Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by tarbol through our website at https://tarbol.cam, mobile applications (if applicable), and any related services. By creating an account with tarbol or using our platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

tarbol operates as an online betting platform serving Indonesian players with sports betting, live casino games, slots, togel (numbers lottery), and other gambling products. We are committed to compliance with applicable data protection laws and international standards for privacy and security.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of tarbol services. The English-language version of this Privacy Policy is the authoritative text. In the event of any conflict between the English version and any translation, the English version shall prevail.

2. Data Controller Information

tarbol is the data controller responsible for your personal information collected through our platform. For all privacy-related inquiries, data access requests, or concerns about how your information is handled, please contact us at:

• Email: [email protected] (plain text only, not a clickable link)
• Live Chat: Available 24/7 through the tarbol website
• Postal Address: tarbol Data Protection Officer, tarbol Gaming Platform (address available upon request through support channels)

We aim to respond to all privacy inquiries within 72 hours and to complete data access or deletion requests within 30 days as required by applicable data protection regulations.

3. Personal Data We Collect

tarbol collects various types of personal data depending on how you interact with our platform. We only collect data that is necessary for providing our services, ensuring security, meeting legal obligations, or improving user experience.

3.1 Information You Provide Directly

When you register an account, verify your identity, or use tarbol services, you provide us with the following information:

• Account registration data: Full legal name, date of birth, gender, email address, mobile phone number, residential address, username, and password.
• Identity verification (KYC) documents: Government-issued photo identification such as Indonesian National Identity Card (KTP Nasional) or passport, proof of address documents (utility bills, bank statements), and selfie verification photos. These documents are required to comply with anti-money laundering (AML) regulations and responsible gaming standards.
• Payment information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals, e-wallet account identifiers (OVO, DANA, GoPay phone numbers), transaction receipts, and deposit/withdrawal history. We do not store full credit/debit card numbers; payment processing is handled securely through certified payment gateways.
• Communication data: Messages you send through our live chat, emails to customer support, survey responses, and feedback forms.
• Responsible gaming settings: Self-imposed deposit limits, loss limits, session time limits, reality check preferences, and self-exclusion requests.

3.2 Information We Collect Automatically

When you access tarbol, our systems automatically collect certain technical and usage data:

• Device information: Device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, device identifiers.
• Connection data: IP address, internet service provider, approximate geographic location (city/region level, not precise GPS coordinates), connection timestamp.
• Usage data: Pages visited, features used, games played, bet history (stakes, odds, outcomes), session duration, click patterns, navigation paths through our platform.
• Cookies and tracking technologies: We use cookies, web beacons, and similar technologies to remember your preferences, authenticate your login sessions, analyze platform performance, and prevent fraud. You can control cookie settings through your browser, though disabling certain cookies may limit platform functionality.

3.3 Information from Third Parties

In limited circumstances, we may receive personal data from external sources:

• Payment processors: Confirmation of successful deposits/withdrawals and payment method verification from Indonesian banks and e-wallet providers.
• Identity verification services: Automated KYC checks that compare your submitted documents against government databases to confirm authenticity.
• Fraud prevention services: Risk assessment data from specialized providers that help us detect suspicious activity, duplicate accounts, and potential fraud.

4. How We Use Your Personal Data

tarbol uses your personal data for the following purposes, always ensuring that our use is lawful, fair, and transparent:

4.1 Account Management and Service Provision

• Creating and managing your tarbol account.
• Processing your deposits, bets, and withdrawal requests.
• Providing customer support and responding to your inquiries.
• Sending important account notifications (successful deposits, withdrawal approvals, account security alerts, changes to terms or policies).
• Enabling platform features like session history, bet tracking, and account balance monitoring.

4.2 Identity Verification and Fraud Prevention

• Verifying your identity and age (21+ requirement) to comply with legal obligations.
• Detecting and preventing fraudulent activity, money laundering, underage gambling, and account abuse.
• Identifying duplicate accounts and bonus abuse attempts.
• Monitoring betting patterns to detect unusual activity that may indicate problem gambling or manipulation.
• Complying with "Know Your Customer" (KYC) and Anti-Money Laundering (AML) regulations.

4.3 Legal and Regulatory Compliance

• Meeting obligations under international gaming licenses and Indonesian laws applicable to online betting operators.
• Responding to lawful requests from regulatory authorities, law enforcement, or courts.
• Maintaining records required by gambling regulations (typically 5-7 years for financial transactions and betting history).
• Enforcing our Terms & Conditions and investigating violations.

4.4 Responsible Gaming and Player Protection

• Implementing deposit limits, loss limits, and self-exclusion tools you request.
• Identifying potential signs of problem gambling behavior and offering support resources.
• Ensuring minors (under 21 years of age) cannot create accounts or gamble on tarbol.
• Providing access to your gambling activity history so you can monitor your own behavior.

4.5 Marketing and Communications (With Your Consent)

• Sending promotional offers, bonus announcements, and personalized recommendations based on your betting preferences (only if you opt in to marketing communications).
• Conducting surveys to gather feedback and improve our services.
• Informing you about new games, features, or platform updates.

