Privacy Policy

1. Introduction and Scope

tt798 ("we", "our", "us", or "the Platform") operates the online betting and gaming platform accessible at tt798.cam. We understand that your personal data is valuable and sensitive, and we take our responsibility as a data custodian seriously. This Privacy Policy describes in clear, plain English how we handle all personal information provided to us by users ("you", "the User", "the Player") based in Indonesia and other jurisdictions served by tt798.

This policy applies to all personal data collected through:

• The tt798 website at tt798.cam and any associated subdomains or mobile-optimized versions.
• The account registration and verification (KYC) process.
• Deposits, withdrawals, and payment transactions processed through the Platform.
• Customer support interactions via live chat, email, or other communication channels.
• Marketing communications and promotional activities, if you have opted in to receive them.
• Technical data automatically collected when you visit or interact with our Platform.

This policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, which together form the complete contractual and operational framework governing your use of tt798.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable individual — that is, anyone who can be identified directly or indirectly by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, organization, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means tt798, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of tt798 and under its instructions (e.g., payment processors, cloud hosting providers).
• "Sensitive Data" means a subset of Personal Data requiring heightened protection, including national identification numbers (KTP), financial account details, and data revealing racial or ethnic origin, political opinions, religious beliefs, health status, or biometric data.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your wishes by which you signify agreement to the processing of your Personal Data for a stated purpose.
• "Cookies" means small text files placed on your device by a website that store session information, preferences, and behavioral data to enhance your user experience and support analytics.

3. Data We Collect

tt798 collects different categories of data depending on how you interact with our Platform. We apply the principle of data minimization — we collect only what is necessary for the stated purpose and do not retain data beyond its useful lifespan.

3.1 Data You Provide Directly

When you register, verify your account, transact, or contact support, you voluntarily provide us with:

• Identity Data: Full legal name, date of birth, gender, nationality, and a copy of your government-issued ID (KTP, passport, or SIM) submitted for Know Your Customer (KYC) verification.
• Contact Data: Email address, mobile phone number, and residential address (including city, province, and postal code within Indonesia).
• Financial Data: Bank account details (account holder name, bank name, account number), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, or LinkAja account numbers), and transaction records including deposit amounts, withdrawal requests, bet history, and balance movements.
• Verification Documents: Scanned or photographed copies of identity documents, proof of address documents, and selfie photographs submitted during the KYC verification process.
• Communication Data: Records of live chat transcripts, email correspondence, or any other written communication you exchange with our customer support team.
• Preferences and Settings: Responsible gaming settings such as deposit limits, session time restrictions, and self-exclusion preferences you configure within your account.

3.2 Data Collected Automatically

When you visit or use the Platform, we automatically collect technical and behavioral data including:

• Device Data: Device type, operating system and version, browser type and version, screen resolution, device language settings, and unique device identifiers (device fingerprint).
• Usage Data: Pages visited, features used, games played, bet types selected, session duration, click patterns, scroll behavior, and navigation paths through the Platform.
• Network Data: IP address, internet service provider (ISP), approximate geolocation derived from IP address, and connection type (WiFi, mobile data).
• Cookie and Tracking Data: Session cookies, persistent cookies, and similar tracking technologies that store your login status, preferences, and behavioral patterns. See Section 7 (Cookies & Tracking) for full details.
• Log Data: Server logs recording access timestamps, requested URLs, HTTP response codes, referral sources, and error events for security monitoring and technical debugging.

3.3 Data Received from Third Parties

In certain circumstances, tt798 may receive Personal Data about you from trusted third-party sources, including:

• Payment Providers: Transaction status, confirmation codes, and account verification data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Results from third-party identity verification and document authentication providers used to process your KYC submission.
• Fraud Prevention Services: Risk scores, fraud alerts, and blacklist data from anti-fraud providers and financial crime databases used to protect the integrity of the Platform.
• Game Providers: Gameplay data, bet settlement information, and jackpot records from licensed game content providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others.

4. How We Use Your Data

tt798 uses your Personal Data for specific, legitimate purposes directly related to operating our Platform and fulfilling our obligations to you. The following table summarizes the primary purposes and the types of data involved:

Purpose	Data Types Used
Account creation and management	Identity Data, Contact Data, Preferences
Identity verification (KYC/AML compliance)	Identity Data, Verification Documents, Financial Data
Processing deposits and withdrawals	Financial Data, Identity Data, Contact Data
Delivering gaming and betting services	Usage Data, Financial Data, Identity Data
Fraud detection and prevention	Network Data, Device Data, Financial Data, Usage Data
Responsible gaming compliance	Usage Data, Financial Data, Preferences, Communication Data
Customer support provision	Identity Data, Contact Data, Communication Data, Financial Data
Marketing and personalization (with consent)	Contact Data, Usage Data, Preferences, Cookie Data
Platform security and technical maintenance	Network Data, Device Data, Log Data
Legal and regulatory compliance	All categories as required by applicable law

We do not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Any data shared with third parties is strictly for the purposes listed above and governed by data processing agreements that impose equivalent privacy protections.

