Privacy Policy

1. Scope and Application

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by t6ff ("we", "us", "our") in connection with the operation of the online sports betting and casino platform accessible at t6ff.cam (the "Platform") and any associated mobile experiences.

This Policy is directed primarily at players who are residents of Indonesia, which is t6ff's principal target market. By registering an account or continuing to use the t6ff Platform, you acknowledge that you have read, understood, and consent to the data practices described herein.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming guidelines, both of which are available on this website.

2. Definitions

• "Personal Data" — any information that identifies or can reasonably identify a natural person, directly or indirectly (e.g., name, KTP number, email address, IP address).
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Controller" — t6ff, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" — a third party that processes Personal Data on behalf of t6ff under contractual obligation (e.g., payment gateway providers, cloud infrastructure vendors).
• "KYC Data" — identity verification documents, including Indonesian KTP (Kartu Tanda Penduduk), address proof, and selfie verification images submitted as part of the Know Your Customer process.
• "Device Data" — technical information automatically transmitted by your browser or application, including IP address, device type, operating system, and browser version.

3. Data We Collect

t6ff collects Personal Data across several categories depending on how you interact with our Platform.

3.1 Account Registration Data

• Full legal name (as it appears on your KTP)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number (Indonesian format, e.g., +62)
• Residential address in Indonesia
• Chosen username and encrypted account password

3.2 Identity Verification (KYC) Data

• Scanned copy or photograph of your Indonesian KTP
• Proof of address document (utility bill, bank statement from BCA, BRI, BNI, Mandiri, or equivalent — dated within 3 months)
• Selfie photograph holding your KTP
• Any supplementary documents we reasonably request to satisfy anti-money laundering (AML) obligations

3.3 Financial Data

• Bank account details (account holder name, bank name, account number) for BCA, BRI, BNI, Mandiri, CIMB Niaga, or other supported Indonesian banks
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Deposit and withdrawal transaction history
• Betting activity records (game type, wager amounts, outcomes)

3.4 Device and Technical Data

• IP address (used for geolocation, fraud prevention, and regulatory compliance)
• Device identifiers (device type, model, operating system version)
• Browser type and version
• Session timestamps, page views, and click-stream data
• Referring URL and exit URL

3.5 Communications Data

• Records of live chat sessions, WhatsApp communications, and email correspondence with our customer support team
• Feedback, complaints, and dispute submissions
• Your responses to surveys or promotional participation (where applicable)

4. How We Collect Data

We collect Personal Data through the following channels:

• Direct Provision: Information you submit during account registration, KYC verification, deposit/withdrawal requests, and contact with support.
• Automated Collection: Device Data and usage data captured automatically when you access the Platform via our servers, cookies, and analytics tools.
• Payment Processors: Transaction confirmation data shared with us by our payment gateway partners when you deposit or withdraw via local Indonesian banks or e-wallets.
• Third-Party Verification Services: Identity and address verification data from licensed KYC and AML service providers.
• Publicly Available Sources: Where legally permitted, supplementary identity verification data from public records.

5. How We Use Your Data

t6ff processes your Personal Data only for specified, explicit, and legitimate purposes. The table below summarizes our primary uses.

Purpose	Data Categories Used
Account creation and management	Registration Data, Device Data
Identity and age verification (KYC)	KYC Data, Registration Data
Processing deposits and withdrawals	Financial Data, KYC Data
Anti-money laundering (AML) compliance	Financial Data, KYC Data, Device Data
Fraud detection and prevention	Device Data, Financial Data, Betting Records
Customer support and dispute resolution	Registration Data, Communications Data
Responsible gaming monitoring	Betting Records, Financial Data, Session Data
Platform optimization and analytics	Device Data, Aggregated Usage Data
Bonus and promotional administration	Registration Data, Financial Data, Betting Records
Regulatory reporting (where required)	All relevant categories as required by law

6. Legal Basis for Processing

t6ff processes your Personal Data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and t6ff (e.g., operating your account, processing bets and payments).
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations and gaming license conditions (e.g., KYC verification, transaction record-keeping).
• Legitimate Interests: Processing carried out for t6ff's legitimate business interests where those interests are not overridden by your rights (e.g., fraud prevention, platform security, responsible gaming monitoring).
• Consent: Processing for optional purposes (e.g., marketing communications) where you have given explicit, freely-given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

7. Disclosure and Sharing

t6ff does not sell, rent, or trade your Personal Data to third parties for marketing purposes. We may share your data only in the following circumstances:

7.1 Service Providers and Processors

We engage trusted third-party service providers who process data strictly on our behalf and under binding contractual obligations. These include:

• Payment Processors: Indonesian bank transfer intermediaries and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals
• KYC and AML Providers: Licensed identity verification services to authenticate your KTP and confirm your eligibility
• Cloud Infrastructure: Hosting and data storage providers operating under strict data processing agreements
• Game Providers: Technology partners such as Pragmatic Play, Evolution Gaming, and Microgaming who deliver game content and maintain fair play certification
• Customer Support Platforms: Live chat and communication tools used solely to deliver support services to you

All third-party processors are contractually prohibited from using your data for any purpose beyond the specific service they provide to t6ff.

