Privacy Policy

1. Introduction

This Privacy Policy governs the manner in which gr108 collects, uses, maintains, and discloses personal information from users of our online betting platform. This policy applies to the website, mobile applications, and all services offered by gr108.

By creating an account and using gr108's services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any aspect of this policy, you should not use our platform.

gr108 is committed to transparency in our data practices and compliance with applicable data protection laws, including international standards for privacy and security. We regularly review and update our privacy practices to ensure the highest level of protection for our users.

2. Information We Collect

gr108 collects several categories of information to provide, maintain, and improve our services, ensure security, and comply with legal requirements.

2.1 Personal Information You Provide

When you register an account with gr108, we collect the following personal information that you voluntarily provide:

• Identity Information: Full legal name, date of birth, nationality, gender, and government-issued identification number (Indonesian National Identity Card / KTP number).
• Contact Information: Email address, phone number, residential address, and postal code.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account details), and payment transaction history.
• Verification Documents: Copies of your KTP, passport, selfie photographs holding identification, utility bills or bank statements for address verification, and other documents required for Know Your Customer (KYC) compliance.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers.

2.2 Information We Collect Automatically

When you access and use the gr108 platform, we automatically collect certain technical and usage information:

• Device Information: IP address, device type and model, operating system and version, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features accessed, time spent on each page, betting and gaming activity (games played, bets placed, amounts wagered, winnings and losses), deposit and withdrawal history, and login/logout times.
• Location Data: Approximate geographic location derived from IP address to verify compliance with territorial restrictions and applicable gambling laws.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies to remember your preferences, authenticate your account, analyze site traffic, and personalize your experience.

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation, payment method verification, and fraud prevention data from banks and payment service providers.
• Identity Verification Services: Verification status and fraud risk assessments from third-party KYC/AML service providers.
• Sports Data Providers: Sports event results and statistics used to settle betting markets.
• Customer Support Tools: Chat transcripts and support ticket information if you contact us through third-party communication platforms.

3. How We Use Your Information

gr108 uses the collected information for the following purposes, all of which are necessary to provide our services and comply with legal obligations:

3.1 Service Provision

• Create and manage your betting account
• Process deposits, withdrawals, and other financial transactions
• Enable you to place bets and play games on our platform
• Calculate and credit winnings to your account
• Provide customer support and respond to your inquiries
• Send account-related notifications (transaction confirmations, account status updates, security alerts)

3.2 Security and Fraud Prevention

• Verify your identity and age to prevent underage gambling
• Detect and prevent fraudulent activity, money laundering, and other illegal activities
• Monitor for multiple accounts and bonus abuse
• Protect the integrity of our games and ensure fair play
• Secure your account against unauthorized access

3.3 Legal Compliance

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Maintain records as required by licensing authorities and applicable laws
• Respond to legal requests from law enforcement or regulatory bodies
• Enforce our Terms & Conditions and other policies

3.4 Platform Improvement

• Analyze usage patterns to improve platform performance and user experience
• Develop new features and services based on user behavior and feedback
• Conduct research and statistical analysis on betting trends and game popularity
• Test and debug technical issues

3.5 Marketing Communications (with Consent)

• Send promotional offers, bonuses, and special deals (only if you have opted in)
• Notify you about new games, features, and platform updates
• Personalize marketing content based on your preferences and activity

You can opt out of marketing communications at any time through your account settings or by clicking the unsubscribe link in any promotional email.

4. How We Protect Your Information

gr108 implements robust technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

4.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by banks and financial institutions.
• Secure Storage: Personal information is stored in encrypted databases located in secure data centers with restricted physical access, 24/7 surveillance, and redundant power and cooling systems.
• Firewalls and Intrusion Detection: Multi-layer firewall protection and real-time intrusion detection systems monitor for unauthorized access attempts.
• Regular Security Audits: Independent security firms conduct regular penetration testing and vulnerability assessments to identify and address potential weaknesses.
• Secure Password Storage: User passwords are hashed using industry-standard algorithms and salted to prevent recovery even in the unlikely event of a database breach.

