Privacy Policy

Last Updated: November 13, 2025

This Privacy Policy explains how Gatinero VIP Bot ("we", "us", or "the Bot") collects, uses, and protects your information when you use our Discord bot service.

1. Information We Collect

We collect only the minimum information necessary to provide our VIP key sales and management service:

Data Type	Purpose	Retention
Discord User ID	Identify users for role assignment	Permanent
Discord Username	Match payments to Discord accounts	Permanent
Server/Guild ID	Manage bot functionality per server	While bot is in server
Channel ID	Send VIP pricing and keys to tickets	While channel exists
Payment Amount	Determine VIP plan (monthly/permanent)	Permanent
VIP Key	Provide access to Gatinero script	Permanent
Purchase Timestamp	Track VIP activation date	Permanent

2. How We Collect Information

Information is collected through:

• Discord API: User IDs, usernames, server/channel information
• Manual Payment Verification: Admins verify QRIS payments and record transaction details
• Bot Interactions: Ticket channel creation events and admin commands

3. How We Use Your Information

We use collected information exclusively for:

• Manually verifying QRIS payments and assigning Discord roles
• Generating and delivering VIP keys via Webhook Junkie API
• Sending VIP access confirmations to ticket channels
• Notifying administrators of payment verifications
• Providing customer support
• Preventing fraud and abuse

4. Data Sharing and Third Parties

We share limited data with the following services:

Discord

The Bot operates on Discord's platform and is subject to Discord's Privacy Policy. We access Discord data through their official API.

QRIS Payment System

Payments are processed through QRIS (Quick Response Code Indonesian Standard) via your mobile banking or e-wallet app. We do not collect or store your payment information. Payment verification is done manually by our administrators.

Webhook Junkie

We use Webhook Junkie API to generate VIP keys after manual payment verification. We send minimal data with HMAC signatures for authentication. No personal information beyond what's necessary for key generation is shared.

5. Data Security

We implement security measures to protect your information:

• HMAC SHA-256 Signatures: Secure authentication for key generation
• Webhook Token Validation: Verify payment notifications are legitimate
• Environment Variables: Sensitive credentials stored securely
• HTTPS/TLS: Encrypted communication with external services
• Access Control: Limited administrator access to data

6. Data Retention

We retain data as follows:

• VIP Purchase Records: Retained permanently for support and fraud prevention
• Server Data: Deleted when bot is removed from server
• Channel Data: Deleted when ticket channels are closed
• Logs: Server logs retained for 30 days for debugging

7. Your Rights

You have the right to:

• Access: Request a copy of your data we store
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (may affect VIP access)
• Portability: Receive your data in a structured format
• Objection: Object to data processing (may prevent service use)

To exercise these rights, open a ticket in our Discord server.

8. Children's Privacy

Our service is not intended for users under 13 years old (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us immediately.

9. International Data Transfers

Our Bot operates on servers that may be located in different countries. By using the Bot, you consent to the transfer of your information to these locations. We ensure appropriate safeguards are in place.

10. Cookies and Tracking

The Bot does not use cookies or tracking technologies. Our static web pages (Terms of Service and Privacy Policy) do not collect any data or use analytics.

11. Discord Bot Permissions

The Bot requires the following Discord permissions:

• View Channels: Detect new ticket channels
• Send Messages: Send VIP pricing and keys
• Embed Links: Display rich message components
• Attach Files: Send banner images
• Manage Roles: Assign VIP role to paying customers
• Read Message History: Ensure messages are sent correctly

12. Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours
• Describe the nature of the breach
• Explain steps taken to mitigate harm
• Provide guidance on protective measures

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify users of significant changes through:

• Discord server announcements
• Updated "Last Updated" date on this page

Continued use of the Bot after changes constitutes acceptance of the updated policy.

14. Legal Basis for Processing (GDPR)

For users in the European Union, we process your data based on:

• Contract Performance: Processing necessary to provide VIP services
• Legitimate Interest: Fraud prevention and service improvement
• Consent: Where explicitly provided for specific purposes

15. Contact Us

For privacy-related questions, concerns, or data requests:

• Open a ticket in our Discord server
• Contact our support team through Discord

We will respond to privacy requests within 30 days.