tar55 Privacy Policy

tar55 ("the Company", "we", "us", or "our") operates the online sportsbook and casino platform accessible at tar55.pro (the "Platform"). This Privacy Policy describes how tar55 collects, processes, stores, shares, and protects the personal data of individuals who visit, register on, or otherwise interact with the Platform ("Members" or "you").

This Policy applies to all personal data collected through the Platform, including data submitted during account registration, data generated through your gaming and betting activity, data collected automatically through your device and browser, and data received from third-party service providers who assist us in operating the Platform.

By registering an account or continuing to use the tar55 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the Platform and may request account closure by contacting our support team.

tar55 is committed to complying with applicable international data protection principles, including the principles of purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. Where Indonesian data protection regulations apply, we additionally align our practices with the requirements of the applicable Indonesian legal framework governing electronic information and personal data.

tar55 collects only the personal data that is necessary to provide you with a safe, functional, and personalised gaming experience. The categories of personal data we collect are set out below.

2.1 — Identity & Registration Data

• Full legal name as it appears on a valid government-issued identity document.
• Date of birth (used to verify that you are 21 years of age or older).
• Gender (optional, used for personalisation).
• Nationality and country of residence.
• Chosen username and encrypted password.

2.2 — Contact Data

• Email address (primary channel for account notifications and support correspondence).
• Mobile telephone number (used for two-factor authentication and account security alerts).
• Residential address (required for KYC verification and regulatory compliance).

2.3 — Financial & Payment Data

• Indonesian bank account details used for deposits and withdrawals, including bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and account number.
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used.
• We do not store full card numbers or CVV codes. Payment instrument data is tokenised and handled by our certified payment processing partners.

2.4 — Identity Verification (KYC) Data

• Copies of government-issued photo identification: National Identity Card (KTP), passport, or driving licence.
• Proof of residential address (bank statement or utility bill dated within three months).
• Selfie or liveness check image where required to verify document authenticity.

2.5 — Gaming & Betting Activity Data

• Sportsbook bet history: event, market, selection, odds, stake, and settlement outcome.
• Casino game play history: game title, provider, session duration, wagers, wins, and losses.
• Bonus and promotion claim history and wagering progress.
• Responsible gaming settings, including any deposit limits, self-exclusion periods, or session time limits you have activated.

2.6 — Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Session timestamps: login time, logout time, and session duration.
• Referral URL and navigation path within the Platform.
• Cookie identifiers and similar tracking technologies (see Section 8).

2.7 — Communications Data

• Content of messages exchanged with our customer support team via email or live chat.
• Records of promotional email or SMS communications sent to you and your engagement with those communications (open, click, unsubscribe).

We collect your personal data through the following channels and mechanisms:

Certain data is collected automatically the moment you access the Platform, even before you register an account. This automatic collection is necessary for basic Platform functionality, security monitoring, and fraud prevention. You may limit some automatic data collection by adjusting your browser's cookie preferences; however, doing so may affect the functionality of certain Platform features.

tar55 processes your personal data only for specific, explicit, and legitimate purposes. The table below summarises the primary purposes for which we process personal data and the corresponding legal basis for each processing activity.

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any promotional email or contact our support team directly.

tar55 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

5.1 — Service Providers (Data Processors)

We engage trusted third-party service providers to assist in operating the Platform. These providers act as data processors under our instructions and are contractually bound to process your data only for the purposes we specify, to maintain appropriate security standards, and not to use your data for their own independent purposes. Our key service-provider categories include:

• KYC and identity verification providers — to conduct automated and manual verification of identity documents and perform sanctions/PEP screening.
• Payment processors and banking partners — to facilitate IDR transactions via BCA, BRI, BNI, Mandiri, and e-wallet networks (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Game software providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymised session data to deliver game content; they do not receive your identity data.
• Cloud hosting and infrastructure providers — to store Platform data securely in enterprise-grade data centres.
• Fraud prevention and cybersecurity providers — to monitor for account takeover attempts, collusion, and payment fraud.
• Customer support platform providers — to manage live chat and email support ticketing.
• Email and SMS communications providers — to deliver transactional notifications and promotional messages where you have opted in.

5.2 — Legal and Regulatory Disclosure

tar55 may be required to disclose your personal data to governmental authorities, law enforcement agencies, courts, or regulatory bodies where:

• We are subject to a legally binding order, court subpoena, or formal request from a competent authority.
• Disclosure is necessary to comply with our anti-money laundering (AML) reporting obligations.
• Disclosure is necessary to prevent, detect, or prosecute criminal activity involving the Platform.

Where permitted by law, we will endeavour to notify you of any such disclosure request before complying. If notification is legally prohibited, we will disclose the minimum data required to satisfy the legal obligation.

5.3 — Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected Members in advance of any such transfer and will ensure that the acquiring entity commits to honouring the privacy commitments set out in this Policy.

As an internationally operated platform serving Members primarily in Indonesia, tar55 may transfer your personal data to countries outside of Indonesia for processing and storage. Such transfers may occur when we use cloud hosting infrastructure, KYC verification providers, or customer support platforms based in other jurisdictions.

