Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

• "gbo07" / "Platform" / "we" / "us" / "our" — gbo07.vip, the internationally licensed online casino and sportsbook operating at this domain.
• "Player" / "you" / "your" — any individual who registers an account, visits gbo07.vip, or otherwise interacts with the Platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living natural person, including name, email address, phone number, IP address, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Controller" — gbo07, which determines the purposes and means of processing your Personal Data.
• "Processor" — any third-party entity that processes Personal Data on behalf of gbo07 under a data-processing agreement (e.g., payment processors, KYC verification providers, cloud infrastructure providers).
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" — Know Your Customer; identity and age verification processes required before processing withdrawals or when a compliance review is triggered.
• "Cookies" — small text files placed on your device by gbo07.vip for session management, analytics, and personalisation purposes.

gbo07 collects Personal Data across several categories depending on how you interact with the Platform. The table below summarises the key categories and specific data elements:

gbo07 does not collect sensitive categories of Personal Data (e.g., health data, biometric data, political opinions, religious beliefs) unless you voluntarily disclose such information in a support communication, in which case it will be treated with the highest level of confidentiality and deleted as soon as the support matter is resolved.

gbo07 collects Personal Data through the following channels:

• Direct submission: Data you provide when registering an account on gbo07.vip, completing a KYC verification request, making a deposit or withdrawal, or contacting customer support via live chat or email.
• Automated technical collection: Data gathered automatically when you visit gbo07.vip, including via server logs, cookies, web beacons, and similar tracking technologies (see Section 7 for full cookie details).
• Payment providers: Confirmation and reference data returned by BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other payment infrastructure partners when you initiate a transaction.
• KYC and identity verification providers: Results and risk-scoring data returned by third-party identity verification services engaged by gbo07 to validate your age, identity, and payment method ownership.
• Fraud and compliance screening: Risk signals and flagged-account data from third-party anti-fraud and AML (anti-money-laundering) screening tools, used to protect the integrity of the Platform and the safety of all players.

gbo07 processes your Personal Data only where a valid legal basis exists. The primary legal bases we rely on are as follows:

• Contractual necessity: Processing required to register your account, verify your identity, process deposits and withdrawals, and deliver the services you have requested. Without this processing, gbo07 cannot provide you with a functioning account.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and any mandatory record-keeping obligations imposed by gbo07's international gaming licence authority.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud and bonus abuse, improve the user experience through analytics, and manage responsible gaming risks — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications (email newsletters, promotional SMS, push notifications about bonuses and seasonal offers). You may withdraw this consent at any time without affecting the legality of processing carried out before withdrawal.

gbo07 uses the Personal Data we collect for the following purposes:

• Account management: Creating and maintaining your gbo07 account, authenticating your identity at each gbo07 login, and managing your account settings and preferences.
• Payment processing: Verifying deposit sources, processing withdrawals to your registered BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay account, and maintaining a complete financial transaction history for your account.
• KYC and age verification: Confirming that you are at least 21 years of age and that your identity and payment methods are registered in your own name, as required by gbo07's responsible gaming obligations and licensing conditions.
• Customer support: Responding to your inquiries, resolving disputes, investigating complaints, and providing 24/7 live chat assistance in English (with Indonesian-speaking agents available on request).
• Security and fraud prevention: Detecting, investigating, and preventing unauthorised access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct described in gbo07's Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling, enforcing deposit limits and self-exclusion requests, and sending responsible gaming reminders where gbo07's systems flag elevated risk indicators.
• Platform improvement: Analysing aggregated, anonymised behavioural data to improve game selection, page performance, user interface design, and the overall gbo07 experience for players across Indonesia.
• Marketing communications: Sending you promotional emails, SMS messages, or push notifications about bonuses, seasonal promotions (e.g., Ramadhan deposit bonus, Idul Fitri cashback, BRI Liga 1 accumulators), and new game releases — only where you have given your explicit consent.
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory authorities, and enforcing gbo07's rights under its Terms & Conditions.

gbo07 does not use your Personal Data for fully automated decision-making that produces legal or similarly significant effects without a human review step. Where automated tools flag an account for review (e.g., fraud screening, responsible gaming alerts), a member of gbo07's compliance team evaluates the flag before any action is taken against your account.

