Privacy Policy

tawa55 ("we", "us", "our", or "the Platform") is committed to protecting and respecting the privacy of every individual who visits, registers on, or uses the tawa55 platform at tawa55.cam. This Privacy Policy sets out the basis on which we collect, process, store, and share personal data relating to our players, prospective players, and website visitors.

This policy has been drafted to meet internationally recognized privacy standards and is intended to be read alongside the tawa55 Terms & Conditions and Responsible Gaming Policy, both of which form part of the binding agreement between you and tawa55.

By registering an account on tawa55 or by continuing to use the platform after being directed to review this policy, you acknowledge that you have read and understood its contents, and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this policy, you should not register an account or use the tawa55 platform.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including, but not limited to, name, date of birth, email address, IP address, device identifier, and financial account details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction — whether or not by automated means.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, tawa55 and its operating entity.
• "Data Processor" means any third-party service provider that processes personal data on tawa55's behalf under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC" (Know Your Customer) refers to the identity and age verification process that tawa55 undertakes to comply with anti-money-laundering and responsible gaming obligations.
• "Cookies" means small text files placed on a user's device by a website to store session information and preferences.

tawa55 collects the following categories of personal data from players and website visitors:

tawa55 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing the KYC process, submitting a support request, or updating your profile settings.
• Automated collection: Technical data collected automatically when you access the tawa55 platform, including IP addresses, browser identifiers, session timestamps, and page interaction data gathered via server logs and analytics tools.
• Transaction processing: Financial data generated when you make deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or ShopeePay, or when you request withdrawals to your nominated payment account.
• Third-party verification providers: Identity and address data confirmed or supplemented through KYC verification partners and payment processor records, used solely for the purpose of fulfilling our verification obligations.
• Cookies and tracking technologies: Session and preference data gathered through cookies placed on your device during platform visits, as described in Clause 10 of this policy.
• Communications: Content you submit through live chat, email correspondence to [email protected], WhatsApp support, or any other communication channel offered by tawa55.

tawa55 processes personal data only for specific, legitimate purposes. The following table summarizes the key purposes for which we use each category of data:

• Account creation and management: To register your account, authenticate your identity at login, and maintain your player profile throughout your relationship with tawa55.
• Age and identity verification (KYC): To confirm that you are at least 21 years of age and that your stated identity is genuine, in compliance with our responsible gaming and anti-fraud obligations.
• Payment processing: To process deposits and withdrawals via your nominated Indonesian bank account or e-wallet, to verify that payment accounts are registered in your own name, and to maintain accurate transaction records.
• Fraud prevention and security: To detect and investigate suspicious activity, unauthorized account access, bonus abuse, money laundering, and other prohibited conduct described in the tawa55 Terms & Conditions.
• Customer support: To respond to your inquiries, resolve disputes, process responsible gaming requests (such as self-exclusion or deposit limits), and maintain a record of support interactions for quality assurance.
• Platform improvement: To analyze aggregated, anonymized usage patterns and improve the performance, design, and feature set of the tawa55 platform over time.
• Legal and regulatory compliance: To meet our obligations under applicable international licensing conditions, anti-money-laundering regulations, and any lawful request from a competent regulatory authority.
• Promotional communications: Where you have opted in, to send you relevant bonus offers, seasonal promotions (e.g., Idul Fitri, Ramadhan specials, BRI Liga 1 betting promotions), and platform update notifications via email or in-platform messaging. You may opt out at any time by contacting support.

tawa55 processes personal data on one or more of the following legal grounds, depending on the specific processing activity in question:

• Contractual necessity: Processing required to perform the contract between you and tawa55 — for example, verifying your identity, processing deposits and withdrawals, and managing your betting account.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money-laundering requirements, licensing conditions, and lawful orders from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out to pursue tawa55's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection, platform security, internal analytics, and responsible gaming monitoring.
• Consent: Where you have given explicit, informed consent to a specific processing activity — most notably, the receipt of promotional communications. You may withdraw consent at any time without affecting the lawfulness of any prior processing.

tawa55 does not sell, rent, or otherwise trade your personal data to unaffiliated third parties. We may, however, share your data with the following categories of recipients in the circumstances described:

• Payment processors and banking partners: Financial institutions and e-wallet providers (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Specialist third-party services engaged to assist with document verification and age confirmation. These providers act as data processors under a formal agreement and may not use your data for any purpose beyond the verification service they provide to tawa55.
• IT infrastructure and hosting providers: Cloud hosting and server management providers who maintain the technical infrastructure on which the tawa55 platform operates. These providers are bound by strict data processing agreements and implement equivalent security standards to those described in Clause 9.
• Customer support platforms: Live chat and customer relationship management (CRM) tools used to deliver support services. Agents operating these tools are bound by confidentiality obligations.
• Regulatory and law enforcement authorities: Where tawa55 is required by applicable law, court order, or a lawful request from a competent regulatory authority to disclose player data, we will comply with that obligation. Where legally permitted, we will notify affected players of such a disclosure.
• Fraud prevention and security networks: Industry-standard fraud prevention databases and security intelligence providers, to the extent necessary to protect players and the platform from fraudulent activity.

tawa55 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with any individual. Where retention is required for legal proceedings or an unresolved dispute, data will be retained until the matter is conclusively resolved.

