Privacy Policy — t0188

Introduction

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal data by t0188 ("we", "us", "our") in connection with the operation of the online gambling platform accessible at https://t0188.vip (the "Platform"). It applies to all registered Players, prospective Players who browse the Platform without registering, and any other individual whose personal data is processed by t0188 in connection with the Platform's operation.

By accessing the Platform or creating a t0188 account, you acknowledge that you have read, understood, and agreed to the terms of this Policy. If you do not agree, you must discontinue your use of the Platform immediately. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which form part of your overall agreement with t0188.

t0188 is committed to handling your personal data with integrity, transparency, and strict security controls. We process only the minimum data necessary to deliver our services, satisfy our legal obligations, and keep the Platform safe for all users. We do not treat your data as a commercial asset; it is a trust you place in us, and we take that responsibility seriously.

Data Controller

For the purposes of applicable data protection law, t0188 acts as the data controller in respect of all personal data collected directly through the Platform. This means t0188 determines the purposes for which your personal data is processed and the means by which that processing is carried out.

Where t0188 engages third-party service providers — such as payment processors, game studios, identity verification vendors, or customer support platforms — those providers act as data processors operating under contractual obligations that require them to protect your data to a standard at least equivalent to t0188's own policies. t0188 remains responsible for ensuring that any third-party processor complies with these obligations.

All data-related enquiries, requests, and complaints should be directed to t0188 using the contact details set out in Section 15 of this Policy.

Data We Collect

t0188 collects personal data in the categories described below. We collect only what is necessary for the purposes identified in Section 5.

3.1 Registration & Account Data

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) obligations and to verify your age, we may request:

• A copy of a government-issued national identity card (KTP) or passport;
• Proof of residential address (recent bank statement or utility bill);
• Proof of ownership of the payment method used for deposits;
• A selfie photograph alongside your identity document where required.

KYC documents are handled by our identity verification partner under strict data processing agreements and are deleted from our systems once verification is complete and regulatory retention periods have elapsed.

3.3 Financial & Transaction Data

We collect data about your deposits and withdrawals processed through Indonesian payment channels — including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja — specifically:

• Transaction amounts and timestamps (in IDR);
• Payment method type and partial account identifiers (e.g., last four digits of a bank account number);
• Deposit and withdrawal status logs for dispute resolution;
• Betting history, game session records, and wagering outcomes.

Full bank account numbers and e-wallet credentials are never stored on t0188's servers; they are processed directly by the relevant payment service provider.

3.4 Technical & Device Data

• IP address and approximate geolocation (city / province level);
• Browser type, version, and operating system;
• Device model and screen resolution;
• Session duration, page navigation paths, and interaction events;
• Referral source (e.g., the URL from which you arrived at t0188).

3.5 Communications Data

When you contact t0188 via live chat, email, or any other support channel, we retain a record of that correspondence, including the content of messages, timestamps, and any attachments. This data is used to resolve your query, improve service quality, and maintain an audit trail for dispute resolution.

How We Collect Data

4.1 Directly From You

The majority of your personal data is collected directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional survey.

4.2 Automatically

When you browse or use the Platform, our servers and analytics tools automatically collect technical and device data as described in Section 3.4. This includes data collected via cookies and similar tracking technologies — see Section 9 for full details.

4.3 From Third Parties

In limited circumstances, we may receive personal data about you from trusted third parties, including:

• Identity verification providers — who return a verification status (pass / fail / refer) against the documents you submit;
• Payment processors — who confirm transaction completion and provide partial payment account identifiers;
• Fraud prevention services — who may share risk signals associated with an IP address, device fingerprint, or payment method;
• Responsible gaming databases — which may indicate that an individual has self-excluded from gambling platforms.

Purpose & Legal Basis for Processing

t0188 processes your personal data only where a valid legal basis exists. The table below maps each processing purpose to its legal basis.

Data Sharing

t0188 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Service Providers (Data Processors)

We engage trusted third-party vendors to help us operate the Platform. Each vendor is bound by a data processing agreement requiring them to process your data only on our instructions and to maintain appropriate security standards. Current categories of processor include:

• Payment processing infrastructure providers (supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja transactions);
• Identity verification and KYC service providers;
• Cloud hosting and database infrastructure providers;
• Customer support platform providers (live chat software);
• Email delivery service providers (for transactional and marketing emails);
• Fraud detection and anti-money laundering analytics providers;
• Game content providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft — who receive only the data necessary to authenticate your game session.

