Privacy Policy

1. Introduction

Welcome to the Privacy Policy of tw88 ("we", "us", "our", or "the Company"). This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use our website located at https://tw88.beer (the "Site"), our mobile applications, and any related services (collectively, the "Services"). We are committed to protecting your privacy and handling your personal data transparently in accordance with applicable data protection laws and international best practices.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must immediately discontinue using our Services. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the tw88 platform.

tw88 serves players primarily in Indonesia and is subject to Indonesian data protection regulations as well as international standards. We take our responsibility as a data controller seriously and have implemented comprehensive technical and organizational measures to safeguard your personal information from unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

We collect various types of information to provide and improve our Services, ensure security and compliance, and deliver a personalized gaming experience. The categories of personal information we collect include:

2.1 Information You Provide Directly

When you register an account with tw88, we collect the following information:

• Personal Identification Information: Full legal name (as it appears on your government-issued identification), date of birth, gender, nationality, and government-issued identification number (such as Indonesian KTP number or passport number).
• Contact Information: Email address, mobile phone number, residential address including street, city, province, and postal code.
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers for account recovery purposes.
• Financial Information: Bank account details including bank name, account number, account holder name (which must match your registered name), and preferred currency (Indonesian Rupiah).
• Verification Documents: Copies of government-issued photo identification (Indonesian KTP, passport, or driver's license), proof of address documents (utility bills, bank statements, or government correspondence dated within the last three months), and selfie photographs holding identification documents for Know Your Customer (KYC) verification.

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system and version, browser type and version, screen resolution, device identifiers (such as IP address and device ID), and mobile network information.
• Usage Data: Pages visited, features used, time spent on pages, clicks, scrolling behavior, search queries, game preferences, betting patterns, deposit and withdrawal history, and session duration.
• Location Data: IP address-based geolocation to verify that you are accessing our Services from a permitted jurisdiction and to comply with regulatory requirements.
• Cookies and Similar Technologies: We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activities, remember your preferences, authenticate your sessions, and analyze website traffic. For detailed information about our cookie practices, please see our Cookie Policy section below.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Information related to deposit and withdrawal transactions processed through Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon.
• Identity Verification Services: Verification results from third-party KYC and anti-fraud service providers that help us confirm your identity and detect fraudulent activity.
• Game Providers: Gaming session data, game results, and betting information from our third-party game suppliers and software providers.
• Social Media: If you interact with our social media accounts or use social login features, we may receive publicly available profile information in accordance with the social platform's privacy policies.

3. How We Use Your Information

tw88 uses the collected information for the following purposes:

• Service Provision: To create and manage your account, process deposits and withdrawals, facilitate gameplay and betting activities, provide access to casino games, sports betting, togel lottery, and other gaming products, and deliver customer support services.
• Identity Verification and Compliance: To verify your age (ensuring all players are 21 years or older), confirm your identity through KYC procedures, comply with anti-money laundering and counter-terrorist financing regulations, detect and prevent fraudulent activities, and fulfill legal obligations under Indonesian and international gaming laws.
• Payment Processing: To process financial transactions including deposits via BCA, BRI, BNI, Mandiri, and other Indonesian banks, process withdrawal requests to your verified bank account, maintain transaction records for accounting and regulatory purposes, and detect potentially fraudulent payment activities.
• Communication: To send account-related notifications including registration confirmation, deposit and withdrawal confirmations, bonus credits, and security alerts; provide customer support responses; send promotional offers and bonus announcements (which you may opt out of); and communicate policy updates and important changes to our Terms or Privacy Policy.
• Security and Fraud Prevention: To monitor for suspicious account activity, detect patterns indicating potential fraud or money laundering, protect against unauthorized access to accounts, prevent cheating and collusion in games, and ensure platform integrity and fairness.
• Personalization: To recommend games and betting markets based on your preferences, customize promotional offers tailored to your gaming behavior, remember your language and display preferences, and enhance your overall user experience.
• Analytics and Improvement: To analyze usage patterns and website traffic, identify technical issues and optimize platform performance, develop new features and gaming products, conduct market research and trend analysis, and improve customer satisfaction through feedback analysis.
• Responsible Gaming: To monitor gambling behavior for signs of problem gambling, enforce deposit limits, loss limits, and session time restrictions you set, facilitate self-exclusion requests, and provide resources and support for responsible gaming practices.

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms and Conditions), including creating your account, providing gaming services, and processing payments.
• Legal Obligation: Processing is required to comply with legal and regulatory requirements such as KYC verification, AML compliance, age verification, tax reporting, and responding to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests including fraud prevention, security monitoring, platform optimization, marketing (where permitted), and improving our Services, provided such interests do not override your privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing certain categories of personal information, such as marketing communications, which you may withdraw at any time.

