Privacy Policy — got24

got24 is an internationally licensed online casino and sportsbook platform serving Members primarily in Indonesia. We operate the website accessible at https://got24.bio (the "Platform"), through which we offer sports betting, live casino games, slot games, keno, and togel (Indonesia's traditional numbers lottery) products, all denominated in Indonesian Rupiah (IDR).

In the course of providing these services, got24 necessarily collects and processes certain personal data about you. We take this responsibility seriously. This Privacy Policy sets out in full detail what data we collect, why we collect it, how long we keep it, with whom we share it, and what choices and rights you have in relation to your personal data.

This Policy applies to all personal data collected via the Platform, including data submitted during the registration process, the identity verification (KYC) process, payment transactions, gameplay activity, customer support interactions, and marketing communications where you have opted in to receive them.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly. In the event of any conflict between this Policy and the Terms & Conditions on a data privacy matter, this Policy prevails.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation performed on Personal Data, whether automated or not, including collection, recording, storage, adaptation, retrieval, consultation, use, transmission, dissemination, restriction, erasure, or destruction.
• "Data Controller" refers to got24, the entity that determines the purposes and means of the processing of Personal Data collected through the Platform.
• "Data Processor" refers to any third party that processes Personal Data on behalf of got24 and under got24's documented instructions, including payment service providers, game studio partners, and cloud infrastructure providers.
• "Member" or "You" refers to any natural person who holds a registered Account on the got24 Platform.
• "KYC" means Know Your Customer — the identity verification procedure required under got24's anti-money laundering and responsible gaming obligations.
• "Cookies" means small text files placed on your device by the Platform to recognize your browser, retain session state, and collect analytics data.
• "WIB" means Western Indonesia Time (UTC+7), the default time zone used for all timestamps recorded by the Platform.

got24 collects the following categories of personal data from Members:

We collect personal data through the following methods:

• Directly from You: When you register an Account, complete the KYC verification process, make a deposit or withdrawal, use the live chat support feature, or contact us via email at [email protected].
• Automatically: When you access and use the Platform, our servers automatically record technical data including your IP address, device identifiers, browser fingerprint, session start and end times (WIB), pages visited, and in-platform navigation path. This data is collected via server logs, session cookies, and analytics scripts.
• From Third-Party Game Providers: Licensed game studios — including Evolution Gaming, Pragmatic Play, PG Soft (Pocket Games Soft), NetEnt, Microgaming, Habanero, and Spribe — may transmit game round outcome data and session metadata to got24 for the purposes of dispute resolution and responsible gaming monitoring.
• From Payment Processors: When you initiate a deposit or withdrawal via a bank transfer or e-wallet, the relevant financial institution or payment gateway may transmit confirmation data including transaction reference numbers and timestamps to got24 to reconcile your Account balance.
• From Responsible Gaming Databases: Where you have self-registered for a self-exclusion program through a third-party responsible gaming service, that service may transmit your exclusion status to got24 to enforce your exclusion across participating platforms.

got24 processes your personal data for the following specific, explicit, and legitimate purposes:

• Account Management: To create and maintain your Member Account, authenticate your identity at login, manage your wallet balance, and deliver the gaming services you have requested.
• Identity Verification (KYC): To verify that you are the person you claim to be, that you meet the minimum age requirement of 21 years, and that your payment methods are legitimately registered in your name — as required under our operating license and anti-money laundering obligations.
• Payment Processing: To process deposits from and withdrawals to your verified bank accounts (BCA, BRI, BNI, Mandiri, and other supported Indonesian banks) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) in IDR.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized Account access, money laundering, collusion, bonus abuse, and any other activity that threatens the integrity of the Platform or the safety of our Members.
• Responsible Gaming: To monitor gameplay patterns for behavioral indicators of problem gambling — such as rapid deposit escalation, extended session durations, or repeated deposit-loss cycles — and to facilitate the responsible gaming tools available in your Account dashboard, including deposit limits, loss limits, session timers, and self-exclusion.
• Customer Support: To respond to your inquiries, resolve complaints, and provide technical assistance via live chat and email.
• Legal and Regulatory Compliance: To fulfill our obligations under applicable anti-money laundering regulations, our international gaming license conditions, and any lawful request from a regulatory authority or law enforcement agency.
• Marketing Communications (opt-in only): To send you promotional emails, SMS messages, and in-Platform notifications about bonuses, seasonal IDR promotions (such as Idul Fitri, Imlek, or Indonesian Independence Day offers), and new game launches — but only where you have given your explicit opt-in consent. You may withdraw this consent at any time from your Account settings.
• Platform Improvement: To analyze aggregate, anonymized usage data to improve the Platform's performance, user experience, game selection, and customer support quality.

