Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably identify a natural person, directly or indirectly — including name, identification number, location data, or online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Platform" means the 8g8g website at https://8g8g.cam and all associated services and features.
• "Player" / "You" means any individual who registers an account on or accesses the Platform.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, 8g8g.
• "Third Party" means any natural or legal person other than the Player and 8g8g.
• "KYC" means the Know Your Customer identity verification process required to comply with anti-money-laundering and responsible gaming obligations.
• "Cookie" means a small text file placed on your device by the Platform to support functionality, analytics, and session management.

2. Data Controller

2.1 8g8g acts as the Data Controller for all personal data collected through the Platform. Any questions regarding this policy or your personal data should be directed to our support team at [email protected].

2.2 Where 8g8g engages third-party service providers to process data on its behalf (for example, payment processors or game studios), those providers act as Data Processors and are bound by data processing agreements that restrict their use of your data to the specific services they provide.

3. Personal Data We Collect

3.1 The categories of personal data 8g8g collects are described in the table below. We collect only what is necessary for the stated purpose.

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, KTP or passport number	Account registration, KYC verification, age confirmation (21+)
Contact Data	Email address, Indonesian mobile number, residential address	Account communications, security alerts, support responses
Financial Data	Bank account name and number (BCA, BRI, BNI, Mandiri), e-wallet ID (OVO, DANA, GoPay), transaction history	Processing deposits and withdrawals in IDR, fraud prevention
Gaming Data	Bet history, game sessions, win/loss records, bonus usage	Account management, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type, operating system, session timestamps	Security monitoring, fraud detection, platform optimization
Usage Data	Pages visited, features used, click patterns, session duration	Platform improvement, personalized experience
Communications Data	Support chat transcripts, email correspondence with 8g8g	Quality assurance, dispute resolution, training

3.2 Special Category Data: 8g8g does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information. If you voluntarily disclose such information during a responsible gaming interaction (for example, disclosing a health condition that affects your gambling behavior), that data is handled with the highest level of confidentiality and used solely to provide appropriate support.

4. How We Collect Your Data

8g8g collects personal data through the following channels:

• Direct submission: Information you provide during registration, KYC verification, deposit/withdrawal requests, or when contacting our support team.
• Automated collection: Technical and usage data collected automatically when you access the Platform, via server logs and cookies (see Section 9).
• Third-party sources: Identity verification data from KYC partners; fraud-risk scores from anti-fraud service providers; payment confirmation data from banks and e-wallet operators such as OVO, DANA, GoPay, ShopeePay, and LinkAja.

5. Purpose & Legal Basis for Processing

5.1 8g8g processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — operating your account, processing deposits and withdrawals, settling bets, and providing customer support.
• Legal obligation: Processing required to comply with applicable law — including anti-money-laundering (AML) checks, age verification (21+ requirement), and tax reporting where applicable.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving the Platform experience — provided our interests do not override your fundamental privacy rights.
• Consent: Processing for optional marketing communications where you have explicitly opted in. You may withdraw consent at any time (see Section 10).

6. Data Sharing & Disclosure

6.1 8g8g does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Payment processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data required to process your deposit or withdrawal transaction.
• KYC verification partners: Identity document data is shared with our certified KYC provider solely for the purpose of verifying your identity and age.
• Game studios: When you play a game provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, your Player ID and session data are shared with the relevant studio to operate that game. These studios act as Data Processors and do not receive your full identity profile.
• Fraud prevention services: Anonymized or pseudonymized technical data may be shared with anti-fraud platforms to detect and prevent abuse.
• Legal and regulatory disclosure: We may disclose personal data to competent authorities when required to do so by law, court order, or regulatory investigation.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 8g8g's assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.2 All third-party Data Processors engaged by 8g8g are bound by written data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide.

7. International Data Transfers

7.1 8g8g operates globally and may transfer your personal data to servers or service providers located outside Indonesia. Where such transfers occur, 8g8g ensures that appropriate safeguards are in place — including standard contractual clauses, certification schemes, or adequacy decisions — to provide a level of data protection equivalent to that required under applicable Indonesian data protection principles.

7.2 By using the Platform, you acknowledge and agree that your data may be processed in jurisdictions outside your country of residence, where data protection laws may differ from those in Indonesia.

8. Data Retention

8.1 8g8g retains personal data for the following periods, after which it is securely deleted or anonymized:

• Account and identity data: Retained for the duration of the account relationship plus 5 years after account closure, to comply with AML regulations and respond to any legal claims.
• Financial transaction data: Retained for 7 years from the date of the transaction, as required by financial record-keeping obligations.
• Gaming history: Retained for 3 years from the date of each session for dispute resolution and responsible gaming audit purposes.
• Technical and usage data: Retained for 12 months on a rolling basis for security and analytics purposes.
• Marketing consent records: Retained for the duration of the consent period plus 1 year after withdrawal of consent.

