Privacy Policy — guci43 Data Protection Statement

guci43 ("we", "us", "our", or "the Platform") operates the online betting and gaming platform accessible at guci43.cam. This Privacy Policy describes how guci43 collects, uses, discloses, stores, and protects the personal data of players and visitors ("you", "your") who interact with the Platform.

guci43 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This policy applies to all personal data collected through the Platform, including data collected during account registration, identity verification (KYC), financial transactions, customer support interactions, and general platform usage.

This Privacy Policy should be read in conjunction with guci43's Terms & Conditions, which govern your use of the Platform. Defined terms used herein carry the same meaning as in the Terms & Conditions unless otherwise stated.

guci43 collects the following categories of personal data:

We do not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) unless specifically required to fulfill a legal obligation.

guci43 collects personal data through the following channels:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Data gathered automatically when you access and interact with the Platform, including through browser cookies, server logs, and analytics tools. This includes Technical Data as described in Section 2.
• Third-Party Sources: In some cases, we may receive data about you from third parties such as identity verification service providers, fraud-prevention agencies, payment processors, and our licensed game-provider partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft). Such data is used solely for the purposes outlined in this policy.
• Public Sources: Where permitted by applicable law, we may verify information you provide against publicly available records or commercially available databases to confirm accuracy or detect fraud.

guci43 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your player account, including authentication, balance management, and account security.
• Identity Verification (KYC): To verify your identity and age (21+ requirement), confirm your residential address, and comply with our anti-fraud and anti-money-laundering obligations.
• Transaction Processing: To process deposits via local Indonesian payment channels (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, etc.) and to process withdrawal requests to your verified payment account.
• Platform Delivery: To provide access to all gaming and betting services, including sports markets, togel lottery draws, live dealer tables, and slot games.
• Customer Support: To respond to your inquiries, resolve complaints, and manage your customer relationship through live chat and email support channels.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct.
• Responsible Gaming Compliance: To administer deposit limits, self-exclusion requests, session time controls, and other responsible gaming tools, and to identify players who may be exhibiting signs of problem gambling.
• Marketing & Promotions: Where you have provided consent, to send you information about promotional offers, bonuses, seasonal campaigns (such as those tied to Idul Fitri, Ramadhan, or Indonesian Independence Day), and platform updates. You may withdraw marketing consent at any time.
• Legal Compliance: To fulfill our obligations under applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.
• Platform Improvement: To analyze usage patterns, optimize the user experience, test new features, and measure the effectiveness of our communications and promotions through aggregated and anonymized analytics.

guci43 relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing is required to perform the contract between you and guci43 (i.e., to operate your account, process transactions, and deliver gaming services as set out in our Terms & Conditions).
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including identity verification, anti-money-laundering procedures, and cooperation with law enforcement agencies.
• Legitimate Interests: Processing is necessary for guci43's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent (for example, for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of marketing consent does not affect the processing carried out under other legal bases.

guci43 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with the following categories of recipients where necessary and proportionate:

• Identity Verification Partners: Third-party KYC and age-verification service providers who assist us in confirming your identity, age, and address in compliance with our obligations.
• Payment Processors: Banks and e-wallet providers — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, and ShopeePay — to the extent necessary to process your deposits and withdrawals securely.
• Game Content Providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited technical and session data necessary to deliver their games within our platform environment.
• Fraud Prevention & Security Agencies: Specialist agencies and databases used to screen for fraud, money laundering, sanctions, and other prohibited activity. Data shared for this purpose is strictly limited to what is necessary for the screening function.
• IT Infrastructure & Hosting Providers: Cloud hosting, database management, and cybersecurity vendors who provide the technical infrastructure on which the Platform operates. These providers process data only on guci43's documented instructions and under binding data-processing agreements.
• Customer Support Platforms: Third-party live chat and ticketing systems used to manage your support interactions. These providers act as data processors under strict confidentiality obligations.
• Legal & Regulatory Authorities: Courts, law enforcement agencies, regulatory bodies, or other public authorities where disclosure is required by applicable law, court order, or legal process.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of guci43's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. You will be notified of any such transfer that materially affects your rights.

All third parties with whom we share personal data are required to maintain appropriate technical and organizational security measures and to process your data solely for the purposes specified in our agreements with them.

guci43 uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to enhance your experience on the Platform, maintain session continuity, and gather analytics data. The following categories of cookies may be set when you visit guci43:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair or prevent access to certain platform features. Disabling analytics or functional cookies will not prevent you from using the Platform but may reduce the quality of your experience.

guci43 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status, plus a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• KYC & Verification Documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory obligations.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Communication records are retained for up to three (3) years from the date of the last interaction, or longer if the matter remains unresolved or subject to ongoing investigation.
• Marketing Consent Records: Records of your consent or objection to marketing communications are retained for as long as your account remains active, plus one (1) year following account closure.
• Technical & Log Data: Server logs and technical session data are retained for up to twelve (12) months, after which they are deleted or permanently anonymized.

