Privacy Policy — Your Data, Our Responsibility

This Privacy Policy (hereinafter "Policy") describes how tawa33 (hereinafter "tawa33", "we", "us", or "our") collects, uses, stores, processes, discloses, and protects the personal information of individuals (hereinafter "Members", "Users", "you", or "your") who access or use the tawa33 online gaming platform located at https://tawa33.cam (hereinafter "the Platform" or "the Website").

At tawa33, we recognize that your privacy is important. We are committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection laws and regulations governing online gaming operations serving the Indonesia market.

By registering an Account on tawa33, providing personal information during the Know Your Customer (KYC) verification process, making a deposit, or using any part of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

For the purposes of this Privacy Policy, the following terms have the meanings set forth below:

• "Personal Data" / "Personal Information" means any information relating to an identified or identifiable natural person. This includes your name, date of birth, residential address, email address, phone number, government-issued identification numbers, bank account details, transaction history, IP address, device identifiers, and any other information that can directly or indirectly identify you.
• "Processing" means any operation or set of operations performed on Personal Data, whether automated or manual, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, transmission, combination, erasure, or destruction.
• "Data Controller" means tawa33, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third-party service provider (such as payment gateways, identity verification services, cloud hosting providers, or customer support platforms) that processes Personal Data on behalf of tawa33 under our instructions.
• "KYC" (Know Your Customer) means the identity verification process mandated by applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations, requiring Members to provide government-issued identification, proof of address, and proof of payment method ownership.
• "Cookies" means small text files stored on your device (computer, tablet, smartphone) by the Platform to recognize your browser, remember your preferences, and collect usage analytics.
• "Services" means all gaming, betting, promotional, customer support, and account management services made available through the tawa33 Platform.

tawa33 collects Personal Data directly from you when you interact with the Platform, as well as automatically through your use of our Services. The categories of Personal Data we collect include:

3.1 Registration and Account Information

• Full Legal Name: Your name as it appears on your government-issued identification (KTP, passport, driver's license).
• Date of Birth: To verify that you meet the minimum age requirement of 21 years.
• Email Address: Used for account activation, security notifications, promotional communications, and customer support correspondence.
• Mobile Phone Number: For account verification, two-factor authentication (2FA), security alerts, and customer support contact.
• Residential Address: Your full street address, city, province, and postal code as verified during KYC.
• Username and Password: Account credentials (password is stored in hashed, encrypted form and is never visible to tawa33 staff).
• Preferred Currency: Set to Indonesian Rupiah (Rp) by default for all Members.

3.2 Identity Verification (KYC) Documents

• Government-Issued ID: Copy of your KTP (Kartu Tanda Penduduk), passport, or driver's license showing your photograph, signature, date of birth, and identification number.
• Proof of Address: Recent utility bill (electricity, water, internet), bank statement, or government correspondence dated within the last three months, showing your name and current residential address.
• Payment Method Verification: Bank account statement, screenshot of your mobile banking app, or e-wallet account details showing your name and account number for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja accounts.

3.3 Financial and Transaction Data

• Deposit and Withdrawal History: Records of all deposit and withdrawal transactions including amounts, dates, payment methods, and processing status.
• Bank Account or E-Wallet Details: Account holder name, account number, bank name, branch code (if applicable) for Indonesian bank transfers; phone number and account name for e-wallet withdrawals.
• Betting and Gaming Activity: Complete record of all bets placed, wagers made, game sessions, wins, losses, bonus claims, and Account Balance changes.

3.4 Technical and Usage Data

• IP Address: The Internet Protocol address assigned to your device by your Internet Service Provider, used for fraud prevention, geolocation verification, and security monitoring.
• Device Information: Device type (desktop, tablet, smartphone), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and unique device identifiers.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar tracking technologies that record your browsing behavior, game preferences, login sessions, and interaction with Platform features.
• Usage Analytics: Pages visited, features used, time spent on each page, clickstream data, search queries, and navigation patterns within the Platform.

