tisu4d Privacy Policy

This Privacy Policy ("Policy") describes how tisu4d ("Company", "Platform", "we", "us", "our"), the operator of the online gaming platform accessible at https://tisu4d.cam, collects, processes, stores, and protects personal data belonging to visitors, registered members, and prospective players ("you", "your", "Data Subject").

tisu4d is committed to handling your personal data responsibly, transparently, and in accordance with applicable international data protection principles. By using the tisu4d platform — whether you are browsing as a guest, registering an account, or placing a bet — you acknowledge that you have read this Policy and understand how your personal data is used.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which form part of your overall agreement with tisu4d. In the event of any conflict between this Policy and those documents on a data-protection matter, this Policy prevails.

The following terms carry the meanings set out below wherever they appear in this Policy:

tisu4d collects Personal Data through several channels: directly from you during registration, account use, and support interactions; automatically through your use of the platform; and from third-party verification and payment providers. The categories of data collected are as follows:

tisu4d does not intentionally collect Sensitive Data beyond what is required for identity verification and responsible-gaming purposes. You are not required to disclose health information to use the platform; however, if you voluntarily provide such information in the context of a self-exclusion or problem-gambling support request, it will be handled with the highest level of care and restricted to the compliance team only.

tisu4d processes your Personal Data only for defined, legitimate purposes. The primary purposes for which your data is used are listed below, together with the legal basis that applies to each (see Section 4 for further detail on legal bases):

• Account creation and authentication: Processing your registration data, verifying your identity, managing login credentials, and maintaining your account record throughout your membership.
• Delivery of gaming services: Enabling you to place bets and wagers on sports events (including BRI Liga 1, EPL, Champions League, and other competitions), access live casino games, participate in togel (Indonesia's traditional numbers lottery) draws, and play slot titles from our licenced studio partners.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method (local bank transfer or e-wallet), reconciling transactions, and issuing receipts. All amounts are processed in IDR (Rp).
• KYC and fraud prevention: Verifying that you meet eligibility requirements (including the 21+ age requirement), detecting and preventing fraudulent activity, multi-accounting, money laundering, and other Prohibited Activities defined in our Terms & Conditions.
• Responsible gaming compliance: Monitoring usage patterns to identify signs of problem gambling, administering self-exclusion orders, deposit limits, loss limits, and session timers, and communicating with players who show indicators of gambling harm.
• Customer support: Responding to your queries, resolving disputes, managing complaints, and providing account assistance via live chat and email.
• Legal and regulatory compliance: Meeting anti-money-laundering (AML) obligations, responding to lawful requests from competent authorities, retaining records as required by applicable law, and enforcing our contractual rights under the Terms & Conditions.
• Platform improvement and security: Analysing aggregated usage data to improve game selection, interface design, and system performance; conducting penetration testing and security auditing; detecting and mitigating technical threats.
• Marketing communications (opt-in only): Sending you promotional offers, bonus notifications, event reminders (such as Idul Fitri or Indonesian Independence Day promotions), and platform news — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time.

tisu4d relies on the following legal bases to process your Personal Data, consistent with applicable data-protection principles:

• Contractual necessity: The majority of data processing is necessary for the performance of the contract between you and tisu4d — i.e., providing the betting and gaming services you have signed up for, processing payments in IDR, and managing your account.
• Legal obligation: Certain processing is required to comply with applicable law, including AML obligations, age-verification requirements, record-keeping duties, and responding to lawful authority requests.
• Legitimate interests: tisu4d processes Technical Data and Usage Data to operate and improve the platform, detect fraud and security threats, and maintain the integrity of our services. We conduct a balancing test for each legitimate-interest processing activity to ensure that your privacy interests are not overridden.
• Consent: Where processing is not strictly necessary for the contract or required by law, tisu4d will ask for your explicit consent — for example, for marketing communications, personalised offers, and the placement of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital interests: In exceptional circumstances — such as where a player appears to be in immediate danger of serious gambling-related harm — tisu4d may process Sensitive Data to protect the vital interests of the individual concerned.

tisu4d does not sell, rent, or exchange your Personal Data with third parties for advertising or commercial profiling purposes. Data is shared only where necessary to deliver, protect, or legally support the services you use. The categories of third parties that may receive your data are:

• Payment processors and banks: To execute deposit and withdrawal transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors receive only the minimum data necessary to complete the transaction.
• KYC and identity verification providers: To validate your identity documents and confirm you meet eligibility criteria, including the 21+ age requirement. Verification providers are contractually bound to process your data solely for this purpose and to delete it upon completion.
• Licensed game studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session tokens and game-round data necessary to render game content and settle bet outcomes. These providers do not receive your name, contact details, or financial information.
• Customer support platform providers: Live-chat and ticketing system providers that host our support interactions. These providers process chat logs and email correspondence on our behalf under strict data-processing agreements.
• Legal and regulatory authorities: tisu4d will disclose Personal Data to competent authorities — including law enforcement, tax authorities, and financial intelligence units — where required to do so by applicable law or a valid legal order. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations and who receive only the data strictly necessary for the matter at hand.
• Business successors: In the event of a merger, acquisition, or sale of substantially all of tisu4d's assets, your Personal Data may be transferred to the acquiring entity, which will be required to honour the terms of this Policy or provide you with a materially equivalent level of protection.

