At gm108, the privacy and security of your personal data are a foundational commitment, not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how it is used and stored, who may access it, and what rights you hold as a data subject. We encourage all players to read this document in full before registering an account.
These principles govern every decision gm108 makes about how your personal data is handled.
gm108 collects only the personal data strictly necessary for account operation, KYC compliance, and payment processing. We do not collect data for its own sake.
We tell you exactly what data we hold, why we hold it, and how long it is retained. No hidden profiling, no opaque data sales to third-party marketers.
All data in transit is protected by 256-bit SSL/TLS encryption. Data at rest uses AES-256 encryption on hardened, access-controlled infrastructure.
You retain the right to access, correct, export, restrict processing of, and request deletion of your personal data at any time by contacting our support team.
gm108 does not sell personal data to advertisers. Data is shared with third parties only where required by law, to process payments, or to prevent fraud.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable anti-money laundering regulations.
This Privacy Policy applies to all personal data processed by gm108 in connection with the operation of the online gaming platform accessible at https://gm108.pro, including its mobile-optimised interface, all associated subdomains, and any communications sent by gm108 via email, SMS, or live chat.
gm108 is the data controller for the purposes of this Privacy Policy. This means gm108 determines the purposes for which your personal data is collected and the means by which it is processed. Where gm108 engages third-party data processors — such as payment providers, KYC verification services, or game content suppliers — those parties act only on gm108's documented instructions and are contractually bound to implement appropriate data protection safeguards.
This Policy should be read alongside the gm108 Terms & Conditions, which govern the overall relationship between gm108 and its players. By creating an account and using the platform, you confirm that you have read, understood, and consent to the data practices described in this document.
gm108 collects the following categories of personal data from its players. The specific data points collected in each category depend on the context — not all data listed is collected from every player at every stage of the account lifecycle.
gm108 collects personal data through the following channels:
gm108 processes your personal data only where a lawful basis exists. The following table maps each processing purpose to its corresponding legal basis and the data categories involved:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Performance of contract |
| KYC / age and identity verification | Identity, KYC Documentation | Legal obligation; Performance of contract |
| Processing deposits and withdrawals | Financial, Identity | Performance of contract |
| Anti-money laundering (AML) monitoring | Financial, Technical & Usage, Identity | Legal obligation |
| Fraud detection and prevention | Technical & Usage, Financial, Identity | Legitimate interest |
| Responsible gaming monitoring | Technical & Usage, Financial | Legitimate interest; Legal obligation |
| Customer support and dispute resolution | Identity, Contact, Communications | Performance of contract; Legitimate interest |
| Promotional communications (opted-in) | Contact, Technical & Usage | Consent |
| Platform improvement and analytics | Technical & Usage (aggregated) | Legitimate interest |
| Compliance with legal requests | Any relevant category | Legal obligation |
Where gm108 relies on legitimate interest as a legal basis, we have conducted a balancing test to confirm that our interests do not override your fundamental rights and freedoms. You may request a summary of that balancing assessment by contacting support@gm108.pro.
Where gm108 relies on consent — specifically for promotional communications — you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
gm108 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Personal data is disclosed only in the following circumstances:
gm108 engages carefully selected third-party service providers who process data exclusively on our behalf and under our instruction, bound by data processing agreements that impose obligations equivalent to those in this Policy:
gm108 may be required to disclose personal data to government authorities, law enforcement agencies, or financial intelligence units where required by applicable law, a valid court order, or a regulatory direction. In such cases, gm108 will disclose the minimum data necessary and will notify the affected player where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or substantially all of gm108's assets, personal data held by gm108 may form part of the transferred assets. Players will be notified of any such transfer and the privacy commitments applicable to their data in the successor entity prior to the transfer becoming effective.
Some of gm108's third-party service providers — particularly game content studios and KYC verification platforms — may operate infrastructure outside of Indonesia. Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection to that available in Indonesia, gm108 applies appropriate safeguards to ensure your data remains protected, including:
You may request details of the safeguards applied to any specific international transfer by contacting support@gm108.pro.
gm108 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The table below sets out our standard retention schedule:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account identity and contact data | Duration of account + 5 years post-closure | AML regulatory obligation |
| KYC documentation | 5 years post-account closure | AML / legal obligation |
| Transaction records | 5 years post-transaction | Financial record-keeping obligation |
| Game session history | 2 years post-session | Dispute resolution; responsible gaming monitoring |
| Support communications | 3 years post-resolution | Legitimate interest (dispute resolution) |
| Marketing preferences and consent records | 3 years from last active consent | Compliance with consent obligations |
| Technical / server log data | 90 days rolling | Security monitoring; fraud detection |
| Cookie and analytics data | Per cookie lifespan (see Section 9) | Consent; Legitimate interest |
On expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be linked to an identifiable individual. Anonymized data may be retained indefinitely for aggregated statistical purposes.
gm108 implements a layered security architecture designed to protect player data against unauthorized access, disclosure, alteration, and destruction:
All data transmitted between your device and gm108's servers is encrypted using TLS 1.3 with 256-bit cipher suites. Personal and financial data stored in our databases is encrypted at rest using AES-256. Encryption keys are managed in dedicated hardware security modules (HSMs) with strict access controls.
