Your Privacy Matters: tyo4d employs 256-bit SSL encryption, secure server infrastructure, and strict access controls to protect your personal information. We will never sell your data to third parties for marketing purposes.
1 Introduction
This Privacy Policy describes how tyo4d ("we", "us", "our") collects, uses, stores, and protects the personal data of users ("you", "your") who access our online betting and casino platform at https://tyo4d.cam. By registering an account, accessing our website, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
We are committed to compliance with internationally recognised data protection principles, including the General Data Protection Regulation (GDPR) standards, even though our primary user base consists of players located in Indonesia. This Privacy Policy should be read in conjunction with our Terms & Conditions.
If you do not agree with any aspect of this Privacy Policy, please do not use our services. Questions or concerns regarding this Privacy Policy should be directed to our Data Protection Officer using the contact details provided in Section 14.
2 Data Controller
tyo4d acts as the data controller for all personal information collected through the Platform. This means we determine the purposes for which and the manner in which your personal data is processed. Our registered contact email for data protection matters is: [email protected].
When you interact with third-party payment processors (such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) or game providers (Evolution Gaming, Pragmatic Play, etc.), those entities act as independent data controllers for the information you provide directly to them. We recommend reviewing the privacy policies of these third parties before sharing your information with them.
3 Data We Collect
We collect various categories of personal data to provide, secure, and improve our services. The specific data collected depends on how you interact with the Platform. Below is a comprehensive overview of the types of data we collect:
| Data Category | Examples |
|---|---|
| Identity Information | Full legal name, date of birth, gender, nationality, government-issued ID number (e.g., KTP number for Indonesian residents) |
| Contact Information | Email address, mobile phone number, residential address, postal code, city of residence |
| Account Credentials | Username, password (stored in hashed format), security questions and answers, two-factor authentication tokens |
| Financial Information | Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay account numbers), transaction history, deposit and withdrawal records |
| Verification Documents | Copies of government-issued identification (KTP, passport), proof of address documents, selfie photographs for identity verification (KYC) |
| Usage Data | Login timestamps, IP addresses, device identifiers, browser type and version, operating system, pages visited, time spent on pages, referral sources, clickstream data |
| Gaming Activity | Bets placed, games played, wagering amounts, winnings and losses, bonus usage, participation in promotions, favorite games and betting patterns |
| Communication Records | Live chat transcripts, email correspondence with customer support, feedback and complaint submissions, survey responses |
| Marketing Preferences | Consent status for promotional emails, SMS notifications, push notifications; preferences regarding bonus offers and promotional communications |
| Responsible Gaming Data | Self-imposed deposit limits, loss limits, session time limits, self-exclusion requests, cooling-off period selections, responsible gaming tool usage history |
3.1 Automatically Collected Data
When you access our Platform, we automatically collect certain technical information through cookies, web beacons, and similar technologies. This includes your IP address, browser type, device identifiers, operating system version, language preferences, time zone settings, and referring website URLs. This data helps us understand how users interact with our Platform and enables us to detect and prevent fraud and unauthorised access.
3.2 Data You Provide Directly
Most of the personal data we hold is information you provide directly when you register an account, complete the KYC verification process, make deposits or withdrawals, contact customer support, or participate in promotions. You are responsible for ensuring that all information you provide is accurate, complete, and up to date.
4 How We Use Your Data
tyo4d processes your personal data for the following purposes:
4.1 Account Management and Service Provision
- To create and maintain your user account on the Platform;
- To verify your identity and age (ensuring compliance with the 21+ requirement);
- To process deposits, withdrawals, and other financial transactions;
- To enable you to place bets, play casino games, and participate in togel draws;
- To manage your bonus balances and promotional eligibility;
- To provide customer support and respond to your inquiries.
4.2 Legal and Regulatory Compliance
- To comply with applicable laws, regulations, and licensing requirements;
- To conduct know-your-customer (KYC) and anti-money laundering (AML) checks;
- To maintain transaction records as required by financial regulations;
- To respond to lawful requests from law enforcement or regulatory authorities;
- To enforce our Terms & Conditions and detect violations.
4.3 Security and Fraud Prevention
- To detect, investigate, and prevent fraudulent or suspicious activity;
- To identify duplicate accounts and bonus abuse;
- To monitor for collusion, match-fixing, and other prohibited conduct;
- To secure the Platform against cyber attacks, hacking attempts, and unauthorised access;
- To verify payment account ownership and prevent third-party deposits.