tawa55 has implemented a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL): All data in transit between your device and the tawa55 platform is protected by 256-bit TLS encryption, preventing interception by third parties.
• Encryption at rest: Stored personal and financial data is encrypted using AES-256 encryption. Encryption keys are managed under strict access controls with regular key rotation.
• Access controls: Access to systems containing player data is restricted to authorized tawa55 personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Two-factor authentication (2FA): tawa55 administrative systems require two-factor authentication for all access. Players are encouraged (and may be required) to enable 2FA on their own accounts for additional security.
• Penetration testing and vulnerability scanning: tawa55's platform and infrastructure undergo regular penetration testing by independent security specialists and continuous automated vulnerability scanning.
• Incident response: tawa55 maintains a documented data breach response procedure. In the event of a breach affecting player data, affected players and relevant authorities will be notified in accordance with applicable legal timeframes.

tawa55 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your logged-in session, remember your preferences, and gather anonymous analytics about platform performance. We do not use third-party advertising cookies or behavioral profiling technologies.

The cookies used by tawa55 fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language selection, display settings, and bet-slip preferences between sessions, so you do not need to reconfigure them on each visit.
• Analytics cookies: Collect anonymized data about how players navigate the platform — pages visited, features used, session duration — to help tawa55 identify areas for improvement. No personally identifiable information is included in analytics data.
• Security cookies: Used for fraud detection purposes, including identifying unusual login patterns or session behavior that may indicate account compromise.

Most browsers allow you to control cookie settings via the browser preferences menu. Disabling strictly necessary cookies will impair your ability to log in and use the tawa55 platform. Disabling analytics or functional cookies will not prevent you from using the platform but may affect your experience.

As a tawa55 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at the details set out in Clause 16. We will acknowledge your request within 5 business days and provide a substantive response within 30 days.

The tawa55 platform is strictly intended for adults aged 21 and over. tawa55 does not knowingly collect personal data from any person under the age of 21. We apply mandatory age verification controls at the point of registration, and all accounts are subject to KYC verification that confirms the player's date of birth.

If tawa55 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all associated data will be deleted or returned to its source, and any deposits will be refunded to the originating payment method. If you believe a person under 21 has registered an account on tawa55, please notify us immediately via the contact details in Clause 16.

Parents and guardians in Indonesia are encouraged to make use of internet filtering tools and parental control software to prevent minors from accessing online gambling platforms. tawa55 supports industry-wide initiatives for safer online environments.

tawa55 operates on an internationally hosted platform. As a result, your personal data may be transferred to and stored on servers located outside of Indonesia. Where such transfers occur, tawa55 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this policy.

Safeguards for international data transfers include:

• Contractual data processing agreements with all third-party processors incorporating standard data protection clauses aligned with internationally recognized privacy frameworks.
• Technical security measures (encryption in transit and at rest) applied consistently regardless of the geographic location of the server.
• Regular reviews of data processor compliance, including assessments of the data protection environment in the destination jurisdiction.

By using the tawa55 platform, you acknowledge that your personal data may be transferred and processed in jurisdictions other than Indonesia, and that tawa55 will implement the safeguards described above to protect your data throughout any such transfer.

The tawa55 platform integrates with a number of third-party services to deliver its full range of features, including game content from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft; payment processing via Indonesian banks and e-wallets; and identity verification services. Each of these providers operates under its own privacy and data security policies.

While tawa55 carefully selects third-party partners and requires them to meet appropriate data protection standards as a condition of engagement, tawa55 is not responsible for the privacy practices of third-party platforms that are independent of the tawa55 platform itself. Links or integrations to third-party game studios or payment interfaces are governed by those parties' own terms.

tawa55 does not integrate third-party social media tracking pixels, advertising networks, or behavioral analytics platforms on the tawa55 platform. Any analytics tools used by tawa55 are configured to collect anonymized, aggregated data only.

tawa55 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material — for example, a new category of data collection, a change in data retention periods, or the introduction of a new third-party processor — we will notify registered players by email to their registered address at least 14 days before the revised policy takes effect.

Minor amendments (such as clarifications, corrections of typographical errors, or reorganization of existing content without substantive change) may be made without prior notice. The effective date displayed at the top of this policy will be updated to reflect the most recent revision.

Your continued use of the tawa55 platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated policy. The current version of this policy is always available at tawa55.cam/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to make a complaint about how tawa55 has handled your personal data, please contact our support team through any of the following channels:

• Email: [email protected] — for formal data rights requests, KYC queries, or privacy complaints. Please mark the subject line clearly (e.g., "Data Access Request" or "Privacy Complaint"). Response within 24 hours; substantive reply within 30 days.
• Live Chat: Available 24 hours a day, 7 days a week within the tawa55 platform. Indonesian and English support available. Suitable for general privacy questions and initial complaint registration.
• WhatsApp: Contact number displayed within the tawa55 platform after login. Suitable for general queries; formal data requests should be submitted by email for proper documentation.

tawa55 takes all privacy complaints seriously and aims to resolve them promptly and fairly. If you are not satisfied with the outcome of a privacy complaint after engaging with our support team, you may be entitled to escalate the matter to a relevant data protection supervisory authority in the jurisdiction applicable to your case.