1. Introduction and Scope
This Privacy Policy describes how gpx909 ("we," "us," or "our") collects, uses, stores, protects, and shares your personal information when you use our online gaming platform at gpx909.cam and its associated services. This policy applies to all Indonesian players and users who register accounts, place bets, play games, or otherwise interact with our platform.
By creating an account on gpx909, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any part of this Privacy Policy, you must immediately cease using gpx909 services and close your account.
gpx909 operates as an internationally licensed offshore gaming platform serving Indonesian players. We are committed to protecting your privacy in accordance with international data protection standards and best practices, including principles derived from the General Data Protection Regulation (GDPR) and similar privacy frameworks, adapted to the context of online gaming and Indonesian market operations.
2. Data Controller
For the purposes of this Privacy Policy, gpx909 is the data controller responsible for the collection, processing, and protection of your personal information. We determine the purposes and means of processing your personal data in connection with the provision of our gaming services.
If you have questions about how we handle your personal information or wish to exercise your data protection rights, please contact us at [email protected] (please manually type this address into your email client; it is not a clickable link for security reasons).
3. Information We Collect
gpx909 collects several categories of personal information necessary to provide our gaming services, comply with legal obligations, prevent fraud, and improve user experience. The types of information we collect include:
3.1 Account Registration Information
When you create an account on gpx909, we collect the following information:
- Full Legal Name: Your complete name as it appears on your government-issued identification document (Indonesian KTP, passport, or other recognized ID).
- Date of Birth: Required to verify that you meet the minimum age requirement of 21 years to use our services.
- Email Address: Used for account communications, password resets, promotional offers, transaction confirmations, and customer support correspondence.
- Mobile Phone Number: Preferably an Indonesian mobile number, used for account security notifications, two-factor authentication (if enabled), and customer support contact.
- Residential Address: Your current address in Indonesia, required for KYC (Know Your Customer) verification and compliance with anti-money laundering regulations.
- Username and Password: Your chosen account credentials for platform access.
3.2 Identity Verification (KYC) Documents
To comply with licensing requirements and prevent fraud, we collect identity verification documents including:
- Government-Issued Identification: Digital copies (photos or scans) of your Indonesian KTP (Kartu Tanda Penduduk), Indonesian passport, or other government-issued photo identification showing your name, date of birth, photograph, ID number, and document expiration date.
- Proof of Address: Recent utility bills (electricity, water, gas), bank statements, or government correspondence dated within the last three months showing your name and residential address.
- Payment Method Verification: Screenshots or photos of bank account statements, e-wallet interfaces, or payment cards showing your name and account details (with sensitive information such as middle card digits appropriately obscured for security).
3.3 Transaction and Financial Information
When you deposit funds, place bets, or request withdrawals, we collect:
- Payment Method Details: Bank account numbers, e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), and associated account holder names.
- Transaction History: Records of all deposits, withdrawals, bets placed, game sessions, winnings, losses, bonus activations, and account balance changes.
- Transaction Timestamps: Dates and times (in WIB timezone) of all financial transactions and betting activities.
- Payment Processor Data: Information shared with and received from third-party payment processors to facilitate deposits and withdrawals.
3.4 Device and Technical Information
When you access gpx909, we automatically collect technical information about your device and browsing behavior:
- IP Address: Your internet protocol address, which may indicate your approximate geographic location within Indonesia.
- Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and unique device identifiers.
- Cookies and Tracking Technologies: Small data files stored on your device to remember your preferences, maintain login sessions, and analyze site usage patterns. You can control cookie settings through your browser preferences.
- Usage Data: Pages visited, features used, time spent on the platform, navigation patterns, search queries, and interaction with games and betting markets.
- Geolocation Data: Approximate geographic location derived from IP address or device GPS (if you grant permission), used to verify your location within permitted jurisdictions and comply with geographic restrictions.
3.5 Communications and Support Interactions
When you contact customer support or communicate with gpx909, we collect:
- Support Tickets: Content of your inquiries, complaints, feedback, and all correspondence with our customer support team via live chat, WhatsApp, or email.
- Chat Transcripts: Records of live chat conversations for quality assurance, training, and dispute resolution purposes.
- Feedback and Surveys: Your responses to customer satisfaction surveys, product feedback forms, and promotional research questionnaires.
3.6 Gameplay and Betting Behavior
To provide personalized services, detect problem gambling patterns, and comply with responsible gaming obligations, we collect:
- Betting History: Detailed records of all bets placed, including sports betting selections (football matches on BRI Liga 1, EPL, La Liga, Serie A, Champions League), live casino gameplay (blackjack, roulette, baccarat, poker hands), slot game sessions, togel (lottery) number selections, and sabung ayam (cockfighting) wagers.
- Session Duration: Length of time spent on the platform during each login session.
- Responsible Gaming Settings: Your configured deposit limits, loss limits, session time limits, reality check intervals, and self-exclusion preferences.
- Risk Indicators: Patterns that may indicate problem gambling behavior, such as rapidly increasing bet sizes, chasing losses, extended session durations, or frequent limit increase requests.
