gas88 Privacy Policy

Definitions

Throughout this Privacy Policy, the following terms carry the specific meanings set out below:

• "gas88," "we," "us," "our" — the operator of the gas88 platform accessible at https://gas88.vip.
• "Platform" — the gas88 website, all associated pages, mobile-optimized interfaces, and any software tools made available to Members.
• "Member," "you," "your" — any individual who has registered an Account on the Platform or who browses the Platform without registration.
• "Personal Data" — any information that identifies or can reasonably identify a natural person, directly or indirectly, including but not limited to name, email address, date of birth, Indonesian National Identity Card (KTP) number, financial account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, alteration, or deletion.
• "KYC" — Know Your Customer: the identity and address verification process conducted on all Members prior to withdrawal authorisation.
• "Cookie" — a small text file placed on your device by the Platform for functionality, analytics, or personalisation purposes.
• "Third-Party Service Provider" — any external company engaged by gas88 to deliver specific services (such as payment processing, fraud detection, or analytics) under a data processing agreement.

Data Controller

gas88 is the data controller responsible for the Personal Data collected through the Platform. As data controller, gas88 determines the purposes and means of Processing your Personal Data and is accountable for ensuring that Processing is conducted lawfully, fairly, and transparently in accordance with applicable data protection law.

gas88 operates under an international gaming licence and processes Member data in compliance with the data protection frameworks applicable in the jurisdictions where it is licensed. Members located in Indonesia are the primary user base, and gas88 applies data handling standards appropriate to internationally operating digital platforms serving Indonesian consumers.

For all data-protection enquiries, you may contact gas88 directly at: [email protected] (plain text — not a clickable link). Please use the subject line "Data Protection Enquiry" to ensure your message is routed to the appropriate team.

Data We Collect

gas88 collects Personal Data across three categories: data you provide directly, data generated automatically by your use of the Platform, and data obtained from trusted third parties where permitted.

Data You Provide Directly

• Full legal name, date of birth, and residential address in Indonesia (required at registration).
• Email address and, where provided, mobile phone number.
• Username and encrypted password credentials.
• Government-issued identity documents submitted during KYC verification (Indonesian KTP, passport, or equivalent).
• Proof of address documentation (utility bill, bank statement, or equivalent issued within the last three months).
• Payment method details: bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja). Note: gas88 does not store full card numbers on its own servers — payment card data is tokenised and held by our PCI-DSS-compliant payment processors.
• Support correspondence: messages, complaints, and attachments submitted via live chat or email.
• Responsible gaming preference settings (deposit limits, self-exclusion status, cooling-off selections).

Data Generated Automatically

• IP address, approximate geolocation (country and city level), device type, operating system, and browser version.
• Session data: login timestamps, session duration, pages visited, and click-path data.
• Betting and gaming activity: game titles accessed, wager amounts in IDR, bet outcomes, bonus activations, and withdrawal requests.
• Cookie identifiers and similar tracking technologies (detailed in Section 8).
• Referral source data: the URL or campaign identifier through which you arrived at the Platform.

Data Obtained from Third Parties

• Identity verification results from KYC service providers, including document authenticity scores and watchlist screening outcomes.
• Fraud risk signals from payment processors and anti-fraud partners.
• Publicly available information used to verify the accuracy of data you have provided, where legally permitted.

Legal Basis for Processing

gas88 processes your Personal Data only where a valid legal basis exists. The primary legal bases we rely on are as follows:

Where gas88 relies on legitimate interests as a legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. You may request a summary of any such assessment by contacting [email protected].

How We Use Your Data

gas88 uses your Personal Data solely for the purposes described below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent or establishing a separate legal basis.

• Account Administration: Creating, maintaining, and securing your gas88 Account, including password recovery, session management, and multi-device access controls.
• Transaction Processing: Facilitating deposits and withdrawals in IDR via your chosen local bank or e-wallet, verifying transaction authenticity, and maintaining accurate financial records.
• Identity Verification (KYC): Confirming your identity, age (21+), and residential address in Indonesia to comply with anti-money laundering obligations and to safeguard the Platform against fraudulent registrations.
• Fraud and Security Monitoring: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the gas88 Terms & Conditions.
• Customer Support: Responding to enquiries, resolving complaints, processing responsible gaming requests, and maintaining a record of interactions for quality assurance.
• Responsible Gaming Compliance: Monitoring betting patterns to identify potential problem gambling behaviour, enforcing self-exclusion and deposit limit settings, and proactively reaching out where intervention may be appropriate.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game selection, site performance, user experience, and payment processing reliability.
• Marketing Communications: Sending promotional emails or notifications about bonuses, new games, and seasonal offers (such as Idul Fitri and Ramadhan promotions) where you have opted in. You may withdraw consent at any time via your Account settings or by emailing [email protected].
• Legal and Regulatory Compliance: Retaining records required under applicable licensing conditions and responding to lawful requests from regulatory or law enforcement authorities.

