gospin Privacy Policy

This page describes what we collect when you use gospin and how we keep that data protected. We take your privacy seriously — whether you access our platform through our Android app, iOS browser, or desktop interface, your personal information is encrypted, stored securely, and used only for the purposes we outline here. We do not sell your data to advertisers or third parties unrelated to running our service.

Mobile users downloading our app or logging in via Safari send their credentials through encrypted channels. Desktop users access the same secure backend. In all cases, we collect only the information necessary to verify your identity, process your deposits and withdrawals, and provide customer support. We comply with local data protection standards and maintain transparent policies about how long we retain your information.

This privacy policy covers data collection, use, storage, third-party processors, cookies, your rights, and how to contact us with privacy questions. We update this policy periodically to reflect changes in our operations or applicable law. Continued use of gospin after such updates constitutes your acceptance of the revised policy.

What Data We Collect on gospin

We collect your information in two ways: what you provide directly, and what we gather as you use the platform. When you register, you provide your legal name, date of birth, email address, phone number, and a government-issued ID photo. This information is used solely for Know Your Customer (KYC) verification and age confirmation. We do not use it for marketing unless you explicitly consent.

As you use gospin, we log your login timestamps, the games you access, your account balance, your deposit and withdrawal history, and your IP address. We use this data to detect fraud, prevent account abuse, and troubleshoot technical issues. We do not track your activity outside gospin, and we do not create detailed behaviour profiles for sale to third parties.

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or a bank virtual account, we receive confirmation from the payment processor that the transaction succeeded. We do not store your full payment credentials (e.g., your wallet password or full card number). We store only a reference to the transaction and the amount, so we can reconcile your deposits and process withdrawals.

How We Use Your Data on gospin

We use your personal data for the following purposes: verifying your identity and age, processing deposits and withdrawals, detecting and preventing fraud, investigating disputes, providing customer support, complying with legal requirements, and improving our service. We do not use your data for any other purpose without your explicit consent.

If you contact our support team via email or in-app chat, we keep a record of your conversation to resolve your issue and improve our support quality. We may contact you via email or SMS to confirm account changes, notify you of withdrawal approvals, or alert you to suspicious activity. You can adjust your communication preferences in your account settings.

We may share your data with processors who handle payment processing, customer support tools, and fraud detection systems. These processors are contractually bound to keep your data confidential and use it only to perform services on our behalf. We do not sell your data to marketers or data brokers.

Identity verification: We use your legal name and ID photo to confirm you are who you claim to be and meet age requirements.
Payment processing: We share transaction details with payment processors to deposit and withdraw funds on your behalf.
Fraud prevention: We analyze your login patterns, transaction history, and account activity to detect unusual behaviour.
Customer support: We keep records of your support requests to resolve issues and answer follow-up questions.

Where We Store Your Data and How Long We Keep It

We store your personal data on secure servers. Our servers may be located outside your jurisdiction, including in countries outside Southeast Asia. By using gospin, you consent to your data being transferred to and stored on these servers. We apply the same encryption and access controls regardless of server location.

We retain your KYC data (name, ID, date of birth) for as long as your account is active, plus a retention period required by law for anti-money-laundering compliance. Typically this is three to five years after account closure. We retain your transaction history (deposits, withdrawals, game activity) for the same period. You can request deletion of non-essential data, subject to legal retention requirements.

If you close your account, we do not immediately delete your data. We keep it encrypted and inaccessible until the retention period expires. This protects against fraud and allows us to respond to legal requests. You can contact us to review what data we hold about you or request corrections to inaccurate information.

International data transfer: Your personal data may be transferred to, stored on, and processed by servers in countries outside Indonesia, including those with different data protection laws. We apply consistent encryption and security standards worldwide.

Cookies and Analytics on gospin

We use cookies to keep you logged in, remember your preferences, and measure how visitors use our site. A cookie is a small text file stored on your device. When you visit gospin, your browser sends these cookies back to us, allowing us to recognize you and personalize your experience.

Session cookies expire when you close your browser or log out. Persistent cookies remain for longer periods and allow us to remember you when you return. You can disable cookies in your browser settings, but this may limit functionality on gospin — for example, you may need to log in each time you visit.

We use analytics tools to understand traffic patterns, popular games, and technical performance. These tools record which pages you visit, how long you stay, and what links you click. This data is aggregated and anonymized; it does not identify you personally. We use these insights to improve our platform and fix bugs.

Third-Party Processors and Payment Providers

We work with third-party companies to provide services gospin cannot handle alone. Payment processors like those handling e-wallet, mobile banking, local payment, online payment, e-wallet, and bank virtual accounts receive your transaction details to process deposits and withdrawals. These processors are regulated financial entities and must comply with strict data protection standards.

We use hosting providers to store our servers and run our platform. We use analytics providers to measure site usage. We use email providers to send you account notifications. All these providers are bound by contracts that prohibit them from using your data for any purpose other than providing their service to us.

We do not share your data with third parties for marketing, profiling, or any purpose unrelated to operating gospin. If a processor is acquired or goes out of business, we work to ensure your data is transferred securely or deleted according to applicable law.

Your Rights Regarding Your Data on gospin

You have the right to access, correct, and delete your personal data, subject to legal retention requirements. You can access your data through your account settings on gospin. If you spot inaccuracies, contact our support team and we will correct them. You have the right to request that we delete non-essential data, though we may retain KYC and transaction records for legal compliance.

You have the right to data portability — we can provide your personal data in a structured, portable format so you can transfer it to another service if you wish. You have the right to object to certain uses of your data, such as unsolicited marketing emails. You can adjust your communication preferences in your account settings or contact us to opt out.

If you believe we have mishandled your data or violated your privacy rights, you can file a complaint with your local data protection authority. In Indonesia, this is the Otoritas Jasa Keuangan (OJK) or other relevant regulatory bodies. We encourage you to contact us first so we can resolve the issue directly.

How We Protect Your Data on gospin

We encrypt all data in transit using TLS (Transport Layer Security) protocols. Your login credentials, payment information, and personal details are encrypted before leaving your device. We encrypt data at rest using industry-standard algorithms. Only authorized staff with a legitimate business need can access your unencrypted data.

We conduct regular security audits and penetration testing to identify vulnerabilities. We require our staff to sign confidentiality agreements and receive privacy training. We maintain access logs so we can detect and investigate unauthorized access attempts.

However, no security is perfect. If we detect a breach, we will notify affected users without unreasonable delay and provide details on the data compromised. We will also contact relevant authorities as required by law.

Contacting Us About Privacy on gospin

If you have questions about our privacy practices, want to access or correct your data, or wish to file a complaint, contact our privacy team through our support portal on gospin or email us directly. We will respond to privacy requests within a reasonable timeframe, typically within 30 days.

You can update many privacy settings yourself within your account. You can adjust email frequency, enable two-factor authentication, view your login history, and delete non-essential preferences. For more sensitive requests, such as data deletion or portability, our support team will verify your identity and process your request securely.

This privacy policy is governed by the laws of the jurisdiction in which gospin is licensed. If our privacy practices conflict with local law in your region, the stricter standard applies. We serve users across Southeast Asia, from Jakarta to Surabaya to Bandung to Medan, and we comply with each jurisdiction's data protection requirements. All services are available only where applicable law permits; users are responsible for verifying that their access complies with their own jurisdiction's regulations.