3.5 Communications and Support Data

• Customer Support Correspondence: Content of your live chat conversations, email exchanges, and phone calls with tawa33 Customer Support representatives (recorded for quality assurance and training purposes).
• Marketing Preferences: Your consent or objection to receiving promotional emails, SMS messages, or push notifications about bonuses, new games, and special offers.

tawa33 processes your Personal Data for the following specific purposes:

4.1 Account Registration and Management

• To create, activate, and maintain your Member Account.
• To verify your identity and eligibility to use the Platform (age verification, jurisdiction verification).
• To authenticate your login credentials and protect against unauthorized Account access.
• To enable you to update your profile information, change your password, and manage Account settings.

4.2 Transaction Processing and Financial Services

• To process deposits made via Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• To process withdrawal requests and transfer funds to your verified bank account or e-wallet.
• To maintain accurate records of your Account Balance, bonus funds, wagering activity, and financial transaction history.
• To reconcile payment discrepancies and investigate disputed transactions.

4.3 Compliance and Legal Obligations

• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations applicable to online gaming operations.
• To prevent, detect, and investigate fraud, money laundering, underage gambling, identity theft, and other illegal activities.
• To respond to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.
• To enforce our Terms and Conditions, resolve disputes, and protect the rights, property, and safety of tawa33, our Members, and the public.

4.4 Service Delivery and Platform Operation

• To provide access to sports betting markets, live casino games, slot machines, and specialty games offered on the Platform.
• To calculate and settle bet outcomes, award winnings, and update Account Balances in real time.
• To administer bonuses, promotions, loyalty programs, and VIP rewards in accordance with published Terms and Conditions.
• To monitor Platform performance, diagnose technical issues, and improve system stability and user experience.

4.5 Customer Support and Communication

• To respond to your inquiries, support requests, and complaints via live chat, email, or phone (available 24/7 in Bahasa Indonesia and English).
• To send you important Account-related notifications such as password resets, security alerts, KYC verification status updates, deposit confirmations, and withdrawal processing updates.
• To conduct customer satisfaction surveys and gather feedback to improve our Services.

4.6 Marketing and Promotional Communications (With Your Consent)

• To send you promotional emails, SMS messages, or push notifications about new game releases, bonus offers, tournaments, and seasonal promotions (only if you have opted in to receive marketing communications).
• To personalize promotional content based on your gaming preferences and Account activity.
• You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any promotional email, adjusting your notification preferences in your Account settings, or contacting Customer Support.

4.7 Analytics, Research, and Platform Improvement

• To analyze user behavior, game popularity, and Platform usage patterns to identify trends and improve our Services.
• To conduct internal research and development for new features, game categories, payment methods, and user interface enhancements.
• To generate aggregated, anonymized statistical reports for business intelligence purposes (such reports do not identify individual Members).

4.8 Security and Fraud Prevention

• To monitor and detect suspicious Account activity, such as unauthorized login attempts, unusual betting patterns, or payment fraud.
• To enforce betting limits, self-exclusion requests, and responsible gaming measures.
• To maintain the integrity and fairness of our gaming Services and prevent collusion, match-fixing, or exploitation of game mechanics.

tawa33 processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and tawa33 (our Terms and Conditions), including Account registration, transaction processing, and Service delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC, AML, CTF, age verification, and regulatory reporting obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests in operating a secure, efficient, and fair online gaming platform, preventing fraud, improving Services, and conducting business analytics — provided such interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and certain optional data collection activities, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before withdrawal.

tawa33 does not sell, rent, or trade your Personal Data to third parties for their marketing purposes. We share your Personal Data only in the following limited circumstances:

6.1 Service Providers and Data Processors

We engage trusted third-party service providers to perform specific functions on our behalf, including:

• Payment Processors: Indonesian bank transfer gateways, e-wallet APIs (OVO, DANA, GoPay, ShopeePay, LinkAja), and international payment service providers to facilitate deposits and withdrawals.
• Identity Verification Services: Third-party KYC/AML compliance platforms that verify government-issued IDs, perform address checks, and screen against sanctions lists.
• Cloud Hosting and Infrastructure: Secure cloud computing providers that host our servers, databases, and Platform infrastructure.
• Customer Support Tools: Live chat software, email management systems, and customer relationship management (CRM) platforms used by our support team.
• Analytics and Marketing Platforms: Web analytics tools (Google Analytics or similar), email marketing platforms, and advertising networks (only aggregated or anonymized data is shared where possible).

