gbk Service Open an account, Multilingual customer support.

gbk Two-Factor Authentication Mobile Sportsbook with APK & iOS Browser

We protect your gbk account using two-factor authentication (2FA), a security layer that requires both your password and a second verification method before you can access your funds or change account settings. On our mobile platform — whether you install the Android APK or use iOS Safari — two-factor authentication works seamlessly to keep your data safe during login, withdrawal requests, and sensitive transactions.

Open an account
gbk featured game showcase

Two-Factor Authentication

Live and
Category
Live Table / Card
RTP
high
high

Our 2FA system integrates with your phone's security features, sending one-time codes via SMS or authenticator apps. We designed this process to be quick on mobile, so verification does not interrupt your flow when you want to check live football odds from Liga 1 or join a live-dealer table during your commute in Jakarta, Surabaya, or Bandung.

How gbk Two-Factor Authentication Works

Two-factor authentication adds a second checkpoint to your login process. After you enter your username and password into our gbk app or mobile browser, our system sends a time-limited code to your registered phone number or authenticator app. You enter that code to complete login. This second step means that even if someone obtains your password, they cannot access your account without also having your phone.

We offer two 2FA methods on gbk: SMS verification codes and authenticator apps. SMS is the most straightforward — we text a six-digit code to your phone, valid for a set window (typically subject to verification). Authenticator apps (such as Google Authenticator or Authy) generate codes on your device without relying on network connectivity, so they work even in areas with weak mobile signal.

Two-factor authentication setup screen on Android phone displaying QR code for authenticator app enrollment
Setting up 2FA on gbk: scan the QR code with your authenticator app during account setup.

When you first enable 2FA in your gbk account settings, we generate a unique QR code. If you choose the authenticator-app method, you scan this code using an app like Google Authenticator, and the app begins generating new codes every 30 seconds. If you select SMS, we confirm your phone number and send a test code to verify it works.

Every time you log in to gbk on your Android phone (via APK) or iPhone (via Safari), after entering your credentials, our system prompts you to enter the six-digit code. The code expires quickly, so you must enter it within the time window. This design prevents attackers from intercepting old codes or using the same code twice.

Why gbk Requires Two-Factor Authentication for Sensitive Actions

We do not require 2FA for every single page load — that would slow down your mobile experience unnecessarily. Instead, we ask for a second verification when you perform actions that involve money or account changes: withdrawals, deposit confirmations, password resets, and changes to your registered phone number or email. If you withdraw funds via DANA, e-wallet, mobile banking, local payment, or online payment, our system may prompt you to confirm the transaction with a 2FA code. This extra step protects you from unauthorized withdrawals if someone gains temporary access to your account.

Why we do this: If you lose access to your phone or change your phone number, contact our support team before you lose your 2FA device. We can reset your second factor with identity verification.

Setting Up 2FA on Android and iOS

On Android, after you download and install our gbk APK, log in to your account. Go to Settings (usually a gear icon at the bottom or in a menu). Look for "Security" or "Account Protection." You will see an option to enable two-factor authentication. Tap it, choose SMS or authenticator app, and follow the prompts. If you choose SMS, we send a test code to your phone. If you choose authenticator app, we display a QR code that you scan with Google Authenticator, Authy, or another compatible app. Save a backup code in a safe place — we provide one in case you lose access to your authenticator device.

On iPhone using Safari, the steps are identical. Open gbk.bet in Safari, log in, navigate to Security settings, and enable 2FA. Our mobile browser version adapts to iOS touch controls, so tapping and scrolling feel natural. Once 2FA is active, every login will require the second factor.

  • 1
    Open gbk on your phoneStep 1

    Log in with your username and password. On Android, use the APK; on iPhone, use Safari.

  • 2
    Navigate to Security settingsStep 2

    Tap the menu or settings icon, then select Account, Security, or Protection (wording varies).

  • 3
    Select your 2FA methodStep 3

    Choose SMS (text code) or authenticator app. Tap Enable or Activate.

  • 4
    Confirm your phone or scan the QR codeStep 4

    For SMS, verify your number. For authenticator app, open your app and scan the QR code we display.

  • 5
    Enter the code to verifyStep 5

    We send you a test code (SMS) or you generate one from your authenticator app. Enter it to confirm setup.

  • 6
    Save your backup codesStep 6

    We provide backup codes. Store them safely offline — if you lose your phone, these codes let you regain access.

Android phone displaying six-digit SMS verification code entry field during gbk login
SMS 2FA: enter the code we text to your phone.
iPhone running Google Authenticator app displaying time-based one-time password for gbk account
Authenticator app: refresh codes every 30 seconds.
gbk account security settings panel on mobile showing two-factor authentication status enabled
Security dashboard: view your 2FA status and manage recovery codes.

