Privacy Policy — tkp88

tkp88 ("we", "us", "our", "the Platform") is committed to handling your personal data with integrity, transparency, and respect. This Privacy Policy sets out the principles that govern how tkp88 collects, uses, stores, shares, and protects personal information obtained through the operation of our online gaming platform at tkp88.vu.

We serve Members primarily based in Indonesia — spanning major cities including Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Palembang, and Makassar — and we recognize that trust is the cornerstone of our relationship with every player. Our data practices are designed to meet internationally recognized privacy standards while reflecting the specific expectations and legal context of the Indonesian market.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the agreement between you and tkp88.

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or in combination with other data held by tkp88.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, and any other form of handling.
• "Member" means any individual who has completed the tkp88 account registration process and holds an active or inactive account on the Platform.
• "Controller" means tkp88, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Processor" means any third-party service provider that processes Personal Data on behalf of tkp88, strictly under our instruction and subject to contractual data protection obligations.
• "Cookies" means small text files placed on your device by the Platform for the purposes of session management, analytics, and personalization, as further described in Clause 10.
• "KYC" (Know Your Customer) means the identity and age verification procedures applied by tkp88 before processing withdrawals above defined thresholds, as described in the Terms & Conditions.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including government-issued identification numbers, financial account details, and health-related information (in the context of responsible gaming disclosures).

tkp88 collects only the Personal Data that is necessary to deliver our services, maintain platform security, comply with applicable regulatory obligations, and improve the Member experience. The categories of data we collect are set out in the table below:

tkp88 collects Personal Data through the following channels:

• Direct submission: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support via live chat or email, or responding to surveys and promotions.
• Automated collection: Technical and usage data gathered automatically when you access the Platform via cookies, web beacons, server logs, and similar tracking technologies (see Clause 10).
• Third-party sources: Identity verification data from KYC service providers, fraud-prevention data from payment processors, and publicly available data used for anti-money-laundering screening.
• Game Providers: Aggregated gameplay and wagering data supplied by our Game Providers — including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft — for dispute resolution, game integrity, and account management purposes.

Where tkp88 receives data from third-party sources, we take reasonable steps to verify that the data was collected lawfully and that we have a valid basis for using it in conjunction with your Account.

tkp88 uses your Personal Data only for the specific purposes described below. We do not use your data for any purpose that is incompatible with those stated here without first seeking your explicit consent:

• Account management: Creating, maintaining, and administering your Member Account, including processing deposits, withdrawals, and bonus credits denominated in Indonesian Rupiah (IDR).
• Identity and age verification: Confirming that you are at least 21 years of age and that your identity and payment methods are genuine, as required by our KYC procedures.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, multi-accounting, and other Prohibited Activities as defined in our Terms & Conditions.
• Regulatory and legal compliance: Meeting our obligations under applicable international licensing conditions, anti-money-laundering (AML) regulations, and financial crime prevention frameworks.
• Customer support: Responding to Member enquiries, resolving disputes, processing complaints, and communicating important account-related notices.
• Platform improvement: Analyzing aggregated usage data to optimize the Member experience, improve game performance, and enhance the usability of the Platform for Indonesian players.
• Responsible gaming: Monitoring gameplay patterns to identify Members who may be exhibiting signs of problem gambling, and applying responsible gaming tools where appropriate or requested.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaign updates (such as Idul Fitri, Ramadhan, and Indonesian Independence Day promotions) to Members who have opted in to marketing communications. Members may opt out at any time as described in Clause 11.

tkp88 processes your Personal Data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the services you have requested under the Terms & Conditions — including account creation, deposit processing, withdrawal execution, and game access.
• Legal obligation: Processing necessary for tkp88 to comply with applicable laws and regulatory requirements, including AML screening, KYC verification, and retention of financial transaction records.
• Legitimate interests: Processing carried out in pursuit of tkp88's legitimate business interests — including fraud prevention, platform security, abuse detection, and service improvement — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for purposes beyond those described above — most notably, direct marketing communications — where we have obtained your explicit, freely given, and withdrawable consent at registration or subsequently. You may withdraw consent at any time by contacting support at [email protected].

tkp88 does not sell, rent, or trade your Personal Data to third-party marketing organizations under any circumstances. We share your data only where necessary and only with the categories of recipients described below, each of whom is subject to appropriate contractual data protection obligations:

• Payment processors and financial institutions: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to execute deposit and withdrawal transactions on your behalf.
• KYC and identity verification providers: Third-party KYC service providers receive identity and document data for the sole purpose of verifying your age and identity as required by our account verification procedures.
• Game Providers: Your account identifier and wagering data are shared with the relevant Game Provider to the extent necessary to deliver game sessions, settle bets, and resolve disputes. Game Providers are contractually prohibited from using this data for any purpose beyond game delivery.
• Fraud prevention and AML screening services: Aggregated or anonymized data may be shared with fraud-detection and financial-crime-prevention platforms to identify suspicious activity patterns and protect the integrity of the Platform.
• Customer support tools: Live chat platform providers and email service providers process communication data as Processors acting under tkp88's instruction, solely for the purpose of delivering support services.
• Regulatory authorities and law enforcement: tkp88 may disclose Personal Data to competent authorities where required by applicable law, court order, or valid regulatory demand. We will notify you of such disclosure where legally permissible to do so.