got24 processes your personal data on the following legal bases:

• Contractual Necessity: Processing of Identity Data, Contact Data, Financial Data, and Gameplay Data is necessary for the performance of the contract between you and got24 (as set out in the Terms & Conditions). Without this processing, we cannot create or maintain your Account or deliver the services you have requested.
• Legal Obligation: Processing for KYC verification, anti-money laundering checks, age verification, and regulatory reporting is required by applicable law and by the conditions of got24's international gaming license. This processing cannot be declined or opted out of — it is a mandatory prerequisite for holding an Account.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of got24's legitimate business interest in operating a safe, fair, and commercially sustainable platform. got24 has assessed that this interest does not override your fundamental privacy rights in these contexts.
• Consent: Processing for marketing communications is based solely on your freely given, specific, informed, and unambiguous opt-in consent. You may withdraw this consent at any time without detriment to your Account status or the gaming services available to you.

got24 does not sell, rent, or trade your personal data to any third party for that party's own commercial purposes. We share your data only in the following limited circumstances:

• Licensed Game Studio Partners: We share the minimum necessary gameplay session data with Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, Habanero, and Spribe to enable game delivery, dispute resolution, and RNG certification compliance. These studios are bound by strict data processing agreements and may not use your data for any other purpose.
• Payment Service Providers: We share necessary financial data (name, account number, transaction amount in IDR) with the payment gateways and banking partners facilitating your deposits and withdrawals. These include the relevant processing networks associated with BCA, BRI, BNI, Mandiri, and supported e-wallet providers.
• KYC and Identity Verification Providers: We may engage specialized identity verification service providers to assist with document authentication and age verification. These providers process your KYC documents solely for the verification purpose and are contractually prohibited from retaining or repurposing your documents.
• Responsible Gaming Services: With your consent, or where required by our license conditions, we may share your Account status with recognized responsible gaming databases to give effect to self-exclusion requests.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to regulators, law enforcement agencies, courts, or other competent authorities where we are legally compelled to do so, where disclosure is necessary to protect the rights, property, or safety of got24 or its Members, or where we are required to do so under our gaming license conditions.
• Corporate Transactions: In the event of a merger, acquisition, reorganization, or sale of all or substantially all of got24's assets, your personal data may be transferred to the acquiring entity, provided that the acquiring entity agrees to process your data in accordance with this Privacy Policy and applicable data protection law.

got24 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and our gaming license conditions. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely and permanently deleted from got24's systems and those of any Data Processors holding the data on our behalf, unless a longer retention period is required by a specific legal obligation that arises prior to the scheduled deletion.

got24 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction:

• Transport Encryption: All data transmitted between your device and the Platform is encrypted using 256-bit TLS (Transport Layer Security). Our SSL certificate is maintained at all times and covers every page of the Platform, including the login, deposit, withdrawal, and KYC document upload pages.
• Data at Rest Encryption: Personal data, KYC documents, and financial records stored on got24's servers are encrypted at rest using AES-256 encryption. Encryption keys are managed under a strict key management policy with access restricted to authorized personnel only.
• Access Controls: Access to systems containing personal data is restricted on a need-to-know basis using role-based access control (RBAC). All staff with access to personal data undergo background screening and regular data protection training. Access events are logged and subject to periodic audit.
• Two-Factor Authentication (2FA): got24 strongly recommends that all Members enable 2FA on their Account. 2FA is mandatory for all got24 staff accessing internal systems containing Member data.
• Penetration Testing: The Platform's security infrastructure undergoes periodic independent penetration testing. Identified vulnerabilities are remediated according to a risk-prioritized patching schedule.
• Incident Response: got24 maintains a documented data breach response plan. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, got24 will notify you without undue delay via the email address registered to your Account.

