Privacy Policy — g6668

Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably identify a natural person, directly or indirectly — including name, national identification number, email address, IP address, payment account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, g6668.
• "Data Processor" means any third party that Processes Personal Data on behalf of g6668 under a contractual data processing agreement.
• "Member" / "You" means any individual who has registered an account on the g6668 platform.
• "Platform" means the g6668 website at https://g6668.cam, including all sub-pages and associated services.
• "Cookie" means a small text file placed on your device by the Platform to enable functionality, remember preferences, and support analytics.
• "KYC" means Know Your Customer — the identity verification process required before withdrawals are approved.
• "Sensitive Data" means a subset of Personal Data that warrants higher protection, including government-issued identity document numbers and financial account details.

Data Controller

g6668 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, g6668 is responsible for ensuring that Personal Data is Processed lawfully, fairly, and transparently in accordance with this Policy and applicable international data protection standards.

For all data-related inquiries, requests, and complaints, you may contact our Data Protection team using the contact details provided in Clause 14 of this Policy. All contact information is provided as plain text and is not a clickable link.

Data We Collect

g6668 collects the following categories of Personal Data from Members and platform visitors:

3.1 Registration Data

When you create an account, we collect: full legal name, date of birth, residential address in Indonesia (including city, province, and postal code), email address, mobile telephone number, and your chosen username.

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) obligations and to confirm eligibility, we collect copies of your government-issued photo identification (Indonesian KTP, passport, or driving license), proof of address documentation, and proof of payment method ownership.

3.3 Financial Data

We collect details of your deposit and withdrawal transactions, including payment method type (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay), transaction reference numbers, amounts in IDR, timestamps, and — where applicable — masked bank account or e-wallet identifiers sufficient to process and verify transactions. We do not store full card numbers on our own servers.

3.4 Betting and Gaming Activity Data

We record all bets placed, games played, wagers staked and won, bonus interactions, session durations, and responsible gaming tool settings applied to your account. This data is used for account management, dispute resolution, and the operation of fair gaming systems.

3.5 Technical and Device Data

We automatically collect IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time on page, and session duration. This data is collected via server logs, cookies, and similar technologies (see Clause 7).

3.6 Communications Data

When you contact our support team via Live Chat, email, or WhatsApp, we retain records of those communications — including the content of messages, timestamps, and the channel used — for quality assurance, dispute resolution, and regulatory compliance purposes.

3.7 Voluntary Data

If you participate in surveys, promotional campaigns, or provide feedback through the platform, any information you voluntarily submit is collected and stored in accordance with this Policy.

How Data Is Collected

g6668 collects Personal Data through the following means:

• Directly from you — information you enter during account registration, KYC submission, deposit or withdrawal requests, and support interactions.
• Automatically — technical and device data collected via server logs, cookies, web beacons, and similar tracking technologies as you navigate the Platform.
• From third-party service providers — where a payment processor, fraud detection service, or identity verification provider shares data with us as part of delivering their contracted service. Such providers operate under data processing agreements with g6668.
• From publicly available sources — where required for enhanced due diligence under our AML and Know Your Customer obligations, we may consult publicly available databases to verify identity or check against sanction lists.

Purpose & Legal Basis for Processing

g6668 processes your Personal Data only where a valid legal basis exists. The table below sets out the primary purposes for which we process data and the corresponding legal basis for each:

Where processing is based on your consent, you have the right to withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Data Sharing

g6668 does not sell your Personal Data. We may share it only in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers to support platform operations, including payment processors (covering transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja), identity verification providers, cybersecurity and fraud prevention services, cloud hosting and infrastructure providers, and customer support platform vendors. Each provider is bound by a contractual data processing agreement that restricts them to processing your data solely for the purpose for which it was shared.

6.2 Game Content Providers

Where you play games powered by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — certain technical data (such as session identifiers and game result records) may be transmitted to those providers' gaming servers to facilitate gameplay and maintain game integrity. Game providers do not receive your full personal profile.

