tkpwin Privacy Policy

tkpwin ("we", "us", "our") operates the online betting and gaming platform accessible at tkpwin.cam. We are committed to handling your personal information with transparency, integrity, and the highest standards of data security. This Privacy Policy applies to all users of the tkpwin platform, with particular reference to users located in Indonesia.

By creating an account with tkpwin or otherwise using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you must cease using the platform and may request account closure by contacting our support team.

This Privacy Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, all of which form part of the contractual framework governing your use of tkpwin.

tkpwin collects personal data through multiple channels. The categories of data we collect are as follows:

3.1 Registration Data

When you create an account, we collect: full legal name; date of birth; email address; Indonesian mobile phone number; city or region of residence (e.g., Jakarta, Surabaya, Bandung, Bali); and a chosen username and password (stored in hashed form — never in plain text).

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) standards and to verify that you meet our 21+ age requirement, we collect: a copy of your government-issued photo ID (Indonesian KTP or passport); a selfie photograph taken alongside your ID; and proof of payment method ownership. This data is processed by our vetted KYC verification partner and retained for the period required by applicable law.

3.3 Financial Data

When you make deposits or request withdrawals, we collect: bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon); e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja); transaction amounts, timestamps, and reference numbers. We do not store full credit or debit card numbers — card payments are tokenised by our payment processor.

3.4 Betting & Gaming Activity Data

We record all betting and gaming activity associated with your account, including: markets and games played; stake amounts and odds accepted; winning and losing outcomes; session durations; and responsible gaming tool settings (deposit limits, self-exclusion status).

3.5 Technical & Device Data

When you access the platform, our servers automatically record: IP address; browser type and version; operating system; device type (desktop, mobile, tablet); referring URL; pages viewed; and time and duration of visits. This data is collected via server logs and analytics cookies.

3.6 Communications Data

If you contact our support team, we retain records of those communications — including live chat transcripts, email correspondence, and support ticket histories — to ensure service quality and to resolve disputes fairly.

tkpwin uses your personal data for the following specific purposes:

tkpwin processes your personal data on the following legal grounds, consistent with internationally recognised data protection principles:

1. Contractual Necessity: Processing your registration data, KYC documents, and financial information is necessary to perform our contract with you — namely, providing access to the tkpwin betting platform and processing your deposits and withdrawals.
2. Legal Obligation: Certain processing activities (AML screening, KYC verification, data retention for audit purposes) are required by applicable law and our international operating licence conditions.
3. Legitimate Interests: We process technical and device data, betting activity analytics, and security logs on the basis of our legitimate interest in operating a secure, fraud-free platform and improving our Services. We conduct a balancing test to ensure these interests do not override your privacy rights.
4. Consent: Where we send you marketing communications or deploy non-essential cookies, we do so only with your explicit consent. You may withdraw consent at any time by contacting support or adjusting your account communication preferences.

tkpwin does not sell your personal data to third parties for their own marketing or commercial purposes. We share your data only in the following circumstances and only to the extent strictly necessary:

1. KYC & Identity Verification Partners: We share identity documents and selfie photographs with vetted third-party KYC verification providers to confirm your identity and age. These providers act as Data Processors under contractual obligations that prohibit them from using your data for any other purpose.
2. Payment Processors: Financial data necessary to process deposits and withdrawals is shared with Indonesian bank partners (BCA, BRI, BNI, Mandiri, and others) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). Each provider operates under its own privacy framework and applicable Indonesian financial regulation.
3. Game Content Providers: Anonymised session and game-play data may be shared with our licensed game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — for the purpose of game performance monitoring and RTP auditing. No personally identifiable information is shared with game studios.
4. Fraud Prevention & Security Services: We may share IP addresses, device fingerprints, and account activity data with specialist fraud-prevention and cybersecurity service providers to protect the platform and its users from abuse, cheating, and financial crime.
5. Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are required to do so by a valid legal order, court subpoena, or applicable law. We will notify you of such disclosures where legally permitted to do so.
6. Business Transfers: In the event of a merger, acquisition, or sale of all or part of tkpwin's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

tkpwin uses cookies and similar tracking technologies to operate the platform, analyse user behaviour, and personalise your experience. The following categories of cookies are in use:

