teo88 Privacy Policy

Definitions

In this Privacy Policy, the following terms carry the meanings defined below:

Data Controller

2.1 Identity. teo88 acts as the data controller for all Personal Data collected through the Platform. As data controller, teo88 determines the purposes and means of processing your Personal Data and is responsible for ensuring that such processing complies with applicable data protection standards.

2.2 Contact. All data protection inquiries, access requests, correction requests, and erasure requests should be directed to teo88's support team at [email protected]. We aim to acknowledge all data-related requests within 3 business days and resolve them within 30 calendar days of receipt.

2.3 Scope. This Privacy Policy applies to all Personal Data processed in connection with your use of the teo88 Platform, regardless of whether you are a registered Member or a visitor who has not yet created an account. It covers data collected via the website, customer support interactions, and payment transactions.

Data We Collect

3.1 Registration Data. When you create a teo88 Account, we collect the information you provide in the registration form, including:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (used to verify that you are 21 years of age or older);
• Email address;
• Mobile phone number;
• Residential address (city/province — used to confirm Indonesian residency and deliver localised services);
• Preferred username and a hashed version of your chosen password (we never store plain-text passwords).

3.2 Identity Verification (KYC) Data. As part of our Know Your Customer (KYC) obligations, we may collect copies of:

• Indonesian National Identity Card (KTP) or passport;
• Proof of residential address (e.g., utility bill or bank statement issued within the past three months);
• Proof of ownership of the payment method used (e.g., a screenshot of your GoPay, OVO, or DANA account displaying your registered name);
• Selfie photograph for biometric comparison against your ID document, where required by our KYC partner.

3.3 Financial Data. When you make deposits or request withdrawals, we collect transaction metadata including:

• Payment method type (e.g., BCA, BRI, BNI, Mandiri, GoPay, DANA, OVO, ShopeePay, LinkAja);
• Account name and masked account number associated with your payment method;
• Transaction amount in Indonesian Rupiah (IDR / Rp);
• Transaction timestamp and reference number.

We do not store full bank account numbers or e-wallet PINs. All payment data is handled via encrypted channels managed by our payment processing partners.

3.4 Transactional & Gameplay Data. We record data generated by your use of teo88 Services, including:

• Bet placement history, game session durations, game titles played, and wagering amounts;
• Bonus and promotion claims and wagering progress;
• Responsible gaming tool usage (e.g., deposit limit settings, cooling-off period activation);
• Withdrawal request history and approval/rejection status.

3.5 Technical & Device Data. When you access the Platform, our servers automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it;
• Browser type, version, and language settings;
• Device type (desktop / mobile), operating system, and screen resolution;
• Referrer URL (the page from which you navigated to teo88);
• Session timestamps and pages visited within the Platform.

3.6 Communications Data. When you contact teo88 customer support — whether by email or live chat — we retain the content of those communications, including your messages and any attachments you provide, for a period consistent with Section 9 (Data Retention).

How Data Is Collected

4.1 Directly from You. The majority of your Personal Data is collected directly when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, claim a promotion, or contact our support team.

4.2 Automatically. Technical and device data (Section 3.5) is collected automatically via server logs and cookies when you visit the Platform. You do not need to take any action for this data to be collected — it is a standard feature of all web-based platforms.

4.3 From Third Parties. In limited circumstances, teo88 may receive Personal Data about you from third parties, including:

• KYC verification partners who return identity-check results (pass/fail/pending) alongside any risk flags identified during document review;
• Payment processors who confirm transaction status and provide fraud-risk scores;
• Anti-fraud and anti-money-laundering (AML) screening services that cross-reference your details against sanctions and watchlists.

Purposes of Processing

teo88 processes your Personal Data for the following specific purposes:

teo88 does not use your Personal Data for direct marketing without your explicit consent, and we do not engage in automated profiling that produces legal or significant effects on you without human review.

Legal Basis for Processing

6.1 Contractual Necessity. The majority of teo88's data processing is necessary to perform the contract between teo88 and you (the Member Agreement constituted by your acceptance of teo88's Terms & Conditions). Without processing your registration data, KYC data, and financial data, teo88 cannot provide the Services you have requested.

6.2 Legal Obligation. Certain processing activities — particularly AML screening, sanctions checking, and financial record-keeping — are required by the laws and regulations applicable to teo88's international operating license. teo88 has no discretion to opt out of these processing activities.

