grabwin Privacy Policy

What data we collect on grabwin

We collect different types of information depending on how you use our platform. When you create an account, we collect your email address and a password you create. We do not store your password in plaintext; it is hashed for security.

When you make your first withdrawal, we request identity verification. You provide your national ID number (KTP for Indonesian residents), a photo of your ID, and proof of residential address (utility bill, bank statement, or government-issued document). We store this information securely to prevent fraud and comply with anti-money-laundering (AML) rules.

We collect transaction data: every deposit, withdrawal, bet, and game result. We log the date, time, amount, game or market, and outcome. We also collect your IP address and device information (operating system, browser type) for security and fraud detection.

Account data

Email, username, password hash, date of account creation, account status.

Identity data

Name, ID number, ID photo, proof of address, date of verification.

Transaction data

Deposits, withdrawals, bets placed, game results, amounts, timestamps.

Payment data

E-wallet identifiers, bank account numbers, online payment codes (used for transactions only).

Technical data

IP address, device type, browser, operating system, login history.

How we use your data

We use your data for the following purposes:

• ●

  Account management

  We use your email and password to let you log in and manage your account settings.

• ●

  Payment processing

  We use your payment information to process deposits and withdrawals through e-wallet, mobile banking, local payment, online payment, and bank virtual accounts.

• ●

  Identity verification

  We verify your ID and address to prevent fraud, money laundering, and underage access. Verification is required before your first withdrawal.

• ●

  Game settlement

  We use your bet history and transaction data to settle football sportsbook bets (Liga 1, Piala AFF, Champions League), casino games, esports markets (Mobile Legends, Free Fire, PUBG Mobile), and number prediction games.

• ●

  Fraud and security

  We analyze your transaction patterns, IP address, and device information to detect suspicious activity and protect your account.

• ●

  Legal compliance

  We retain transaction records to comply with anti-money-laundering laws and tax regulations in our jurisdiction of operation.

We at grabwin do not sell your data to third parties for marketing or advertising. Your information stays within our platform and is shared only with payment processors and fraud-prevention vendors.

Third-party processors and data sharing

We work with third-party vendors to process payments and detect fraud. These vendors include payment gateways for e-wallet, mobile banking, local payment, online payment, and bank processors. We also use anti-fraud services that analyze transaction patterns and account behaviour. We share only the minimum information needed for each vendor to perform their service.

Your identity documents (ID photo, proof of address) are stored on our secure servers and are not shared with third parties unless required by law (for example, if we receive a subpoena from a court or regulator). Payment processors receive only the information needed to process your deposit or withdrawal—not your full identity details.

Our servers may be located outside Indonesia. Data in transit between your device and our servers is encrypted using SSL/TLS protocols. Data at rest on our servers is encrypted and access-controlled.

Your rights and data access

You have the right to access your data. You can view most of your account information (email, phone number, transaction history, payment methods) directly in your grabwin account settings. If you want a complete copy of your personal data, contact our support team with a formal data access request. We provide a copy within 30 days.

You have the right to request correction of inaccurate data. If your account email is wrong or your identity information needs updating, contact support and we will correct it. You have the right to request deletion of your data, subject to legal retention requirements. We may retain transaction records for up to seven years for compliance purposes, but we can delete other data on request.

You have the right to withdraw consent to use your data for specific purposes (for example, fraud detection). However, withdrawing consent may prevent you from using grabwin, as verification and payment processing require your data.

Cookies and tracking

We use cookies to remember your login session and settings. When you log in, we set a session cookie so you remain logged in across page visits. This cookie expires when you log out or after a period of inactivity.

We do not use cookies to track you across other websites or services. Our platform does not integrate with third-party advertising networks. We do not sell data to data brokers or allow other sites to build profiles about you based on your activity on grabwin.

You can disable cookies in your browser settings, but doing so may prevent you from using grabwin effectively.

Data retention

We retain different types of data for different periods. Account information (email, username) is kept for as long as your account exists. Identity verification documents (ID photo, proof of address) are kept for five years after verification to comply with AML rules. Transaction records (deposits, withdrawals, bets, results) are kept for at least seven years for legal and tax compliance.

If you close your account, we keep your transaction records for the required retention periods but delete personal information (email, payment methods, device logs) after a reasonable period unless we have a legal obligation to retain it.

International data transfers

Our servers may be located outside Indonesia. By using grabwin, you consent to your data being transferred to and processed in other countries. We apply the same encryption and security standards regardless of server location.

We do not knowingly transfer data to countries with weak data protection laws. If we use cloud infrastructure, we ensure the provider meets international security standards.

Security measures

We protect your data using encryption, access controls, and regular security audits. Your password is hashed and salted so that even our staff cannot see it. All communication between your device and our servers is encrypted using TLS protocols. Access to sensitive data (identity documents, payment details) is restricted to staff who need it for their role.

We monitor our systems for unauthorized access and conduct regular backups to prevent data loss. However, no security system is perfect. If we discover a breach, we notify affected users and relevant authorities as required by law.

Changes to this policy

We may update this privacy policy from time to time. Material changes are announced in the app and via email. Your continued use of grabwin after an update means you accept the new policy.

Contact grabwin

If you have questions about how we handle your data, want to exercise your rights, or need to report a privacy concern, contact our support team via in-app chat or email at [email protected]We respond during business hours, typically within 24 hours.

For data access requests or formal privacy complaints, provide your account username and a detailed description of your request. We process requests in line with applicable data protection laws.

Related guides