At grd138, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and the rights you hold over your information as a member of our platform.
Every data decision at grd138 is guided by six foundational principles designed to keep your personal information safe, transparent, and firmly under your control.
We tell you clearly what data we collect and why. There are no hidden tracking purposes or undisclosed third-party data-sharing arrangements.
All data in transit is protected by TLS/SSL encryption. Sensitive credentials are hashed using industry-standard algorithms and never stored in plain text.
You have the right to access, correct, and request deletion of your personal data at any time by contacting grd138 support.
We collect only what is strictly necessary for account administration, transaction processing, and regulatory compliance — nothing more.
Your personal data is never sold to third parties for marketing. It is shared only with vetted service providers bound by strict confidentiality obligations.
We retain personal data only for as long as required to fulfil the purposes set out in this policy or to meet our legal and regulatory obligations.
Scope of This Policy: This Privacy Policy applies to all personal data processed by grd138 in connection with the operation of https://grd138.cam and any associated services. By creating an account or continuing to use grd138, you acknowledge that you have read and understood this policy. If you do not agree with any part of this policy, you should discontinue use of the Platform and contact support to close your account.
For the purposes of this Privacy Policy, the following definitions apply:
2.1 grd138 acts as the data controller in respect of all Personal Data collected through the Platform. As data controller, grd138 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing is conducted in accordance with applicable data protection principles.
2.2 grd138 operates under an international gaming licence and serves Members primarily across Indonesia and other permitted jurisdictions. Although grd138 is an internationally licensed operator, it takes its data protection obligations seriously and applies rigorous standards across all markets it serves.
2.3 If you have any questions or concerns about how your Personal Data is handled, please contact our Data Protection contact listed in Section 15 of this policy.
3.1 grd138 collects the following categories of Personal Data from Members and prospective Members:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, gender, national ID (KTP) number, passport number | Provided by Member at registration or KYC |
| Contact Data | Email address, phone number, residential address (city, province) | Provided by Member at registration |
| Financial Data | Bank account name & number (BCA, BRI, BNI, Mandiri, etc.), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in IDR | Provided by Member during deposit/withdrawal |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Collected automatically via the Platform |
| Usage Data | Pages visited, games played, bets placed, time on site, click paths | Collected automatically via analytics tools |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Generated during customer support interactions |
| Verification Data | Copies of identity documents, selfies (where required for KYC), source-of-funds declarations | Provided by Member during KYC verification |
3.2 grd138 does not intentionally collect sensitive personal data (such as health information, religious beliefs, or political opinions) unless specifically required to fulfil a legal obligation. If such data is incidentally disclosed by a Member, grd138 will handle it with appropriate additional safeguards.
4.1 Directly from You. The majority of Personal Data grd138 holds is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
4.2 Automatically. When you access and use the Platform, grd138's systems automatically collect Technical Data and Usage Data through server logs, session analytics, and browser cookies. This data is used primarily for security monitoring and improving the Platform experience.
4.3 From Third Parties. grd138 may receive Personal Data about you from identity verification providers (for KYC), payment processors (to confirm transaction status), and fraud-prevention services. All third-party data sources are vetted and contractually bound to handle data in accordance with applicable data protection standards.
5.1 grd138 processes your Personal Data for the following specific purposes:
6.1 grd138 processes Personal Data on the following legal bases:
Withdrawing Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. To withdraw consent for marketing communications, contact our support team or use the unsubscribe option in any marketing email.
7.1 We Do Not Sell Your Data. grd138 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. Period.
7.2 Service Providers. grd138 may share your Personal Data with carefully selected Service Providers who assist in operating the Platform. These include:
All Service Providers are bound by data processing agreements that restrict them from using your Personal Data for any purpose beyond the specific service they provide to grd138.
7.3 Game Studios. Certain game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive anonymised session data to enable game delivery. These providers do not receive your full identity or financial data.
