Privacy Policy

1 Introduction

lgo123 ("we", "us", "the Company") operates the online gaming platform accessible at https://lgo123.cam. In the course of providing our gaming, betting, and related services to Members located primarily in Indonesia, we inevitably collect and process personal data. We recognise that privacy is a fundamental right, and we take our obligations as a data processor seriously.

This Privacy Policy applies to all personal data collected through the lgo123 website, mobile interface, customer support interactions, and any other touchpoint through which you interact with our brand. It covers Members who have registered an account as well as visitors who browse the platform without registering.

This policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and lgo123. Defined terms used in this policy carry the same meanings as in the Terms & Conditions unless otherwise specified.

2 Data Controller

For the purposes of this Privacy Policy, lgo123 acts as the data controller in respect of the personal data it collects from Members and site visitors. As data controller, lgo123 determines the purposes for which and the means by which personal data is processed.

Where lgo123 engages third-party service providers (such as payment processors, KYC verification providers, or game studios) to process data on its behalf, those providers act as data processors and are contractually bound to process data only in accordance with lgo123's documented instructions and applicable data protection standards.

3 Data We Collect

lgo123 collects only the personal data that is necessary to provide our services, comply with legal obligations, and maintain platform security. The categories of personal data we may collect are set out in the table below:

We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where explicitly required by applicable law or where you voluntarily provide it in connection with a responsible gaming self-exclusion request.

4 How We Collect Data

4.1 Data You Provide Directly

The majority of personal data we hold is provided directly by you through the following interactions:

• Completing the account registration form on the lgo123 platform
• Submitting KYC documentation when requested by our compliance team
• Making a deposit or withdrawal through our cashier interface
• Contacting our customer support team via live chat or email
• Completing any preference survey or promotional entry form on the platform
• Requesting a responsible gaming control such as a deposit limit or self-exclusion

4.2 Data Collected Automatically

When you access the lgo123 platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser configuration, pages visited, time spent on each page, and referring URLs. This data is used for platform security monitoring, fraud detection, and aggregate traffic analysis. See Section 9 (Cookies & Tracking) for further details.

4.3 Data Received from Third Parties

In limited circumstances, lgo123 may receive data about you from third-party sources, including:

• Identity verification providers engaged to complete KYC checks on our behalf
• Fraud prevention and anti-money-laundering screening services
• Payment processors who confirm the status of deposit and withdrawal transactions

Data received from third parties is used only for the specific purpose for which it was obtained and is handled with the same level of care as data collected directly from you.

5 Purpose & Legal Basis for Processing

lgo123 processes personal data only where we have a valid legal basis for doing so. The primary purposes for which we process your data, together with the corresponding legal basis, are as follows:

6 Data Sharing

6.1 Third-Party Service Providers

lgo123 shares personal data with carefully selected third-party service providers who assist us in delivering our platform and services. All such providers are contractually bound to process your data solely in accordance with our instructions, to maintain appropriate security standards, and to refrain from using your data for their own independent purposes. Categories of third-party providers with whom we may share your data include:

• Payment processors and banks: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — for the purpose of processing your financial transactions
• KYC and identity verification providers: Third-party services engaged to verify your identity documents and confirm your eligibility to hold an account
• Fraud prevention and AML screening services: Specialist providers who cross-reference account activity against known fraud patterns and sanctions lists
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — who receive session data necessary to deliver game content
• IT infrastructure and cloud hosting providers: Data centres and cloud service operators who host the lgo123 platform and its associated databases
• Customer support platform providers: Live chat and ticketing system operators who facilitate our support operations

6.2 Regulatory and Law Enforcement Disclosure

lgo123 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of lgo123, its Members, or the general public. Any such disclosure will be limited to the minimum data necessary to satisfy the specific legal requirement.

6.3 No Sale of Personal Data

lgo123 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. Your data is a tool for delivering and improving our services — not a product to be commercialised.

