Privacy Policy

1. Introduction

Welcome to gaca32. This Privacy Policy explains how gaca32 ("we," "us," or "our") collects, uses, discloses, stores, and protects your personal information when you register for, access, or use our online gaming platform and related services (collectively, the "Services"). This Privacy Policy applies to all users of the gaca32 website located at https://gaca32.cam, our mobile applications, and any other digital platforms operated by gaca32.

By creating an account, accessing our Website, or using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you must not use our Services and should immediately discontinue all access to our platform.

We take your privacy seriously and are committed to handling your personal data responsibly, transparently, and in accordance with applicable Indonesian data protection laws and international best practices. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Services.

2. Data Controller

gaca32 is the data controller responsible for the collection, processing, and protection of your personal information. For the purposes of this Privacy Policy, gaca32 determines the means and purposes of processing your personal data in connection with the provision of our online gaming Services to residents of Indonesia.

If you have any questions, concerns, or requests regarding the handling of your personal information, please contact our Data Protection Officer using the contact details provided in Section 14 of this Privacy Policy.

3. Information We Collect

To provide you with a secure, personalized, and compliant gaming experience, gaca32 collects various categories of personal information. The data we collect falls into the following categories:

3.1 Information You Provide Directly

When you register an account with gaca32, you voluntarily provide us with personal information, including but not limited to:

• Identity Information: Full legal name (as it appears on your Indonesian national identity card or KTP), date of birth, gender, nationality, and place of birth.
• Contact Information: Residential address, email address, mobile phone number, and any other contact details you provide.
• Account Credentials: Username, password, and security questions/answers used to secure your account.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers), and transaction history related to deposits and withdrawals.
• Verification Documents: Copies of identity documents (KTP), proof of address documents (utility bills, bank statements), selfie photographs holding identity documents, and any other documents required for Know Your Customer (KYC) compliance and age verification.
• Communication Records: Records of your interactions with our customer support team, including live chat transcripts, email correspondence, WhatsApp messages, and phone call recordings (where legally permitted and with your consent).
• Preferences and Settings: Gaming preferences, language preferences, communication preferences, responsible gaming limits (deposit limits, loss limits, session time limits), and notification settings.

3.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID), and mobile network information.
• Usage Data: Pages visited, features used, games played, bets placed, time spent on the platform, click patterns, navigation paths, referral sources, and session duration.
• Location Data: IP address, geographic location (city, region, country), and time zone information to verify eligibility, prevent fraud, and comply with geo-blocking requirements.
• Transaction Data: Details of all deposits, withdrawals, wagers, wins, losses, bonus claims, and other financial transactions conducted through your account.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixels, and similar technologies to enhance user experience, analyze platform performance, and deliver targeted content (see Section 10 for details).

3.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources, including:

• Payment Providers: Information from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to verify transactions and prevent fraud.
• Identity Verification Services: Data from third-party KYC and identity verification providers to confirm your identity and comply with anti-money laundering (AML) regulations.
• Fraud Prevention Services: Information from fraud detection and prevention services to identify suspicious activity, protect against account takeovers, and ensure platform integrity.
• Marketing Partners: Aggregated or anonymized data from marketing and analytics partners to measure campaign effectiveness and improve user acquisition strategies.

4. How We Use Your Information

gaca32 processes your personal information for specific, legitimate purposes related to the provision and improvement of our Services. We use your data for the following purposes:

4.1 Account Management and Service Delivery

• Creating, maintaining, and managing your user account
• Authenticating your identity and securing your account access
• Processing deposits, withdrawals, and other financial transactions
• Enabling you to place bets, play games, and participate in promotions
• Delivering customer support and responding to your inquiries
• Providing personalized gaming experiences and content recommendations

4.2 Legal and Regulatory Compliance

• Verifying your age (21+ requirement) and eligibility to use our Services
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by Indonesian and international regulations
• Preventing fraud, collusion, money laundering, and other illegal activities
• Complying with legal obligations, court orders, and requests from regulatory authorities
• Maintaining records for audit and compliance purposes

4.3 Platform Security and Integrity

• Detecting and preventing fraudulent transactions, account abuse, and unauthorized access
• Monitoring for suspicious activity, including bonus abuse, multi-accounting, and collusion
• Implementing geo-blocking and IP filtering to ensure compliance with jurisdictional restrictions
• Protecting against cyberattacks, data breaches, and other security threats
• Investigating and resolving disputes, complaints, and Terms of Service violations

4.4 Communications and Marketing

• Sending transactional notifications (deposit confirmations, withdrawal approvals, account updates)
• Delivering promotional offers, bonuses, and personalized marketing communications (with your consent)
• Providing responsible gaming alerts, limit reminders, and self-exclusion confirmations
• Conducting customer satisfaction surveys and gathering feedback
• Notifying you of changes to our Terms, Privacy Policy, or Services

4.5 Analytics and Improvement

• Analyzing user behavior, preferences, and engagement patterns to improve our platform
• Conducting market research and competitive analysis
• Testing new features, games, and promotional strategies
• Optimizing website performance, load times, and user experience
• Generating aggregated, anonymized statistics and reports for business intelligence

5. Legal Basis for Processing

Under Indonesian data protection law and international standards, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under our Terms and Conditions, including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with Indonesian laws, regulations, and licensing requirements, including KYC, AML, age verification, and responsible gaming mandates.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security enhancement, platform improvement, and customer support, provided these interests do not override your fundamental privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing sensitive data or sending marketing communications. You may withdraw consent at any time.

