Privacy Policy

gen89 ("we", "us", "our") operates the online gaming platform accessible at https://gen89.vip and takes the privacy of its Members seriously. This Privacy Policy sets out in clear, formal terms how gen89 collects, processes, stores, shares, and protects personal data in connection with the provision of its services.

This policy applies to:

• All registered Members of the gen89 platform, including players who have completed account registration and verified their identity through our KYC process.
• Visitors who browse the gen89 platform without completing registration, to the extent that data is collected via cookies and analytics tools.
• Prospective Members who initiate but do not complete the registration process.

This policy does not apply to third-party websites, payment processors, or game studios that operate under their own privacy policies. Where gen89 links to or integrates with such third parties, we encourage you to review their respective privacy documentation directly.

gen89 primarily serves players based in Indonesia, including major cities such as Jakarta, Surabaya, Bandung, Medan, Bali, and Yogyakarta. All data processing activities described in this policy are conducted in compliance with applicable international privacy standards.

gen89 collects the following categories of personal data, depending on the nature of your interaction with the platform:

gen89 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide voluntarily when completing the account registration form, submitting KYC documentation, making deposit or withdrawal requests, completing bonus opt-in forms, or contacting customer support.
• Automated Technical Collection: Data collected automatically when you access the platform, including IP address, browser attributes, device identifiers, and session activity logs. This data is collected via server-side logging, first-party cookies, and JavaScript-based analytics tools.
• Third-Party KYC Partners: Where gen89 uses regulated identity verification partners to conduct document authentication, facial recognition checks, or database lookups to confirm the accuracy of identity data you have submitted, those partners may return enriched identity data to gen89 as part of the verification result.
• Payment Processors: Transaction confirmation data returned by payment gateways and banking partners following deposit or withdrawal processing. gen89 receives transaction status, reference numbers, and account ownership confirmation — not raw card or bank credential data.
• Game Studio Integrations: Aggregated session and outcome data returned by integrated game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) that is linked to your gen89 account identifier for gaming history and wagering calculation purposes.

gen89 uses the personal data it collects exclusively for the following defined purposes. We do not use your data for purposes incompatible with those listed below without first seeking your explicit consent:

• Account Administration: Creating, maintaining, verifying, and managing your gen89 account, including processing login authentication, managing wallet balances, and applying account-level settings such as deposit limits or self-exclusion status.
• Identity Verification (KYC): Confirming your identity, age (21+), and eligibility to participate on the platform in compliance with our responsible gaming obligations and anti-money-laundering (AML) programme.
• Transaction Processing: Executing deposits and withdrawals via your nominated local payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported channels), and maintaining an accurate transaction ledger for your account.
• Platform Delivery: Providing access to the game library, sportsbook, live casino, and all other product features of the gen89 platform; delivering real-time game results, odds updates, and account notifications.
• Fraud Prevention & Security: Detecting and preventing fraudulent account activity, duplicate account creation, money laundering, bonus abuse, and unauthorised access attempts. This includes automated risk-scoring of sessions and transactions.
• Regulatory Compliance: Meeting any reporting, record-keeping, or disclosure obligations imposed by applicable law, licensing conditions, or requests from competent authorities.
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance across live chat and email channels in both English and Indonesian.
• Responsible Gaming: Monitoring gaming behaviour for indicators of problem gambling, administering self-exclusion and deposit limit requests, and delivering responsible gaming communications where warranted.
• Marketing Communications: Sending promotional offers, bonus notifications, seasonal campaign information (e.g., Idul Fitri promotions, Ramadhan cashback), and platform updates to you by email — subject to your marketing preferences and opt-in status.
• Platform Improvement: Analysing aggregated, de-identified usage data to improve platform performance, user experience, game selection, and support quality.

gen89 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between gen89 and you as a Member — including account creation, transaction processing, game provision, and withdrawal execution. Without this processing, gen89 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in pursuit of gen89's legitimate business interests, including fraud detection, platform security, abuse prevention, and service improvement — where such interests are not overridden by your own privacy rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications and certain optional data enrichment activities. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

gen89 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the following defined circumstances and only to the minimum extent necessary:

• KYC & Identity Verification Partners: Regulated third-party identity verification providers engaged to conduct document authentication and database screening as part of our KYC programme. These partners are contractually bound to process your data solely for verification purposes and in accordance with applicable data protection standards.
• Payment Processors & Banking Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) that process your deposit and withdrawal transactions. Data shared is limited to what is necessary to execute and confirm each transaction.
• Game Studio Partners: Licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) that require a pseudonymous player identifier and session token to deliver game content. gen89 does not share your full identity data with game studios.
• Technology & Infrastructure Providers: Cloud hosting, content delivery network (CDN), and cybersecurity service providers engaged to operate and protect the gen89 platform infrastructure. All such providers operate under data processing agreements that restrict use of your data to service delivery purposes only.
• Law Enforcement & Regulatory Authorities: Where gen89 is under a legal obligation or receives a lawful request from a competent authority, court, or regulatory body, gen89 will disclose the minimum personal data required to comply with that obligation. gen89 will endeavour to notify you of such requests where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of gen89's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the successor entity's privacy policy before the transfer takes effect.