6.3 Legitimate Interests. teo88 processes technical and device data, fraud-prevention data, and aggregated analytics data on the basis of its legitimate interest in maintaining a secure, fair, and well-functioning Platform. These interests are balanced against your privacy rights; where any such processing poses a disproportionate risk to your rights and freedoms, teo88 will not proceed with it.

6.4 Consent. Where teo88 relies on consent as a legal basis (e.g., for optional marketing communications or non-essential analytics cookies), consent is sought separately and explicitly. You may withdraw consent at any time by contacting [email protected] or adjusting your cookie preferences. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

Data Sharing

7.1 General Principle. teo88 will never sell, rent, or trade your Personal Data to any third party for commercial purposes. Data sharing is limited strictly to the categories and recipients described in this Section.

7.2 Payment Processors. To facilitate deposits and withdrawals, teo88 shares necessary transaction data with Indonesian payment partners including GoPay (Gojek), OVO, DANA, ShopeePay, LinkAja, and the domestic banking networks of BCA, BRI, BNI, Mandiri, and CIMB Niaga. These partners receive only the data strictly required to process your transaction.

7.3 KYC & Identity Verification Partners. teo88 uses specialist third-party KYC providers to verify the identity documents you submit. These providers process your ID data under strict data processing agreements and are prohibited from using your data for any purpose other than identity verification on behalf of teo88.

7.4 Game Content Providers. Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft operate the game engines that power teo88's casino and slots sections. These studios may receive a session token and a pseudonymous player identifier to authenticate your game session. They do not receive your full name, contact details, or financial data.

7.5 Regulatory and Law Enforcement Authorities. teo88 may disclose Personal Data to competent authorities when required to do so by law, court order, or a binding regulatory instruction. teo88 will, where legally permissible, notify you of such a disclosure request before complying with it.

7.6 Corporate Transactions. In the event of a merger, acquisition, or sale of teo88's business or assets, your Personal Data may be transferred to the acquiring entity. teo88 will provide notice of any such transfer and ensure that the recipient maintains the same standard of data protection described in this Privacy Policy.

International Data Transfers

8.1 Cross-Border Processing. As an internationally operated platform serving Indonesian members, teo88 and its third-party partners may process your Personal Data in jurisdictions outside Indonesia. This includes our primary hosting infrastructure and certain KYC and fraud-prevention services.

8.2 Transfer Safeguards. Where Personal Data is transferred internationally, teo88 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating internationally recognised standard contractual clauses;
• Transfers only to jurisdictions that maintain an adequate level of data protection, as assessed against international standards;
• Contractual obligations on recipients to apply security measures equivalent to those described in Section 10 of this Policy.

8.3 Indonesian Data Sovereignty. teo88 acknowledges the data sovereignty principles under Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and ensures that all processing of Indonesian Members' data is conducted in a manner consistent with the rights and protections that law affords. Where conflict exists between this Policy and UU PDP requirements, the more protective standard applies.

Data Retention

9.1 Active Accounts. teo88 retains your Personal Data for as long as your account remains active and for as long as necessary to provide the Services you have requested. If your account has been inactive for a continuous period of 24 months with no logins, deposits, or wagering activity, teo88 will notify you before applying an inactive-account data minimisation process.

9.2 Closed Accounts. Upon account closure — whether initiated by you or by teo88 — your Personal Data is retained for a minimum period of 5 years from the date of closure. This retention period is driven by teo88's AML and financial record-keeping obligations under its operating license, which require that transaction records be available for regulatory inspection.

9.3 KYC Documents. Identity documents (KTP, passport copies, proof-of-address documents) are retained for the duration of your account plus 5 years after closure. After this period, document images are securely destroyed and replaced with a record confirming that verification was completed.

9.4 Communications Data. Customer support communications are retained for 3 years from the date of the most recent interaction in a given support thread. Communications relating to an active dispute or complaint are retained until the matter is fully resolved.

9.5 Technical Logs. Server logs and IP access records are retained for a maximum of 12 months, after which they are automatically purged unless they form part of an active security investigation.

