Privacy Policy — tkp18

In this Privacy Policy, the following terms have the meanings set out below:

• "tkp18", "we", "us", "our" — the tkp18 platform, operated at https://tkp18.bet, and the legal entity responsible for processing your personal data.
• "Member", "you", "your" — any individual who visits the tkp18 website or holds a registered account on the Platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, date of birth, identification number, contact details, financial account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Platform" — the tkp18 website at https://tkp18.bet, including all pages, subdomains, and services accessible through it.
• "KYC" — Know Your Customer verification; the identity and document verification process required by tkp18 prior to processing withdrawals and in other circumstances described in these policies.
• "IDR" — Indonesian Rupiah, the currency used for all financial transactions on the Platform.
• "Cookie" — a small text file placed on your device by the Platform for the purposes described in Clause 8.

This Privacy Policy applies to all Personal Data collected by tkp18 through the Platform, through interactions with our customer support team, and through any other direct communication channel between you and tkp18. It applies to all persons who access the Platform, whether or not they hold a registered account.

tkp18 acts as the data controller in respect of all Personal Data collected through the Platform. This means tkp18 determines the purposes and means of processing your data and bears responsibility for ensuring that processing is carried out lawfully and in accordance with this policy.

This policy does not apply to third-party websites or services that may be referenced on the Platform. tkp18 has no control over the privacy practices of third parties and encourages you to review their own privacy notices independently.

tkp18 collects the following categories of Personal Data from members and visitors to the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the 21+ age requirement).
• Indonesian residential address.
• Email address and mobile phone number registered in Indonesia.
• Username and hashed account password.

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents: National Identity Card (KTP), Passport, or Driver's Licence (SIM).
• Proof of address documents, such as utility bills or bank statements dated within the last three months.
• Photographs or screenshots of Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits or withdrawals.
• Source-of-funds documentation where requested in connection with high-value transactions.

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references (in IDR).
• Bet history, game participation records, wager amounts, and settlement outcomes.
• Bonus and promotional credit history.
• Account balance and transaction ledger.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Pages visited on the Platform, session duration, click patterns, and referral source.
• Cookie identifiers and similar tracking technologies (see Clause 8).

3.5 Communications Data

• Records of live chat conversations, email correspondence, and support ticket submissions between you and the tkp18 support team.
• Any feedback, complaints, or dispute submissions you make to tkp18.

Data Category	Examples	Mandatory?
Registration & Identity	Name, DOB, address, email, phone	Yes — required to open an account
KYC Documents	KTP, Passport, bank proof	Yes — required before withdrawal
Financial & Transaction	Deposit history, bet records, IDR balance	Yes — generated automatically
Technical & Usage	IP address, device info, session logs	Yes — collected automatically
Communications	Live chat logs, email records	When you contact support

tkp18 collects Personal Data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, place a bet, contact customer support, or respond to a survey or promotional offer.
• Automatically through technology — when you visit or interact with the Platform, our servers automatically record technical and usage data including your IP address, device information, browser type, and session activity (see Clause 8 for cookie details).
• From payment service providers — when you initiate a deposit or withdrawal through an Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant provider may share transaction confirmation data with tkp18 to facilitate processing.
• From identity verification partners — tkp18 may use third-party KYC service providers to assist with document verification. These providers process your identity documents under strict data-processing agreements with tkp18 and are not permitted to use your data for any independent purpose.
• From fraud prevention and security services — tkp18 uses risk-scoring and device-fingerprinting services to detect potentially fraudulent account activity. These services may supply signals derived from technical data associated with your device or network.

tkp18 uses the Personal Data we collect exclusively for the purposes listed below. We do not repurpose data for uses inconsistent with the original collection purpose without first seeking your explicit consent.

• Account operation: Creating and maintaining your tkp18 account, authenticating your identity at login, and managing your IDR balance and transaction history.
• Payment processing: Processing deposits and withdrawals in IDR through approved Indonesian banks and e-wallets, and reconciling transaction records.
• Identity verification (KYC): Verifying that you meet the 21+ age requirement and that your identity matches the payment methods registered to your account, in accordance with our Terms & Conditions.
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, and enforcing self-exclusion or deposit-limit requests that you have submitted.
• Fraud prevention and security: Detecting and investigating suspicious account activity, money laundering, bonus abuse, collusion, and other prohibited conduct described in our Terms & Conditions.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining support records for quality assurance and training purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and content of the tkp18 Platform.
• Legal and regulatory compliance: Retaining transaction and identity records as required by applicable law, and cooperating with lawful requests from government authorities.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to members who have consented to receive such communications. You may opt out at any time.

tkp18 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing that is necessary to open your account, process transactions, and deliver the betting and gaming services you have signed up for. Without this processing, tkp18 cannot provide its Services to you.
• Legal obligation: Processing required to comply with applicable laws, including identity verification requirements, financial record-keeping obligations, and cooperation with lawful regulatory or law-enforcement requests.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where tkp18's legitimate business interests do not override your privacy rights.
• Consent: Processing for optional marketing communications and non-essential cookies, where you have given clear, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing or your account standing.

tkp18 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

7.1 Service Providers

tkp18 engages carefully selected third-party service providers to assist with specific operational functions, including payment processing, KYC verification, fraud detection, cloud infrastructure, and customer support software. Each provider is bound by a data-processing agreement that prohibits them from using your data for any purpose other than the contracted service.

