Privacy Policy

1. Introduction

g200m (referred to as "we," "us," "our," or "the Platform") is committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how we collect, use, disclose, store, and protect the personal data of users ("you" or "your") who access and use our online betting services, including sports betting (football, basketball, e-sports), live casino games (baccarat, roulette, blackjack), slot games, togel (Indonesia's traditional numbers lottery), and other gambling products offered on our platform.

We recognize that trust is the foundation of any successful online service, particularly in the regulated gambling industry. g200m adheres to international data protection standards and implements industry-leading security measures to ensure that your personal data remains confidential, secure, and used only for the purposes outlined in this Privacy Policy.

This Privacy Policy should be read in conjunction with our Terms & Conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail with respect to account usage and service-related matters, while this Privacy Policy governs all data protection matters.

2. Information We Collect

In order to provide you with a secure, compliant, and personalized betting experience, g200m collects several categories of personal information. The data we collect falls into three primary categories:

2.1 Information You Provide Directly

When you register an account with g200m, you voluntarily provide the following personal information:

• Personal Identification Data: Full legal name, date of birth, gender, and nationality.
• Contact Information: Email address, mobile phone number (Indonesian +62 format preferred), and residential address in Indonesia.
• Account Credentials: Username and password chosen during registration. Passwords are encrypted and stored using industry-standard hashing algorithms (bcrypt with salt). g200m staff cannot view your plaintext password under any circumstance.
• Identity Verification Documents (KYC): To comply with anti-money laundering (AML) regulations and prevent fraud, we may request copies of government-issued identification (Indonesian KTP, passport, or driver's license), proof of address (utility bill, bank statement, or government correspondence), and proof of payment method (bank card photos showing last 4 digits and cardholder name).
• Financial Information: Bank account details (for Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI) or e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals. We do not store full credit card numbers or CVV codes.
• Communication Data: Any messages, emails, or live chat conversations you have with our customer support team, including the content of your inquiries and our responses.

2.2 Information We Collect Automatically

When you access and use g200m, we automatically collect certain technical and usage data through cookies, server logs, and analytics tools:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and device identifiers.
• Log Data: IP address, timestamp of each session, pages visited, clickstream data, and referring URL (the website or link that directed you to g200m).
• Cookies and Tracking Technologies: We use cookies (small text files stored on your device) to remember your login session, language preferences, and betting history. You can disable cookies in your browser settings, but doing so may impair certain features of the Platform (e.g., staying logged in).
• Geolocation Data: We may collect approximate location data based on your IP address to verify that you are accessing the Platform from within Indonesia, as required by our operational policies.
• Betting Activity: Wager history, game selections, win/loss records, bonus claims, deposit and withdrawal amounts, and session duration. This data is used to personalize your experience, detect unusual activity (potential fraud), and comply with responsible gaming requirements.

2.3 Information from Third Parties

In certain circumstances, g200m receives information about you from third-party sources:

• Payment Processors: Our banking partners and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) confirm transaction details, account ownership, and fraud screening results when you deposit or withdraw funds.
• Identity Verification Services: We may use third-party KYC verification providers to authenticate the identity documents you submit, cross-referencing them against government databases and watchlists (e.g., sanctions lists, politically exposed persons databases).
• Affiliate Partners: If you accessed g200m through an affiliate link or promotional campaign, we may receive anonymized referral data to attribute bonuses and track marketing performance.

3. How We Use Your Information

g200m processes your personal data for the following legitimate business purposes:

• Account Management: To create, maintain, and authenticate your account; verify your identity (KYC/AML compliance); and enable you to log in securely.
• Transaction Processing: To process deposits, withdrawals, and internal account transfers; reconcile financial records; and prevent payment fraud.
• Service Delivery: To provide access to betting markets, live casino games, slots, and togel draws; calculate and credit winnings; apply bonus terms; and resolve disputes.
• Customer Support: To respond to your inquiries, troubleshoot technical issues, and investigate complaints submitted via email ([email protected]) or live chat.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, collusion, multi-accounting, bonus abuse, and other violations of our Terms & Conditions.
• Responsible Gaming: To monitor your betting behavior for signs of problem gambling; apply deposit limits, session timers, and loss limits you have set; and enforce self-exclusion requests. See our Responsible Gaming page for more information.
• Legal and Regulatory Compliance: To comply with applicable Indonesian and international laws, including anti-money laundering (AML), counter-terrorism financing (CTF), and data protection regulations.
• Marketing and Promotions: To send you promotional emails, SMS messages, or push notifications about new bonuses, special offers, and platform updates. You may opt out of marketing communications at any time by clicking "Unsubscribe" in any email or contacting [email protected].
• Analytics and Platform Improvement: To analyze user behavior, identify popular games and betting markets, optimize website performance, and improve the overall user experience.

4. Legal Basis for Processing (GDPR Context)

Although g200m primarily serves users in Indonesia, we align our data practices with international standards including the European Union's General Data Protection Regulation (GDPR). Our legal bases for processing your personal data include:

• Contractual Necessity: Processing is necessary to perform our contractual obligations under the Terms & Conditions (e.g., processing transactions, providing betting services).
• Legal Obligation: Processing is required to comply with Indonesian and international laws, including KYC/AML regulations.
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, service improvement, marketing) provided those interests do not override your fundamental rights and freedoms.
• Consent: In cases where we collect data not strictly necessary for service delivery (e.g., optional marketing communications), we rely on your explicit consent, which you may withdraw at any time.

