At gps88, safeguarding the personal data of our members is a core operational priority, not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how it is processed and stored, who may access it, and what rights you hold as a data subject accessing our platform from Indonesia.
Summary: gps88 collects only the data necessary to operate your account, process transactions in IDR, comply with anti-money-laundering obligations, and provide a safe betting environment. We do not sell your personal data to third parties. We share data only where required by law, with certified game-studio partners under strict contractual controls, or with payment processors to complete your IDR transactions.
This Privacy Policy ("Policy") is issued by gps88 ("we", "us", "our") and applies to all personal data processed in connection with your use of the gps88 platform available at gps88.pro ("Platform"), including the website, mobile-optimized interface, any downloadable application, and all associated services such as sportsbook, live casino, slot games, Dragon Tiger, and togel (Indonesia's traditional numbers lottery) draws.
By registering an account, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree to the data practices described here, you must discontinue use of the Platform and request account closure by contacting our support team.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents, this Policy governs with respect to personal data matters.
gps88 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from verified third-party sources such as payment processors and KYC verification providers. The categories of data we collect are set out in the table below.
| Data Category | Specific Data Points | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, Indonesian national identity number (NIK), nationality, selfie / liveness photo for KYC | Provided directly by you during registration and KYC verification |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung, Bali, Medan) | Provided directly by you during registration |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records in IDR | Provided directly by you; confirmed via payment processor records |
| Gaming & Wagering Data | Bet history, game sessions, win/loss records, bonus usage, session timestamps (WIB / UTC+7) | Automatically generated by Platform server logs |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, referring URL | Automatically collected via cookies and server logs |
| Communications Data | Live chat transcripts, support ticket content, email correspondence, formal complaints | Generated when you contact our support team |
| Responsible Gaming Data | Self-exclusion elections, deposit limit settings, session time reminder preferences, problem-gambling self-assessments | Provided directly by you via Account dashboard tools |
We do not collect special-category sensitive data (such as racial or ethnic origin, political opinions, health data beyond what is strictly necessary for responsible gaming assessments, or biometric data beyond liveness verification for KYC) unless you explicitly provide it and we have a lawful basis for processing it.
gps88 uses your personal data only for specified, explicit, and legitimate purposes. We do not process your data in any manner incompatible with the purposes listed below:
For each category of personal data we process, gps88 relies on one or more of the following legal bases:
4.1 Contractual Necessity. Processing your Identity Data, Contact Data, and Financial Data is necessary for the performance of the contract between you and gps88 — specifically, to operate your account and process your IDR deposits and withdrawals.
4.2 Legal Obligation. Processing for KYC, AML screening, and regulatory reporting is required to comply with applicable international financial crime prevention obligations. We have no discretion in these matters; failure to collect and process this data means we cannot lawfully operate your account.
4.3 Legitimate Interests. Processing Technical Data for fraud prevention, platform security, and aggregated analytics is based on gps88's legitimate interest in maintaining a safe, fair, and commercially sustainable platform. We have conducted a balancing test and are satisfied that our legitimate interests are not overridden by your interests or fundamental rights in this context.
4.4 Consent. Where we send you optional marketing communications or use non-essential cookies and tracking technologies, we rely on your explicit consent, which you may withdraw at any time by contacting [email protected] or adjusting your account notification preferences.
4.5 Vital Interests. In exceptional circumstances — for example, where we identify an acute risk of self-harm associated with a member's gambling behaviour — we may process Responsible Gaming Data to protect the vital interests of that individual.
gps88 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:
All third-party processors are required to implement appropriate technical and organisational security measures and to process your data only in accordance with our documented instructions.
gps88 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate core platform functions, maintain your login session, detect fraud, and — where you have consented — to analyse usage patterns and personalise content.
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, fraud detection flags | No — essential for Platform operation |
| Functional | Language preference, remembered deposit method, game lobby layout preference | No — necessary for personalised service delivery |
| Analytics | Aggregated page view counts, session durations, feature engagement metrics (data is anonymised before analysis) | Yes — opt-in via account preferences |
| Marketing / Retargeting | Conversion tracking for promotional campaigns; personalised bonus offer delivery | Yes — opt-in via account preferences |
You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or placing wagers on the Platform.
gps88 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods driven by legal and regulatory requirements:
7.1 Active Accounts. All personal data associated with an active member account is retained for the duration of the membership and for a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations.
7.2 Financial Transaction Records. Deposit and withdrawal records, including bank transfer confirmations and e-wallet receipts, are retained for a minimum of seven (7) years from the date of the transaction, in line with international financial record-keeping standards.
7.3 KYC Documents. Identity documents and verification records are retained for five (5) years from the date of the most recent transaction on the account, or for the period mandated by applicable law if longer.
7.4 Communications Data. Support tickets, live chat transcripts, and email correspondence are retained for three (3) years from the date of the last communication in each thread.
7.5 Analytics Data. Anonymised, aggregated analytics data that cannot be used to identify any individual is retained indefinitely for platform improvement purposes.