Important: You can opt out of marketing emails at any time by clicking the "unsubscribe" link in any promotional message or updating your communication preferences in your account settings. Opting out of marketing does not affect essential service communications (transaction confirmations, security alerts, policy changes).

4.6 Platform Improvement and Analytics

• Analyzing usage patterns to understand how players interact with our platform and which features are most popular.
• Improving user interface design, navigation, and overall user experience.
• Identifying and fixing technical bugs or performance issues.
• Optimizing game selection, odds, and platform features based on aggregated, anonymized player data.

5. Legal Basis for Data Processing

Under applicable data protection laws, tarbol must have a lawful basis for processing your personal data. We process your data based on one or more of the following legal grounds:

• Contractual necessity: Processing is necessary to fulfill our contract with you (providing betting services as outlined in our Terms & Conditions). Without this data, we cannot provide you with an account or process your bets and transactions.
• Legal obligation: Processing is required to comply with laws and regulations, including age verification (21+ enforcement), KYC/AML checks, record-keeping requirements, and responding to lawful government requests.
• Legitimate interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, service improvement, and analytics, provided these interests do not override your privacy rights.
• Consent: For optional processing like marketing communications or advanced analytics, we obtain your explicit consent. You can withdraw consent at any time without affecting our ability to process data on other legal bases.

6. How We Protect Your Personal Data

tarbol takes data security seriously and employs industry-leading technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Security Measures

• 256-bit SSL encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology, the same standard used by banks and financial institutions.
• Encrypted data storage: Sensitive data including passwords, KYC documents, and payment information is encrypted at rest using advanced encryption standards (AES-256).
• Secure servers: Our servers are hosted in certified data centers with physical security, redundant power supplies, fire suppression, and 24/7 monitoring.
• Firewalls and intrusion detection: Network-level firewalls and intrusion detection systems monitor and block suspicious traffic attempting to access our systems.
• Regular security audits: Third-party cybersecurity firms conduct penetration testing and vulnerability assessments on our platform at least annually.

6.2 Organizational Security Measures

• Access controls: Only authorized tarbol employees with a legitimate business need can access personal data. Access is granted on a role-based, least-privilege basis.
• Employee training: All staff handling personal data receive training on privacy regulations, data protection best practices, and security protocols.
• Confidentiality agreements: Employees, contractors, and third-party service providers are bound by strict confidentiality agreements.
• Incident response plan: We maintain a documented data breach response plan to quickly detect, contain, and remediate any security incidents.

7. Data Sharing and Third-Party Disclosure

tarbol does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We only share your data in the following limited circumstances:

7.1 Service Providers and Business Partners

We work with trusted third-party companies that help us operate tarbol. These service providers have access to personal data only as necessary to perform their functions and are contractually obligated to protect your information:

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers (OVO, DANA, GoPay, etc.) process deposits and withdrawals. They receive payment-related information but not your full betting history.
• Identity verification services: Specialized KYC providers verify the authenticity of your government-issued ID against official databases.
• Fraud prevention providers: Security companies analyze transaction patterns to detect and prevent fraud, account takeovers, and bonus abuse.
• Cloud hosting providers: Our platform infrastructure is hosted on secure cloud servers managed by certified data center operators.
• Customer support platforms: Live chat and support ticket systems may be provided by third-party software to help us deliver 24/7 assistance.

7.2 Legal and Regulatory Disclosure

We may disclose your personal data when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or lawful requests from regulatory authorities.
• Enforce our Terms & Conditions or investigate potential violations.
• Protect the rights, property, or safety of tarbol, our users, or the public (e.g., preventing fraud or criminal activity).
• Respond to government inquiries related to national security, law enforcement, or taxation.

In such cases, we will disclose only the minimum information necessary and, where legally permitted, will attempt to notify you of the disclosure unless prohibited by law.

7.3 Business Transfers

If tarbol is involved in a merger, acquisition, asset sale, or bankruptcy, your personal data may be transferred to the successor entity. In such an event, we will notify you via email or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy. You will have the opportunity to delete your account before the transfer if you do not wish your data to be transferred to the new owner.

7.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. For example, we might publish industry reports stating that "60% of tarbol users prefer bandar bola betting" or share aggregated usage statistics with game providers to help them optimize their offerings. This anonymized data is not subject to this Privacy Policy because it does not constitute personal information.

8. Data Retention

tarbol retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Data Type	Retention Period	Reason for Retention
Account registration data	Duration of account + 5 years	Legal and regulatory compliance, dispute resolution
KYC documents	Duration of account + 7 years	Anti-money laundering (AML) regulations
Transaction history	Duration of account + 7 years	Financial audits, tax reporting, dispute resolution
Betting history	Duration of account + 5 years	Regulatory compliance, fraud investigation
Customer support communications	2 years from last contact	Service improvement, dispute resolution
Marketing consent records	3 years from consent withdrawal	Proof of consent compliance

After the applicable retention period expires, we securely delete or anonymize your data so it can no longer be associated with you. You can request early deletion of your account and data at any time (subject to legal retention requirements), as explained in the "Your Privacy Rights" section below.

