Privacy Policy

The following terms have the meanings assigned below throughout this Privacy Policy:

t6com acts as the data controller in respect of Personal Data collected from Members and visitors to the Platform. As data controller, t6com determines the purposes and means by which your Personal Data is processed.

t6com operates under international licensing frameworks and maintains its principal data processing operations under the laws of its licensing jurisdiction. Where local data protection laws of the Member's country of residence apply — including any Indonesian regulations governing personal data protection — t6com is committed to respecting those obligations to the extent they are applicable to internationally operated online platforms.

t6com collects Personal Data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from trusted third-party sources (such as KYC verification providers). The categories of data we collect include:

3.1 Registration and Account Data

• Full legal name, date of birth, and gender.
• Residential address, city (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta), province, and postal code.
• Indonesian national identity card number (NIK / KTP number) or passport number, collected during KYC verification.
• Email address and Indonesian mobile phone number.
• Username and (hashed, non-readable) password.
• Preferred currency (IDR — Indonesian Rupiah).

3.2 Financial and Transaction Data

• Bank account numbers and account holder names for supported local banks: BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI (Bank Syariah Indonesia), OCBC NISP, Bank Permata, and Bank Danamon.
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Deposit and withdrawal history, including transaction amounts in IDR, timestamps, and payment method used.
• Wagering history, game session logs, bet amounts, and outcomes.
• Bonus credit and wagering-requirement fulfilment records.

3.3 KYC and Verification Documents

• Photographs or scanned copies of government-issued identity documents (KTP, passport, or SIM — Indonesian driver's licence).
• Proof-of-address documents such as utility bills, bank statements, or official correspondence.
• Selfie photographs taken for liveness-check purposes where required by our KYC process.
• Source-of-funds declarations or supporting documentation for high-value accounts.

3.4 Technical and Usage Data

• IP address, approximate geolocation (derived from IP), and ISP information.
• Device type, operating system, browser type and version.
• Session duration, pages visited, features used, click patterns, and navigation paths on the Platform.
• Game session identifiers and RNG certification logs.
• Error and crash reports submitted to our technical monitoring systems.

3.5 Communications Data

• Contents and timestamps of live-chat conversations, email correspondence, and support tickets submitted to t6com.
• Records of any formal complaints or dispute submissions.
• Marketing preference records, including opt-in and opt-out timestamps.

t6com processes your Personal Data only for specific, legitimate purposes. The table below maps each data category to its primary processing purpose:

• Account administration: Creating, managing, and securing your t6com account; verifying your identity (KYC); resetting passwords and managing account preferences.
• Transaction processing: Receiving deposits from and sending withdrawals to your verified bank accounts (BCA, BRI, BNI, Mandiri, etc.) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) in Indonesian Rupiah (IDR).
• Regulatory and legal compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations imposed by our licensing jurisdiction; responding to lawful requests from regulatory or law enforcement authorities.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, collusion, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, reliability, and features of the t6com Platform.
• Responsible gaming: Monitoring play patterns to identify potential problem gambling indicators; fulfilling self-exclusion and deposit-limit requests; contacting Members who may require support.
• Customer support: Responding to enquiries, resolving disputes, and maintaining records of communications for quality assurance.
• Marketing (with consent): Sending promotional emails, SMS messages, or push notifications about bonuses, new games, and seasonal offers — only where you have explicitly opted in to such communications.

t6com processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and t6com — including account registration, transaction processing, and customer support. Without this processing, we cannot provide the Platform's services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/CTF reporting obligations, KYC verification requirements, and any disclosure obligations imposed by competent regulatory or law enforcement authorities.
• Legitimate interests: Processing undertaken in pursuit of t6com's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, network security, responsible gaming monitoring, and improving Platform performance through aggregated analytics.
• Consent: Processing that is based solely on your freely given, specific, informed, and unambiguous consent — principally the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

t6com uses cookies and similar tracking technologies to operate the Platform securely and to understand how Members interact with our services. The categories of cookies we use are as follows:

• Strictly necessary cookies: These are essential to the Platform's operation — they enable you to log in, maintain your session, and process transactions securely. These cookies cannot be disabled without preventing core Platform functions from working.
• Functional cookies: These remember your preferences — such as your language or display settings — to provide a more personalised experience. They are set only when you interact with the relevant feature.
• Analytics cookies: These help us understand aggregate usage patterns — which pages are most visited, where users encounter errors, and how navigation flows can be improved. Data collected by analytics cookies is anonymised and aggregated before analysis.
• Marketing cookies: Where you have consented to marketing communications, certain cookies may be used to tailor promotional content to your preferences and to measure the effectiveness of our campaigns. These are only placed with your consent.

You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will impair the Platform's functionality. Withdrawing consent for analytics or marketing cookies will not affect your ability to use core Platform features.

t6com does not sell, rent, or commercially trade your Personal Data. We share Personal Data only in the limited circumstances described below, and always subject to appropriate contractual safeguards:

• KYC and identity verification providers: Third-party companies contracted to perform document authentication, liveness checks, and sanctions screening as part of our KYC process. These providers process your identity documents solely for verification purposes and are bound by strict data processing agreements.
• Payment processors and banking partners: Financial institutions and payment intermediaries (including those facilitating transfers with BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported channels) receive the minimum necessary transaction and account data to execute your deposits and withdrawals.
• Fraud prevention and AML screening services: Specialised third-party platforms used to screen transactions and accounts against watchlists, detect unusual patterns, and assist with regulatory compliance.
• Platform infrastructure providers: Cloud hosting, content delivery, database management, and cybersecurity providers whose services underpin the operation of the t6com Platform. These providers act solely as data processors under our instruction.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or a lawful request from a competent regulatory, government, or law enforcement body, t6com may disclose Personal Data. We will notify you of such disclosure where we are legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of t6com's business, Personal Data held at the time of the transaction may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

All Third-Party Processors engaged by t6com are contractually required to process Personal Data only for the specific purposes for which it was shared, to maintain appropriate technical and organisational security measures, and to delete or return the data once processing is complete.