Data Sharing & Disclosure

gas88 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share Personal Data only in the following limited and controlled circumstances:

• Payment Processors: We share the minimum necessary financial data (bank account number, e-wallet identifier, transaction amount in IDR) with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja, as well as any intermediary payment gateway, solely to execute your requested transactions.
• KYC and Identity Verification Providers: We transmit identity document images and biographical data to certified KYC service providers for document authentication, watchlist screening, and age verification. These providers operate under strict data processing agreements and may not use your data for any other purpose.
• Fraud Prevention and Anti-Money Laundering Specialists: We share behavioural and transactional signals with specialist fraud detection partners to protect the Platform and all Members from financial crime.
• Game Studio Technology Providers: Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session tokens and game activity data necessary to operate their software on the Platform. These studios do not receive your identity documents or full financial details.
• IT Infrastructure and Cloud Providers: gas88 uses third-party hosting, content delivery, and security services. These providers act as data processors under binding agreements and have no independent right to access or use your Personal Data.
• Regulatory and Law Enforcement Authorities: gas88 will disclose Personal Data to competent regulatory, tax, or law enforcement authorities when required by law or in response to a valid legal order. Where permitted, gas88 will notify you of such a disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of gas88's assets, Member data may be transferred to the acquiring entity, subject to the same or equivalent privacy protections. Members will be notified of any such transfer via registered email at least 30 days in advance.

All third-party recipients are contractually bound to process Personal Data only for the specified purpose, to implement appropriate security measures, and to delete or return data once the processing purpose has been fulfilled.

International Data Transfers

gas88 operates internationally, and your Personal Data may be transferred to and processed in countries outside Indonesia where our service providers, data centres, or licensing infrastructure are located. These jurisdictions may have data protection laws that differ from those applicable in Indonesia.

Whenever gas88 transfers your Personal Data internationally, we ensure that appropriate safeguards are in place to protect it, including:

• Contractual clauses that impose data protection obligations on the recipient equivalent to those gas88 applies internally.
• Transfer only to jurisdictions or entities that maintain documented security standards and have agreed to binding data processing terms.
• Regular review of transfer mechanisms to ensure ongoing adequacy.

By registering a gas88 Account, you acknowledge that your Personal Data may be transferred and processed outside Indonesia for the purposes described in this Privacy Policy.

Cookies & Tracking Technologies

The gas88 Platform uses cookies and similar technologies (including local storage objects and pixel tags) to deliver core functionality, analyse usage patterns, and personalise your experience. The categories of cookies we deploy are as follows:

You can manage cookie preferences at any time through the Cookie Settings section of your Account dashboard or through your browser's native cookie controls. Disabling strictly necessary cookies will prevent you from logging in and using the Platform.

gas88 does not use cookies to track your browsing activity on third-party websites unrelated to the Platform, and we do not share cookie data with advertising networks for the purpose of targeting you on external sites.

Data Retention

gas88 retains your Personal Data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your membership plus five (5) years after account closure, to satisfy anti-money laundering record-keeping obligations and licensing requirements.
• KYC Identity Documents: Retained for five (5) years from the date of verification or account closure, whichever is later, in accordance with applicable financial crime prevention standards.
• Transaction Records: Retained for five (5) years from the date of each transaction, expressed in IDR, to support regulatory audit requirements.
• Customer Support Correspondence: Retained for three (3) years from the date of the final interaction in a given support thread.
• Marketing Consent Records: Retained for the period of consent plus two (2) years to demonstrate compliance with opt-in obligations.
• Analytics Data: Aggregated anonymised analytics data may be retained indefinitely as it no longer constitutes Personal Data once de-identified.

