My understanding, which definitely could be wrong, is there is is an address space reserved in the ROM for GPIO (80000C4h), so if that address is accessed, the ROM data pins are set to zero and some (4 to be exact) GBA cart data pins can pass through to a GPIO device (RTC, solar sensor, rumble...