Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by gem365 through our website at https://gem365.cam, our mobile-optimized platform, and all associated gaming services. gem365 is the data controller responsible for your personal information. We operate internationally and serve users primarily in Indonesia, processing data in accordance with international data protection standards and applicable Indonesian regulations.

This policy should be read in conjunction with our Terms & Conditions, which govern your use of our platform. For information about our commitment to fair and responsible gaming practices, please refer to our Responsible Gaming page.

2. Information We Collect

gem365 collects several types of information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and deliver a personalized gaming experience.

2.1 Information You Provide Directly

When you register an account with gem365, we collect the following personal information:

• Identification Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP number, passport number, or driver's license number).
• Contact Information: Email address, phone number (mobile), residential address including city and postal code.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers if configured.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja account identifiers), payment card information if provided, and transaction history.
• Verification Documents: Photographs or scans of government-issued identification documents, proof of address documents (utility bills, bank statements), and selfie photographs for identity verification purposes.
• Communication Data: Records of your communications with our customer support team, including live chat transcripts, email correspondence, WhatsApp messages, and any feedback or survey responses you provide.

2.2 Information Collected Automatically

When you access and use gem365, we automatically collect certain technical information:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, advertising ID), and hardware model.
• Connection Information: IP address, internet service provider, connection type (mobile data, Wi-Fi), approximate geographic location based on IP address (city-level, not precise coordinates), and timezone settings.
• Usage Information: Pages visited, features accessed, games played, bet amounts and outcomes, session duration, timestamp of activities, referral sources, and navigation patterns within our platform.
• Cookie Data: We use cookies and similar tracking technologies (described in detail in Section 9) to collect information about your browsing behavior, preferences, and interactions with our services.

2.3 Information from Third Parties

In some circumstances, we may receive information about you from third parties, including payment processors who provide transaction confirmation data, identity verification services that confirm the authenticity of provided documents, fraud prevention services that supply risk assessment data, and game providers who report technical issues or unusual activity patterns.

3. How We Use Your Information

gem365 uses your personal information for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Creating, maintaining, and administering your player account
• Processing deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallets
• Providing access to sports betting, casino games, slot games, and lottery services
• Recording and tracking your gaming activity, bets placed, and winnings
• Managing bonus promotions, loyalty programs, and VIP tier benefits
• Processing and responding to your customer support inquiries

3.2 Security and Fraud Prevention

• Verifying your identity and age (21+ requirement enforcement)
• Detecting and preventing fraudulent transactions, money laundering, bonus abuse, and account takeovers
• Monitoring for unusual betting patterns, collusion with other players, or use of automated betting software
• Ensuring compliance with our Terms & Conditions and responsible gaming policies
• Protecting the security and integrity of our platform against cyber attacks and unauthorized access

3.3 Legal and Regulatory Compliance

• Complying with applicable laws, regulations, and licensing requirements in jurisdictions where we operate
• Responding to legal requests from law enforcement agencies or courts
• Maintaining records required by anti-money laundering (AML) regulations
• Conducting internal audits and compliance reviews
• Reporting suspicious activity to relevant authorities when legally required

3.4 Communication and Marketing

• Sending transactional communications (account confirmations, deposit receipts, withdrawal notifications, password reset emails)
• Providing customer support through live chat, email, and WhatsApp
• Sending promotional offers, bonus announcements, and news about gem365 services (only with your consent, and you may opt out at any time)
• Conducting customer satisfaction surveys and gathering feedback

3.5 Platform Improvement and Analytics

• Analyzing usage patterns to improve user experience and platform performance
• Testing new features and optimizing existing services
• Personalizing your experience by recommending games you might enjoy
• Generating statistical reports and trend analysis (in aggregated, anonymized form)

4. Information Sharing and Disclosure

gem365 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes described in this policy:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks and financial institutions that facilitate deposits and withdrawals in Indonesian Rupiah through BCA, BRI, BNI, Mandiri, and other local banks, as well as e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Game Providers: Software studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and others who supply casino games, slots, and live dealer experiences. These providers may receive limited information about your gameplay for technical operation and fairness verification.
• Identity Verification Services: Third-party KYC (Know Your Customer) providers that verify the authenticity of your identification documents and check against fraud databases.
• Customer Support Tools: Live chat software providers, email service providers, and CRM (Customer Relationship Management) platforms that help us deliver efficient customer service.
• Data Analytics Providers: Companies that help us analyze user behavior, measure marketing campaign effectiveness, and improve platform performance.
• Security and Fraud Prevention Services: Specialized firms that provide threat detection, risk assessment, and cybersecurity protection.

