Privacy Policy

1. Introduction and Scope

tahu69 ("we", "us", "our", "the Company") is committed to protecting the privacy and personal data of every user who accesses our website at https://tahu69.cam, our mobile applications, and all related betting and gaming services (collectively, the "Platform"). This Privacy Policy explains in plain, transparent terms what personal information we collect, why we collect it, how we use and store it, with whom we may share it, and what rights you hold over your own data.

This Policy applies to all individuals who visit, register on, or otherwise interact with the tahu69 Platform, including sports bettors, live casino players, lottery participants, and any visitor browsing our content pages. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the Platform and contact us to close your account.

This Policy is to be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, which together constitute the full legal framework governing your relationship with tahu69.

2. Definitions

For clarity throughout this document, the following terms carry the meanings defined below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, email address, phone number, date of birth, payment details, and IP address.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — tahu69, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — A third party that processes Personal Data on behalf of tahu69 under a binding data processing agreement.
• "Cookies" — Small text files placed on your device by the Platform to store session and preference data.
• "KYC" — Know Your Customer, the mandatory identity verification process required before certain account actions (e.g., withdrawals) can be completed.
• "User" / "You" — Any natural person who accesses or uses the tahu69 Platform, whether registered or unregistered.

3. Information We Collect

We collect Personal Data in the following categories, depending on how you interact with the Platform:

We do not intentionally collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data, except where required for identity verification purposes (facial recognition matching on identity documents).

4. How We Collect Your Data

tahu69 collects Personal Data through the following mechanisms:

4.1 Direct Submission

You provide Personal Data directly when you register an account, complete the KYC verification process, make a deposit or withdrawal request, contact customer support (via live chat, email, or WhatsApp), respond to surveys or promotional offers, or update your account profile settings.

4.2 Automated Technical Collection

When you visit or use the Platform, our servers and third-party analytics tools automatically collect Technical Data and Usage Data. This includes your IP address, which we use for geolocation verification to confirm you are accessing from Indonesia, as well as device fingerprinting data used for fraud detection and responsible gaming monitoring.

4.3 Third-Party Sources

We may receive supplementary data from identity verification partners (for KYC), payment processors (transaction status and fraud signals), game content providers (game session results and RNG certificates), and affiliate marketing networks (referral tracking to attribute bonuses correctly). All third-party data sources are bound by contractual data protection obligations.

5. Purposes of Data Processing

tahu69 processes your Personal Data for the following legitimate purposes:

• Account Management: Creating, maintaining, and securing your tahu69 account; verifying your identity; enforcing account-level settings.
• Service Delivery: Processing bets and game play; settling wins and losses; executing deposit and withdrawal transactions through BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other approved payment channels.
• Regulatory Compliance: Fulfilling KYC obligations; anti-money laundering (AML) screening; age verification to prevent underage access; maintaining mandatory transaction records.
• Fraud Prevention and Security: Detecting suspicious account activity; preventing bonus abuse, collusion, and unauthorized access; monitoring for multi-accounting violations.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling; enforcing self-exclusion, deposit limits, and session time settings; proactively reaching out to at-risk players.
• Customer Support: Responding to support inquiries via live chat, email, and WhatsApp; resolving disputes; following up on account or payment issues.
• Product Improvement: Analyzing anonymized Usage Data to optimize Platform performance, game recommendations, and user interface design.
• Marketing Communications: Sending promotional offers, bonus notifications, and personalized recommendations where you have given explicit consent. You may opt out at any time.
• Legal Obligations: Responding to lawful requests from Indonesian government authorities or international regulatory bodies; defending the Company in legal proceedings.

6. Legal Basis for Processing

We process your Personal Data under the following legal grounds:

• Contractual Necessity: Processing required to perform the services you have contracted for (account operation, bet settlement, payment processing).
• Legal Obligation: Processing necessary to comply with Indonesian law and international AML/KYC regulations.
• Legitimate Interests: Processing for fraud prevention, security, responsible gaming monitoring, and Platform improvement, provided these interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications, personalized recommendations, and optional data analytics, where you have freely given explicit consent and may withdraw it at any time.

7. Sharing and Disclosure of Data

tahu69 does not sell your Personal Data to third parties. We do not share your information with advertisers or data brokers. We may share your data only in the following limited and controlled circumstances:

7.1 Authorized Service Providers (Data Processors)

We engage trusted third-party processors who assist us in operating the Platform under strict contractual data protection agreements. These include: identity ver ification providers, payment processors (for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions), game content providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, PG Soft), cloud hosting infrastructure providers, and customer support platform operators. Each processor is permitted to use your data only for the specific service they provide.

7.2 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to Indonesian government authorities, financial intelligence units, or international law enforcement bodies where required by law, court order, or legitimate legal process. We will notify you of such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring, your Personal Data may be transferred to the successor entity. We will provide advance notice via the Platform and email before your data is transferred and becomes subject to a different privacy policy.

7.4 Aggregated and Anonymized Data

We may share aggregated, anonymized statistical data (e.g., total active players, average session length, regional betting preferences) with business partners, game providers, and publicly for research purposes. This data cannot be used to identify any individual user.

