Privacy Policy

1. Definitions

The following terms are used throughout this Privacy Policy:

• "taro89", "we", "us", or "our" refers to the taro89 online gaming platform and its operating entity.
• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, date of birth, email address, phone number, residential address, and financial details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Subject" means the individual to whom Personal Data relates — in this context, you, the user of taro89 services.
• "Third Party" means any person or entity other than you and taro89.
• "Cookies" means small text files stored on your device by a website to remember preferences and session information.
• "KYC" means Know Your Customer — the identity and age verification process required by international gaming regulations.

2. Data Controller Information

taro89 acts as the Data Controller for all Personal Data collected through the taro89 platform. We determine the purposes and means of processing your Personal Data in accordance with applicable international data protection standards.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, you may contact our Data Protection team at:

• Email: [email protected]
• Response Time: Within 30 days of receiving your request

3. Information We Collect

We collect Personal Data from you in the following categories and by the following means:

3.1 Information You Provide Directly

• Registration Information: Full legal name, date of birth, email address, mobile phone number, and residential address when you create a taro89 account.
• Identity Verification Documents: A copy of your Indonesian National Identity Card (KTP), proof-of-address document, and selfie photograph as part of the KYC process.
• Payment Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) necessary to process deposits and withdrawals. We do not store full card numbers or banking passwords.
• Communication Records: Messages sent to our customer support team via live chat, email, WhatsApp, and in-app messaging, including their content and timestamps.
• Preference Settings: Gaming preferences, language selection, notification settings, and responsible gaming limit configurations set within your account.

3.2 Information Collected Automatically

• Device and Technical Data: IP address, device type, operating system and version, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited on the taro89 platform, time and duration of visits, games played, bets placed, bet amounts, wins and losses, session durations, and clickstream data.
• Location Data: General geographic location inferred from your IP address, used for fraud prevention and regulatory compliance.
• Transaction Data: Complete records of all deposits, withdrawals, bonus claims, wagers, wins, and losses associated with your account.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies. See Section 8 for full details of our Cookie Policy.

3.3 Information from Third Parties

• Identity Verification Services: Confirmation of identity document authenticity from third-party KYC service providers.
• Payment Processors: Transaction confirmation and fraud scoring data from payment service providers.
• Fraud Prevention Databases: Checks against industry shared databases for known fraudulent accounts or patterns.

4. How We Use Your Information

taro89 processes your Personal Data only for legitimate, specified purposes. The legal bases and purposes for our processing activities are as follows:

4.1 Performance of Contract

We process your data to provide and maintain the gaming services you have requested, including:

• Creating and managing your player account.
• Processing deposits and withdrawals through your nominated Indonesian bank accounts and e-wallets.
• Verifying your identity and age to comply with licensing requirements (21+ only).
• Settling bets, crediting winnings, and applying bonuses to your account.
• Providing customer support and responding to your inquiries.

4.2 Legal Obligations

We are required by international gaming regulations and anti-money laundering (AML) laws to:

• Verify the identity of all account holders using KYC procedures.
• Retain transaction records for a minimum of seven years.
• Screen users against sanctions lists and politically exposed persons (PEP) databases.
• Report suspicious transactions to relevant authorities as required by applicable law.

4.3 Legitimate Interests

Where processing is not required to fulfill a contract or legal obligation, we rely on our legitimate interests, provided these are not overridden by your rights and interests:

• Fraud detection and prevention, including analysis of betting patterns and device fingerprinting.
• Improving platform security and preventing unauthorized account access.
• Analyzing usage patterns to enhance the gaming experience and platform performance.
• Managing and mitigating problem gambling risks through behavioral analysis.

4.4 Consent-Based Processing

With your explicit consent, we may process your data to:

• Send you personalized promotional emails, SMS notifications, and offers about bonuses, tournaments, and new games.
• Share anonymized, aggregated data with research partners for responsible gaming studies.
• Use non-essential cookies for analytics and performance measurement.

You may withdraw your consent at any time by updating your account notification preferences or contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Sharing and Disclosure of Your Information

taro89 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your information only in the limited circumstances described below:

5.1 Service Providers and Data Processors

We engage trusted third-party service providers who process data on our behalf under strict contractual obligations and only for the purpose of delivering services to taro89:

• Payment processors to handle deposits and withdrawals through Indonesian banks and e-wallets.
• KYC and identity verification providers to validate identity documents and confirm age eligibility.
• Fraud prevention and risk management services to detect and prevent unauthorized account activity.
• Cloud hosting and infrastructure providers for secure platform operation and data storage.
• Customer communication platforms to power our live chat, email, and messaging support channels.
• Analytics providers for anonymized platform usage analysis to improve our services.

