Privacy Policy

1 Scope & Application

This Privacy Policy applies to all personal information collected by t6bet through the Platform, mobile-optimized versions of the Website, customer support channels (live chat, WhatsApp, email), and any other services or interactions related to your use of t6bet gaming products.

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked from our Platform but are not operated by t6bet. We are not responsible for the privacy practices of external sites, including payment processors, social media platforms, or game provider websites. We encourage you to review the privacy policies of any third-party services you interact with.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform and establish the contractual relationship between you and t6bet.

2 Information We Collect

t6bet collects various types of personal information necessary to provide gaming services, comply with legal obligations, prevent fraud, and improve user experience. The categories of information we collect include:

2.1 Account Registration Information

When you create an account on t6bet, we collect the following mandatory information:

• Personal Identifiers: Full legal name (as appears on Indonesian KTP), date of birth, gender
• Contact Information: Email address, mobile phone number, residential address in Indonesia
• Account Credentials: Username, password (stored in encrypted form)
• Currency Preference: Indonesian Rupiah (IDR) is the default currency

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and prevent underage gambling, we require submission of:

• Government-Issued ID: Copy of valid Indonesian KTP (Kartu Tanda Penduduk), passport, or driver's license showing photograph, full name, date of birth, address, and signature
• Proof of Address: Recent utility bill, bank statement, or government correspondence (when requested for additional verification)
• Selfie Verification: Photograph of yourself holding your ID document (for enhanced security verification)

2.3 Financial Information

• Payment Method Details: Bank account numbers (BCA, BRI, BNI, Mandiri, etc.), bank account holder name, e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction History: Deposit amounts, dates and times, withdrawal requests, processing status, payment method used
• Source of Funds: Information about the origin of deposited funds (required for anti-money laundering compliance)

Note: t6bet does not directly store credit card numbers or CVV codes. Payment card transactions are processed through PCI-DSS compliant third-party payment processors.

2.4 Gaming Activity Data

• Bets placed (sports betting selections, casino game wagers, togel number selections)
• Bet amounts, odds accepted, win/loss outcomes
• Gaming session duration, game types played, favorite games
• Bonus claims, promotional code usage, wagering progress
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

2.5 Technical & Device Information

• Device Data: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution
• Network Information: IP address, internet service provider, approximate geographic location (city-level)
• Website Usage Data: Pages visited, time spent on pages, links clicked, search queries, navigation patterns
• Cookies & Tracking: Session cookies, persistent cookies, local storage data (see Section 8 for details)

2.6 Communications & Customer Support

• Live chat transcripts, WhatsApp message history, email correspondence
• Customer support ticket details, complaint descriptions, resolution outcomes
• Survey responses, feedback submissions, user reviews

3 How We Collect Information

3.1 Information You Provide Directly

Most personal information is provided by you voluntarily when you:

• Complete the account registration form
• Submit KYC verification documents
• Add payment methods or request withdrawals
• Place bets or play casino games
• Contact customer support
• Adjust account settings or responsible gaming limits
• Participate in promotions or complete surveys

3.2 Information Collected Automatically

We automatically collect certain technical and usage information through:

• Web Server Logs: IP addresses, browser types, referring/exit pages, timestamps
• Cookies & Similar Technologies: Session identifiers, user preferences, authentication tokens (see Section 8)
• Analytics Tools: Aggregated usage statistics, traffic sources, conversion rates
• Fraud Prevention Systems: Device fingerprints, behavioral patterns, risk scoring data

3.3 Information from Third Parties

In limited circumstances, we may receive information from external sources:

• Payment Processors: Transaction confirmation, payment status updates, fraud alerts
• Identity Verification Services: Document authenticity checks, database matching
• Public Databases: Verification of government-issued ID numbers against official registries (when legally permitted)

4 How We Use Your Information

t6bet uses collected personal information for the following legitimate business purposes:

4.1 Account Management & Service Delivery

• Create and maintain your gaming account
• Process deposits and withdrawals to/from Indonesian bank accounts and e-wallets
• Enable you to place bets on sports events, play casino games, and participate in lottery draws
• Calculate winnings, settle bets, and update account balances
• Administer bonuses, promotions, and VIP rewards programs
• Provide customer support via live chat, WhatsApp, and email

