Privacy Policy — tt343 Platform

tt343 is an online gaming platform providing sportsbook, live casino, and slots products to adult players in Indonesia. The platform is operated under the tt343 brand and is accessible at https://tt343.net. In the course of providing these services, tt343 necessarily collects and processes certain personal data about its registered members and, to a limited extent, about visitors to the Platform who have not yet registered.

This Privacy Policy applies to all personal data collected by tt343 through the Platform, including data provided directly by you during registration and account management, data collected automatically through your use of the Platform, and data obtained from third-party sources such as payment processors and identity verification services.

This Policy does not apply to third-party websites, applications, or services that may be linked to or from the tt343 Platform. tt343 is not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party service you access in connection with your use of tt343.

tt343 is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognized data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework, which we adopt as a baseline standard for all members regardless of their geographic location within Indonesia.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including your name, date of birth, email address, Indonesian residential address, national identity number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration, restriction, or deletion.
• "Data Controller" means tt343, which determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of tt343, such as payment processors (BCA, BRI, OVO, DANA) or identity verification providers.
• "Member" means any individual who has completed the tt343 registration process and holds an active or previously active account on the Platform.
• "Visitor" means any individual who accesses the Platform without completing the registration process.
• "Sensitive Personal Data" means personal data that requires a higher level of protection, including identity document numbers (such as KTP — Indonesian National Identity Card), financial account details, and any data relating to a Member's self-exclusion or responsible gaming status.
• "Cookie" means a small text file placed on your device by a web server when you access the Platform, used to recognize your device and store session or preference information.

tt343 collects the following categories of personal data from Members and Visitors:

tt343 does not intentionally collect Sensitive Personal Data beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, health conditions, or sexual orientation.

tt343 collects personal data through the following methods:

• Direct Submission: Data you actively provide when completing the tt343 registration form, updating your account profile, submitting KYC verification documents, initiating a deposit or withdrawal, or contacting our support team via live chat, email, or WhatsApp.
• Automated Technical Collection: Data collected automatically when you access or use the Platform, including IP address logging, session cookies, browser fingerprinting for fraud detection, and device identifier capture. This data is collected regardless of whether you are a registered Member or an anonymous Visitor.
• Payment Processors: When you make a deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, or ShopeePay, the relevant financial institution or e-wallet provider transmits transaction confirmation data to tt343 sufficient to credit or debit your account. tt343 does not receive your full bank account credentials — only transaction reference data and masked account identifiers.
• Identity Verification Partners: tt343 may use third-party identity verification services to authenticate KYC documents. These partners process your identity documents under their own data processing agreements and are bound by confidentiality and data security obligations.
• Platform Interactions: Data generated by your gaming activity, including the games you play, the bets you place, your win/loss history, and your session durations. This data is recorded automatically by the Platform's gaming infrastructure for operational and responsible gaming purposes.

tt343 processes your personal data on the following legal bases, consistent with GDPR-aligned data protection principles:

• Contract Performance: Processing that is necessary to provide you with the services you have contracted for as a tt343 Member — including account management, processing deposits and withdrawals, delivering gaming products, and resolving support queries.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, age verification (21+), and financial record-keeping.
• Legitimate Interests: Processing conducted for tt343's legitimate operational interests, including fraud prevention, platform security, abuse detection, responsible gaming monitoring, and improving the quality and safety of the Platform — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where tt343 seeks to send you marketing communications, promotional offers, or personalized bonus recommendations, we will do so only with your explicit consent. You may withdraw your consent to marketing communications at any time by contacting our support team or by using the unsubscribe mechanism included in all marketing emails.

tt343 uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your tt343 account, authenticate your tt343 Login sessions, manage your account settings, and communicate essential account notices to you.
• Identity Verification (KYC): To verify your identity, age (21+), and Indonesian residency in compliance with our responsible gaming and anti-fraud obligations.
• Transaction Processing: To process deposits and withdrawals via your designated Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallets (OVO, DANA, GoPay, ShopeePay), and to maintain accurate financial records of all transactions in IDR.
• Platform Provision: To deliver the sportsbook, live casino, slots, and all other gaming products available on the tt343 Platform, and to personalize your gaming experience.
• Responsible Gaming: To monitor your gaming patterns for indicators of problem gambling behavior, to apply the responsible gaming limits and restrictions you have set, and to intervene proactively where our monitoring identifies a potential issue.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, collusion, bonus abuse, and other forms of platform abuse that could harm Members or the integrity of the Platform.
• Customer Support: To respond to your queries, resolve disputes, and improve the quality of our support service.
• Marketing Communications: Where you have given explicit consent, to send you personalized promotional offers, bonus notifications, and platform updates relevant to your interests as a tt343 Member.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and enforce our Terms & Conditions.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the Platform's functionality, performance, game selection, and user experience.

