At gas37, we take the privacy and security of your personal information seriously. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used, and the controls you have over your own information.
gas37 ("the Company", "we", "us", "our") operates the online gaming and sports betting platform accessible at gas37.net (the "Platform"). This Privacy Policy describes how we collect, use, store, disclose , and protect personal information relating to individuals who register for an account, visit the Platform, or otherwise interact with gas37 services (collectively, "Players" or "you").
gas37 is committed to handling your personal data with the highest standards of transparency, security, and respect. This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement governing your use of the Platform.
This policy applies to all personal data collected through the gas37 website, mobile-optimised browser interface, customer support channels, and any other touchpoint through which you interact with gas37. If you do not agree with the practices described in this policy, you should not use the Platform.
Scope of this policy: This Privacy Policy covers all Players who access gas37 from Indonesia, including users located in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, and other cities across the Indonesian archipelago. Indonesian-specific context — such as local bank data, e-wallet transaction records, and Indonesian National Identity Card (KTP) information submitted for KYC verification — is handled with particular care and is described in detail in the relevant sections below.
2.1 Identity. For the purposes of applicable data protection law, gas37 acts as the data controller in respect of personal data collected from Players through the Platform. The data controller is the entity responsible for determining the purposes and means of processing your personal data.
2.2 Contact. If you have any questions about how gas37 processes your personal data, or if you wish to exercise any of the rights described in Clause 11, please contact our Data Protection team:
2.3 Language of Communication. All privacy-related communications between gas37 and its Players are conducted in English. Indonesian-speaking support agents are available around the clock and can assist with data-related enquiries; however, formal written responses regarding data subject rights will be issued in English.
3.1 Overview. gas37 collects personal data that falls into several distinct categories depending on the stage of your interaction with the Platform. The categories and specific data points collected are described below. We collect only what is necessary for the purposes outlined in Clause 5 — we do not collect data speculatively or beyond what is proportionate to those purposes.
3.2 Special Category Data. gas37 does not intentionally collect special category personal data (such as health data, religious beliefs, or political opinions) from Players. If you voluntarily disclose such information during a support interaction — for example, mentioning a health condition in the context of a responsible gaming request — we will treat that information with additional care and use it only for the purpose for which it was shared.
3.3 Data You Provide vs. Data We Generate. Some data is provided directly by you (e.g., registration details, KYC documents, support messages), while other data is generated automatically through your use of the Platform (e.g., session logs, IP addresses, gaming activity records). Both categories are covered by this Privacy Policy.
4.1 Direct Collection. We collect personal data directly from you when you:
4.2 Automated Collection. We automatically collect certain technical and behavioural data when you access or use the Platform, including through cookies, web beacons, and server-side logging. Please refer to Clause 10 for full details of our cookies and tracking practices.
4.3 Third-Party Sources. In limited circumstances, gas37 may receive personal data about you from third-party sources, including:
5.1 Primary Purposes. gas37 uses your personal data for the following primary purposes:
5.2 Marketing Communications. With your explicit prior consent, gas37 may use your email address or mobile number to send you promotional communications about bonuses, new game releases, seasonal offers tied to Indonesian cultural events (such as Idul Fitri, Ramadhan, and Indonesian Independence Day on 17 August), and other gas37 services. You may withdraw your marketing consent at any time by contacting [email protected].
5.3 Analytics and Improvement. gas37 uses aggregated and anonymised usage data to analyse Platform performance, improve user experience, develop new product features, and optimise the betting interface for Indonesian players. This analytical processing does not involve personally identifiable information in any form accessible to staff.
6.1 Contractual Necessity. The majority of gas37's data processing is necessary for the performance of the contract between you and gas37 — specifically, the Terms & Conditions you accept when registering an account. This includes processing your identity data, contact data, financial data, and gaming activity data to operate your account and provide the services you have requested.
6.2 Legal Obligation. Certain processing activities — particularly KYC identity verification, anti-money-laundering checks, and the retention of transaction records — are carried out to comply with applicable legal and regulatory obligations, regardless of your consent.
6.3 Legitimate Interests. gas37 processes some data on the basis of its legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics. In each case, gas37 has assessed that these interests are not overridden by your privacy rights.
6.4 Consent. Where gas37 relies on consent as the legal basis for processing — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawing marketing consent does not affect your ability to continue using the Platform.
7.1 We Do Not Sell Your Data. gas37 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Any sharing of your data with external parties is strictly limited to what is necessary for the purposes described in this Privacy Policy.
7.2 Service Providers. gas37 shares personal data with carefully selected third-party service providers who assist in delivering the Platform and its services. These providers are contractually bound to process your data only on gas37's instructions and in accordance with appropriate data protection standards. Categories of service providers include:
7.3 Legal and Regulatory Disclosure. gas37 may disclose your personal data to regulatory bodies, law enforcement agencies, courts, or other government authorities where required by law or in response to a valid legal process. We will notify you of any such disclosure where we are legally permitted to do so.
7.4 Business Transfers. In the event that gas37 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify affected Players of any such transfer and the applicable privacy terms of the successor entity.
7.5 Responsible Gaming Partners. With your consent, or where required for your protection, gas37 may share limited data with responsible gaming organisations and self-exclusion registries to enforce cooling-off periods or permanent exclusions requested by Players.
