Your privacy matters at t200m. This Privacy Policy explains precisely what personal data we collect when you use our platform, how we use and protect that data, who we share it with, and what rights you hold over your own information. We encourage you to read this document in full before registering an account.
A plain-English summary of the most important privacy principles that govern how t200m handles your data. The full legal clauses follow below and take precedence in all cases.
All data exchanged between your browser and the t200m platform is encrypted using industry-standard TLS/SSL protocols. Your personal and financial information is never transmitted in plaintext over any network.
t200m does not sell, rent, or trade your personal data to third-party marketing organisations. Data shared with third parties is limited strictly to what is necessary for service delivery, compliance, and fraud prevention.
We collect only the personal data that is genuinely necessary to operate your account, process transactions, verify your identity, and comply with applicable regulatory obligations. We do not collect data beyond these purposes.
You have the right to access, correct, and request deletion of your personal data at any time, subject to applicable legal retention obligations. Submit any data rights request by emailing our support team directly.
t200m's data practices are designed to respect the privacy expectations of Indonesian players, including the handling of national identity data (KTP), local bank and e-wallet account details, and mobile contact information.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, plus any additional period required by law or regulation. Account data is typically retained for a minimum of five years post-closure.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
This Privacy Policy applies to all Personal Data collected, processed, or stored by t200m in connection with your use of the Platform, including during the account registration process, while placing wagers, during KYC verification, when contacting customer support, and during any other interaction with t200m's services.
t200m acts as the Data Controller in respect of all Personal Data you provide directly to us or that we collect automatically through your use of the Platform. Where t200m engages third-party Data Processors (for example, payment gateway providers or identity verification services), those processors act solely on t200m's instructions and are contractually bound to process your data only for the purposes described in this Policy.
t200m collects the following categories of Personal Data in the course of operating the Platform and providing Services to you:
t200m collects Personal Data through the following channels:
| Collection Method | Examples |
|---|---|
| Direct submission by you | Registration form, KYC document upload, support contact form, deposit/withdrawal requests |
| Automated platform activity | Login events, game rounds, bet placement and settlement, session data |
| Technical systems | Cookies, server logs, IP address capture, device fingerprinting |
| Third-party sources | Payment gateway transaction confirmations (BCA, BRI, OVO, DANA, GoPay, etc.), KYC verification partner data, fraud-screening services |
| Publicly available sources | Sanctions lists, politically exposed persons (PEP) databases, publicly available social media profiles used for fraud investigation purposes only |
t200m processes your Personal Data only for defined, legitimate purposes. The table below sets out each processing purpose and the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Processing deposits and withdrawals in IDR | Performance of contract |
| Identity verification (KYC) and age verification (21+) | Legal obligation; performance of contract |
| Fraud prevention and anti-money-laundering (AML) screening | Legal obligation; legitimate interests |
| Responsible gaming monitoring and intervention | Legal obligation; legitimate interests |
| Customer support and dispute resolution | Performance of contract; legitimate interests |
| Platform security and technical operations | Legitimate interests |
| Sending promotional and bonus communications (where opted in) | Consent |
| Analytics and platform improvement | Legitimate interests (using anonymised or aggregated data where possible) |
| Compliance with applicable law and regulatory reporting | Legal obligation |
t200m does not sell your Personal Data. We share your data only in the circumstances and with the categories of recipient described below, and only to the extent necessary for the relevant purpose:
To process your deposits and withdrawals in IDR, t200m shares necessary transaction data (such as account holder name, transaction amount, and bank or e-wallet account identifier) with the relevant payment service providers, including local bank transfer processors and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers are not permitted to use your data for any purpose other than processing the specific transaction.
To fulfil our identity verification obligations, t200m works with specialist KYC and AML compliance service providers. Your identity documents and associated data may be processed by these partners strictly for the purpose of verifying your identity and screening against sanctions and PEP databases.
Game studios supplying content to the t200m Platform (including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, and others) may receive technical session data (such as a session token and account tier) necessary to render and operate their games within the t200m environment. These studios do not receive your full personal profile or financial data.
t200m's Platform is hosted on cloud infrastructure provided by third-party technology companies. These providers process Personal Data solely as Data Processors acting on t200m's instructions and under appropriate contractual data protection agreements.
t200m may disclose Personal Data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law or a valid legal order. In such cases, t200m will disclose only the minimum data required and will, where legally permissible, notify you of such disclosure.
