Privacy Policy

1. Introduction

greb88 ("we", "us", "our") operates an online gaming platform serving Indonesian players. We recognize that privacy is important to our users, and we take our responsibility to protect your personal information seriously. This Privacy Policy applies to all personal data we collect through our website (https://greb88.cam), mobile applications, customer service channels, and any other services we provide.

By creating an account and using greb88 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any aspect of this Privacy Policy, you should not use our services.

2. Information We Collect

We collect various types of information to provide and improve our services. The categories of personal data we collect include:

2.1 Information You Provide Directly

When you register for a greb88 account, we collect:

• Personal Identification: Full legal name, date of birth, gender, and nationality as shown on your Indonesian identity document (KTP - Kartu Tanda Penduduk).
• Contact Information: Email address, phone number, and residential address.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers.
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals. Payment card information when applicable.
• Identity Verification Documents: Copies of your KTP, proof of address documents (utility bills, bank statements), and selfie verification photos submitted during KYC (Know Your Customer) procedures.
• Communication Content: Messages you send through customer support channels, including email, live chat, and phone conversations (which may be recorded for quality assurance and training purposes).

2.2 Information Collected Automatically

When you use greb88 services, we automatically collect:

• Gaming Activity Data: Records of all bets placed, games played, wager amounts, winnings and losses, bonus claims and usage, transaction history (deposits and withdrawals), and gameplay timestamps.
• Technical Information: IP address, device type and model, operating system and version, browser type and version, screen resolution, language preferences, and time zone settings.
• Usage Data: Pages visited, features used, session duration, referral source (how you arrived at our site), clickstream data, and navigation patterns within the platform.
• Location Data: Approximate geographic location based on IP address to ensure compliance with regional gaming regulations.
• Device Identifiers: Unique device identifiers, advertising IDs, and mobile network information when accessing greb88 via mobile applications.

2.3 Information from Third Parties

We may receive information about you from:

• Payment Processors: Transaction confirmation, payment method verification, and fraud prevention data from BCA, BRI, BNI, Mandiri, and other payment providers.
• Identity Verification Services: Age verification and identity authentication results from third-party KYC service providers.
• Analytics Providers: Aggregated behavioral data and statistical analysis from web analytics services.

3. How We Use Your Information

greb88 uses your personal information for the following purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your user account.
• Processing deposits, withdrawals, and other financial transactions.
• Enabling you to place bets and play games on our platform.
• Managing bonuses, promotions, and loyalty rewards.
• Maintaining accurate records of your gaming activity for account balance reconciliation.

3.2 Legal and Regulatory Compliance

• Verifying your age to enforce our 21+ age restriction policy.
• Confirming your identity through KYC procedures as required by anti-money laundering (AML) and counter-terrorist financing (CTF) regulations.
• Detecting and preventing fraud, money laundering, and other illegal activities.
• Complying with legal obligations, court orders, and requests from law enforcement or regulatory authorities.
• Maintaining records required by gaming license conditions and applicable laws.

3.3 Security and Fraud Prevention

• Monitoring account activity for suspicious behavior or unauthorized access.
• Identifying and preventing bonus abuse, collusion, and cheating.
• Protecting against security threats, hacking attempts, and denial-of-service attacks.
• Investigating suspected violations of our Terms & Conditions.

3.4 Customer Support

• Responding to your inquiries, questions, and support requests.
• Troubleshooting technical issues and resolving disputes.
• Providing personalized assistance based on your account history.
• Training customer support staff using recorded conversations (with personally identifiable information redacted when appropriate).

3.5 Marketing and Communications

• Sending promotional emails about new games, bonuses, tournaments, and special offers (only if you have opted in to receive marketing communications).
• Personalizing marketing messages based on your gaming preferences and activity.
• Conducting customer satisfaction surveys and gathering feedback.
• Sending important account notifications, security alerts, and service updates (you cannot opt out of these transactional messages).

3.6 Platform Improvement and Analytics

• Analyzing user behavior to improve website usability and functionality.
• Understanding which games and features are most popular.
• Identifying and fixing bugs or technical problems.
• Developing new games, features, and services based on user preferences.
• Conducting statistical analysis and generating aggregated reports (which do not identify individual users).

