At gan98, protecting your personal data is a core responsibility, not an afterthought. This Privacy Policy explains in plain terms what information we collect, why we collect it, how we use and store it, and what rights you hold as a Member of our platform.
Every data transmission between your device and gan98's servers is protected by industry-standard 256-bit SSL/TLS encryption. Your personal and financial information is never transmitted in plain text.
gan98 does not sell, rent, or trade your personal data to unaffiliated third parties for marketing purposes. Your information is used exclusively to deliver and improve our services to you.
As a gan98 Member, you retain the right to access, correct, export, or request deletion of your personal data at any time by contacting our dedicated data protection support team.
Member data is stored on dedicated secured servers with restricted access controls, regular security audits, and automated intrusion detection systems operating around the clock.
We use cookies solely to maintain your session, remember your preferences, and analyse aggregate site performance. We do not use behavioural advertising cookies or third-party tracking pixels.
Promotional communications from gan98 are entirely optional. You may opt out of marketing emails and SMS notifications at any time through your Account settings or by contacting support.
Section 1
Throughout this Privacy Policy, the following terms carry the meanings assigned below unless context requires otherwise:
Section 2
This Privacy Policy applies to all Personal Data collected by gan98 in connection with the operation of its online betting and gaming platform, including data collected during Account registration, identity verification, payment processing, customer support interactions, and general browsing of the Platform.
This Policy applies to Members who are residents of Indonesia as well as to any other individual who accesses the Platform regardless of their geographic location. Where applicable laws in a Member's jurisdiction impose additional data protection obligations on gan98, those obligations are incorporated into our data handling practices to the extent required.
This Privacy Policy should be read in conjunction with our Terms & Conditions, which form part of the binding agreement between gan98 and every Member. By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your Personal Data as described herein.
This Privacy Policy was last reviewed and updated on 1 January 2026. If you have any questions about how your data is handled, please contact our support team at [email protected] before proceeding with registration.
Section 3
gan98 collects the minimum Personal Data necessary to deliver a safe, compliant, and high-quality gaming experience. The categories of data we collect are described in the table below:
| Data Category | Specific Data Points | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, Indonesian National Identity Card (KTP) number or passport number | Registration & KYC |
| Contact Data | Mobile phone number, email address, residential address (city, province, postal code) | Registration |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay), transaction history, deposit and withdrawal records | Payment Processing & KYC |
| Verification Data | Copies of identity documents, selfie photographs taken for liveness checks, proof-of-address documents | KYC Verification |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session timestamps, referral URL | Platform Usage |
| Behavioural Data | Pages visited, games played, wager amounts and frequencies, session duration, feature interactions, bonus redemptions | Platform Usage |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, feedback submissions | Customer Support |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, cooling-off period records, problem gambling flags | Responsible Gaming Tools |
We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond liveness verification for KYC), health data, or sexual orientation, except where required by law or expressly consented to by you.
Section 4
gan98 collects Personal Data through the following methods:
Section 5
We process your Personal Data only for defined, legitimate purposes. The following table maps each processing purpose to the relevant data categories used:
| Processing Purpose | Data Categories Used |
|---|---|
| Account creation, authentication, and management | Identity, Contact, Technical |
| KYC identity verification and age confirmation (21+) | Identity, Verification, Financial |
| Processing deposits and withdrawals via Indonesian banks and e-wallets | Identity, Financial |
| Anti-money laundering (AML) and fraud prevention screening | Identity, Financial, Technical, Behavioural |
| Delivery of customer support services | Identity, Contact, Communications |
| Personalisation of the gaming experience and bonus delivery | Behavioural, Identity |
| Responsible gaming monitoring and intervention | Behavioural, Responsible Gaming, Identity |
| Marketing communications (with consent) | Contact, Behavioural |
| Platform security, abuse detection, and technical operations | Technical, Behavioural, Identity |
| Compliance with legal and regulatory obligations | All categories, as required |
We do not use your Personal Data for automated decision-making that produces legal or similarly significant effects on you without human review, except where required for fraud prevention or AML compliance purposes, in which case you have the right to request human review of any automated decision that affects your Account.