2FA During Payment and Withdrawal on gbk

When you deposit money into your gbk account, we typically do not require 2FA — your payment provider (such as e-wallet, mobile banking, local payment, or online payment for bank transfers, or e-wallet scanners) handles that verification. However, when you initiate a withdrawal, we ask for a 2FA code as an extra safeguard. This applies whether you withdraw to mobile banking, local payment, online payment, e-wallet, mobile banking, or a registered bank account.

The withdrawal flow looks like this: you enter the amount and select your destination (for example, your local payment wallet), then we display a confirmation screen. You enter your 2FA code, and we process the withdrawal. The code is valid for a few minutes, so if you do not enter it in time, the withdrawal does not go through and you must start again. This prevents a thief who online paymentefly gains access to your phone from emptying your balance without your real-time awareness.

Keep your 2FA device with you during withdrawal requests

If you initiate a withdrawal but do not have your phone to enter the 2FA code, the withdrawal will time out and cancel. We do this to prevent automatic withdrawals on a lost phone. Always have your authenticator app or SMS-capable phone nearby before requesting a payout.

What to Do If You Lose Your Phone or Change Devices

If your phone is lost, stolen, or replaced, you need to regain access to your gbk account quickly. This is why we ask you to save backup codes when you enable 2FA. A backup code is a single-use, emergency password. You can use it once to log in even without your authenticator app or SMS access, and then you can disable the old 2FA and set up a new one on your new device.

If you do not have a backup code saved, contact our support team. We verify your identity using information from your account (such as recent deposit methods or account creation details) and then temporarily disable 2FA so you can log in and set it up again. This verification process may take time, so it is always better to save backup codes upfront.

If you are switching from SMS to an authenticator app, or vice versa, log into your account, go to Security settings, and select "Change 2FA method." We will guide you through removing the old method and adding the new one. During this transition, you might be asked to provide a 2FA code from your current method to confirm the change, so keep both your old device and new device available.

Managing 2FA Across Multiple Devices

On gbk, you can log in from multiple phones or tablets, but you only set up 2FA once per account. When you log in on a new device for the first time, we ask for your 2FA code just as we do on your primary phone. Your authenticator app or SMS works on any device, so if you use an authenticator app, simply open it on your new phone and scan the same QR code, or manually enter the key we provide. If you use SMS, the code goes to your registered phone number, regardless of which device you are logging in from.

We recommend having a backup phone with your authenticator app installed, or a secondary phone number registered for SMS. This way, if your primary device is not available during a sporting event in Jakarta, you can still access your account from a friend's phone or a tablet. Just remember that your 2FA code is only valid for one login — if you enter it on one device, it expires and you need a fresh code on another device.

Important: Never share your 2FA codes or backup codes with anyone. If someone asks you for your six-digit code, they are trying to access your account. Our support team will never ask for your 2FA code.

Data and Privacy During Two-Factor Authentication

Our 2FA system stores your phone number and a record of your 2FA preference (SMS or authenticator) in your account profile. If you use an authenticator app, we store a backup key, but the actual codes are generated by your app — we never store the codes themselves. This means our database does not hold any of the six-digit numbers you enter; each code is independent and time-limited.

When you receive an SMS code, the message travels through your mobile network provider. We do not retain a copy of the SMS after you use it, but your carrier may log it according to their data policies. If you use an authenticator app, all processing happens on your phone — no code is transmitted to us until you enter it. Once you enter the code, our server validates it and immediately discards it.

Your account data during 2FA setup and use is encrypted in transit (using standard HTTPS) and at rest (in our secure database). We use industry-standard encryption protocols so that your phone number, backup codes, and account identifier cannot be intercepted during transmission.

Summary: Keeping Your gbk Account Secure

Two-factor authentication on gbk is a simple second step that significantly protects your account, especially on mobile devices where your phone is likely always with you. Whether you use SMS codes or an authenticator app, the process takes seconds, and we only ask for it when you log in or perform sensitive actions like withdrawals to DANA, e-wallet, mobile banking, local payment, online payment, or bank accounts.

We recommend enabling 2FA as soon as you create your gbk account. Save your backup codes somewhere safe and offline. If you play live football markets during Liga 1 or Piala AFF tournaments, join live-dealer tables, or track esports betting on your phone, a secured account means you can enjoy those activities without worrying about unauthorized access to your funds.

If you have questions about 2FA setup, device changes, or recovery, our support team is available to help you. Two-factor authentication is our way of making sure that your gbk experience is not just entertaining but also secure.