6.3 Legal and Regulatory Disclosure

We may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts where we are required to do so by applicable law, court order, or regulatory directive. In such cases, we will disclose only the minimum data necessary to comply with the relevant legal obligation.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to this Privacy Policy that result from it, with a minimum of 30 days' notice prior to the transfer taking effect.

Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your browser or device when you visit the Platform. They allow the Platform to recognize your device on return visits, remember your preferences, maintain session state, and collect analytics data about how the Platform is used.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and responsible gaming tool configurations. Disabling these may reduce platform convenience.
• Analytics Cookies: Collect aggregated, anonymized data about how Members navigate the Platform — including pages visited, click paths, and session durations. This data is used to identify usability improvements. We use privacy-respecting analytics tools for this purpose.
• Security Cookies: Support fraud detection and bot prevention mechanisms, including the identification of unusual access patterns that may indicate unauthorized account access.

7.3 Managing Cookies

You may control cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will impair your ability to log in and use the Platform. For detailed instructions on managing cookies in your specific browser, please consult your browser's help documentation.

International Data Transfers

g6668 operates with infrastructure and service providers located across the Asia-Pacific region and internationally. As a result, your Personal Data may be transferred to and stored in countries outside Indonesia. Where such transfers occur, g6668 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards may include:

• Binding contractual clauses in data processing agreements with service providers.
• Transfer only to countries or organizations that maintain internationally recognized data protection standards.
• Internal data transfer policies that mandate equivalent levels of protection regardless of the storage location.

By using the g6668 Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia and consent to those transfers where they are carried out in accordance with this Policy.

Data Retention

g6668 retains Personal Data for the minimum period necessary to fulfill the purposes for which it was collected, subject to any longer retention period required by law or regulation. The following general retention periods apply:

At the end of the applicable retention period, Personal Data is either securely deleted or anonymized such that it can no longer be associated with any individual Member.

Your Rights

As a Member and data subject, you hold the following rights in relation to your Personal Data held by g6668. To exercise any of these rights, please contact our data protection team using the details in Clause 14.

We will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

Minors & Age Restriction

The g6668 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Account registration requires users to confirm their age, and KYC verification is used to validate this declaration.

If g6668 becomes aware that Personal Data has been collected from a person under 21, that data will be deleted immediately, the associated Account will be closed, and any Balance held will be handled in accordance with our Terms and Conditions and applicable law. If you believe that a minor has registered an account on the Platform, please notify us immediately at [email protected] (plain text — not a clickable link).

Security Measures

g6668 implements a range of technical and organizational measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption on all pages and data transmission channels.
• Access controls and role-based permissions ensuring that only authorized personnel can access Personal Data, limited strictly to what each role requires.
• Multi-factor authentication (MFA) for internal administrative systems that hold Member data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems and real-time monitoring for anomalous access patterns.
• Staff training and data handling policies ensuring all employees who interact with Personal Data understand their obligations.
• Incident response procedures for timely detection, containment, and notification of any data breach in accordance with applicable law.

While g6668 takes all reasonable measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

Amendments to This Policy

g6668 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform operations, or data handling practices. Where changes are material, we will provide notice via email to your registered address and by displaying a prominent notice on the Platform for a period of not less than seven (7) days prior to the changes taking effect.

The "Last Reviewed" date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the amended Policy, you must discontinue use of the Platform and contact us to arrange closure of your account and withdrawal of any remaining Balance.

We encourage you to review this Policy periodically to stay informed about how g6668 protects your Personal Data.

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the g6668 Data Protection team. All contact details are provided as plain text and are not clickable links.

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +62 811 9668 668 (plain text — not a clickable link)
• Live Chat: Available 24/7 directly through the g6668 Platform interface
• Response Time: We aim to acknowledge all data-related inquiries within 5 business days (WIB, UTC+7) and to resolve them within 30 calendar days of receipt.

If you are not satisfied with the resolution of a data rights request or privacy complaint, you have the right to escalate the matter to the relevant supervisory or regulatory authority in the jurisdiction governing this Platform.