Privacy Policy — ggp999

1. Introduction & Scope

ggp999 ("we", "us", "our") operates the online gaming platform accessible at https://ggp999.cam. We provide sports betting, casino games, live dealer experiences, lottery products including togel (Indonesia's traditional numbers lottery), and other interactive entertainment services to players primarily based in Indonesia and the surrounding region.

This Privacy Policy describes how ggp999 collects, processes, stores, and protects personal data submitted by users ("you", "your") when you register an account, make deposits or withdrawals, participate in games, interact with our customer service team, or otherwise use any feature of the ggp999 platform. It also details the rights you hold over your personal data and how to exercise them.

By creating a ggp999 account or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of our services immediately. This Privacy Policy should be read in conjunction with our Terms & Conditions.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, contact details, financial information, device identifiers, and behavioral data.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — ggp999, which determines the purposes and means of processing your personal data.
• "Data Processor" — any third party that processes personal data on behalf of ggp999 under a written data processing agreement.
• "KYC" — Know Your Customer procedures, a regulatory requirement to verify user identity and prevent fraud and financial crime.
• "Cookies" — small text files stored on your device by the ggp999 website that help us recognize returning users and analyze platform usage.
• "Sensitive Data" — a subcategory of personal data requiring heightened protection, including financial account details and government-issued identification numbers.

3. Data We Collect

3.1 Data You Provide Directly

When you register an account or use our services, you may provide the following information:

• Identity data: Full legal name, date of birth, nationality, and gender.
• Contact data: Email address, mobile phone number, and residential address in Indonesia (city, province, postal code).
• Verification data: KTP (Indonesian National Identity Card) number, passport number, or driver's license number; copies of documents submitted for KYC verification; selfie photographs taken alongside identity documents.
• Financial data: Bank account details (bank name, account number) for BCA, BRI, Mandiri, BNI, CIMB Niaga, BSI, and other Indonesian banks; e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja; Visa and Mastercard details (card number and expiry date are processed by certified payment gateways and are never stored on ggp999 servers).
• Communication data: Messages sent to our customer support team via live chat, email, or any other contact channel; survey responses; feedback submissions.

3.2 Data Collected Automatically

When you access or use the ggp999 platform, certain technical data is collected automatically:

• Device data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device language settings.
• Usage data: Pages visited, features used, games played, session duration, bet history, deposit and withdrawal records, bonus usage, and click-path analytics.
• Location data: Approximate geographic location derived from your IP address for fraud prevention and jurisdictional compliance. We do not collect precise GPS location data.
• Cookie data: Information stored in cookies and similar tracking technologies as described in Section 7 below.

3.3 Data Received from Third Parties

In limited circumstances, ggp999 may receive personal data about you from trusted third parties, including:

• Payment processors and financial institutions (transaction confirmation and fraud alerts).
• Identity verification providers used in our KYC process.
• Fraud prevention and anti-money laundering screening services.

4. How We Use Your Data

ggp999 uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Identity data, contact data
Identity verification (KYC)	Verification data, financial data
Processing deposits and withdrawals	Financial data, identity data
Providing gaming services and resolving disputes	Usage data, communication data
Fraud prevention and security	Device data, financial data, location data
Responsible gaming monitoring	Usage data, financial data
Customer support	Communication data, identity data
Legal and regulatory compliance	All categories as required
Platform analytics and improvement	Usage data, cookie data
Service communications (account notices, security alerts)	Contact data, identity data

We do not use your personal data for automated profiling that produces legal or similarly significant effects on you without human review. We do not engage in behavioral advertising or share data with advertising networks.

5. Legal Basis for Processing

ggp999 processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the user agreement, including account management, game provision, and payment processin g.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, KYC requirements, and data retention mandates.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your privacy rights.
• Consent: Where required by law, we will seek your explicit consent before processing certain categories of data. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

ggp999 does not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Payment processing partners handling transactions via BCA, BRI, Mandiri, BNI, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, and Mastercard.
• KYC and identity verification providers.
• Cloud infrastructure and hosting providers operating secure, access-controlled data centers.
• Anti-fraud and cybersecurity vendors.
• Customer support platform providers.
• Game software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) who receive only the minimum session data required to deliver game services.

All service providers are contractually bound to process your data only for specified purposes, maintain adequate security standards, and delete or return data upon termination of the service relationship.