At the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup cycle timelines, the data is isolated and protected from further active processing until deletion can be completed.

Security Measures

gas88 implements a layered security architecture to protect your Personal Data against unauthorised access, loss, destruction, or disclosure. Our technical and organisational measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit using industry-standard TLS 1.2 or higher.
• Encryption at Rest: Sensitive data fields — including identity document images, payment identifiers, and authentication credentials — are encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to Personal Data is restricted to staff members who have a genuine operational need. Access is governed by role-based permissions, multi-factor authentication, and detailed audit logging.
• Regular Penetration Testing: gas88 commissions independent third-party security assessments, including penetration tests and vulnerability scans, on a regular schedule to identify and remediate weaknesses before they can be exploited.
• Real-Time Intrusion Detection: The Platform's infrastructure is monitored around the clock by automated intrusion detection and prevention systems, with incident response escalation protocols in place for any detected anomaly.
• Data Breach Response: In the event of a Personal Data breach that poses a risk to your rights and freedoms, gas88 will notify affected Members via registered email within 72 hours of becoming aware of the breach, detailing the nature of the incident, the data affected, and the steps gas88 has taken to contain and remediate it.

While gas88 takes all reasonable steps to protect your Personal Data, no internet transmission or electronic storage system is 100% secure. You should also take responsibility for the security of your own Account by using a strong, unique password and enabling any additional authentication options available in your Account settings.

Your Rights Over Your Personal Data

As a gas88 Member, you have the following rights with respect to your Personal Data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". gas88 will respond within 30 days of receipt of a valid request.

• Right of Access: You may request a copy of the Personal Data gas88 holds about you, along with information about how it is being processed.
• Right to Rectification: If any Personal Data gas88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no overriding legal basis for continued processing. Note that this right is limited where gas88 is required to retain data by law (e.g., KYC and transaction records subject to AML retention obligations).
• Right to Restriction of Processing: You may request that gas88 restrict the active processing of your Personal Data in certain circumstances — for example, while a rectification request is being investigated.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request a machine-readable copy of your Personal Data to transfer to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests or carried out for direct marketing purposes. Where you object to direct marketing, gas88 will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you believe gas88 has not handled your Personal Data appropriately, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction where you reside.

Minors

The gas88 Platform is strictly intended for adults aged 21 years and over. gas88 does not knowingly collect or process Personal Data relating to individuals under the age of 21. This minimum age requirement is enforced at registration through mandatory date-of-birth declaration and is confirmed through KYC verification before any withdrawal is authorised.

If gas88 becomes aware that Personal Data has been collected from an individual under the age of 21, the associated Account will be immediately suspended, all balances withheld pending investigation, and all Personal Data related to that individual deleted as soon as reasonably practicable. If you are a parent or guardian and believe that a minor has accessed the Platform, please contact us immediately at [email protected].

gas88 also recommends that adults in Indonesia use parental control software to prevent minors from accessing online gambling platforms. Information on responsible gaming tools available to Members is set out on our Responsible Gaming page.

Changes to This Privacy Policy

gas88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The most current version will always be published at https://gas88.vip/privacy-policy, with the effective date displayed prominently at the top of the document.

Where a change is material — meaning it meaningfully affects how we collect, use, or share your Personal Data — gas88 will provide at least 14 calendar days' advance notice via a prominent banner on the Platform and/or an email to your registered address. Your continued use of the Platform after the effective date of a material change constitutes acceptance of the revised Privacy Policy.

For non-material changes (such as typographical corrections or clarifications that do not alter the substance of our data practices), gas88 may update this Policy immediately upon publication without advance notice.

We encourage you to review this Privacy Policy periodically so you remain informed about how gas88 protects your Personal Data.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or gas88's handling of your Personal Data, please contact our dedicated support team through the following channel:

• Email: [email protected] (plain text — not a clickable link). Use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 via the live chat widget on the Platform, staffed by Indonesian-speaking agents across WIB, WITA, and WIT time zones.
• Response Time: gas88 aims to acknowledge all privacy-related written enquiries within four (4) hours and provide a substantive response within 30 days. Where a request is complex or high in volume, gas88 may extend the response window by a further 30 days, notifying you of the extension within the initial 30-day period.

This Privacy Policy is provided in English. If you require clarification on any point, our Indonesian-speaking support agents are available to assist you via live chat at any time.