gtcbet Privacy Policy

1. Scope and Data Controller

This Privacy Policy applies to all personal data processed by gtcbet in connection with the website https://gtcbet.cam, its associated mobile-optimised interfaces, and any related services (collectively, the "Platform"). It covers every stage of your relationship with us — from the moment you visit the homepage through to account closure.

gtcbet operates as an internationally licensed online betting and gaming platform. For the purposes of applicable data protection legislation, gtcbet is the data controller responsible for your personal information. We process data primarily to serve Indonesian users, and this policy is drafted with the Indonesian market context in mind while adhering to international data protection principles broadly aligned with the GDPR framework.

By accessing or using the gtcbet Platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of it, you should discontinue use of the Platform immediately.

2. Data We Collect

We collect personal data through several channels and mechanisms. The categories of data we hold about you depend on how you interact with gtcbet.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, gender, email address, mobile phone number, residential address (including city and province within Indonesia), and chosen username.
• Identity verification (KYC) documents: Scanned or photographed copy of your Indonesian National Identity Card (KTP Nasional), proof-of-address document (utility bill or bank statement), and selfie photograph.
• Financial data: Bank account details for withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, or e-wallet identifiers for OVO, DANA, GoPay, ShopeePay, LinkAja). We never store full card numbers or banking passwords on our servers.
• Communications: Content of live chat transcripts, email exchanges, WhatsApp messages, or in-app support tickets submitted to our customer service team.
• Responsible Gaming declarations: Responses to the self-assessment quiz, limit preferences, and self-exclusion requests.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system (predominantly Android across the Indonesian user base), device model, screen resolution, and referring URL.
• Usage and behavioural data: Pages visited, session duration, bet history, game activity logs, click-stream data, and feature interaction patterns.
• Geolocation data: Approximate location derived from your IP address to confirm you are accessing the Platform from within Indonesia (WIB/WITA/WIT timezone zones) and for fraud-prevention purposes.
• Cookies and similar technologies: See Section 6 for full details.

2.3 Information from Third Parties

• Payment processors: Transaction status, reference codes, and timestamp data from Indonesian banking and e-wallet providers to confirm deposits and withdrawals.
• Identity verification services: Results of document authenticity checks performed by third-party KYC partners.
• Fraud and AML screening: Adverse media and sanctions list screening results from compliance data providers.

Data Category	Examples	Required?
Identity data	Name, date of birth, KTP number	Mandatory (KYC)
Contact data	Email, phone number, address	Mandatory
Financial data	Bank account, e-wallet ID	Mandatory (withdrawals)
Technical data	IP address, device info	Automatic
Behavioural data	Bet history, session logs	Automatic
Communications data	Support chat transcripts	When you contact us

3. How We Use Your Data

gtcbet uses your personal data only for legitimate purposes directly connected to providing and improving our services. We do not sell your data to third-party marketers under any circumstances.

• Account creation and management: To register and maintain your gtcbet account, authenticate your identity at login, and enable access to Platform features.
• Payment processing: To execute deposits and withdrawals through Indonesian banking channels and e-wallet providers, and to maintain accurate transaction records.
• Regulatory compliance (KYC / AML): To verify your identity, confirm your age (21+), screen against international sanctions lists, and report suspicious transactions to relevant authorities as required by our international licensing obligations.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling, enforce the limits and restrictions you have set, and facilitate self-exclusion requests.
• Customer support: To respond to your enquiries via live chat, email ([email protected]), WhatsApp, and in-app messaging, and to retain records of interactions for quality assurance.
• Platform security and fraud prevention: To detect and investigate unauthorised account access, multi-accounting, collusion, bonus abuse, and other prohibited activities defined in our Terms & Conditions.
• Service improvement and analytics: To understand how users navigate gtcbet, identify technical issues, and optimise the betting experience for Indonesian players across different devices and network conditions.
• Marketing communications: Where you have explicitly opted in, to inform you about promotions, VIP tier upgrades, and seasonal offers (e.g., Idul Fitri specials). You may withdraw consent at any time.
• Legal obligations: To comply with court orders, regulatory requests, or other legally binding requirements directed at gtcbet by competent authorities.

4. Legal Basis for Processing

In accordance with international data protection principles, every processing activity we undertake is supported by at least one of the following legal bases:

• Contract performance: Processing necessary to deliver the services you have requested, including account management, payment execution, and customer support.
• Legal obligation: Processing required to comply with KYC/AML obligations under our international gaming licence and applicable financial crime regulations.
• Legitimate interests: Processing for fraud prevention, platform security, internal analytics, and service improvement — where our interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided a clear, freely given, and revocable opt-in.

5. Sharing Your Data

gtcbet does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each purpose.

5.1 Service Providers (Data Processors)

We engage vetted third-party companies to process data on our behalf under strict contractual data-processing agreements. These include KYC and identity verification vendors, payment gateway operators facilitating transactions with Indonesian banks, cloud hosting and infrastructure providers, customer support software vendors, and analytics platform operators. Each processor is prohibited from using your data for any purpose other than the specific service they perform for gtcbet.

5.2 Regulatory and Law Enforcement Authorities

We may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts when required to do so by law, court order, or our international licensing obligations. Where legally permissible, we will notify you of such disclosure.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of gtcbet's business assets, personal data held by us may form part of the transferred assets. You will be notified of any such change in ownership or control and advised of your options regarding your data.

