Privacy Policy

Introduction

gcor25 operates an online gambling platform at https://gcor25.cam, providing sports betting, live casino games, slot entertainment, and lottery-style games including togel (Indonesia's traditional numbers lottery) to users across Indonesia and other permitted jurisdictions. The collection and processing of personal data is essential to delivering these services securely, maintaining regulatory compliance, and preventing fraud.

This Privacy Policy applies to all personal information collected through the gcor25 website, mobile-optimized interface, customer support channels (email, live chat), and any other touchpoint where you interact with gcor25 as a registered or prospective user. By accessing the platform or registering an account, you acknowledge that you have read, understood, and agree to the data practices described in this policy.

This policy does not apply to third-party websites or services that may be linked from the gcor25 platform. We recommend reviewing the privacy policies of any external sites you visit through our platform, as we are not responsible for their data handling practices.

Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is the operating entity behind gcor25. We determine the purposes for which, and the manner in which, your personal data is processed in connection with your use of the platform.

All data protection queries, requests to exercise privacy rights, and complaints should be directed to our Data Protection Officer via the contact details provided in Section 15 of this policy. We aim to respond to all data subject requests within 30 calendar days of receipt, though complex requests may take longer. You will be informed if an extension is necessary.

Information We Collect

gcor25 collects personal information from multiple sources and at various stages of your interaction with the platform. The categories of data we collect include:

3.1 Registration Data: When you create an account, we collect your full legal name, date of birth, residential address (street, city, postal code), country of residence, email address, mobile phone number, preferred username, password (stored in hashed form), and preferred currency. This information is mandatory to establish your account and verify your identity.

3.2 Identity Verification (KYC) Data: To comply with anti-money laundering (AML) regulations and licensing requirements, we collect government-issued identification documents including National Identity Card (KTP for Indonesian residents), passport, or driver's license. We may also collect proof of address documents (utility bills, bank statements dated within 90 days) and, where relevant, proof of payment method ownership (bank account statements, e-wallet screenshots). Digital copies of these documents are securely stored and accessible only to authorized compliance personnel.

3.3 Financial Data: We collect payment method details necessary to process deposits and withdrawals, including bank account numbers (for BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata), e-wallet phone numbers or account identifiers (for OVO, DANA, GoPay, ShopeePay), and transaction reference numbers. We do not store full credit or debit card numbers; card transactions are processed via PCI-DSS compliant payment gateways that tokenize sensitive cardholder data.

3.4 Transaction History: We maintain a complete record of all financial transactions on your account, including deposit amounts and timestamps, withdrawal requests and processing status, bet placements and outcomes, bonus credits and wagering progress, and internal account transfers. This data is retained to provide you with accessible transaction history, support dispute resolution, and meet regulatory record-keeping obligations.

3.5 Behavioral and Usage Data: We automatically collect information about how you use the gcor25 platform, including login timestamps and IP addresses, device type and operating system (Android, iOS, Windows, macOS), browser type and version, pages visited and time spent on each page, betting patterns (sports preferred, average stake size, game types played), session duration, and referral source (how you found gcor25). This data helps us understand user preferences, improve platform performance, detect suspicious activity, and personalize promotional offers.

3.6 Communications Data: Records of your interactions with gcor25 customer support — including email correspondence, live chat transcripts, and phone call recordings (where permitted and with prior notice) — are retained for quality assurance, staff training, and dispute resolution purposes. All support communications are stored securely and treated as confidential.

3.7 Marketing Preferences: We record your consent status for receiving promotional communications via email, SMS, or push notification, including the date consent was given or withdrawn and the communication channels you have opted into or out of.

How We Use Your Data

gcor25 processes your personal information for the following specific purposes, each of which is necessary to deliver a secure, compliant, and personalized gambling experience:

• Account Management: Creating and maintaining your user account, authenticating your identity on each login, enabling password resets, and processing account closure requests.
• Transaction Processing: Facilitating deposits, withdrawals, and currency conversions (where applicable), verifying payment method ownership to prevent fraud, and maintaining accurate financial records of all account activity.
• Regulatory Compliance: Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by international gaming regulations, verifying that you meet the minimum age requirement of 21 years, monitoring transactions for suspicious activity patterns, and producing reports for licensing authorities and financial crime prevention agencies.
• Fraud Prevention & Security: Detecting and preventing unauthorized account access, identifying patterns consistent with bonus abuse or collusive behavior, blocking access from prohibited jurisdictions or sanctioned individuals, and investigating disputes, chargebacks, and suspected policy violations.
• Platform Improvement: Analyzing user behavior to identify popular games and features, testing new product offerings and interface designs, optimizing mobile responsiveness and load times, and resolving technical issues reported by users.
• Customer Support: Responding to queries submitted via email or live chat, investigating bet settlement disputes or withdrawal delays, providing technical assistance with account access or payment issues, and escalating complaints to management when necessary.
• Marketing & Personalization: Sending promotional emails about new game launches, bonus offers, and special events (only where you have consented), personalizing the homepage and game recommendations based on your past activity, and conducting customer satisfaction surveys to improve service quality.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling behavior, enforcing deposit limits and self-exclusion periods set by you, providing access to gambling support resources, and preventing underage access to the platform.