All service providers are bound by strict confidentiality obligations and contractual terms requiring them to process your Personal Data only in accordance with our instructions and applicable data protection laws.

6.2 Game and Software Providers

tawa33 partners with reputable game studios and software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others) to deliver slot games, live casino games, and specialty games. These providers may receive limited data (such as your username, bet amounts, and game session identifiers) necessary to operate their games and generate fair outcomes through certified Random Number Generators (RNG). Game providers are prohibited from using your data for any purpose other than providing gaming services to tawa33.

6.3 Legal and Regulatory Authorities

We may disclose your Personal Data to government authorities, regulatory bodies, law enforcement agencies, or courts when required by law, legal process, or lawful government request, including but not limited to:

• Compliance with KYC, AML, and CTF regulations.
• Response to subpoenas, court orders, or other legal obligations.
• Investigation of suspected fraud, money laundering, or other criminal activity.
• Protection of the rights, property, or safety of tawa33, our Members, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, asset sale, or other corporate transaction involving tawa33, your Personal Data may be transferred to the acquiring entity or successor organization. We will notify you via email or prominent notice on the Platform before your Personal Data is transferred and becomes subject to a different privacy policy.

6.5 With Your Explicit Consent

We may share your Personal Data with third parties for purposes not described in this Policy if we obtain your explicit consent to do so. You have the right to withdraw such consent at any time.

tawa33 takes data security seriously and implements industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and tawa33 servers is encrypted using 256-bit SSL/TLS (Secure Sockets Layer / Transport Layer Security) protocols, the same encryption standard used by banks and financial institutions.
• Encryption at Rest: All Personal Data stored on our servers is encrypted at rest using AES-256 (Advanced Encryption Standard) encryption, ensuring data remains unreadable even if physical storage media is compromised.
• Access Controls: Access to Personal Data is restricted to authorized tawa33 employees and contractors who require such access to perform their job functions. All staff members are subject to strict confidentiality obligations and receive regular data protection training.
• Firewall and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) that monitor for and block malicious activity.
• Regular Security Audits: We conduct regular security assessments, vulnerability scans, and penetration tests to identify and remediate potential security weaknesses.
• Secure Password Storage: Member passwords are never stored in plain text. Instead, they are hashed using industry-standard cryptographic hash functions (such as bcrypt or Argon2) and salted to prevent rainbow table attacks.
• Secure Data Centers: Our servers are hosted in secure, certified data centers with physical access controls, 24/7 surveillance, and redundant power and network infrastructure.
• Two-Factor Authentication (2FA): We offer optional two-factor authentication to add an additional layer of security to your Account login process.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. You also play a role in protecting your Account by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with anyone.

tawa33 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: While your Account remains active, we retain all Account information, transaction history, and gaming activity to provide ongoing Services.
• Closed Accounts: If you voluntarily close your Account or your Account is closed by tawa33 due to Terms violations, we retain certain data for a minimum of seven (7) years after Account closure to comply with financial record-keeping requirements, AML regulations, and to address potential legal claims or disputes.
• KYC Documents: Identity verification documents (government IDs, proof of address, payment method verification) are retained for a minimum of seven (7) years after your last transaction or Account closure, as required by AML and regulatory compliance obligations.
• Transaction Records: Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of seven (7) years to comply with financial auditing and tax reporting requirements.
• Marketing Communications: If you opt out of marketing communications, we retain your email address and opt-out preference indefinitely to ensure we do not inadvertently contact you again.
• Customer Support Records: Support correspondence (live chat logs, emails, call recordings) is retained for up to three (3) years for quality assurance, training, and dispute resolution purposes.

