gemarwin Privacy Policy

This page describes what we collect when you use gemarwin and how we keep that data protected. When you register an account, deposit funds via DANA or e-wallet, place a wager on Liga 1, or withdraw to a mobile banking Virtual Account, we record your identity, transaction history, and device information. We treat this data as sensitive and encrypt it end-to-end.

Our privacy practices comply with local data-protection regulations in the jurisdictions where we operate. We do not sell or rent your personal information to third parties. We share data only with payment processors, fraud-detection services, and regulatory authorities where required by law. We retain your account history for seven years to meet financial compliance standards, then delete it unless legal obligations require longer retention.

This policy explains how we collect, use, store, and protect your data on gemarwin. If you have questions about your privacy rights or how we handle your information, contact our support team through your gemarwin account or email.

What We Collect on gemarwin

Account Registration Data

When you create a gemarwin account, we collect your full name, date of birth, email address, phone number, and residential address. We also request a copy of a valid government ID (KTP, passport, or driver's license) to verify your identity. This verification is required by Indonesian financial regulations and is standard across online gaming platforms in our service area.

We store this information in encrypted form on our servers. Only authorized gemarwin staff can access it, and only for account verification, fraud prevention, or legal compliance purposes. We do not use your name or contact details for marketing unless you explicitly opt in.

Payment and Transaction Data

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or a bank transfer (mobile banking, local payment, online payment, e-wallet), we record the payment method, amount, timestamp, and transaction confirmation. When you place a wager on Piala AFF or spin a slot game, we log the stake, outcome, and payout. When you request a withdrawal, we capture your destination payment method and approval status.

Your payment method details (card numbers, bank account numbers, mobile banking wallet IDs) are never stored in plaintext. We use tokenization—our payment processor generates a secure token, and we store only that token linked to your account. If you update your payment method, we replace the token; the old token is discarded.

Device and Behavioral Data

When you use gemarwin on your Android phone or iOS browser, we log your IP address, device type (e.g., "Samsung Galaxy A12", "iPhone 13"), operating system version, app version, and approximate location (country/region only, not precise GPS). We track which features you use (sportsbook, live dealer, slots, esports markets) and how long you spend in each section. We do not record your physical location or browsing activity outside of gemarwin.

This behavioral data helps us identify technical issues, optimize our mobile experience, and detect fraudulent patterns. If we notice unusual login attempts from a new city or device, we may ask you to re-verify your identity via email or SMS before processing a withdrawal.

Cookies and Local Storage

Our gemarwin website and app use session cookies to keep you logged in and to remember your language preference and push-notification settings. These cookies expire when you close your browser or log out. We also use local storage to cache game assets (images, sounds, animations) so your mobile app loads faster on repeat visits. This data is stored only on your device and never sent to our servers.

We do not use tracking cookies to follow you across other websites. Our analytics count aggregate traffic (e.g., "many active users accessed gemarwin today") but not individual browsing patterns outside our platform.

Our Data Use and Protection Practices

How We Use Your Data

We use your data for the following purposes:

• Account verification and fraud prevention: We verify your identity, cross-check your deposits and withdrawals against regulatory databases, and flag unusual patterns (e.g., multiple failed login attempts).
• Service delivery: We process your deposits, settle your wagers, and execute your withdrawal requests using your payment information.
• Regulatory compliance: We retain transaction records to satisfy anti-money-laundering (AML) and know-your-customer (KYC) requirements in our service jurisdictions.
• Customer support: We review your account history and transaction records to resolve disputes or technical issues you report.
• Platform improvement: We analyze aggregate usage patterns (not individual user behavior) to optimize our mobile app, fix bugs, and enhance our game offerings.

Data Security and Encryption

We encrypt all data in transit using TLS 1.2 or higher. Your communication with gemarwin (login, deposit submission, withdrawal request) travels through an encrypted tunnel so it cannot be intercepted. We encrypt data at rest using AES-256 encryption on our database servers. Our servers are located in secure data centers with 24/7 physical security and redundant power supplies.

We limit staff access to your personal data—only gemarwin employees with a specific business need can view your account. All staff sign confidentiality agreements, and access is logged and monitored. If we discover a data breach affecting your account, we notify you within 24 hours and explain what information was exposed and what steps we took to secure it.

Third-Party Data Sharing

We share your data only with trusted partners:

• Payment processors: We share your payment method details (tokenized) with our payment partners to process deposits and withdrawals.
• Fraud-detection services: We share your transaction history and IP address with third-party fraud-detection vendors to identify suspicious patterns.
• Regulatory authorities: If required by law or court order, we provide your account information to government agencies or law enforcement.

We do not sell your email address, phone number, or behavioral data to advertisers or marketing companies. We do not rent your data to other online gaming operators. Our data-sharing agreements with partners include strict confidentiality and security requirements.

Your Rights and Data Requests

You have the right to request a copy of all data we hold about you on gemarwin. Contact our support team and we will compile your account details, transaction history, and device logs into a single file and send it to you within 14 days. You also have the right to request correction of inaccurate data (e.g., if your address changed, you can update it in your account settings) and deletion of your data after account closure.

If you close your gemarwin account, we retain your transaction history for seven years as required by law, but we delete your personal details (name, ID scan, contact information) immediately unless a legal hold or dispute is pending. You can download your transaction history anytime before closure for your records.

Contact Us About Privacy

If you have questions about our privacy practices, suspect a data breach, or want to exercise your rights (access, correction, deletion), reach out to our support team through your gemarwin account menu. We offer English-language support and respond within one business day. Your privacy is important to us, and we take all concerns seriously.

This privacy policy is effective as of the date listed in your account settings and may be updated periodically to reflect changes in our practices or regulatory requirements. We will notify you of significant changes via email. Your continued use of gemarwin after any update constitutes your acceptance of the updated policy.