Privacy Policy

1 Definitions

Throughout this Privacy Policy, the following terms have the meanings set out below:

• "g6668", "we", "us", "our" — the operator of the g6668 online gaming platform accessible at https://g6668.net.
• "Platform" — the g6668 website, any associated mobile site or application, and all services delivered through them.
• "Player", "you", "your" — any individual who accesses the Platform, registers an Account, or otherwise interacts with g6668's services.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, g6668 is the Data Controller.
• "Data Processor" — a third party that processes Personal Data on behalf of g6668 under a contractual data processing agreement.
• "KYC" — Know Your Customer procedures, including identity and address verification conducted in compliance with g6668's licensing and anti-money-laundering obligations.
• "Cookie" — a small text file placed on your device by the Platform to support functionality, analytics, and session management.

2 Data Controller

g6668 is the Data Controller responsible for your Personal Data collected through the Platform. All data processing activities conducted by g6668 are carried out in accordance with the data protection standards required by g6668's licensing jurisdiction and applicable international best practices.

For all privacy-related enquiries, correction requests, or complaints, please contact our Data Protection team at the address provided in Section 16 of this Policy.

3 Data We Collect

g6668 collects the following categories of Personal Data in the course of operating the Platform and providing gaming services to Indonesian players:

3.1 Identity and Contact Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth (to verify minimum age of 21).
• Residential address (city, province, postal code — Indonesia).
• Email address and contact phone number.
• Username chosen at registration.

3.2 Identity Verification (KYC) Data

• Government-issued identity document: KTP (Kartu Tanda Penduduk), SIM (driving licence), or passport — including the document image and the data it contains.
• Proof of address document (utility bill, bank statement, or equivalent issued within the previous three months).
• Proof of payment method (bank account or e-wallet registered in your name).
• Facial verification image where required for identity matching.

3.3 Financial and Transaction Data

• Deposit and withdrawal history, including amounts (in IDR), dates, times, and payment methods used (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Bank account or e-wallet identifiers associated with your g6668 Account (account numbers are masked in storage; full details are not retained beyond the transaction processing period).
• Bonus and promotional credit history.
• Wagering activity summary (total stakes, game categories, session frequency).

3.4 Technical and Device Data

• IP address and geolocation data (country and city level).
• Device type, operating system, browser type and version.
• Session identifiers, login timestamps, and session duration.
• Mobile network operator (e.g., Telkomsel, Indosat Ooredoo Hutchison, XL Axiata) where applicable.

3.5 Behavioural and Usage Data

• Pages viewed and features accessed within the Platform.
• Games played, bet amounts, win/loss records, and gaming frequency.
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated).
• Customer support interaction logs, including live chat transcripts and email correspondence.

3.6 Voluntary and Communications Data

• Information you provide when contacting support, completing surveys, or participating in promotions.
• Preferences and communications opt-in/opt-out settings.

4 How We Collect Your Data

g6668 collects Personal Data through the following methods:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and device data collected automatically through cookies, session tracking, server logs, and analytics tools when you access or use the Platform.
• Third-party sources: Identity verification data may be supplemented or cross-checked using data from licensed KYC service providers. Payment data is received from payment processors (including e-wallet operators such as OVO, DANA, GoPay, ShopeePay, and LinkAja) during deposit and withdrawal processing.
• Fraud prevention and compliance: Data received from third-party fraud detection services, sanctions screening databases, and anti-money-laundering (AML) compliance tools as required by g6668's licensing obligations.

5 Lawful Basis for Processing

g6668 processes Personal Data only where a lawful basis exists. The following table summarises the primary lawful bases applicable to g6668's main data processing activities:

6 How We Use Your Data

g6668 uses the Personal Data we collect for the following purposes:

• To create, maintain, and administer your g6668 Account.
• To process deposits and withdrawals in Indonesian Rupiah (IDR) and to maintain accurate account balance records.
• To conduct KYC verification and confirm that you meet the minimum age requirement of 21 years and any other eligibility criteria.
• To detect, investigate, and prevent fraudulent transactions, money laundering, collusion, and other prohibited conduct as defined in the Terms & Conditions.
• To send transactional communications, including deposit confirmations, withdrawal notifications, security alerts, and KYC status updates, to your registered email address.
• To send promotional communications, bonus offers, and marketing materials — only where you have provided explicit consent. You may withdraw consent at any time by updating your Account communication preferences.
• To operate responsible gaming tools, including monitoring for behavioural patterns associated with problem gambling and, where required by licensing obligations, to initiate welfare interventions.
• To improve the Platform — including game lobby design, payment flows, and mobile performance on Indonesian networks — based on aggregated usage analytics.
• To comply with all applicable legal and regulatory obligations, including providing records to licensing authorities upon lawful request.
• To resolve disputes and enforce the Terms & Conditions.

7 Data Sharing & Disclosure

g6668 may share your Personal Data with the following categories of recipients, each bound by appropriate data protection agreements or legal obligations:

7.1 Licensed Game Providers

Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and Pocket Games Soft receive anonymised or pseudonymised session data necessary for game delivery and RNG integrity auditing. These providers do not receive your identity documents or financial account details.

7.2 Payment Processors

Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum payment data necessary to process deposits and withdrawals. Each payment processor is subject to its own privacy policy and applicable Indonesian financial regulations.

7.3 KYC and Compliance Service Providers

Licensed identity verification, AML screening, and fraud detection providers may receive your identity documents and transaction data for the sole purpose of fulfilling g6668's compliance obligations. These providers act as Data Processors under written agreements that prohibit secondary use of your data.

