Privacy Policy

1. Introduction

twin32 ("we," "us," or "our") is an online betting and gaming platform licensed under international gaming regulations. We are committed to protecting the privacy and security of all personal data entrusted to us by our users. This Privacy Policy describes the types of personal information we collect when you register an account, use our services, or interact with our platform, and explains how we process, protect, and respect your data rights.

By creating a twin32 account or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein. If you do not agree with any part of this policy, you should not use our platform.

This Privacy Policy applies to all users of twin32, regardless of their geographic location, and complies with applicable data protection regulations including (where applicable) the General Data Protection Regulation (GDPR), Indonesia's Personal Data Protection laws, and international best practices for data privacy and security.

2. Data Controller Information

For the purposes of applicable data protection laws, twin32 acts as the data controller with respect to the personal data we collect and process through our platform. This means we determine the purposes and means of processing your personal information and are responsible for ensuring compliance with data protection requirements.

If you have any questions about how we handle your personal data, wish to exercise your privacy rights, or need to contact our Data Protection Officer, please reach us at:

• Email: [email protected]
• General Support: [email protected]
• Response Time: Privacy inquiries are typically addressed within 5 business days

3. What Personal Data We Collect

We collect several categories of personal data to provide, maintain, and improve our services, comply with legal obligations, and protect against fraud. The specific data we collect includes:

3.1 Account Registration Data

When you create a twin32 account, we collect:

• Identity Information: Full legal name, date of birth, nationality, gender
• Contact Information: Email address, phone number, residential address
• Account Credentials: Username, encrypted password (we do not store passwords in plain text)
• Currency Preference: Your chosen account currency (typically Indonesian Rupiah)

3.2 Verification and Compliance Data (KYC)

To comply with anti-money laundering (AML) regulations and verify your identity, we collect:

• Government-Issued ID: Copy of your Indonesian national identity card (KTP), passport, or other official photo identification
• Proof of Address: Utility bill, bank statement, or government correspondence dated within the last three months
• Selfie Photo: A photograph of you holding your ID document to verify physical possession
• Enhanced Due Diligence: For high-value transactions or VIP accounts, we may request additional documentation such as proof of income or source of funds

3.3 Financial and Transaction Data

• Payment Information: Bank account numbers, e-wallet account IDs (OVO, GoPay, DANA, etc.), transaction histories, deposit and withdrawal records
• Betting and Gaming Activity: Bet histories, wagers placed, games played, winnings and losses, bonus usage, account balance fluctuations
• IP Addresses and Device Information: IP address, device type, operating system, browser type, screen resolution, time zone

3.4 Technical and Usage Data

• Log Data: Login timestamps, page views, features accessed, clicks, session duration
• Cookies and Tracking: Cookie IDs, session tokens, analytics data (see Section 10 for details)
• Communication Records: Transcripts of live chat conversations, email correspondence with customer support, phone call recordings (where applicable and with prior notice)

3.5 Marketing and Communications Preferences

• Opt-in Data: Whether you have consented to receive promotional emails, SMS notifications, or push notifications
• Campaign Interaction: Open rates, click-through rates, and engagement with marketing materials

4. How We Use Your Personal Data

twin32 processes your personal data for the following specific purposes:

4.1 Account Management and Service Provision

• To create, maintain, and manage your twin32 account
• To process deposits, withdrawals, and other financial transactions
• To enable you to place bets, play games, and use all platform features
• To provide customer support and respond to your inquiries
• To send you service-related notifications (account confirmations, transaction alerts, security warnings)

4.2 Legal and Regulatory Compliance

• To verify your identity and age (21+ enforcement)
• To comply with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• To detect and prevent fraud, money laundering, and other illegal activities
• To enforce our Terms and Conditions and investigate violations
• To respond to lawful requests from government authorities, law enforcement, or regulatory bodies

4.3 Platform Security and Fraud Prevention

• To monitor for suspicious account activity, duplicate accounts, and bonus abuse
• To implement and improve fraud detection algorithms and risk scoring models
• To secure our systems against cyberattacks, unauthorized access, and data breaches
• To investigate disputes, chargebacks, and payment discrepancies

4.4 Service Improvement and Analytics

• To analyse user behaviour and preferences to enhance platform usability
• To conduct A/B testing and feature optimization
• To generate aggregated, anonymised statistics for business intelligence and reporting (this data cannot identify you individually)

4.5 Marketing and Promotional Communications (With Your Consent)

• To send you personalised bonus offers, promotional campaigns, and product updates (only if you have opted in)
• To notify you of new games, features, and platform improvements
• To conduct market research and gather feedback on our services

You can withdraw your marketing consent at any time by clicking the unsubscribe link in any promotional email, adjusting your communication preferences in your account settings, or contacting customer support.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (i.e., to provide the twin32 services you have requested). This includes account management, transaction processing, and customer support.
• Legal Obligation: Processing is required to comply with laws and regulations, including KYC/AML requirements, age verification, tax reporting, and responses to lawful government requests.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, analytics, and business operations — provided these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and certain optional data processing activities, we rely on your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Data Sharing and Third Parties

twin32 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we may share your data with the following categories of third parties under strict confidentiality and data protection obligations:

6.1 Payment Processors and Financial Institutions

We share necessary payment information with banks, e-wallet providers (OVO, GoPay, DANA, etc.), and payment gateway operators to process your deposits and withdrawals. These third parties are bound by confidentiality agreements and process your data solely to execute payment transactions.