got24 uses cookies and similar tracking technologies on the Platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your authenticated login session, store your wallet currency (IDR), and preserve game state across pages. These cookies cannot be disabled without preventing you from using the Platform.
• Performance and Analytics Cookies: These cookies collect anonymized information about how Members navigate the Platform — for example, which game categories are most visited, which pages generate the most support inquiries, and how long a typical session lasts. This data is used to improve the Platform's performance and user experience. No personally identifiable information is transmitted via these cookies.
• Functional Cookies: These cookies remember your Platform preferences, such as your preferred language, display settings, and whether you have previously dismissed certain in-Platform notifications.
• Targeting and Marketing Cookies (opt-in only): Where you have given your explicit consent to receive personalized promotional communications, targeting cookies help us ensure that promotional content displayed on the Platform is relevant to your interests and gaming history. You may withdraw consent for targeting cookies at any time from the Cookie Preferences panel in your Account settings.

Most web browsers allow you to control cookies through the browser's settings. Disabling strictly necessary cookies will impair or prevent your ability to use the Platform. Disabling performance, functional, or targeting cookies will not prevent you from accessing or using the Platform's core gaming features.

got24 respects your rights as a data subject. Depending on the applicable data protection framework, you may hold the following rights in relation to your personal data held by got24:

• Right of Access: You have the right to request a copy of the personal data that got24 holds about you, along with information about how it is being used. got24 will respond to a verified access request within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact information directly from your Account settings. For identity and KYC data corrections, contact the support team.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where you believe processing is unlawful. Note that we cannot delete data we are legally required to retain (see Clause 8), including KYC and financial transaction records.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes, where you believe your individual circumstances override got24's legitimate interest. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, targeting cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Subject Rights Request — [Your Account Username]". got24 will verify your identity before processing the request and will respond within 30 days of receiving a complete, verified request. There is no fee for exercising your rights under standard circumstances.

The got24 Platform is strictly intended for adults aged 21 and over. got24 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted during the KYC process, and any Account found to be registered by a person under 21 will be immediately suspended and all associated personal data will be deleted (to the extent not required to be retained under legal obligations) following the closure of the Account.

Parents and guardians in Indonesia are encouraged to use internet filtering and parental control software to prevent underage individuals from accessing online gambling services. If you believe that a minor has registered an Account with got24 or that got24 has inadvertently collected personal data from a person under 21, please notify us immediately at [email protected]. We will investigate and take appropriate action promptly.

The got24 Platform integrates services from licensed third-party providers — including game content studios (Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, Habanero, Spribe) and payment processors — to deliver our full range of products. Where your data is shared with these providers, it is shared solely under contractual data processing agreements that restrict use to the specific purpose for which the data was shared.

got24 is not responsible for the privacy practices of any third-party service providers operating under their own independent data controller status. Where our Platform links to external content (for example, sportsbook data feeds for BRI Liga 1, EPL, UEFA Champions League, or AFF Cup markets), you should review the privacy policies of those external services independently. However, please note that the got24 Platform itself does not include outbound links to third-party websites that are not part of got24's own service infrastructure.

got24 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory requirements, or improvements to our platform and services. When material changes are made, we will notify active Members via the email address registered to their Account and/or via a prominent notice within the Platform upon their next login.

The revised Privacy Policy will specify the updated effective date at the top of the document. Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment that you have read the updated policy and that you accept the changes to the extent permitted by applicable law.

The most current version of this Privacy Policy is always accessible at got24.bio/privacy-policy. We recommend that you review this page periodically to remain informed of any updates. Archived versions of previous policies are available upon request by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a complaint about the way in which got24 has handled your personal data, please contact us using the following channels:

• 24/7 Live Chat: Available inside the got24 Platform immediately after login. Indonesian-speaking agents are on every shift and can handle both general privacy inquiries and urgent data security concerns.
• Email: [email protected] — please note that this is a plain-text address and should be typed manually into your email client. Use the subject line "Privacy Inquiry — [Your Account Username]" for general questions or "Data Subject Rights Request — [Your Account Username]" for formal rights requests. Response within 1 hour during WIB business hours; within 4 hours at other times.

got24 takes all privacy complaints seriously. If you submit a formal complaint and are not satisfied with our response, you may refer the matter to the relevant data protection authority in your jurisdiction, or to the Alternative Dispute Resolution (ADR) body designated by got24's licensing authority, as set out in our Terms & Conditions.