4.2 Organizational Security Measures

• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data, and only to the extent necessary for their job functions.
• Employee Training: All employees receive regular training on data protection, privacy best practices, and security protocols.
• Confidentiality Agreements: Employees and contractors are bound by strict confidentiality agreements and face disciplinary action for policy violations.
• Data Minimization: We regularly review stored data and delete information that is no longer necessary for business or legal purposes.

4.3 Your Role in Security

While gr108 implements comprehensive security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if available
• Log out after each session, especially on shared devices
• Never respond to phishing emails requesting your password or account details
• Contact support immediately if you suspect unauthorized account access

5. Cookies and Tracking Technologies

gr108 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

5.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality, account authentication, and security. These cannot be disabled.	Session or up to 30 days
Performance Cookies	Collect anonymous data about how users interact with the platform to identify areas for improvement.	Up to 2 years
Functional Cookies	Remember your preferences (language, display settings) and provide personalized features.	Up to 1 year
Marketing Cookies	Track activity across websites to deliver targeted advertising and measure campaign effectiveness.	Up to 1 year

5.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though this may affect platform functionality. Essential cookies cannot be disabled as they are necessary for the platform to operate.

6. Data Sharing and Disclosure

gr108 does not sell your personal information to third parties. However, we may share your data with trusted partners in limited circumstances:

6.1 Service Providers

We share data with third-party service providers who perform functions on our behalf, including:

• Payment Processors: Banks and payment gateways that process deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay).
• Identity Verification: KYC/AML service providers that verify your identity and assess fraud risk.
• Cloud Infrastructure: Hosting providers that store data and run our platform infrastructure.
• Customer Support: Help desk software providers that facilitate support ticket management and live chat.
• Analytics: Analytics platforms that help us understand usage patterns and improve our services.

All service providers are contractually obligated to protect your data and use it only for the specific purposes for which it was shared.

6.2 Legal Requirements

We may disclose your information if required by law, regulatory authority, court order, or legal process, including:

• Responding to subpoenas, warrants, or other legal demands
• Cooperating with law enforcement investigations
• Complying with licensing authority audits and reporting requirements
• Protecting the rights, property, or safety of gr108, our users, or the public

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email or prominent notice on our platform before your data is transferred and becomes subject to a different privacy policy.

7. Data Retention

gr108 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Active Accounts: Data is retained for the duration of your account's active status plus any applicable retention periods.
• Closed Accounts: After account closure, we retain certain information for legal and regulatory compliance purposes, typically 5-7 years from the date of closure or last transaction, whichever is later.
• Inactive Accounts: Accounts with no activity for 12 consecutive months may be considered dormant. You will be notified before any data deletion.
• Transaction Records: Financial transaction records are retained for at least 7 years to comply with anti-money laundering regulations.

8. Your Privacy Rights

Under applicable data protection laws, you have several rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.

8.3 Right to Erasure

You have the right to request deletion of your personal data, subject to legal retention requirements. Note that we may be required to retain certain information for regulatory compliance even after you request deletion.

8.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of data or object to processing.

8.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider, where technically feasible.

8.6 Right to Object

You can object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.

8.7 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] (email displayed as plain text). We will respond to all requests within 30 days and may request identity verification to prevent unauthorized access.

9. Children's Privacy

gr108's services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from someone under the legal gambling age, we will immediately delete that information and permanently close the account.

If you believe we have collected information from a minor, please contact us immediately at [email protected].

10. International Data Transfers

gr108 operates internationally and may transfer your personal information to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure adequate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-group transfers

Your data will be protected with the same security standards regardless of where it is processed.

11. Changes to This Privacy Policy

gr108 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. We will notify users of material changes via email and prominent notice on our platform at least 30 days before changes take effect.

Your continued use of gr108 after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. We encourage you to review this policy periodically to stay informed about how we protect your data.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected] (displayed as plain text)
• Data Protection Officer: [email protected] (displayed as plain text)
• Live Chat: Available 24/7 through our platform
• WhatsApp: Available 24/7 for Indonesian-speaking support

We aim to respond to all privacy-related inquiries within 48 hours and resolve requests within 30 days.