tt343 does not sell, rent, or commercially trade your personal data to any third party. We share your personal data only in the following limited circumstances:

• Payment Processors: Your transaction data is shared with the relevant Indonesian bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) to the extent necessary to process your deposit or withdrawal. These entities act as independent data controllers for their own platforms and are governed by their own privacy policies.
• Identity Verification Providers: Your KYC documents (such as KTP, passport, or proof of address) may be processed by third-party identity verification partners acting as data processors under binding data processing agreements with tt343.
• Game Studio Partners: Your gaming session data (anonymized game identifiers, bet amounts, and results) may be shared with our game studio partners — including Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, and Spribe — to the extent necessary to deliver their games and resolve game-specific technical disputes.
• Legal and Regulatory Authorities: tt343 will disclose your personal data to law enforcement agencies, regulatory bodies, or courts where it is legally required to do so, or where we reasonably believe that disclosure is necessary to prevent fraud, money laundering, or harm to individuals.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of tt343's business assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and the applicable privacy terms before your data is subject to a different privacy policy.

tt343 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in to your tt343 account, CSRF protection tokens, and load-balancing cookies. Without these cookies, the Platform cannot operate correctly.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming limit configurations — to provide a more personalized experience on the Platform.
• Analytics Cookies: tt343 uses anonymized analytics data to understand how Members navigate the Platform, which games are most popular, and where users encounter technical difficulties. This data is aggregated and does not identify individual Members.
• Security Cookies: These cookies support tt343's fraud detection and account security systems. They help identify unusual login patterns, detect bot activity, and flag potentially compromised sessions for review.

You may control non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair the Platform's core functionality, including your ability to log in and place bets. tt343 does not currently use cross-site tracking cookies or behavioral advertising cookies.

tt343 implements a multi-layered security framework to protect your personal data from unauthorized access, disclosure, alteration, and destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the tt343 Platform — including login credentials, personal profile data, and payment transaction details — is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Access Controls: Access to Member personal data within tt343's internal systems is restricted on a strict need-to-know basis. Staff with access to Member data are subject to confidentiality obligations and regular security training.
• Secure Password Storage: Member passwords are stored as salted cryptographic hashes. tt343 staff cannot view your password in plain text. You are encouraged to use a strong, unique password for your tt343 account and to enable any two-factor authentication options made available on the Platform.
• Payment Security: tt343 does not store full bank account numbers or card details on its servers. Payment processing is handled by regulated Indonesian financial institutions and e-wallet providers with their own PCI-DSS compliance frameworks.
• Intrusion Detection: tt343 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tt343 will notify affected Members without undue delay and will take all reasonable steps to mitigate the impact of the breach.

tt343 retains your personal data for the following periods, after which data is securely deleted or irreversibly anonymized:

• Account and Identity Data: Retained for the duration of your active membership and for a period of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations and to resolve any post-closure disputes.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping best practices and regulatory requirements applicable to online gaming platforms.
• Gaming Activity Data: Retained for a minimum of three (3) years from the date of each gaming session, for responsible gaming monitoring, dispute resolution, and platform integrity purposes.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with anti-money laundering compliance frameworks.
• Support Communications: Retained for two (2) years from the date of the interaction, to support the resolution of recurring or escalated queries.
• Responsible Gaming Data: Self-exclusion records are retained for a minimum of seven (7) years to ensure that self-excluded Members are not re-admitted to the Platform during their exclusion period or for a reasonable period thereafter.
• Marketing Preferences: Retained until you withdraw your consent to marketing communications, at which point your marketing opt-out preference will itself be retained to ensure no further communications are sent.

Where data is retained beyond the active membership period for legal or compliance reasons, access to that data is restricted to authorized compliance personnel only and is used solely for the purposes for which retention is justified.