6.2 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required or permitted to do so by applicable law. This includes disclosures related to anti-money laundering investigations, fraud inquiries, or court orders. We will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ggp999's assets, your personal data may be transferred to the acquiring entity. We will notify you via email or prominent website notice before your data is transferred and becomes subject to a different privacy policy.

7. Cookies & Tracking Technologies

ggp999 uses cookies and similar technologies to ensure the platform functions correctly, to remember your preferences, and to understand how users interact with our services. We do not use third-party advertising cookies or cross-site tracking technologies.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the website to function. They enable core features such as session management, login authentication, and security verification. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display options to improve your experience on return visits.
• Analytics cookies: Help us understand aggregate usage patterns — pages visited, features used, session durations — so we can improve platform performance. Data is collected anonymously and is not linked to your personal account.

7.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You may choose to block or delete cookies; however, doing so may impair the functionality of certain features on the ggp999 platform, including login persistence and payment method recall. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

8. Data Retention

ggp999 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in compliance with anti-money laundering regulations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, as required by financial record-keeping obligations.
• KYC verification documents: Retained for the duration of your account plus 5 years post-closure.
• Customer support communications: Retained for 3 years from the date of the interaction.
• Cookie and analytics data: Anonymized analytics data retained for up to 26 months. Session cookies expire at the end of your browser session.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized so that it can no longer be linked to you as an individual.

9. Data Security

Protecting your personal data is a core operational priority at ggp999. We implement a comprehensive set of technical and organizational security measures, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including financial account details and KYC documents.
• Role-based access controls (RBAC) ensuring that only authorized staff members can access personal data, and only to the extent necessary for their specific role.
• Multi-factor authentication (MFA) required for all internal staff accessing systems that process personal data.
• Regular penetration testing and independent security audits conducted by qualified cybersecurity professionals.
• Intrusion detection and prevention systems (IDPS) monitoring platform infrastructure 24/7 for unauthorized access attempts.
• Secure payment gateway integration — ggp999 does not store full card numbers. Payment card data is processed and tokenized directly by PCI-DSS certified payment processors.

Despite these measures, no digital system can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights or freedoms, ggp999 will notify affected users without undue delay, providing details of the nature of the breach, the data affected, and the steps we are taking to mitigate harm.

10. Your Rights

You have the following rights in relation to your personal data held by ggp999. To exercise any of these rights, contact our support team at [email protected]. We will respond within 30 days of receiving your request.

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction or completion.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing: You may request that we temporarily stop processing your data while a dispute about its accuracy or lawfulness is resolved.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to us, for transfer to another service provider.
• Right to object: You may object to processing based on our legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11. International Data Transfers

ggp999 primarily processes and stores data on servers located in secure data centers in the Asia-Pacific region. In some cases, data may be transferred to service providers operating in other jurisdictions, including for cloud hosting, analytics processing, or game software delivery by providers such as Evolution Gaming, Pragmatic Play, and Microgaming.

Where such international transfers occur, ggp999 ensures that adequate safeguards are in place, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those applied by ggp999.
• Transfer only to jurisdictions that maintain adequate levels of data protection as recognized by applicable standards.
• Technical and organizational security measures applied regardless of where data is processed.

12. Children's Privacy

ggp999 services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a minor, we will delete that data immediately and permanently close the associated account.

If you are a parent or guardian and believe that a person under 21 has registered an account with ggp999, please contact us immediately at [email protected] and we will investigate and take appropriate action without delay. For more information on our age verification and responsible gaming commitments, please visit our Responsible Gaming page.

13. Changes to This Privacy Policy

ggp999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the ggp999 website for a minimum of 14 days.
• Send an email notification to all registered users at their registered email address.

Your continued use of ggp999 services following notification of changes constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the revised policy, you must discontinue use of our services and may request account closure.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way ggp999 handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected]
• Subject Line: Privacy Policy Inquiry
• Live Chat: Available 24/7 on the ggp999 website
• Response Time: Within 5 business days (WIB, UTC+7) for privacy-related inquiries

For questions about your account, transactions, bonuses, or general gaming queries, please also visit our FAQ page, which covers the most common topics raised by our players across Jakarta, Surabaya, Bandung, Medan, Bali, and throughout Indonesia.