Privacy Policy

1. Introduction

tati99 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website at https://tati99.cam, our mobile applications, and related services (collectively, the "Services").

This Privacy Policy applies to all users of tati99 Services, including visitors who browse without creating an account and registered players who actively use our platform. By accessing or using tati99, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting to the website with an updated "Last Updated" date. Continued use of the Services after any modifications indicates your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

2. Information We Collect

We collect several types of information from and about users of our Services to provide personalized gaming experiences, process transactions, ensure platform security, and comply with legal obligations.

2.1 Information You Provide Directly

When you register an account with tati99, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, and nationality as shown on your government-issued identification document.
• Contact Information: Email address, phone number (including country code), and residential address (street address, city, postal code, province, country).
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers), and payment card details if applicable. Note that we do not store full credit card numbers; card processing is handled by certified third-party payment processors compliant with PCI-DSS standards.
• Identification Documents: Copies of government-issued identification (Indonesian KTP, passport, driver's license), proof of address documents (utility bills, bank statements), and selfie photographs for KYC verification purposes.
• Communication Data: Content of your communications with our customer support team via live chat, email, WhatsApp, Telegram, or phone, including support tickets, feedback, and complaints.

2.2 Information Collected Automatically

When you access and use our Services, certain information is collected automatically through cookies, server logs, and similar technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), mobile network information, and IP address.
• Usage Data: Pages visited, features used, time spent on pages, click patterns, scroll depth, games played, bets placed, search queries, and navigation paths through the website or app.
• Location Data: Approximate geographic location based on IP address. We do not collect precise GPS location data unless you explicitly grant permission for location-based features.
• Transaction History: Complete records of deposits, withdrawals, bets placed, bonuses claimed, wagering activity, and account balance changes.
• Game Play Data: Details of game sessions including game type, stake amounts, outcomes, RTP achieved, and gameplay duration.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment status, and fraud risk assessment data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Verification status and fraud checks from KYC service providers.
• Marketing Partners: Referral source information if you arrived at tati99 through an affiliate link or marketing campaign.
• Social Media Platforms: If you choose to connect your social media accounts (optional feature), we may receive profile information such as name, profile picture, and email address.

3. How We Use Your Data

tati99 uses collected information for the following legitimate business purposes:

3.1 Account and Service Management

• Create, maintain, and authenticate your player account
• Process deposits, withdrawals, and refunds through Indonesian banking channels
• Enable gameplay on our platform including sports betting, casino games, slots, and live dealer games
• Calculate and credit bonuses, cashback, and promotional rewards
• Track wagering requirements and bonus compliance
• Provide customer support and respond to inquiries in Indonesian language
• Send account-related notifications including transaction confirmations, balance updates, and security alerts

3.2 Security and Fraud Prevention

• Verify your identity through KYC procedures to prevent underage gambling and identity theft
• Detect and prevent fraudulent transactions, money laundering, bonus abuse, and collusion
• Monitor for unusual betting patterns and account activity that may indicate problem gambling or exploitation
• Enforce our Terms and Conditions and investigate violations
• Comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Protect the security and integrity of our platform against hacking, denial-of-service attacks, and other cyber threats

3.3 Platform Improvement and Analytics

• Analyze user behavior in aggregate to improve website design, navigation, and user experience
• Identify popular games, betting markets, and features to optimize our game portfolio
• Conduct A/B testing to evaluate new features and promotional campaigns
• Generate anonymized reports on platform performance, game RTP statistics, and user demographics
• Develop new products and services tailored to Indonesian player preferences

3.4 Marketing and Communications

• Send promotional offers, bonus announcements, and tournament invitations via email, SMS, or push notifications (only with your consent)
• Personalize marketing content based on your gaming preferences and activity history
• Notify you of VIP tier upgrades and exclusive rewards
• Conduct player satisfaction surveys and request feedback

Opt-Out Rights: You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in promotional emails, adjusting notification settings in your account dashboard, or contacting customer support. Note that you cannot opt out of essential service communications such as security alerts, transaction confirmations, and account status updates.

3.5 Legal Compliance

• Comply with Indonesian regulations, international gaming licenses, and legal obligations
• Respond to lawful requests from government authorities, regulators, and law enforcement agencies
• Enforce our legal rights and defend against legal claims
• Prevent activities prohibited by law including gambling by minors, money laundering, and fraud

4. Data Sharing and Disclosure

tati99 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our platform, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• KYC Verification Providers: Third-party identity verification services that confirm your identity and age eligibility.
• Game Providers: Software developers who supply casino games, live dealer platforms, and sports betting odds (e.g., Evolution Gaming, Pragmatic Play, NetEnt, Microgaming).
• Cloud Hosting Providers: Secure servers that host our website and store encrypted user data.
• Customer Support Tools: Live chat platforms, email services, and ticketing systems used to deliver customer support.
• Analytics Services: Tools that help us understand user behavior through anonymized data analysis (e.g., Google Analytics configured with IP anonymization).

All service providers are contractually obligated to maintain data confidentiality, use your information only for the specified purpose, and comply with applicable data protection laws.

