At tpto12, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains exactly what personal data we collect from members across Indonesia, how that data is used, who it may be shared with, and the rights you hold over your information. We encourage you to read this document in full before creating or accessing your tpto12 account.
Six core principles that guide every data decision we make at tpto12. Your trust is the foundation of everything we build.
All data transmitted between your device and tpto12 servers is protected by TLS/SSL encryption. Sensitive fields such as passwords and payment details are encrypted at rest using industry-standard algorithms.
tpto12 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data shared with partners is strictly limited to what is necessary to deliver our service to you.
Marketing communications are entirely opt-in. You can withdraw consent for promotional emails, SMS alerts, and personalised offers at any time via your account settings or by contacting our support team.
We collect only the personal data that is strictly necessary to provide our services, meet our legal obligations, and protect the integrity of the tpto12 platform. No superfluous data collection takes place.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable anti-money-laundering and licensing obligations. Accounts closed for more than 5 years are subject to scheduled data purging.
tpto12 operates under an international gaming licence and adheres to the data protection standards required by that licence, including obligations equivalent to those found in leading international privacy frameworks.
The following defined terms are used throughout this Privacy Policy. Where a term is defined in the tpto12 Terms & Conditions, that definition applies here unless a different meaning is expressly stated below.
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, date of birth, email address, phone number, IP address, device identifiers, financial account details, and betting or gaming history. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction. |
| "Controller" | tpto12, the entity that determines the purposes and means of Processing your Personal Data. |
| "Processor" | A third party that processes Personal Data on behalf of tpto12 under a contractual data-processing agreement (e.g., a payment gateway or KYC verification provider). |
| "Member" | An individual who has registered a tpto12 account and whose Personal Data is therefore subject to this Privacy Policy. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a Member's agreement to the Processing of their Personal Data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and age verification process tpto12 conducts before processing a Member's first withdrawal request. |
| "Cookie" | A small text file stored on a Member's browser or device by the tpto12 platform to enable functionality, remember preferences, and support analytics. |
tpto12 collects Personal Data through several distinct channels. The categories below describe what we collect, and for each category we indicate the primary context in which that data is gathered.
When you create a tpto12 account, we collect: your full legal name, date of birth, gender, residential address (including city — e.g., Jakarta, Surabaya, Bandung, Bali), email address, and mobile phone number. This data is mandatory; without it, we cannot create your account or comply with our licensing obligations.
Before processing your first withdrawal, we collect copies of government-issued photo identification (national ID card, passport, or driver's licence) and proof of residential address. These documents are processed by our licensed KYC verification partner and stored securely in accordance with anti-money-laundering regulations.
To facilitate deposits and withdrawals, we collect bank account details or e-wallet identifiers associated with the payment methods you use — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. We do not store full payment card numbers. All financial data is transmitted via encrypted channels to our payment processor partners.
We record all deposits, withdrawals, bets placed, games played (including slot gacor sessions, togel (Indonesia's traditional numbers lottery) draw entries, live casino rounds, and sportsbook wagers), bet amounts, outcomes, and account Balance movements. This data is essential for calculating payouts, resolving disputes, and fulfilling responsible gaming monitoring obligations.
We automatically collect the following technical data when you access the tpto12 platform: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
When you contact our support team — by email at or via live chat — we retain transcripts of those conversations for quality assurance, dispute resolution, and regulatory compliance purposes.
Where you have opted in to receive promotional communications, we record your marketing preferences, including preferred communication channels (email, SMS), language preferences, and promotional interests. You may update or withdraw these preferences at any time.
tpto12 uses the Personal Data we collect for the following specific purposes. We do not use your data for any purpose incompatible with those listed here without first obtaining your explicit consent or where otherwise permitted by applicable law.
| Purpose | Description | Data Categories Used |
|---|---|---|
| Account Management | Creating, maintaining, and securing your tpto12 account, including password resets and two-factor authentication. | Registration, Technical |
| KYC & Age Verification | Verifying that you are at least 21 years of age and that your identity matches the account details provided, as required by our licensing obligations. | Registration, KYC |
| Payment Processing | Processing deposits and withdrawals via your nominated payment method, reconciling transactions, and investigating payment disputes. | Financial, Transactional |
| Fraud & AML Prevention | Detecting and preventing money laundering, match fixing, bonus abuse, account takeover, and other fraudulent activities on the platform. | All categories |
| Responsible Gaming | Monitoring betting patterns to identify signs of problem gambling, enforcing self-exclusions and deposit limits, and proactively reaching out to at-risk Members. | Transactional, Gaming |
| Customer Support | Responding to your enquiries, resolving complaints, and improving the quality of our support services. | Registration, Communications |
| Platform Improvement | Analysing aggregated and anonymised usage data to improve platform features, game selection, and user experience. | Technical, Gaming |
| Marketing | Sending personalised promotional offers, bonus notifications, and seasonal campaign emails (Idul Fitri, Ramadhan, 17 August, etc.) where you have opted in. | Registration, Marketing Preferences |
| Legal Compliance | Meeting our obligations under anti-money-laundering regulations, licensing conditions, and any lawful requests from competent authorities. | All categories |
tpto12 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose:
Note for Indonesian Members: While Indonesia's Personal Data Protection Law (UU PDP) was enacted in 2022 and its implementing regulations continue to be developed, tpto12 applies data protection standards consistent with internationally recognised best practices. Our commitment to your privacy goes beyond the minimum legal floor.
tpto12 does not sell or rent your Personal Data to any third party. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data-processing agreements:
To execute deposits and withdrawals, we share the minimum necessary financial data with licensed payment processors and the underlying banking or e-wallet providers — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors are contractually prohibited from using your data for their own marketing or analytics purposes.