4.4 Marketing and Personalisation
- To send promotional emails, SMS messages, or push notifications about bonuses, tournaments, and special offers (only with your explicit consent);
- To personalise your user experience by recommending games based on your playing history;
- To display targeted promotional banners and offers within your account dashboard;
- To conduct market research and gather feedback on our services.
4.5 Platform Improvement and Analytics
- To analyse user behaviour and Platform usage patterns;
- To identify technical issues, bugs, and performance bottlenecks;
- To develop new features and improve existing services;
- To conduct A/B testing of interface designs and promotional campaigns;
- To generate aggregated, anonymised statistical reports for business intelligence.
4.6 Responsible Gaming
- To implement and enforce deposit limits, loss limits, and session time restrictions you have set;
- To process self-exclusion and cooling-off period requests;
- To monitor for signs of problem gambling behaviour and reach out proactively where appropriate;
- To provide access to responsible gaming resources and support organisations.
5 Legal Basis for Processing
Under GDPR-aligned data protection principles, we process your personal data only where we have a valid legal basis. The legal bases we rely on include:
5.1 Contractual Necessity
Processing is necessary to perform the contract between you and tyo4d (our Terms & Conditions). This includes account creation, identity verification, transaction processing, and service delivery. Without this data, we cannot provide our betting and gaming services to you.
5.2 Legal Obligation
Processing is necessary to comply with legal obligations to which tyo4d is subject, including KYC and AML requirements, financial record-keeping obligations, and responses to lawful government requests.
5.3 Legitimate Interests
Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, Platform improvement, and customer support, provided these interests do not override your fundamental rights and freedoms. We conduct regular balancing tests to ensure our legitimate interests remain proportionate.
5.4 Consent
For marketing communications and non-essential cookies, we rely on your explicit consent. You may withdraw this consent at any time by adjusting your account settings or clicking the unsubscribe link in promotional emails. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
6 Data Sharing and Third-Party Disclosure
tyo4d does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:
6.1 Payment Processors
To process deposits and withdrawals, we share necessary financial information (bank account details, e-wallet identifiers, transaction amounts) with authorised payment service providers including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, and GoPay. These providers process your data as independent data controllers under their own privacy policies.
6.2 Game Providers
When you play games from third-party studios (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, etc.), limited data such as your username and betting activity is shared with those providers to facilitate gameplay. Game providers are bound by contractual obligations to protect your data and use it only for game delivery purposes.
6.3 Fraud Prevention and Security Services
We share relevant data with specialised fraud detection and identity verification service providers to protect against bonus abuse, duplicate accounts, stolen payment methods, and other fraudulent activity. These services operate under strict confidentiality obligations.
6.4 Legal and Regulatory Bodies
We may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required by law, court order, or subpoena; where necessary to protect our legal rights; or where disclosure is necessary to prevent harm to persons or property.
6.5 Business Transfers
In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the successor entity. We will notify you via email and prominently display a notice on the Platform before any such transfer takes effect, and you will have the opportunity to delete your account before the transfer if you object.
Important: tyo4d never shares your password or full financial account numbers with third parties. All data sharing is conducted over secure, encrypted channels and is limited to the minimum information necessary for the stated purpose.
7 Data Retention
tyo4d retains your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, tax, accounting, and reporting requirements. Our standard retention periods are:
7.1 Active Accounts
Data associated with active accounts is retained for the duration of your relationship with tyo4d and for a period thereafter as required by applicable law.
7.2 Closed Accounts
When you close your account, most personal data is deleted or anonymised within 90 days. However, we retain transaction records, KYC documents, and communications logs for a minimum of 7 years from the date of account closure to comply with financial regulations and to defend against potential legal claims.
7.3 Marketing Data
If you unsubscribe from marketing communications, your contact details are retained on a suppression list to ensure we do not contact you again, but are not used for any other purpose.
7.4 Security Logs
Access logs, IP addresses, and fraud prevention data are typically retained for 24 months, after which they are securely deleted unless required as evidence in an ongoing investigation or legal proceeding.
After the applicable retention period expires, personal data is securely deleted or permanently anonymised so that it can no longer be associated with you as an individual.
8 Data Security Measures
tyo4d employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. Our security measures include:
8.1 Encryption
All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored on our servers, including passwords and financial information, is encrypted at rest using AES-256 encryption standards.
8.2 Access Controls
Access to personal data is restricted on a need-to-know basis. Only authorised personnel who require access to perform their job functions are granted permission, and all access is logged and monitored. Multi-factor authentication is mandatory for administrative accounts.
8.3 Secure Infrastructure
Our servers are hosted in secure, ISO 27001-certified data centres with 24/7 physical security, environmental controls, and redundant power and network connectivity. Regular security audits and penetration testing are conducted by independent third-party security firms.
