🔒 Privacy Policy

📖 Overview

GATTCHAA MARKET ("we," "us," or "our") operates an online auction platform for Trading Card Game (TCG) enthusiasts in Batam, Indonesia. We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, or any related services (collectively, the "Service").

📊 Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account
• Create auction listings
• Place bids on auctions
• Purchase tokens
• Contact customer support
• Subscribe to our newsletter

Account Information

• Identity Data: Full name, email address, phone number
• Address Data: Delivery address in Batam area
• Profile Data: Username, profile picture, preferences
• Authentication Data: Password (encrypted), login history

Transaction Information

• Bidding Data: Bid amounts, auction participation history
• Listing Data: Items listed, auction settings, descriptions
• Payment Data: Token purchase history, payment methods
• Communication Data: Messages between users, support tickets

Automatically Collected Information

When you access our Service, we automatically collect certain information:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, click patterns
• Location Data: General location based on IP address
• Technical Data: Cookie preferences, screen resolution

🎯 How We Use Your Information

We use your personal information for the following purposes:

Service Provision

• Creating and managing your account
• Processing auction transactions
• Facilitating communication between users
• Providing customer support
• Sending transaction notifications

Platform Security

• Preventing fraud and unauthorized access
• Monitoring for suspicious activities
• Enforcing our Terms of Service
• Protecting platform integrity

Communication

• Sending important service updates
• Notifying about auction activities
• Responding to inquiries
• Marketing communications (with consent)

Platform Improvement

• Analyzing usage patterns
• Improving user experience
• Developing new features
• Conducting market research

🤝 Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With Other Users

• Username and profile information in auction listings
• Bid history for transparency purposes
• Communication messages as part of transactions

Service Providers

• Payment processors for token purchases
• Email service providers for notifications
• Hosting providers for data storage
• Analytics services for platform improvement

Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or legal processes
• Government agency requests
• Law enforcement investigations
• Protection of our rights and safety

Business Transfers

If GATTCHAA MARKET is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

🔐 Data Security

We implement robust security measures to protect your personal information:

Technical Safeguards

• Encryption: Data encrypted in transit and at rest
• Secure Servers: Protected hosting infrastructure
• Access Controls: Limited employee access to data
• Regular Updates: Security patches and system updates

Administrative Safeguards

• Staff Training: Regular privacy and security training
• Access Policies: Strict data access protocols
• Incident Response: Procedures for security breaches
• Regular Audits: Internal and external security reviews

Physical Safeguards

• Secure Facilities: Protected data centers
• Device Security: Secured workstations and servers
• Access Restrictions: Limited physical access to systems

🍪 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform:

Types of Cookies

• Essential Cookies: Required for basic platform functionality
• Performance Cookies: Help us understand how you use our site
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Used for personalized advertising (with consent)

Managing Cookies

You can control cookies through your browser settings:

• Block all cookies (may affect functionality)
• Allow only essential cookies
• Delete existing cookies
• Set cookie preferences

Third-Party Tracking

We may use third-party analytics services that collect information about your use of our Service. These services have their own privacy policies.

⚖️ Your Privacy Rights

You have the following rights regarding your personal information:

Access and Portability

• Request a copy of your personal data
• Export your data in a machine-readable format
• Receive information about how we use your data

Correction and Update

• Update your account information
• Correct inaccurate personal data
• Add missing information

Deletion and Restriction

• Request deletion of your personal data
• Restrict processing of your information
• Object to certain data processing activities

Withdrawal of Consent

• Withdraw consent for marketing communications
• Opt out of optional data processing
• Change cookie preferences

📅 Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

Account Data

• Active Accounts: Retained while account is active
• Closed Accounts: Deleted within 30 days of closure
• Legal Requirements: May be retained longer if required by law

Transaction Data

• Auction Records: Retained for 7 years for tax purposes
• Payment Data: Retained for 3 years for financial compliance
• Communication Logs: Retained for 2 years for dispute resolution

Technical Data

• Usage Logs: Retained for 12 months
• Security Logs: Retained for 24 months
• Analytics Data: Anonymized after 18 months

🌍 International Data Transfers

Your personal information may be transferred to and processed in countries other than Indonesia:

Transfer Safeguards

• Adequate protection measures in place
• Contractual obligations with service providers
• Compliance with applicable data protection laws
• Regular monitoring of transfer practices

Service Provider Locations

We may use service providers in the following regions:

• Singapore (hosting and technical services)
• United States (email and analytics services)
• European Union (security and monitoring tools)

👶 Children's Privacy

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

Age Verification

• Users must be at least 13 years old to register
• Parental consent required for users under 18
• Age verification during registration process

If We Discover Child Data

If we become aware that we have collected personal information from a child under 13, we will:

• Delete the information immediately
• Terminate the account
• Notify the parents if possible
• Implement additional safeguards

🔄 Privacy Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

Notification of Changes

• Email notification to registered users
• Notice on our website homepage
• In-app notifications for significant changes
• Updated "Last Modified" date

Types of Updates

• Minor Changes: Clarifications and formatting updates
• Material Changes: Changes to data collection or use practices
• Legal Updates: Changes required by law or regulation

Your Continued Use

By continuing to use our Service after privacy policy updates, you acknowledge and agree to the revised terms.