Privacy Policy — greb89

greb89 operates an online betting and gaming platform serving members across Indonesia. We recognize that the personal information you share with us is sensitive and must be handled with the highest standards of care, security, and transparency. This Privacy Policy sets out in detail how we collect, use, store, share, and protect your personal data in compliance with international data protection principles and best practices applicable to the online gaming industry.

This policy applies to all users of the greb89 platform, including registered members, visitors, and anyone who interacts with our website, mobile-optimized interface, customer support channels, or any other service operated under the greb89 brand. By accessing or using any part of the platform, you acknowledge that you have read, understood, and agreed to be bound by this Privacy Policy in full.

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to your name, email address, phone number, residential address, date of birth, payment details, IP address, and account activity records.
• "Platform" means the greb89 website located at https://greb89.cam, including all associated mobile interfaces, applications, and services.
• "We", "Us", "Our" refers to greb89 and its operating entities.
• "You", "Your" refers to any individual who accesses or uses the Platform, whether as a registered member or visitor.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, greb89.
• "Third Party" means any individual or organization other than You or greb89, including service providers, payment processors, regulators, and law enforcement agencies.

greb89 collects Personal Data from multiple sources and categories to operate your account, process transactions, comply with legal obligations, and provide customer support. The information we collect falls into the following categories:

3.1 Account Registration Information

When you create a greb89 account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Email address (primary contact method)
• Mobile phone number (for account security and verification)
• Residential address (street, city, province, postal code)
• Username and password (securely hashed and stored)
• Preferred currency (Indonesian Rupiah by default)

3.2 Identity Verification (KYC) Documents

To comply with anti-money laundering (AML) regulations and verify your identity, we collect:

• Government-issued photo ID (National Identity Card / KTP, Passport, or Driver's License / SIM)
• Proof of address (utility bill, bank statement, or official correspondence dated within 90 days)
• Photographs or screenshots of payment methods (bank account card, e-wallet interface) showing your name
• Selfie or photograph holding your ID (for enhanced verification when necessary)

3.3 Financial & Transaction Data

To process deposits and withdrawals, we collect:

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata
• E-wallet account information for OVO, DANA, GoPay, ShopeePay, LinkAja
• Transaction history (deposit amounts, withdrawal requests, timestamps, payment method used)
• Bonus claims and wagering progress

3.4 Technical & Usage Data

When you access the Platform, we automatically collect:

• IP address and geolocation data (city-level precision to verify Indonesia residency)
• Device information (operating system, browser type and version, screen resolution, device model)
• Login timestamps and session duration
• Pages visited, features used, games played, and bets placed
• Clickstream data and navigation patterns
• Referral source (how you arrived at the Platform)

3.5 Customer Support Communications

If you contact our support team, we collect:

• The content of your messages (live chat transcripts, email correspondence, WhatsApp conversations)
• Support ticket history and resolution notes
• Feedback and survey responses

greb89 processes your Personal Data for the following legitimate purposes:

4.1 Account Management

• Creating and maintaining your member account
• Authenticating your identity when you log in
• Managing your account settings and preferences
• Providing access to your betting history and transaction records

4.2 Transaction Processing

• Processing deposits to your account from Indonesian banks and e-wallets
• Processing withdrawal requests and transferring funds to your registered payment method
• Verifying payment method ownership to prevent fraud and money laundering
• Calculating and crediting bonuses, cashback, and promotional rewards

4.3 Compliance & Legal Obligations

• Verifying your age (21+ requirement) and identity to comply with responsible gaming regulations
• Conducting Know Your Customer (KYC) and anti-money laundering (AML) checks
• Maintaining records of transactions and account activity as required by gaming regulators and financial authorities
• Cooperating with law enforcement investigations, court orders, or regulatory inquiries when legally required

4.4 Fraud Prevention & Security

• Detecting and preventing fraudulent activity, bonus abuse, collusion, and other prohibited conduct
• Monitoring for duplicate accounts and identity theft
• Protecting the Platform against hacking, denial-of-service attacks, and unauthorized access
• Enforcing our Terms & Conditions and maintaining the integrity of the betting environment

4.5 Customer Support

• Responding to your inquiries, complaints, and support requests
• Providing technical assistance and troubleshooting account issues
• Resolving disputes and processing refund claims
• Gathering feedback to improve service quality

4.6 Marketing & Promotional Communications (with consent)

• Sending you promotional offers, bonus notifications, and special event announcements via email or SMS (only if you have opted in)
• Personalizing promotions based on your betting preferences and activity level
• Displaying targeted in-app messages and banners about new games or features

You may opt out of marketing communications at any time by clicking "Unsubscribe" in any promotional email or contacting customer support.

4.7 Platform Improvement & Analytics

• Analyzing usage patterns to improve navigation, user interface, and feature design
• Conducting A/B testing to optimize performance and member experience
• Generating aggregated, anonymized statistics for business intelligence and reporting purposes

greb89 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict contractual and legal safeguards:

5.1 Payment Processors

We share necessary financial information with third-party payment service providers to process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors operate under strict data protection agreements and process your information solely for the purpose of completing financial transactions.

5.2 Gaming Providers & Platform Technology Partners

We share limited data (such as session identifiers and bet details) with licensed casino game providers (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming) to enable gameplay and settle wagers. These providers are bound by confidentiality obligations and do not use your data for any purpose other than delivering their games through the greb89 platform.

5.3 KYC & Identity Verification Services

We may use third-party identity verification services to authenticate your government-issued ID documents, check your address against official databases, and screen for financial crime risk. These services process your data under strict data protection agreements and retain information only as long as necessary to complete verification.

5.4 Customer Support Tools

We use third-party customer support platforms (live chat software, ticketing systems) to manage your inquiries and provide assistance. Support agents may access your account details and communication history to resolve your issues effectively. All support staff are bound by confidentiality agreements.

5.5 Legal & Regulatory Authorities

We may disclose your Personal Data to law enforcement agencies, courts, regulators, tax authorities, or other government bodies when we are legally required to do so by court order, subpoena, or applicable law. We will only disclose the minimum information necessary to comply with the legal obligation.

5.6 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity. You will be notified of any such change of control, and the new entity will be bound by this Privacy Policy unless you are given the opportunity to consent to a revised policy.

greb89 employs industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS — the same encryption standard used by financial institutions globally.
• Secure Data Centers: Personal Data is stored on secure servers located in facilities with physical access controls, 24/7 monitoring, fire suppression systems, and redundant power and network infrastructure.
• Access Control: Access to Personal Data is restricted to authorized personnel only, on a need-to-know basis. All staff with access to member data undergo background checks and sign confidentiality agreements.
• Password Protection: Member passwords are hashed using industry-standard cryptographic algorithms (bcrypt or PBKDF2) and are never stored in plain text.
• Regular Security Audits: We conduct regular internal and third-party security audits, penetration testing, and vulnerability assessments to identify and remediate potential security weaknesses.
• Firewall & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity and block unauthorized access attempts.
• Data Backup & Disaster Recovery: Regular backups are performed to ensure data integrity and availability. Backups are stored securely and encrypted.

While we take every reasonable precaution to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. You acknowledge that you provide your Personal Data at your own risk. If you suspect unauthorized access to your account, you must notify us immediately.

greb89 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

• Active Accounts: Personal Data is retained for the duration of your active membership and for a reasonable period afterward to support any post-closure inquiries or disputes.
• Transaction Records: Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of 7 years from the date of the transaction in accordance with anti-money laundering regulations and tax record-keeping requirements.
• KYC Documents: Identity verification documents are retained for 7 years after account closure to comply with regulatory obligations and to assist in any future investigations or audits.
• Customer Support Records: Live chat transcripts, email correspondence, and support tickets are retained for 3 years to ensure continuity of service and quality assurance.
• Marketing Consent Records: Records of your marketing preferences and consent history are retained for 3 years from the date of withdrawal of consent or account closure.

After the applicable retention period expires, Personal Data is securely deleted or anonymized such that it can no longer be associated with you as an individual. Anonymized data may be retained indefinitely for statistical and analytical purposes.

