Privacy Policy

1. Introduction

This Privacy Policy ("Policy") governs the collection, use, storage, disclosure, and protection of personal data by g669 ("we", "us", "our", "the Platform") in connection with the operation of the online betting and gaming platform accessible at https://g669.cam.

g669 is committed to protecting the privacy of all individuals who interact with our platform, including registered Players, prospective users browsing our website, and individuals who contact our customer support team. This Policy applies to all personal data processed by g669 in the course of providing its services to users in Indonesia and globally.

By registering an account on g669, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any provision of this Policy, you must discontinue use of the platform immediately.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, which together form the complete regulatory framework governing your use of the g669 platform.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either directly (e.g., name, email address, national ID number) or indirectly in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" means g669, the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means any third party engaged by g669 to process Personal Data on g669's behalf and under g669's documented instructions.
• "Player" / "User" / "You" means any individual who registers an account with or accesses the g669 platform.
• "KYC" means Know Your Customer — the identity verification process through which g669 confirms the identity, age, and residence of a Player.
• "Cookie" means a small text file placed on your device by the g669 website for the purposes of session management, analytics, and personalization.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including national identity card (KTP) numbers, financial account details, and device biometric data.

3. Personal Data We Collect

g669 collects Personal Data across three primary categories. The specific data points collected within each category are detailed in the table below.

3.1 Registration and Identity Data

3.2 Financial and Transaction Data

3.3 Technical and Usage Data

4. How Data Is Collected

g669 collects Personal Data through the following channels and mechanisms:

• Direct submission: Data you provide voluntarily during account registration, KYC verification, deposit and withdrawal requests, customer support interactions, and promotional opt-ins.
• Automated collection: Technical and usage data collected automatically when you access the platform, including via cookies, server logs, and analytics tools embedded in the website.
• Third-party sources: Identity verification data returned by KYC service providers; fraud-risk signals from payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja); geolocation data from IP intelligence services.
• Customer support interactions: Records of live chat conversations, email correspondence sent to [email protected], and any documents or screenshots submitted in connection with a support request.

5. Purpose of Processing

g669 processes Personal Data exclusively for the following documented purposes:

5.1 Account Management

To create, maintain, and administer your g669 account; to authenticate your identity at login; to process password resets and account recovery requests; and to communicate account-status notifications including deposit confirmations, withdrawal approvals, and security alerts.

5.2 Identity Verification (KYC)

To verify that you meet the eligibility criteria set out in our Terms & Conditions — specifically that you are at least 21 years of age and a resident of Indonesia — and to satisfy our obligations under applicable anti-money laundering (AML) and counter-terrorist financing (CTF) frameworks. KYC verification is a prerequisite for processing withdrawals and for certain high-value deposit tiers.

5.3 Payment Processing

To facilitate deposits and withdrawals via Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); to maintain an accurate record of all financial transactions in your g669 Wallet; and to investigate and resolve payment disputes.

5.4 Service Delivery and Personalization

To provide access to sports betting markets — including BRI Liga 1, EPL, La Liga, Champions League, and the AFF Cup (Piala AFF) — live casino games, togel (Indonesia's traditional numbers lottery) markets, and other gaming products; to personalize your platform experience based on your betting preferences and history; and to deliver relevant promotional offers where you have opted in to receive them.

5.5 Fraud Prevention and Security

To detect and prevent unauthorized account access, bonus abuse, money laundering, identity fraud, and other forms of platform misuse; to monitor for irregular betting patterns that may indicate match-fixing or collusion; and to maintain the integrity of the platform for all Players.

5.6 Responsible Gaming

To monitor gameplay patterns and session durations for indicators of problem gambling behavior; to enforce self-exclusion, deposit limit, and cooling-off period requests; and to ensure that self-excluded Players cannot re-register using alternative credentials.

5.7 Legal and Regulatory Compliance

To comply with applicable legal obligations, including record-keeping requirements, responses to lawful requests from competent authorities, and enforcement of our Terms & Conditions in connection with disputes or prohibited conduct.

5.8 Platform Improvement

To analyze aggregated, anonymized usage data for the purpose of improving platform performance, user experience, and product offerings. Individual Player data is not used for this purpose without anonymization.

6. Legal Basis for Processing

g669 processes your Personal Data on the following legal bases, which may apply individually or in combination depending on the specific processing activity:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions agreement with you — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable law, including AML/CTF obligations, age-verification requirements, and lawful authority requests.
• Legitimate interests: Processing conducted in pursuit of g669's legitimate business interests, including fraud detection, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for the delivery of marketing and promotional communications. You may withdraw consent for marketing communications at any time by contacting [email protected].

7. Data Sharing and Disclosure

7.1 Authorized Third-Party Processors

g669 may share your Personal Data with carefully selected third-party service providers who act as Data Processors under binding data processing agreements. These providers are permitted to use your data only for the specific purposes for which they were engaged and strictly in accordance with g669's instructions. Categories of third-party processors include:

• Identity verification providers: Services that validate KTP, passport, and proof-of-address documents against authoritative databases.
• Payment processors and banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja, and their respective acquiring networks, to the extent necessary to process your transactions.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and other licensed studios — limited to the Player session data required to deliver game content and record results.
• Fraud and risk intelligence services: Providers of IP geolocation, device fingerprinting, and behavioral analytics tools used for security and compliance purposes.
• Customer support platforms: Third-party live-chat and ticketing tools used to manage support interactions, subject to strict data minimization standards.
• Cloud infrastructure providers: Hosting and data-storage providers on whose infrastructure the g669 platform operates, under enterprise data processing agreements with appropriate security certifications.

