grab98 is committed to protecting the privacy and personal data of every player on our platform. This policy explains exactly what information we collect, why we collect it, and how it is used and protected.
Last Updated: 1 January 2026We collect only the personal information necessary to operate your Account, process transactions, verify your identity, and deliver a secure gaming experience.
All data is encrypted using industry-standard TLS/SSL protocols and stored on secured servers. Access is restricted to authorized personnel only on a need-to-know basis.
grab98 does not sell your personal data. We share information only with trusted service providers and where required by applicable law or regulatory obligation.
You have the right to access, correct, and request deletion of your personal data. Submit a request to our support team and we will respond within 30 days.
We use essential and analytical cookies to improve Platform performance and personalize your experience. You can manage cookie preferences in your browser settings.
For any privacy-related concerns, data access requests, or complaints, our dedicated support team is available 24/7 and responds to privacy inquiries within 5 business days.
A clear summary of the categories of personal data processed by grab98
| Data Category | Examples | Purpose | Legal Basis |
|---|---|---|---|
| Identity Data | Full name, date of birth, KTP / passport number | Account registration, KYC verification, age verification | Contractual necessity; Legal obligation |
| Contact Data | Email address, phone number, city of residence | Account communication, support, promotional updates | Contractual necessity; Legitimate interest |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri), e-wallet IDs, transaction history | Processing deposits and withdrawals, fraud prevention | Contractual necessity; Legal obligation |
| Technical Data | IP address, device type, browser, operating system, session logs | Platform security, fraud detection, performance optimization | Legitimate interest |
| Usage Data | Games played, bets placed, session duration, pages visited | Personalization, responsible gaming monitoring, product improvement | Legitimate interest; Consent |
| Communications Data | Support chat transcripts, email correspondence, survey responses | Customer service quality, dispute resolution, compliance records | Contractual necessity; Legal obligation |
In this Privacy Policy, the following terms carry the meanings assigned below:
grab98 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, grab98 determines the purposes and means of processing your Personal Data and is responsible for ensuring that processing activities comply with applicable data protection standards.
For all privacy-related enquiries, data access requests, or complaints, you may contact our Data Protection team using the contact details provided in Section 15 of this Policy. We commit to acknowledging all privacy enquiries within 5 business days and providing a substantive response within 30 days.
When you register an Account, complete identity verification, make a deposit or withdrawal, or contact our support team, you provide Personal Data directly to grab98. This includes:
When you access and use the Platform, grab98 automatically collects certain technical and behavioral data, including:
grab98 may receive Personal Data about you from third-party sources, including:
grab98 uses the Personal Data it collects for the following purposes:
Marketing Opt-Out: If you no longer wish to receive promotional emails or SMS notifications from grab98, you may opt out at any time by contacting our support team at [email protected]. Opting out of marketing does not affect transactional communications related to your Account.
grab98 processes your Personal Data on one or more of the following legal bases:
grab98 shares Personal Data with carefully selected third-party service providers who assist in operating the Platform. These include payment processors (such as banking partners handling BCA, BRI, BNI, and Mandiri transactions), identity verification providers, game studios (including Pragmatic Play, Evolution Gaming, and Microgaming), cloud hosting providers, and customer support platform vendors. All service providers are contractually bound to process your data only on grab98's instructions and to maintain appropriate security standards.
grab98 may disclose your Personal Data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required to do so by law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of grab98's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent Platform notice before your data becomes subject to a materially different privacy policy as a result of such a transfer.
grab98 does not sell, rent, or trade your Personal Data to any third party for their own independent marketing or commercial purposes. Any data sharing is strictly limited to what is necessary to operate the Platform and fulfil our legal obligations.
grab98 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods include:
When Personal Data is no longer required, it is securely deleted or anonymized in a manner that prevents re-identification.
grab98 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:
Your Role in Security: While grab98 takes every reasonable precaution to protect your data, you also play an important role. Never share your Account password or OTP with anyone. grab98 staff will never ask for your password through any channel. If you suspect your Account has been compromised, contact our support team immediately.
Cookies are small text files placed on your device when you visit the grab98 Platform. They allow the Platform to recognize your device, remember your preferences, maintain your login session, and collect analytics data to help us improve the Platform experience.
You may manage your cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies, though disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. Disabling marketing cookies will not affect your ability to access and use the Platform, but may result in less relevant promotional communications.
Subject to applicable law, you have the following rights with respect to your Personal Data held by grab98:
You may request a copy of the Personal Data grab98 holds about you, along with information about how it is processed.
If your Personal Data is inaccurate or incomplete, you may request that it be corrected or updated promptly.
You may request deletion of your Personal Data where it is no longer necessary, subject to overriding legal retention obligations.
You may request that grab98 limit the processing of your data in certain circumstances, such as while a dispute is being resolved.
Where processing is based on consent or contract, you may request a machine-readable copy of your data to transfer to another service provider.
You may object to processing based on legitimate interests, including direct marketing, at any time. We will cease processing unless compelling grounds exist.
To exercise any of the above rights, please contact our support team at [email protected]. We will respond to all verified data rights requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
The grab98 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not attempt to register an Account or provide any Personal Data to grab98.
If grab98 becomes aware that Personal Data has been collected from an individual under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered an Account on grab98, please notify our support team immediately so that we can investigate and act accordingly.
21+ Only: grab98 is committed to preventing underage gambling. Age verification is a mandatory step in our registration process, and we conduct ongoing checks to detect and remove underage accounts from the Platform.
grab98 operates internationally, and your Personal Data may be transferred to and processed in countries outside Indonesia where our hosting infrastructure, third-party service providers, or operational teams are located. Such transfers occur only where adequate safeguards are in place to ensure that your data receives a level of protection consistent with applicable data protection standards.
Safeguards for international transfers may include contractual data processing agreements incorporating standard data protection clauses, transfers to recipients in jurisdictions recognized as providing an adequate level of data protection, or transfers to service providers that maintain certified security frameworks. By using the grab98 Platform, you acknowledge that your data may be processed in jurisdictions outside Indonesia as described in this Policy.
The grab98 Platform integrates third-party services that may independently collect data when you interact with their embedded content or tools. These include game studio platforms such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe; payment gateway services for BCA, BRI, BNI, Mandiri, and supported e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja; and analytics providers.
Each third-party service provider operates under its own privacy policy and data practices. grab98 is not responsible for the privacy practices of third-party providers beyond the contractual obligations we impose on them as data processors. We encourage you to review the privacy notices of any third-party services you interact with through the Platform.
No External Links: The grab98 Platform does not contain links to third-party websites. All content and services accessible through the Platform are operated by grab98 or its contracted service providers acting on grab98's behalf.
grab98 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered Players via email or a prominent notice on the Platform at least 7 days before the revised Policy takes effect. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.
Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and may request Account closure and data deletion in accordance with Section 10 of this Policy. We recommend reviewing this Privacy Policy periodically to stay informed about how we handle your Personal Data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which grab98 processes your Personal Data, please contact our Data Protection team through the following channel:
When submitting a data rights request, please include your full name, registered email address, and a clear description of your request or concern. We may need to verify your identity before processing the request to ensure we are disclosing or acting on data belonging to the correct individual.
If you are not satisfied with grab98's response to your privacy complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction. grab98 cooperates fully with regulatory authorities in connection with privacy-related investigations.
If you have questions about how grab98 handles your data, our support team is available around the clock. You can also explore our Terms & Conditions, Responsible Gaming guidelines, or visit our FAQ center for quick answers.