Privacy Policy — t0288 Data Protection

1.1 Who We Are. t0288 is an internationally operated online gaming platform offering sports betting, live casino games, slot gacor (high-payout slot games), togel (Indonesia's traditional numbers lottery), and crash games to adult players. The platform is accessible at https://t0288.cam and is designed primarily for English-preference players across Indonesia.

1.2 Scope of This Policy. This Privacy Policy governs all personal data collected, processed, and stored by t0288 in connection with the operation of the platform and the delivery of our Services. It covers:

• Personal information provided voluntarily during registration and KYC verification.
• Financial data collected during deposit and withdrawal transactions.
• Technical and behavioural data collected automatically during your use of the platform.
• Communications data exchanged between you and our customer support team.

1.3 Third-Party Platforms. This Privacy Policy does not extend to any third-party websites, payment processors, or game studio platforms that may be accessible via links or integrations within the t0288 platform. We encourage you to review the privacy policies of any third-party service you use in connection with your t0288 account.

The following definitions apply throughout this Privacy Policy:

3.1 Registration Data. When you create a t0288 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify you meet the 21+ age requirement).
• Indonesian residential address, including province and city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali).
• Valid email address, which becomes your primary account contact point.
• Active Indonesian mobile phone number, used for account security notifications and two-factor authentication (2FA).
• Username and encrypted password.

3.2 Identity Verification (KYC) Data. To comply with our anti-money laundering (AML) obligations and to protect all players on the platform, t0288 may request the following additional documents during the KYC review process:

• A clear, unedited photograph or scan of a government-issued photo ID — Indonesian KTP (national identity card), passport, or SIM (driving licence).
• Proof of residential address dated within the past three months, such as a utility bill, bank statement from BCA, BRI, BNI, Mandiri, or CIMB Niaga, or official government correspondence.
• Evidence of ownership of the payment method linked to your t0288 account — for example, a screenshot of the OVO, DANA, GoPay, ShopeePay, or LinkAja account registered in your name.
• In cases of elevated risk, a selfie photograph held alongside your identification document may be requested.

3.3 Financial Transaction Data. Every deposit and withdrawal processed through the t0288 platform generates a transaction record. This record includes the transaction amount in Indonesian Rupiah (IDR), the payment method used, the date and time stamp (WIB, UTC+7), and the transaction reference number assigned by the payment provider. t0288 does not store full bank account numbers or full e-wallet credentials — only masked references sufficient to match a transaction to an account.

3.4 Gaming Activity Data. t0288 records all gaming and betting activity associated with your account, including bets placed on sportsbook markets (BRI Liga 1, EPL, Champions League, and other leagues), live casino rounds (Evolution Gaming, Pragmatic Play Live), slot game sessions, togel ticket purchases, and crash game rounds. This data is used for account management, responsible gaming monitoring, dispute resolution, and bonus eligibility assessment.

3.5 Technical & Device Data. When you access the t0288 platform, we automatically collect certain technical information from your device and browser, including:

• IP address and approximate geolocation (country and city level).
• Device type, operating system, and browser version.
• Session start and end times, page views, and navigation paths.
• Referring URL (the page you visited immediately before arriving at t0288).

3.6 Communication Data. When you contact t0288 via live chat or email, the content of those communications — including any attachments you submit — is stored for a minimum of 12 months. This data is used to resolve disputes, improve support quality, and comply with regulatory record-keeping obligations.

t0288 processes your Personal Data for the following specific purposes:

t0288 processes Personal Data on one or more of the following legal bases, depending on the category of data and the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account creation, payment processing, KYC verification, and customer support.
• Legitimate Interests: Processing necessary for t0288's legitimate business interests, including fraud prevention, AML monitoring, platform security, responsible gaming compliance, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Legal Obligation: Processing required to comply with applicable laws and to respond to lawful requests from regulatory and law enforcement authorities.
• Consent: Processing based on your explicit, freely given consent — specifically, the sending of optional marketing communications and the use of non-essential tracking cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.1 t0288 Does Not Sell Your Data. We do not sell, rent, or trade your Personal Data to any third party for commercial purposes. Your information is shared only in the specific limited circumstances described in this section.

6.2 Payment Processors. To execute deposit and withdrawal transactions, t0288 shares the minimum necessary transaction information with Indonesian payment providers including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. Each of these providers operates under its own privacy policy and is responsible for the security of data it receives in connection with payment processing.

6.3 Game Studio Partners. Live casino and slot game sessions are delivered by third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe. These studios may receive your account session token and game history data necessary to deliver the game experience. They do not receive your full personal profile, financial details, or KYC documents.

6.4 KYC and Fraud Prevention Services. t0288 may engage specialist third-party providers to assist with identity verification and fraud detection. These providers receive only the data necessary to complete the specific verification task and are contractually bound to process such data solely for that purpose.