We share identity documents and biographical data with our licensed KYC verification partner and fraud-screening tools to verify your age (minimum 21 years) and identity, and to screen against sanctions lists and politically exposed persons (PEP) databases as required by our AML programme.
When you play games from third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — a session token and anonymised player ID are shared with the relevant provider to enable game functionality. Game providers do not receive your name, email address, payment details, or other directly identifying information.
tpto12 uses third-party cloud hosting, content delivery, and cybersecurity providers to operate the platform. These providers act as data Processors under strict contractual terms and may process technical data (IP address, device identifiers, session logs) solely for the purpose of delivering services to tpto12.
We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, by a valid court order, or to protect the rights, property, or safety of tpto12, its Members, or the public. We will notify you of such disclosures where legally permitted to do so.
Cross-Border Transfers: Some of our third-party service providers are located outside Indonesia. Where Personal Data is transferred internationally, tpto12 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to protect your data to a standard equivalent to that described in this Policy.
tpto12 uses cookies and similar tracking technologies to provide, secure, and improve the platform. The following table summarises the types of cookies we use:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Essential for platform operation — session authentication, security tokens, load balancing, and remembering your login state. Cannot be disabled without breaking core functionality. | Session / up to 24 hours |
| Functional | Remembering your language and display preferences, your chosen game lobby view, and other personalisation settings that improve your experience. | Up to 12 months |
| Analytics | Collecting anonymised data on how Members navigate the platform — which pages are visited most, where users drop off, and which features are most used — to guide platform improvement. | Up to 24 months |
| Marketing | Where you have opted in, tracking interactions with promotional emails and on-platform banners to measure campaign effectiveness and deliver relevant offers. | Up to 12 months |
You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the tpto12 platform. Disabling analytics or marketing cookies will not affect your access to core services. Note that clearing cookies will log you out of your active session.
tpto12 retains your Personal Data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:
At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (which cannot be used to identify you) may be retained indefinitely for statistical and platform improvement purposes.
As a tpto12 Member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at . We will respond to all valid requests within 30 days.
Identity Verification for Rights Requests: To protect your data, tpto12 will verify your identity before actioning any rights request. You may be asked to provide a copy of your ID and confirm account details. We will not action requests from third parties without the Member's explicit written authorisation.
tpto12 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
Security Incident Notification: In the event of a data breach that poses a risk to your rights and freedoms, tpto12 will notify affected Members as soon as reasonably practicable and no later than 72 hours after becoming aware of the breach. Notification will be sent to the email address registered on your account.
tpto12 is strictly an adults-only (21+) platform. We do not knowingly collect Personal Data from individuals under 21 years of age. Our registration process requires date-of-birth disclosure, and our KYC verification process confirms age before any withdrawal is processed.
If tpto12 discovers — through KYC review, user report, or any other means — that an account has been created by or on behalf of a person under 21, we will:
If you believe that a person under 21 has registered a tpto12 account, please notify us immediately at . We take this matter extremely seriously and will act swiftly to investigate and resolve any such report.
The tpto12 platform may reference third-party organisations — such as payment providers (BCA, BRI, BNI, Mandiri, OVO, GoPay), game studios (Pragmatic Play, Evolution Gaming), or sports organisations (BRI Liga 1, EPL, AFF Cup) — in the course of describing our services. These references are informational only; tpto12 does not embed links to external websites within the member-facing platform for the purpose of data collection or advertising.
To the extent that any third-party service embedded within the platform (such as a game client or payment widget) operates under its own privacy policy, that policy governs the third party's own data collection practices. tpto12 is not responsible for the privacy practices of third-party processors beyond the data-processing agreements we have in place with them.
tpto12 reserves the right to update or revise this Privacy Policy at any time. When we make material changes — for example, changes to the categories of data we collect, new third-party sharing arrangements, or changes to your rights — we will notify you by:
The "Effective Date" and "Last Reviewed" dates at the top of this document indicate the version currently in force. Your continued use of the tpto12 platform after the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not agree with any changes, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.
The most current version of this Privacy Policy is always available at https://tpto12.net/privacy-policy.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy concern, please contact the tpto12 data protection team through the following channels:
Responsible Gaming & Data: If you wish to activate a self-exclusion, deposit limit, or cooling-off period — and these tools involve the processing of your Personal Data — our support team can assist. Visit our Responsible Gaming page for full details on available tools, or contact us directly at .
Now that you understand how tpto12 protects your data, explore everything our platform has to offer — from live sportsbook action on BRI Liga 1 and the EPL, to premium slot gacor titles, live casino tables, and togel draws. Deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay. Adults only — 21+.