Your privacy matters to gaco88. This policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and the rights you hold over your own information.
Every connection to gaco88 is protected by industry-standard TLS/SSL encryption. No personal data, payment detail, or session credential is transmitted in plain text at any point.
gaco88 does not sell, rent, or trade your personal data to third-party advertisers. Data is shared only with regulated service providers directly necessary to operate the Platform — and under strict contractual data-protection obligations.
Personal and financial records are stored on access-controlled servers with encrypted at-rest storage. Access is restricted to authorised personnel on a strict need-to-know basis.
We collect only the data that is genuinely necessary to operate your account, process transactions, and meet our licensing obligations. We do not harvest or retain data beyond what these purposes require.
You have the right to access, correct, and request deletion of your personal data. Requests can be submitted to our compliance team at any time and are handled within 30 days of receipt.
gaco88 retains personal data only for as long as required by our licensing obligations and applicable law — typically seven years for financial records. Data beyond retention requirements is securely deleted or anonymised.
This Privacy Policy applies to all personal data processed by gaco88 in connection with the operation of its online betting and casino platform at https://gaco88.cam and any related mobile or sub-domain interfaces (collectively, the "Platform"). It covers data collected from registered players, prospective registrants who initiate but do not complete registration, and visitors who browse the Platform without holding an account.
The data controller responsible for your personal data is the legal entity operating gaco88 under its international offshore gaming licence. Where this Policy refers to "gaco88", "we", "us", or "our", it refers to that entity. Where it refers to "you" or "Player", it means any natural person whose personal data is processed pursuant to this Policy.
Indonesia Market Note: gaco88 directs its services specifically toward English-preference players resident in Indonesia. Where Indonesian law imposes data-protection obligations on operators serving Indonesian residents — including provisions of Government Regulation No. 71 of 2019 on the Implementation of Electronic Systems and Transactions — gaco88 endeavours to align its data practices accordingly, to the extent practicable given its international licensing structure.
The categories of personal data we collect, and the specific data points within each category, are set out in the table below.
| Category | Data Points Collected |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP, passport, or driving licence number), and a copy of the relevant identity document submitted during KYC verification. |
| Contact Data | Email address, WhatsApp or mobile phone number, and — where voluntarily provided — a city or region of residence (e.g., Jakarta, Surabaya, Bandung, Bali). |
| Account & Login Data | Username, hashed password, account registration date, last login timestamp, and device/browser fingerprint associated with login sessions. |
| Financial Data | Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), e-wallet identifier (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR, deposit and withdrawal timestamps, and KYC source-of-funds documentation where requested. |
| Wagering & Game Data | Bet history, game session logs, stake amounts in Rp, win/loss records, togel (Indonesia's traditional numbers lottery) ticket selections, and sports markets accessed. |
| Technical & Device Data | IP address, device type and operating system, browser type and version, screen resolution, session duration, pages visited, and referring URL. |
| Communications Data | Records of live chat conversations, WhatsApp messages, and email correspondence with gaco88 customer support or compliance teams. |
| Responsible Gaming Data | Self-imposed deposit limits, session time limits, cooling-off period requests, and self-exclusion applications. |
gaco88 collects personal data through the following channels:
gaco88 processes personal data only where at least one of the following lawful bases applies:
The personal data gaco88 collects is used for the following specific, documented purposes:
No Automated Decision-Making with Legal Effect: gaco88 does not use fully automated processing — without any human review — to make decisions that produce a legal or similarly significant effect on you, such as permanently closing your account or withholding a withdrawal. Where automated tools flag a concern, a trained compliance officer reviews the case before any material decision is finalised.