7.4 Legal Disclosure. grd138 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required by law, pursuant to a valid legal order, or where disclosure is necessary to protect the rights and safety of grd138, its Members, or the public.
7.5 Business Transfers. In the event of a merger, acquisition, or sale of all or part of grd138's business, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights in relation to it.
8.1 grd138 uses cookies and similar tracking technologies to operate the Platform, maintain session security, analyse usage patterns, and personalise your experience. The following categories of cookies are used:
8.2 You may control non-essential cookies through your browser settings. Note that disabling certain cookies may impair the functionality or security of the Platform. grd138 does not respond to browser "Do Not Track" signals, as there is no universally accepted standard for interpreting such signals.
Cookie Consent: On your first visit to grd138, you will be presented with a cookie preference selection. Strictly necessary cookies are always active. Analytics, functional, and marketing cookies are activated only upon your affirmative selection. You may update your preferences at any time via your account settings.
9.1 grd138 retains Personal Data for as long as necessary to fulfil the purposes described in this policy, or as required by our licensing authority and applicable law. The following general retention periods apply:
9.2 When Personal Data is no longer required, grd138 will securely delete or anonymise it in accordance with industry-standard data destruction procedures.
10.1 grd138 employs a multi-layered security architecture to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. Key measures include:
10.2 Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying grd138 immediately if you suspect any unauthorised access to your account.
10.3 In the event of a data breach that is likely to result in a high risk to your rights and freedoms, grd138 will notify affected Members without undue delay and will take all reasonable steps to mitigate the impact of the breach.
11.1 As a Member of grd138, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team using the details in Section 15:
11.2 grd138 will respond to all valid rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further two months, with notice provided to you within the initial thirty-day window.
Identity Verification for Rights Requests: To protect your data, grd138 may ask you to verify your identity before processing a rights request. This is to prevent unauthorised disclosure of Personal Data to third parties claiming to act on your behalf.
12.1 grd138 does not knowingly collect Personal Data from individuals under the age of 21. The Platform is strictly intended for adults aged 21 and over. If grd138 discovers that Personal Data has been collected from a person under 21, the relevant account will be closed immediately and all associated Personal Data will be deleted or returned to the source, in accordance with the Responsible Gaming provisions of our Terms & Conditions.
12.2 If you are a parent or guardian and believe that a minor has registered an account on grd138, please contact our support team immediately. grd138 treats such reports as a top priority and will investigate and act promptly.
13.1 As an internationally licensed platform serving Members across Indonesia and other permitted markets, grd138 may transfer Personal Data to countries outside Indonesia for the purposes of storage, processing, or service delivery. Such transfers may occur to countries where data protection laws differ from those in Indonesia.
13.2 Where Personal Data is transferred internationally, grd138 takes appropriate safeguards to ensure that your data receives an equivalent level of protection. These safeguards include contractual data processing agreements with all Service Providers that impose data protection standards consistent with grd138's obligations.
13.3 By using the Platform, you acknowledge and consent to the transfer of your Personal Data as described in this section, subject always to the protections described herein.
14.1 grd138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The date of the most recent revision is displayed at the top of this page.
14.2 Where a material change is made to this Privacy Policy, grd138 will notify active Members via a prominent notice on the Platform or by email to the address registered on your account. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.
14.3 We encourage you to review this Privacy Policy periodically to stay informed about how grd138 protects your Personal Data. Previous versions of this policy are available upon request.
15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way grd138 handles your Personal Data, please contact our support team. Our agents are available 24/7 and are able to assist in both English and Indonesian.
15.2 For data rights requests (access, rectification, erasure, portability, objection), please include your full registered name and account username so that we can verify your identity and process your request promptly.
Support Contact: Reach our team any time at [email protected] — displayed here as plain text only. You may also visit our FAQ page for answers to common questions about account management, data handling, and platform security.
Explore our FAQ for quick answers to common privacy questions, review our full Terms & Conditions, or head back to the homepage to explore everything grd138 has to offer.