6.1 Processors. gbo07 shares Personal Data with carefully selected third-party processors who act strictly on our documented instructions under binding data-processing agreements. Categories of processors include:

• Payment infrastructure providers (banking partners, e-wallet operators including OVO, DANA, GoPay, ShopeePay, and LinkAja).
• KYC and identity verification service providers.
• Anti-fraud and AML screening platforms.
• Cloud infrastructure and hosting providers (servers operating under ISO 27001–certified data centres).
• Customer support software providers (live chat platform).
• Email and SMS communication delivery providers (for transactional and, where consented, marketing messages).
• Game studio providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft — which may receive session tokens and game-related data necessary to deliver their games within the gbo07 platform.

6.2 Regulatory and Legal Disclosures. gbo07 may disclose your Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by a lawful order, warrant, or mandatory legal obligation. In such cases, gbo07 will disclose only the minimum data necessary to satisfy the legal requirement and will notify you of any such disclosure where legally permitted to do so.

6.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of assets involving gbo07, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the way your data is processed as a result.

6.4 No Sale of Data. gbo07 does not sell, rent, or commercially trade your Personal Data to any third party for their independent marketing or commercial use. Data sharing is limited strictly to the categories of processors and disclosures described in this Section 6.

gbo07.vip uses cookies and similar tracking technologies to operate core platform functions, maintain your login session, and analyse how players use the site. The cookies we use fall into the following categories:

Managing cookies: You may control or disable non-essential cookies through your browser settings at any time. Please note that disabling functional cookies may affect your experience on gbo07.vip (for example, your session preferences may not be saved between visits). Disabling strictly necessary cookies will prevent the Platform from operating correctly.

gbo07 does not use cookies to collect sensitive personal information, and no cookie data is sold to third parties.

gbo07 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as standard:

On expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup system architecture, the data will be isolated, protected from further active use, and deleted at the next scheduled backup purge cycle.

gbo07 applies a defence-in-depth security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• Encryption in transit: All data exchanged between your browser and gbo07.vip is encrypted using TLS 1.3 — the current industry-leading standard for transport-layer security. Our SSL certificate is maintained with continuous validity monitoring.
• Encryption at rest: Sensitive Personal Data fields (including financial account identifiers and KYC document references) are encrypted at the database level using AES-256.
• Password security: Account passwords are stored using bcrypt hashing with per-user salting. gbo07 staff members cannot view your password in plain text under any circumstances.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with data access privileges are subject to background checks, confidentiality agreements, and mandatory data protection training.
• Network security: gbo07's server infrastructure is protected by multi-layer firewalls, intrusion detection systems (IDS), and DDoS mitigation services. Servers are hosted in ISO 27001–certified data centres.
• Incident response: gbo07 maintains a documented data breach response plan. In the event of a confirmed breach affecting your Personal Data, you will be notified within the timeframe required by applicable law, along with a clear description of the nature of the breach, the data affected, and the steps gbo07 has taken to contain it.

While gbo07 implements robust security measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You transmit your data at your own risk, and gbo07 encourages you to use a strong, unique password for your gbo07 account and to enable any two-factor authentication options made available on the Platform.

As a player of gbo07, you have the following rights in respect of your Personal Data. To exercise any of these rights, contact gbo07's Data Protection contact at [email protected] with the subject line "Privacy Rights Request".

• Right of Access: You have the right to request a copy of all Personal Data gbo07 holds about you, along with information about how it is used and who it has been shared with. gbo07 will respond to verified access requests within 30 calendar days.
• Right to Rectification: If any Personal Data gbo07 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. Basic profile corrections (name, email, contact number) can be initiated directly via your account dashboard after a gbo07 login.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing on legitimate interests grounds. Note that gbo07 may be required to retain certain data beyond an erasure request to satisfy legal obligations (see Section 8).
• Right to Restrict Processing: You have the right to request that gbo07 restrict the processing of your Personal Data in specific circumstances — for example, while you contest the accuracy of data held, or while an objection to processing is pending resolution.
• Right to Data Portability: For data processed on the basis of your consent or contractual necessity, you may request a structured, machine-readable copy of your Personal Data to transfer to another service provider.
• Right to Object: You have the right to object at any time to the processing of your Personal Data where gbo07 relies on legitimate interests as the legal basis. You also have an absolute right to object to processing for direct marketing purposes, with immediate effect.
• Right to Withdraw Consent: Where gbo07 processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time by updating your Account notification preferences or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

gbo07 will not charge a fee for standard privacy rights requests. If a request is manifestly unfounded or repetitive, gbo07 reserves the right to charge a reasonable administrative fee or decline to act, providing written reasons for that decision.