6. Information Sharing and Disclosure

gaca32 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with trusted third-party service providers and partners under the following circumstances:

6.1 Service Providers and Business Partners

We engage third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks, e-wallet providers, and payment gateways that process deposits and withdrawals
• Identity Verification Services: KYC and AML compliance providers that verify your identity and conduct background checks
• Game Providers: Software developers and content providers that deliver casino games, slots, and live dealer experiences
• Cloud Hosting and Data Storage: Providers that host our servers, store encrypted data, and ensure platform availability
• Customer Support Tools: Live chat, ticketing, and CRM platforms that facilitate customer service interactions
• Marketing and Analytics Partners: Email marketing platforms, analytics tools, and advertising networks (subject to your consent)

All third-party service providers are contractually obligated to handle your data securely, use it only for specified purposes, and comply with applicable data protection laws.

6.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, regulators, and courts when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, subpoenas, court orders, or regulatory requests
• Investigate and prevent fraud, money laundering, or other illegal activities
• Protect the rights, property, or safety of gaca32, our users, or the public
• Enforce our Terms and Conditions or other agreements

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other business transaction involving gaca32, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or prominent notice on our Website before your data is transferred and becomes subject to a different privacy policy.

6.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other business purposes. Such data does not constitute personal information and is not subject to this Privacy Policy.

7. Data Security Measures

gaca32 employs industry-leading technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, destruction, or loss. Our security practices include:

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. If you suspect unauthorized access to your account, notify us immediately.

8. Data Retention

gaca32 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your account relationship and for up to seven (7) years after account closure to comply with Indonesian financial and tax regulations.
• Transaction Records: Retained for at least seven (7) years to meet anti-money laundering (AML) and auditing requirements.
• Identity Verification Documents: Retained for seven (7) years after the last transaction to comply with KYC and regulatory obligations.
• Communication Records: Customer support interactions are retained for two (2) years for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or for three (3) years of inactivity, whichever comes first.
• Aggregated Data: Anonymized and aggregated data may be retained indefinitely for analytical purposes as it cannot identify you personally.

Upon expiration of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data destruction policies.

9. Your Privacy Rights

As a gaca32 user, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request access to the personal information we hold about you. Upon request, we will provide you with a copy of your data in a structured, commonly used, and machine-readable format.

9.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request correction or update. You can update most information directly through your account settings.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent (where processing was based on consent); (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. Note that we may be legally required to retain certain data for regulatory compliance.

9.4 Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider, where technically feasible.

9.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time by clicking "unsubscribe" in our emails or contacting customer support.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

9.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to all requests within thirty (30) days. Identity verification may be required to prevent unauthorized disclosure of personal information.

10. Cookies and Tracking Technologies

gaca32 uses cookies, web beacons, pixels, local storage, and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on subsequent visits.

Types of Cookies We Use:

• Essential Cookies: Necessary for the operation of our platform, including session management, authentication, and security features. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous data about how visitors use our website, helping us improve functionality and user experience.
• Functional Cookies: Remember your preferences (language, currency, settings) to provide a more personalized experience.
• Marketing Cookies: Track your browsing activity to deliver targeted advertising and measure campaign effectiveness. These cookies require your consent.

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services. Most browsers accept cookies by default; consult your browser's help documentation for instructions on blocking or deleting cookies.

11. International Data Transfers

gaca32 primarily operates in Indonesia and stores data on servers located within Indonesia. However, some of our third-party service providers (payment processors, cloud hosting, game providers) may be located outside Indonesia, including in jurisdictions that may not provide the same level of data protection as Indonesian law.

When we transfer your personal data internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by data protection authorities
• Ensuring service providers adhere to internationally recognized privacy frameworks
• Conducting due diligence on data protection practices of foreign service providers
• Implementing technical measures such as encryption and access controls

By using our Services, you consent to the transfer of your personal data outside Indonesia under these safeguards.

12. Children's Privacy

gaca32 Services are strictly intended for individuals aged twenty-one (21) years or older. We do not knowingly collect, process, or solicit personal information from individuals under 21 years of age. If we discover that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such information and terminate the associated account.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours.

13. Changes to This Privacy Policy

gaca32 reserves the right to modify, update, or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by email to the address associated with your account and/or by posting a prominent notice on our Website at least thirty (30) days before the changes take effect.

Your continued use of our Services after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

14. Contact Information

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or the handling of your personal information, please contact our Data Protection Officer:

Our Privacy Principles