When the applicable retention period expires, personal data is securely deleted or anonymised using industry-standard data destruction methods. You may request early deletion of certain categories of personal data, subject to our legal retention obligations (see Clause 9 — Your Rights).
gps88 employs a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key technical and organisational controls include:
Your responsibility: While gps88 takes every reasonable precaution to protect your data, account security also depends on you. You are responsible for maintaining the confidentiality of your username and password and for logging out of shared devices. Never share your login credentials with any third party. If you suspect your account has been compromised, contact [email protected] immediately.
As a data subject, you hold the following rights with respect to your personal data held by gps88. You may exercise any of these rights by submitting a written request to [email protected]. gps88 will acknowledge your request within 5 business days and respond substantively within 30 calendar days.
The gps88 platform is strictly restricted to individuals aged 21 and over. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in our KYC process; accounts where age cannot be confirmed will be suspended pending verification, and any deposits received will be returned to their source.
If you believe that a minor has accessed the Platform or provided personal data to gps88, please notify us immediately at [email protected]. Upon confirmation, we will delete all data associated with the minor's account and ensure no funds are retained.
Parents and guardians in Indonesia are encouraged to use parental control tools to restrict access to gambling sites on devices used by minors. gps88 fully supports responsible gaming initiatives and takes its obligations regarding underage access extremely seriously.
gps88 operates as an international platform, and certain data processing activities — including KYC verification, game-server hosting, and analytics processing — may involve transferring your personal data to data processors located outside Indonesia. Where such transfers occur, gps88 ensures that appropriate safeguards are in place, including:
By using the gps88 platform, you acknowledge and consent to the transfer of your personal data to overseas processors under the safeguards described in this clause.
The gps88 platform integrates with several categories of third-party service provider to deliver the full range of features available to members. Each provider type is subject to its own privacy practices; gps88 is not responsible for the data practices of third parties beyond the contractual obligations we impose on them as processors.
12.1 Game Providers. Titles delivered by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft are rendered within iFrames or via API integration. These providers receive session tokens and member IDs to enable game delivery; they do not receive your full identity or financial account details from gps88.
12.2 Payment Infrastructure. Indonesian bank transfers and e-wallet transactions are routed through licensed payment gateway intermediaries who process your bank account name, account number, and transaction value. These processors are bound by Bank Indonesia regulations and operate under their own regulatory data obligations.
12.3 KYC & Fraud Prevention. Our identity verification partners receive the document images and selfie photos you submit during KYC. They use automated verification tools to confirm authenticity and return a verification result to gps88; they do not retain your documents beyond the period required for the verification task.
12.4 Customer Support Tooling. Our live chat and support ticket platform may be hosted by a third-party SaaS provider. Communications data (chat transcripts and email correspondence) is stored on that provider's infrastructure under a data processing agreement with gps88.
gps88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, new product features, or feedback from members or regulatory guidance. When material changes are made, we will:
Your continued use of the gps88 platform after the effective date of a revised Policy constitutes your acceptance of the updated data practices. If you do not agree to the revised Policy, you must cease using the Platform and request account closure prior to the effective date by contacting [email protected].
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data gps88 holds about you, please contact our dedicated privacy team through the following channels:
Privacy Queries & Rights Requests: [email protected] — use the subject line "Privacy Request" to ensure your message is routed to our privacy team. We acknowledge all privacy-related requests within 5 business days and respond substantively within 30 calendar days.
Data Breach Notifications: If you believe you have evidence of a security incident affecting gps88 member data, please contact [email protected] with the subject line "Security Incident" immediately. Our incident response team operates around the clock.
Formal Complaints: If you are dissatisfied with our response to a privacy request or believe we have processed your data unlawfully, you may escalate the matter by submitting a formal complaint to [email protected] with the subject line "Formal Privacy Complaint". We will acknowledge within 24 hours and provide a final response within 14 business days.
Indonesian-Speaking Support: Our 24/7 live support team includes native Indonesian-speaking agents available every day of the year, including during Idul Fitri, Ramadhan, and Nyepi. Access live chat from within your logged-in account dashboard for the fastest response.
Every sensitive data field in our database — including identity numbers, bank account details, and hashed passwords — is encrypted using AES-256, the same standard trusted by global financial institutions.
All communications between your device and gps88 servers are protected by TLS 1.2 or higher. Your login credentials, deposit requests, and personal data are never transmitted in plain text.
Every gps88 member undergoes thorough identity verification before withdrawals are enabled. Our certified KYC partners use liveness detection and document authentication to ensure only genuine adults aged 21+ can access full account functionality.
gps88 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Your data is used exclusively to operate your account and deliver the services you have requested.
Access, correct, delete, restrict, or export your personal data at any time. Submit a request to our privacy team at [email protected] and receive a substantive response within 30 calendar days — with no unnecessary friction.
We retain your data only for as long as legally required or operationally necessary. Transaction records are kept for seven years per AML standards; all other data is deleted or anonymised as soon as the retention window closes.
Now that you understand how gps88 protects your privacy, explore our full range of games and sports markets — all secured with enterprise-grade encryption and processed in IDR via local Indonesian banks and e-wallets.