Privacy Policy

Last Updated: January 15, 2026  |  Effective Date: January 15, 2026

1. Introduction

This Privacy Policy (the "Policy") describes how gab8 ("gab8", "we", "us", or "our"), operating the website at https://gab8.cam, collects, processes, stores, shares, and protects the personal data of individuals ("Users", "you", or "your") who access and use our online betting platform and all associated services (collectively, the "Service").

This Policy is an integral part of the gab8 Terms and Conditions and should be read alongside them. By registering an Account or otherwise using the Service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Service immediately.

gab8 is committed to handling all personal data with the utmost respect, transparency, and security. Our practices are designed to meet rigorous international data protection standards, reflecting the same values of trust and reliability that Indonesian players expect from institutions like BCA.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly, including but not limited to name, identification number, location data, online identifier, or factors specific to the physical, physiological, genetic, mental, economic, or social identity of that person.
• "Processing" means any operation performed on Personal Data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means gab8, which determines the purposes and means of processing Personal Data.
• "Data Processor" means any natural or legal person that processes Personal Data on behalf of gab8 pursuant to a data processing agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your wishes by which you signify agreement to the processing of your Personal Data.
• "KYC" means Know Your Customer — the identity and age verification process required by gab8 before allowing full access to the Service.
• "Cookie" means a small text file placed on your device by a website when you visit it, used to remember preferences and track usage.

3. Personal Data We Collect

gab8 collects the following categories of Personal Data, depending on how you interact with the Service:

3.1 Registration and Identity Data

• Full legal name
• Date of birth
• Indonesian national identity card number (KTP number) or passport number
• Residential address (street address, city, province, postal code)
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Financial and Transaction Data

• Bank account details (account holder name, account number, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit and withdrawal transaction history
• Account balance and bonus balance information
• Betting and wagering history, including bet amounts, outcomes, and timestamps

3.3 KYC Verification Documents

• Copies of government-issued identity documents (KTP, passport, SIM)
• Proof of address documentation (utility bills, bank statements)
• Selfie or live photograph for facial verification purposes

3.4 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser type/version
• Pages visited, features used, and time spent on the platform
• Session logs and access timestamps
• Referral source (how you arrived at gab8)

3.5 Communications Data

• Contents of live chat conversations with Customer Support
• Email correspondence with gab8
• Responses to surveys, feedback forms, or promotional communications

4. How We Collect Your Data

gab8 collects Personal Data through the following means:

• Directly from you: When you register an Account, complete KYC verification, make deposits or withdrawals, contact Customer Support, or respond to surveys.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you browse and interact with the Service.
• From third parties: From payment processors and banking partners (such as BCA, BRI, OVO, or DANA) during transaction verification; from identity verification service providers during KYC; and from fraud prevention partners when assessing account risk.

5. How We Use Your Personal Data

gab8 processes your Personal Data for the following specific and legitimate purposes:

6. Legal Basis for Processing

gab8 processes your Personal Data only where we have a valid legal basis for doing so. The primary legal bases on which we rely are:

• Contract Performance: Processing necessary to deliver the services you have requested, including operating your Account, processing transactions, and providing Customer Support.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and responsible gaming regulations.
• Legitimate Interests: Processing carried out in pursuit of gab8's legitimate business interests, including fraud detection, platform security, service improvement, and direct marketing to existing customers — provided these interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, such as sending you promotional emails or SMS notifications. You may withdraw your consent at any time by contacting Customer Support.

7. Sharing Your Personal Data

gab8 does not sell or rent your Personal Data to third parties. We may share your data with the following categories of recipients only where necessary and appropriate:

7.1 P ayment and Banking Partners

We share necessary financial and identity data with payment processors and banking institutions (including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and e-wallet providers OVO, DANA, GoPay, ShopeePay, and LinkAja) solely for the purpose of processing your deposits and withdrawals. These partners are bound by strict data protection agreements and may not use your data for any other purpose.

7.2 Identity Verification Providers

To fulfill our KYC obligations, we share identity document data with accredited third-party verification service providers. These providers process your data solely for the purpose of confirming your identity and age and are contractually prohibited from retaining or using your data beyond that scope.

7.3 Fraud Prevention and Security Partners

We may share technical and transactional data with fraud detection and cybersecurity partners to protect the integrity of the platform and safeguard all Users. Such sharing is conducted under data processing agreements that limit the use of your data strictly to security purposes.