All third-party Processors engaged by tkp88 are required to implement appropriate technical and organizational security measures commensurate with the sensitivity of the data they handle on our behalf.

tkp88 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The general retention periods we apply are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in accordance with industry-standard data destruction procedures. Anonymized or aggregated data that can no longer identify any individual may be retained indefinitely for statistical and analytical purposes.

tkp88 implements a layered security architecture designed to protect your Personal Data against unauthorized access, accidental loss, alteration, and unlawful disclosure. Our core security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the tkp88 Platform is encrypted in transit using industry-standard SSL/TLS protocols. You can verify the secure connection via the padlock icon in your browser's address bar.
• Encrypted data storage: Sensitive Personal Data stored on tkp88 servers — including identity documents, financial account references, and KYC records — is encrypted at rest using AES-256 encryption.
• Access controls: Strict role-based access controls limit internal access to Personal Data to only those staff members who require it to perform their specific job functions. Access is logged and regularly audited.
• Two-factor authentication (2FA): Administrative access to systems holding Member data is protected by mandatory two-factor authentication. Members are also encouraged to enable 2FA on their own Accounts for additional protection.
• Regular security audits: tkp88 conducts periodic third-party security penetration tests and vulnerability assessments to identify and remediate potential weaknesses in our infrastructure.
• Incident response: In the event of a data breach that poses a risk to Members, tkp88 will notify affected individuals and relevant authorities within the timeframes required by applicable law, providing clear information on the nature of the breach and the steps being taken to address it.

The tkp88 Platform uses cookies and similar tracking technologies to deliver a functional, personalized, and secure experience. Cookies are small text files stored on your device by your web browser when you access the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences — such as your preferred language, currency display (IDR), and session settings — to provide a more personalized experience on return visits.
• Analytics cookies: Collect aggregated, anonymized information about how Members navigate the Platform — including which pages are visited most frequently and how long sessions last — to help us improve the user experience. No personally identifiable information is included in analytics reports.
• Security and fraud-prevention cookies: Help tkp88 identify suspicious access patterns, detect bot activity, and protect the integrity of the Platform and its Members' Accounts.

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging into the Platform or completing transactions. Disabling other cookie categories will not prevent Platform access but may limit certain personalization features.

As a Member of the tkp88 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request — [Your Account Username]". We will respond to all valid requests within 30 calendar days.

• Right of access: You may request a copy of the Personal Data that tkp88 holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data associated with your Account. You may also update certain details directly through your Account profile settings.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected. This right is subject to tkp88's legal obligation to retain certain data for regulatory compliance periods as described in Clause 8.
• Right to restrict processing: You may request that tkp88 limit the processing of your Personal Data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending resolution of that objection.
• Right to data portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider where technically feasible.
• Right to object: You may object to processing based on tkp88's legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — including direct marketing communications — you may withdraw that consent at any time by contacting support or updating your communication preferences in your Account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to opt out of marketing: You may unsubscribe from promotional emails and bonus notifications at any time by following the unsubscribe link included in every marketing communication, or by contacting [email protected].

The tkp88 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from any individual under the age of 21. Our registration process requires declaration of date of birth, and KYC verification requires submission of a government-issued ID confirming the Member's age before withdrawals are processed.

If tkp88 discovers or has reasonable grounds to believe that a Member is under 21 years of age, the Account will be immediately suspended. All Personal Data associated with the underage Account will be securely deleted within a reasonable period following the closure, subject only to any mandatory retention obligations relating to the investigation of underage access.

If you are a parent or guardian and believe that a minor in your care has accessed the tkp88 Platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including account closure and data deletion, without undue delay.

As an internationally operated platform serving Members across Indonesia, some of your Personal Data may be transferred to and processed in countries outside Indonesia, including in jurisdictions where tkp88's servers, Game Providers, or third-party Processors are located.

Whenever Personal Data is transferred internationally, tkp88 takes appropriate steps to ensure that the data continues to receive an adequate level of protection. These steps include:

• Executing data processing agreements with all international Processors that incorporate contractually binding data protection obligations equivalent to those described in this Privacy Policy.
• Conducting due diligence assessments of the data protection standards maintained by international Processors before engaging their services.
• Applying technical safeguards — including encryption in transit and at rest — to Personal Data regardless of where it is processed.

By registering a tkp88 Account, you acknowledge and consent to the transfer of your Personal Data to international locations for the purposes and under the safeguards described in this clause.

tkp88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or Platform services. When material changes are made — meaning changes that significantly affect your rights or how your Personal Data is used — we will notify you via the email address registered to your Account and/or via a prominent notice on the Platform, at least 7 calendar days before the changes take effect.

Minor clarifications, typographical corrections, and non-material updates may be made without advance notice. The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated terms, you must discontinue use of the Platform and submit an Account closure request before the revision takes effect.

For any questions, concerns, or formal requests relating to this Privacy Policy or the handling of your Personal Data, please reach out to the tkp88 data support team through any of the channels below:

• Email: [email protected] — for formal privacy rights requests and data-related enquiries. Please include "Privacy Rights Request" in your subject line along with your Account username.
• Live Chat: Available 24/7 directly on the Platform for general privacy queries and account-related data questions.
• WhatsApp: +62 811 0000 8888 — for general enquiries during support hours (WIB, UTC+7).

Our support team operates in Indonesian (primary language) and English, 24 hours a day, 7 days a week, including all Indonesian public holidays. We are committed to acknowledging all formal privacy requests within 5 business days and resolving them within 30 calendar days of receipt.