11.1 Strict 21+ Policy. gbo07 does not knowingly collect Personal Data from any individual under the age of 21. The Platform is intended exclusively for adults aged 21 and above. All registration flows include an age confirmation step, and gbo07's KYC process includes mandatory date-of-birth verification against a government-issued identity document.

11.2 Discovery of Under-Age Accounts. If gbo07 discovers or has reasonable cause to believe that a registered account belongs to a person under 21 years of age, we will immediately suspend that account, delete all associated Personal Data to the extent not required for legal retention purposes, and return any real-money balance to the original payment source.

11.3 Parental Guidance. If you believe that a minor in your household has accessed or registered on gbo07.vip, please contact our support team immediately at [email protected]. gbo07 takes child protection seriously and will act on all such reports as a matter of priority. We also recommend the use of parental-control software if minors share a device used to access gbo07.vip.

gbo07 is an internationally licensed platform. Your Personal Data may be processed in data centres or by processors located outside of Indonesia. When we transfer Personal Data internationally, we ensure that appropriate safeguards are in place, including:

• Binding contractual clauses with all international processors requiring them to protect your data to a standard equivalent to that described in this policy.
• Use of processors operating within jurisdictions that maintain internationally recognised data protection standards.
• Technical safeguards (encryption at rest and in transit) that protect data regardless of geographic location.

By registering a gbo07 account, you acknowledge that your Personal Data may be transferred to and processed in countries outside of Indonesia as described in this section. If you have concerns about international data transfers, you may contact gbo07's data protection contact at [email protected].

gbo07.vip may contain embedded game content or references to third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — whose software operates within an iFrame or API integration on gbo07.vip. Each studio's own privacy practices govern any data they collect within their game engine. gbo07 recommends reviewing the relevant studio's privacy documentation if you have concerns about in-game data collection.

gbo07 is not responsible for the privacy practices of any third-party website, application, or service. The presence of a third-party brand name on gbo07.vip (e.g., BCA, OVO, Pragmatic Play) does not constitute endorsement of that party's privacy practices, nor does it imply any shared data-controller relationship beyond the scope of the relevant service agreement.

14.1 Right to Update. gbo07 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or the services offered on gbo07.vip. The "Last Updated" date at the top of this page will always reflect when the most recent changes were made.

14.2 Notification of Material Changes. Where a proposed change to this Privacy Policy materially affects how gbo07 processes your Personal Data, we will provide advance notice via a prominent banner on gbo07.vip and/or by email to the address registered on your account. Non-material clarifications and administrative updates may be made without individual notification.

14.3 Continued Use. Your continued use of gbo07.vip following the effective date of any updated Privacy Policy constitutes your acknowledgment of, and agreement to, the revised terms. If you do not accept the revised policy, you must cease using the Platform and request account closure in accordance with the process described in gbo07's Terms & Conditions.

For any privacy-related questions, rights requests, data breach reports, or formal complaints regarding gbo07's handling of your Personal Data, please use the following contact channels:

• Email: [email protected] — use the subject line "Privacy Rights Request" for formal data subject rights requests, or "Data Breach Report" for security concerns. gbo07 commits to acknowledging all privacy-related emails within 24 hours (WIB).
• Live Chat: Available 24/7 on gbo07.vip — suitable for general privacy questions and initial triage. Complex rights requests will be escalated from live chat to the data protection team for formal handling.
• WhatsApp: Available to verified members after a gbo07 login — accessible from the account support section.
• Support Hours: 00:00–23:59 WIB, every day of the year. Indonesian-speaking support agents are available on request during all support hours.

gbo07 targets a response time of 30 calendar days for formal privacy rights requests, and 72 hours for all other privacy-related inquiries. For particularly complex or high-volume requests, gbo07 may extend the 30-day response window by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day period.