gruptoto Privacy Policy
This page describes what we collect when you use gruptoto and how we keep that data protected. We collect personal information to verify your identity, process your payments, and provide customer support. All data is encrypted and stored securely. We do not sell your information to third parties or use it for purposes beyond what we describe here.
Our privacy practices centre on transparency and security. You have the right to access your data, request corrections, and ask questions about how we handle your information. We respond to data requests within one business day. This policy applies to all users of gruptoto regardless of where they access our platform.
Read this page carefully to understand our data practices. If you have questions after reading, contact our support team using the details at the end of this page.
What Data We Collect on gruptoto
When you create an account on gruptoto, we collect your email address, a password you create, and your date of birth. During identity verification (KYC), we collect your full name, photo ID number, and address. We store a copy of your ID and address proof document. All this information is necessary to comply with regulations and prevent fraud.
When you deposit funds on gruptoto, we collect payment method details (your wallet ID for DANA, e-wallet, mobile banking, local payment, or your bank account number for online payment, e-wallet, mobile banking, local payment transfers). We do not store full payment card numbers or wallet passwords. Our payment processors handle sensitive payment data using industry-standard encryption.
We automatically collect technical data when you use gruptoto. This includes your IP address, device type, browser type, and pages you visit. We use this data to detect fraud, prevent abuse, and improve our platform. We also track your account activity—every bet, every deposit, every withdrawal—and store it permanently in your account history.
- Account data
- Email, password, date of birth, full name. Collected at signup and stored for account management and security.
- Identity documents
- Photo ID copy and address proof. Required for KYC verification. Stored securely and retained for regulatory compliance.
- Payment data
- Wallet or bank account identifiers. Used only to process deposits and withdrawals. Not shared with third parties.
- Technical data
- IP address, device type, browser. Collected automatically to detect fraud and track platform usage.
How We Use Your Data on gruptoto
We use your personal data on gruptoto for account management, payment processing, and regulatory compliance. Your email is used for account verification, password recovery, and service notifications. Your identity documents are used to verify you are who you claim to be and to prevent underage access and fraud.
Payment data on gruptoto is used only to process deposits and withdrawals. We pass payment details to our payment processors (who handle online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment transfers) but we do not store sensitive payment information ourselves. Your account activity (bets, results, balance changes) is retained permanently so you can access your complete history.
We use technical data to detect suspicious activity and prevent fraud. If we detect unusual patterns—multiple login attempts, withdrawal requests from different locations, payment method changes—we may request additional verification. This protects your account and our platform.
Data Storage and Third Parties
We store your data on secure servers located outside Indonesia. Our servers use encryption, firewalls, and regular backups to protect your information. We limit access to your data to employees who need it to provide our service. All staff with access to data sign confidentiality agreements.
We share your data with payment processors (e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking) to process transactions. These processors have their own privacy policies and are responsible for protecting the data we share with them. We also share data with regulatory authorities if required by law.
We do not share your data with affiliate networks, advertisers, or brokers. We do not use your data to build profiles or sell segments. If a third party requests your data, we refuse unless we receive a valid legal order requiring disclosure.
Your Rights and Data Requests on gruptoto
You have the right to request access to all data we hold about you on gruptoto. We provide a copy of your data in a readable format within one business day. You also have the right to request corrections if your data is inaccurate. Email our support team with your request and we will process it promptly.
You have the right to request deletion of your account and associated data on gruptoto. However, we may be required by law to retain certain data (identity documents, transaction records) for compliance and fraud prevention. We retain transaction history indefinitely to help you track your account activity and to meet regulatory obligations.
You have the right to object to automated processing of your data and to dispute our decisions. If we deny a data request, we explain the reason. You can escalate disputes to your local data protection authority if you believe we have violated your privacy rights.
Cookies and Tracking on gruptoto
We use cookies on gruptoto to maintain your login session, remember your preferences, and measure how you use our platform. Cookies are small files stored on your device. They help us recognize you when you return and prevent you from logging in repeatedly.
Most cookies on gruptoto expire after a set period. Some are essential to the platform (login tokens, security checks). Others are optional and help us understand usage patterns. You can disable cookies in your browser settings, but doing so may affect your experience on gruptoto.
Data Breaches and Security Incidents
We maintain strict security practices to prevent unauthorized access to your data on gruptoto. However, no system is completely immune to breaches. If a security incident occurs that compromises your personal data, we notify you within one business day of discovering the breach. We also report the breach to relevant authorities if required by law.
In the event of a breach, we take immediate steps to isolate affected systems, assess the damage, and prevent further unauthorized access. We provide guidance on steps you should take to protect your account and identity. We do not cover losses resulting from breaches beyond our negligence.
Policy Updates and Jurisdiction
We update our privacy policy periodically to reflect changes in our practices or legal requirements. If we make material changes, we notify you by email and post the updated policy on our website. Your continued use of gruptoto after a policy update constitutes acceptance of the new terms.
This privacy policy is governed by the law of our operational jurisdiction. If you have a dispute about our privacy practices, we attempt to resolve it through our support process. If resolution is not reached, disputes are handled through arbitration or court proceedings in our jurisdiction.
Contact Us About Your Data
If you have questions about our privacy practices, want to request your data, or wish to dispute our handling of your information, contact our support team. We respond to all data requests and privacy inquiries within one business day. Your request should include your account email and a clear description of what you are asking.