8.2 Where retention beyond these periods is required by law or for the defence of a legal claim, data will be retained for the minimum additional period necessary and then securely destroyed.

9. Cookies & Tracking Technologies

9.1 The 8g8g Platform uses cookies and similar tracking technologies to maintain session continuity, prevent fraud, and improve platform performance. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting core functionality.
• Performance Cookies: Collect anonymized data on page load times, error rates, and user navigation paths to help us improve the Platform. No personally identifiable data is collected.
• Functional Cookies: Remember your preferences such as language, preferred currency display (IDR), and UI settings to personalize your experience.
• Analytics Cookies: Used to understand aggregate usage patterns on the Platform. Data collected is pseudonymized and used for internal reporting only.

9.2 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality. Disabling other cookie categories will not prevent you from using the Platform but may reduce personalization quality.

9.3 8g8g does not use third-party advertising or cross-site tracking cookies.

10. Marketing Communications

10.1 With your explicit consent at registration or via account settings, 8g8g may send you promotional communications by email regarding bonuses, tournaments, new game releases, and seasonal promotions — including events tied to Indonesian cultural occasions such as Idul Fitri, Ramadhan, and Indonesian Independence Day (17 August).

10.2 You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email we have sent you; or
• Updating your communication preferences in your account settings; or
• Contacting our support team at [email protected].

10.3 Withdrawal of marketing consent does not affect your ability to use the Platform or rece ive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent on the basis of contractual necessity rather than consent.

11. Children's Privacy

11.1 The 8g8g Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step of our KYC process, and any account found to belong to a person under 21 will be immediately suspended and all funds returned to the verified payment source.

11.2 If you believe a person under 21 has registered an account on 8g8g, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12. Security Measures

12.1 8g8g implements industry-standard technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• At-rest encryption for sensitive data stored in our databases;
• Role-based access controls ensuring that only authorized personnel can access personal data, and only to the extent required for their specific role;
• Regular penetration testing and security audits conducted by independent cybersecurity professionals;
• Two-factor authentication (2FA) available for player accounts and mandatory for all internal administrative access;
• Automated anomaly detection to flag suspicious login attempts, unusual transaction patterns, and other potential security events in real time.

12.2 In the event of a data breach that is likely to result in a risk to your rights and freedoms, 8g8g will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

12.3 While 8g8g takes every reasonable precaution, no system is entirely immune to risk. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

13. Your Data Rights

13.1 Subject to applicable law and certain limited exceptions (such as legal retention requirements), you hold the following rights over your personal data held by 8g8g:

• Right of Access: You may request a copy of the personal data 8g8g holds about you, along with information about how it is being used.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to us, so that it can be transferred to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling, where your individual circumstances justify this.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

13.2 To exercise any of the rights listed above, please submit your request in writing to [email protected]. We will respond within 30 calendar days of receiving your request. In complex or high-volume cases, we may extend this period by a further 30 days and will notify you accordingly.

13.3 We may request proof of identity before processing any data rights request to ensure we do not disclose or delete data in response to a fraudulent claim.

14. Third-Party Links

14.1 The 8g8g Platform may contain references to third-party game providers, payment processors, or informational resources. This Privacy Policy applies solely to data collected and processed by 8g8g directly. Where you interact with a third-party service — for example, completing a transaction with BCA or BRI, or launching a game environment hosted by Evolution Gaming — that third party's own privacy policy governs any data they independently collect.

14.2 8g8g has no control over and accepts no responsibility for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your activity on the Platform.

15. Amendments to This Policy

15.1 8g8g reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. Where a material change is made, we will notify registered players by email to the address on file and display a prominent notice on the Platform for a minimum of 14 days prior to the change taking effect.

15.2 The current version of this Privacy Policy is always accessible at https://8g8g.cam/privacy-policy. The "Effective Date" shown at the top of this page reflects the date of the most recent revision. We recommend reviewing this policy periodically to stay informed of how 8g8g protects your data.

15.3 Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must cease using the Platform and may request account closure by contacting support.

16. Contact & Complaints

16.1 If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how 8g8g handles your personal data, please contact us:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week (WIB)
• Response Time: Within 30 calendar days for data rights requests; within 24 hours for general privacy enquiries

16.2 We take all privacy complaints seriously and will investigate and respond to every concern raised in good faith. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.