8. Cookies and Tracking Technologies

The tahu69 Platform uses cookies and similar tracking technologies to deliver a functional, personalized, and secure user experience. Cookies are small text files stored on your device when you visit our website or use our mobile application.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These enable account login sessions, maintain your betting cart, and preserve security tokens. They cannot be disabled without breaking core functionality.
• Performance and Analytics Cookies: Collect anonymized data about how you use the Platform (pages visited, time on site, error messages encountered). We use this data to improve Platform performance and user experience.
• Functional Cookies: Remember your preferences such as preferred language, display settings, and deposit method, so you do not have to reconfigure them on each visit.
• Geolocation Cookies: Verify that you are accessing the Platform from Indonesia (WIB timezone region, including Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Semarang, and surrounding areas) as required for service eligibility.
• Responsible Gaming Cookies: Track session duration data to power the in-Platform session time reminders and cooling-off mechanism settings you have configured in your account.

8.2 Managing Cookie Preferences

You may manage non-essential cookies through your browser settings by blocking or deleting stored cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. For mobile app users, cookie-equivalent storage can be managed through your device's app permissions settings. Continuing to use the Platform after reviewing this section constitutes acceptance of our cookie practices.

9. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by Indonesian law or international regulatory obligations.

• Active Account Data: Retained for the duration of your account and for 5 years following account closure, in compliance with AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Indonesian financial regulations and international AML standards applicable to online betting operators.
• KYC Documentation: Retained for 5 years after account closure or the date of the last transaction, whichever is later.
• Customer Support Records: Retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing Consent Records: Retained for as long as you remain subscribed, plus 2 years thereafter as evidence of consent.
• Technical and Usage Logs: Retained for 12 months in raw form; thereafter, anonymized aggregated data may be retained indefinitely for analytical purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymized using industry-standard data destruction procedures.

10. Security Measures

Protecting your Personal Data is a core operational priority at tahu69. We employ a multi-layered security architecture that mirrors the standards used by Indonesia's major banking institutions:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using the same protocol standard as BCA and Mandiri's online banking platforms.
• Data Encryption at Rest: Personal Data and financial records stored in our databases are encrypted using AES-256 encryption, preventing unauthorized access even in the unlikely event of a server compromise.
• Two-Factor Authentication (2FA): Available for all user accounts; strongly recommended and enforced for all high-value withdrawal requests.
• Segregated Database Architecture: Payment data, identity documents, and account credentials are stored in separate, isolated database environments with restricted access permissions.
• Intrusion Detection Systems: Continuous real-time monitoring detects and blocks unauthorized access attempts, SQL injection attacks, and distributed denial-of-service (DDoS) threats.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with authorized access undergo regular security training and background screening.
• Regular Security Audits: Independent third-party penetration testing and security audits are conducted quarterly to identify and remediate vulnerabilities.

11. Your Data Rights

As a user of the tahu69 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days.

• Right of Access: You may request a copy of the Personal Data we hold about you, including the categories of data, processing purposes, and any third parties with whom it has been shared.
• Right to Rectification: If any Personal Data we hold is inaccurate or incomplete, you may request that we correct or update it. Note that changes to identity data require re-submission of KYC documents.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain financial and identity records.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances, such as during a dispute about accuracy or a pending objection to processing.
• Right to Data Portability: You may request a structured, machine-readable copy of the Personal Data you have provided to us, which you may transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. You may unsubscribe from promotional communications at any time via the "unsubscribe" link in any marketing email.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Please note that some rights are subject to limitations. We may be unable to delete data that we are legally required to retain, or restrict processing that is necessary for the performance of your account contract. We will always explain clearly if a limitation applies to your request.

12. Protection of Minors

The tahu69 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. During registration, users must declare their age, and our KYC process independently verifies date of birth against government-issued identification.

If we discover or receive credible reports that a user is under 21 years of age, we will immediately suspend the account, freeze all funds pending investigation, void any bets placed, and permanently delete all Personal Data associated with that minor's account. Parents or guardians who believe a minor has accessed the Platform should contact us immediately at [email protected].

We strongly encourage parents and guardians to install internet filtering software on devices accessible to minors. Responsibility for preventing underage access through shared family devices rests with the account holder.

13. International Data Transfers

The tahu69 Platform primarily serves users in Indonesia, and the majority of data processing occurs on servers located within or proximate to the Southeast Asian region. However, certain third-party service providers (such as game content providers and cloud infrastructure partners) may process data in jurisdictions outside Indonesia.

Where Personal Data is transferred internationally, we ensure that adequate safeguards are in place, including: contractual Standard Contractual Clauses (SCCs) with data processors; adequacy assessments of the receiving jurisdiction's data protection framework; and technical safeguards including end-to-end encryption during all cross-border data transfers.

By using the Platform, you acknowledge and consent to your Personal Data being processed in jurisdictions outside Indonesia where necessary for service delivery, subject to the safeguards described above.

14. Changes to This Policy

tahu69 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or operational procedures. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the Platform homepage for a minimum of 14 days following the change.
• Send an email notification to all registered account holders with a summary of the key changes.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any changes, you may close your account and cease using the Platform before the effective date.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please reach out through the following channels. All data-related requests are handled by our dedicated Data Protection team:

• Email: [email protected] — include "Privacy Policy Inquiry" or "Data Rights Request" in the subject line
• Live Chat: Available 24/7 on the Platform; ask to be connected to the Data Protection team
• Response Time: All data rights requests are acknowledged within 72 hours and fully resolved within 30 calendar days