grtoto Privacy Policy

1. Introduction

Welcome to the grtoto Privacy Policy. At grtoto ("we," "us," "our," or "the Platform"), we are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal data when you access or use our online casino, sports betting, and lottery services at https://grtoto.cam and associated mobile applications.

This Privacy Policy applies to all users of grtoto, including residents of Indonesia and other jurisdictions where our services are available. By creating an account, accessing our Platform, or using any of our services, you acknowledge that you have read, understood, and agreed to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must immediately discontinue use of our services.

We operate under international data protection regulations and comply with applicable privacy laws in the jurisdictions where we offer services. This Privacy Policy should be read in conjunction with our Terms and Conditions, Responsible Gaming Policy, and any other agreements between you and grtoto. In the event of any conflict between this Privacy Policy and other policies, this Privacy Policy shall prevail regarding matters of data protection and privacy.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a grtoto account, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (Indonesian KTP number, passport number, or driver's license number).
• Contact Information: Email address, phone number (mobile and landline), residential address, postal code, and city of residence.
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers for account recovery purposes.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay numbers), payment card information (partially masked), and transaction history.
• Identity Verification Documents: Copies of government-issued ID cards (KTP, passport), utility bills, bank statements, or other documents required for Know Your Customer (KYC) compliance and anti-money laundering verification.
• Communication Records: Contents of messages sent through our live chat, email correspondence with customer support, WhatsApp conversations, and phone call recordings (where legally permitted and with your consent).

2.2 Information Collected Automatically

When you access or use the grtoto Platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device manufacturer and model, and unique device identifiers.
• Connection Data: IP address, internet service provider (ISP), geographic location (country, region, city derived from IP address), time zone settings, and network connection type (WiFi, mobile data).
• Usage Information: Pages visited, clickstream data, games played, bets placed, deposit and withdrawal requests, time spent on each page, navigation paths, session duration, and interaction with promotional offers.
• Gaming Data: Bet history, game outcomes, win/loss records, preferred games and betting markets, average stake size, session frequency, and gaming patterns for responsible gaming monitoring.
• Marketing Interactions: Email open rates, link clicks in promotional emails, response to marketing campaigns, and advertising platform identifiers (where applicable).

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and e-wallet providers) for transaction verification and fraud prevention.
• Identity verification services that confirm your identity documents and validate your personal information against official databases.
• Credit reference agencies and fraud prevention databases to assess risk and prevent fraudulent activity.
• Publicly available sources including social media profiles (when you link your account or use social login features, if available).
• Marketing partners and analytics providers that help us understand how users interact with our advertising and promotional campaigns.

3. How We Use Your Personal Data

grtoto uses your personal information for the following purposes, all of which are necessary for the operation of our gaming platform and compliance with legal requirements:

3.1 Account Management and Service Delivery

• Creating, maintaining, and managing your user account.
• Verifying your identity, age (21+ requirement), and eligibility to use our services.
• Processing your deposits, withdrawals, and other financial transactions.
• Providing access to casino games, sports betting markets, togel draws, and other gaming products.
• Recording and settling your bets, crediting winnings, and maintaining accurate account balances.
• Sending you account-related notifications including deposit confirmations, withdrawal updates, bonus activations, and account security alerts.

3.2 Legal Compliance and Fraud Prevention

• Complying with Know Your Customer (KYC) and anti-money laundering (AML) regulations.
• Detecting, investigating, and preventing fraudulent activity, bonus abuse, collusion, and other prohibited activities.
• Responding to legal requests from law enforcement, regulatory authorities, and courts.
• Maintaining records required by gaming licenses and international regulatory standards.
• Enforcing our Terms and Conditions and other policies.
• Protecting the security and integrity of our Platform against cyber attacks, hacking attempts, and unauthorized access.

3.3 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests via live chat, email, WhatsApp, or phone.
• Providing technical assistance and troubleshooting account issues.
• Sending important service announcements, policy updates, and operational changes.
• Conducting customer satisfaction surveys and collecting feedback to improve our services.

3.4 Marketing and Personalization

• Sending you promotional offers, bonus notifications, and marketing communications (with your consent or where legally permitted).
• Personalizing your gaming experience based on your preferences, play history, and betting patterns.
• Recommending games, betting markets, and features that may interest you.
• Conducting market research and analyzing user behavior to improve our product offerings.

3.5 Responsible Gaming and Player Protection

• Monitoring your gaming activity to identify signs of problem gambling behavior.
• Implementing deposit limits, self-exclusion requests, and time-out periods you have set.
• Providing access to responsible gaming tools and resources.
• Intervening when we detect potentially harmful gaming patterns and offering support services.

4. Data Sharing and Disclosure

grtoto does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality and security obligations:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML verification services that confirm your identity and check against fraud databases.
• Game Providers: Casino game suppliers and sports betting data providers who deliver gaming content on our Platform.
• Customer Support Tools: Live chat software providers, email hosting services, and CRM platforms that help us manage customer communications.
• Cloud Hosting Services: Secure data centers and cloud infrastructure providers that store and process your information.
• Analytics Providers: Services that help us understand how users interact with our Platform and measure the effectiveness of our marketing campaigns.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, government authorities, or courts when required by law, court order, or legal process, or when necessary to:

• Comply with gaming license obligations and regulatory reporting requirements.
• Respond to lawful requests for information or investigations.
• Detect, prevent, or address fraud, security breaches, or illegal activity.
• Protect the rights, property, or safety of grtoto, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor company. We will notify you via email and/or prominent notice on our Platform of any such change in ownership or control of your personal data.

