Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by gila80 through our website located at https://gila80.cam, mobile applications, customer support channels, and any other platforms or services we operate (collectively, the "Platform").

This policy should be read in conjunction with our Terms & Conditions, which govern your use of gila80 services. Where there is a conflict between this Privacy Policy and our Terms & Conditions, the Terms & Conditions shall prevail.

gila80 is committed to complying with international data protection laws and privacy standards, including principles derived from regulations such as the General Data Protection Regulation (GDPR) and other applicable privacy frameworks. We process personal data lawfully, fairly, and transparently, and we respect your rights as a data subject.

2. Data Controller Information

For the purposes of data protection law, the data controller responsible for your personal information collected through gila80 is the legal entity operating the Platform under international gaming licenses.

If you have questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact our Data Protection Officer at:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Subject Request"
• Response Time: We aim to respond to all privacy inquiries within 14 business days

3. Information We Collect

gila80 collects personal information necessary to provide our services, comply with legal obligations, and improve user experience. The categories of information we collect include:

3.1 Information You Provide Directly

When you register for an account, use our services, or contact customer support, you provide us with information including:

• Account Registration Data: Full name, date of birth, email address, phone number, residential address, country of residence, preferred language, and account password (stored in encrypted form).
• Identity Verification Documents: Government-issued identification (Indonesian National Identity Card/KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and selfie photographs for KYC (Know Your Customer) compliance.
• Financial Information: Bank account details, e-wallet account information, payment card numbers (processed securely through third-party payment processors - we do not store full card numbers), transaction history, deposit amounts, withdrawal requests, and payment method verification documents.
• Communication Records: Contents of messages sent through live chat, email correspondence with customer support, WhatsApp and Telegram conversations, complaint submissions, and feedback forms.
• Responsible Gaming Preferences: Deposit limits, wager limits, loss limits, session time limits, time-out periods, and self-exclusion requests.

3.2 Information Collected Automatically

When you access and use gila80, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, device identifiers, and hardware model.
• Network and Connection Data: IP address, internet service provider (ISP), geographic location (derived from IP address - country, city, region), connection type, and network quality metrics.
• Usage Data: Pages visited, time spent on pages, clickstream data, game play history, bet history, features used, search queries, deposit and withdrawal patterns, login timestamps, and session duration.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, local storage data, and similar tracking technologies (see Section 9 for detailed information).
• Performance and Diagnostic Data: Error logs, crash reports, performance metrics, loading times, and technical issues encountered.

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification, payment confirmation, fraud detection alerts, and account status from banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay).
• Identity Verification Services: Document authentication results, fraud risk assessments, and identity validation scores from KYC service providers.
• Fraud Prevention Agencies: Suspicious activity reports, known fraud databases, and risk intelligence from anti-fraud and anti-money-laundering services.
• Game Providers: Game session data, RTP statistics, gameplay patterns, and bonus usage from third-party casino game suppliers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, etc.).

4. How We Use Your Information

gila80 uses your personal information for the following purposes:

4.1 Service Provision and Account Management

• Creating and maintaining your gila80 account
• Processing deposits, bets, and withdrawal requests
• Verifying your identity and age (21+ requirement)
• Managing your account settings and preferences
• Providing customer support and responding to inquiries
• Facilitating communication between you and our support team

4.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Preventing fraud, money laundering, and terrorist financing
• Verifying source of funds and payment method ownership
• Cooperating with law enforcement and regulatory authorities when required by law
• Maintaining records as required by gaming licenses and regulations
• Enforcing our Terms & Conditions and detecting Terms violations

4.3 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, collusion, and cheating
• Identifying duplicate accounts and multi-accounting violations
• Monitoring for suspicious betting patterns and bonus abuse
• Protecting the Platform from cyberattacks, hacking attempts, and unauthorized access
• Conducting security audits and vulnerability assessments
• Investigating disputes, complaints, and Terms violations

4.4 Responsible Gaming

• Implementing and enforcing deposit limits, wager limits, and loss limits
• Processing time-out and self-exclusion requests
• Monitoring player behavior for signs of problem gambling
• Providing access to responsible gaming tools and support resources
• Preventing underage gambling through age verification

4.5 Service Improvement and Personalization

• Analyzing user behavior to improve website functionality and user experience
• Personalizing game recommendations based on play history and preferences
• Optimizing Platform performance, load times, and mobile responsiveness
• Conducting A/B testing and user experience research
• Developing new features, games, and betting markets

4.6 Marketing and Promotions (With Consent)

• Sending promotional emails about bonuses, offers, and new games (you can opt out at any time)
• Providing personalized bonus offers based on your gaming preferences
• Notifying you about platform updates, new features, and important announcements
• Conducting customer satisfaction surveys and feedback requests

5. Legal Basis for Processing

Under international data protection principles, gila80 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing betting and gaming services as outlined in our Terms & Conditions).
• Legal Obligation: Processing is required to comply with laws and regulations, including KYC/AML requirements, age verification, tax reporting, and cooperation with authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, service improvement, and marketing (where not overridden by your rights and interests).
• Consent: For marketing communications and certain optional data uses, we rely on your explicit consent, which you may withdraw at any time.