6.2 Legal and Regulatory Authorities

t0188 may disclose personal data to law enforcement agencies, financial regulators, courts, or other governmental bodies where required to do so by applicable law, court order, or valid legal process. We will notify you of such a disclosure where we are legally permitted to do so.

6.3 Business Transfers

In the event that t0188 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the successor entity before the transfer takes effect.

6.4 No Third-Party Marketing

Under no circumstances will t0188 share your personal data with any third party for that party's own marketing, advertising, or commercial purposes. Any consent you give for marketing communications relates exclusively to t0188's own promotional content.

International Data Transfers

t0188 operates internationally, and some of our service providers are located outside of Indonesia. As a result, your personal data may be transferred to and processed in countries that have different data protection frameworks from those in Indonesia.

Where such transfers occur, t0188 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities;
• Binding corporate rules where the recipient is part of the same corporate group;
• Adequacy decisions recognising that the destination country provides an equivalent level of data protection;
• Other legally recognised transfer mechanisms consistent with applicable data protection law.

You may request further information about the specific safeguards applicable to any international transfer of your data by contacting us at [email protected].

Data Retention

t0188 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below provides indicative retention periods for key data categories.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised in a manner that renders it impossible to re-identify any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website to store information about your session, preferences, or behaviour. t0188 uses cookies and similar technologies (including local storage, session storage, and device fingerprinting) to deliver and improve the Platform experience.

9.2 Categories of Cookies Used

9.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your t0188 account, as these cookies are essential for session management. Disabling functional cookies will cause the Platform to reset certain preferences on each visit. Disabling analytics cookies will not affect your ability to use the Platform but will reduce our ability to improve the service based on aggregate usage patterns.

Your Data Rights

As a data subject, you hold a number of rights over your personal data. t0188 is committed to facilitating the exercise of these rights promptly and without unnecessary friction. The rights available to you are described below.

To exercise any of the above rights, contact us at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 calendar days. We may ask you to verify your identity before processing your request to protect against unauthorised access to another person's data.

Children's Privacy

t0188 is strictly an adults-only (21+) platform. We do not knowingly collect personal data from any individual under the age of 21. Age verification is performed at registration and prior to any withdrawal. If we discover that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be reviewed, and verified net deposits will be assessed for return to the source payment method.

If you are a parent or guardian and believe that a person under 21 in your care has registered on t0188, please contact us immediately at [email protected]. We take reports of underage access seriously and will act promptly to investigate and close any such account.

t0188 actively promotes responsible gaming and supports the use of parental control tools and internet filtering software to prevent minors from accessing gambling platforms. For guidance, please visit our Responsible Gaming page.

Security Measures

t0188 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational measures include:

• 256-Bit SSL/TLS Encryption: All data in transit is encrypted using TLS 1.2 or higher;
• Encryption at Rest: Sensitive data stored in our databases is encrypted using AES-256;
• Password Hashing: Passwords are stored only as salted cryptographic hashes — we can never see your plain-text password;
• Access Controls: Database and system access is restricted on a strict need-to-know basis, with role-based access controls and audit logging;
• Two-Factor Authentication (2FA): Available and encouraged for all Player accounts;
• Penetration Testing: Regular third-party security assessments are conducted to identify and remediate vulnerabilities;
• Incident Response: A documented data breach response procedure ensures rapid containment and notification in the event of a confirmed security incident.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, t0188 will notify affected individuals without undue delay and, where required by law, notify the relevant supervisory authority within 72 hours of becoming aware of the breach.

Third-Party Links

The t0188 Platform does not contain links to external third-party websites as a matter of design policy. However, game content delivered by our studio partners (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft) is loaded within the Platform environment. The privacy practices of those studios in relation to game session data are governed by their own privacy policies, and t0188 is not responsible for their independent data processing activities beyond the contractual obligations we impose on them as data processors.

If you encounter a link to an external site through any t0188 communication (e.g., a support email with a reference link), please be aware that the linked site operates under its own privacy policy and t0188 accepts no liability for the privacy practices of any third-party website.

Policy Amendments

t0188 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page;
• Send a notification to your registered email address at least seven (7) days before the changes take effect;
• Display a prominent notice on the Platform for at least 14 days following the update.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept the revised terms, you must close your account and withdraw your balance before the effective date of the amendment. Historical versions of this Policy are available on request by contacting [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way t0188 handles your personal data, please contact our Data Privacy team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.