Privacy Policy — g200m Data Protection Commitment

1.1 Who We Are. g200m is an internationally operated online casino and sportsbook platform serving players primarily based in Indonesia. The platform is accessible at https://g200m.one and offers casino games, live dealer tables, slots, and sports betting markets including BRI Liga 1, EPL, La Liga, the UEFA Champions League, Timnas Indonesia fixtures, and E-sports events.

1.2 What This Policy Covers. This Privacy Policy describes how g200m collects, stores, uses, shares, and protects personal data in connection with your use of the platform. It applies to data collected via the website, through account registration, during gameplay, through payment transactions, and through communications between you and g200m support.

1.3 Acceptance. By registering an account on g200m or by continuing to use the platform after this policy has been published or updated, you confirm that you have read and accepted the terms set out here. If you do not agree, you must discontinue use of the platform and may request account closure by contacting our support team.

1.4 Relationship to Terms & Conditions. This Privacy Policy forms part of the overall agreement between you and g200m, alongside the Terms & Conditions. In the event of any conflict between this policy and the Terms & Conditions on a privacy-specific matter, this Privacy Policy takes precedence.

2.1 Registration Data. When you open an account with g200m, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Residential address (city, province, postal code — Indonesia)
• Email address
• Mobile phone number
• Preferred username and encrypted password

2.2 KYC Verification Data. As part of our Know Your Customer process, we may collect and retain:

• Copies of government-issued photo ID (Indonesian KTP, passport, or SIM)
• Proof of payment method ownership (bank account or e-wallet screenshots)
• Source-of-funds documentation where applicable
• Selfie or liveness-check images where required for identity confirmation

2.3 Financial Transaction Data. For each deposit or withdrawal, we log transaction records including payment method type (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amount in IDR, transaction timestamp, and a transaction reference number. Full bank account numbers and e-wallet credentials are never stored on g200m servers — they are handled exclusively by our PCI-DSS compliant payment partners.

2.4 Gameplay & Behavioral Data. We automatically collect data about your activity on the platform, including:

• Games played, wagers placed, and outcomes recorded
• Session duration and login timestamps
• Pages visited and features accessed within the platform
• Bonus offers viewed and claimed
• Responsible gaming settings configured (e.g., deposit limits, self-exclusion requests)

2.5 Technical & Device Data. When you access g200m, we automatically collect:

• IP address and approximate geolocation (city/region level)
• Browser type and version, operating system, and device type
• Referring URL and on-site navigation path
• Session cookies and local storage identifiers

2.6 Communications Data. If you contact g200m via live chat, email support, or any other channel, we retain a record of those communications, including the content of messages exchanged, support ticket IDs, and resolution outcomes.

g200m uses your personal data only for the purposes outlined below. We do not process data in ways that are incompatible with these stated purposes without your additional consent.

• Account Management: Creating and maintaining your player account, verifying your identity and age (21+), and administering your account settings.
• Service Delivery: Processing deposits and withdrawals via Indonesian payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and others), settling game outcomes, and crediting winnings to your balance.
• KYC & Fraud Prevention: Verifying your identity documents, detecting and preventing fraudulent activity, money laundering, and unauthorized account access.
• Regulatory Compliance: Maintaining transaction records and account activity logs to satisfy the compliance obligations of g200m's international gaming license and applicable anti-money-laundering frameworks.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviors and enabling the responsible gaming tools available on the platform, including deposit limits, cool-off periods, and self-exclusion.
• Customer Support: Responding to your inquiries, resolving disputes, and managing formal complaints in accordance with the process outlined in our Terms & Conditions.
• Platform Improvement: Analyzing aggregated, anonymized behavioral data to improve game selection, website performance, and the overall player experience.
• Marketing Communications: Sending promotional emails, bonus notifications, and seasonal offers relevant to the Indonesian market (such as Ramadhan and Idul Fitri promotions) — subject to your communication preferences and the opt-out mechanism described in Section 12.
• Security: Detecting and responding to suspicious login activity, brute-force attempts, and other security threats targeting your account or the platform at large.

4.1 Contractual Necessity. The majority of personal data processed by g200m is necessary for the performance of the contract between you and g200m — namely, the provision of online gaming and sportsbook services. This includes account registration, payment processing, game delivery, and KYC verification.