Legal Basis for Processing

Under applicable data protection laws, gcor25 must have a lawful basis for processing your personal information. We rely on the following legal grounds:

Data Sharing & Third Parties

gcor25 does not sell your personal data to third parties for independent marketing purposes. However, we do share your information with carefully selected third-party service providers and partners in the following circumstances:

All third-party service providers are contractually bound to process your data only for the specified purposes, maintain equivalent security standards, and comply with applicable data protection laws. We conduct regular audits of key partners to ensure ongoing compliance.

International Data Transfers

The gcor25 platform operates using cloud infrastructure and third-party services that may be located outside of Indonesia. This means that your personal data may be transferred to, and processed in, countries with different data protection standards than those in Indonesia.

Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by relevant data protection authorities, adequacy decisions recognizing equivalent protection in the destination country, or binding corporate rules that enforce consistent data protection standards across all processing locations.

For Indonesian residents, please note that Indonesia does not currently have a comprehensive national data protection law equivalent to the European Union's GDPR, though the Personal Data Protection Law (UU PDP) is in the process of implementation. gcor25 voluntarily adheres to international best practices in data protection, treating all users to the same high standards regardless of jurisdiction.

Data Retention

gcor25 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Our standard retention periods are as follows:

• Account Data (Active Accounts): Retained for the duration of your account's active status plus 30 days following account closure to allow for final transaction settlement and dispute resolution.
• Transaction Records: Retained for a minimum of 7 years from the date of the transaction to meet anti-money laundering and tax reporting obligations. This applies even after account closure.
• KYC Documents: Retained for 7 years from account closure or the date of the last verification check, whichever is later, to satisfy regulatory audit requirements.
• Marketing Communications: Consent records and opt-out requests are retained indefinitely to ensure we do not inadvertently contact you after you have withdrawn consent.
• Support Communications: Chat transcripts and email correspondence are retained for 3 years to support quality assurance, training, and dispute resolution processes.
• Usage Analytics: Aggregated, anonymized analytics data may be retained indefinitely for statistical and product development purposes. Individual-level behavioral data is pseudonymized and retained for 24 months.
• Fraud Investigation Records: Data related to accounts flagged for fraud, bonus abuse, or other policy violations is retained indefinitely to prevent re-registration and protect platform integrity.

Once retention periods expire, personal data is securely deleted or anonymized such that it can no longer identify you as an individual. Deletion is carried out in accordance with industry best practices, including secure overwriting of digital storage media.

Security Measures

gcor25 employs a comprehensive suite of technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and gcor25 servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (including passwords, financial details, and KYC documents) is encrypted using AES-256 encryption standards.
• Access Controls: Access to personal data is restricted to authorized gcor25 personnel on a strict need-to-know basis. All staff members with data access undergo background checks, sign confidentiality agreements, and receive regular data protection training.
• Authentication: User accounts are protected by password authentication with minimum complexity requirements (8+ characters, mixed case, numbers, special characters). We strongly recommend enabling two-factor authentication (2FA) for additional security, though this is currently optional.
• Firewall & Intrusion Detection: Our network perimeter is protected by enterprise-grade firewalls and intrusion detection systems that monitor for and block suspicious access attempts in real-time.
• Regular Security Audits: The gcor25 platform undergoes regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms. Critical vulnerabilities are remediated within 24 hours of discovery.
• Secure Development Practices: All platform code is subject to security review before deployment. We follow OWASP (Open Web Application Security Project) guidelines to prevent common vulnerabilities including SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF).
• Incident Response: In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant data protection authorities within 72 hours, in accordance with applicable breach notification laws.