5. Legal Basis for Processing

tt798 processes your Personal Data only when we have a valid legal basis to do so. The legal grounds we rely on are:

• Contractual Necessity: Processing that is necessary to perform our contract with you (i.e., our Terms & Conditions). This includes account registration, processing payments, delivering gaming services, and responding to support requests.
• Legal Obligation: Processing required to comply with legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC/identity verification requirements, tax reporting, and lawful requests from authorized government bodies.
• Legitimate Interests: Processing for purposes that serve tt798's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, technical improvements, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent. This primarily covers direct marketing communications (email newsletters, promotional notifications) and non-essential cookie usage. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

tt798 may share your Personal Data with the following categories of recipients, always on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Service Providers and Data Processors

We engage trusted third-party service providers to process data on our behalf under strict contractual terms that prohibit them from using your data for any purpose other than delivering services to us. These include:

• Payment Processing Partners: Indonesian banks and e-wallet platforms (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) that process your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and document verification services used to authenticate your identity documents.
• Cloud Infrastructure Providers: Hosting and data storage providers that maintain the servers and databases on which the Platform operates. These providers are contractually required to implement security measures equivalent to our own standards.
• Customer Communication Platforms: Live chat software, email delivery services, and push notification platforms used to communicate with you.
• Analytics and Fraud Prevention Services: Platforms that help us understand platform usage patterns and detect fraudulent activity.
• Game Content Providers: Licensed gaming studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and others) that supply game software and process bet and result data.

6.2 Legal and Regulatory Authorities

tt798 may disclose your Personal Data to law enforcement agencies, regulatory bodies, or other government authorities when:

• Required to do so by applicable law, court order, or legal process.
• Necessary to comply with our anti-money laundering (AML) or counter-terrorism financing (CTF) reporting obligations.
• We reasonably believe disclosure is necessary to prevent imminent harm, protect the rights or safety of individuals, or defend against legal claims.

6.3 Business Transfers

In the event that tt798 is involved in a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified via email and/or a prominent notice on the Platform if such a transfer occurs and if it results in a material change to this Privacy Policy. The acquiring entity will be required to honor the terms of this Privacy Policy or provide you with a revised policy prior to the effective date of the transfer.

7. Cookies and Tracking Technologies

tt798 uses cookies and similar tracking technologies to enhance your experience on our Platform, maintain your session state, analyze usage patterns, and support our security and fraud prevention operations.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: These remember your preferences such as language settings, display preferences, and responsible gaming configurations so you don't need to reconfigure them on each visit.
• Analytics Cookies: These help us understand how visitors interact with our Platform by collecting aggregated, anonymized data on page views, session duration, navigation paths, and feature usage. This data helps us improve the Platform experience.
• Security and Fraud Prevention Cookies: These support our fraud detection systems by helping us recognize suspicious login patterns, unusual IP addresses, and device anomalies that may indicate account compromise or fraudulent activity.

7.2 Managing Your Cookie Preferences

You can control cookie usage through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or functional cookies will not prevent you from using core services but may reduce the quality of your experience.

For detailed browser-specific instructions on managing cookies, please refer to your browser's help documentation. Common options include cookie controls in Settings > Privacy & Security on Chrome, Firefox, Safari, and Edge.

8. Data Security

tt798 implements a layered, defense-in-depth security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS) 1.2 or higher, enforced via 256-bit SSL certificates. Look for the padlock icon in your browser's address bar when on tt798.cam.
• Encryption at Rest: Sensitive data including identity documents, payment information, and verification records are stored using AES-256 encryption on our servers and cloud infrastructure.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Our internal staff can only access data relevant to their specific role, and all access is logged and audited. No staff member can access your account password in plain text.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation services.
• Vulnerability Management: We conduct regular security audits, penetration tests, and vulnerability scans to identify and remediate weaknesses in our systems before they can be exploited.
• Incident Response: We maintain a documented security incident response plan. In the unlikely event of a data breach that affects your rights and freedoms, we will notify affected users and relevant authorities promptly and in accordance with applicable legal requirements.

While we implement industry-leading security measures, no method of electronic transmission or storage is 100% secure. We strongly encourage you to use a strong, unique password for your tt798 account and to enable any two-factor authentication options available in your account settings. You are also responsible for maintaining the confidentiality of your login credentials.