4.2 Legal Obligation. Certain data processing activities — particularly the retention of financial transaction records and identity verification documents — are carried out to comply with g200m's obligations under its international gaming license and applicable anti-money-laundering regulations.

4.3 Legitimate Interests. g200m processes some data on the basis of legitimate business interests, including fraud detection, security monitoring, platform analytics, and responsible gaming oversight. These interests are balanced against your privacy rights, and we apply appropriate safeguards in each case.

4.4 Consent. Where processing is not required for contractual, legal, or legitimate-interest purposes — for example, sending you marketing emails about new promotions on the Casino Bonus page — we rely on your consent, which you may withdraw at any time by contacting support or using the opt-out link in any marketing email.

5.1 No Sale of Personal Data. g200m does not sell, rent, or otherwise transfer your personal data to third-party companies for their own marketing or commercial purposes. Your data is not a product.

5.2 Service Providers. g200m shares personal data with trusted third-party service providers strictly for the purpose of operating the platform. These providers are contractually bound to process your data only on g200m's instructions and in accordance with this policy. Categories of service providers include:

• Payment Processors: PCI-DSS compliant gateways that handle transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Identity Verification Providers: Third-party KYC services that assist with document verification and fraud screening.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe receive anonymized session data as required for game delivery and dispute resolution.
• Analytics Providers: Aggregated, anonymized platform analytics services used to improve site performance and user experience.
• Cybersecurity Services: Threat detection and DDoS mitigation providers that may process technical data (IP addresses, session tokens) to protect the platform.

5.3 Legal Disclosure. g200m may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure to the extent permitted by law.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of g200m's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you in advance of any such transfer and ensure the acquiring party is bound by equivalent privacy protections.

6.1 Cross-Border Processing. As an internationally operated platform, g200m's infrastructure and some of its service providers are located outside of Indonesia. As a result, your personal data may be processed in jurisdictions other than your country of residence.

6.2 Safeguards. Where personal data is transferred internationally, g200m ensures that appropriate safeguards are in place, including contractual clauses requiring the recipient to maintain data protection standards consistent with this policy. g200m does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing such safeguards.

6.3 Acknowledgement. By registering and using g200m, you acknowledge that your personal data may be processed internationally in connection with the delivery of platform services, and you consent to such transfers subject to the safeguards described above.

7.1 Retention Periods. g200m retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the minimum retention periods required under our regulatory obligations. The following general retention guidelines apply:

7.2 Post-Closure Retention. When your account is closed — whether at your request or by g200m — your personal data is not immediately deleted. It is retained for the periods specified above, after which it is securely deleted or irreversibly anonymized. During the retention period following account closure, your data is accessible only to authorized compliance and legal personnel.

8.1 What Are Cookies. Cookies are small text files stored on your device by your web browser when you visit g200m. They allow the platform to recognize your device on return visits, maintain your session state, and deliver a consistent experience.

8.2 Cookies Used by g200m. The platform uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function — including session management, authentication tokens, and security controls. These cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Anonymized data on how players navigate the site — which pages are visited most, where users drop off, and how long sessions last. This data is used to improve the platform and is not linked to individual identities.
• Functional Cookies: Store your preferences such as language settings, recently played games, and responsible gaming configurations so they persist across sessions.

8.3 What We Do Not Use. g200m does not deploy third-party advertising cookies, behavioral retargeting pixels, or social media tracking scripts that send your data to external advertising networks.

8.4 Managing Cookies. You may configure your browser to refuse or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging in or using the platform's core features. Browser-level cookie controls vary by browser — consult your browser's help documentation for instructions.

9.1 Technical Safeguards. g200m employs a layered security architecture to protect personal data against unauthorized access, disclosure, alteration, and destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and g200m servers
• AES-256 encryption for sensitive data at rest, including identity documents and financial records
• Multi-factor authentication options for player accounts
• Firewall protection and intrusion detection systems monitoring platform infrastructure 24/7
• Regular penetration testing conducted by independent security auditors
• PCI-DSS compliant payment processing — g200m servers never store raw card or bank account credentials

9.2 Organizational Safeguards. Access to player personal data within g200m is restricted to authorized personnel whose roles require it. All staff with data access undergo regular data protection training. Access permissions are reviewed quarterly and revoked promptly when no longer required.