5. How We Share Your Information

g200m does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, we do share your information with trusted service providers and partners in the following circumstances:

5.1 Service Providers

We engage third-party companies to perform services on our behalf, including:

• Payment Processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja process deposits and withdrawals on our behalf.
• KYC/AML Verification Providers: Third-party identity verification services authenticate your documents and screen you against sanctions lists.
• Game Providers: Casino game studios (e.g., Evolution Gaming, Pragmatic Play, NetEnt, Microgaming) host live dealer games and slots accessible through g200m. These providers may collect session data (game outcomes, betting patterns) for their own compliance and reporting purposes.
• Cloud Hosting and CDN: Our website infrastructure is hosted on secure cloud servers. Content delivery networks (CDNs) cache static assets (images, CSS, JavaScript) to improve page load times for users across Indonesia.
• Customer Support Tools: Live chat and email support platforms process your messages and contact details to enable efficient customer service.

All third-party service providers are contractually bound to strict data protection obligations and may only use your data for the specific purposes we authorize. They are prohibited from using your data for their own marketing or selling it to others.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to Indonesian government authorities, law enforcement agencies, or regulators if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or regulatory request.
• Investigate potential violations of our Terms & Conditions or applicable laws.
• Protect the rights, property, or safety of g200m, our users, or the public.
• Prevent or detect fraud, money laundering, or other criminal activity.

5.3 Business Transfers

In the event that g200m undergoes a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the successor entity as part of the business transaction. We will notify you via email and/or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

6. Data Retention

g200m retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our data retention policies are as follows:

• Active Accounts: Personal data is retained for the duration of your account's active status and for a period of 7 years after your last login or transaction, as required by Indonesian financial and anti-money laundering regulations.
• Closed or Self-Excluded Accounts: If you close your account or self-exclude, we retain your personal data for 7 years to prevent you from re-registering in violation of self-exclusion and to comply with legal obligations.
• KYC Documents: Copies of identity verification documents (KTP, passport, utility bills) are retained for 7 years from the date of submission.
• Transaction Records: Deposit and withdrawal records are retained for 7 years to comply with Indonesian tax and financial regulations.
• Marketing Data: If you opt out of marketing communications, we retain a suppression record indefinitely to ensure we do not inadvertently contact you again.

After the retention period expires, we securely delete or anonymize your personal data using industry-standard data destruction methods (e.g., cryptographic erasure, secure wiping).

7. Data Security

g200m employs comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Sockets Layer) technology — the same standard used by major Indonesian banks such as BCA Mobile.
• Encrypted Data Storage: Sensitive data (passwords, financial information) is encrypted at rest using AES-256 encryption. Passwords are hashed using bcrypt with per-user salt.
• Access Controls: Access to personal data is restricted to authorized g200m employees who require it to perform their job duties. All staff are bound by confidentiality agreements and undergo background checks.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems (IDS) that monitor for suspicious activity 24/7.
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans performed by independent third-party security firms.
• Data Backup and Disaster Recovery: Encrypted backups are maintained in geographically distributed data centers to ensure business continuity in the event of hardware failure or natural disaster.

While we implement robust security measures, no online platform can guarantee 100% security. You are responsible for maintaining the confidentiality of your account credentials and for logging out of your account when using shared or public devices.

8. Your Data Protection Rights

Under Indonesian data protection principles and aligned with international standards (GDPR), you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you by contacting [email protected]. We will provide this information in a structured, commonly used, and machine-readable format (e.g., PDF or CSV) within 30 days.
• Right to Rectification: If any of your personal information is inaccurate or incomplete, you may update it through your account settings or by contacting customer support. We will correct the information within 14 days.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data if it is no longer necessary for the purposes for which it was collected, or if you withdraw consent. However, we may be legally required to retain certain data (e.g., transaction records, KYC documents) for 7 years under Indonesian financial regulations.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your data in certain circumstances (e.g., while we verify the accuracy of contested data).
• Right to Data Portability: You may request a machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time by clicking "Unsubscribe" in promotional emails or contacting [email protected].
• Right to Withdraw Consent: Where processing is based on your consent (e.g., optional marketing), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at [email protected] with the subject line "Data Protection Request." We may require proof of identity (e.g., copy of KTP) to verify your request and prevent unauthorized disclosure.

9. Cookies and Tracking Technologies

g200m uses cookies and similar tracking technologies to enhance your user experience and collect usage analytics. Our cookie policy is as follows:

9.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Enable core functionality (login sessions, account authentication). These cookies are strictly necessary for the Platform to function.	Session (deleted when you close your browser)
Preference Cookies	Remember your language, time zone, and display preferences.	1 year
Analytics Cookies	Collect anonymized data on page views, session duration, and user navigation patterns to improve the Platform.	2 years
Marketing Cookies	Track your interaction with promotional banners and affiliate links to measure campaign effectiveness.	30 days

9.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies will prevent you from logging in or using certain features of g200m. For instructions on managing cookies, consult your browser's help documentation.

10. International Data Transfers

g200m operates primarily within Indonesia and stores user data on servers located in secure data centers within Indonesia. However, certain third-party service providers (payment processors, game studios, KYC verification services) may process your data outside Indonesia.

When we transfer your personal data internationally, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by international data protection authorities.
• Data Processing Agreements (DPAs) requiring third parties to maintain equivalent levels of data protection.
• Transfers only to countries recognized as providing adequate data protection standards.

11. Children's Privacy

g200m strictly prohibits use of our services by individuals under 21 years of age. We do not knowingly collect personal data from minors. If we discover that a user is under 21, we will immediately close the account, forfeit all balances, and delete associated personal data.

If you are a parent or guardian and believe your child has provided personal information to g200m, please contact us immediately at [email protected] so we can take appropriate action.

12. Changes to This Privacy Policy

g200m reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of significant changes by:

• Posting a notice on our homepage or in your account dashboard.
• Sending an email to the address registered on your account.
• Updating the "Last Updated" date at the bottom of this page.

Your continued use of g200m after such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 on the Platform
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours (2 business days).

Last Updated: January 15, 2026