Privacy Policy

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, residential address, financial details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, retrieval, and deletion.
• "Data Subject" means the individual to whom Personal Data relates — in the context of this Policy, primarily registered tikaku Players and website visitors.
• "Controller" means tikaku, the entity that determines the purposes and means of processing Personal Data.
• "Processor" means a third-party service provider that processes Personal Data on behalf of tikaku under a data processing agreement.
• "Cookies" means small data files placed on your device by the tikaku website to enable functionality, analytics, and personalisation features.
• "KYC Data" means identity and address verification documents collected as part of the Know Your Customer process, including Indonesian National Identity Card (KTP) images, selfie verification photographs, and supporting address documentation.
• "Transaction Data" means records of financial transactions conducted on the tikaku Platform, including deposit amounts, withdrawal requests, bank account details, and e-wallet identifiers used for IDR transfers.
• "Sensitive Data" means Personal Data that warrants a higher standard of protection, such as government-issued identity document numbers and financial account information.

This Policy applies to all Personal Data collected by tikaku in connection with:

• Registration and maintenance of a tikaku Account.
• Use of any product or service available on the tikaku Platform, including sports betting, live casino, slots, and togel (Indonesia's traditional numbers lottery) markets.
• Deposit and withdrawal transactions processed through Indonesian banking institutions (including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and Bank Permata) and e-wallet providers (including OVO, DANA, GoPay, ShopeePay, and LinkAja).
• Customer support interactions via live chat, email, and any other communication channel provided by tikaku.
• Browsing or accessing the tikaku website at https://tikaku.cam, regardless of whether a Player Account is created.
• Participation in promotions, tournaments, loyalty programmes, and any other engagement features offered on the Platform.

This Policy does not apply to the data practices of third-party websites linked from our Platform. Please review the privacy policies of any third-party service independently.

tikaku collects Personal Data across several categories, as described in the table below. Data is collected directly from you, automatically through your use of the Platform, and in some cases from third-party verification services.

tikaku processes your Personal Data under one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to provide the gaming services you have signed up for, including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, counter-terrorism financing (CTF) rules, and identity verification mandates applicable to internationally licensed gaming operators.
• Legitimate Interests: Processing necessary for tikaku's legitimate business interests, including fraud prevention, platform security monitoring, product improvement, and responsible gaming enforcement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: For processing activities that are not strictly necessary for service delivery — such as marketing communications and the use of non-essential cookies — we rely on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

tikaku uses the Personal Data we collect for the following purposes:

• Account Management: Creating, maintaining, and administering your tikaku Account, including processing login authentication and managing account security settings.
• Transaction Processing: Facilitating IDR deposits and withdrawals through your chosen local bank (such as BCA, BRI, BNI, or Mandiri) or e-wallet provider, and maintaining accurate financial records for each account.
• Identity Verification (KYC): Verifying your age, identity, and address to comply with our legal obligations and to prevent underage gambling and fraudulent account activity.
• Responsible Gaming: Monitoring gaming patterns to identify indicators of potential problem gambling behaviour and to apply protective measures where appropriate, in accordance with our Responsible Gaming Policy.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, bonus abuse, and other security threats to the Platform and its members.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance through our 24/7 support channels.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the tikaku user experience, optimise platform performance, and develop new features and game offerings.
• Legal Compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory authorities, and enforcing our Terms & Conditions.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. You may unsubscribe at any time via the Account Settings page or by contacting [email protected].

tikaku does not sell your Personal Data. We share data only in the following limited, controlled circumstances:

• Payment Processors & Banking Partners: Transaction Data is shared with your chosen Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, or Bank Danamon) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, or LinkAja) to the minimum extent necessary to process your deposit or withdrawal in IDR.
• KYC & Identity Verification Providers: KYC Data may be processed by regulated third-party identity verification specialists operating under data processing agreements that bind them to the same security and confidentiality standards that tikaku applies internally.
• Game Content Providers: Certain game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive a limited session identifier to authenticate your gaming session. These providers do not receive your full profile data and are contractually bound to use session data solely for game delivery purposes.
• Legal & Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid court order, or in connection with the prevention of financial crime.
• Business Transfers: In the event of a corporate merger, acquisition, or asset sale affecting tikaku, Personal Data may be transferred to the successor entity. We will notify affected Players via email prior to any such transfer and provide the option to request account deletion.

All third-party recipients of Personal Data are required to implement appropriate technical and organisational security measures and to process data only for the purposes for which it was shared.