3.7 Responsible Gaming

• Monitoring player behavior to identify potential signs of problem gambling.
• Implementing and enforcing deposit limits, loss limits, and self-exclusion requests.
• Providing information and resources about responsible gaming practices.
• Complying with mandatory responsible gaming requirements under our gaming license.

4. Information Sharing and Disclosure

greb88 does not sell your personal information to third parties. However, we may share your information in the following circumstances:

4.1 Service Providers

We share necessary personal data with trusted third-party service providers who assist us in operating our platform, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals.
• Game Providers: Software suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.) to deliver gaming content and verify game outcomes.
• KYC/AML Services: Identity verification and fraud prevention companies to conduct age and identity checks.
• Cloud Hosting Providers: Secure data storage and server infrastructure providers.
• Customer Support Tools: Live chat and helpdesk software providers.
• Marketing Services: Email delivery platforms and analytics providers (only if you've opted in to marketing).

All service providers are bound by confidentiality agreements and are only permitted to use your data to perform services on our behalf. They are not allowed to use your information for their own purposes.

4.2 Legal Obligations

We may disclose your personal information when required by law or in response to:

• Court orders, subpoenas, or other legal processes.
• Requests from law enforcement agencies, regulatory authorities, or government bodies.
• Investigations into suspected illegal activity, fraud, or violations of our Terms & Conditions.
• Requirements under our gaming license conditions or anti-money laundering regulations.

4.3 Business Transfers

In the event that greb88 is involved in a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity. You will be notified via email and/or a prominent notice on our website of any change in ownership or use of your personal information.

4.4 With Your Consent

We may share your information with third parties when you have provided explicit consent for such sharing.

5. Data Security Measures

greb88 implements industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

5.1 Technical Security

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Sockets Layer) or TLS (Transport Layer Security) protocols—the same encryption technology used by banks.
• Data Encryption at Rest: Sensitive data stored on our servers (including financial information and identity documents) is encrypted using advanced encryption algorithms.
• Secure Password Storage: User passwords are hashed using industry-standard one-way hashing algorithms (bcrypt or similar) and salted to prevent reverse engineering.
• Firewalls and Intrusion Detection: Network firewalls and intrusion detection systems monitor and block unauthorized access attempts.
• Regular Security Audits: Our systems undergo periodic security assessments and penetration testing by independent third-party security firms.

5.2 Organizational Security

• Access Controls: Personal data is accessible only to authorized employees who need it to perform their job functions. Access is granted on a need-to-know basis and is regularly reviewed.
• Employee Training: All staff members receive training on data protection principles and are bound by strict confidentiality agreements.
• Secure Facilities: Physical servers and data storage facilities are located in secure, access-controlled environments with 24/7 monitoring.
• Incident Response Plan: We maintain a comprehensive data breach response plan to quickly identify, contain, and remediate security incidents.

5.3 User Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and never share it with anyone.
• Log out after each session, especially on shared or public computers.
• Keep your contact information (email, phone) up to date so we can reach you with security alerts.
• Be cautious of phishing attempts—greb88 will never ask for your password via email or phone.
• Report suspicious account activity immediately to customer support.

6. Data Retention Period

greb88 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations.

6.1 Active Accounts

While your account remains active, we retain all associated personal data to provide continuous service, maintain accurate transaction records, and ensure regulatory compliance.

6.2 Closed Accounts

After you close your account, we retain certain information for the following periods:

• Transaction Records: Financial transaction data (deposits, withdrawals, bets, winnings) is retained for a minimum of 7 years to comply with accounting regulations, tax laws, and anti-money laundering requirements.
• Identity Documents: Copies of KTP and other verification documents are retained for 7 years to meet KYC compliance obligations.
• Account History: Basic account information and gameplay history are retained for 7 years to resolve potential disputes, honor self-exclusion commitments, and prevent account recreation to circumvent restrictions.
• Marketing Preferences: If you opt out of marketing communications, we retain your email address and opt-out preference indefinitely to ensure we never contact you again for marketing purposes.

6.3 Legal Holds

If your data is subject to a legal investigation, court order, or regulatory inquiry, we will retain the relevant information until the matter is resolved, even if it extends beyond our standard retention periods.