Access to player personal data within gm108's internal systems is granted on a strict need-to-know basis. All staff with data access undergo background screening, are bound by confidentiality obligations, and receive annual data security training. Access privileges are reviewed quarterly and revoked immediately upon role change or departure.
gm108's production infrastructure is hosted in ISO 27001-aligned data centers with physical access controls, redundant power systems, and 24/7 monitoring. We maintain a dedicated security operations function that monitors for anomalous access patterns, intrusion attempts, and data exfiltration signals in real time.
In the event of a personal data breach that poses a risk to player rights and freedoms, gm108 will take immediate containment action and notify affected players without undue delay, providing a clear description of the nature of the breach, the data categories affected, likely consequences, and the remedial steps taken. A breach register is maintained internally and reviewed by senior management on a monthly basis.
gm108 uses cookies and similar client-side technologies to operate the platform, enhance user experience, and gather analytical insights. The following categories of cookies are deployed:
| Cookie Category | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security CSRF protection. Required for the platform to function. Cannot be disabled. | Session / 24 hours |
| Functional | Remembering your language preferences, game lobby layout settings, and last-visited category. Improves convenience but not strictly required. | 30 days |
| Analytics | Aggregated, pseudonymized data on page visits, game click-through rates, and session paths. Used to improve platform design. Requires consent. | 13 months |
| Fraud Prevention | Device fingerprinting signals used to detect multi-account creation and identify high-risk sessions. Processed as a legitimate interest. | 90 days |
You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or entirely prevent access to the gm108 platform. Disabling analytics or functional cookies will not affect your ability to play but may reduce personalization quality.
As a data subject, you hold the following rights with respect to your personal data held by gm108. These rights are available to all players regardless of their city of residence — Jakarta, Surabaya, Bandung, Bali, Medan, Semarang, Yogyakarta, or elsewhere in Indonesia.
To exercise any of the above rights, please email support@gm108.pro with the subject line "Data Rights Request" and include your registered account email address and a description of your request. gm108 will acknowledge your request within two business days and provide a substantive response within 30 calendar days. Complex requests may be extended by a further 60 days with notification.
gm108 will not charge a fee for handling data rights requests unless the request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be applied or the request declined with written justification.
gm108 operates an age-gated platform and is directed exclusively at adults aged 21 and over. gm108 does not knowingly collect personal data from individuals under the age of 21. If you believe that a person under 21 has submitted personal data to gm108, please contact support@gm108.pro immediately. Upon confirmation, gm108 will delete the relevant data without undue delay and close any associated account, returning any real-money balance via the original payment method after identity confirmation.
Parents and guardians are encouraged to make use of internet filtering tools and parental control software to prevent minors from accessing online gambling platforms. gm108 supports the responsible deployment of such tools and cooperates with recognized child protection organizations.
gm108 reviews this Privacy Policy at least annually and updates it whenever material changes to data practices, legal requirements, or platform functionality require it. When changes are material — affecting how personal data is used, shared, or retained — gm108 will notify all registered players by email and via an in-platform notification at least 14 days before the changes take effect.
The current version of this Privacy Policy is always accessible at https://gm108.pro/privacy-policy. The "Last Updated" date at the top of the document reflects the date of the most recent revision. Your continued use of the platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree with a material change, you may close your account and withdraw your real-money balance before the change takes effect.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gm108, please use the following contact channels:
If you are not satisfied with gm108's response to a privacy complaint, you may escalate the matter to gm108's designated Data Protection Officer by emailing support@gm108.pro with the subject line "DPO Escalation". The DPO will provide a written response within 28 calendar days.
For general information about your account, available games, payment options, and platform features, visit our FAQ page, which covers the most common player inquiries. For information about self-exclusion, deposit limits, and responsible gaming tools, visit the Responsible Gaming page.
gm108 combines bank-grade data security with a world-class game library and instant IDR transactions. Explore everything the platform has to offer, knowing your personal information is in safe hands.
🔞 Adults only (21+). Gambling involves financial risk — only play with funds you can afford to lose. Visit Responsible Gaming for self-exclusion and support resources.