At gala88, we treat the privacy of our Players with the same care we apply to platform security and game integrity. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is stored, who may access it, and what rights you hold over your own information as a registered Player on our platform.
gala88 ("we", "us", "our", "the Platform") is committed to protecting the personal information of every individual who interacts with our platform. We recognise that responsible data handling is a fundamental component of the trust Players place in us, and we take that obligation seriously.
This Privacy Policy is intended to be read alongside our Terms & Conditions and our Responsible Gaming policy. Together, these three documents form the complete framework governing your relationship with gala88.
We process personal data in accordance with internationally recognised data protection principles — including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality. We collect only what we genuinely need, retain it only for as long as necessary, and apply robust technical and organisational safeguards to protect it at every stage of its lifecycle.
For the purposes of this Privacy Policy, gala88 acts as the data controller with respect to all personal data collected from Players registered on the platform. As data controller, gala88 determines the purposes and means of processing personal data and is responsible for ensuring that processing is carried out in accordance with this policy and applicable international data protection standards.
Our designated data protection contact can be reached at [email protected] for all privacy-related enquiries, including requests to exercise your data subject rights as described in Section 12 of this policy.
The personal data gala88 collects falls into the following categories. Each category is collected for specific, documented purposes and is not used beyond those stated purposes without prior notice to you.
This is data that directly identifies you as an individual:
Full legal name Date of birth KTP / passport number Nationality Gender Selfie / photo ID
Information used to communicate with you and deliver account-related notifications:
Email address Mobile phone number Residential address City / province
Data associated with deposits, withdrawals, and transaction history. We do not store full payment card numbers:
Bank account name Bank account number (masked) Bank name (BCA, BRI, BNI, Mandiri, etc.) E-wallet account (OVO, DANA, GoPay, ShopeePay) Transaction amounts & timestamps Deposit / withdrawal history
Records of your activity on the gala88 platform:
Username Account registration date Session history Bet history & game logs Bonus claims & wagering records Responsible gaming tool settings
Data automatically collected through your use of the platform:
IP address Device type & operating system Browser type & version Access timestamps Referring URL (optional)
Personal data reaches gala88 through the following channels. Each collection method is subject to the same security and access controls regardless of the source.
When you create an Account, you provide identity, contact, and financial data directly through our secure registration interface.
During identity verification, you submit document scans (KTP, passport, bank statement, selfie) via the Account dashboard or email.
When you deposit or withdraw funds, your bank or e-wallet provider shares transaction metadata with us.
Your gameplay, bet placement, bonus claims, and session activity generate logs that are automatically recorded.
When you contact our 24/7 Indonesian-speaking support team, your messages and any attachments are stored in our ticketing system.
Cookies, device fingerprints, and server logs capture technical data automatically every time you access the platform.
gala88 processes your personal data only for the following documented, legitimate purposes. We do not repurpose data without notifying you and obtaining any necessary additional consent.
Under internationally recognised data protection principles, every processing activity must have a lawful basis. gala88 relies on the following legal bases for the processing activities described in Section 5:
You have the right to object to processing based on legitimate interests at any time. To exercise this right, contact [email protected] with a clear description of the processing activity you wish to challenge.
gala88 does not sell personal data to third parties for commercial marketing purposes. However, we do share limited personal data with carefully vetted service providers and regulatory authorities under the following circumstances:
Your bank account or e-wallet details are shared with our payment gateway partners solely for the purpose of processing deposits and withdrawals. These partners are contractually bound to use the data only for transaction execution and are prohibited from retaining it beyond the period required for reconciliation.
When you play live dealer games, slots, or other third-party content, your Account ID (but not your full identity data) is passed to the game provider's platform to enable gameplay and maintain bet records. Game providers operate under strict licensing requirements and are audited for data protection compliance.
gala88 may use third-party identity verification tools to cross-check document authenticity and detect fraudulent submissions. Only the data necessary for verification (document image, name, date of birth) is shared, and verification partners are prohibited from using it for any other purpose.
We are legally obligated to disclose personal data to licensing authorities, law enforcement agencies, and financial regulators upon receipt of a valid legal request. Such disclosures are limited to the data explicitly requested and are logged internally for accountability.
In the event of a merger, acquisition, or asset sale involving gala88, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer, and the new data controller will be bound by the commitments made in this Privacy Policy unless you are given the opportunity to opt out.
gala88's data infrastructure spans multiple jurisdictions to ensure redundancy, optimal performance, and regulatory compliance. Your personal data may be transferred to, stored at, or accessed from locations outside Indonesia.