4. How We Use Your Information
gpx909 uses your personal information for the following legitimate purposes:
4.1 Account Management and Service Delivery
- Creating and maintaining your gpx909 account
- Authenticating your identity when you log in
- Processing deposits, withdrawals, and bet settlements
- Providing access to sports betting markets, live casino games, slots, togel draws, and sabung ayam streams
- Managing bonuses, promotions, and loyalty rewards
- Sending transaction confirmations, account notifications, and service updates
4.2 Legal Compliance and Fraud Prevention
- Verifying your age to enforce the 21+ requirement
- Conducting KYC (Know Your Customer) verification to comply with anti-money laundering regulations
- Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited activities
- Investigating suspicious transactions, account takeovers, and security breaches
- Complying with legal obligations, regulatory requests, and court orders from competent authorities
- Enforcing our Terms & Conditions and resolving disputes
4.3 Responsible Gaming and Player Protection
- Monitoring gameplay patterns to identify potential problem gambling behaviors
- Implementing and enforcing deposit limits, loss limits, and session time limits
- Administering self-exclusion requests and reality check reminders
- Providing responsible gaming resources and support referrals
4.4 Customer Support and Communication
- Responding to your inquiries via live chat, WhatsApp, and email
- Resolving account issues, technical problems, and disputes
- Providing Indonesian-language customer support during WIB business hours
- Improving customer service quality through training and performance monitoring
4.5 Marketing and Personalization
- Sending promotional offers, bonus notifications, and special event announcements (you may opt out at any time)
- Personalizing content and game recommendations based on your preferences and gameplay history
- Conducting market research and customer satisfaction surveys
4.6 Platform Improvement and Analytics
- Analyzing user behavior to improve website functionality, game offerings, and user experience
- Testing new features, payment methods, and promotional campaigns
- Optimizing platform performance, security, and reliability
- Generating anonymized statistical reports for internal business purposes
Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contractual Necessity: Processing is necessary to provide gaming services under our Terms & Conditions.
- Legal Obligations: Processing is required to comply with anti-money laundering laws, age verification requirements, and licensing regulations.
- Legitimate Interests: Processing is necessary for fraud prevention, security, responsible gaming, and business operations, balanced against your privacy rights.
- Consent: You have provided explicit consent for marketing communications and optional data uses (consent can be withdrawn at any time).
5. How We Protect Your Information
gpx909 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:
5.1 Technical Security Measures
- SSL Encryption: All data transmitted between your device and gpx909 servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same standard used by banks and financial institutions.
- Secure Servers: Your personal information is stored on secure servers with restricted physical and network access, protected by firewalls and intrusion detection systems.
- Data Encryption at Rest: Sensitive information such as passwords, payment details, and identification documents are encrypted when stored in our databases.
- Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential weaknesses.
5.2 Organizational Security Measures
- Access Controls: Employee access to personal information is restricted on a need-to-know basis, with role-based permissions and audit logging.
- Confidentiality Agreements: All employees, contractors, and service providers with access to personal data are bound by strict confidentiality obligations.
- Security Training: Staff members receive regular training on data protection, privacy best practices, and security threat awareness.
- Incident Response Plan: We maintain procedures for detecting, responding to, and recovering from data breaches, with prompt notification to affected users as required by law.
5.3 Payment Security
- PCI DSS Compliance: Our payment processing infrastructure adheres to Payment Card Industry Data Security Standards.
- Tokenization: We do not store your full bank account numbers or credit card details on our servers; instead, we use tokenized references provided by secure payment processors.
- Third-Party Verification: Deposits and withdrawals are processed through licensed Indonesian payment service providers with their own security protocols.
Your Security Responsibilities
While we implement robust security measures, you also play a crucial role in protecting your account:
- Use a strong, unique password for your gpx909 account that you don't use on other websites
- Never share your account credentials with anyone, including customer support staff (we will never ask for your password)
- Log out of your account when using shared or public computers
- Enable two-factor authentication if available
- Monitor your account activity regularly and report suspicious transactions immediately
- Keep your email address and mobile phone number secure, as they are used for account recovery
6. Sharing Your Information
gpx909 does not sell your personal information to third parties for marketing purposes. However, we may share your information with the following categories of recipients as necessary to provide our services:
6.1 Service Providers and Business Partners
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process deposits and withdrawals on our behalf.
- Game Providers: Third-party gaming studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Pocket Games Soft) receive limited information necessary to deliver casino games, slots, and live dealer experiences.
- Identity Verification Services: Specialized KYC verification providers may process your identification documents to confirm your identity and age.
- Customer Support Platform: Live chat and ticketing systems used by our customer support team to manage inquiries and maintain service quality.
- Cloud Hosting and IT Infrastructure: Secure data centers and cloud service providers that host our platform and store your information under strict data protection agreements.
6.2 Legal and Regulatory Authorities
We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or other government authorities if:
- Required by law, regulation, legal process, or court order
- Necessary to investigate, prevent, or take action regarding suspected illegal activities, fraud, or security threats
- Requested by licensing authorities to demonstrate compliance with gaming regulations
- Required to protect the rights, property, or safety of gpx909, our users, or the public
6.3 Business Transfers
In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy, your personal information may be transferred to the successor entity or acquiring party, subject to the same privacy protections outlined in this Privacy Policy.
