Last Updated: January 1, 2026 | Effective Date: January 1, 2026

256-Bit Encryption

All personal data transmitted between your device and grc108 servers is protected by bank-grade SSL encryption technology.

Data Protection

We never sell, rent, or share your personal information with third parties for marketing purposes without your explicit consent.

Confidential Gaming

Your gaming activity, transaction history, and account details remain strictly confidential and are never disclosed publicly.

Your Rights

You have full rights to access, correct, delete, or export your personal data at any time through your account settings or by contacting us.

1. Introduction and Scope

This Privacy Policy explains how grc108 ("we", "us", "our") collects, uses, stores, protects, and discloses personal information obtained from users ("you", "your") of our online gaming platform accessible at https://grc108.cam. This policy applies to all services offered by grc108 including casino games, sports betting, lottery draws, and related entertainment products targeting the Indonesian market.

By registering an account and using grc108 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must immediately cease using our services and refrain from creating an account.

grc108 is committed to protecting your privacy and ensuring the security of your personal data in accordance with international data protection standards and Indonesian data sovereignty requirements. We employ industry-leading security measures and maintain strict internal policies to safeguard your information against unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

To provide our services effectively and comply with legal obligations, grc108 collects various types of information from users. The categories of data we collect include:

2.1 Personal Identification Information

During account registration and subsequent verification processes, we collect:

2.2 Financial Information

To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), we collect:

Note: Credit card details and banking passwords are processed through PCI-DSS certified third-party payment gateways and are never stored on grc108 servers.

2.3 Account and Gaming Activity Data

2.4 Technical and Device Information

We automatically collect certain technical data when you access grc108:

3. How We Use Your Information

grc108 processes your personal data for the following legitimate purposes:

3.1 Account Management and Service Provision

3.2 Legal and Regulatory Compliance

3.3 Customer Support and Communication

3.4 Platform Improvement and Security

3.5 Responsible Gaming and Player Protection

Marketing Communications

By registering with grc108, you consent to receive promotional emails, SMS messages, and push notifications about bonuses, tournaments, and new game releases. You may opt out of marketing communications at any time through your account settings or by clicking "unsubscribe" in any promotional email. Note that you cannot opt out of essential service communications such as security alerts, transaction confirmations, or policy updates.

4. Data Sharing and Third-Party Disclosure

grc108 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

4.1 Service Providers and Business Partners

4.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement, regulatory bodies, or government agencies when:

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity as part of the business transaction. We will notify affected users and ensure the new owner continues to honor this Privacy Policy.

4.4 Aggregate and Anonymized Data

We may share anonymized, aggregated statistical data that does not identify individual users with business partners, advertisers, or the public. For example, we might report "50,000 players from Jakarta" or "average session duration of 45 minutes" without revealing any personal information.

5. Data Security Measures

grc108 employs multiple layers of security controls to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Encryption and Transmission Security

5.2 Access Controls and Authentication

5.3 Infrastructure and Physical Security

5.4 Employee Training and Policies

While we implement robust security measures, no system is completely immune to cyber threats. You acknowledge that transmission of data over the internet carries inherent risks, and grc108 cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your password and for all activities that occur under your account.

6. Data Retention and Deletion

grc108 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

6.1 Active Account Data

While your account remains active, we retain all account information, transaction history, and gaming activity data to provide ongoing services and fulfill our contractual obligations to you.

6.2 Closed Account Data

Upon account closure, we retain certain information for the following periods:

6.3 Secure Deletion Process

Once retention periods expire, personal data is securely deleted using industry-standard data erasure methods that prevent recovery. Backup copies in disaster recovery systems are overwritten according to our backup rotation schedule.

6.4 Your Right to Deletion

You may request deletion of your personal data by contacting our Data Protection Officer. We will comply within 30 days unless legal obligations require us to retain certain information. Note that account deletion is permanent and irreversible; your gaming history and balance will be forfeited after the withdrawal period expires.

7. Cookies and Tracking Technologies

grc108 uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device by your web browser.

7.1 Types of Cookies We Use

Cookie Type Purpose Duration
Essential Cookies Required for login, session management, and core functionality. Cannot be disabled without affecting service availability. Session/Persistent
Performance Cookies Collect anonymous analytics data about page load times, error rates, and platform usage patterns. 2 years
Functionality Cookies Remember your preferences such as language selection, game favorites, and display settings. 1 year
Marketing Cookies Track your interaction with promotional content to deliver relevant offers and measure campaign effectiveness. 90 days

7.2 Managing Cookie Preferences

You can manage cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though this may impair website functionality. Disabling essential cookies will prevent you from logging into your account. To adjust cookie preferences in popular browsers:

8. Your Privacy Rights

As a grc108 user, you have the following rights regarding your personal data:

8.1 Right to Access

You may request a copy of all personal information we hold about you. We will provide this in a structured, commonly used format within 30 days of your request.

8.2 Right to Correction

You can update most personal information (email, phone, address) directly through your account settings. For changes to name or date of birth, contact customer support with supporting documentation.

8.3 Right to Deletion

You may request deletion of your personal data, subject to legal retention requirements for financial and KYC records. Upon deletion, your account will be permanently closed.

8.4 Right to Data Portability

You can request an export of your personal data and gaming history in a machine-readable format (CSV or JSON) for transfer to another service provider.

8.5 Right to Object

You may object to processing of your data for marketing purposes by opting out of promotional communications. You cannot object to processing necessary for service provision or legal compliance.

8.6 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request". Include your account username and specify which right you wish to exercise. We will verify your identity and respond within 30 days.

9. Children's Privacy

grc108 services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under the legal gambling age in Indonesia. Our registration process includes mandatory age verification, and we employ technical measures to prevent underage access.

If we discover that a user is under 21 years of age, we will immediately suspend the account, void all bets and winnings, return deposited funds (if verifiable), and delete all associated personal data. Parents or guardians who believe their child has provided information to grc108 should contact us immediately at [email protected] so we can take appropriate action.

10. International Data Transfers

grc108 primarily operates within Indonesia and stores player data on secure servers located in certified data centers. However, some service providers (payment processors, game studios, analytics platforms) may process data outside Indonesian territory. In such cases, we ensure adequate safeguards are in place through:

You acknowledge and consent to these international data transfers as necessary for the provision of grc108 services.

11. Changes to This Privacy Policy

grc108 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. We will notify users of material changes through:

The "Last Updated" date at the top of this policy indicates when changes were last made. Continued use of grc108 services after notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you must close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Previous versions of this policy are available upon request for your reference.

12. Contact Information and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, please contact us:

Data Protection Officer

We take privacy concerns seriously and will investigate all complaints thoroughly. You can expect an initial response within 72 hours and a full resolution within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Indonesian data protection authority or seek legal remedies through the courts.

Your Privacy is Our Priority

At grc108, protecting your personal information is not just a legal obligation — it's a core value that underpins everything we do. We invest heavily in security infrastructure, train our staff rigorously on data protection, and continuously improve our practices to exceed industry standards. Your trust is our most valuable asset, and we are committed to earning and maintaining it every day.

Explore More Legal Information

Review our complete policy documentation for full transparency

Terms & Conditions Responsible Gaming Frequently Asked Questions