When transferring personal data internationally, tar55 ensures that adequate safeguards are in place to protect your data to a standard equivalent to the protections that apply within Indonesia. These safeguards include:

• Data processing agreements that incorporate internationally recognised contractual clauses for data protection.
• Transfers exclusively to service providers that maintain internationally recognised security certifications (such as ISO 27001 or SOC 2 Type II compliance).
• Regular reviews of the data protection standards maintained by our international service providers.

By using the tar55 Platform, you acknowledge and consent to the international transfer of your personal data in accordance with the safeguards described in this section. If you have questions about the specific countries to which your data may be transferred, please contact our support team at the address provided in Section 14.

tar55 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any identifiable individual. Where anonymised or aggregated data is retained for analytical purposes, it is no longer considered personal data and is not subject to the rights described in Section 9.

If you request account closure before the end of the applicable retention period, your account will be deactivated and made inaccessible, but the underlying data will be retained for the minimum period required by law before deletion is carried out.

tar55 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain the security of your session, to understand how Members use the Platform, and to personalise your experience. A "cookie" is a small text file stored on your device by your browser when you visit a website.

tar55 does not use third-party advertising or retargeting cookies. We do not allow external ad networks to place cookies on the Platform or to track your activity across other websites based on your tar55 sessions.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to view, delete, or block cookies on a per-site or global basis. Please note that disabling strictly necessary cookies will prevent you from logging in to your tar55 account. Instructions for managing cookies in popular browsers are available in your browser's help documentation.

tar55 respects your rights as a data subject. Subject to applicable law and certain limitations that arise from our legal obligations (particularly AML and KYC retention requirements), you hold the following rights over the personal data we process about you:

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 3 business days and fulfil it within 30 calendar days, subject to identity verification. We may ask you to verify your identity before processing the request to protect against unauthorised access to another Member's data.

We will not charge a fee for reasonable data subject requests. However, where requests are manifestly unfounded, excessive, or repetitive, we reserve the right to charge a reasonable administrative fee or to decline the request with written explanation.

The security of your personal data is a priority for tar55. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• AES-256 encryption at rest for sensitive stored data, including identity documents and financial records.
• Bcrypt password hashing — your password is never stored in plain text; it is transformed with a one-way cryptographic hash before storage.
• Two-factor authentication (2FA) available for all Member accounts to add a second layer of login security.
• Access controls and the principle of least privilege — staff can only access Member data to the extent necessary for their specific job function.
• Regular penetration testing by qualified independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Continuous intrusion detection and monitoring across all Platform infrastructure, with automated alerts for anomalous access patterns.
• Segregated payment data handling — financial transaction data is processed exclusively by PCI-DSS-compliant payment partners; full card details are never transmitted to or stored on tar55 servers.
• Regular staff training on data protection obligations, phishing awareness, and secure data handling practices.

tar55 does not knowingly collect, store, or process the personal data of any individual who is under 21 years of age. Our account registration process includes a mandatory date-of-birth verification step, and our KYC process verifies age through government-issued identity documents.

If we become aware or have reason to believe that personal data belonging to a person under the age of 21 has been submitted to the Platform — whether during registration or at any subsequent point — we will take immediate steps to:

• Suspend and close the relevant account.
• Delete all personal data associated with that account, to the extent permitted by our legal retention obligations.
• Refund any deposits made, net of any bonuses claimed, to the original payment method.

If you are a parent or guardian and believe that a minor in your care has created an account on tar55, please contact us immediately at [email protected]. We take such reports extremely seriously and will act swiftly to investigate and resolve the matter. We also encourage parents and guardians to use parental control software to restrict access to online gaming platforms by minors.

tar55 may send you the following categories of electronic communications:

• Transactional notifications (non-marketing): account creation confirmations, deposit and withdrawal confirmations, KYC status updates, password reset emails, security alerts, and responsible gaming reminders. These are sent regardless of your marketing preferences because they are necessary for the administration of your account.
• Promotional communications (marketing): bonus offers, seasonal promotions tied to Indonesian cultural events (such as Idul Fitri, Imlek, and Indonesian Independence Day on 17 August), new game announcements, and tournament invitations. These are sent only where you have provided explicit opt-in consent.

You may withdraw your consent to receive promotional communications at any time by:

• Clicking the "Unsubscribe" link present in every marketing email.
• Updating your communication preferences in your account settings.
• Contacting our support team at [email protected] with the request "Unsubscribe from marketing".

Unsubscribe requests are processed within 5 business days. You will continue to receive transactional notifications necessary for account management regardless of your marketing opt-out status. tar55 does not engage third-party brokers to send marketing on its behalf, and your contact details are never sold or shared with external marketers.

tar55 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform operations. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the Platform for a minimum of 30 days following the change.
• Send an email notification to all registered Members summarising the key changes, where the changes materially affect how we process your personal data.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this Policy, you must discontinue use of the Platform and may request account closure by contacting support before the effective date of the change. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your data.

Minor changes — such as clarifications of existing language, corrections of typographical errors, or updates to contact details — may be made without advance notice but will always be reflected in the "Last Updated" date shown at the top of this page.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which tar55 processes your personal data, please contact our Data Protection team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

When contacting us about a data subject request, please include your registered username and the email address associated with your tar55 account so that we can locate your records and verify your identity efficiently. Do not include your full password or any payment credentials in your correspondence.

tar55 takes all privacy concerns seriously. If you believe your data protection rights have been violated and you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.