grd138 Privacy Policy

What Data We Collect on grd138

We collect several types of information when you register and use grd138. During account creation, we collect your email address, password, and basic personal details (full name, date of birth, phone number). During identity verification, we collect your ID number and address from the documents you upload (KTP, passport, or proof of residence).

When you deposit funds on grd138, we collect payment information — your selected payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account details for mobile banking, local payment, online payment, e-wallet), the deposit amount, and transaction timestamps. We do not store your full card numbers or e-wallet passwords — we receive only what is necessary to process the transaction.

We also collect behavioural data — which markets you view, when you place bets, settlement outcomes, and account balance history. This data helps us improve our platform and detect fraudulent activity. We do not sell this behavioural data; we use it internally for compliance and service improvement.

How We Use Your Data on grd138

We use your personal information for specific operational and compliance purposes. Your identity documents verify your legal age and address — this is required by Indonesian anti-money-laundering regulations and payment-provider standards. Your payment information processes deposits and withdrawals through the channels you select (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment).

We use your behavioural data to detect fraud — unusual account activity, rapid balance changes, or suspicious withdrawal patterns trigger review. We may contact you to verify large withdrawals or ask additional questions about your account if we detect anomalies. We also use aggregated, anonymised data to analyse platform usage patterns and improve our services.

We do not use your data to send unsolicited marketing emails or SMS. We may send you transactional emails (account confirmation, deposit receipt, withdrawal notification) and support responses — these are operational, not promotional.

Third Parties & Our grd138 Data Sharing

We share your data with third parties only where necessary for service delivery. Our payment processors (e-wallet providers and banks) receive your payment details to process transactions — online payment receives your e-wallet account info when you deposit via mobile banking, local payment receives your online payment account details for bank transfers, and so forth. These processors follow their own privacy policies and are contractually bound to protect your information.

Our identity-verification partner receives your ID documents to confirm identity against official records. This partner operates under strict confidentiality agreements and deletes documents after verification completes. We do not share your data with data brokers, marketing agencies, or advertisers. If Indonesian law enforcement or tax authorities request your information via court order, we comply with legal process.

We at grd138 believe your data is yours — we are merely custodians. We protect it as if it were our own.

Data Storage & Security on grd138

We store your data on encrypted servers located in multiple jurisdictions — some may sit outside Indonesia due to our infrastructure requirements. All data in transit is encrypted using HTTPS. All data at rest is encrypted in our databases. Access to your personal information is restricted to authorised grd138 staff who require it for their role — support staff, compliance officers, and technical administrators. We log all data access and monitor for suspicious queries.

We maintain regular data backups for disaster recovery. Backups are encrypted and stored securely. We conduct annual security audits by third-party firms to test our defences. If we detect a data breach, we notify affected users within 72 hours and report to relevant authorities as required by law.

Cookies & Tracking on grd138

Our grd138 platform uses cookies to maintain your session — when you log in, a session cookie keeps you authenticated as you navigate our site. This cookie expires when you close your browser or log out. We also use analytics cookies to track aggregate traffic patterns (how many users visit, which pages are most popular, what devices they use). These analytics cookies do not identify you personally — they are aggregated across all users.

We do not place third-party advertising cookies or retargeting cookies on grd138. We do not participate in cross-site tracking networks. Your browsing history on grd138 stays within grd138 — we do not share it with advertisers or social media platforms for retargeting purposes.

Your Rights Regarding Data on grd138

You have the right to access your personal data stored on grd138. Contact support and request a copy of your account information — we provide it within 14 days. You also have the right to correct inaccurate data. If your name, address, or other details change, update them through your account settings or request support assistance.

You have the right to request deletion of your data, subject to legal retention requirements. We must retain your identity documents and transaction records for anti-money-laundering compliance (typically seven years or longer). After the retention period, we delete data on your request. Some data — such as settled market history needed for dispute resolution — may be retained indefinitely in anonymised form.

You can request we stop using your data for analytics or non-essential purposes by contacting support. This may limit our ability to detect fraud or improve platform performance, but we will honour your request for non-operational uses.

Children & Minors on grd138

Our grd138 platform is not intended for users under legal age (typically 18 in most jurisdictions). We verify user age during account registration. If we discover an account belongs to a minor, we suspend it immediately and delete associated data unless retention is required by law.

International Data Transfer & grd138

Your data may be stored on servers located outside Indonesia due to our infrastructure architecture. By using grd138, you acknowledge that your data may cross international borders. We apply the same security standards globally — encryption, access controls, and audit logging apply regardless of server location. If you are concerned about cross-border data transfer, contact support to discuss your options.

Changes to Our grd138 Privacy Policy

We may update this privacy policy as our practices evolve or regulations change. Material changes — such as new third-party data sharing or altered retention periods — are notified via email at least 14 days before taking effect. Continued use of grd138 after the notification period constitutes acceptance of the updated policy. You can review the current policy anytime through this page.

Contact Us About Privacy on grd138

If you have questions about how we handle your data, requests to access or delete your information, or concerns about our privacy practices, contact our support team. We respond to privacy inquiries within 14 days. For formal data access requests (often called Subject Access Requests in other jurisdictions), provide a written request identifying the specific data you seek.

You can reach us through your grd138 account dashboard or via the contact form on our FAQ pageOur support team will direct your request to the appropriate department or escalate to our data protection officer if needed.

Summary: Our grd138 Privacy Commitment

We at grd138 collect only the information needed to operate our platform and comply with regulations. We protect that information with encryption, access controls, and regular security audits. We do not sell your data, do not place retargeting cookies, and do not share information with unrelated third parties. Your data is yours — we are custodians, not owners.

When you use grd138 for Liga 1 markets from Jakarta, Surabaya, Bandung, or Medan, or when you deposit via DANA, e-wallet, mobile banking, or your bank, your data is handled according to this policy. You have rights — access, correction, deletion — which we honour subject to legal retention requirements. Our commitment is transparency: we explain what we collect and why, and we keep our practices aligned with that explanation.

For questions, corrections, or requests, contact support anytime through your grd138 account.