7.4 Regulatory and Law Enforcement Authorities

g6668 may disclose Personal Data to its licensing authority, financial intelligence units, or law enforcement agencies where required by law, court order, or regulatory direction. g6668 will notify you of such disclosures where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of g6668's business, Personal Data held on the Platform may be transferred to the acquiring entity, subject to equivalent privacy protections. Players will be notified of any such transfer in advance.

8 Cookies & Tracking Technologies

g6668 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and collect usage analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core Platform functionality, including user authentication, session management, and security. These cannot be disabled without preventing access to core features.
• Functional Cookies: Remember your preferences (such as language settings) and personalise your experience on the Platform.
• Analytics Cookies: Collect anonymised data on how the Platform is used (pages visited, session duration, device types) to help us improve performance and user experience. Data is processed in aggregate form and does not identify individual players.
• Marketing Cookies: Used only where you have provided consent. These help us deliver relevant promotional content based on your gaming interests and preferences.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent Platform access. Disabling analytics or marketing cookies will not affect your ability to play.

9 Data Retention

g6668 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active Account plus a minimum of 5 years following Account closure, in accordance with anti-money-laundering record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of verification or Account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 2 years from the date of the last interaction, or longer where a dispute remains unresolved.
• Marketing consent records: Retained for the duration of your Account plus 1 year following withdrawal of consent or Account closure.
• Technical and device logs: Retained for up to 12 months from the date of collection, unless a specific security investigation requires longer retention.

When Personal Data is no longer required, g6668 securely deletes or anonymises it so that it can no longer be linked to an identifiable individual. Anonymised and aggregated data (which cannot identify you) may be retained indefinitely for platform analytics and business reporting purposes.

10 Data Security

g6668 implements a layered approach to data security designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the g6668 Platform.
• Encryption at rest for all sensitive data stored on g6668's servers, including KYC documents and financial records.
• Access controls: Personal Data is accessible only to g6668 staff and Data Processors who have a legitimate operational need. Access is role-based and subject to regular review.
• Two-factor authentication (2FA) available to all players for Account login, and required for all g6668 staff accessing internal systems containing Personal Data.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Incident response procedures: g6668 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights, we will notify you and relevant authorities within the timeframes required by applicable law.

While g6668 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your Account credentials and for notifying g6668 immediately at [email protected] if you suspect any unauthorised access to your Account.

11 Your Privacy Rights

Subject to applicable law and g6668's legal obligations, you have the following rights in relation to your Personal Data held by g6668:

• Right of Access: You may request a copy of the Personal Data g6668 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. For certain data points (such as name and date of birth), corrections may require submission of updated KYC documentation.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected and no overriding legal obligation requires its retention. Note that AML and licensing record-keeping obligations typically require g6668 to retain transaction and identity data for a minimum of 5 years and will take precedence over erasure requests during that period.
• Right to Restriction: You may request that g6668 restrict processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to marketing, g6668 will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent (such as receiving promotional emails), you may withdraw consent at any time by updating your Account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact g6668's Data Protection team at [email protected] (plain text — not a clickable link). g6668 will respond to all verified requests within 30 days. Complex requests may require an extension, in which case you will be notified in advance.

12 Minors

The g6668 Platform is strictly for individuals who are at least 21 years of age. g6668 does not knowingly collect Personal Data from individuals under 21. Age verification is a mandatory step in the Account registration and KYC process.

If g6668 becomes aware that a Player is under 21, the Account will be immediately suspended, all pending transactions will be voided, any balance will be held pending investigation, and all Personal Data associated with the Account will be flagged for expedited deletion in accordance with our retention procedures. Parents or guardians who believe a minor may have accessed the Platform should contact g6668 immediately at [email protected].

13 Third-Party Services & Links

The g6668 Platform integrates third-party services — including game providers, payment processors, and analytics tools — whose own privacy policies govern their respective data practices. g6668 is not responsible for the privacy practices of these third parties. Where third-party services are embedded within the Platform (such as live dealer game streams from Evolution Gaming or Ezugi), the relevant provider's privacy policy applies to data processed within those embedded environments.

g6668 does not include outbound links to external websites beyond those required for payment processing and licensing compliance. Any links that do appear within the Platform to third-party services should be treated as subject to those services' own privacy policies, which we encourage you to review independently.

14 International Data Transfers

g6668 operates internationally and your Personal Data may be transferred to and processed in countries other than Indonesia. These countries may have data protection laws that differ from those in your jurisdiction. Where such transfers occur, g6668 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses or equivalent data protection obligations with all Data Processors.
• Transfers to g6668's licensing jurisdiction — which maintains data protection standards consistent with international best practices — for compliance and regulatory purposes.
• Transfers to game provider data centres for the delivery of live and digital gaming content, governed by contractual data protection requirements.

You may request further information about the specific safeguards applied to international transfers of your Personal Data by contacting our Data Protection team.

15 Changes to This Privacy Policy

g6668 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When a material change is made, g6668 will notify registered Players via their registered email address and/or through a notice displayed on the Platform at least 7 days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised terms, you must stop using the Platform and may request Account closure at any time.

16 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or g6668's data processing practices, please contact our Data Protection team through the following channel:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 from the g6668 Platform after login

g6668 acknowledges all privacy-related enquiries within 48 hours (WIB) and aims to resolve them within 30 calendar days. Where a complaint cannot be resolved internally to your satisfaction, you have the right to escalate it to the relevant supervisory authority in g6668's licensing jurisdiction.

We take all privacy complaints seriously and will treat your concerns with complete confidentiality throughout the resolution process.