7 Data Retention

lgo123 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account membership, plus a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with financial regulatory obligations
• KYC documentation: Retained for a minimum of 5 years following the completion of the verification process or the closure of the associated account, whichever is later
• Gaming activity logs: Retained for a minimum of 2 years from the date of each gaming session, for the purposes of dispute resolution and responsible gaming monitoring
• Customer support records: Retained for 2 years from the date of the last interaction, to support ongoing quality assurance and dispute resolution
• Technical and session data: Retained for up to 12 months from collection, then anonymised or deleted
• Marketing consent records: Retained for the duration of the consent, plus 12 months following withdrawal of consent, as evidence of compliance

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Where data must be retained beyond the standard period due to an active legal dispute or regulatory investigation, lgo123 will notify you to the extent permitted by law.

8 Data Security

8.1 Technical Safeguards

lgo123 implements a comprehensive set of technical security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and our servers
• Encryption at rest for all sensitive data stored in our databases, including financial records and KYC documents
• Multi-factor authentication options for Member accounts and mandatory MFA for all internal administrative access
• Continuous intrusion detection and prevention system (IDPS) monitoring across our infrastructure
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Strict access controls limiting data access to authorised personnel on a need-to-know basis

8.2 Organisational Safeguards

Beyond technical controls, lgo123 maintains robust organisational security practices including staff data protection training, documented incident response procedures, and contractual data security obligations imposed on all third-party providers. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lgo123 will notify you without undue delay and in accordance with applicable notification requirements.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, to improve efficiency, and to provide analytical information to site operators. lgo123 uses cookies and similar tracking technologies (such as web beacons and local storage) on its platform.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without severely impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings and display options, providing a more personalised experience across sessions.
• Analytical Cookies: Allow us to understand how Members navigate the platform — which pages are most visited, where users drop off, and how game categories perform. This data is collected in aggregate and is used solely to improve the platform experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including unusual login patterns or atypical transaction behaviour.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling strictly necessary cookies will impair your ability to use the lgo123 platform. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

10 Your Data Rights

As a Member of lgo123, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond within 30 calendar days of receiving a verifiable request.

Please note that certain rights are subject to limitations under applicable law. For example, the right to erasure does not apply where retention of your data is required to comply with a legal obligation. lgo123 will explain any such limitations clearly when responding to your request.

11 Children's Privacy

The lgo123 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes age declaration requirements and KYC verification to enforce this restriction.

If lgo123 discovers that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the data as required, return any deposits made, and void any associated gaming activity. If you have reason to believe that a person under 21 has created an account with lgo123, please notify us immediately at [email protected] so that we can investigate and take appropriate action promptly.

12 International Data Transfers

lgo123 operates internationally and may transfer your personal data to service providers or infrastructure located outside of Indonesia. Where such transfers occur, lgo123 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under applicable data protection law. Safeguards may include contractual clauses, data processing agreements incorporating internationally recognised standard contractual clauses, or transfers to jurisdictions that provide an adequate level of data protection.

By using the lgo123 platform, you acknowledge that your personal data may be transferred to and processed in countries outside of Indonesia, including countries where data protection laws may differ from those applicable in Indonesia. lgo123 takes all reasonable steps to ensure such transfers are conducted securely and lawfully.

13 Marketing Communications

lgo123 may send you promotional communications — including information about bonuses, new games, seasonal promotions tied to events such as Idul Fitri, Ramadhan, Imlek, or Indonesian Independence Day, and platform updates — where you have given your explicit consent to receive such communications during account registration or through your account settings.

You may withdraw consent for marketing communications at any time by:

• Updating your communication preferences in the account settings section of the platform
• Clicking the unsubscribe link included in any promotional email sent by lgo123
• Contacting our support team directly and requesting removal from all marketing lists

Withdrawal of marketing consent does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are necessary for the operation of your account and cannot be disabled while your account remains active.

14 Policy Amendments

lgo123 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. When material changes are made, we will notify registered Members by email and display a prominent notice on the platform at least 7 calendar days before the revised policy takes effect. The "Last Updated" date at the top of this page will be revised accordingly.

We encourage you to review this Privacy Policy periodically so that you remain informed about how lgo123 protects your personal data. Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way lgo123 handles your personal data, please contact our Data Protection team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the platform — Indonesian-speaking agents are available during WIB business hours
• Response Commitment: We aim to acknowledge all privacy-related requests within 3 business days and provide a substantive response within 30 calendar days

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. lgo123 is committed to cooperating fully with any such authority in the resolution of complaints.