7.4 Legal and Regulatory Authorities

gab8 may disclose Personal Data to competent law enforcement agencies, regulatory bodies, or other public authorities where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosures where we are legally permitted to do so.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of gab8's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on our website prior to any such transfer and will ensure the receiving entity is bound by data protection obligations no less stringent than those set out in this Policy.

8. Data Retention

gab8 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AML and financial record-keeping obligations.
• Transaction and betting history: Retained for a minimum of five (5) years from the date of each transaction, consistent with applicable financial regulations.
• KYC documentation: Retained for a minimum of five (5) years following submission, and for up to ten (10) years where required by AML regulations.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Technical and usage logs: Retained for twelve (12) months from collection, after which they are anonymized or deleted.
• Marketing consent records: Retained for the duration of the consent and for two (2) years thereafter, to demonstrate compliance.

When Personal Data is no longer required, it is securely deleted or anonymized in accordance with our internal data destruction procedures.

9. Data Security

gab8 takes the security of your Personal Data seriously and implements a comprehensive set of technical and organizational measures to protect it against unauthorized access, loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored in our databases, including passwords (stored as salted hashes), bank account details, and identity document copies;
• Multi-factor authentication (MFA) for all internal staff access to systems containing Personal Data;
• Role-based access controls (RBAC) ensuring that only staff with a legitimate business need can access specific categories of Personal Data;
• Regular third-party security audits and penetration testing to identify and remediate vulnerabilities;
• Intrusion detection and prevention systems (IDPS) monitoring for anomalous network activity 24 hours a day;
• Secure data centers with physical access controls, redundant power supplies, and disaster recovery capabilities.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, gab8 will notify you and any relevant regulatory authorities within the timeframes required by applicable law.

10. Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They are widely used to make websites function efficiently, improve user experience, and provide analytical information to website operators. gab8 uses cookies and similar technologies (such as web beacons, pixel tags, and local storage objects) across the Service.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Service to function. They enable core features such as session management, login authentication, and security. These cookies cannot be disabled.
• Performance and Analytics Cookies: Used to collect anonymous data about how Users interact with the Service, including pages visited, time on site, and error messages. This data helps us improve the platform.
• Functional Cookies: Allow the Service to remember your preferences, such as your chosen language, currency display (IDR/Rp), and notification settings.
• Targeting and Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only set where you have given your consent.

10.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a cookie is set. Please note that disabling certain cookies may affect the functionality of the Service. Detailed instructions for managing cookies are available in the help section of your browser.

11. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your Personal Data held by gab8:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit it to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your Personal Data where we rely on legitimate interests as our legal basis, and where your particular circumstances warrant such an objection.
• Right to Withdraw Consent: Where we process your data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our Customer Support team via live chat or by email at [email protected]. We will respond to all valid requests within thirty (30) days. In some cases, we may need to verify your identity before processing your request.

12. Children's Privacy

The Service is strictly intended for adults aged 21 years and above. gab8 does not knowingly collect Personal Data from any person under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated Account.

If you are a parent or guardian and believe that your child has provided Personal Data to gab8, please contact our Customer Support team immediately at [email protected]. We will investigate and take appropriate action without undue delay.

13. International Data Transfers

In the course of providing the Service, your Personal Data may be transferred to and processed in countries outside Indonesia. When such transfers occur, gab8 ensures that appropriate safeguards are in place to protect your data, including standard contractual clauses, data processing agreements, and assessments of the recipient jurisdiction's data protection standards.

Where Personal Data is transferred to our service providers located outside Indonesia — for example, cloud infrastructure providers or KYC verification partners — those transfers are governed by binding data processing agreements that require the recipient to protect your data to a standard equivalent to that described in this Policy.

14. Changes to This Privacy Policy

gab8 reserves the right to update or amend this Policy at any time to reflect changes in our data practices, applicable law, or the Services we offer. When material changes are made, we will notify you by posting a prominent notice on the website and, where practicable, by sending an email to your registered address. The "Last Updated" date at the top of this document will always reflect when the most recent revision was made.

Your continued use of the Service following notification of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the way gab8 handles your Personal Data, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the gab8 website
• Response Time: Within 2 minutes via live chat; within 24 hours via email (WIB, UTC+7)