1. Introduction

Welcome to the gbosky Privacy Policy. This document outlines our practices regarding the collection, use, storage, and protection of your personal information when you access or use the gbosky platform at https://gbosky.cam.

At gbosky, we recognize that privacy is a fundamental right, and we are committed to handling your personal data with the highest standards of care and transparency. As a platform serving Indonesian players, we comply with applicable data protection regulations and implement industry-leading security measures to safeguard your information.

By creating an account or using gbosky Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein. If you do not agree with any part of this Privacy Policy, please discontinue use of the platform immediately.

Key Privacy Principles

gbosky operates on core privacy principles: transparency (we tell you what data we collect and why), purpose limitation (we only use data for stated purposes), data minimization (we collect only what's necessary), accuracy (we keep your data current), security (we protect data with encryption and access controls), and accountability (we take responsibility for your privacy protection).

2. Information We Collect

gbosky collects several types of information to provide, maintain, protect, and improve our Services. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register for a gbosky account, you voluntarily provide the following personal information:

  • Account Registration Data: Full legal name (as it appears on your government-issued ID), date of birth, gender, email address, phone number, residential address (street address, city, postal code), and chosen username and password.
  • Identity Verification (KYC) Data: Copies of government-issued identification documents (KTP/Indonesian National Identity Card), proof of address documents (utility bills, bank statements dated within three months), selfie photographs holding your ID, and payment method verification documents.
  • Payment Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja usernames or phone numbers), and transaction history including deposits, withdrawals, and payment method changes.
  • Communications: Contents of messages you send to our customer support team via email, live chat, or other communication channels, including inquiries, complaints, feedback, and support requests.

2.2 Information Collected Automatically

When you access or use gbosky Services, we automatically collect certain technical and behavioral information:

  • Device Information: Device type, operating system, browser type and version, screen resolution, language settings, time zone, and unique device identifiers.
  • Usage Data: IP address, login times, session duration, pages visited, games played, bets placed, betting patterns, click-stream data, and feature interactions.
  • Location Data: Approximate geographic location derived from IP address to ensure compliance with geographic restrictions and verify you are accessing from Indonesia.
  • Gameplay Data: Game selections, bet amounts, win/loss records, bonus usage, wagering progress, and gaming preferences.
  • Performance Data: Loading times, error messages, crash reports, and other diagnostic information to improve platform stability.

2.3 Information from Third Parties

gbosky may receive information about you from third-party sources including:

  • Payment Processors: Transaction confirmations, payment method details, and fraud detection signals from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay).
  • Identity Verification Services: Verification results, risk scores, and watchlist checks from KYC/AML compliance providers.
  • Marketing Partners: Referral sources, campaign performance data, and attribution information (we do not purchase personal data from data brokers).

3. How We Use Your Information

gbosky uses your personal information for legitimate business purposes that are necessary to provide, improve, and protect our Services. Specifically, we use your data to:

3.1 Provide and Manage Services

  • Create and maintain your gbosky account
  • Process deposits, withdrawals, and other financial transactions
  • Enable gameplay across casino, sports betting, live dealer, and lottery (togel) products
  • Calculate winnings, settle bets, and update account balances accurately
  • Process bonus claims and track wagering requirement completion
  • Provide customer support and respond to inquiries

3.2 Comply with Legal and Regulatory Obligations

  • Verify your identity and age (21+ requirement) through KYC procedures
  • Prevent fraud, money laundering, and other illegal activities
  • Detect and investigate suspicious transaction patterns or account behaviors
  • Maintain records required by gambling regulations and financial laws
  • Respond to legal requests, court orders, or regulatory inquiries
  • Enforce our Terms & Conditions and other policies

3.3 Improve and Personalize User Experience

  • Analyze usage patterns to optimize platform performance and design
  • Recommend games, betting markets, or features based on your preferences
  • Customize promotional offers relevant to your interests (with your consent)
  • Conduct research and analytics to understand player behavior and preferences
  • Test new features and products with selected user segments

3.4 Marketing and Communications

  • Send transactional emails (deposit confirmations, withdrawal notifications, security alerts)
  • Share promotional offers, bonuses, and special events (you can opt out anytime)
  • Notify you of important platform updates, policy changes, or service maintenance
  • Request feedback on your experience to help us improve gbosky Services

3.5 Security and Fraud Prevention

  • Monitor for account takeover attempts, unauthorized access, and security threats
  • Detect collusion, bonus abuse, multiple accounts, and other Terms violations
  • Implement responsible gaming measures and identify problem gambling patterns
  • Protect against DDoS attacks, malware, and other cyber threats

4. How We Share Your Information

gbosky does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We share information with trusted third-party service providers who perform services on our behalf under strict confidentiality agreements:

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process transactions.
  • Identity Verification Providers: KYC/AML compliance services that verify your identity and screen against watchlists.
  • Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other game studios that power our casino and live dealer offerings.
  • Cloud Hosting: Secure server infrastructure providers that store and process data on our behalf.
  • Customer Support Tools: Live chat platforms and ticketing systems that enable our support team to assist you efficiently.
  • Analytics Providers: Tools that help us understand platform usage and improve user experience (data is anonymized when possible).