After the applicable retention period expires, we securely delete or anonymize your Personal Data using industry-standard data destruction methods.

Under applicable data protection laws, you have the following rights with respect to your Personal Data:

9.1 Right of Access

You have the right to request confirmation of whether tawa33 is processing your Personal Data and, if so, to obtain a copy of that data in a structured, commonly used, machine-readable format. You may access most of your Account information directly through your Account dashboard on the Platform.

9.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. You can update your email address, phone number, and certain other profile details directly through your Account settings. For changes to your name, date of birth, or address (which must match your KYC documents), please contact Customer Support.

9.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your Personal Data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent where processing was based on consent. However, this right is subject to limitations where we are required to retain data to comply with legal obligations, resolve disputes, or enforce our agreements. If you wish to close your Account and request data deletion, please contact Customer Support.

9.4 Right to Restrict Processing

You have the right to request that we restrict processing of your Personal Data in certain situations, such as when you contest the accuracy of the data, when processing is unlawful but you prefer restriction over erasure, or when you need the data for legal claims but we no longer need it for our purposes.

9.5 Right to Data Portability

Where technically feasible, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to transmit that data to another service provider without hindrance from tawa33. This right applies to data you have provided to us where processing is based on consent or contractual necessity and is carried out by automated means.

9.6 Right to Object

You have the right to object to processing of your Personal Data where we rely on legitimate interests as the legal basis for processing, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms. You also have the absolute right to object to processing of your Personal Data for direct marketing purposes at any time by clicking "Unsubscribe" in promotional emails or adjusting your communication preferences in Account settings.

9.7 Right to Withdraw Consent

Where we process your Personal Data based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

9.8 How to Exercise Your Rights

To exercise any of the rights described above, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will respond to your request within thirty (30) days and may request additional information to verify your identity before processing your request. There is no fee for exercising your rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or refuse to act on the request.

tawa33 uses cookies and similar tracking technologies to enhance your experience on the Platform, remember your preferences, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device by your web browser when you visit a website.

Types of Cookies We Use

• Essential Cookies: Strictly necessary for the Platform to function. These cookies enable core functionality such as login sessions, Account authentication, and transaction processing. The Platform cannot function properly without these cookies.
• Performance and Analytics Cookies: Collect information about how visitors use the Platform, such as which pages are visited most often, how long users stay on each page, and any error messages encountered. This data is used to improve Platform performance and user experience. These cookies are typically provided by third-party analytics services (such as Google Analytics).
• Functional Cookies: Remember your preferences and choices (such as language preference, display settings, and game favorites) to provide a more personalized experience.
• Advertising and Marketing Cookies: Used to deliver relevant promotional content and track the effectiveness of advertising campaigns. These cookies may be set by tawa33 or by third-party advertising networks.

Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that if you disable essential cookies, you may not be able to access certain features of the Platform or your user experience may be degraded. To learn more about managing cookies, visit your browser's help section or visit www.allaboutcookies.org (external site, not affiliated with tawa33).

The tawa33 Platform may contain links to third-party websites, payment processors, or game providers. This Privacy Policy applies only to information collected by tawa33 through our Platform. We are not responsible for the privacy practices or content of third-party websites or services. We encourage you to read the privacy policies of any third-party sites you visit before providing them with your Personal Data.

The tawa33 Platform is intended exclusively for adults aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a person under 21 has provided us with Personal Data, we will take immediate steps to delete such information and permanently close the Account. If you believe we may have inadvertently collected information from a minor, please contact us immediately at [email protected].

tawa33 reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email, in-Platform notification, or by posting a prominent notice on the homepage with the updated "Effective Date" at the top of this document.

Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your Personal Data.

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your privacy rights, please contact our Data Protection team:

• Email: [email protected] (Subject: "Privacy Inquiry")
• Live Chat: Available 24/7 through the Platform (select "Privacy / Data Protection" category)
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours and to complete data subject rights requests within 30 days.

Our Customer Support team is fluent in Bahasa Indonesia and English, and is available around the clock to assist with privacy questions, data access requests, consent management, and Account security concerns.