gebi Platform Privacy Notice

This page describes what we collect when you use gebi and how we keep that data protected. Our privacy practices focus on transparency—we explain which information we gather, how long we store it, and who may access it. We do not sell your personal data to third parties; we use it only for account management, compliance, fraud detection, and customer support.

We at gebi operate under Indonesian data-protection principles and comply with applicable regulations in supported jurisdictions. Our servers may be located outside your country; however, all data transfers use encrypted connections and follow security standards. If you have questions about how your data is handled, our Help Center and support team are available to clarify.

Your privacy on gebi matters to us. This notice explains the types of data we collect, how we use them, your rights, and how to contact us about your information.

What Data We Collect on gebi

We at gebi collect information in several categories. During registration, we collect your email address, chosen username, password (stored as an encrypted hash), and phone number for verification. When you complete KYC verification, we collect a copy of your government ID (KTP, passport, or driver's license), a selfie, and address proof (utility bill or official letter). We also record your full legal name, date of birth, and residential address as stated in your verification documents.

During gameplay and betting, we log every action: sportsbook bets placed (Liga 1 matches, Piala AFF tournaments, Champions League fixtures, Premier League markets), casino table sessions (blackjack, roulette, baccarat, Dragon Tiger), slot spins (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports market activity (Mobile Legends, Free Fire, PUBG Mobile). These logs include timestamps, stake amounts, outcomes, and balance changes. We retain this transaction history for a minimum of 7 years for regulatory compliance.

When you deposit or withdraw, we record your payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), transaction reference numbers, amounts, and processing dates. We also collect your IP address, device type, and browser information when you log in. This technical data helps us detect fraud and unusual account access patterns.

Data storage: We store your personal data on encrypted servers. Account information and transaction history are kept for a minimum of 7 years; you may request earlier deletion subject to legal retention requirements.

How We Use Your Data on gebi

We use your data for these purposes: account management (verifying your identity, processing deposits and withdrawals, managing your balance), customer support (answering your questions, resolving disputes, handling account recovery requests), fraud detection (monitoring for suspicious patterns, preventing duplicate accounts, identifying money-laundering indicators), and compliance (meeting regulatory obligations, responding to legal requests from authorities).

We do not use your data for marketing email campaigns without explicit consent. If you choose to receive updates about new games or tournament schedules, you may opt in during account settings; you can unsubscribe at any time.

We may share your data with payment processors (your bank or e-wallet provider) only to complete deposits and withdrawals. We may also share limited information with law enforcement or regulatory bodies if required by legal process. We do not sell your data to advertisers, data brokers, or third-party marketers.

Cookies: We use session cookies to keep you logged in and functional cookies to remember your preferences. These expire after logout or after subject to verification of inactivity.
Encryption: All communication between your device and our servers uses SSL/TLS encryption. Passwords are hashed with bcrypt; we never store plaintext credentials.
Third-party access: We share data only with payment processors and legal authorities. We do not sell data to external marketers or data brokers.
Retention: We retain transaction records for 7 years; account metadata is kept for the duration of your account plus 1 year after closure.

Your Rights and Data Protection on gebi

We at gebi allow you to access, update, and request deletion of your personal data. To review your account information, log in to your gebi dashboard and select "Account Settings." You can update your email address, phone number, and password directly. To request a complete data export (all your information in machine-readable format), contact our support team via the Help Center; we will respond within 5 business days.

To request deletion of your account and associated data, submit a closure request through your account settings or email our support team. We will close your account within 1 business day. However, we retain transaction records for 7 years as required by financial regulations; we cannot delete these unless required by a court order.

We undertake to protect your data against unauthorised access, alteration, or loss. Our infrastructure includes firewalls, intrusion-detection systems, and regular security audits. However, no online system is completely secure; if you detect a data breach or unauthorised access to your account, contact us immediately via email from the Help Center.

Your Account Recovery and Privacy

If you forget your password, we send a password-reset link to your registered email address. This link is valid for 1 hour and includes a secure token. If you cannot access your email, we may request additional verification (such as a selfie matching your KYC ID) before issuing a reset.

If your account is compromised—you detect unauthorized transactions or login attempts—contact our support team immediately. We will freeze your account and guide you through secure recovery. We may ask you to reverify your identity using your KYC documents.

Regional holidays such as Idul Fitri, Idul Adha, and Imlek may affect data-processing timelines. Account recovery and data-export requests submitted during these periods may experience delays; we respond within 1–2 business days after normal operations resume.

Contact and Data Inquiries

For questions about our privacy practices, data requests, or account privacy concerns, contact our support team via the Help Center form or email. We respond in English and Indonesian within 1–2 business days. You may also submit a formal data subject access request specifying what information you wish to review; we will respond within 5 business days with your complete data file.

If you believe we have mishandled your data or violated your privacy rights, you may file a complaint with our support team. Unresolved complaints may be escalated through the formal dispute process outlined in our Terms and Conditions or forwarded to relevant data-protection authorities in your jurisdiction.

We collect registration data (email, password, phone), KYC documents (ID, address proof, selfie), and transaction records (all bets, deposits, withdrawals).
We use this data for account management, fraud detection, compliance, and customer support—never for marketing without your consent.
We encrypt all data in transit (SSL/TLS) and at rest; passwords use bcrypt hashing.
We retain transaction records for 7 years per financial regulations; account data is kept for account duration plus 1 year.
You may access, update, or request deletion of your personal data through account settings or by contacting our support team.
We do not sell your data to third parties; we share data only with payment processors and legal authorities when required.
For privacy questions or data requests, email our support team via the Help Center in English or Indonesian.

We at gebi review and update this privacy notice periodically as our practices evolve. Material changes are communicated to your registered email address at least 30 days in advance. Continued use of gebi after such notice signifies your acceptance of the updated privacy policy.