4.2 Legal and Regulatory Requirements

We may disclose your information when required by law or when we believe disclosure is necessary to:

  • Comply with legal obligations, court orders, subpoenas, or regulatory requests
  • Protect the rights, property, or safety of gbosky, our users, or the public
  • Enforce our Terms & Conditions or investigate potential violations
  • Prevent fraud, illegal activity, or security threats
  • Respond to lawful requests from government authorities

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the transaction. You will be notified via email or prominent notice on the platform before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for purposes not described in this Privacy Policy with your explicit consent. For example, if you participate in a promotional campaign that involves sharing your name and win amount publicly, we will obtain your prior consent.

5. Data Security Measures

gbosky implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

5.1 Technical Safeguards

  • SSL/TLS Encryption: All data transmitted between your device and gbosky servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same standard used by banks.
  • Encrypted Data Storage: Personal and financial information stored in our databases is encrypted at rest using industry-standard encryption algorithms.
  • Firewall Protection: Multi-layer firewalls protect our servers from external attacks and unauthorized access attempts.
  • Intrusion Detection: Real-time monitoring systems detect and alert us to suspicious activity or potential security breaches.
  • Regular Security Audits: Independent third-party security firms conduct periodic penetration testing and vulnerability assessments.
  • Secure Authentication: Password requirements, account lockouts after failed login attempts, and optional two-factor authentication (when available).

5.2 Organizational Safeguards

  • Access Controls: Employee access to personal data is restricted on a need-to-know basis and logged for accountability.
  • Staff Training: All employees receive regular training on data protection, privacy regulations, and security best practices.
  • Confidentiality Agreements: Employees and contractors sign confidentiality agreements prohibiting unauthorized use or disclosure of customer data.
  • Incident Response Plan: Documented procedures for detecting, reporting, and responding to data breaches or security incidents.
  • Data Minimization: We collect only the minimum data necessary for stated purposes and delete data when no longer needed.
Your Security Responsibilities

While gbosky implements robust security measures, you also play a critical role in protecting your account. Use a strong, unique password, never share your login credentials with anyone, log out after each session on shared devices, and immediately report any suspected unauthorized access to our support team. gbosky will never ask for your password via email or phone—any such request is a phishing attempt.

6. Cookies and Tracking Technologies

gbosky uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on return visits.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for basic platform functionality like account login, session management, and security features. These cannot be disabled without breaking core Services.
  • Performance Cookies: Collect anonymous data about how users interact with gbosky, including pages visited, time spent, and error messages. This helps us optimize performance.
  • Functional Cookies: Remember your preferences (language, game filters, bet slip settings) to provide a more personalized experience.
  • Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure campaign effectiveness (third-party cookies from advertising partners).

6.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may limit your ability to use certain gbosky features. To manage cookies in your browser, refer to your browser's help documentation or visit www.allaboutcookies.org for instructions.

6.3 Third-Party Tracking

gbosky may use third-party analytics services (like Google Analytics) and advertising networks that place their own cookies to track your activity across websites. These third parties have their own privacy policies governing their use of your information. We do not control third-party cookies and recommend reviewing their privacy policies directly.

7. Your Privacy Rights

As a gbosky user, you have certain rights regarding your personal information. We are committed to facilitating the exercise of these rights in accordance with applicable data protection laws.

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can view most of your account data directly through your gbosky account dashboard. For a comprehensive data export, contact our support team at [email protected]. We will provide your data in a structured, commonly used, machine-readable format within 30 days of your request.

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information (email, phone number, address) directly in your account settings. For changes requiring verification (name, date of birth), contact customer support with supporting documentation.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes it was collected or if you withdraw consent. However, we may retain certain information when required by law (e.g., financial records for tax/auditing purposes, KYC documents for regulatory compliance) or to establish, exercise, or defend legal claims. Deletion requests can take up to 60 days to complete.

7.4 Right to Restrict Processing

You may request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store your data but not actively process it except with your consent or for legal purposes.