The tikaku website uses cookies and similar tracking technologies to ensure the platform functions correctly, to analyse usage patterns, and to personalise your experience. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the tikaku website to operate. They enable core functions such as session authentication, account security, and cashier functionality. These cookies cannot be disabled without severely impairing your ability to use the Platform.
• Analytics Cookies: These first-party cookies allow us to understand how Players navigate the Platform — which pages are visited most frequently, where sessions begin and end, and how features are used. This data is aggregated and anonymised. We use this information exclusively to improve the tikaku Platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language display, last-used deposit method, and interface settings — so you do not need to reconfigure them on each visit.
• Security Cookies: These cookies support our fraud detection systems by flagging unusual login patterns, multiple account attempts from the same device, and other anomalous behaviours that may indicate a security threat.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing certain features of the Platform. tikaku does not use third-party advertising or cross-site tracking cookies.

tikaku implements a multi-layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Encryption: All data in transit between your device and tikaku's servers is encrypted using TLS 1.3 with 256-bit AES encryption, ensuring that your credentials, financial details, and personal information cannot be intercepted during transmission.
• Data-at-Rest Encryption: Sensitive Data — including KYC documents, password hashes, and financial account numbers — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to Personal Data within tikaku's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged, monitored, and subject to periodic review.
• Regular Security Audits: tikaku conducts periodic penetration testing and vulnerability assessments conducted by independent cybersecurity specialists to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, tikaku will notify affected Players without undue delay and will implement immediate containment and remediation measures.

tikaku retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon the expiry of the applicable retention period, Personal Data is either securely deleted using data sanitisation methods that render recovery impossible, or anonymised such that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for aggregated statistical analysis.

As a Data Subject, you have the following rights in relation to the Personal Data tikaku holds about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request within 48 hours and respond substantively within 30 days.

The tikaku Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and we employ automated and manual checks to detect and prevent underage registration.

If tikaku becomes aware that Personal Data has been collected from a person under 21 years of age — whether through our own detection, a parental notification, or a third-party report — we will take the following immediate actions:

• Permanently suspend the Account.
• Forfeit any balance associated with the Account in accordance with our Terms & Conditions.
• Purge all Personal Data associated with the underage Account from our active systems within 30 days, subject to any mandatory legal retention obligations.
• Where the circumstances suggest deliberate circumvention of age controls, refer the matter to appropriate authorities.

Parents and guardians who believe a minor has registered on tikaku should contact us immediately at [email protected]. We will investigate and respond within 24 hours.

tikaku primarily stores and processes Personal Data on servers located within data centres that maintain appropriate international security certifications. In some circumstances — particularly in connection with identity verification services and certain game platform providers — your data may be transferred to and processed in countries outside Indonesia.

Where such international transfers occur, tikaku ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that applied within Indonesia. Safeguards may include:

• Data processing agreements with receiving entities that incorporate internationally recognised contractual data protection clauses.
• Transfers only to countries or organisations that provide an adequate level of data protection as determined by independent assessment.
• Technical and organisational measures — including encryption and access controls — applied to transferred data regardless of the receiving jurisdiction.

You may request details of the specific safeguards applied to any international transfer of your data by contacting [email protected].

The tikaku Platform may contain references to third-party services — such as payment providers and game studios — whose own data practices are governed by their respective privacy policies. tikaku has no control over, and accepts no responsibility for, the privacy practices or content of any third-party website or service.

We encourage you to review the privacy policies of any third-party provider whose services you interact with in connection with your tikaku Account, particularly your chosen banking or e-wallet provider (such as BCA, BRI, OVO, or DANA), as their handling of your financial data will be governed by their own terms.

tikaku reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will notify registered Players via email to the address on file at least 7 days before the updated Policy takes effect.

The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Continued use of the tikaku Platform following the effective date of any revised Policy constitutes your acknowledgement of the updated terms. If you do not agree with material changes to this Policy, you must cease using the Platform and request account closure before the amendment's effective date.

We encourage all Players to review this Policy periodically. Archived versions of previous policy documents are available on request from [email protected].

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to submit a data-related complaint, please contact tikaku through the following channel:

• Email: [email protected]
• Subject Line for Data Rights Requests: "Data Rights Request — [Your Username]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your Username]"
• Response Commitment: Acknowledgement within 48 hours; substantive response within 30 calendar days.
• Support Availability: 24 hours a day, 7 days a week, including Indonesian public holidays such as Idul Fitri and Nyepi.
• Languages: Both English-speaking and Indonesian-speaking agents are available at all times.