4.2 Legal Requirements

We may disclose your information when required to do so by law or in response to valid legal processes, including:

• Court orders, subpoenas, or other lawful requests from government authorities
• Investigations by gaming regulators or licensing authorities
• Enforcement of our Terms and Conditions and legal rights
• Protection of the safety, property, or rights of tati99, our users, or the public
• Prevention or investigation of fraud, money laundering, or other illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified via email and/or prominent notice on our website of any such change in ownership or control of your personal information.

4.4 With Your Consent

We may share your information with third parties when you have provided explicit consent to do so, such as when you choose to connect your tati99 account with social media platforms or participate in third-party promotions.

5. Data Security Measures

tati99 implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmission between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data stored in our databases (passwords, financial information, identification documents) is encrypted at rest using AES-256 encryption.
• Access Controls: Strict access controls limit employee access to personal data on a need-to-know basis. All staff members with data access undergo security training and sign confidentiality agreements.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security measures including biometric access controls, 24/7 surveillance, and fire suppression systems.
• Firewalls and Intrusion Detection: Enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor network traffic for malicious activity.
• Regular Security Audits: We conduct regular security audits and penetration testing performed by independent cybersecurity firms to identify and address vulnerabilities.
• Secure Payment Processing: Payment card transactions are processed by PCI-DSS compliant payment gateways. We do not store full credit card numbers on our servers.
• Account Security Features: Players can enable two-factor authentication (2FA) for additional account protection. We also monitor for suspicious login attempts and unusual account activity.

While we employ industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately of any unauthorized access to your account.

6. Data Retention

tati99 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: While your account remains active, we retain all account information, transaction history, and gameplay data to provide ongoing services.
• Closed Accounts: After voluntary account closure, we retain essential data for a minimum of 7 years to comply with financial record-keeping requirements, anti-money laundering regulations, and tax laws. This includes identity verification documents, transaction history, and communication records.
• Marketing Data: If you opt out of marketing communications, we retain your contact information solely for the purpose of honoring your opt-out request.
• Legal Holds: Data subject to legal holds, pending investigations, or active disputes will be retained until the matter is resolved.

After the retention period expires, personal information is securely deleted or anonymized such that it can no longer be associated with an individual user.

7. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To exercise this right, contact our Data Protection Officer via email at [email protected] with "Data Access Request" in the subject line. We will provide your data in a commonly used electronic format within 30 days.

7.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. Most account information can be updated directly in your account settings dashboard. For changes to verified information (name, date of birth, identification documents), contact customer support with supporting documentation.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes collected, or if you withdraw consent. However, we may be required to retain certain information to comply with legal obligations (financial records, KYC documents, transaction history for anti-money laundering compliance).

7.4 Right to Restrict Processing

You may request that we limit the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store the information but not actively use it except with your consent or for legal claims.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and transmit it to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications via the unsubscribe link in emails or through your account settings.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal information (e.g., marketing communications, optional features), you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

Exercising Your Rights: To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and specific request. We may request additional information to verify your identity before processing requests. There is no fee for reasonable requests, but we reserve the right to charge a fee for excessive, repetitive, or manifestly unfounded requests.

8. Cookies and Tracking Technologies

tati99 uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They allow us to recognize your device on subsequent visits and remember your preferences, login status, and browsing behavior.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly. These cookies enable core features such as account login, session management, and secure access to your account. You cannot disable these cookies through our settings as they are critical for site operation.
• Performance Cookies: Collect anonymous information about how visitors use our website, including which pages are visited most often and whether error messages are displayed. This data helps us improve site performance and user experience.
• Functionality Cookies: Remember your choices (language preference, currency, region) to provide a more personalized experience.
• Advertising Cookies: Track your browsing across different websites to deliver relevant advertising. These cookies may be set by third-party advertising networks with our permission.

8.3 Managing Cookies

Most web browsers allow you to control cookies through browser settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is set. However, disabling cookies may affect your ability to use certain features of our website, such as staying logged in or accessing your account.

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

9. International Data Transfers

tati99 operates internationally and may transfer your personal information to servers located outside Indonesia, including jurisdictions that may not offer the same level of data protection as Indonesian law. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by data protection authorities
• Hosting data in jurisdictions with adequate data protection laws
• Encryption of data in transit and at rest
• Contractual obligations requiring service providers to maintain data security

By using our Services, you consent to the transfer of your information to countries outside Indonesia for the purposes described in this Privacy Policy.

10. Children's Privacy

tati99 Services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. If you are under 21, you are prohibited from registering an account or using our Services.

If we become aware that we have inadvertently collected personal information from a person under 21, we will take immediate steps to delete such information from our servers and close the associated account. If you believe we have collected information from a minor, please contact us immediately at [email protected].

Parents and guardians are encouraged to monitor their children's internet usage and use parental control tools to prevent access to age-restricted websites like tati99.

11. Changes to This Privacy Policy

tati99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email to the address on file
• Display a prominent notice on our website homepage for 30 days
• For significant changes affecting your rights, we may require you to review and accept the updated policy before continuing to use the Services

Your continued use of tati99 Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 on our website
• WhatsApp: Available through our customer support portal
• Telegram: Available through our customer support portal

Our customer support team operates 24 hours a day, 7 days a week in both English and Indonesian. We aim to respond to all privacy-related inquiries within 48 hours.