Privacy Policy

1 Introduction

This Privacy Policy describes how tals89 (the "Company", "we", "us", or "our") collects, uses, discloses, and protects personal information provided by users ("you", "Player", or "User") of the tals89 online gaming platform located at tals89.cam (the "Platform"). We are committed to safeguarding your privacy and ensuring that your personal data is handled responsibly and in accordance with applicable data protection laws and best practices.

This Privacy Policy applies to all personal data processed by tals89 in connection with the provision of our sportsbook, live casino, slots, and related gaming services (collectively, the "Services"). It should be read in conjunction with our Terms & Conditions and Responsible Gaming policy.

2 Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is tals89, operating under an international gaming license. All data protection inquiries, requests to exercise your rights, or concerns regarding the processing of your personal data should be directed to our Data Protection Officer via the contact details provided in Section 14 of this Privacy Policy.

3 Data We Collect

tals89 collects and processes several categories of personal data to provide and improve our Services. The specific data collected depends on how you interact with the Platform:

3.1 Registration & Account Data

When you create an account on tals89, we collect:

• Full legal name (as it appears on your official identity documents)
• Date of birth (for mandatory 21+ age verification)
• Residential address in Indonesia (street, city, province, postal code)
• Email address
• Mobile phone number (Indonesian number)
• Username and encrypted password
• Preferred language and currency (default: English and Indonesian Rupiah)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations, we collect:

• Copies of government-issued identity documents (Indonesian National Identity Card / KTP, Passport, or Driver's License / SIM)
• Proof of address documents (utility bills, bank statements from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or similar, dated within the last three months)
• Proof of payment method ownership (bank account or e-wallet screenshots showing your name and account number)
• Selfie photographs for biometric verification (where required for enhanced security)

3.3 Financial & Transaction Data

To process deposits, withdrawals, and wagers, we collect:

• Payment method details (bank name and account number, e-wallet type and account identifier for OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history (deposits, withdrawals, bet placements, winnings, bonuses claimed)
• Account balance and wallet activity
• Source-of-funds declarations (for high-value transactions)

3.4 Behavioral & Usage Data

To improve the Platform and personalize your experience, we automatically collect:

• Device information (device type, operating system, browser type and version)
• IP address and geographic location (country, region, city — derived from IP, not precise GPS)
• Login and session timestamps
• Pages viewed, features used, games played, and betting patterns
• Referrer URL (the page you visited before arriving at tals89)
• Technical logs (error reports, performance metrics, crash data)

3.5 Communications Data

When you contact our support team or participate in promotions, we collect:

• Support ticket content (questions, complaints, feedback)
• Live chat transcripts and email correspondence
• Survey responses and promotional participation records

3.6 Responsible Gaming Data

To support responsible gaming and comply with player protection obligations, we collect:

• Self-imposed limits (deposit limits, loss limits, session time limits)
• Self-exclusion requests and cooling-off period preferences
• Reality check acknowledgments
• Gambling behavior indicators (frequency, session duration, bet sizes, win/loss patterns) used solely for identifying at-risk behavior

4 How We Use Your Data

tals89 processes your personal data for the following purposes:

5 Legal Basis for Processing

Under applicable data protection laws, tals89 relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions), including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with legal and regulatory obligations, including KYC, AML, age verification, and licensing requirements.
• Legitimate Interests: Processing serves our legitimate business interests in fraud prevention, platform security, service improvement, and protecting the integrity of gaming operations — balanced against your privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing data for marketing, analytics cookies, or other non-essential purposes. You may withdraw consent at any time.

6 Data Sharing & Third-Party Disclosure

tals89 does not sell your personal data to third parties. However, we may share your data with trusted partners in the following limited circumstances:

6.1 Payment Processors

To process deposits and withdrawals, we share necessary transaction data (your name, bank account number, e-wallet identifier, transaction amount) with licensed payment service providers serving Indonesia (covering BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja integrations). These providers operate under strict data protection and PCI DSS compliance standards.

6.2 Game Providers

When you play live casino games or slots, limited session data (username, bet amounts, game outcomes) is shared with certified game studios such as Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, and Microgaming to deliver real-time gameplay. These providers do not receive your full personal or financial details.

6.3 Identity Verification Services

To complete KYC checks, we may share identity documents and biometric data with third-party verification platforms that specialize in document authentication and age verification. These services operate under strict confidentiality and data protection agreements.

