Your privacy is a core commitment at gr108. This Policy explains exactly what personal data we collect, how we use it, who we share it with, and what rights you hold over your information as a player on our platform.
Summary: gr108 collects only the data necessary to operate your account, process payments, and keep the platform secure. We do not sell your personal information to third parties. You retain the right to access, correct, and delete your data at any time by contacting our support team.
1.1 Who We Are. gr108 operates the online betting and gaming platform accessible at https://gr108.app (the "Platform"). References in this Policy to "gr108", "we", "us", or "our" refer to the operator of the gr108 Platform.
1.2 Scope. This Privacy Policy applies to all personal data collected from individuals who visit, register on, or interact with the gr108 Platform, including registered players, prospective players who have not yet completed registration, and visitors who browse the Platform without an account.
1.3 Agreement. By accessing the gr108 Platform or creating an account, you acknowledge that you have read, understood, and agreed to the collection and use of your personal data as described in this Policy. If you do not agree, please discontinue use of the Platform immediately.
1.4 Related Documents. This Policy should be read alongside the gr108 Terms & Conditions and Responsible Gaming Policy, all of which together govern your relationship with the gr108 Platform.
The following terms carry the meanings set out below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, phone number, financial account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion. |
| "Data Controller" | gr108, the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of gr108 under a contract , including payment processors, identity verification providers, and analytics partners. |
| "Player" | Any registered user of the gr108 Platform who holds an active or suspended account. |
| "KYC" | Know Your Customer — the identity and age verification process applied by gr108 to comply with anti-money-laundering and responsible gaming obligations. |
| "Cookies" | Small text files placed on your device by the gr108 Platform to enable certain functions, remember preferences, and collect usage analytics. |
3.1 Registration Data. When you create a gr108 account, we collect your full legal name, date of birth, residential address in Indonesia, email address, and mobile phone number. This information is required to establish and maintain your account.
3.2 Identity Verification Data. To comply with our KYC obligations, gr108 may request copies of your Indonesian national identity card (KTP), passport, and proof of address (such as a recent bank statement or utility bill). These documents are processed solely for verification purposes.
3.3 Financial Data. We collect bank account details (including account holder name, account number, and bank name — such as BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OCBC NISP, or Bank Permata) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) for the purpose of processing deposits and withdrawals in Indonesian Rupiah (IDR). gr108 does not store full payment card numbers.
3.4 Transactional Data. We record all deposits, withdrawals, bets placed, games played, bonus transactions, and account balance changes associated with your account, including timestamps in WIB (UTC+7).
3.5 Technical Data. When you access the Platform, we automatically collect your IP address, device type, operating system, browser type and version, screen resolution, language settings, and session duration. This data is used for security monitoring, fraud prevention, and platform optimisation.
3.6 Behavioural Data. We may collect data on how you navigate and interact with the Platform, including pages visited, games launched, bet amounts, and features used. This data informs product improvements and, where you have consented, personalised marketing.
3.7 Communications Data. If you contact our support team via live chat, WhatsApp, or email, we retain records of those communications, including your messages and any attachments, for a period of up to five years.
3.8 Responsible Gaming Data. Where you use the Platform's self-exclusion, deposit limit, or cooling-off features, we record your preferences and the dates on which restrictions were applied or lifted.
gr108 collects Personal Data through the following channels:
Note: gr108 does not purchase Personal Data lists from third-party data brokers or marketing agencies. All data we hold about you originates from your direct interaction with the Platform or from our authorised service providers.
gr108 processes your Personal Data for the following specific purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, identity data |
| Age and identity verification (KYC) | Identity documents, registration data |
| Payment processing (deposits and withdrawals in IDR) | Financial data, transactional data |
| Fraud prevention and anti-money-laundering compliance | Financial data, technical data, transactional data |
| Platform security and access control | Technical data, registration data |
| Customer support and complaint resolution | Communications data, registration data, transactional data |
| Responsible gaming monitoring and intervention | Responsible gaming data, behavioural data, transactional data |
| Personalised promotions (with consent) | Behavioural data, registration data |
| Platform performance analytics and improvement | Technical data, behavioural data |
| Legal and regulatory compliance | All categories as required |
6.1 Contractual Necessity. The majority of gr108's data processing is necessary to perform the contract between you and gr108 — specifically, to operate your account, accept and settle bets, and process payments. Without this processing, gr108 cannot provide the Platform's services.