9. Your Privacy Rights

You have the following rights regarding your personal data held by tarbol. To exercise these rights, contact our support team at [email protected] or through live chat:

9.1 Right to Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a commonly used electronic format (PDF or CSV) within 30 days of your request. You can request this data once per year free of charge; additional requests may incur a reasonable administrative fee.

9.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings (email, phone number, address). For changes to your name or date of birth, contact support with updated KYC documentation.

9.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in the following circumstances:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw consent (where consent was the legal basis for processing).
• You object to processing and there are no overriding legitimate grounds for us to continue.
• Your data has been unlawfully processed.

However, we may retain certain data when required by law (e.g., financial records for tax purposes, KYC documents for AML compliance) even after deletion requests. We will explain any limitations when responding to your request.

9.4 Right to Restrict Processing

You can request that we limit how we use your personal data if:

• You contest the accuracy of the data (we will restrict processing while verifying accuracy).
• Processing is unlawful but you prefer restriction over deletion.
• We no longer need the data but you require it for legal claims.
• You have objected to processing and we are verifying whether our legitimate grounds override your rights.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and transmit it to another service provider. This right applies only to data you provided to us with consent or for contract performance, not to data we derived or generated.

9.6 Right to Object

You can object to processing based on our legitimate interests (such as marketing or analytics) at any time. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if processing is necessary for legal claims.

9.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing emails), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal, nor does it affect processing on other legal bases.

9.8 Right to Lodge a Complaint

If you believe tarbol has mishandled your personal data or violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first so we can attempt to resolve the issue directly.

10. Cookies and Tracking Technologies

tarbol uses cookies, web beacons, and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and improve security. Cookies are small text files stored on your device that allow us to recognize you across sessions.

10.1 Types of Cookies We Use

• Essential cookies: Required for basic platform functionality like logging in, maintaining your session, and processing bets. You cannot opt out of these cookies as the platform cannot function without them.
• Performance and analytics cookies: Help us understand how users interact with tarbol (which pages are most visited, how long sessions last, error rates). This data is aggregated and anonymized.
• Functionality cookies: Remember your preferences such as language, timezone, and display settings to provide a personalized experience.
• Marketing cookies: Track your activity to deliver personalized promotions and measure the effectiveness of our campaigns. These cookies are only used with your consent.

10.2 Managing Cookies

Most web browsers allow you to control cookies through settings. You can configure your browser to reject all cookies, accept only certain cookies, or notify you when a cookie is set. Note that disabling essential cookies will prevent you from using critical platform features like logging in or placing bets. Instructions for managing cookies vary by browser:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Microsoft Edge: Settings → Cookies and site permissions

11. International Data Transfers

tarbol primarily serves Indonesian players and stores data in secure facilities within or near Indonesia to ensure fast performance and comply with local regulations. However, some of our service providers (cloud hosting, payment processors, security tools) may operate servers or data centers in other countries.

When we transfer your personal data outside Indonesia, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by data protection authorities.
• Transfers to countries recognized as providing adequate data protection.
• Certification frameworks like Privacy Shield (where applicable).

In all cases, we require third-party recipients to implement security measures equivalent to those we maintain and to process your data only as instructed by us.

12. Children's Privacy

tarbol is strictly an adult platform. We do not knowingly collect personal data from individuals under 21 years of age (the legal gambling age in Indonesia). Our Terms & Conditions explicitly prohibit underage users from creating accounts. During KYC verification, we confirm that all users are 21 or older through government-issued ID checks.

If we discover that we have inadvertently collected personal data from someone under 21, we will immediately delete the account, erase all associated data, and take steps to prevent future underage access. Parents or guardians who believe a minor has provided personal data to tarbol should contact us immediately at [email protected] so we can investigate and take corrective action.

13. Changes to This Privacy Policy

tarbol may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify you by:

• Updating the "Last Updated" date at the top of this document.
• Sending an email notification to your registered email address.
• Displaying a prominent notice on our website and within your account dashboard.

Your continued use of tarbol after notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you should close your account before the effective date of the changes. For significant changes that expand our use of your data, we will seek your explicit consent where required by law.

We recommend reviewing this Privacy Policy periodically (at least annually) to stay informed about how we protect your information. You can always find the current version at https://tarbol.cam/privacy-policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how tarbol handles your personal data, please contact our Data Protection team:

• Email: [email protected] (please include "Privacy Inquiry" in the subject line)
• Live Chat: Available 24/7 through the tarbol website (ask to speak with a Data Protection specialist)
• Response Time: We aim to respond to all privacy inquiries within 72 hours and resolve complex requests within 30 days.

Our customer support team includes staff trained in data protection regulations who can assist you in either English or Bahasa Indonesia. For formal data subject access requests, right to erasure requests, or complaints, we recommend using email for documentation purposes.