gaco Casino & Sportsbook Data Care

This page describes what we collect when you use gaco and how we keep that data protected. We collect personal information to verify your identity, process deposits and withdrawals, and comply with legal obligations in the jurisdictions where we operate.

Our gaco platform processes payment data (bank account numbers, e-wallet credentials), identity data (national ID numbers, phone numbers), game activity logs, and account information. We use this data solely to deliver our service—deposit and withdrawal processing via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet—and to verify account ownership before any withdrawal.

We operate in supported jurisdictions across Southeast Asia, including Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta. Our servers and data processors may be located outside your jurisdiction. This policy outlines our data practices and your rights.

What Data We Collect on gaco

We collect data when you create your gaco account, deposit funds, withdraw, and play games. This includes:

Account information: email address, phone number, password hash (encrypted), username.
Identity data: full legal name, national ID number (KTP or passport), date of birth, address.
Payment data: bank account number or e-wallet identifier for withdrawal; deposit method selected (e.g. DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet).
Game activity: wager amounts, game results, win/loss records, timestamps, IP address, device information.
Communication: support tickets, emails, chat logs with our team.

We do not collect payment credentials (e-wallet PINs, bank login passwords) for e-wallet or bank transfers. When you deposit via mobile banking, local payment, online payment, e-wallet, or mobile banking, you authenticate directly with the e-wallet provider. When you deposit via bank transfer, you log into your bank's own system. We receive only a confirmation that the deposit was successful; we do not handle your banking login.

We collect data only to the extent necessary to deliver our service. We do not ask for sensitive health information, political affiliations, or data unrelated to account verification and payment processing.

Optional data: We do not require you to provide a home address beyond what is needed for KYC verification. Additional profile information (nickname, avatar) is entirely optional.

How We Use Your Data on gaco

We use your data for the following purposes:

Account verification: We cross-check your email, phone number, identity document, and bank account to confirm you are the rightful account owner before allowing withdrawal.
Payment processing: We share your withdrawal method (bank or e-wallet) with our payment processors so funds can be transferred to your designated account.
Legal compliance: We retain game activity logs and identity data to comply with jurisdictional regulations in supported regions.
Anti-fraud: We analyse login patterns, IP addresses, and transaction history to detect and prevent unauthorised account access.
Customer support: We use your email and phone number to respond to your support requests.

We do not sell your data to third parties for marketing. We do not use your gaco account information to profile you for unrelated products. We do not share identity data or payment information except as required by law or to process your withdrawal request.

Third-Party Processors & Data Sharing on gaco

Our gaco platform uses third-party payment processors to handle deposits and withdrawals. When you withdraw to local payment, online payment, e-wallet, mobile banking, or local payment, we share your account identifier (phone number or e-wallet username) with that provider's API so they can credit your e-wallet. When you withdraw to online payment, e-wallet, mobile banking, or local payment, we share your bank account number with our bank settlement processor so the transfer can be initiated.

These payment processors are bound by data protection contracts requiring them to use your data solely for payment settlement. They do not retain your data longer than necessary to process the transaction.

We may also work with third-party identity verification providers to cross-check your national ID number during KYC. These providers are contractually required to delete your data after verification is complete.

We do not share your data with marketing companies, analytics platforms, or advertising networks. We do not use your gaco account data for behavioural profiling or targeted advertising.

Payment processors: online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment — receive only the data needed to process your withdrawal.
Identity verifiers: Third-party KYC providers cross-check your ID and are contractually required to delete your data after verification.
Legal authorities: We may disclose data if required by court order or law in our supported jurisdictions.

How We Protect Your Data on gaco

We encrypt all payment data and personally identifiable information using industry-standard encryption (TLS 1.2 or higher). Your password is hashed and salted; we do not store it in plaintext. Your account is protected by two-factor authentication (OTP via SMS) on withdrawal requests.

Our servers are located in data centres with physical and digital security measures. Access to your data is restricted to gaco staff and authorised processors on a need-to-know basis. We conduct regular security audits and respond to security incidents within our incident-response protocol.

We do not guarantee absolute security. No system is perfectly secure. If a security incident compromises your data, we will notify affected users via email as soon as practicable and provide guidance on account recovery steps.

How Long We Keep Your Data on gaco

We retain your gaco account data for as long as your account is active. After you close your account or request deletion, we retain game activity logs and identity data for seven years to comply with anti-money-laundering (AML) regulations in our supported jurisdictions. Payment data (bank account numbers, e-wallet IDs) is deleted after 90 days following account closure unless required by law to retain longer.

You can request deletion of non-essential data (nickname, avatar, communication logs) at any time. We will comply within 30 days unless legal obligation requires retention. Game history and settlement records cannot be deleted; they are permanent and serve as your account audit trail.

Cookies & Tracking on gaco

Our gaco platform uses cookies to maintain your login session, remember your preferences, and analyse platform usage (page views, game selections, session duration). Cookies are stored on your device and sent to our servers with each request. You can disable cookies in your browser settings, though this may limit gaco functionality.

We do not use cookies to track you across unrelated websites. We do not set third-party tracking cookies. Our analytics are limited to gaco platform activity and do not profile you for external marketing purposes.

Your Rights Regarding Data on gaco

You have the right to:

Access: Request a copy of all personal data we hold about you on gaco. We will provide this within 30 days.
Correction: Request correction of inaccurate or incomplete data (e.g. misspelled name, wrong ID number). We will update your account within five business days.
Deletion: Request deletion of non-essential data. We will comply within 30 days unless legal obligation prevents deletion.
Portability: Request that we provide your data in a portable, machine-readable format so you can transfer it elsewhere.
Objection: Object to processing of your data for purposes beyond account verification and payment processing. We will respect your objection unless legal obligation requires processing.

To exercise these rights, contact our support team through the gaco platform. We will verify your identity before fulfilling your request. Some requests (access, correction) are free; others (data export) may incur a small administrative fee.

Game history is not deletable: Your game activity logs, wagers, and settlement records cannot be deleted even if you close your account. These records are permanent and serve as proof of your account transactions.

Data Processing & Jurisdictions on gaco

Our gaco platform operates in supported jurisdictions across Southeast Asia. Your data may be processed, stored, or backed up on servers located outside your home country. By using gaco, you consent to your data being processed in these locations. If you do not consent to international data transfer, you should not use our platform.

We comply with data protection law in the jurisdictions where we operate. If your jurisdiction has specific data protection requirements (e.g. GDPR-equivalent laws), we will comply to the extent applicable to our services.

Changes to Our Privacy Policy on gaco

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email. Your continued use of gaco after such notification constitutes acceptance of the updated policy. We encourage you to review this page periodically to stay informed of how we protect your data.

Contact Us About Your Data on gaco

If you have questions about this privacy policy, wish to exercise your data rights, or believe we have mishandled your data, contact our support team through the gaco platform. We will respond to your inquiry within 14 days. If you are unsatisfied with our response, you may lodge a complaint with your jurisdiction's data protection authority.

This privacy policy was last updated on 2026-05-30. We remain committed to transparent data practices and protecting your information as you use gaco.