Section 6
gan98 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:
Section 7
gan98 does not sell your Personal Data to any third party. We share your data only in the following limited, controlled circumstances:
All third-party service providers engaged by gan98 are subject to written data processing agreements that require them to implement appropriate technical and organisational measures to protect your Personal Data and to process it only in accordance with our documented instructions.
Section 8
As an internationally operated platform, gan98 may transfer your Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, we take appropriate steps to ensure that your Personal Data receives an equivalent level of protection to that which it receives within Indonesia.
Safeguards we apply to international transfers include:
If you would like further information about the specific safeguards applied to any particular international transfer of your data, please contact our support team at [email protected].
Section 9
gan98 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data (active Members) | Duration of membership + 5 years after closure | Legal obligation / AML compliance |
| KYC and verification documents | 5 years after Account closure or last transaction | Legal obligation / AML compliance |
| Financial transaction records | 7 years from the date of each transaction | Legal obligation / tax records |
| Customer support communications | 3 years from the date of the interaction | Legitimate interests / dispute resolution |
| Behavioural and session data | 24 months on a rolling basis | Legitimate interests / platform improvement |
| Marketing consent records | Duration of consent + 3 years after withdrawal | Legal obligation / consent management |
| Responsible gaming records | Duration of exclusion + 5 years | Legal obligation / responsible gaming |
Upon expiry of the applicable retention period, we securely delete or anonymise your Personal Data in accordance with our internal data disposal procedures. Anonymised data — from which all identifying information has been permanently removed — may be retained indefinitely for statistical and research purposes.
Section 10
gan98 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, remember your preferences, and analyse aggregate usage patterns. The following types of cookies are used:
gan98 does not use behavioural advertising cookies, retargeting pixels, or any third-party tracking technology that profiles individual Members for advertising purposes across external websites.
Most web browsers are configured to accept cookies by default. You may adjust your browser settings to refuse or delete cookies at any time; however, disabling strictly necessary cookies may prevent certain Platform features from functioning correctly, including the ability to log in and place wagers.
Section 11
As a Member of gan98, you hold the following rights with respect to your Personal Data. You may exercise any of these rights at any time by contacting our support team:
You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed. We will respond to access requests within 30 days.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Contact support with the relevant corrections and supporting documentation.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (see Section 9). Erasure cannot be applied to data we are legally required to retain.
You have the right to request that we restrict the processing of your Personal Data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection to processing is being assessed.
Where processing is based on your consent or performed by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to transmit it to another service provider.
You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
To exercise any of the above rights, please contact our support team via live chat (available 24/7 within the Platform) or by email at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.
To protect the security of your data, we may ask you to verify your identity before processing any data rights request. This typically requires confirmation of your registered email address, mobile number, and a KYC-verified identity document reference.
Section 12
The gan98 Platform is strictly for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware — through KYC verification, parental notification, or any other means — that a Member has provided false date-of-birth information and is in fact under 21, we will immediately:
If you are a parent or guardian and believe that a person under your care has registered on the Platform, please contact us immediately at [email protected]. We will investigate and respond within 48 hours.
Section 13
gan98 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While we apply industry-leading security standards, no online platform can guarantee absolute security. We encourage all Members to protect their own Account security by using a strong, unique password, enabling two-factor authentication (2FA), and never sharing login credentials with any third party.
Section 14
gan98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When material changes are made, we will notify Members via a prominent notice on the Platform homepage and, where feasible, by email to the address registered to your Account.
The effective date displayed at the top of this document reflects the date on which the current version came into force. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how we handle your Personal Data.
If you do not agree with any material change to this Privacy Policy, you may close your Account prior to the effective date of the change by contacting our support team. Account closure and the handling of your remaining balance will be conducted in accordance with our Terms & Conditions.
Section 15
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by gan98, please contact us through any of the following channels:
We are committed to handling all privacy-related enquiries with the utmost care, professionalism, and respect for your rights. Our support team includes agents with specialist data protection training who handle all data rights requests with appropriate confidentiality.
Explore gan98
With your privacy protected by industry-leading security standards, you can focus on what matters — world-class betting and gaming across BRI Liga 1 sportsbook markets, live casino tables, and over 1,000 certified slot titles. 21+ only. Please play responsibly.