All third-party Data Processors engaged by tisu4d are subject to written data-processing agreements that impose data-protection obligations at least equivalent to those in this Policy. tisu4d remains responsible for the actions of its Data Processors with respect to your Personal Data.

tisu4d uses cookies and similar tracking technologies (such as local storage and session storage) to operate the platform, maintain your session state, and understand how members use our services. Cookies are small text files stored on your device when you visit the tisu4d website.

You may manage your cookie preferences through your browser settings at any time. Blocking all cookies will prevent you from logging in to your tisu4d account, as session cookies are required for authenticated access. Clearing cookies will log you out of all active sessions.

tisu4d does not use third-party advertising network cookies or cross-site tracking technologies that share your behaviour with unrelated websites or advertising platforms.

tisu4d retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data (identity, contact, financial records, betting history): Retained for the full duration of your account membership plus a post-closure period of 5 years, in compliance with AML record-keeping requirements.
• KYC documents (identity and address documents, selfie images): Retained for 5 years from the date of verification or from account closure, whichever is later. Securely destroyed by certified deletion upon expiry.
• Transaction records (deposits, withdrawals, bet settlement records in IDR): Retained for 5 years from the date of each transaction.
• Support communications (live-chat transcripts, email correspondence): Retained for 3 years from the date of the interaction, or longer if the matter relates to an ongoing dispute or legal proceeding.
• Marketing opt-in records: Retained for the duration of your opt-in, plus 3 years after withdrawal of consent, as evidence of the consent obtained.
• Self-exclusion and responsible-gaming records: Retained for the full term of the exclusion plus 5 years thereafter, to prevent re-registration in breach of exclusion obligations.
• Technical and usage logs: Retained for 12 months in raw form; aggregated and anonymised thereafter for analytical purposes with no individual attribution.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised. Where data is anonymised — rendered incapable of identifying you — it may be retained indefinitely for aggregate statistical and research purposes.

As a Data Subject, you hold the following rights in respect of your Personal Data held by tisu4d. These rights may be exercised at any time by contacting our support team:

All data-rights requests are acknowledged within 72 hours and fulfilled within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days with written notification to you. tisu4d does not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

tisu4d applies a layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our key technical and organisational measures include:

• Transport encryption: All data in transit between your device and tisu4d servers is protected by TLS 1.2 or higher (effectively 256-bit SSL). HSTS headers are enforced to prevent protocol downgrade attacks.
• Data-at-rest encryption: Stored Personal Data and KYC documents are encrypted using AES-256 on access-controlled infrastructure. Encryption keys are rotated on a scheduled basis.
• Access controls: Access to systems containing Personal Data is restricted to authorised personnel on a strictly need-to-know basis, with multi-factor authentication required for all administrative access.
• Penetration testing and vulnerability scanning: tisu4d conducts periodic third-party penetration tests and continuous automated vulnerability scanning to identify and remediate security weaknesses before they can be exploited.
• Incident response: tisu4d maintains a documented data-breach response procedure. In the event of a breach that is likely to result in risk to your rights, we will notify affected members and relevant authorities within the timeframes required by applicable law.
• Staff training: All tisu4d staff who handle Personal Data receive mandatory data-protection training at onboarding and annually thereafter. Access logs are maintained and reviewed regularly.

While tisu4d takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your account has been compromised, notify us immediately via live chat so that we can take protective action.

tisu4d operates as an internationally licensed offshore platform. As a result, your Personal Data may be processed or stored in countries outside Indonesia. Where data is transferred internationally, tisu4d ensures that appropriate safeguards are in place, including:

• Contractual obligations on all overseas Data Processors that are equivalent to the protections in this Policy and consistent with international data-protection standards.
• Transfers to jurisdictions that provide an adequate level of data protection as assessed by tisu4d's compliance team on the basis of published adequacy determinations and regulatory guidance.
• Where transfers are made to jurisdictions without a formal adequacy determination, implementation of standard contractual clauses or equivalent binding commitments that protect your rights as a Data Subject.

Indonesian player data is handled with particular sensitivity given the personal and financial nature of the information involved. tisu4d does not transfer your Indonesian KTP number, bank account credentials, or e-wallet identifiers to any jurisdiction without contractual data-protection safeguards in place.

The tisu4d platform is strictly for adults aged 21 and over. We do not knowingly collect, use, or store Personal Data belonging to individuals under 21 years of age. Age verification is a mandatory step of the KYC process and is conducted before any withdrawal is processed.

If tisu4d becomes aware that Personal Data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — we will immediately suspend the associated account, delete all Personal Data collected from that individual, and if required by law, notify the relevant authorities.

tisu4d may update this Privacy Policy from time to time to reflect changes in our data-processing practices, applicable law, or the services we offer. Material changes — those that significantly affect your rights or the way we use your data — will be communicated to registered members via the email address on file at least 14 days before the amendment takes effect.

The current version of this Policy is always available at https://tisu4d.cam/privacy-policy. The version number and "Last Updated" date at the top of this page indicate the current revision. We encourage you to review this Policy periodically.

Your continued use of the tisu4d platform after an update takes effect constitutes your acknowledgement of the revised Policy. If you disagree with a material change, you have the right to close your account and request deletion of your Personal Data, subject to our legal retention obligations.

For any privacy-related enquiries, data-rights requests, or concerns about how tisu4d handles your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 on the tisu4d platform. Specify that your query relates to a privacy or data-protection matter so it is routed directly to the appropriate team.
• Email: [email protected] — responses to privacy matters are provided within 72 hours as a priority.
• Response language: Our privacy support team includes native Indonesian-speaking staff serving players across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and all other regions of Indonesia. You may communicate in English or Indonesian and receive a response in the same language.