6.4 Legal & Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required by law, to comply with a legal obligation, to enforce our Terms, or to protect the rights, property, or safety of tals89, our users, or the public.

6.5 Professional Advisors

We may share data with lawyers, accountants, auditors, and other professional advisors who assist with legal compliance, financial audits, and business operations — all bound by professional confidentiality obligations.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of tals89's business, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and any changes to this Privacy Policy.

7 Data Retention

tals89 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal and regulatory obligations:

• Account Data: Retained for the duration of your account's active status, plus 7 years after account closure (to satisfy AML and financial audit requirements).
• KYC Documents: Retained for 7 years after account closure, as required by international AML standards.
• Transaction Records: Retained for 7 years after the transaction date for financial audit, tax compliance, and dispute resolution purposes.
• Support Communications: Retained for 3 years after the last interaction, unless a longer period is required to resolve an ongoing dispute.
• Marketing Data: Retained until you opt out of marketing communications, after which it is deleted within 30 days.
• Technical Logs: Retained for 12 months for security monitoring and troubleshooting, then automatically deleted.

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be linked to you as an individual.

8 Security Measures

tals89 implements industry-leading technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected using SSL 256-bit encryption. Sensitive data at rest (passwords, financial information, KYC documents) is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized tals89 personnel who require it to perform their job functions. All employees undergo background checks and sign confidentiality agreements.
• Secure Data Centers: All personal data is stored in secure, ISO 27001-certified data centers with 24/7 monitoring, intrusion detection, and physical access restrictions.
• Multi-Factor Authentication: We offer optional two-factor authentication (2FA) for all accounts, and we strongly encourage all players to enable this feature for added security.
• Regular Audits: Our security infrastructure undergoes regular penetration testing and third-party security audits to identify and remediate vulnerabilities.
• Incident Response: We maintain a data breach response plan. In the unlikely event of a security incident affecting your personal data, we will notify you and relevant authorities as required by law.

9 Your Data Protection Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. You can update most account information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data in certain circumstances (e.g., when it is no longer necessary for the purposes for which it was collected). Note that we may be legally required to retain certain data for regulatory compliance (KYC, AML, financial records) even after you request deletion.
• Right to Restriction of Processing: You have the right to request that we temporarily restrict processing of your personal data in specific situations (e.g., while we verify the accuracy of disputed data).
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests (including profiling). You also have an absolute right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14 below. We will respond to your request within 30 days.

10 Cookies & Tracking Technologies

tals89 uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform performance, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These cookies enable account login, session management, and security features. You cannot disable these cookies without losing access to core functionality.
• Performance Cookies: Collect anonymous data about how visitors use the Platform (pages visited, time spent, errors encountered). This data helps us improve site performance and user experience.
• Functional Cookies: Remember your preferences (language, display settings) to provide a more personalized experience.
• Advertising Cookies: tals89 does not currently use third-party advertising networks or retargeting cookies. Any future use would require your explicit consent.

10.2 Managing Cookies

Most web browsers allow you to manage cookie preferences through browser settings. You can block or delete cookies at any time. However, disabling essential cookies may prevent you from using certain features of the Platform. For more information on managing cookies, consult your browser's help documentation.

11 International Data Transfers

tals89 operates internationally, and your personal data may be transferred to, stored in, or processed in countries outside Indonesia where our servers, service providers, or business partners are located. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information, including:

• Standard Contractual Clauses approved by recognized data protection authorities
• Transfer to countries with adequate data protection laws recognized by international standards
• Binding Corporate Rules and Privacy Shield frameworks (where applicable)

By using tals89, you consent to the transfer of your personal data outside Indonesia under these protective measures.

12 Children's Privacy (21+ Only)

tals89 is strictly for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process includes mandatory age verification, and we employ ongoing monitoring to detect underage accounts.

If we become aware that an individual under 21 has registered an account or provided personal data, we will immediately terminate the account, delete all associated data, and forfeit any balances in accordance with our Terms & Conditions.

If you believe a minor has accessed tals89, please contact us immediately at the email address provided in Section 14 below.

13 Changes to This Privacy Policy

tals89 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or industry standards. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or an on-platform notification.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

For general customer support inquiries unrelated to data protection, please use the live chat feature available 24/7 on the Platform, or visit our FAQ page for quick answers to common questions.