6.4 Data Deletion

After the applicable retention period expires, personal data is securely deleted or anonymized so it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

7. Cookies and Tracking Technologies

greb88 uses cookies, web beacons, and similar tracking technologies to enhance your user experience, analyze site traffic, and deliver personalized content.

7.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to recognize your device on return visits and remember your preferences.

7.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly. These cookies enable core functionality like account login, session management, and security features. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous information about how visitors use the site (e.g., which pages are visited most, how long users stay). This data helps us improve website performance and user experience.
• Functionality Cookies: Remember your preferences (e.g., language selection, display settings) to provide a more personalized experience.
• Targeting/Advertising Cookies: Track your browsing activity to deliver personalized marketing messages and measure advertising effectiveness. These cookies are only used if you've consented to marketing communications.

7.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can choose to:

• Accept all cookies.
• Be notified when a cookie is set and choose whether to accept it.
• Reject all cookies (note: this may affect website functionality).
• Delete cookies already stored on your device.

Consult your browser's help documentation for specific instructions on managing cookies.

8. Your Privacy Rights

Under applicable data protection laws, you have certain rights regarding your personal information. greb88 respects these rights and provides mechanisms for you to exercise them.

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you. You can download your account information and transaction history directly from your account dashboard. For a comprehensive data export, contact our customer support team.

8.2 Right to Rectification

If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information (name, address, phone number) directly in your account settings. For changes requiring verification (e.g., date of birth), contact customer support.

8.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data in certain circumstances. However, this right is not absolute. We may need to retain certain information to:

• Comply with legal obligations (e.g., 7-year retention for financial records).
• Establish, exercise, or defend legal claims.
• Enforce our Terms & Conditions (e.g., preventing banned users from creating new accounts).
• Honor self-exclusion commitments (we must remember you chose to exclude yourself).

8.4 Right to Restrict Processing

In certain situations, you can request that we limit how we use your data (e.g., if you contest the accuracy of your data). During the restriction period, we will store your information but not actively use it except with your consent or for legal claims.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider. We provide data exports in CSV and JSON formats.

8.6 Right to Object

You have the right to object to certain types of data processing, particularly:

• Marketing: You can opt out of promotional emails at any time by clicking the unsubscribe link in marketing messages or updating your preferences in account settings.
• Profiling: You can object to automated decision-making and profiling (e.g., personalized bonus offers based on playing patterns).

8.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." Include your account username and specify which right you wish to exercise. We will respond within 30 days.

9. Third-Party Services

greb88 integrates with third-party services to provide comprehensive gaming entertainment. These third parties have their own privacy policies governing their collection and use of information.

9.1 Game Providers

When you play games from providers like Pragmatic Play, Evolution Gaming, NetEnt, or Microgaming, your gameplay data may be collected by those providers in accordance with their own privacy policies. We recommend reviewing their policies if you have concerns about how they handle data.

9.2 Payment Processors

When you make deposits or withdrawals, transaction data is shared with your chosen payment provider (BCA, BRI, BNI, Mandiri, OVO, DANA, etc.). These providers process payment information according to their own privacy and security standards.

9.3 External Links

Our website may contain links to external websites (e.g., game provider sites, payment processor sites, responsible gaming resources). greb88 is not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing personal information.

10. Children's Privacy

greb88 services are strictly for individuals aged 21 years and older. We do not knowingly collect personal information from individuals under 21. Our registration process requires users to confirm they are at least 21, and we verify age through KYC procedures.

If we discover that we have inadvertently collected personal information from someone under 21, we will immediately delete that information and close the associated account. If you believe we have collected information from an underage individual, please contact us immediately at [email protected].

Parents and guardians: We encourage you to monitor your children's online activities. Consider using parental control software to prevent minors from accessing gambling websites.

11. Changes to This Privacy Policy

greb88 reserves the right to update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. Changes will be effective immediately upon posting the updated policy on our website.

We will notify you of material changes via email (to the address registered on your account) and/or a prominent notice on our website homepage. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

Your continued use of greb88 services after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how greb88 handles your personal data, please contact us:

• Data Protection Officer Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 through our website
• Language Support: Indonesian and English

We aim to respond to all privacy inquiries within 30 days. For urgent security concerns (e.g., suspected unauthorized account access), please mark your message as "Urgent" and contact us immediately via live chat.