4.2 Legal Compliance & Regulatory Requirements

• Verify user identity and age to prevent underage gambling (21+ requirement)
• Conduct Know Your Customer (KYC) and anti-money laundering (AML) checks
• Monitor transactions for suspicious patterns and report to relevant authorities when required
• Maintain records for regulatory audits and licensing compliance
• Respond to legal requests from law enforcement or government agencies

4.3 Security & Fraud Prevention

• Detect and prevent fraudulent activity, collusion, and bonus abuse
• Identify and block multiple accounts created by the same individual
• Monitor for unauthorized access attempts and account takeovers
• Implement risk-based authentication and transaction monitoring
• Investigate suspected violations of Terms & Conditions

4.4 Platform Improvement & Analytics

• Analyze user behavior to improve website design and functionality
• Identify popular games and optimize game selection
• Test new features and measure their effectiveness
• Generate statistical reports and performance metrics (aggregated, non-identifiable data)
• Conduct research to enhance user experience and gaming products

4.5 Marketing & Communications

• Send promotional emails about bonuses, new games, and special offers (with your consent)
• Provide personalized game recommendations based on playing history
• Deliver targeted advertisements on the Platform
• Notify you about account activity, important policy changes, or security alerts
• Conduct customer satisfaction surveys

4.6 Responsible Gaming Support

• Implement and enforce deposit limits, loss limits, and session time restrictions
• Process self-exclusion requests and prevent access during exclusion periods
• Monitor betting patterns for signs of problem gambling behavior
• Provide access to responsible gaming tools and support resources

5 Data Sharing & Third Parties

t6bet does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers & Business Partners

We engage trusted third-party companies to perform functions on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process deposits and withdrawals
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other licensed studios deliver casino games and live dealer content
• Identity Verification Services: Third-party KYC/AML specialists verify identity documents and screen against fraud databases
• Cloud Hosting Providers: Secure servers store encrypted data with restricted access controls
• Customer Support Tools: Live chat platforms and ticketing systems facilitate customer service
• Analytics Providers: Website analytics services (using anonymized data only) help optimize Platform performance

All service providers are contractually obligated to maintain confidentiality, use data only for specified purposes, and implement adequate security measures.

5.2 Legal Obligations & Law Enforcement

We may disclose personal information when required by law or to:

• Comply with legal processes (court orders, subpoenas, regulatory requests)
• Respond to lawful requests from government authorities or law enforcement agencies
• Report suspected money laundering or terrorist financing to financial intelligence units
• Enforce our Terms & Conditions and investigate violations
• Protect the rights, property, or safety of t6bet, our users, or the public

5.3 Business Transfers

If t6bet undergoes a merger, acquisition, reorganization, or sale of assets, personal information may be transferred to the acquiring entity. You will be notified via email and/or Platform notice of any ownership change and given options regarding your data.

5.4 Aggregated & Anonymized Data

We may share aggregated, non-identifiable statistical data with third parties for industry analysis, demographic profiling, and marketing research. This data cannot be used to identify individual users.

6 Data Security Measures

t6bet implements comprehensive technical and organizational security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction:

6.1 Technical Security Controls

• Encryption: 256-bit SSL/TLS encryption for all data transmission between your device and our servers. Passwords stored using bcrypt or Argon2 hashing algorithms.
• Firewall Protection: Multi-layered firewall architecture prevents unauthorized network access.
• Intrusion Detection Systems: Real-time monitoring detects and blocks suspicious activity.
• Vulnerability Management: Regular security audits, penetration testing, and software patching.
• DDoS Protection: Distributed denial-of-service mitigation ensures Platform availability.
• Two-Factor Authentication: Optional 2FA via SMS or authenticator apps adds account access security.

6.2 Organizational Security Measures

• Access Controls: Personal data accessible only to authorized employees on a need-to-know basis.
• Employee Training: Mandatory data protection and security awareness training for all staff.
• Confidentiality Agreements: Employees and contractors sign non-disclosure agreements.
• Segregation of Duties: Separation of roles prevents single-point vulnerabilities.
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from security breaches.

