titi40 Privacy Policy

1. Introduction and Scope

1.1 Our Commitment. titi40 is committed to protecting the privacy and security of your personal information. We comply with applicable Indonesian data protection laws and follow international best practices for information security, including but not limited to the implementation of SSL encryption, secure server infrastructure, and strict internal access controls.

1.2 Scope of This Policy. This Privacy Policy applies to all personal data collected through the titi40 website, mobile-optimised interface, customer support channels, and any other services we provide. It does not apply to third-party websites or services that may be linked from our Platform — those are governed by their own privacy policies.

1.3 Age Restriction. The titi40 platform is intended solely for individuals aged 21 years or older who are legal residents of Indonesia. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will delete it immediately and close the associated Account.

2. Information We Collect

titi40 collects several categories of personal information necessary to provide our betting and gaming services, verify your identity, process payments, and comply with legal obligations. The types of information we collect include:

2.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address (city, province, postal code), and chosen username and password.
• Identity Verification (KYC) Documents: Copies of your Indonesian KTP (Kartu Tanda Penduduk) or passport, proof of address documents (utility bills, bank statements), and selfie photographs for identity confirmation.
• Payment Information: Bank account details (bank name, account number, account holder name) or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers) used for deposits and withdrawals. We do not store credit card details as we do not accept credit card payments.
• Communication Records: Content of emails, live chat messages, and other communications you send to our customer support team.
• Survey and Feedback Data: Responses to voluntary surveys, promotional questionnaires, or feedback forms you choose to complete.

2.2 Information Collected Automatically

• Device and Browser Information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, features used, time spent on each page, links clicked, games played, bet history (including stake amounts, odds, outcomes, timestamps), deposit and withdrawal transaction history, login timestamps, and session duration.
• Location Data: IP address, which provides approximate geographic location (city or province level). We do not use GPS or precise geolocation tracking.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to remember your preferences, maintain your login session, analyse site traffic, and improve Platform performance. See Section 8 for detailed information on cookies.

2.3 Information from Third-Party Sources

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify deposits and process withdrawals.
• Identity Verification Services: Data from third-party KYC verification providers used to confirm the authenticity of submitted identity documents.
• Fraud Prevention Partners: Information from fraud detection and anti-money-laundering (AML) screening services to protect the integrity of the Platform.

3. How We Use Your Information

titi40 uses the personal information we collect for the following purposes:

3.1 Service Provision

• Creating and managing your Account
• Processing deposits, withdrawals, and bet settlements
• Verifying your identity and age (KYC compliance)
• Providing customer support and responding to your inquiries
• Enabling you to participate in sports betting, casino games, slot gacor titles, togel draws, and other gaming products
• Maintaining betting history and transaction records

3.2 Legal and Regulatory Compliance

• Complying with Indonesian legal obligations, including age verification and responsible gaming requirements
• Preventing fraud, money laundering, and other illegal activities
• Enforcing our Terms and Conditions and investigating suspected breaches
• Responding to lawful requests from Indonesian government authorities or law enforcement agencies
• Maintaining records required by payment processing and financial auditing standards

3.3 Platform Improvement and Analytics

• Analysing user behaviour to improve Platform functionality, game selection, and user experience
• Conducting internal research and statistical analysis
• Testing new features and optimising Platform performance
• Monitoring Platform security and detecting technical issues

3.4 Marketing and Promotions

• Sending promotional offers, bonus announcements, and newsletters (only if you have opted in)
• Personalising marketing content based on your betting preferences and history
• Conducting promotional campaigns and awarding prizes
• Inviting you to participate in surveys or feedback programs

Note: You may opt out of marketing communications at any time by adjusting your Account preferences or by clicking the "unsubscribe" link in any promotional email. Opting out of marketing will not affect transactional emails (account notifications, withdrawal confirmations, security alerts), which we are legally required to send.

4. How We Share Your Information

titi40 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Studios: Certified third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) may receive limited data (user ID, bet amounts) necessary to deliver gaming services.
• KYC Verification Providers: Third-party identity verification services that authenticate submitted KYC documents.
• Customer Support Tools: Live chat software providers that facilitate customer service communications.
• Analytics and Hosting Services: Cloud infrastructure providers and analytics platforms that support Platform operation.

All third-party service providers are contractually obligated to maintain the confidentiality of your data and use it only for the purposes we specify. We select partners based on their data protection standards and compliance with applicable privacy laws.

4.2 Legal Requirements and Protection of Rights

We may disclose your personal information if required to do so by Indonesian law or in response to valid legal processes, including:

• Complying with court orders, subpoenas, or other legal obligations
• Responding to lawful requests from Indonesian government agencies or law enforcement
• Protecting the rights, property, or safety of titi40, our users, or the public
• Detecting, preventing, or addressing fraud, security issues, or technical problems
• Enforcing our Terms and Conditions or investigating potential violations

4.3 Business Transfers

In the event of a merger, acquisition, reorganisation, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you have given explicit consent, such as when participating in a co-branded promotion or authorising data sharing for a specific purpose.