6.5 Legal and Regulatory Disclosure. t0288 may disclose Personal Data to government bodies, regulatory authorities, or law enforcement agencies where required to do so by applicable law, legal process, or in connection with the investigation of suspected fraud, money laundering, or other illegal activity. Such disclosures will be limited to the data strictly necessary to satisfy the legal obligation.

6.6 Business Transfers. In the event of a merger, acquisition, or full or partial sale of the t0288 business, Personal Data held by t0288 may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

7.1 Active Accounts. While your t0288 account remains active, we retain all Personal Data associated with it for the purpose of delivering our Services, maintaining accurate transaction records, and fulfilling responsible gaming obligations.

7.2 Closed Accounts. Following voluntary account closure or t0288-initiated account termination, Personal Data is retained for a minimum of five (5) years from the date of closure. This retention period reflects our obligations to:

• Maintain financial transaction records for audit and AML compliance purposes.
• Honour self-exclusion commitments — so that a player who has requested permanent self-exclusion cannot re-register during the exclusion period.
• Support dispute resolution and respond to legitimate legal process requests that may arise after account closure.

7.3 KYC Documents. Identity verification documents submitted during KYC are retained for a minimum of five (5) years from the date of the most recent transaction processed using the verified account.

7.4 Marketing Data. If you opt out of marketing communications, your email address and marketing preferences will be retained on a suppression list to ensure we do not inadvertently contact you again. This suppression record is not used for any other purpose.

7.5 Deletion. At the end of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with industry-standard data destruction practices. Anonymised, aggregated data (from which individual players cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

t0288 applies a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. The key technical and organisational measures in place include:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and the t0288 platform is encrypted using the same 256-bit SSL/TLS standard used by major Indonesian banks including BCA and BRI.
• Encryption at Rest: Sensitive data stored on t0288 servers — including KYC documents, financial records, and hashed passwords — is encrypted at rest using AES-256.
• Access Controls: Access to systems containing Personal Data is restricted to authorised personnel on a strict need-to-know basis. Multi-factor authentication is required for all administrative access to production systems.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their t0288 accounts. This additional layer of security prevents unauthorised login even if your password is compromised.
• Intrusion Detection & Monitoring: t0288 operates continuous security monitoring, automated threat detection, and periodic penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Data Minimisation: t0288 applies the principle of data minimisation — we collect and retain only the Personal Data strictly necessary for the purposes described in this Privacy Policy.
• Incident Response: In the event of a confirmed data security incident affecting your Personal Data, t0288 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

As a player whose Personal Data is processed by t0288, you hold the following rights with respect to your information. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond to all verified requests within thirty (30) days.

10.1 What Are Cookies. Cookies are small text files stored on your device when you visit the t0288 platform. They enable the platform to recognise your device across sessions, remember your preferences, and deliver a consistent user experience. t0288 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

10.2 Categories of Cookies We Use.

10.3 Managing Cookies. You may configure your browser to refuse or delete cookies at any time. Note that disabling strictly necessary cookies will impair or entirely prevent your ability to log in to and use the t0288 platform. Optional functional and analytics cookies may be disabled without affecting core platform access. Your cookie preferences can also be managed from the t0288 account settings panel.

The t0288 platform is strictly intended for adults aged 21 years and older. t0288 does not knowingly collect or process Personal Data from individuals under the age of 21. The collection of Personal Data from a minor is not lawful under these terms, and any account found to be registered by a person under 21 will be immediately suspended and all associated data reviewed.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has created a t0288 account or provided Personal Data to the platform, please contact us immediately at [email protected]. Upon verification of the complaint, t0288 will promptly close the account and delete the associated Personal Data, subject only to retention obligations required by law.

t0288 employs automated date-of-birth validation at the point of registration and manual age verification during the KYC review process to enforce this restriction. Providing a false date of birth to bypass the age check constitutes a material breach of our Terms & Conditions and will result in permanent account closure and forfeiture of any funds held in the account.

12.1 Right to Update. t0288 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform functionality. The revised policy will be published on this page with an updated "Last updated" date displayed in the page header.

12.2 Material Changes. Where a proposed change is material — for example, a change to the categories of data we collect, the third parties with whom we share data, or the retention periods we apply — t0288 will provide advance notice to all registered players via their registered email address or an in-platform notification, at least seven (7) days before the change takes effect.

12.3 Continued Use as Acceptance. Your continued use of the t0288 platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you must stop using the platform and submit a voluntary account closure request before the effective date of the changes.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 9, or need to report a potential data security concern, please contact the t0288 data protection team through the following channels:

• Live Chat: Available 24/7 directly from your t0288 account dashboard. Our Indonesian-speaking agents are on hand at all hours (WIB, UTC+7) and can assist with data rights requests and privacy enquiries.
• Email: [email protected] — for written data rights requests, please use the subject line "Privacy Request — [Your Account Username]" and allow up to 30 days for a full written response.

All formal data rights requests must be submitted in writing via email to ensure we can verify your identity before disclosing, amending, or deleting any Personal Data. We reserve the right to request a copy of your government-issued identification to verify your identity before processing any data rights request.