6.3 Data Storage Security

• Personal data stored on secure servers in tier-3 or tier-4 data centers with 24/7 physical security
• Encrypted databases with role-based access permissions
• Regular automated backups stored in geographically separate locations
• Disaster recovery procedures ensure business continuity

Important: While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your password and notifying us immediately if you suspect unauthorized account access.

7 Data Retention Periods

t6bet retains personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal obligations:

Data Category	Retention Period	Justification
Account registration information	Duration of account + 7 years after closure	Regulatory compliance, AML record-keeping requirements
KYC verification documents	Duration of account + 7 years after closure	Anti-money laundering regulations, legal obligations
Financial transaction records	7 years from transaction date	Tax compliance, audit requirements, dispute resolution
Gaming activity data (bets, wins/losses)	7 years from transaction date	Regulatory compliance, dispute resolution, fraud investigation
Customer support communications	3 years from last contact	Service quality monitoring, complaint resolution
Marketing preferences	Until opt-out or account closure	Consent-based processing, user preference management
Website analytics & cookies	1-2 years (varies by cookie type)	Technical necessity, user experience optimization
Self-exclusion records	Permanent (never deleted)	Responsible gaming compliance, prevention of re-registration

After retention periods expire, personal data is securely deleted or anonymized so that it cannot be associated with you. Archived data required for legal compliance is stored in restricted-access systems.

8 Cookies & Tracking Technologies

t6bet uses cookies, web beacons, and similar technologies to enhance user experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for Platform functionality. Enable account login, secure authentication, load balancing, and fraud prevention. Cannot be disabled without breaking core features.
• Performance & Analytics Cookies: Collect aggregated usage data to understand how visitors interact with the Platform. Help us improve navigation, identify popular content, and measure feature effectiveness.
• Functional Cookies: Remember your preferences such as language selection, currency display, and customized settings. Enhance personalization without requiring repeated configuration.
• Advertising & Marketing Cookies: Track your activity across sessions to deliver relevant promotional offers and measure campaign effectiveness. Used for targeted marketing communications.

8.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify browser settings to decline cookies or alert you when a cookie is being sent. Note that disabling necessary cookies may prevent you from accessing certain Platform features or completing transactions.

To manage cookies:

• Browser Settings: Chrome, Firefox, Safari, and Edge allow cookie management through privacy settings
• Platform Cookie Manager: Access cookie preferences through your account settings (non-essential cookies only)
• Third-Party Opt-Outs: Some analytics providers offer opt-out mechanisms through their own websites

8.3 Do Not Track Signals

Our Platform does not currently respond to "Do Not Track" browser signals due to lack of industry-wide standards. We honor opt-out preferences set through our Platform's cookie management interface.

9 Your Privacy Rights

Under applicable Indonesian data protection laws and international privacy standards, you have the following rights regarding your personal information:

9.1 Right to Access

You may request a copy of the personal information we hold about you. We will provide the data in a commonly used electronic format within 30 days of your request. Access is free for the first request per year; subsequent requests may incur a reasonable administrative fee.

9.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through Platform settings. For KYC document updates, contact customer support with corrected documentation.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in the following circumstances:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (where processing is based on consent)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Limitations: We cannot delete data required for legal compliance, regulatory obligations, fraud prevention, or dispute resolution. Financial transaction records must be retained for 7 years per anti-money laundering regulations. Self-exclusion records are never deleted to protect vulnerable users.

9.4 Right to Data Portability

Upon request, we will provide your personal data in a structured, machine-readable format (CSV or JSON) that can be transmitted to another service provider. This right applies to data you provided with consent or under contract.

9.5 Right to Object

You may object to processing of your personal data for:

• Direct Marketing: Opt out of promotional emails and targeted advertising at any time via unsubscribe links or account settings
• Profiling & Automated Decisions: Request human review of decisions made solely by automated systems

9.6 Right to Restrict Processing

You may request temporary limitation of data processing while we verify accuracy, assess lawfulness, or evaluate objections. During restriction, we store the data but do not actively process it except with your consent or for legal claims.