7.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider where technically feasible. This applies to data you provided to us with your consent or for contract performance, and where processing is automated.

7.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. To opt out of promotional emails, click the "unsubscribe" link in any marketing message or adjust your communication preferences in account settings. You can also object to processing based on legitimate interests by explaining your specific situation.

7.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. Note that withdrawal may limit your ability to use certain gbosky Services that require consent-based processing.

Exercising Your Rights

To exercise any of these privacy rights, please contact us at [email protected] with your full name, registered email address, and specific request. We may ask for additional information to verify your identity before processing your request to prevent unauthorized access to your data. We will respond to all requests within 30 days, or inform you if we need additional time (up to 60 days for complex requests).

8. Data Retention

gbosky retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Active Account Data

While your account remains active, we retain all account information, transaction history, gameplay records, and communication logs to provide ongoing Services and comply with regulatory requirements.

8.2 Closed Account Data

When you close your gbosky account, we retain certain information for specific periods:

  • Financial Records: Transaction history, deposits, withdrawals, and tax-related information retained for 7 years to comply with Indonesian financial regulations and auditing requirements.
  • KYC Documents: Identity verification documents retained for 5 years after account closure as required by anti-money laundering regulations.
  • Gameplay Data: Betting history, game outcomes, and bonus usage retained for 3 years for dispute resolution and regulatory reporting.
  • Communications: Customer support correspondence retained for 2 years for quality assurance and complaint handling.
  • Marketing Data: Email addresses and communication preferences retained until you unsubscribe or request deletion (whichever comes first).

8.3 Automated Deletion

Once retention periods expire, personal data is automatically deleted from our active systems through scheduled purge processes. Backup copies held for disaster recovery purposes are deleted according to our backup retention schedule (typically within 90 days of active system deletion).

9. Children's Privacy

gbosky Services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process requires date of birth verification, and we implement age verification checks through KYC procedures.

If we discover that we have inadvertently collected personal information from a minor under 21, we will immediately delete the account and erase all associated data from our systems. If you believe a minor has created an account on gbosky, please contact us immediately at [email protected] so we can take appropriate action.

Parents or guardians are responsible for monitoring their children's internet usage. We recommend using parental control software to prevent minors from accessing online gambling platforms. gbosky takes no responsibility for minors who circumvent age verification by providing false information.

10. International Data Transfers

gbosky primarily serves Indonesian players and stores data in secure facilities. However, some of our service providers and partners may be located outside Indonesia, which means your personal information may be transferred to, stored, or processed in other countries.

When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information, including:

  • Data processing agreements with service providers that include data protection clauses equivalent to Indonesian standards
  • Selection of service providers in jurisdictions with adequate data protection laws
  • Implementation of technical measures like encryption during transmission and storage
  • Regular audits of service provider security practices

By using gbosky Services, you acknowledge and consent to the transfer of your data outside Indonesia where necessary to provide our Services. If you have concerns about international data transfers, please contact our privacy team for more information about specific safeguards.

11. Changes to This Privacy Policy

gbosky reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you through one or more of the following methods:

  • Email notification to your registered email address at least 30 days before changes take effect
  • Prominent notice on the gbosky homepage or dashboard
  • Pop-up notification upon login requiring acknowledgment

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of gbosky Services after changes take effect constitutes acceptance of the revised Privacy Policy. If you disagree with any changes, you may close your account by contacting customer support.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how gbosky handles your personal information, please contact our dedicated privacy team:

Privacy Inquiries

Email: [email protected]
Subject Line: "Privacy Inquiry - [Your Account Email]"
Response Time: Within 48 hours

General Support

Email: [email protected]
Live Chat: Available 24/7 on platform
Response Time: Within 2-4 hours

When contacting us about privacy matters, please include your full name, registered email address, and a detailed description of your inquiry or request. For data subject rights requests (access, deletion, rectification), we may ask for additional verification to protect your information from unauthorized access.

Our Privacy Commitments

Bank-Level Encryption

256-bit SSL encryption protects all data transmission. Your information is as secure as online banking.

Strict Access Controls

Employee access to personal data is limited, monitored, and logged. Need-to-know basis only.

No Data Selling

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

Full Transparency

Clear disclosure of what data we collect, why we collect it, and how long we retain it.

Your Rights Respected

Easy exercise of access, rectification, deletion, and portability rights. We respond within 30 days.

Secure Infrastructure

Regular security audits, intrusion detection, and penetration testing by independent experts.

Questions About Your Privacy?

Our privacy team is here to address any concerns about how we handle your personal information