to protect the rights and safety of 168gg or its players. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event that 168gg undergoes a merger, acquisition, or sale of all or part of its business, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms before it takes effect.

168gg retains Personal Data for as long as necessary to fulfil the purposes described in this Policy and to comply with our legal obligations. The following retention periods apply as a general guide:

After the applicable retention period has expired, Personal Data is securely deleted or anonymized so that it can no longer be associated with any individual player. Anonymized, aggregate data (e.g., site-wide traffic statistics) may be retained indefinitely as it no longer constitutes Personal Data.

168gg uses cookies and similar technologies on its Platform. Cookies are small text files stored on your device that allow the Platform to recognize your browser, maintain your session, and remember your preferences. We use three categories of cookies:

• Strictly necessary cookies: These cookies are essential to operate the Platform. They maintain your login session, remember your account currency setting (IDR / Rp), and enable the secure transfer of data. You cannot opt out of strictly necessary cookies without ceasing use of the Platform.
• Functional cookies: These cookies remember your preferences — such as your preferred game lobby view or language display — to provide a more personalized experience. They do not track your activity across other websites.
• Analytics cookies: We use first-party analytics cookies to collect aggregate, anonymized data about how players navigate the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data helps us improve the Platform. We do not use third-party advertising or cross-site tracking cookies.

We do not use tracking pixels, fingerprinting scripts, or any cross-site behavioral advertising technology. The cookies deployed on 168gg.bio are limited strictly to those necessary to operate, secure, and improve the Platform itself.

As a player whose data is processed by 168gg, you hold the following rights with respect to your Personal Data. You may exercise any of these rights by contacting us at [email protected] with a clear description of your request and sufficient information to verify your identity.

168gg aims to respond to all data rights requests within 5 business days. Complex requests — for example, a full data-access request covering multi-year transaction history — may take up to 30 calendar days. We will keep you informed of progress. We do not charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive, in which case we will notify you before proceeding.

168gg implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption: All data in transit between your browser or mobile device and 168gg's servers is encrypted using industry-standard TLS 1.2 / TLS 1.3 protocols. The presence of a valid HTTPS certificate on every page of 168gg.bio confirms this protection is active.
• Encryption at rest: Sensitive Personal Data — including KYC documents, financial account identifiers, and password hashes — is encrypted in our databases using AES-256 encryption. Passwords are stored as salted cryptographic hashes; 168gg staff cannot read your password in plain text.
• Access controls: Access to player data within 168gg's internal systems is restricted on a strict need-to-know basis. Staff with access to Personal Data are subject to confidentiality obligations and regular security-awareness training.
• Intrusion detection: Our infrastructure is monitored continuously for suspicious activity, including unauthorized access attempts, unusual login patterns, and abnormal data-export requests.
• Regular security assessments: 168gg conducts periodic security audits and vulnerability assessments of its Platform and internal systems to identify and remediate security risks before they can be exploited.
• Incident response: In the event of a confirmed data breach that is likely to result in risk to players, 168gg will notify affected players without undue delay and take immediate steps to contain and assess the incident.

168gg's services are strictly for adults. You must be at least 21 years of age to register an account and use the Platform. We do not knowingly collect Personal Data from any individual under the age of 21.

During the KYC verification process, we actively verify the date of birth provided against official identity documents (KTP, passport, or SIM). Any account found — at any stage — to belong to an individual under 21 years of age will be immediately suspended. All pending withdrawals will be cancelled, all game activity will be voided, and the matter will be reviewed by our compliance team in accordance with Clause 13 of our Terms & Conditions.

If you have reason to believe that a minor has registered an account on 168gg, please notify us immediately at [email protected]. We will investigate and act promptly on all such reports.

The 168gg Platform does not contain links to external third-party websites for advertising or affiliate purposes. Any game-content interfaces (provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) are embedded directly within the Platform and are subject to the data-processing agreements between 168gg and those providers.

If you independently navigate to external websites from your browser while using the Platform — for example, by searching for sports results for BRI Liga 1 fixtures involving Persija Jakarta, Persib Bandung, or Bali United — those websites are governed by their own privacy policies, over which 168gg has no control or responsibility. We encourage you to review the privacy policy of any external site you visit.

168gg reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the scope of our Platform's services. When we make material changes — for example, changes to the categories of data we collect, the third parties we share data with, or the legal basis for a processing activity — we will notify registered players by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We recommend bookmarking this page and reviewing it periodically, particularly following any notification of changes from 168gg. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you do not agree with the revised Policy, you may request account closure in accordance with the account termination procedure described in our Terms & Conditions. In the event of any conflict between this Privacy Policy and any earlier version, the most recently published version takes precedence.

For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please reach out to our support team through the following channel: