gembiratoto Privacy Policy

What data we collect on gembiratoto

We collect personal information at several points in your journey on gembiratoto:

• Account signup: We ask for your legal name, email address, contact phone number, and date of birth. This information must match your government-issued identity document.
• Identity verification (KYC): Before your first withdrawal, we request a government-issued ID (Indonesian KTP, SIM, or passport), proof of address (utility bill or bank statement dated within six months), and confirmation of contact details. We may request additional documents at any time.
• Payment information: When you deposit, we collect details about your payment method — e-wallet account number, bank account name, or virtual account identifier. We do not store full card numbers or e-wallet credentials; our payment processors handle those securely.
• Betting activity: We record every bet you place, game you play, and transaction you make on gembiratoto. This includes the amount, timestamp, outcome, and your account balance before and after. We use this data to detect fraud and settle disputes.
• Technical data: Our servers automatically log your IP address, device type, browser version, and approximate geographic location (city-level). We use this to prevent fraud, diagnose technical issues, and improve service performance.
• Communications: When you contact our support team, we keep records of your messages, complaints, and our responses. We use these records to resolve issues and improve our support process.

How we use your data on gembiratoto

We use your personal data for these purposes:

• Account management: We use your name, email, and phone number to create and maintain your gembiratoto account, send you account notifications, and reset your password if requested.
• Payment processing: We share payment details with our payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) to process deposits and withdrawals. These processors may retain your data per their privacy policies.
• Regulatory compliance: We use identity documents and transaction records to verify you are of legal age, comply with know-your-customer (KYC) regulations, and prevent money laundering. Indonesian financial authorities may request this data.
• Fraud prevention: We analyze your betting patterns, login IP addresses, and transaction history to detect suspicious activity, account takeovers, or duplicate accounts. We may suspend your account if we detect fraud.
• Dispute resolution: We keep your betting history and transaction records to settle disputes over game outcomes, settlement errors, or chargebacks. We may review this data for up to fourteen days after a dispute is filed.
• Service improvement: We aggregate anonymized data (not tied to individual accounts) to understand which games are popular, which payment methods are used most, and where technical issues occur. We use this to improve gembiratoto's performance and user experience.

We do not use your data for marketing purposes. We do not send unsolicited promotional emails or sell access to your data to advertisers. We do not use your data to profile you for behavioral advertising or price discrimination.

KYC data

Identity documents and proof of address used to verify your legal age and prevent money laundering. Retained indefinitely for regulatory compliance.

Betting records

Every bet, game, deposit, and withdrawal on your account. Retained indefinitely to settle disputes and demonstrate fair settlement.

Technical logs

IP address, device type, and location used to prevent fraud and diagnose technical issues. Retained for one year.

Third parties who access your data from gembiratoto

We do not sell your data. We share your information only with essential service providers:

• Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, and our bank partners (local payment, online payment, e-wallet, mobile banking) receive your payment details to process deposits and withdrawals. They may retain your data per their privacy policies.
• Identity verification services: We use third-party services to verify your government ID and proof of address. These services may temporarily store your documents but are contractually obligated to delete them after verification.
• Legal authorities: We comply with court orders, subpoenas, and government requests for your data. We may disclose information if required by Indonesian law or to prevent illegal activity.
• Fraud prevention services: We share limited transaction data with fraud detection providers to identify patterns of suspicious activity across multiple platforms.

Except for payment processors and legal authorities, all service providers sign confidentiality agreements and are prohibited from using your data for their own purposes.

How we protect your data on gembiratoto

We encrypt all personal data in transit (using HTTPS) and at rest (using AES-256 encryption). Our servers are hosted in secure data centers with restricted physical access, redundant power supplies, and 24/7 monitoring. We do not store passwords in plain text; we use industry-standard hashing algorithms (bcrypt) that cannot be reversed.

We limit access to your personal data to employees who need it to perform their roles — customer support staff who help you, engineers who maintain our systems, compliance officers who review KYC documents. All staff sign confidentiality agreements.

We perform regular security audits and penetration testing to identify vulnerabilities. If we discover a data breach, we will notify affected users within thirty days and take steps to mitigate damage. However, we cannot guarantee absolute security. Data transmitted over the internet is inherently vulnerable to interception. If you are concerned about security, contact our support team.

Your rights regarding your data on gembiratoto

You have the right to:

• Access: Request a copy of all personal data we hold about you. We will provide this in a standard electronic format within thirty days.
• Correction: Ask us to correct inaccurate or incomplete information. You can update some data (email, phone) yourself in your account settings.
• Deletion: Request that we delete your personal data, subject to legal retention requirements. We must retain your betting history and KYC documents for regulatory compliance and dispute resolution. We will delete technical logs, communications, and other non-essential data upon request.
• Portability: Request your data in a portable format. We will provide your betting history and account information in a standard format you can download.
• Objection: Object to our use of your data for fraud detection or regulatory compliance. However, doing so may result in your account being suspended or closed, as we cannot safely operate without these functions.

To exercise any of these rights, contact our support team with your account email address and request type. We will respond within thirty days.

Cookies and tracking on gembiratoto

We use cookies and similar technologies to recognize you when you return to gembiratoto and remember your preferences (display language, bet slip settings). We use session cookies (deleted when you close your browser) for account security and login authentication. We may use persistent cookies (lasting days or months) to remember whether you have read important notices.

We do not use cookies for behavioral tracking or marketing profiling. We do not use third-party cookies to track your activity across other websites. We do not allow Google Analytics or similar services to monitor your activity on gembiratoto.

You can disable cookies in your browser settings, but doing so may impair gembiratoto's functionality (for example, you may need to log in every time you refresh the page).

We collect your data only because it is necessary — to verify you are who you say you are, to protect your account from fraud, and to comply with financial regulations. We do not monetize your data or use it to profile you.

International data transfer and storage on gembiratoto

Our servers may be located outside Indonesia. Your personal data may be processed, stored, or transmitted through data centers in other countries. By using gembiratoto, you consent to international data transfer. Our data processors are bound by the same security and confidentiality standards we apply, regardless of location.

How long we keep your data from gembiratoto

We retain data for different periods based on its purpose:

• KYC documents (ID, proof of address): Retained indefinitely for regulatory compliance and dispute resolution.
• Betting history and transactions: Retained indefinitely to maintain accurate records and settle disputes or chargebacks.
• Payment information: Deleted after ninety days, unless needed for an ongoing dispute or chargeback investigation.
• Technical logs (IP address, device type): Retained for one year, then anonymized.
• Support communications: Retained for one year after your last contact, then deleted unless needed for an ongoing dispute.
• Marketing cookies: We do not use marketing cookies.

If you close your account, we retain all data needed for regulatory compliance and dispute resolution indefinitely. We delete other data within ninety days of account closure, except as required by law.

Your privacy contact on gembiratoto

If you have questions about our privacy practices, want to exercise your rights, or believe your data has been misused, contact us:

• Support email: Use the in-app support message feature or email our support team.
• Response time: We aim to respond to all privacy inquiries within thirty days.
• Escalation: If you are unsatisfied with our response, you may escalate your concern to our management team via support.

We are committed to protecting your privacy while operating gembiratoto transparently and securely. This policy reflects how we handle data today; we will update it as our practices evolve and technology improves.