6. Information Sharing and Disclosure

gila80 does not sell your personal information to third parties. We share your information only in the following limited circumstances:

6.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist in operating our Platform:

• Payment Processors: Banks and e-wallet providers to process deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.)
• Game Providers: Casino game suppliers to deliver gaming content (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, etc.)
• Identity Verification Services: KYC/AML compliance providers to verify your identity and documents
• Cloud Hosting and Infrastructure: Servers and data centers that host our Platform and store data securely
• Customer Support Tools: Live chat, email, and ticketing systems to provide support services
• Analytics and Performance Monitoring: Services that help us understand user behavior and improve Platform performance
• Fraud Prevention Services: Anti-fraud and security providers that help detect suspicious activity

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with data protection laws.

6.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement, regulatory bodies, courts, or government agencies when:

• Required by law, subpoena, court order, or legal process
• Necessary to comply with gaming license obligations and regulatory reporting
• Requested by authorities investigating suspected illegal activity, fraud, or money laundering
• Necessary to protect the rights, property, or safety of gila80, our users, or the public

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

6.4 With Your Consent

We may share your information with other third parties when you provide explicit consent for specific purposes not covered above.

7. Data Security Measures

gila80 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmission is protected by 256-bit SSL (Secure Socket Layer) encryption. Sensitive data at rest (passwords, financial information) is encrypted using advanced cryptographic algorithms.
• Access Controls: Personal data is accessible only to authorized personnel who require it for their job functions. Access is granted on a need-to-know basis with multi-factor authentication.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans to identify and address potential weaknesses.
• Employee Training: All staff members with data access receive regular training on data protection, confidentiality, and security best practices.
• Secure Data Centers: Personal information is stored on secure servers located in data centers with physical security controls, redundant power supplies, and disaster recovery systems.
• Incident Response: We maintain a data breach response plan to quickly detect, contain, and mitigate security incidents, and to notify affected users when required by law.

While we implement robust security measures, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account password and notifying us immediately if you suspect unauthorized access.

8. Data Retention and Deletion

gila80 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

8.1 Retention Periods

• Active Accounts: Account data, transaction history, and communication records are retained for the duration of your account activity and for a period after account closure as required by regulations (typically 5-7 years).
• Financial Records: Transaction data, deposit and withdrawal records, and payment information are retained for at least 7 years to comply with tax, accounting, and anti-money-laundering regulations.
• Identity Verification Documents: KYC documents are retained for 7 years after account closure or the end of the business relationship, as required by AML regulations.
• Communication Records: Customer support conversations, complaints, and dispute records are retained for 6 years for legal and operational purposes.
• Marketing Consent: If you opt out of marketing communications, your email address is retained on a suppression list to ensure we do not contact you again.

8.2 Data Deletion

After the applicable retention period expires, personal data is securely deleted or anonymized. You may request deletion of your data earlier (subject to legal and regulatory retention requirements) by contacting our Data Protection Officer.

9. Cookies and Tracking Technologies

gila80 uses cookies and similar tracking technologies to enhance your experience, analyze Platform usage, and provide personalized content.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These cookies enable core features like account login, session management, and security. They cannot be disabled.
• Performance Cookies: Collect anonymous data about how users interact with the Platform, including page views, loading times, and error messages. This helps us optimize performance.
• Functional Cookies: Remember your preferences (language, currency, display settings) and provide enhanced features tailored to your usage patterns.
• Analytics Cookies: Help us understand user behavior, traffic sources, and popular content through tools like Google Analytics. Data is aggregated and anonymized.
• Marketing Cookies: Track your activity across websites to deliver personalized advertisements and promotional content (used only with your consent).

9.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though this may affect Platform functionality. Note that disabling essential cookies will prevent you from using gila80 services.

10. Your Privacy Rights

Under international data protection principles, you have the following rights regarding your personal information:

10.1 Right to Access

You may request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.

10.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You can update most information directly through your account settings, or contact customer support for assistance.

10.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to legal and regulatory retention requirements. We must retain certain information to comply with KYC/AML laws, tax regulations, and gaming license obligations.

10.4 Right to Restrict Processing

You may request that we limit how we use your personal information in certain circumstances, such as when you contest the accuracy of data or object to processing.

10.5 Right to Data Portability

You have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.

10.6 Right to Object

You may object to processing based on legitimate interests (including marketing) at any time. We will cease processing unless we have compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

10.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond to requests within 30 days. We may request additional information to verify your identity before fulfilling data subject requests.

11. International Data Transfers

gila80 operates internationally and may transfer your personal information to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure adequate protection through:

• Data processing agreements with third parties that include standard contractual clauses approved by data protection authorities
• Verification that recipient countries provide adequate data protection (as determined by international standards)
• Implementation of technical and organizational measures to protect data in transit and at rest

By using gila80, you consent to the transfer of your personal information to jurisdictions that may have different data protection laws than Indonesia.

12. Children's Privacy

gila80 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that a user is underage, we will immediately close their account, delete their personal information (except what must be retained for legal compliance), and forfeit any account balance.

Parents or guardians who believe their child has provided personal information to gila80 should contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Privacy Policy

gila80 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Highlight significant changes on this page for a reasonable period
• Notify you via email or Platform notification for substantial changes affecting your rights

Your continued use of gila80 after changes are posted constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

14. Contact and Data Protection Officer

If you have questions, concerns, or complaints regarding this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact:

• Data Protection Officer Email: [email protected]
• General Customer Support: [email protected]
• Response Time: Privacy inquiries are typically answered within 14 business days; data subject rights requests within 30 days

For general inquiries not related to privacy, you may also contact us through:

• Live chat (available 24/7 on our website)
• WhatsApp Business (link provided on website)
• Telegram support channel

If you are not satisfied with our response to your privacy concern, you may have the right to lodge a complaint with a data protection authority in your jurisdiction.