You may adjust your cookie preferences at any time by contacting our support team or by configuring your browser's cookie settings. Note that disabling strictly necessary cookies will prevent you from logging in or using the platform's core features.

tkpwin retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following retention periods apply:

1. Active Account Data: Registration and account data is retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy AML audit and regulatory reporting obligations.
2. KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the conclusion of the customer relationship, in line with internationally accepted AML record-keeping standards.
3. Financial Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years following the date of the transaction.
4. Customer Support Records: Support tickets, live chat transcripts, and email correspondence are retained for two (2) years following the resolution of the relevant query.
5. Marketing Data: If you have opted in to marketing communications, your contact preferences are retained until you withdraw consent. Upon withdrawal, your details are removed from active marketing lists within 30 days.
6. Technical Logs: Server access logs and security event logs are retained for up to ninety (90) days for operational security purposes, after which they are securely deleted.

When your data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

tkpwin implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and tkpwin's servers is encrypted in transit using industry-standard TLS 1.3 protocols.
• Encryption at Rest: Sensitive personal data — including KYC documents, financial records, and hashed passwords — is encrypted at rest using AES-256 encryption on our secure cloud infrastructure.
• Two-Factor Authentication (2FA): Users are strongly encouraged to enable 2FA on their accounts. tkpwin's internal systems require 2FA for all staff access to production environments.
• Access Controls: Access to personal data within tkpwin's organisation is granted on a strict need-to-know basis. Staff who handle personal data receive regular privacy and security training.
• Penetration Testing: Our platform undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, tkpwin will notify affected users without undue delay and take immediate remedial action.

tkpwin is an internationally operated platform. As a result, your personal data may be transferred to and processed in countries outside Indonesia, including countries where our cloud hosting infrastructure, KYC partners, and game studio partners are located.

Where such transfers occur, tkpwin ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy. These safeguards may include:

• Standard contractual clauses binding the recipient to data protection obligations equivalent to those applicable in the originating jurisdiction.
• Processing only with Data Processors that hold recognised international security certifications (e.g., ISO 27001).
• Limiting the scope of data transferred to the minimum necessary for the specified processing purpose.

By using the tkpwin platform, you acknowledge and consent to such international transfers taking place on the terms described in this section.

As a user of the tkpwin platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at the email address provided in Section 15.

tkpwin will respond to all valid rights requests within thirty (30) calendar days. Where a request is complex or where we receive a high volume of requests, this period may be extended by a further sixty (60) days, with written notice provided to you.

The tkpwin platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration requirement, and our KYC verification process is designed to detect and reject underage applicants.

If we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all personal data collected in connection with that account, and return any deposited funds to the verified payment source.

If you are a parent or guardian and believe that your child may have accessed or registered on the tkpwin platform, please contact us immediately at the address in Section 15. We take underage gambling extremely seriously and will act without delay.

The tkpwin platform may display references to or integrations with third-party services — for example, game content provided by Pragmatic Play, Evolution Gaming, or other licensed studios. While we take care in selecting our partners, tkpwin is not responsible for the privacy practices of any third-party service provider or platform.

We encourage you to review the privacy policies of any third-party services you interact with in connection with the tkpwin platform. This Privacy Policy applies solely to data collected and processed directly by tkpwin through the tkpwin.cam domain and associated services.

tkpwin reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The following procedure governs all amendments:

1. Notification: Where changes are material, we will notify you by email to your registered address and/or by displaying a prominent notice on the platform at least seven (7) days before the changes take effect.
2. Effective Date: The revised Privacy Policy takes effect on the date stated in the update notice. Continued use of the platform after that date constitutes acceptance of the revised terms.
3. Archived Versions: Previous versions of this Privacy Policy are available upon request by contacting our support team. The "Last Updated" date at the top of this page always reflects the most recent revision.
4. Rejection: If you do not accept the revised Privacy Policy, you must cease using the platform and request account closure. Any verified real-money balance will be returned to your verified payment method following standard withdrawal procedures.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the tkpwin Data Protection team through the following channel:

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to a competent supervisory authority or seek resolution through an appropriate dispute resolution mechanism in your jurisdiction.