Cookies & Tracking Technologies

gcor25 uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, personalize content, and analyze platform usage. A cookie is a small text file stored on your device that allows the website to recognize you on subsequent visits.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functionality including maintaining your logged-in session, remembering your language preference, and processing bets. These cookies cannot be disabled without severely impairing platform usability.
• Performance Cookies: Collect anonymous information about how you use the site (pages visited, links clicked, time on page) to help us identify technical issues and improve navigation. These cookies do not identify you personally.
• Functional Cookies: Remember your preferences such as preferred odds format, favorite games, and recently played titles to provide a more personalized experience. Disabling these cookies may reduce personalization but will not affect core functionality.
• Advertising Cookies: Track your activity across websites to deliver targeted promotional content relevant to your interests. gcor25 does not currently use third-party advertising networks, but we may use first-party advertising cookies to personalize bonus offers shown on the platform.

Managing Cookies: You can control cookie settings through your browser preferences. Most browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies. Please note that blocking essential cookies will prevent you from logging into your gcor25 account. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation.

Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data. gcor25 honors these rights globally as a matter of best practice, even where not legally required:

• Right of Access: You may request a copy of all personal data we hold about you, including account details, transaction history, and KYC documents. We will provide this information in a commonly used electronic format within 30 days.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you may request that we correct it. For most account information (email, address, phone number), you can make updates directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that we cannot delete data we are legally required to retain (transaction records, KYC documents) until retention periods expire.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your data while we verify its accuracy or assess your objection to processing.
• Right to Data Portability: You may request a machine-readable copy of your personal data to transfer to another service provider. This right applies to data you provided to us under a contract or with consent.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time. We will cease marketing communications immediately upon receiving your objection. You may also object to processing based on legitimate interests, though we may continue processing if we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (marketing, optional analytics), you may withdraw that consent at any time via account settings or by contacting support. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
• Right to Lodge a Complaint: If you believe gcor25 has mishandled your personal data, you have the right to lodge a complaint with your local data protection authority. For Indonesian residents, complaints may be directed to the Ministry of Communication and Information Technology (Kominfo) once the PDP Law enforcement framework is fully operational.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 15. We may request additional information to verify your identity before processing your request, particularly for access and deletion requests.

Protection of Minors

gcor25 strictly prohibits access by individuals under the age of 21. We do not knowingly collect personal information from minors, and our registration process requires users to confirm they meet the minimum age requirement. Age verification is conducted through KYC document checks before any withdrawal is processed.

If we become aware that a user has provided false age information or that a minor has accessed the platform, we will immediately suspend the account, void all bets, confiscate any winnings, and return deposits where legally permissible. Parents and guardians are encouraged to use device-level parental control software to prevent minors from accessing gambling websites.

If you have reason to believe a minor has registered on gcor25, please contact our support team immediately so we can investigate and take appropriate action. Reports of underage gambling are treated with the highest priority and investigated within 24 hours of receipt.

Marketing Communications

With your consent, gcor25 may send you promotional communications about new game releases, exclusive bonus offers, VIP program updates, and special seasonal promotions tied to Indonesian cultural events including Idul Fitri, Ramadhan, Nyepi, and Indonesian Independence Day (17 August). Marketing communications are delivered via email, SMS, or push notification (where you have installed our mobile web app).

You can manage your marketing preferences at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email
• Replying "STOP" to any promotional SMS message
• Adjusting notification settings in your account preferences
• Contacting customer support to request removal from all marketing lists

Please note that unsubscribing from marketing communications will not prevent us from sending essential transactional messages related to your account, such as deposit confirmations, withdrawal status updates, security alerts, and important changes to our Terms & Conditions or Privacy Policy. These messages are necessary to maintain your account and are not subject to marketing consent.

Changes to This Privacy Policy

gcor25 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where amendments are material — meaning they substantively affect how we collect, use, or share your personal data — we will provide advance notice via email to your registered address and/or a prominent notification on the platform homepage.

The "Last updated" date at the top of this page reflects the date of the most recent revision. We recommend reviewing this policy periodically to stay informed about how we protect your information. Continued use of the gcor25 platform following any policy update constitutes your acceptance of the revised policy.

If you do not agree with an updated Privacy Policy, your remedy is to cease using the platform and contact support to arrange account closure before the new policy takes effect. We will honor the previous policy for any data collected before the effective date of the amendment.

Contact Information & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or want to lodge a complaint about how we have handled your personal information, please contact our Data Protection Officer:

We aim to respond to all data protection enquiries within 30 calendar days, though complex requests may require an extension of up to an additional 60 days. You will be informed if an extension is necessary and the reasons for the delay.

If you are not satisfied with our response to your data protection request or complaint, you have the right to escalate the matter to your local data protection supervisory authority. For Indonesian residents, once the Personal Data Protection Law (UU PDP) enforcement framework is fully operational, complaints may be directed to the designated data protection authority under that legislation.