As an internationally operated platform, t6com may transfer your Personal Data to countries other than your country of residence, including the jurisdiction in which t6com holds its operating licence and the locations where our Third-Party Processors maintain their infrastructure.

Where Personal Data is transferred internationally, t6com takes steps to ensure an adequate level of protection is maintained, including:

• Transferring data only to jurisdictions recognised as providing an adequate level of data protection, or
• Implementing standard contractual clauses or equivalent data transfer mechanisms with the recipient entity, or
• Ensuring the recipient is bound by binding corporate rules, an approved code of conduct, or a certification scheme that provides equivalent protection.

t6com retains Personal Data only for as long as is necessary for the purpose it was collected, or as required to comply with applicable legal, regulatory, and record-keeping obligations. The following retention guidelines apply:

• Active account data: Retained for the full duration of your membership and for a period of five (5) years following account closure, to satisfy AML record-keeping requirements and to resolve any post-closure disputes.
• KYC documents: Retained for a minimum of five (5) years from the date of verification completion, or longer if required by the laws of our licensing jurisdiction or by a regulatory order.
• Transaction records: Retained for five (5) years from the date of each transaction, in line with standard financial record-keeping obligations.
• Communications and support records: Live-chat transcripts, email correspondence, and support tickets are retained for three (3) years from the date of the last interaction, unless a longer period is required by an ongoing dispute or legal proceeding.
• Marketing preference records: Opt-in and opt-out records are retained for the duration of your membership and for three (3) years thereafter as evidence of your consent choices.
• Technical logs and cookies: Session logs and analytics data are retained in anonymised, aggregated form for up to two (2) years. Non-anonymised technical logs are retained for up to 90 days.

At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. If you request deletion of your account prior to the end of a mandatory retention period, we will restrict processing of your data to the minimum necessary for compliance purposes only.

Depending on your jurisdiction and the legal basis on which we process your data, you may hold some or all of the following rights in relation to your Personal Data held by t6com. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Request — [Right Type]".

t6com will respond to all data subject requests within thirty (30) calendar days of receipt. In complex cases, or where a large volume of requests is received simultaneously, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it. Requests are processed free of charge. If a request is manifestly unfounded or excessive, t6com reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.

The t6com Platform is strictly intended for adults. You must be at least 21 years of age 21+ to register an account and use any of our services. This age threshold reflects t6com's policy for its primary Indonesian market and aligns with the standard applied to adult entertainment platforms for higher-income and international-brand-preference audiences.

t6com does not knowingly collect Personal Data from any person under the age of 21. If we become aware — through the KYC process, a parental notification, or any other means — that a person under 21 has registered an account or submitted Personal Data, we will:

• Immediately suspend and permanently close the account.
• Void all wagers placed and forfeit all associated winnings.
• Refund any real-money deposits to the original payment source, net of any applicable processing costs.
• Delete all Personal Data associated with the underage registration within 30 days, retaining only the minimum records required to document our compliance actions.

If you are a parent or guardian and have reason to believe that a person under 21 in your household has accessed t6com, please contact us immediately at [email protected]. We take all such reports seriously and will act promptly.

t6com implements a layered security framework designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• Transport security: All communication between your browser or app and the t6com servers is encrypted using TLS 1.2 or higher (256-bit SSL). HTTP connections are automatically redirected to HTTPS.
• Data-at-rest encryption: Sensitive Personal Data stored in our databases — including KYC documents, financial account details, and identity numbers — is encrypted at rest using AES-256 encryption.
• Password security: Member passwords are never stored in plain text. They are processed through an industry-standard one-way hashing algorithm with unique salt values.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA on their accounts for an additional layer of access security. t6com may require 2FA for high-value withdrawal requests.
• Access controls: Internal access to Personal Data is restricted on a need-to-know basis. t6com staff access is governed by role-based access controls, and all access to sensitive data is logged and audited.
• Penetration testing and vulnerability management: t6com conducts regular security assessments, including penetration tests conducted by qualified third-party security specialists, to identify and remediate vulnerabilities in our systems.
• Incident response: t6com maintains a documented data breach response plan. In the event of a breach that poses a material risk to Members' rights, affected individuals and the relevant supervisory authority will be notified within the timeframe required by applicable law.

The t6com Platform may contain links to third-party websites, game provider demonstration pages, or external resources for informational purposes. Once you navigate away from t6com to a third-party site, this Privacy Policy no longer applies. t6com has no control over, and accepts no responsibility for, the privacy practices, content, or data handling of any third-party website.

We encourage you to review the privacy policy of any third-party site you visit before submitting any Personal Data. The inclusion of a link on the t6com Platform does not constitute an endorsement of the linked site's privacy or security practices.

t6com reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The "Last updated" date at the top of this page will be revised with each update.

For changes that materially affect your rights — such as a new category of data we collect, a new purpose for which we process existing data, or a change in how long we retain your records — t6com will notify active Members by email at least fourteen (14) days before the changes take effect, where practicable.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you may close your account in accordance with Section 13 of our Terms & Conditions and submit a data erasure request under Section 10 of this Policy.

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how t6com has handled your Personal Data, please contact us using the details below. All contact information is displayed as plain text and is not a clickable link.

If you are not satisfied with t6com's response to your complaint or data request, you have the right to escalate the matter to the relevant supervisory authority or data protection regulator in your jurisdiction. t6com will cooperate fully with any such supervisory investigation.