Where data is transferred internationally, we ensure that appropriate safeguards are in place. These safeguards include:
Data stored on servers located in jurisdictions with robust data protection frameworks benefits from those frameworks' protections even where Indonesia- specific law does not apply.
gala88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Retention periods vary by data category:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Identity & KYC Documents | 7 years after account closure | Required by AML and licensing regulations for audit and dispute resolution. |
| Transaction History | 7 years after transaction date | Tax compliance, financial audits, and dispute resolution purposes. |
| Bet & Game Logs | 5 years after account closure | Required for dispute resolution and game integrity audits. |
| Customer Support Records | 3 years after case closure | Service quality improvement and complaint resolution tracking. |
| Technical Logs (IP, session) | 12 months | Security incident investigation and platform performance monitoring. |
| Marketing Consent Records | Until consent is withdrawn | Demonstrable proof of consent under data protection law. |
Once the applicable retention period expires, personal data is either securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical analysis.
gala88 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. Our security framework includes:
gala88 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session state, and collect anonymous usage analytics. Cookies are small text files stored on your device that allow us to recognise you on repeat visits.
gala88 does not use third-party advertising cookies or social media tracking pixels. We do not build cross-site advertising profiles.
You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in to your Account. Instructions for managing cookies in common browsers:
As a registered Player on gala88, you hold the following rights over your personal data. To exercise any of these rights, contact [email protected] with a clear description of your request. We will respond within 30 calendar days.
You may request a copy of all personal data we hold about you, including the sources from which it was obtained and the purposes for which it is processed.
If your personal data is inaccurate or incomplete, you may request that we correct or update it. Some fields can be edited directly via the Account dashboard.
You may request deletion of your personal data where it is no longer necessary for the purposes collected, or where you withdraw consent. Legal retention obligations may override this right.
You may request that we suspend processing of your personal data (for example, while a dispute over accuracy is being resolved).
You may request a machine-readable export of personal data you provided to us, in a structured format suitable for transfer to another service provider.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
To verify your identity before fulfilling a data subject request, we may ask you to provide additional information matching the records on file. This protects against fraudulent requests made by third parties.
gala88 is an adults-only platform. You must be at least 21 years of age to register an Account or use any service offered on this website. We do not knowingly collect personal data from individuals under the age of 21.
If we become aware that a Player under the age of 21 has registered an Account, that Account will be immediately suspended, all associated funds will be returned (minus any bonus funds, which are forfeited), and all personal data will be deleted from our active systems. Parents or guardians who believe a minor has gained unauthorised access to gala88 should contact [email protected] immediately.
Age verification is a mandatory component of our KYC process. We cross-check date-of-birth claims against government-issued identity documents and may use third-party age verification services where document authenticity is in doubt.
The gala88 platform may contain links to external websites operated by payment providers, game studios, or other third parties. This Privacy Policy does not apply to those external sites. We are not responsible for the privacy practices or content of third-party websites.
We recommend reviewing the privacy policies of any external site before providing personal information to them. The presence of a link on gala88 does not constitute an endorsement of that site's data handling practices.
gala88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered Players via email and display a prominent notice on the platform for at least 14 days before the changes take effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. You are encouraged to review this policy periodically to stay informed about how your data is protected.
Continued use of the platform after the effective date of any revision constitutes acceptance of the updated policy. If you do not agree with the changes, you must cease using the platform and may close your Account in accordance with the procedures set out in our Terms & Conditions.
For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact our Data Protection team:
If you believe gala88 has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We encourage you to contact us first so that we may attempt to resolve the matter internally before escalating to a regulatory body.
Data protection at gala88 is built into every layer of our platform — from technical infrastructure to staff training to third-party vendor selection.
Every connection to gala88 is encrypted with the same military-grade encryption used by banks and financial institutions worldwide.
Only authorised personnel with documented job requirements can access Player data. All access is logged and audited quarterly.
We retain data only as long as legally required or operationally necessary. Expired data is securely deleted, not archived indefinitely.
Every third-party processor (payment gateways, KYC providers, game studios) is vetted and bound by data processing agreements.
Independent security firms test our infrastructure for vulnerabilities. Critical findings are patched within 48 hours.
In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours of discovery.
Our Data Protection team is available 24/7 to answer questions, process data subject rights requests, and address privacy concerns. You can also review our Terms & Conditions and Responsible Gaming policies for a complete understanding of how gala88 operates.
Email us anytime: [email protected]