6.4 Data Processing Agreements
All third parties with whom we share your personal information are required to:
- Process your data only for the specific purposes we authorize
- Implement appropriate technical and organizational security measures
- Comply with applicable data protection laws and regulations
- Not use your information for their own purposes without your consent
- Delete or return your data upon termination of services
7. International Data Transfers
gpx909 operates as an internationally licensed platform with servers and service providers located in multiple jurisdictions outside Indonesia. Your personal information may be transferred to, stored, and processed in countries with different data protection laws than Indonesia.
When we transfer your personal information internationally, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by data protection authorities
- Certification under recognized data protection frameworks
- Compliance with international privacy standards and best practices
By using gpx909 services, you acknowledge and consent to the international transfer of your personal information as described in this Privacy Policy.
8. Data Retention
gpx909 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account Registration Information | Duration of account active status + 7 years after account closure | Legal compliance, anti-money laundering regulations, dispute resolution |
| KYC Verification Documents | 7 years after account closure | Regulatory requirements, fraud prevention, audit trails |
| Transaction History | 7 years after transaction date | Financial record-keeping, tax obligations, dispute resolution |
| Betting and Gameplay Records | 7 years after bet settlement | Licensing compliance, responsible gaming monitoring, dispute resolution |
| Customer Support Communications | 3 years after last interaction | Quality assurance, training, dispute resolution |
| Marketing Consent Records | Duration of consent + 2 years | Consent management, regulatory compliance |
| Device and Usage Data | 2 years after collection | Security, fraud detection, platform improvement |
After the retention period expires, we securely delete or anonymize your personal information so that it can no longer identify you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.
9. Your Privacy Rights
Subject to applicable data protection laws, you have the following rights regarding your personal information:
9.1 Right of Access
You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.
9.2 Right to Rectification
You have the right to request correction of inaccurate or incomplete personal information. You can update most account information directly through your gpx909 account settings, or contact customer support for assistance.
9.3 Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal information under certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, we may retain information if required by law or for legitimate business purposes (e.g., resolving disputes, preventing fraud).
9.4 Right to Restrict Processing
You have the right to request that we limit the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
9.5 Right to Data Portability
You have the right to receive your personal information in a structured, commonly used format and request that we transfer it to another service provider, where technically feasible.
9.6 Right to Object
You have the right to object to processing of your personal information based on legitimate interests, including for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting customer support.
9.7 Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.
9.8 Right to Lodge a Complaint
If you believe we have violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with a competent data protection authority in your jurisdiction.
How to Exercise Your Rights
To exercise any of these privacy rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and specify which right you wish to exercise. We will respond to your request within 30 days and may ask you to verify your identity to prevent unauthorized disclosure of personal information.
10. Cookies and Tracking Technologies
gpx909 uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, maintain login sessions, and analyze platform usage. Cookies are small text files stored on your device when you visit our website.
10.1 Types of Cookies We Use
- Essential Cookies: Necessary for the platform to function properly, including login authentication, security features, and load balancing.
- Performance Cookies: Collect anonymous information about how you use our website, which pages are most visited, and where errors occur, helping us improve platform performance.
- Functional Cookies: Remember your preferences, settings, and choices (e.g., language preference, currency display) to provide a personalized experience.
- Advertising Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns (you can opt out of advertising cookies).
10.2 Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are stored. However, disabling essential cookies may affect the functionality of gpx909 and your ability to use certain features.
11. Third-Party Links and Services
Our platform may contain links to third-party websites, game providers, or payment services that are not operated by gpx909. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any external websites or services you access through our platform.
12. Children's Privacy
gpx909 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will immediately delete that information and permanently close the associated account. If you believe a minor has created an account on gpx909, please contact us immediately at [email protected].
13. Changes to This Privacy Policy
gpx909 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. Any amendments will be posted on this page with an updated "Last Updated" date. Material changes that significantly affect your privacy rights will be communicated via email or prominent notice on our platform.
Your continued use of gpx909 services after the effective date of any changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
14. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:
- Email: [email protected] (please manually type this address into your email client; it is not a clickable link for security reasons)
- Subject Line for Privacy Inquiries: "Privacy Policy Question" or "Data Protection Request"
- Customer Support: Available 24/7 via live chat and WhatsApp for general inquiries
We will respond to all legitimate privacy inquiries within 30 days and work diligently to resolve any concerns you may have about how we handle your personal information.
Bank-Grade Encryption
All data transmitted to and from gpx909 is protected by 256-bit SSL encryption, the same standard used by financial institutions worldwide.
No Data Selling
We never sell your personal information to third parties. Your data is used solely to provide gaming services and comply with legal obligations.
Your Privacy Rights
Exercise your rights to access, correct, or delete your personal information at any time by contacting our support team.
Questions About Your Privacy?
Contact our support team 24/7 or read our Terms & Conditions to understand your rights and responsibilities as a gpx909 user.
View FAQ Read Terms & Conditions