9.6 Post-Retention Disposal. When the applicable retention period expires, Personal Data is either securely deleted from teo88's systems or anonymised such that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Security Measures

10.1 Encryption in Transit. All data transmitted between your device and teo88's servers is protected by 256-bit SSL/TLS encryption. This applies to all Platform interactions including login, registration, deposit and withdrawal requests, and customer support communications. teo88 enforces HTTPS across all Platform pages and rejects unencrypted HTTP connections.

10.2 Encryption at Rest. Sensitive Personal Data stored on teo88's infrastructure — including identity documents, financial records, and hashed passwords — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect and are rotated on a regular schedule.

10.3 Access Controls. Access to Personal Data within teo88's internal systems is restricted on a strict need-to-know basis. Role-based access controls limit which employees and contractors can view specific categories of data. All internal access to Personal Data is logged and subject to periodic audit.

10.4 Password Security. teo88 stores passwords as one-way cryptographic hashes (bcrypt). teo88 staff cannot retrieve your plain-text password. If you forget your password, you must use the account recovery process, which authenticates you via your registered email address.

10.5 Independent Security Audits. teo88 engages independent third-party security firms to conduct penetration testing and infrastructure security reviews on a periodic basis. Any vulnerabilities identified are remediated on a priority basis according to their severity.

10.6 Incident Response. In the event of a data security incident that affects your Personal Data, teo88 will notify affected Members within 72 hours of becoming aware of the breach, describing the nature of the data affected, the likely consequences, and the measures teo88 has taken or is taking to address it.

Cookies & Tracking Technologies

11.1 What Are Cookies. Cookies are small text files placed on your device when you visit the teo88 Platform. They enable the Platform to remember your preferences, maintain your login session, and collect analytics data about how you navigate the site.

11.2 Types of Cookies Used. teo88 uses the following categories of cookies:

11.3 Managing Cookies. You can manage or disable non-essential cookies through your browser settings. Note that disabling functional or analytics cookies may affect your experience on the Platform. Strictly necessary cookies cannot be disabled via browser settings, as they are essential to the secure operation of the Platform. Disabling fraud-prevention cookies may result in additional identity verification steps being required during login.

11.4 No Third-Party Advertising Cookies. teo88 does not allow third-party advertising networks to place tracking cookies on the Platform. teo88 does not engage in cross-site behavioural advertising or sell cookie-derived data to advertising intermediaries.

Your Data Rights

As a teo88 member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] with a clear description of your request. We will respond within 30 calendar days.

Minors

13.1 Age Restriction. teo88 strictly prohibits access to its Platform by persons under 21 years of age. teo88 does not knowingly collect Personal Data from minors. The registration process includes a date-of-birth verification step, and KYC procedures are applied to confirm the age of all Members.

13.2 Discovery of Underage Data. If teo88 discovers or is notified that Personal Data has been collected from a person under the age of 21, teo88 will:

• Immediately suspend the relevant account;
• Void any winnings associated with the account;
• Return any deposits made to the payment source after identity confirmation;
• Permanently delete all Personal Data associated with the account within 30 days of discovery.

13.3 Parental Responsibility. If you are a parent or guardian and believe that a minor in your care has accessed the teo88 Platform using your credentials or their own, please contact [email protected] immediately. teo88 recommends the use of parental control software on shared devices and advises that account credentials are kept strictly private.

Changes to This Privacy Policy

14.1 Right to Update. teo88 reserves the right to update this Privacy Policy at any time to reflect changes in its data processing practices, applicable law, or regulatory requirements. The "Last updated" date at the top of this Policy will be revised whenever a material change is made.

14.2 Notification of Material Changes. Where a change is material — for example, a new category of data being collected, a new purpose being introduced, or a new category of third-party recipient being added — teo88 will provide advance notice to active Members via the Platform's notification system or by email to your registered address, at least 14 days before the change takes effect.

14.3 Continued Use. Your continued use of the teo88 Platform after a revised Privacy Policy takes effect constitutes your acknowledgement of the updated Policy. If you do not accept the revised terms, you must stop using the Platform and request account closure in accordance with Clause 8.1 of the Terms & Conditions.

14.4 Version Archive. teo88 maintains an archive of previous Privacy Policy versions. If you wish to review a prior version, contact us at [email protected] and specify the approximate date of the version you require.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or teo88's handling of your Personal Data, please contact our dedicated data protection support team:

When submitting a data rights request, please include your registered email address, a description of your request, and any relevant reference numbers. This will help us locate your account and process your request as efficiently as possible.