6.2 Legal Obligation. Certain processing activities — in particular KYC verification and transaction monitoring — are carried out to fulfil gr108's obligations under internationally applicable anti-money-laundering standards and responsible gaming frameworks.
6.3 Legitimate Interests. gr108 processes technical and behavioural data on the basis of its legitimate interest in maintaining platform security, preventing fraud, detecting prohibited conduct, and continuously improving the player experience. Where gr108 relies on legitimate interests, it has assessed that its interests do not override your fundamental privacy rights.
6.4 Consent. Where gr108 sends you promotional communications or uses behavioural data for marketing personalisation, we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting support at [email protected] or via the Platform's notification preference settings.
7.1 Service Providers. gr108 shares Personal Data with trusted third-party Data Processors who provide services integral to the Platform's operation. These include:
7.2 Data Processing Agreements. All third-party Data Processors are bound by written data processing agreements that restrict their use of your Personal Data to the purposes specified by gr108 and require them to implement appropriate technical and organisational security measures.
7.3 Legal Disclosure. gr108 may disclose Personal Data to competent authorities, regulators, or law enforcement agencies where required by applicable law, court order, or binding regulatory request. In such cases, gr108 will disclose only the minimum data necessary to satisfy the legal obligation.
7.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all of gr108's assets, your Personal Data may be transferred to the successor entity. gr108 will notify affected Players in advance of any such transfer and will ensure that the successor entity is bound by a privacy policy offering equivalent protections.
7.5 No Sale of Data. gr108 does not sell, rent, or trade your Personal Data to any third party for their own independent marketing or commercial purposes.
Commitment: gr108 will never sell your personal information. Every third party that receives your data is contractually required to protect it and use it solely for the purpose for which it was shared.
8.1 Active Accounts. While your gr108 account remains active, we retain all Personal Data associated with that account for as long as necessary to provide the Platform's services and comply with our legal and regulatory obligations.
8.2 Closed Accounts. Following account closure, gr108 retains your Personal Data for a minimum of five years. This retention period reflects our obligations under applicable anti-money-laundering standards, which require records of identity verification and financial transactions to be maintained for a defined period after a business relationship ends.
8.3 KYC Documents. Identity verification documents (KTP, passport, proof of address) are retained for a minimum of five years from the date of verification, or longer if required by a specific regulatory obligation applicable to your account.
8.4 Communications. Records of support communications are retained for up to five years from the date of the interaction.
8.5 Analytics Data. Anonymised or pseudonymised analytics data may be retained indefinitely, as it cannot reasonably be used to identify any individual Player.
8.6 Deletion. Once the applicable retention period expires, gr108 will securely delete or anonymise your Personal Data in accordance with our internal data destruction procedures. You may request earlier deletion subject to the conditions set out in Section 11 (Your Rights).
9.1 Technical Measures. gr108 employs the following technical security controls to protect your Personal Data:
9.2 Organisational Measures. Access to Personal Data within gr108 is restricted on a strict need-to-know basis. Only authorised personnel whose job functions require access to player data are permitted to view it, and all such staff are required to complete privacy and security training as a condition of employment.
9.3 Incident Response. In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, gr108 will notify affected Players without undue delay and will take all necessary steps to contain the breach and mitigate its impact.
9.4 Your Responsibility. While gr108 takes every reasonable precaution to protect your data on its side, you are responsible for maintaining the security of your account credentials. We strongly recommend using a unique, strong password and enabling two-factor authentication. Do not access your gr108 account over unsecured public Wi-Fi networks.
Security Notice: gr108 will never ask for your full password by email, live chat, or phone. If you receive any communication purporting to be from gr108 requesting your password, please do not respond and report it to [email protected] immediately.
10.1 What Are Cookies. Cookies are small text files placed on your device when you visit the gr108 Platform. They allow the Platform to remember your preferences, keep you logged in across sessions, and collect aggregated analytics on how players use the site.
10.2 Types of Cookies We Use.
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens, load balancing. The Platform cannot function without these cookies. | Yes — cannot be disabled |
| Functional | Remembering your language and display preferences, pre-filling your registered payment method during deposits. | Optional |
| Analytics | Collecting anonymised data on page visits, navigation paths, and feature usage to improve the Platform. | Optional |
| Marketing | Tracking promotional campaign performance and, where consent has been given, delivering personalised offers. | Consent required |
10.3 Managing Cookies. You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies from specific sites. Note that disabling functional cookies may impair certain Platform features. Disabling analytics cookies will not affect your ability to bet or play.