9.3 Data Breach Response. In the event of a personal data breach that poses a risk to your rights, g200m will notify affected players without undue delay once the breach has been identified and assessed. Notification will be provided via the email address registered to your account and will include the nature of the breach, the categories of data affected, and the steps taken to address it.

g200m recognizes and upholds the following rights with respect to your personal data. To exercise any of these rights, contact our support team at the details provided in Section 15.

• Right of Access: You have the right to request a copy of the personal data g200m holds about you, along with information about how it is processed. We will respond to access requests within 10 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact information directly within your account settings; other corrections should be submitted via support.
• Right to Erasure: Subject to our legal retention obligations (see Section 7), you may request the deletion of your personal data. Note that we cannot delete data we are legally required to retain, such as transaction records held for regulatory compliance purposes.
• Right to Restrict Processing: You may ask g200m to pause certain processing activities — for example, while a dispute regarding data accuracy is being resolved — without requiring full deletion of your data.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you provided to g200m during registration and account use, for the purpose of transferring it to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to marketing, we will stop sending promotional communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11.1 Strict Age Requirement. The g200m platform is intended exclusively for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not use this platform or provide any personal information to g200m.

11.2 Discovery of Minor Accounts. If g200m discovers or is notified that an account is held by or has been accessed by a person under the age of 21, that account will be immediately suspended, all data associated with it will be flagged for review, and any real-money balance will be returned to the deposit source following identity verification. The incident will be documented for regulatory reporting purposes.

11.3 Parental Controls. If you share a device with individuals under 21, we strongly recommend enabling device-level parental controls to prevent access to gaming platforms. g200m is not responsible for access by minors that results from inadequate device-level protections within your household.

12.1 Opt-In Marketing. Where you have consented to receive marketing communications, g200m may send you promotional emails and notifications about new games, bonus offers (visit the Casino Bonus page), sportsbook promotions, seasonal campaigns (Ramadhan, Idul Fitri, Imlek, and Indonesian Independence Day), and other platform updates.

12.2 Opting Out. You may withdraw consent for marketing communications at any time by:

• Clicking the unsubscribe link included at the bottom of any marketing email from g200m
• Updating your communication preferences within your account settings
• Contacting support at [email protected] and requesting removal from marketing lists

Opt-out requests are processed within 5 business days. Note that opting out of marketing does not affect transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts, KYC requests) which are sent regardless of marketing preferences as they are necessary for account operation.

12.3 No Third-Party Marketing. g200m does not share your contact details with third-party marketers. All promotional communications you receive originate from g200m directly.

13.1 Embedded Services. The g200m platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe. When you launch a game from one of these providers, the game client may collect technical session data (e.g., game round IDs, stake and outcome values) necessary for game delivery and certification compliance. This data is governed by each provider's own data practices in addition to this policy.

13.2 Payment Providers. Transactions processed via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja are handled by those providers' own systems. g200m is not responsible for the data practices of payment providers; please review the privacy policy of your chosen payment provider for details on how they handle transaction data.

13.3 No Responsibility for External Sites. The g200m platform does not contain links to external websites. If you navigate away from g200m independently, your data on those third-party sites is outside g200m's control and is not covered by this Privacy Policy.

14.1 Right to Update. g200m reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or platform functionality. The most current version will always be available at https://g200m.one/privacy-policy, with the "Last Updated" date revised accordingly.

14.2 Notification of Material Changes. Where changes to this policy are material — meaning they affect your rights or the way we use your data in a significant way — g200m will notify active players by email to the address registered on your account at least 14 days before the changes take effect.

14.3 Continued Use as Acceptance. Your continued use of the g200m platform after any updated Privacy Policy has taken effect constitutes your acceptance of the revised terms. If you do not agree with any changes, you must discontinue use of the platform and may contact support to request account closure.

For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data g200m holds about you, please contact us using the following details:

• Privacy & Data Requests: [email protected] — use the subject line "Privacy Policy Inquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the platform, staffed by Indonesian-speaking support agents
• Response Time: Acknowledgement within 2 business days; full response within 10 business days for data rights requests
• Support Hours: 24/7, covering WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones

For questions about responsible gaming, deposit limits, or self-exclusion — which involve the processing of behavioral and account data — please visit the Responsible Gaming page or contact support directly. For general platform questions, the FAQ page covers the most common topics.