5. Data Security Measures

titi40 employs a comprehensive set of technical, administrative, and physical security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction:

5.1 Technical Safeguards

• SSL Encryption: All data transmitted between your device and our servers is encrypted using 256-bit Secure Socket Layer (SSL) technology, the same standard used by major banks and financial institutions.
• Secure Servers: Personal data is stored on secure servers located in protected data centres with restricted physical access, surveillance systems, and environmental controls.
• Firewalls and Intrusion Detection: Our network infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity.
• Regular Security Audits: We conduct periodic security assessments and vulnerability scans to identify and address potential weaknesses.
• Data Minimisation: We collect and retain only the minimum personal information necessary for our stated purposes.

5.2 Administrative Safeguards

• Access Controls: Access to personal data is restricted to authorised titi40 employees and contractors who require it to perform their job functions. Access is granted on a need-to-know basis.
• Employee Training: All staff members undergo privacy and data security training and are bound by confidentiality agreements.
• Incident Response Plan: We maintain a documented incident response plan to address potential data breaches promptly and notify affected users as required by law.

5.3 User Responsibility

While we implement robust security measures, you also play a critical role in protecting your Account:

• Choose a strong, unique password and do not share it with anyone
• Enable two-factor authentication (2FA) if available
• Log out of your Account when using shared or public devices
• Monitor your Account for suspicious activity and report it immediately
• Keep your contact information (email, phone) up to date so we can reach you regarding security matters

Important: titi40 will never ask for your password via email, phone, or live chat. If you receive such a request, do not respond and contact us immediately at [email protected].

6. Data Retention

6.1 Retention Periods. titi40 retains your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active Account plus seven (7) years after Account closure, as required by Indonesian financial record-keeping laws.
• Transaction Records: Retained for seven (7) years to comply with tax and anti-money-laundering regulations.
• KYC Documents: Retained for seven (7) years after Account closure or the last transaction, whichever is later.
• Communication Records: Retained for three (3) years to address potential disputes and improve customer service.
• Marketing Data: Retained until you opt out or request deletion, after which it is removed within 30 days.

6.2 Data Deletion. At the end of the applicable retention period, personal data is securely deleted or anonymised. You may request earlier deletion of certain data by contacting [email protected], subject to our legal and regulatory obligations.

7. Your Privacy Rights

Under Indonesian data protection laws and international privacy standards, you have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request a copy of the personal information we hold about you. To request access, contact [email protected] with the subject line "Data Access Request." We will respond within 30 days and provide the information in a commonly used electronic format.

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your Account settings or by contacting customer support.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent. However, we may be legally required to retain certain data (e.g., transaction records, KYC documents) for regulatory compliance. Contact [email protected] to request data deletion.

7.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal information in certain situations, such as when you contest the accuracy of the data or object to processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can opt out of marketing communications via your Account settings or by clicking "unsubscribe" in promotional emails.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at [email protected] with your request. We may need to verify your identity before processing your request to ensure data security.

8. Cookies and Tracking Technologies

8.1 What Are Cookies? Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences, maintain your login session, and provide a more personalised experience.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly. These enable core features like account login, security, and payment processing. Essential cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use the Platform (pages visited, error messages, load times) to help us improve functionality. These cookies do not identify you personally.
• Functionality Cookies: Remember your preferences (language, currency, display settings) to provide a more personalised experience.
• Marketing Cookies: Track your activity across the Platform to deliver targeted promotional offers and measure the effectiveness of marketing campaigns. These cookies require your consent.

8.3 Managing Cookies

You can manage or disable cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of the Platform, such as account login or making deposits. Disabling marketing cookies will not affect core Platform functionality but may result in less relevant promotional offers.

Most browsers allow you to:

• View and delete existing cookies
• Block third-party cookies
• Block all cookies (not recommended for titi40)
• Receive a notification before a cookie is set

For more information on managing cookies, consult your browser's help documentation.

9. Third-Party Links and Services

The titi40 Platform may contain links to third-party websites or services (e.g., game studio sites, payment provider portals, responsible gaming resources). We are not responsible for the privacy practices or content of these external sites. When you click on a third-party link, you leave the titi40 Platform and are subject to that site's privacy policy. We encourage you to review the privacy policies of any third-party sites you visit.

10. International Data Transfers

While titi40 primarily operates within Indonesia, some of our service providers (cloud hosting, payment processing, game studios) may be located outside Indonesia. When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your information, including:

• Standard contractual clauses approved by Indonesian data protection authorities
• Verification that the recipient country offers adequate data protection standards
• Binding corporate rules for transfers within multinational organisations

By using the titi40 Platform, you consent to the transfer of your personal data to jurisdictions outside Indonesia under the safeguards described above.

11. Children's Privacy

titi40 is intended exclusively for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will:

• Delete the data immediately
• Close the associated Account permanently
• Forfeit any deposits or winnings (as minors are prohibited from gambling under Indonesian law)
• Notify the legal guardian if contact information is available

If you believe we have collected information from a minor, please contact us immediately at [email protected] so we can take corrective action.

12. Changes to This Privacy Policy

titi40 reserves the right to update, amend, or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date
• Notify you via email or a prominent notice on the Platform
• Request your consent for changes that expand how we use your personal data

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the Platform after changes have been posted constitutes acceptance of the updated Privacy Policy.

13. Contact Information and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or how titi40 handles your personal information, please contact us:

Email: [email protected]
Subject Line: Privacy Inquiry / Data Protection Request
Customer Support: Available 24/7 via live chat on the Platform

We will acknowledge receipt of your inquiry within 48 hours and aim to resolve privacy concerns within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Indonesian data protection authority (Kominfo or relevant regulatory body).