As a tt343 Member, you have the following rights in relation to your personal data, which you may exercise by contacting our support team via live chat or by email at [email protected]:

• Right of Access: You have the right to request a copy of the personal data that tt343 holds about you, along with information about how it is being used. tt343 will respond to a valid access request within thirty (30) days.
• Right to Rectification: If any personal data held by tt343 about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain profile information directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that tt343 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that tt343 may be unable to comply with erasure requests where retention is required by law — for example, for AML record-keeping.
• Right to Restriction of Processing: You may request that tt343 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of that data is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of tt343's legitimate interests. tt343 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as receipt of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The tt343 Platform is strictly for adults aged 21 and above. tt343 does not knowingly collect personal data from individuals under the age of 21. The Platform's registration process requires users to confirm that they meet the minimum age requirement, and tt343 uses age verification checks as part of the KYC process to enforce this restriction.

If tt343 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted (subject to any mandatory legal retention requirements), and any deposits made will be returned to the payment method of origin after verification. Parents and legal guardians who believe that a minor may have registered on the Platform are encouraged to contact our support team immediately at [email protected].

The tt343 Platform may contain references to or integrations with third-party services, including game studio platforms (Evolution Gaming, Pragmatic Play, PG Soft, NetEnt, Microgaming, Spribe), payment gateways, and identity verification providers. These third-party services operate under their own independent privacy policies, and tt343 is not responsible for their data handling practices.

When you interact with a third-party service in connection with tt343 — for example, when you initiate a deposit via BCA's online banking portal or OVO's e-wallet interface — you are also subject to that third party's privacy policy. We encourage you to review the privacy policies of all third-party services you use in connection with your tt343 membership.

tt343 does not embed third-party advertising trackers, social media pixels, or third-party analytics scripts that share your personal data with advertisers or social networks. Any analytics data collected by tt343 is first-party and is used solely for internal Platform improvement purposes.

tt343 serves Members located in Indonesia, and our primary data processing infrastructure is designed to serve this market. In the course of operating the Platform — particularly in connection with game studio partnerships, cloud infrastructure, and identity verification services — your personal data may be transferred to and processed in jurisdictions outside of Indonesia.

Where such transfers occur, tt343 takes steps to ensure that your personal data receives an equivalent level of protection to that provided under this Policy. These steps may include:

• Entering into data processing agreements with receiving parties that incorporate standard contractual clauses providing appropriate data protection safeguards.
• Ensuring that receiving parties maintain certifications or adhere to frameworks that reflect equivalent data protection standards.
• Conducting transfer impact assessments where required to ensure that the laws of the receiving jurisdiction do not undermine the protections provided by the contractual arrangements in place.

By registering and using the tt343 Platform, you acknowledge that your personal data may be transferred internationally in the course of service delivery, subject to the safeguards described above.

tt343 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. When material changes are made, tt343 will notify registered Members by email to their registered address and/or by posting a prominent notice on the Platform, specifying the effective date of the revised Policy.

Minor amendments — such as typographical corrections, clarifications that do not materially affect your rights, or updates to contact details — may be made without advance notice and will take effect immediately upon publication on this page. The "Last Updated" date at the top of this Policy will be revised to reflect any such changes.

Your continued use of the tt343 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment to this Policy, you should cease using the Platform and may request account closure by contacting our support team. We recommend that you review this Policy periodically to stay informed of how tt343 protects your personal data.

If you have any questions, concerns, or complaints about this Privacy Policy or about how tt343 handles your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest way to reach our support team for urgent privacy concerns.
• Email: [email protected] — for formal data rights requests, privacy complaints, and detailed enquiries. Please use the subject line "Privacy Enquiry — [Your Account Username]" to ensure prompt routing to our data protection team. We aim to acknowledge all privacy-related emails within 48 hours and to provide a substantive response within 30 calendar days.
• WhatsApp: +62 811 343 0000 — for quick privacy questions via Indonesia's most widely used messaging platform.
• Support Hours: 08.00–24.00 WIB (Western Indonesia Time, UTC+7) for live chat and WhatsApp. Email privacy enquiries are monitored continuously.

tt343 is committed to resolving all privacy complaints fairly, transparently, and in a timely manner. If you submit a formal privacy complaint, tt343 will acknowledge receipt within 48 hours, investigate the matter thoroughly, and provide a written response outlining our findings and any remedial action taken within seven (7) business days for straightforward matters, or within thirty (30) calendar days for complex cases.