When data is no longer required, guci43 will securely delete or anonymize it in accordance with our internal data disposal procedures. Where data is anonymized rather than deleted, the resulting data set can no longer be linked to any individual and falls outside the scope of this Privacy Policy.

guci43 implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and the Platform's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encryption at Rest: Sensitive data stored on our servers — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to systems holding personal data is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and receive regular data protection training.
• Multi-Factor Authentication: Administrative access to Platform infrastructure requires multi-factor authentication. We also encourage players to enable two-factor authentication on their own accounts.
• Regular Security Audits: guci43 conducts periodic penetration testing and vulnerability assessments to identify and remediate security weaknesses in the Platform's infrastructure.
• Incident Response: We maintain a documented data breach response plan. In the event of a confirmed breach affecting your personal data, you will be notified as promptly as practicable, along with guidance on steps you can take to protect yourself.

While guci43 takes every reasonable precaution to safeguard your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us immediately at [email protected] if you suspect any unauthorized access to your account.

As a player on the guci43 Platform, you have the following rights with respect to your personal data. guci43 is committed to honoring these rights promptly and without undue delay:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic profile information directly through your account settings; for changes to KYC-verified data, please contact support.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that certain data must be retained to comply with legal obligations (e.g., anti-money-laundering record-keeping requirements) and cannot be erased on request.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to our processing.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a portable, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of guci43's legitimate interests, including profiling. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out prior to your withdrawal.

To exercise any of the rights listed above, please contact our data protection team at [email protected] with the subject line "Data Rights Request" and a clear description of your request. We may need to verify your identity before processing your request. We will respond within thirty (30) days of receiving a valid request; complex or high-volume requests may require an extension of up to an additional sixty (60) days, of which you will be notified.

guci43 is strictly an adult platform. You must be at least 21 years of age to register an account and access any service offered by the Platform. guci43 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that a registered account belongs to, or has been used by, an individual under 21 years of age, we will immediately suspend that account, void all associated transactions and balances, and securely delete all related personal data to the extent permitted by applicable law.

Parents and guardians who believe that a minor in their care has accessed the Platform without authorization are encouraged to contact us immediately at [email protected] so that appropriate action can be taken without delay.

The guci43 Platform may contain links to or integrations with third-party services — including game providers, payment gateways, and informational resources. This Privacy Policy applies solely to data processed by guci43 directly.

guci43 is not responsible for the privacy practices of any third-party service, website, or application that is accessible through or integrated within the Platform. When you interact with a third-party service — for example, completing a payment through your BCA or OVO app — that service's own privacy policy governs the data you provide to them.

We encourage you to review the privacy policy of any third-party service before submitting personal information to them. guci43 does not endorse and cannot guarantee the privacy or security standards of any external platform.

guci43 operates infrastructure that may involve the processing and storage of personal data in jurisdictions outside of Indonesia. Where such international transfers occur, guci43 takes appropriate steps to ensure that your data receives a level of protection equivalent to that required under applicable data protection standards, including:

• Transferring data only to countries or jurisdictions that provide an adequate level of data protection as recognized by relevant authorities.
• Implementing contractual safeguards (such as Standard Contractual Clauses or equivalent transfer mechanisms) with recipients in jurisdictions that do not meet an adequacy threshold.
• Conducting transfer impact assessments where required and applying supplementary technical safeguards (such as encryption) where the legal framework of the destination country is assessed as providing insufficient protection on its own.

By using the guci43 Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries outside Indonesia as part of our global operations. We commit to ensuring that all such transfers are subject to appropriate protections and that your rights are preserved regardless of where your data is processed.

guci43 reserves the right to update or modify this Privacy Policy at any time. We will provide reasonable advance notice of material changes by sending an email to your registered address and/or displaying a prominent notice on the Platform — at least seven (7) days before the revised policy takes effect, except where immediate changes are required for legal or security reasons.

The "Effective Date" displayed at the top of this page reflects the date on which the current version of the policy came into force. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with a material change, you should cease using the Platform and contact us to request account closure prior to the amendment taking effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the guci43 data protection team through the following channels:

• Email: [email protected] — use the subject line "Privacy Inquiry" or "Data Rights Request" for fastest routing.
• Live Chat: Available 24 hours a day, 7 days a week, via the chat icon in the bottom-right corner of the Platform. Our Indonesian-speaking support agents can assist with privacy-related questions in real time.
• Response Time: We aim to acknowledge all privacy-related inquiries within 24 hours (WIB) and to provide a substantive response within 30 days.