8.4 Employee Training
All tyo4d employees undergo mandatory data protection training and are bound by strict confidentiality obligations. Employees who violate data protection policies are subject to disciplinary action, including termination of employment.
8.5 Incident Response
We maintain a comprehensive incident response plan to address potential data breaches. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authorities within 72 hours as required by law.
While we implement robust security measures, no system is completely secure. You also play a role in protecting your data by choosing a strong password, not sharing your account credentials, and logging out after each session, especially on shared devices.
9 Cookies and Tracking Technologies
tyo4d uses cookies and similar tracking technologies to enhance your user experience, analyse Platform usage, and deliver personalised content. A cookie is a small text file stored on your device that allows us to recognise you on return visits.
9.1 Types of Cookies We Use
- Essential Cookies: Necessary for the Platform to function. These enable account login, session management, and security features. You cannot opt out of essential cookies as they are critical to service delivery.
- Functional Cookies: Remember your preferences (language, currency display format, time zone) and personalise your experience.
- Analytics Cookies: Collect aggregated, anonymised data about how visitors use the Platform, including pages visited, time spent, and navigation paths. This helps us improve site performance and user experience.
- Marketing Cookies: Track your interactions with promotional content and enable targeted advertising. These cookies require your explicit consent and can be disabled in your account settings.
9.2 Managing Cookies
You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, though this may impair some Platform functionality. To manage marketing and analytics cookies without affecting essential cookies, use the cookie preference centre accessible from your account dashboard.
9.3 Third-Party Cookies
Some cookies on our Platform are set by third-party service providers such as Google Analytics. We do not control how third parties use cookies. Please review the privacy policies of these providers for more information.
10 Your Data Protection Rights
Under applicable data protection laws, you have the following rights regarding your personal data:
10.1 Right of Access
You have the right to request a copy of the personal data we hold about you. You can download much of this data directly from your account dashboard. For a comprehensive data export, contact our Data Protection Officer.
10.2 Right to Rectification
You may update or correct inaccurate or incomplete personal data through your account settings. If you cannot make the correction yourself, contact customer support for assistance.
10.3 Right to Erasure ("Right to be Forgotten")
You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. This right is not absolute — we may need to retain certain data to comply with legal obligations (e.g., financial transaction records must be kept for 7 years).
10.4 Right to Restrict Processing
You may request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
10.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider where technically feasible.
10.6 Right to Object
You may object to processing of your personal data for direct marketing purposes at any time by clicking the unsubscribe link in promotional emails or adjusting your communication preferences in your account settings. You may also object to processing based on legitimate interests by contacting us with your reasons.
10.7 Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
10.8 Right to Lodge a Complaint
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.
To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days. We may ask you to verify your identity before processing your request to ensure the security of your data.
11 International Data Transfers
tyo4d operates as an international platform and may transfer your personal data to servers located outside of Indonesia. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your data, including:
- Transferring data only to countries recognised as providing adequate data protection under applicable law;
- Using Standard Contractual Clauses approved by data protection authorities;
- Ensuring that recipient entities are certified under recognised data protection frameworks;
- Implementing supplementary technical measures such as encryption in transit and at rest.
By using our services, you acknowledge and consent to such international transfers. If you have concerns about where your data is processed, please contact our Data Protection Officer for more detailed information.
12 Children's Privacy
tyo4d's services are strictly for adults aged 21 and over. We do not knowingly collect personal data from individuals under 21 years of age. If you are under 21, you must not attempt to register an account or use our services.
If we discover that we have inadvertently collected personal data from a person under 21, we will delete that data immediately and close the associated account without prior notice. If you believe a minor has provided us with personal data, please contact us immediately at [email protected] so we can take appropriate action.
21+ Only: tyo4d operates a zero-tolerance policy for underage gambling. Any account found to be held by a person under 21 will be permanently closed, and all deposits will be forfeited.
13 Updates to This Privacy Policy
tyo4d reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email and display a prominent notice on the Platform for at least 14 days before the changes take effect.
The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
Your continued use of the Platform after the effective date of any changes constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated terms, you should cease using our services and may close your account as described in our Terms & Conditions.
14 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:
| [email protected] | |
| Subject Line | Data Protection Inquiry / Privacy Rights Request |
| Response Time | We aim to respond to all privacy-related inquiries within 30 days |
| Support Hours | 24/7 — Western Indonesia Time (WIB, UTC+7) |
| Languages | English and Indonesian (Bahasa Indonesia) |
For general customer service inquiries not related to data protection, please use the standard support channels available in your account dashboard or visit our FAQ page.