8.1 Retention Periods. gas37 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Contractual and legal compliance |
| KYC identity documents | 5 years from account closure | Anti-money-laundering obligation |
| Transaction records (IDR deposits/withdrawals) | 5 years from transaction date | Financial record-keeping requirements |
| Gaming activity logs | 3 years from account closure | Dispute resolution and responsible gaming |
| Customer support communications | 3 years from last interaction | Quality assurance and dispute evidence |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent audit trail |
| Technical / server logs | 12 months | Security monitoring and fraud detection |
8.2 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where anonymisation is not technically feasible, data is securely destroyed.
8.3 Self-Exclusion Records. Where a Player has requested self-exclusion under our Responsible Gaming programme, a minimal record of that exclusion (name and email address) is retained indefinitely to prevent re-registration. This retention is in the Player's own interest and cannot be overridden by a deletion request.
9.1 Technical Safeguards. gas37 implements robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:
9.2 Organisational Safeguards. gas37 staff who handle personal data are trained on data protection obligations and bound by confidentiality agreements. Access to production data is granted on a strict need-to-know basis and is reviewed regularly.
9.3 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, gas37 will notify the relevant supervisory authority and affected Players in accordance with applicable legal obligations and within the timescales required by law.
10.1 What Are Cookies? Cookies are small text files placed on your device when you visit a website. They allow the website to remember information about your visit — such as your preferred language, login state, and session details — making subsequent visits faster and more personalised.
10.2 Cookies Used by gas37. The gas37 Platform uses the following categories of cookies:
10.3 Third-Party Cookies. Some third-party game providers (such as Pragmatic Play and Evolution Gaming) may set their own cookies when their game content is loaded within the gas37 Platform. These cookies are governed by those providers' own privacy and cookie policies, over which gas37 has no direct control.
10.4 Managing Cookies. You can manage or delete cookies through your browser settings. Please note that disabling certain cookie categories may affect the performance or functionality of the gas37 Platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.
11.1 Overview. Subject to applicable data protection law, you have the following rights in relation to the personal data gas37 holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request" and include your registered username and a description of your request.
11.2 Response Timeframe. gas37 will acknowledge all data subject rights requests within 48 hours and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you and explain the reason for the extension.
11.3 Verification. To protect your privacy, gas37 will verify your identity before processing any data subject rights request. You may be asked to provide your registered email address, username, and a form of identity confirmation.
12.1 Strict 21+ Policy. gas37 is an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. By registering for an account, you confirm that you are at least 21 years of age. If gas37 discovers that personal data has been collected from a person under 21, that account will be closed immediately, all balances will be forfeited, and the data will be deleted in accordance with applicable law.
12.2 Parental Controls. gas37 encourages parents and guardians to make use of internet filtering and parental control tools to prevent minors from accessing online gambling platforms. gas37 itself enforces age verification through the KYC process, but technical controls at the household level provide an important additional layer of protection.
13.1 Third-Party Game Providers. The gas37 Platform integrates game content from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe. These providers operate under their own privacy policies and terms of service. gas37 recommends that Players review the privacy documentation of any third-party game provider whose content they access through the Platform.
13.2 Payment Partners. When you initiate a payment transaction, you will be interacting with the systems of Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These entities process your financial data in accordance with their own privacy policies and applicable Indonesian banking regulations. gas37 is not responsible for the privacy practices of these independent financial institutions.
13.3 No Third-Party Links. The gas37 Platform does not contain links to third-party websites outside of the gas37 domain. All navigation on the Platform remains within gas37.net. gas37 is not responsible for the privacy practices of any external website you may access independently.
14.1 Right to Update. gas37 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. We are committed to keeping this policy current and accurate.
14.2 Notification of Material Changes. Where we make material changes to this Privacy Policy — changes that significantly affect how we collect or use your personal data, or that affect your rights — we will notify registered Players via the email address on file at least 14 days before the changes take effect. For non-material updates (such as minor clarifications or formatting corrections), the updated policy will be published on this page without advance notice.
14.3 Continued Use as Acceptance. Your continued use of the gas37 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should cease using the Platform and contact [email protected] to request account closure.
14.4 Version History. The effective date at the top of this page reflects when the current version of this Privacy Policy came into force. Previous versions are available upon request by contacting [email protected].
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gas37 handles your personal data, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, across all Indonesian time zones (WIB UTC+7 / WITA UTC+8 / WIT UTC+9).
For account closures, data deletion requests, or self-exclusion requests, please also indicate the specific action you are requesting in your email subject line (e.g., "Data Deletion Request", "Account Closure", "Self-Exclusion Request") so that our team can route your message to the appropriate specialist immediately .
Every measure we take is designed to keep your personal information secure, transparent, and firmly under your control.
All data transmitted between your device and gas37's servers is protected with industry-standard 256-bit SSL/TLS encryption — the same level used by major international banks.
Our rigorous Know Your Customer process verifies every Player's identity and age before funds can be withdrawn, protecting the community and ensuring full 21+ compliance.
gas37 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information is used exclusively to deliver and improve your experience on the Platform.
Deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja are processed through encrypted, authenticated payment channels with no card details stored on gas37 servers.
You retain the right to access, correct, export, restrict, or delete your personal data at any time. Submit a request to [email protected] and our team will respond within 48 hours.
Our support team operates around the clock across WIB, WITA, and WIT time zones. Native Indonesian-speaking agents are always available to assist with privacy queries and account matters.
Your privacy is fully protected. Explore our sportsbook, slots, live casino, and esports markets — all secured with enterprise-grade encryption and backed by transparent data practices.