10.4 Local Storage. In addition to cookies, gr108 may use browser local storage to cache non-sensitive session preferences. This data does not leave your device except where explicitly described in this Policy.
As a Player whose Personal Data is processed by gr108, you hold the following rights. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.
11.1 Response Timeframe. gr108 will acknowledge all data rights requests within 5 business days (WIB) and will endeavour to fulfil verified requests within 30 calendar days. Complex requests may require additional time; gr108 will notify you if an extension is necessary.
11.2 Verification. To protect your data, gr108 will verify your identity before processing any data rights request. You may be asked to confirm account details or complete an additional verification step.
11.3 Limitations. Certain rights are subject to limitations where gr108 is required to retain data by law or where deletion of data would prevent the Platform from fulfilling contractual obligations to you (for example, withholding transactional data that is necessary to process a pending withdrawal).
12.1 Age Restriction. The gr108 Platform is strictly intended for individuals aged 21 and over. gr108 does not knowingly collect Personal Data from any person under the age of 21.
12.2 Discovery of Underage Data. If gr108 discovers or is notified that Personal Data has been collected from a person under 21 years of age, all such data will be deleted immediately, the associated account will be closed, and any deposits returned to the payment source, net of any winnings generated during the period of underage use.
12.3 Parental / Guardian Responsibility. If you are a parent or guardian and believe that a person under your care has registered on the gr108 Platform, please contact [email protected] immediately with the account details. We will investigate and act promptly.
21+ Only: Access to gr108 is restricted to adults aged 21 and over. We strongly encourage parents and guardians to use parental-control software to prevent minors from accessing online gambling platforms.
13.1 Cross-Border Processing. Some of gr108's Data Processors — including cloud infrastructure providers and certain game content studios — may process Personal Data on servers located outside Indonesia. Where such transfers occur, gr108 ensures they are governed by appropriate contractual safeguards that require the receiving party to apply data protection standards equivalent to those described in this Policy.
13.2 Safeguards. Cross-border data transfers by gr108 are covered by one or more of the following safeguards: standard contractual clauses approved by competent data protection authorities; the recipient's adherence to an internationally recognised data protection framework; or the recipient's binding corporate rules where the recipient is a member of the same corporate group as gr108.
13.3 Your Queries. If you would like further information about the specific safeguards applied to the transfer of your Personal Data outside Indonesia, please contact [email protected].
14.1 Right to Update. gr108 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the Platform's features. The effective date at the top of this page will be updated whenever a material change is made.
14.2 Notification. Where changes are material, gr108 will notify registered Players via email or in-platform notification at least 14 days before the updated Policy takes effect, giving you the opportunity to review the changes and, if necessary, close your account before they apply.
14.3 Continued Use. Your continued use of the gr108 Platform following the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, please cease use of the Platform and contact support to initiate account closure.
For all privacy-related enquiries, data rights requests, or complaints regarding gr108's handling of your Personal Data, please contact our support team through any of the following channels:
When submitting a data rights request, please include your registered username and email address, and clearly state the right you wish to exercise. This helps our team process your request as efficiently as possible.
gr108 treats data protection as a product feature, not a compliance checkbox. Here is what that means in practice for every player on our platform.
Every byte of data transmitted between your device and gr108's servers is protected with industry-standard 256-bit TLS encryption — the same standard used by major international banks operating in Indonesia. No third party can intercept your data in transit.
gr108's KYC process verifies every player's identity and age before any withdrawal is processed. This protects all players on the platform by ensuring funds cannot be claimed by anyone other than the verified account holder.
gr108 will never sell, rent, or trade your personal information to third-party advertisers or data brokers. The only parties who access your data are those directly involved in operating your account and processing your transactions.
You can access, correct, export, or delete your personal data at any time by contacting gr108 support. Data rights requests are acknowledged within 5 business days and resolved within 30 calendar days — no bureaucratic delays.
Every service provider — from BCA and BRI payment processors to Evolution Gaming's live casino infrastructure — operates under a signed data processing agreement. gr108 holds all partners to the same strict data protection standards applied internally.
In the unlikely event of a data security incident, gr108 commits to notifying affected players without undue delay. Our incident response team operates around the clock to detect, contain, and communicate any threat to player data.
gr108 combines rigorous data protection with an exceptional betting and gaming experience designed for Indonesian players. Log in to your account or explore our games — your privacy is always protected.