9.7 Exercising Your Rights

To exercise any privacy rights, contact our Data Protection Officer via:

• Email: [email protected] (subject line: "Privacy Rights Request")
• Live Chat: Request escalation to data protection team

We will respond within 30 days and may require identity verification to prevent unauthorized disclosure. If we deny your request, we will explain the legal basis and your right to lodge a complaint with a supervisory authority.

10 Marketing Communications

With your consent, t6bet may send promotional communications about bonuses, new games, special offers, and platform updates via:

• Email newsletters and promotional campaigns
• WhatsApp messages (if you provide consent through that channel)
• In-platform notifications and banners
• SMS messages (only for account security alerts and critical notifications)

10.1 Opting Out of Marketing

You may withdraw marketing consent at any time without affecting your ability to use gaming services:

• Click "unsubscribe" links in promotional emails
• Adjust communication preferences in account settings
• Reply "STOP" to promotional WhatsApp messages
• Contact customer support to update preferences

After opting out, you will still receive essential transactional communications (withdrawal confirmations, security alerts, account status changes, Terms & Conditions updates).

10.2 Personalized Marketing

We may personalize marketing content based on your gaming activity, preferences, and demographic information. Personalization helps deliver relevant offers (e.g., slot free spins for slot players, football accumulator bonuses for sports bettors). You can opt out of personalized marketing while still receiving generic promotional communications.

11 Protection of Minors

t6bet services are strictly restricted to adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. Our age verification procedures include:

• Age declaration during account registration (self-certification)
• Mandatory KYC verification with government-issued ID before first withdrawal
• Cross-referencing birth dates against Indonesian KTP databases (when legally permitted)
• Monitoring for patterns indicating underage account creation

If we discover that an individual under 21 has created an account or provided personal information, we will immediately:

• Permanently close the account
• Refund deposited funds (minus any winnings, which are forfeited)
• Delete personal information except as required for regulatory reporting
• Block the individual from creating future accounts

Parental Control: Parents and guardians should monitor internet usage by minors and implement appropriate parental control software to block access to online gambling sites. If you believe a minor has accessed t6bet, please contact customer support immediately.

12 International Data Transfers

t6bet primarily operates within Indonesia and stores user data on servers located in secure data centers within the region. However, some service providers (cloud hosting, payment processing, game providers) may operate internationally, requiring limited data transfers outside Indonesia.

When personal data is transferred internationally, we ensure adequate protection through:

• Contractual Safeguards: Standard contractual clauses approved by data protection authorities
• Adequacy Decisions: Transfers only to jurisdictions recognized as providing adequate data protection
• Privacy Shield or Equivalent: Service providers certified under recognized international data protection frameworks
• Explicit Consent: Obtaining your consent for transfers when other safeguards are not available

All international service providers must maintain security standards equivalent to or exceeding those required under Indonesian law.

13 Changes to Privacy Policy

t6bet reserves the right to modify this Privacy Policy at any time to reflect changes in legal requirements, business practices, or service offerings. The "Last Updated" date at the top of this page indicates when the policy was most recently revised.

Notification of Material Changes: If we make material changes affecting how we collect, use, or share your personal information, we will notify you via:

• Email to the address associated with your account (sent at least 30 days before changes take effect)
• Prominent notice on the Platform homepage
• In-platform notification requiring acknowledgment before continued use

Your continued use of t6bet services after policy changes take effect constitutes acceptance of the revised Privacy Policy. If you do not agree with changes, you must cease using the Platform and may request account closure and data deletion (subject to retention requirements).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14 Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact t6bet's Data Protection Team:

• Email: [email protected] (subject line: "Privacy Inquiry" for priority routing)
• Live Chat: Available 24/7 via the Platform (request escalation to data protection specialists)
• WhatsApp: Available through customer support contact options

We aim to respond to all privacy inquiries within 5 business days for general questions and within 30 days for formal privacy rights requests. For urgent data security concerns (suspected breach, unauthorized access), please use live chat for immediate attention.