7.2 Game Studio Partners

Some game sessions on the Platform are delivered by third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft). These studios may receive a session token and anonymised player identifier to facilitate game delivery. They do not receive your name, contact details, or financial information.

7.3 Payment Processors

When you make a deposit or withdrawal through an Indonesian bank (BCA, BRI, BNI, Mandiri) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), tkp18 shares the minimum transaction data necessary with the relevant payment provider to complete the transfer.

7.4 Legal & Regulatory Disclosure

tkp18 may disclose Personal Data to government authorities, law enforcement bodies, or courts if required to do so by applicable law, a valid legal process, or a binding regulatory order. Where permitted by law, tkp18 will notify you of such a disclosure request before complying.

7.5 Business Transfers

In the event that tkp18 undergoes a merger, acquisition, restructuring, or sale of substantially all of its assets, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

The tkp18 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to secure your session, and to improve your experience. Below is a description of each category of cookie used:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, remember your account preferences, prevent cross-site request forgery	No — essential for Platform function
Performance & Analytics	Measure page load times, track navigation paths, identify errors — data is aggregated and anonymised	Yes — via cookie preference centre
Functional	Remember language preferences, currency display settings, and notification settings	Yes — may affect site functionality
Security & Fraud Detection	Device fingerprinting and risk-scoring to detect account takeover attempts and suspicious activity	No — required for account security

tkp18 does not use third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary or security cookies may prevent the Platform from functioning correctly and may impair your ability to log in or complete transactions.

tkp18 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any mandatory retention periods imposed by applicable law. The following retention schedule applies:

• Account and registration data: Retained for the duration of your active account, and for a period of five (5) years following account closure, to support legal, regulatory, and dispute-resolution requirements.
• KYC and identity documents: Retained for five (5) years from the date of verification, or longer if required by applicable law.
• Financial and transaction records: Retained for five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Customer support communications: Retained for two (2) years from the date of the final communication in each support thread, for quality assurance and dispute-resolution purposes.
• Technical and usage logs: Retained for twelve (12) months, after which they are automatically deleted or anonymised.
• Marketing preferences and consent records: Retained for the duration of your account, and for one (1) year following any withdrawal of consent.

When retention periods expire, tkp18 securely deletes or irreversibly anonymises the relevant data. Data that has been anonymised is no longer considered Personal Data and may be retained indefinitely for statistical purposes.

tkp18 applies a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following controls:

• Encryption in transit: All data transmitted between your browser and the tkp18 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Sensitive financial data is encrypted end-to-end.
• Encryption at rest: Sensitive Personal Data stored on tkp18 servers — including identity documents and financial records — is encrypted using industry-standard symmetric encryption.
• Access controls: Access to systems containing Personal Data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Penetration testing: tkp18's Platform and infrastructure undergo regular independent security assessments and penetration tests to identify and remediate vulnerabilities.
• Incident response: tkp18 maintains a documented incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, tkp18 will notify affected members promptly and take all reasonable steps to contain and mitigate the breach.
• Staff training: All tkp18 staff with access to Personal Data receive regular data-protection and security awareness training.

As a tkp18 member whose Personal Data we process, you hold the following rights. To exercise any of these rights, please contact tkp18 customer support using the details in Clause 15.

The tkp18 Platform is strictly intended for adults aged 21 and above. tkp18 does not knowingly collect Personal Data from individuals under the age of 21. Registration on the Platform requires confirmation that the applicant meets the minimum age requirement, and this is verified during the KYC process through government-issued identity documents.

If tkp18 becomes aware that it has inadvertently collected Personal Data from an individual under the age of 21, the relevant account will be immediately suspended, all balances will be forfeited in accordance with our Terms & Conditions, and the data will be securely deleted without undue delay.

If you have reason to believe that a person under 21 has registered an account on the tkp18 Platform using false information, please notify us immediately at [email protected] (plain text only — not a clickable link).

The tkp18 Platform may contain references to third-party services, including payment providers and game studios, whose own privacy practices are separate from and independent of this Privacy Policy. tkp18 does not control the content or privacy practices of any third-party website or service, and this Privacy Policy does not apply to them.

tkp18 recommends that you review the privacy notice of any third-party service you engage with in connection with your use of the Platform. tkp18 accepts no responsibility or liability for the privacy practices of third parties.

tkp18 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where a change is material — for example, a new category of data being collected or a new sharing arrangement being introduced — tkp18 will provide at least seven (7) days' advance notice by posting the updated policy on the Platform and, where reasonably practicable, by sending a notification to the email address registered to your account.

The date of the most recent update is displayed at the top of this page. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Clause 11, or want to raise a data-related concern or complaint, please contact the tkp18 data protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Platform. Indonesian-speaking agents are available on all shifts and can assist with privacy enquiries.
• Email: [email protected] — please include "Privacy Request" in the subject line of your message. This is plain text only and is not a clickable link.
• Response Time: tkp18 aims to acknowledge all privacy requests within two business days and to resolve them within thirty (30) calendar days, subject to the complexity of the request and any verification requirements.

To protect the security of your account, tkp18 may require you to verify your identity before processing any access, rectification, or erasure request. Requests submitted by a third party on your behalf must include written authorisation from you.