At gbo388 we take your privacy seriously. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and the rights you hold as a data subject under our framework.
All data transmitted between your device and gbo388 is protected by 256-bit SSL encryption — the same standard used by leading international financial institutions.
gbo388 never sells, rents, or trades your personal data to third parties for marketing or advertising purposes. Your information stays within our ecosystem.
You retain the right to access, correct, export, and request deletion of your personal data at any time by contacting our support team.
Personal data is stored on encrypted servers with restricted access controls. Data at rest is protected using AES-256 encryption with rotating key management.
We retain your data only as long as necessary for the purposes outlined in this Policy or as required by applicable law. Accounts closed for over 5 years are subject to data purge.
Our Indonesian-speaking support team handles all privacy-related requests 24/7. Submit a data subject access request (DSAR) directly via live chat or email.
gbo388 ("we", "us", "the Company") is committed to protecting the privacy and personal data of all individuals who interact with our Platform. This Privacy Policy describes our practices for collecting, using, disclosing, storing, and protecting personal information in connection with our online sports betting, live casino, and togel (Indonesia's traditional numbers lottery) services.
We operate primarily within the Indonesian market, serving players across Jakarta, Surabaya, Bandung, Medan, Yogyakarta, Bali, Semarang, and beyond. Our data practices are designed to meet internationally recognized standards of data protection while remaining practical and transparent for our Indonesian user base.
This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform, and our Responsible Gaming page, which explains the player protection tools available to you.
Depending on how you interact with the Platform, gbo388 may collect the following categories of Personal Data:
gbo388 collects Personal Data through the following means:
We process your Personal Data only where we have a valid legal basis to do so. The table below summarizes our primary processing activities:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, Contact | Contract performance |
| Identity verification (KYC) | Identity, Financial | Legal obligation & contract |
| Processing deposits & withdrawals | Financial, Identity | Contract performance |
| Fraud prevention & security | Technical, Financial, Identity | Legitimate interest |
| Providing customer support | Communications, Identity | Contract performance |
| Responsible gaming monitoring | Behavioral, Identity | Legal obligation & legitimate interest |
| Promotional communications | Contact, Behavioral | Consent |
| Platform analytics & improvement | Technical, Behavioral | Legitimate interest |
| Legal & regulatory compliance | All categories (as required) | Legal obligation |
Where we rely on consent as our legal basis — for example, to send you promotional emails or SMS notifications about gbo388 offers, seasonal promotions during Ramadhan or Idul Fitri, or major sporting events such as BRI Liga 1 milestones or the AFF Cup — you may withdraw that consent at any time by contacting our support team or adjusting your notification preferences within your account settings. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
gbo388 engages trusted third-party service providers to perform functions on our behalf. These providers act as Data Processors and are contractually bound to process Personal Data only on our documented instructions, to implement appropriate security measures, and to refrain from using your data for their own purposes. Categories of service provider include:
gbo388 may disclose Personal Data to law enforcement agencies, regulatory authorities, or other public bodies where we are legally required or compelled to do so by a valid court order, subpoena, or equivalent legal instrument. We will notify you of any such disclosure to the extent permitted by law.
In the event that gbo388 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you via email and in-Platform notification prior to your Personal Data becoming subject to a different privacy policy as a result of such a transfer.
gbo388 does not sell, rent, or trade your Personal Data to any third party for that party's own marketing or commercial purposes. This commitment applies regardless of the commercial value of the data concerned.
We retain your Personal Data for the minimum period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. Our standard retention schedules are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | Legal obligation (AML/KYC) |
| Financial & Transaction Data | 7 years from transaction date | Legal obligation (financial records) |
| KYC Documents | 5 years from account closure | Legal obligation |
| Customer Support Records | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Technical / Log Data | 13 months on a rolling basis | Legitimate interest (security) |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Legal obligation (proof of consent) |
| Self-Exclusion Records | Minimum 5 years from exclusion date | Legal obligation (responsible gaming) |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be attributed to you as an individual. Anonymized aggregated data may be retained indefinitely for statistical and analytical purposes.
gbo388 implements a layered security framework to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our key security measures include:
Cookies are small text files stored on your device when you visit the Platform. They allow gbo388 to recognize your browser, remember your preferences, maintain your login session, and analyze how the Platform is used. Similar technologies — including web beacons, pixel tags, and local storage objects — may also be used for comparable purposes.
You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Most modern browsers allow you to view, block, and delete cookies through the browser's settings menu. Refer to your browser's help documentation for specific instructions.
The Platform is strictly intended for adults aged 21 years and over. gbo388 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will promptly delete that data and close the associated account without liability for any balance held therein.
If you are a parent or guardian and believe that your child has registered on the Platform without your knowledge, please contact our support team immediately. We will investigate and take appropriate action within 24 hours of receiving a credible report.
As a data subject, you hold the following rights in respect of your Personal Data held by gbo388. You may exercise any of these rights by submitting a DSAR to our support team using the contact details in Section 15.
Request a copy of the Personal Data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete Personal Data held in your account profile.
Request deletion of your Personal Data where it is no longer necessary for the original purpose, subject to legal retention obligations.
Request that we restrict Processing of your data while a dispute about accuracy or lawfulness is being resolved.
Receive a copy of your Personal Data in a structured, machine-readable format to transfer to another service provider.
Object to Processing based on legitimate interest, including profiling for direct marketing purposes.
Withdraw consent for any Processing activity for which consent was the legal basis, without affecting prior lawful Processing.
Request human review of any solely automated decision that significantly affects your account status or access to services.
We will respond to all valid DSARs within 30 calendar days of receipt. Complex requests may take up to 60 days; in such cases, we will notify you of the extension within the initial 30-day period. There is no charge for submitting a DSAR unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.
gbo388 may transfer your Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, we implement appropriate safeguards to ensure that your data receives a level of protection equivalent to that provided within Indonesia. These safeguards include:
By using the Platform, you acknowledge and consent to the transfer of your Personal Data to locations outside Indonesia for the purposes described in this Policy, subject to the safeguards outlined above.
The Platform may contain references to or integrations with third-party services — such as payment gateways operated by BCA, OVO, or DANA — whose privacy practices are governed by their own privacy policies. gbo388 is not responsible for the privacy practices of any third-party service. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of gbo388.
gbo388 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify you by email to your registered address and via an in-Platform notification at least 7 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.
Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account as described in our Terms & Conditions and request deletion of your Personal Data under Section 11 above.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to report a privacy concern, please contact the gbo388 Privacy Team through the following channels:
To process a DSAR efficiently, please provide your full registered name, account username, registered email address, and a clear description of the right you wish to exercise. We may request additional verification of your identity before processing a request to protect against unauthorized access to your data.
For further information on your rights and our data practices, you may also review our related pages:
Still have questions about how gbo388 handles your data? Our support team is available 24/7 in Indonesian and English. You can also explore our FAQ for quick answers or review our full Terms & Conditions.