9. Data Retention

tt798 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our retention practices are as follows:

• Account and Identity Data: Retained for the duration of your account's active status plus a minimum of five (5) years after account closure. This retention period is required to comply with anti-money laundering regulations and gaming licensing requirements.
• Financial and Transaction Data: Retained for a minimum of five (5) years following the transaction date to meet financial record-keeping requirements under applicable Indonesian and international regulations.
• KYC Verification Documents: Retained for the duration of your account relationship plus five (5) years post-closure or as required by our licensing jurisdiction's specific KYC retention mandates, whichever is longer.
• Customer Support Communications: Retained for three (3) years after the last support interaction to allow for quality assurance reviews, dispute resolution, and regulatory inquiries.
• Usage and Analytics Data: Aggregated and anonymized after thirteen (13) months. Individual-level behavioral data used for responsible gaming monitoring is retained for up to two (2) years from the date of collection.
• Marketing Consent Records: Retained indefinitely as evidence of your consent or its withdrawal. If you opt out of marketing communications, we retain a suppression record to ensure you are not contacted again.

Following the applicable retention period, your Personal Data will be securely deleted or irreversibly anonymized. If you request account closure, we will confirm your request, process the closure within a reasonable timeframe, and retain only the data required by law thereafter.

10. Your Privacy Rights

As a user of tt798, you have meaningful rights over your Personal Data. We are committed to respecting and facilitating the exercise of these rights. Subject to applicable law and certain legal exceptions, your rights include:

• Right of Access: You have the right to request a copy of all Personal Data we hold about you, including information on how it is processed and who it has been shared with. We will respond to verified access requests within 30 days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most account details directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data in certain circumstances, for example if we no longer need it for the purpose it was collected or if you withdraw consent. Note that we may be legally required to retain certain data (e.g., transaction records) even after an erasure request.
• Right to Restrict Processing: You may request that we temporarily pause processing of your data in certain circumstances, such as while a dispute over data accuracy is being resolved.
• Right to Data Portability: You have the right to receive a copy of Personal Data you have provided to us in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible.
• Right to Object: You may object to processing of your Personal Data where we rely on legitimate interests as the legal basis. You may also object at any time to processing for direct marketing purposes, in which case we will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent from marketing communications, use the unsubscribe link in any marketing email or contact our support team.

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request." We will verify your identity before processing any request and will respond within 30 calendar days. If we are unable to fulfill your request due to a legal exception, we will explain the reason clearly.

11. Children's Privacy

tt798 is strictly an adults-only platform. Our services are not directed at, intended for, or available to individuals under the age of 21. We do not knowingly collect Personal Data from anyone under 21 years of age.

As part of our age verification process, we require all users to confirm that they are 21 years of age or older during registration, and we conduct identity document verification to confirm this where legally required or where our responsible gaming monitoring flags age-related concerns.

If we become aware that Personal Data has been collected from a person under 21 without verifiable parental consent, we will immediately close the associated account, delete all Personal Data collected from that individual, and return any funds deposited to the payment source from which they originated. If you believe that a minor may have accessed our platform and provided Personal Data, please contact us immediately at [email protected].

12. International Data Transfers

tt798 operates with a global technical infrastructure, which means your Personal Data may be stored and processed on servers located outside of Indonesia. Countries where our cloud infrastructure and service providers are based may have different data protection laws than Indonesia.

Where Personal Data is transferred internationally, tt798 ensures adequate protections are in place through one or more of the following mechanisms:

• Binding contractual clauses (Standard Contractual Clauses or equivalent) between tt798 and the receiving entity that impose equivalent data protection obligations.
• Transfers only to countries or entities that have been assessed as providing adequate levels of data protection by recognized international standards.
• Other legally recognized transfer mechanisms applicable under the laws of our licensing jurisdiction.

Our primary data centers are located within the Asia-Pacific region to minimize latency for Indonesian users and to reduce cross-border data transfer requirements. For information about specific international transfers or to obtain a copy of the safeguards we have put in place, please contact us using the details in Section 14.

13. Changes to This Privacy Policy

tt798 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. All updates will be posted to this page with a revised "Last Updated" date.

For material changes — those that significantly affect your rights or how we use your data — we will provide at least 30 days' advance notice via email to the address registered to your account and/or through a prominent notification on the Platform. Minor clarifications or non-material edits may be made without advance notice.

Your continued use of tt798's services after the effective date of any updated Privacy Policy constitutes your acknowledgment and acceptance of the revised terms. If you do not agree with any changes, you should stop using the Platform and contact us to close your account before the revised policy takes effect.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise any of your privacy rights, please contact our customer support and data protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the Platform — accessible from the home page and all platform pages.
• Response Time: We aim to acknowledge all privacy-related inquiries within 48 hours and provide a substantive response within 30 calendar days. For complex requests, we may extend this period by up to two additional months where necessary, and we will notify you of any extension within the initial 30-day period.