5. Data Sharing and Disclosure

tw88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients for legitimate business and legal purposes:

5.1 Service Providers

We engage trusted third-party service providers to support our operations, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and payment gateway providers that process your deposits and withdrawals.
• Game Providers: Software suppliers and gaming studios that deliver casino games, live dealer experiences, sports betting platforms, and other gaming content.
• Identity Verification Services: KYC and fraud detection providers that verify your identity and screen for potential risks.
• Customer Support Tools: Live chat platforms, email service providers, and helpdesk software that enable us to provide customer support.
• Cloud Hosting and Data Storage: Secure server infrastructure providers that store our databases and application systems.
• Analytics Providers: Tools that help us understand user behavior and improve our Services.

All service providers are contractually bound to protect your personal information, use it only for the specified purposes, and comply with applicable data protection laws. We conduct due diligence on all service providers to ensure they maintain adequate security standards.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, government authorities, or courts when required by law, legal process, or regulatory investigation. This includes responding to subpoenas, court orders, or lawful requests for information, cooperating with anti-money laundering and counter-terrorist financing investigations, reporting suspicious transactions as required by financial regulations, and complying with tax reporting obligations.

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving tw88, your personal information may be transferred to the acquiring entity or successor company. We will notify you of any such change in ownership or control of your personal information and provide you with choices regarding your data where applicable under law.

6. Data Security

tw88 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols. Sensitive data including passwords and financial information is encrypted at rest using advanced encryption algorithms.
• Access Controls: Strict access controls ensure that only authorized personnel can access personal information on a need-to-know basis. All employees with data access undergo background checks and security training.
• Secure Infrastructure: Our systems are hosted on secure servers protected by firewalls, intrusion detection systems, and regular security monitoring.
• Two-Factor Authentication: Optional two-factor authentication (2FA) adds an extra layer of security to your account login.
• Regular Security Audits: We conduct regular security assessments, vulnerability testing, and third-party audits to identify and address potential weaknesses.
• Data Minimization: We collect and retain only the personal information necessary for our legitimate purposes and delete or anonymize data when no longer needed.
• Incident Response: We maintain an incident response plan to quickly detect, contain, and remediate any data breaches, with notification procedures in accordance with applicable laws.

While we implement robust security measures, no system is completely immune to security risks. You play an important role in protecting your account by maintaining the confidentiality of your password, enabling two-factor authentication, using secure internet connections, and promptly reporting any suspicious activity to our support team.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration your account remains active.
• Closed Accounts: After account closure, we retain your information for a period required by law (typically 5-7 years) to comply with financial regulations, tax obligations, and anti-money laundering requirements.
• Transaction Records: Financial transaction records are retained for at least 5 years as required by Indonesian financial regulations.
• Communication Records: Customer support correspondence and account communications are retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Data: If you opt out of marketing communications, we retain minimal information (email address and opt-out preference) to honor your request and prevent future marketing.

Upon expiration of the applicable retention period, we securely delete or anonymize your personal information in accordance with our data retention and destruction policies.

8. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right to Access: You may request confirmation of whether we process your personal information and obtain a copy of your data.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure: Under certain circumstances, you may request deletion of your personal information, subject to legal retention obligations.
• Right to Restriction: You may request temporary restriction of processing in specific situations, such as while we verify the accuracy of your data.
• Right to Data Portability: Where technically feasible, you may request your personal information in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time, though this does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected] (plain text). We will respond to your request within 30 days. We may require verification of your identity before fulfilling your request to protect against unauthorized access to your personal information.

9. Cookies and Tracking Technologies

tw88 uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you and remember your preferences. We use the following types of cookies:

• Essential Cookies: Required for basic site functionality including account login, session management, and security features. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use our site to help us improve performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, display options, and previously viewed games.
• Advertising Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns.

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit your ability to use some features of our Services. For detailed information about cookies, visit www.allaboutcookies.org.

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside Indonesia where our service providers, data centers, or business partners are located. When we transfer data internationally, we implement appropriate safeguards to ensure your information receives adequate protection, including standard contractual clauses approved by relevant data protection authorities and verification that recipient countries provide adequate data protection standards.

11. Children's Privacy

tw88 strictly prohibits individuals under the age of 21 from creating accounts or using our Services. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from someone under 21 years of age, we will immediately delete such information and close the associated account. If you believe a minor has accessed our Services, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated through email notification or prominent notice on our website. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: [email protected] (plain text, not clickable)
• Live Chat: Available 24/7 through our website and mobile app
• WhatsApp: +62 812 3456 7890 (business hours: 08:00-22:00 WIB)

We are committed to resolving privacy concerns promptly and transparently. Our data protection team will respond to all inquiries within 30 days.