gen89 uses cookies and similar tracking technologies to operate the platform, maintain your authenticated session, and gather analytics data to improve platform performance. The following categories of cookies are in use:

gen89 does not deploy third-party advertising cookies or cross-site tracking pixels. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

gen89 retains personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law and licensing conditions. The following retention schedule applies:

• Active Account Data: Retained for the full duration of your membership and for a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the date of verification, or longer if required by applicable law or ongoing regulatory proceedings.
• Transaction Records: Retained for a minimum of five (5) years following each transaction date, consistent with financial record-keeping requirements.
• Gaming History: Retained for a minimum of three (3) years following the date of each gaming session, for dispute resolution and responsible gaming monitoring purposes.
• Support Communications: Retained for a minimum of two (2) years following the closure of each support case.
• Analytics & Technical Logs: Retained in aggregated or pseudonymised form for up to twelve (12) months, after which they are deleted or fully anonymised.
• Marketing Preferences: Retained until you withdraw consent or for a maximum of three (3) years from the date of last engagement, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with gen89's data destruction procedures.

gen89 implements a comprehensive, multi-layered data security programme to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and the gen89 platform is encrypted in transit using industry-standard TLS 1.2 or higher, rendering intercepted transmissions unreadable to any third party.
• Encryption at Rest: Sensitive personal data — including identity documents, financial account references, and password hashes — is stored in encrypted form within gen89's secure database infrastructure.
• Access Controls: Access to personal data within gen89's internal systems is governed by strict role-based access controls (RBAC). Only personnel with a legitimate operational need are granted access to identifiable Member data, and all such access is logged and auditable.
• Password Security: Member passwords are stored exclusively as one-way cryptographic hashes using industry-standard algorithms. gen89's staff cannot view your plaintext password at any time.
• Intrusion Detection: gen89 operates real-time intrusion detection and prevention systems (IDS/IPS) across its platform infrastructure, with automated alerting for anomalous access patterns.
• Penetration Testing: The gen89 platform undergoes regular third-party security assessments and penetration tests to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach that is likely to result in risk to your rights and freedoms, gen89 will notify affected Members without undue delay and take all reasonable steps to contain and remediate the incident.

As a Member of the gen89 platform, you hold the following rights with respect to your personal data. gen89 will respond to all verified rights requests within 30 days of receipt:

• Right of Access: You have the right to request a copy of the personal data gen89 holds about you, together with information about how it is being processed and on what legal basis.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. For account-registered data, many fields can be updated directly through the Account dashboard; others may require contacting support with supporting documentation.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no overriding legal basis exists. Note that gen89 may be required by law to retain certain data (e.g., KYC records, transaction history) for defined retention periods, even after account closure.
• Right to Restriction: You have the right to request that gen89 restrict active processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive a structured, machine-readable copy of the personal data you have provided to gen89.
• Right to Object: You have the right to object to processing carried out on the basis of gen89's legitimate interests, including profiling for fraud detection purposes. gen89 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request – [Your Account Username]". gen89 may request proof of identity before processing your request to prevent unauthorised access to your data.

The gen89 platform is strictly intended for adults aged 21 and above. gen89 does not knowingly collect personal data from individuals under the age of 21, and no part of the gen89 service is directed at or designed for use by minors.

If gen89 discovers or is notified that it has inadvertently collected personal data from a person under 21 years of age, it will take immediate steps to delete that data from its systems, close the associated account, and, where applicable, report the matter to relevant authorities. Any funds deposited by an underage user are subject to forfeiture in accordance with gen89's Terms & Conditions.

gen89 operates as an international online gaming platform. In connection with the delivery of its services, your personal data may be transferred to and processed in countries outside Indonesia — including the jurisdictions where gen89's licensing authority, cloud hosting infrastructure, KYC partners, and game studio integrations are established.

Where personal data is transferred internationally, gen89 ensures that adequate protections are in place to safeguard your data, including:

• Transferring only to jurisdictions that provide an adequate level of data protection as recognised by international standards.
• Entering into data processing agreements with all international recipients that incorporate standard contractual clauses or equivalent transfer safeguards.
• Conducting transfer impact assessments where required to evaluate the risk profile of the destination jurisdiction and implement supplementary technical measures accordingly.

By using the gen89 platform, you acknowledge and consent to the transfer of your personal data to countries outside Indonesia for the purposes described in this policy, subject to the safeguards outlined above.

gen89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, gen89 will notify registered Members by email to the address on file, with a minimum of 7 days' advance notice before the revised policy takes effect.

The current version of this Privacy Policy is always the version displayed on this page, identified by the "Last Updated" date at the top of the document. For non-material changes (such as clarifications, formatting corrections, or minor editorial amendments), the updated policy will be published on this page without individual notification.

Your continued use of the gen89 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should cease using the platform and contact gen89 to request account closure.

If you have any questions, concerns, or complaints regarding this Privacy Policy or gen89's personal data processing practices, please contact our dedicated privacy support team through the following channels:

• Email: [email protected] (plain text — not a clickable link; copy and paste into your email client)
• Live Chat: Available 24 hours a day, 7 days a week, within the gen89 platform after logging in to your account.

Please use the subject line "Privacy Enquiry – [Your Account Username]" when submitting privacy-related requests by email. gen89 will acknowledge all privacy enquiries within 48 hours (WIB) and aim to provide a substantive response within 14 business days.

If you are not satisfied with gen89's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection or supervisory authority in the jurisdiction applicable to you.