5. Cookies and Tracking Technologies

grtoto uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your user experience, analyze Platform usage, and deliver personalized content and advertising. Cookies are small text files stored on your device that help us recognize you on subsequent visits and remember your preferences.

5.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly, including maintaining your login session, processing transactions, and ensuring security. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use our Platform, which pages you visit most often, and any error messages you receive, helping us improve site performance.
• Functionality Cookies: Remember your preferences such as language selection, currency settings, and display options to provide a more personalized experience.
• Analytics Cookies: Help us understand user behavior through aggregated and anonymized data, allowing us to improve our services and content.
• Advertising Cookies: Track your browsing activity to deliver targeted advertising and measure the effectiveness of marketing campaigns (where legally permitted and with your consent).

5.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may prevent you from accessing certain features of the Platform and may affect your user experience. To manage cookies, consult your browser's help documentation or visit www.allaboutcookies.org for detailed instructions.

6. Data Security Measures

Protecting your personal information is a top priority at grtoto. We implement comprehensive technical, organizational, and administrative security measures to safeguard your data against unauthorized access, loss, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive data at rest, including passwords and financial information, is encrypted using advanced cryptographic algorithms.
• Secure Infrastructure: Our servers are hosted in secure data centers with 24/7 monitoring, fire suppression systems, backup power supplies, and strict physical access controls.
• Access Controls: We restrict access to personal data on a need-to-know basis, with role-based permissions ensuring that only authorized personnel can view or process your information.
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans to identify and address potential weaknesses.
• Employee Training: All grtoto staff undergo mandatory data protection and security awareness training to ensure they understand their obligations to protect user privacy.
• Fraud Detection Systems: Advanced monitoring tools detect and prevent suspicious activity, unauthorized access attempts, and fraudulent transactions.

While we implement robust security measures, no system is completely immune to security breaches. In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities in accordance with applicable data protection laws.

7. Data Retention Period

grtoto retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data and the purpose for which it is held:

• Account Information: Retained for the duration of your active account plus five years after account closure to comply with gaming license requirements and anti-money laundering regulations.
• Transaction Records: Maintained for seven years from the date of transaction to meet financial record-keeping obligations and support dispute resolution.
• Identity Documents: Stored for the duration of your account relationship plus seven years post-closure for regulatory compliance purposes.
• Communication Records: Live chat transcripts, emails, and support tickets are retained for three years to maintain service quality and resolve disputes.
• Marketing Data: Retained until you withdraw consent or request deletion, after which it is removed from active marketing systems within 30 days.
• Technical Logs: IP addresses, device identifiers, and access logs are typically retained for 12-24 months for security monitoring and fraud prevention.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices, unless longer retention is required by law.

8. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information held by grtoto:

• Right of Access: You may request a copy of the personal data we hold about you, including details about how we use and share it.
• Right to Rectification: You can request correction of inaccurate or incomplete personal information by updating your account details or contacting customer support.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or when you withdraw consent (subject to legal retention requirements).
• Right to Restrict Processing: You can request that we limit how we use your personal data in specific situations, such as while we verify the accuracy of disputed information.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You can object to processing of your personal data for direct marketing purposes at any time by unsubscribing from promotional communications or contacting us.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw that consent at any time, though this does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact our Privacy Team at [email protected] with "Privacy Request" in the subject line. We will respond to your request within 30 days and may require identity verification to protect your information from unauthorized access.

9. International Data Transfers

grtoto operates internationally and may transfer your personal information to countries outside Indonesia for processing by our service providers, cloud hosting partners, and business associates. Some of these countries may not have data protection laws equivalent to those in Indonesia or the European Union.

When we transfer your personal data internationally, we implement appropriate safeguards to ensure your information remains protected, including:

• Using Standard Contractual Clauses approved by international data protection authorities.
• Ensuring our service providers are certified under recognized data protection frameworks.
• Conducting due diligence on data recipients to verify adequate security measures.
• Applying encryption and access controls during international data transmission.

10. Children's Privacy

grtoto services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information and close the associated account. Parents or guardians who believe their child has provided personal information to grtoto should contact us immediately at [email protected].

11. Changes to This Privacy Policy

grtoto reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Any changes will be effective immediately upon posting the revised Privacy Policy to this page, with the "Last Updated" date reflecting the revision date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. For significant changes that materially affect your rights, we will provide additional notice via email or prominent announcement on the Platform. Your continued use of grtoto services after any changes constitutes acceptance of the revised Privacy Policy.

12. Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or our privacy practices, please contact our dedicated Privacy Team:

• Email: [email protected] (Subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 via the website chat widget
• WhatsApp Support: +62 812-3456-7890 (08:00-23:00 WIB daily)
• Website: https://grtoto.cam

We aim to respond to all privacy-related inquiries within 30 days and will work diligently to address your concerns and ensure your privacy rights are respected. For urgent matters related to data breaches or unauthorized access to your account, please contact us immediately via live chat for expedited assistance.