All service providers are contractually obligated to protect your personal information, use it only for the specific purposes we authorize, and comply with applicable data protection laws.

4.2 Legal Requirements and Protection

We may disclose your personal information if required to do so by law or in good faith belief that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms & Conditions or other agreements
• Investigate potential violations of our policies
• Protect the rights, property, or safety of gem365, our users, or the public
• Respond to claims of fraudulent or illegal activity

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal information.

5. Data Retention

gem365 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

Data Category	Retention Period
Account registration information	Duration of account plus 7 years after closure
Transaction records (deposits/withdrawals)	7 years from transaction date (AML compliance)
Betting history and game logs	7 years from date of activity
Identity verification documents	7 years after account closure
Customer support communications	3 years from last interaction
Marketing consent records	Until consent is withdrawn, then 1 year
Technical logs and analytics data	2 years from collection

After the retention period expires, we securely delete or anonymize your personal information so that it can no longer be associated with you. In some cases, we may retain anonymized data for statistical analysis indefinitely, as it no longer constitutes personal information.

6. Data Security

gem365 takes the security of your personal information seriously and implements robust technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption, the same standard used by major financial institutions.
• Secure Storage: Personal information stored on our servers is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on the principle of least privilege. All employees and contractors with access to personal information are bound by strict confidentiality obligations.
• Authentication: Your account is protected by your chosen password. We strongly recommend using a strong, unique password and enabling two-factor authentication if available.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular security audits conducted by independent third parties.
• Vulnerability Management: We conduct regular security assessments, penetration testing, and vulnerability scans to identify and address potential weaknesses.
• Incident Response: We maintain a comprehensive incident response plan to detect, respond to, and recover from data security incidents.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information using industry-standard measures, we cannot guarantee absolute security. If you believe your account has been compromised, please contact our support team immediately.

7. Your Privacy Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. Much of this information is available directly in your account dashboard, including your profile details, transaction history, and betting records. For a comprehensive data export, please contact our support team.

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update most information directly through your account settings. For changes to verified information (such as name or date of birth), please contact support with appropriate documentation.

7.3 Right to Erasure

You may request deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected. However, this right is not absolute—we may need to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements. Account closure requests can be submitted through customer support.

7.4 Right to Restrict Processing

You may request that we restrict the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to our processing activities.

7.5 Right to Data Portability

Where technically feasible, you have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit this data to another service provider.

7.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account notification preferences, or contacting our support team.

7.7 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days. To protect your privacy, we will verify your identity before processing requests that involve accessing or changing your personal information.

8. International Data Transfers

gem365 operates internationally, and your personal information may be transferred to and processed in countries other than Indonesia. These countries may have data protection laws that differ from Indonesian regulations. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant data protection authorities, to protect your information in accordance with this Privacy Policy.

9. Cookies and Tracking Technologies

gem365 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Necessary for the platform to function. These enable core features like account login, payment processing, and session management. You cannot opt out of these cookies.
• Performance Cookies: Collect information about how you use our platform (pages visited, features used, time spent). This helps us identify and fix technical issues and optimize performance. These cookies do not identify you personally.
• Functional Cookies: Remember your preferences (language settings, layout choices) to provide a more personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising. We use these only with your consent.

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit your ability to use some features of gem365.

10. Children's Privacy

gem365 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21. If we become aware that we have inadvertently collected data from someone under the legal age, we will take immediate steps to delete that information and close the account. If you believe a minor has registered on our platform, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

gem365 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by posting an updated version on this page with a revised "Last Updated" date. For significant changes that materially affect your rights, we may also provide notice through email or a prominent announcement on our platform. Your continued use of gem365 after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us through the following channels:

• Email: [email protected] (plain text only, not a clickable link)
• Live Chat: Available 24/7 directly on our website
• WhatsApp: +62 812 3456 7890 (plain text only, not a clickable link)

Our data protection team will respond to all inquiries within 30 days. We take all privacy concerns seriously and are committed to resolving any issues in a fair and timely manner.