7.2 Legal Disclosures

g669 may disclose your Personal Data to competent governmental or regulatory authorities, law enforcement agencies, or courts of competent jurisdiction when required to do so by applicable law, by valid legal process (including court orders, warrants, or subpoenas), or where g669 reasonably believes that disclosure is necessary to prevent fraud, protect the safety of any person, or protect g669's legal rights and interests.

7.3 No Sale of Personal Data

g669 does not sell, rent, lease, or otherwise transfer your Personal Data to third parties for their independent commercial or marketing purposes. Any sharing of data is limited to the operational and legal purposes described in this Policy.

8. International Data Transfers

g669 operates as an internationally hosted platform. Your Personal Data may be transferred to and stored on servers located outside Indonesia, including in jurisdictions that may not provide the same level of data protection as Indonesian law. Where such transfers occur, g669 implements appropriate safeguards to ensure that your Personal Data remains protected to a standard equivalent to that described in this Policy.

Safeguards for international transfers include: contractual data processing agreements with standard data protection clauses incorporated; transfers only to jurisdictions that maintain adequate data-protection frameworks as recognized by international standards; and encryption of all data in transit and at rest, regardless of the jurisdiction in which it is stored.

By using the g669 platform, you consent to the transfer of your Personal Data to international servers as described in this section, subject to the safeguards outlined above.

9. Data Retention

g669 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with an individual Player.

10. Security Measures

g669 implements a layered security architecture designed to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our core technical and organizational security measures include:

• TLS 1.3 / 256-bit SSL encryption for all data in transit between your device and g669 servers, ensuring that your login credentials, financial details, and personal information cannot be intercepted in transmission.
• AES-256 encryption at rest for all Sensitive Data stored in g669's database infrastructure, including KYC documents, national ID numbers, and financial account details.
• Two-factor authentication (2FA) available to all Players as an optional but strongly recommended security layer for account access.
• Role-based access controls (RBAC) restricting g669 staff access to Personal Data on a strict need-to-know basis, with access logs maintained and audited regularly.
• Intrusion detection and prevention systems (IDPS) monitoring for anomalous access patterns, brute-force login attempts, and other indicators of unauthorized access.
• Regular penetration testing conducted by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan — in the event of a confirmed data breach affecting your Personal Data, g669 will notify affected Players within seventy-two (72) hours of becoming aware of the incident, describing the nature of the breach, the data affected, and the remedial steps taken.

11. Cookies & Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They enable the website to recognize your device on subsequent visits and to store certain preferences and session data. g669 uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform effectively.

11.2 Types of Cookies Used

11.3 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling strictly necessary cookies will impair the functionality of the g669 platform, including your ability to log in and maintain an active session. Analytics and functional cookies may be disabled without affecting core platform access.

12. Your Privacy Rights

As a Player on the g669 platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within five (5) business days and fulfill it within thirty (30) calendar days, subject to identity verification and any applicable legal exceptions.

12.1 Right of Access

You have the right to request a copy of the Personal Data that g669 holds about you, along with information about how it is being used, with whom it has been shared, and how long it will be retained.

12.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete Personal Data held about you. For account-registered data such as name, address, or date of birth, corrections require re-submission of supporting KYC documents to confirm the accurate information.

12.3 Right to Erasure

You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you have objected to processing and your interests override g669's legitimate grounds. This right is subject to exceptions — notably, g669 is legally required to retain certain financial and identity records for a minimum period as described in Section 9.

12.4 Right to Restriction of Processing

You have the right to request that g669 restrict the processing of your Personal Data in certain circumstances, including while a rectification request is being verified or while an objection to legitimate-interest processing is being assessed.

12.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON).

12.6 Right to Object

You have the right to object to the processing of your Personal Data where that processing is based on g669's legitimate interests, including profiling for marketing purposes. g669 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

12.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. To opt out of marketing communications, contact [email protected] with the subject line "Unsubscribe".

13. Protection of Minors

The g669 platform is strictly intended for individuals who are 21 years of age or older. g669 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and accounts found to belong to underage individuals are closed immediately upon discovery.

g669 actively participates in responsible gaming initiatives to prevent underage gambling. Our KYC procedures are designed to identify and exclude underage Players at the earliest possible point in the registration journey.

14. Policy Amendments

g669 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Material changes — those that substantively alter how your Personal Data is used or your rights in relation to it — will be communicated to registered Players via email at least fourteen (14) days before the amendment takes effect.

Non-material changes, such as typographical corrections or clarifications that do not alter the substantive meaning of any provision, may be made without advance notice. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Your continued use of the g669 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and request account closure before the amendment takes effect. The current version of this Policy is always accessible at https://g669.cam/privacy-policy.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by g669, please contact our support team. Our Indonesian-speaking agents are available 24 hours a day, 7 days a week, across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.

When submitting a Privacy Rights Request, please include your registered email address and a brief description of your request so that we can locate your account and process your request efficiently. We may require identity verification before actioning any data-access, rectification, or erasure request.