5.2 Legal and Regulatory Disclosure

We may disclose your Personal Data to law enforcement agencies, regulatory bodies, or other competent authorities when we are legally required to do so, when we believe disclosure is necessary to protect our rights, or when required to prevent or detect a crime.

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your Personal Data may be transferred to the acquiring entity. We will notify you via email or prominent notice on the platform prior to your data being transferred and becoming subject to a different privacy policy.

5.4 International Data Transfers

Some of our service providers are located outside Indonesia. When we transfer your data internationally, we implement appropriate safeguards, including standard contractual clauses and data processing agreements, to ensure your data receives an adequate level of protection consistent with international data protection standards.

6. Your Rights and Choices

As a data subject, you have the following rights in relation to your Personal Data held by taro89. To exercise any of these rights, please contact us at [email protected].

6.1 Right to Access

You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being used. We will provide this within 30 days of receiving a valid request.

6.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update basic account information directly through your account settings panel. For KYC-related corrections, please contact our support team.

6.3 Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your Personal Data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Please note that this right may be limited where we are required to retain data for legal, regulatory, or fraud prevention purposes. KYC records and transaction history must be retained for the legally mandated period.

6.4 Right to Restrict Processing

You have the right to request that we limit the processing of your Personal Data in certain circumstances — for example, if you contest its accuracy while we verify it, or if processing is unlawful but you prefer restriction to erasure.

6.5 Right to Data Portability

Where technically feasible and legally permissible, you may request that we transfer your Personal Data to you or to another service in a structured, commonly used, machine-readable format.

6.6 Right to Object

You have the right to object to our processing of your Personal Data where we rely on legitimate interests as our legal basis. You may also object at any time to the processing of your data for direct marketing purposes, after which we will cease such marketing immediately.

6.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawing consent for essential services (such as KYC) may result in account restrictions.

7. Data Security

taro89 takes the security of your Personal Data seriously and implements appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the taro89 platform is encrypted using industry-standard TLS encryption, preventing interception during transit.
• Encryption at Rest: Sensitive data fields, including identity document scans and payment information, are encrypted at rest using AES-256 encryption standards.
• Access Controls: Strict role-based access controls ensure that employee access to Personal Data is limited to what is necessary for their specific job function. All access is logged and audited.
• Two-Factor Authentication: User accounts support optional two-factor authentication (2FA) to prevent unauthorized access even if login credentials are compromised.
• Penetration Testing and Security Audits: We conduct regular security assessments, vulnerability scans, and third-party penetration testing to identify and remediate potential security weaknesses.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay.

While we implement rigorous security measures, no system is entirely immune to risk. You can help protect your account by using a strong, unique password, enabling 2FA, and never sharing your login credentials with anyone.

8. Cookie Policy

taro89 uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. Below is a description of the cookie types we use:

8.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They enable core features such as maintaining your login session, remembering your language preference, and ensuring security features operate properly. These cookies cannot be disabled without significantly impairing your ability to use taro89.

8.2 Performance and Analytics Cookies

These cookies collect anonymized information about how visitors use the platform — such as which pages are visited most frequently, how long users spend on each section, and where users encounter errors. This information helps us continuously improve platform performance and user experience.

8.3 Functional Cookies

Functional cookies remember choices you have made, such as your preferred game display settings, notification preferences, and deposit limits you have configured through your responsible gaming tools. These enhance personalization but are not strictly required for basic platform use.

8.4 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to view, delete, and block cookies. However, blocking strictly necessary cookies will prevent you from logging in and using certain platform features. Please consult your browser's help documentation for instructions on managing cookie settings.

9. Children and Minors

taro89 services are strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that we have inadvertently collected Personal Data from a minor, we will immediately delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account or provided Personal Data to taro89, please contact us immediately at [email protected] so we can investigate and take appropriate action promptly.

10. Responsible Gaming and Data Use

As part of our commitment to responsible gaming, taro89 analyzes player activity data to identify patterns associated with problem gambling behaviors. This analysis is conducted in your interests and may result in:

• Automatic notifications and reality checks when certain usage thresholds are reached.
• Proactive outreach from our customer support team if concerning patterns are detected.
• Temporary account restrictions to protect at-risk players.

This processing is conducted in accordance with our licensing obligations and international responsible gaming standards. For more information about our responsible gaming tools and support resources, please visit our Responsible Gaming page.

11. Changes to This Privacy Policy

taro89 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform services. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send you an email notification to your registered address where the changes are significant.
• Display a prominent notice on the platform for a period of at least 14 days after changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of taro89 services after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the revised policy, you must close your account and cease using our services.

12. Contact and Complaints

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by taro89, please contact our Data Protection team:

• Email: [email protected]
• Response time: We aim to respond to all data-related requests within 30 calendar days.
• Support hours: Our team is available 24/7 via live chat for urgent inquiries.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction. We are committed to working with you to resolve any concerns amicably before formal escalation becomes necessary.