6.2 Identity Verification and Compliance Service Providers

We use third-party KYC and identity verification services to authenticate your documents, cross-reference government databases, and ensure compliance with regulatory requirements. These providers are certified under industry standards and handle your data securely.

6.3 Game and Software Providers

When you play games from third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, etc.), limited session and gameplay data may be shared with these providers to deliver the gaming experience, but your full personal profile is not disclosed.

6.4 Analytics and Performance Monitoring

We use analytics platforms (Google Analytics, Mixpanel, or similar) to understand user behaviour and improve platform performance. These services process anonymised or pseudonymised data and are configured to respect user privacy in accordance with applicable data protection laws.

6.5 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or government authorities when required by law, legal process, or where necessary to protect our rights, enforce our Terms and Conditions, or investigate suspected fraud or illegal activity.

6.6 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change in ownership or control of your personal data.

7. Data Security Measures

twin32 employs industry-standard security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology, the same standard used by major financial institutions.
• Secure Password Storage: User passwords are hashed using bcrypt with a high work factor, ensuring they cannot be reversed or decrypted even if database access is compromised.
• Two-Factor Authentication (2FA): Optional 2FA via SMS or authenticator app adds an extra layer of protection to your account.
• PCI-DSS Compliance: Payment card data handling meets Payment Card Industry Data Security Standard requirements.
• Regular Security Audits: Our systems undergo periodic penetration testing and vulnerability assessments by independent security firms.
• Strict Access Controls: Personal data is accessible only to authorised personnel on a need-to-know basis, with all access logged and monitored.
• Data Segregation: Sensitive data such as identity documents and payment information are stored in segregated, encrypted databases with restricted access.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest standards and promptly addressing any security incidents.

8. Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, and resolve disputes. Specific retention periods are as follows:

Data Type	Retention Period	Rationale
Account Registration Data	Duration of account + 5 years	KYC/AML legal obligations
KYC Documents (ID, Proof of Address)	Duration of account + 7 years	Regulatory compliance and audit trail
Transaction Records	Duration of account + 7 years	Financial record-keeping and tax reporting
Betting and Gaming History	Duration of account + 3 years	Dispute resolution and auditing
Customer Support Communications	Duration of account + 2 years	Service quality and dispute resolution
Marketing Consent Records	Until consent is withdrawn + 1 year	Proof of consent for regulatory compliance
Session and Log Data	12 months	Security monitoring and fraud detection

After the applicable retention period expires, your personal data will be securely deleted or anonymised such that it can no longer identify you. If you voluntarily close your account, some data may be retained for legal compliance purposes as specified above.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at [email protected].

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (typically a PDF or CSV file) within 30 days of your request, free of charge for the first request per year.

9.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or update it. You can also update most account information directly through your twin32 account settings.

9.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data where there is no compelling reason for us to continue processing it. However, this right is not absolute — we may retain data where required by law (e.g., KYC records for regulatory compliance) or for legitimate legal purposes (e.g., fraud investigation or dispute resolution).

9.4 Right to Restriction of Processing

You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful but you prefer restriction over deletion.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and to request that we transmit it directly to another service provider where technically feasible.

9.6 Right to Object

You have the right to object to processing based on our legitimate interests or for direct marketing purposes. If you object to marketing, we will immediately cease sending promotional communications. For other objections, we will assess whether our legitimate grounds override your interests.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

9.8 Right to Lodge a Complaint

If you believe we have violated your data protection rights, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first so we can address your concerns directly.

10. Cookies and Tracking Technologies

twin32 uses cookies and similar tracking technologies to enhance user experience, analyse platform usage, and deliver personalised content. Cookies are small text files stored on your device that allow us to recognise you on subsequent visits.

Types of Cookies We Use:

• Essential Cookies: Required for basic platform functionality (login sessions, security, fraud detection). These cannot be disabled without impairing site functionality.
• Performance Cookies: Collect anonymised data on how users interact with our platform to help us improve performance and user experience.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a personalised experience.
• Marketing Cookies: Track your activity across sessions to deliver targeted promotions and measure campaign effectiveness (only with your consent).

You can manage cookie preferences through your browser settings. However, disabling essential cookies may prevent you from accessing certain features or using the platform entirely. For more details on the specific cookies we use, durations, and third-party cookies, please refer to our detailed Cookie Policy (available upon request).

11. International Data Transfers

twin32 operates internationally and may transfer your personal data to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. These safeguards may include:

• Standard Contractual Clauses approved by relevant data protection authorities
• Adequacy decisions recognising that the destination country provides an adequate level of data protection
• Binding corporate rules within our corporate group
• Certification under recognised privacy frameworks

If you have questions about international data transfers, please contact our Data Protection Officer at [email protected].

12. Protection of Minors

twin32 strictly prohibits individuals under the age of 21 from creating an account or using our services. We do not knowingly collect personal data from minors. If we become aware that a user is under 21, we will immediately close the account and delete all associated personal data. Parents or guardians who believe their child has provided personal data to twin32 should contact us immediately at [email protected] so we can take corrective action.

13. Changes to This Privacy Policy

twin32 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. Material changes will be communicated to you via email, account notification, or prominent notice on our homepage. The "Last Updated" date at the top of this document indicates when the policy was last revised.

Your continued use of twin32 after any changes constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed about how we protect your personal data. If you do not agree with any changes, you must cease using our services and may request account closure.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the twin32 website and mobile app
• Response Time: Privacy inquiries are typically addressed within 5 business days

For formal data protection complaints or legal inquiries, please mark your correspondence as "Privacy Request — Data Protection Officer" to ensure prompt routing to the appropriate team.