Under applicable data protection principles, you have the following rights with respect to your Personal Data:

8.1 Right of Access

You have the right to request a copy of the Personal Data we hold about you. You may request this information by contacting our support team. We will provide the data in a commonly used electronic format within 30 days of your request.

8.2 Right to Rectification

If any of your Personal Data is inaccurate, incomplete, or out of date, you have the right to request correction. You can update most information directly through your account settings, or contact support for assistance.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your Personal Data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent for processing. However, we may be required to retain certain information to comply with legal obligations (e.g., AML record-keeping requirements). We will inform you if we cannot fully comply with an erasure request due to legal constraints.

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your Personal Data in certain situations, such as when you contest the accuracy of the data or object to its processing. During the period of restriction, we may store the data but not use it except with your consent or for legal purposes.

8.5 Right to Data Portability

You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible.

8.6 Right to Object

You have the right to object to processing of your Personal Data for direct marketing purposes. You may opt out of marketing communications at any time by clicking "Unsubscribe" in any promotional email or by contacting support.

8.7 Right to Withdraw Consent

Where we process your Personal Data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing conducted prior to withdrawal.

8.8 How to Exercise Your Rights

To exercise any of the above rights, please contact our support team at support@greb89.cam (copy and paste into your email client). We will respond to your request within 30 days. We may request additional information to verify your identity before processing your request.

greb89 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These cookies enable core features such as login authentication, session management, and secure access to your account. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous information about how you use the Platform (pages visited, time spent, errors encountered) to help us improve performance and user experience.
• Functionality Cookies: Remember your preferences (language, currency, display settings) to provide a more personalized experience.
• Marketing Cookies: Track your activity across the Platform to deliver targeted promotions and measure the effectiveness of advertising campaigns. These cookies are only set if you have consented to marketing communications.

9.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, delete existing cookies, or notify you when a cookie is being set. However, disabling essential cookies may prevent you from using certain features of the Platform.

The greb89 Platform may contain links to third-party websites or services (such as payment processors, game providers, or social media platforms) that are not operated by greb89. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices or content.

If you click on a third-party link or interact with a third-party service, you will leave the greb89 Platform and be subject to the privacy policy and terms of that third party. We encourage you to review the privacy policies of any third-party services you visit or use.

greb89 does not control and is not liable for the data collection or processing practices of third-party services, even if those services are integrated into the Platform (such as embedded game interfaces). If you have concerns about how a third-party service handles your data, you should contact that service directly.

The greb89 Platform is intended exclusively for individuals who are at least 21 years of age. 21+ We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that we have inadvertently collected information from a person under 21, we will delete that information immediately and terminate the associated account.

If you are a parent or guardian and you believe your child has provided Personal Data to greb89, please contact us immediately at support@greb89.cam so that we can take appropriate action.

greb89 operates an online platform that may involve the transfer of Personal Data across international borders to countries where our service providers, data centers, or business partners are located. Some of these countries may not have data protection laws equivalent to those in Indonesia.

When we transfer your Personal Data internationally, we ensure that appropriate safeguards are in place to protect your information, including:

• Contractual clauses requiring recipients to maintain equivalent levels of data protection
• Technical measures such as encryption and access controls
• Compliance with international data protection standards and best practices

By using the greb89 Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this policy.

greb89 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify you by:

• Sending an email to the address registered on your account
• Displaying an in-app notification when you next log in
• Updating the "Effective Date" at the top of this page

We will provide at least 7 days' notice before material changes take effect. Continued use of the Platform after the effective date of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you must discontinue use of the Platform and contact us to close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. The current version is always accessible from the footer of every page on the greb89 website.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your Personal Data, please contact our support team:

• Email: support@greb89.cam (please do not click; copy and paste into your email client)
• Live Chat: Available 24/7 via the chat icon on the Platform
• WhatsApp: Available 08:00–24:00 WIB (contact details provided after account registration)

We aim to respond to all privacy-related inquiries within 48 hours. For formal data subject access requests or complaints, we will respond within 30 days as required by data protection regulations.