7.2 Legal and Regulatory Disclosure

We may disclose your Personal Data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally obligated to do so, or where such disclosure is necessary to:

• Comply with a binding legal order, subpoena, or government request
• Enforce our Terms & Conditions and protect the rights and safety of t6ff, its employees, or other players
• Detect, investigate, or prevent fraud, money laundering, or other criminal activity
• Protect the vital interests of any individual where urgent safety concerns arise

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of t6ff's business assets, your Personal Data may be transferred to the relevant successor entity. We will provide reasonable advance notice of any such transfer and the successor entity will be bound by a privacy policy no less protective than this one.

8. Data Retention

t6ff retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the lifetime of your account plus 5 years following permanent account closure
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of your last transaction, in compliance with AML regulations
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction
• Customer Support Communications: Retained for 3 years from the date of the interaction
• Device and Technical Logs: Retained for up to 12 months, then aggregated or anonymized
• Marketing Consent Records: Retained for the duration of your consent plus 2 years as evidence of compliance

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymized. You may request earlier deletion of certain data categories by contacting us, subject to our overriding legal obligations to retain specific records.

9. Data Security Measures

t6ff employs a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, disclosure, or destruction. Our measures include:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL)
• Encryption at Rest: Sensitive Personal Data stored in our databases is encrypted using AES-256 encryption
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access sensitive player data, on a need-to-know basis
• Two-Factor Authentication: Available for player accounts and mandatory for all internal administrative access
• Regular Penetration Testing: We commission independent security audits and penetration tests at least annually to identify and remediate vulnerabilities
• Intrusion Detection: Automated monitoring systems flag suspicious access patterns and potential breach attempts in real time
• Staff Training: All t6ff employees handling personal data receive mandatory data protection and security training

10. Cookies and Tracking Technologies

t6ff uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. Cookies are small text files stored on your device that allow our servers to recognize your browser across sessions.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for basic platform functionality — logging you in, maintaining your session, and processing transactions. These cannot be disabled without impairing your use of the Platform.
• Performance and Analytics Cookies: Aggregate, anonymized data about how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This helps us improve platform stability and user experience.
• Functional Cookies: Remember your preferences such as language settings, last-visited game categories, and display options to personalize your experience on return visits.

10.2 Cookies We Do Not Use

t6ff does not deploy third-party advertising cookies, social media tracking pixels, or any cross-site behavioral tracking technologies. We do not participate in programmatic advertising networks that would allow external parties to track your activity across websites.

10.3 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. Disabling performance cookies does not affect Platform functionality but limits our ability to diagnose issues and improve the service.

11. Your Rights

As a player registered with t6ff, you have the following rights regarding your Personal Data. To exercise any of these rights, contact our support team at [email protected] or via live chat.

• Right of Access: Request a copy of all Personal Data we hold about you, along with details of how it is processed and to whom it has been disclosed.
• Right to Rectification: Request correction of inaccurate or incomplete data. For name or date-of-birth corrections, additional KYC documentation may be required.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations under AML and gaming regulations.
• Right to Restriction: Request that we temporarily suspend processing of your data while a rectification or objection request is pending.
• Right to Data Portability: Receive a copy of the data you provided to us in a structured, machine-readable format (e.g., CSV or JSON), where technically feasible.
• Right to Object: Object to processing carried out on the basis of legitimate interests, including responsible gaming profiling. We will cease processing unless we can demonstrate compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will respond to all verifiable rights requests within 30 days. In complex cases requiring additional time, we will notify you within 30 days and provide an estimated resolution date.

12. Minors (Under 21)

t6ff's services are strictly intended for individuals who are at least 21 years of age. We do not knowingly collect Personal Data from persons under 21. Age verification is conducted during the registration process and again during KYC review. If we discover that we have inadvertently collected data from a person under 21, we will immediately close the associated account, void any transactions, and permanently delete all associated data.

If you are a parent or guardian and believe that a minor has registered an account with t6ff, please contact us immediately at [email protected] so that we can investigate and take corrective action without delay.

13. Changes to This Policy

t6ff reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page
• Display a prominent notice on the Platform for a minimum of 14 days following the change
• Send registered players an email notification summarizing the key changes where the modifications materially affect your rights or our data practices

Your continued use of the t6ff Platform following the effective date of any revised Policy constitutes your acceptance of those changes. We encourage you to review this page periodically to stay informed of how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or t6ff's data practices, please reach out to our dedicated privacy team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through your account dashboard — our Indonesian-speaking agents are on hand around the clock (WIB timezone)
• WhatsApp Support: Contact details are provided upon account registration

We treat all privacy-related inquiries with the highest priority. Our goal is to resolve your concern promptly and transparently, and we aim to acknowledge all privacy-related correspondence within 24 hours.