gaco88 does not sell, rent, or trade your personal data. We share data only in the following limited circumstances, and only to the minimum extent necessary:
| Recipient | Purpose & Safeguards |
|---|---|
| Payment Processors | Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data required to authorise and settle transactions. These entities operate under their own data-protection frameworks and applicable Indonesian financial regulation. |
| KYC & AML Providers | Third-party identity verification and sanctions-screening services receive identity document data and biographical information solely to fulfil our KYC obligations. Contracts with these providers include strict data-processing restrictions and confidentiality obligations. |
| Game Studios & RNG Auditors | Game content providers (e.g., Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft) may receive anonymised session-level data for game audit and certification purposes. These providers do not receive personally identifiable information beyond what is technically embedded in an anonymised session token. |
| Cloud Infrastructure Providers | gaco88 uses reputable international cloud hosting providers to store and process Platform data. These providers are engaged under data-processing agreements that mandate encryption, access controls, and audit rights. |
| Regulatory & Law Enforcement Authorities | We will disclose personal data to our licensing authority, law enforcement agencies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to prevent or investigate serious criminal activity including fraud or money laundering. |
| Business Successors | In the event of a merger, acquisition, or sale of the Company or a material part of its business, player account data may be transferred to the acquiring entity under equivalent data-protection commitments. |
gaco88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods mandated by our licensing authority and applicable law. The key retention periods are as follows:
Upon expiry of the applicable retention period, data is securely deleted using industry-standard erasure methods, or permanently anonymised such that re-identification is not reasonably practicable.
gaco88 implements a layered set of technical and organisational security controls to protect personal data against unauthorised access, accidental loss, destruction, or alteration:
Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, gaco88 will notify affected players and, where required, the relevant supervisory authority, within the timeframes prescribed by applicable law. Notifications will be sent to the email address registered on your account.
gaco88 uses cookies and similar tracking technologies to operate the Platform correctly, maintain your session, and gather anonymised usage analytics. The cookies we deploy fall into the following categories:
| Cookie Type | Purpose & Duration |
|---|---|
| Strictly Necessary | Required for the Platform to function — session authentication, CSRF protection tokens, load-balancing identifiers. Cannot be disabled without breaking core functionality. Session-scoped or up to 24 hours. |
| Functional | Remember your preferences such as preferred language display, last visited game category, and responsible gaming settings you have applied. Persistent — up to 12 months. |
| Analytics | Anonymised data on page visits, session duration, and navigation paths used to improve Platform performance and content. Data is aggregated and not linked to your identity. Persistent — up to 12 months. |
| Security | Device fingerprinting and fraud-detection identifiers that help us recognise and block suspicious login attempts or account takeover patterns. Session-scoped or up to 30 days. |
Most web browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will impair or prevent use of the Platform. Disabling functional or analytics cookies will not affect your ability to place bets or access your account, but may reduce the personalisation of your experience.
As a gaco88 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our compliance team using the details in Clause 14. We will respond within 30 days of receiving a valid request, or notify you if a 30-day extension is required for complex cases.
The gaco88 Platform is strictly for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process — no withdrawal will be approved without confirmation that the account holder meets the minimum age requirement.
If gaco88 discovers or reasonably suspects that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all pending withdrawals frozen, and the matter referred for investigation. Any Wallet Balance accumulated by an underage player will be forfeited, and the account will be permanently closed.
Parental Notice: If you believe a minor in your household has registered or attempted to register on gaco88, contact our support team immediately at [email protected]. We will act promptly to investigate and close any such account. We encourage parents and guardians to use device-level parental controls and content-filtering software to prevent underage access to gambling platforms.
As an internationally licensed platform, gaco88 may store and process your personal data on servers located outside Indonesia. Specifically, data may be transferred to and processed in the jurisdiction where the Company holds its gaming licence, and in the jurisdiction(s) where our cloud infrastructure and KYC service providers operate.
Where personal data is transferred outside Indonesia, gaco88 ensures that appropriate safeguards are in place to protect it to a standard at least equivalent to that required under the laws of Indonesia. These safeguards include contractual data-processing agreements with recipients that incorporate data-protection obligations, technical security measures, and audit rights. By registering an account with gaco88 and accepting these policies, you acknowledge and consent to such cross-border transfers on the basis described herein.
gaco88 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or Platform functionality. When material changes are made, we will:
Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should discontinue use of the Platform and request account closure through our customer support team.
For all privacy-related enquiries, data subject access requests, or complaints regarding how gaco88 handles your personal data, please contact our Data Protection and Compliance team through any of the following channels. All contact details are provided as plain text — please do not attempt to submit legal requests via live chat alone; written correspondence via email is required for formal data subject requests.
This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions. By continuing to use the gaco88 Platform after this date, you confirm your understanding and acceptance of this Policy.
Your privacy and security are central to everything we do at gaco88. For a complete picture of how we operate, review our Terms & Conditions, explore our Responsible Gaming tools, or visit our FAQ for quick answers. Adults only — 21+ strictly enforced.