6. Cookies and Tracking Technologies

gtcbet uses cookies and similar technologies (local storage, session tokens, pixels) to operate and improve the Platform.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function — session authentication, load balancing, and security tokens. These cannot be disabled without breaking site functionality.
• Functional cookies: Remember your preferences such as language settings, preferred currency display (IDR/Rp), and time zone (WIB, WITA, or WIT) to personalise your experience.
• Analytics cookies: Aggregate, anonymised data about page visits and user flows to help us understand Platform performance and prioritise improvements.
• Security cookies: Anti-fraud and session integrity cookies used to detect suspicious login patterns, multi-accounting, and automated bot activity.

6.2 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Samsung Internet — the dominant browsers among Indonesian Android users) allow you to block or delete cookies. Please note that disabling certain cookies may impair Platform functionality. For strictly necessary cookies, no opt-out mechanism is available as they are indispensable to core service delivery.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any overriding legal obligations requiring longer retention periods.

• Active account data: Retained for the lifetime of your account plus 5 years following account closure, to comply with AML record-keeping requirements under our international licence.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification, or longer where required by applicable financial regulations.
• Transaction records: Retained for 7 years to satisfy international financial record-keeping standards.
• Customer support communications: Retained for 3 years from the date of the last interaction to facilitate dispute resolution.
• Marketing preferences and consent records: Retained until you withdraw consent, plus 2 years thereafter as evidence of prior consent.
• Technical and analytical data: Anonymised after 24 months and retained in aggregated form indefinitely for statistical analysis.

When data is no longer required, we securely delete or anonymise it using industry-standard methods. Physical documents are shredded; digital records are overwritten using accepted data destruction protocols.

8. Security Measures

gtcbet applies a layered, defence-in-depth approach to protecting your personal data. Our security programme includes the following controls:

• Encryption in transit: All data transmitted between your device and the gtcbet Platform is encrypted using TLS 1.2 or higher (bank-grade SSL). This applies to all pages, including payment flows and account management sections.
• Encryption at rest: Sensitive data stored in our databases — including identity documents and financial records — is encrypted using AES-256 encryption.
• Access controls: Personal data is accessible only to authorised gtcbet personnel who require it for specific job functions. Access is governed by role-based permissions, multi-factor authentication for staff accounts, and detailed audit logging.
• Penetration testing and vulnerability management: We conduct regular third-party security assessments and promptly remediate identified vulnerabilities.
• Fraud monitoring: Automated systems monitor account activity in real time for indicators of unauthorised access, credential stuffing, and suspicious transaction patterns.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay and take immediate remediation steps.

9. Your Privacy Rights

Regardless of where you are located in Indonesia — whether in Jakarta, Surabaya, Bandung, Bali, Medan, or any other city — you hold the following rights with respect to your personal data held by gtcbet. To exercise any of these rights, contact our Privacy Team at [email protected] (plain text — not a clickable link). We will respond within 30 days.

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you, together with information about how it is used and to whom it has been disclosed. We will provide this in a structured, commonly used, machine-readable format where technically feasible.

9.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic profile information directly from within your account dashboard; for KYC document corrections, please contact support with updated documentation.

9.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that we may be unable to delete data we are legally required to retain (such as KYC records and transaction history).

9.4 Right to Restrict Processing

You may request that we limit how we process your data while a dispute about its accuracy or lawfulness is resolved.

9.5 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a portable format and to request its transfer to another controller where technically feasible.

9.6 Right to Object

You have the right to object to processing based on our legitimate interests, including profiling for fraud prevention, at any time. You also have the unconditional right to opt out of direct marketing communications.

9.7 Withdrawing Consent

Where we rely on your consent as the legal basis for processing (e.g., marketing emails), you may withdraw that consent at any time by contacting support or using the unsubscribe mechanism in any marketing communication. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10. Minors — Under 21 Strictly Prohibited

gtcbet's services are strictly restricted to adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires a date-of-birth declaration, and KYC verification is designed to confirm that all users meet the minimum age requirement.

If we become aware that we have inadvertently collected data from a person under 21, we will immediately suspend the relevant account, delete all associated personal data, and reverse any deposits held in the account. If you believe a minor has created a gtcbet account, please contact our support team immediately so that we can take prompt action.

11. International Data Transfers

As an internationally operated platform serving Indonesian users, gtcbet may transfer your personal data to servers and processors located outside Indonesia. Where such transfers occur, we implement appropriate safeguards to ensure that your data receives a level of protection equivalent to that provided under applicable data protection principles, including standard contractual clauses with third-party processors and selection of processors located in jurisdictions recognised as providing adequate data protection.

All payment processing involving Indonesian banking rails (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) is conducted in compliance with Bank Indonesia's payment system regulations applicable to cross-border transactions.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data processing practices, legal obligations, or Platform features. When we make material changes, we will notify you via a prominent notice on the Platform and, where we hold a valid email address for you, by direct email. The "Last Updated" date at the top of this page always reflects the most recent revision.

We encourage you to review this policy whenever you interact with the Platform. Your continued use of gtcbet after a policy update constitutes your acknowledgement of the revised terms.

13. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or the personal data we hold about you, please reach out to our Privacy and Data Protection Team:

• Email: [email protected]
• Live Chat: Available 24/7 within your gtcbet account dashboard
• WhatsApp: +62 812 3456 7890

We aim to respond to all privacy-related enquiries within 5 business days and to fulfil formal data subject requests within 30 calendar days. For complex requests, we may extend this period by a further 30 days and will inform you of any such extension.

For matters related to your account terms, please review our Terms & Conditions. For guidance on managing your gambling behaviour, visit our Responsible Gaming page.

Effective Date: January 1, 2026  |  Version: 1.0