In the event of a merger, acquisition, restructuring, or sale of all or part of t200m's business, Personal Data held by t200m may be transferred to the acquiring or successor entity as part of the transaction. You will be notified of any such transfer and any consequential changes to this Privacy Policy at least 30 days before they take effect.
t200m's operations span multiple jurisdictions, and your Personal Data may be transferred to, stored in, or processed in countries other than Indonesia. This may include countries where our cloud infrastructure, game studio partners, or KYC service providers are located.
Where such transfers occur, t200m takes steps to ensure that an adequate level of protection is applied to your Personal Data, including through the use of contractual safeguards with the relevant recipients. By using the t200m Platform, you acknowledge and consent to such international transfers of your Personal Data as described in this Policy.
t200m uses cookies and similar technologies on the Platform to enhance your experience, maintain session security, and support our analytics and fraud prevention systems. The categories of cookies we use are as follows:
| Cookie Category | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing, remembering your login state | Session / up to 24 hours |
| Functional | Remembering your language preference, display settings, and responsible gaming tool configurations | Up to 12 months |
| Analytics | Aggregated, anonymised data on page visits, feature usage, and navigation paths — used to improve the Platform | Up to 24 months |
| Fraud Prevention | Device fingerprinting and behavioural signals used to detect suspicious login activity and potential multi-account violations | Up to 12 months |
Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform. You may manage functional and analytics cookies through your browser settings. Note that disabling certain cookies may impair Platform functionality, including your ability to maintain a login session.
t200m implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Despite these measures, no system of security is completely impenetrable. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, t200m will notify affected players without undue delay and take all reasonable steps to contain the breach and mitigate its impact.
t200m retains your Personal Data for the periods set out below, after which data is securely deleted or anonymised:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation (AML / compliance) |
| KYC verification documents | Duration of account + 5 years post-closure | Legal obligation |
| Financial transaction records | Duration of account + 5 years post-closure | Legal obligation (financial records) |
| Gaming activity logs | Duration of account + 3 years post-closure | Legitimate interests (dispute resolution) |
| Support interaction records | 3 years from the date of interaction | Legitimate interests (dispute resolution) |
| Marketing preference records | Until consent is withdrawn, then deleted within 30 days | Consent |
| Technical / device logs | 12 months from collection | Legitimate interests (security) |
Where t200m is required by applicable law to retain data for a longer period than set out above, the longer statutory retention period applies. On expiry of the applicable retention period, Personal Data is either securely deleted from t200m's systems or rendered permanently anonymous such that it can no longer be associated with any identifiable individual.
As a data subject, you hold the following rights with respect to your Personal Data held by t200m. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will respond within 30 days of receiving a valid request.
Right of Access Request a copy of all Personal Data we hold about you, together with information about how it is being processed.
Right to Rectification Request correction of any inaccurate or incomplete Personal Data we hold about you.
Right to Erasure Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restriction Request that we restrict processing of your Personal Data while a rectification or objection request is being considered.
Right to Portability Request a copy of Personal Data you have provided to us in a structured, machine-readable format for transfer to another service provider.
Right to Object Object to processing of your Personal Data carried out on the basis of legitimate interests, including for direct marketing purposes.
The t200m Platform is strictly for adults aged 21 years and older. t200m does not knowingly collect Personal Data from any person under the age of 21. If you are under 21 years of age, you must not access the Platform, create an account, or submit any Personal Data to t200m.
If t200m becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has submitted Personal Data to t200m, please notify us immediately at [email protected].
The t200m Platform may contain references to third-party game studios, sports leagues, and payment providers. This Privacy Policy applies solely to the t200m Platform and the data collected directly by t200m. t200m is not responsible for the privacy practices of any third-party service providers, game studios, or other external entities, even where links to or integrations with those entities exist within the Platform. We encourage you to review the privacy policies of any third-party service you access in connection with your use of t200m.
t200m reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. We will notify registered players of material changes by posting a prominent notice on the Platform or by sending an email to your registered address at least 7 days before the changes take effect, except where a shorter notice period is required by law.
The version of this Privacy Policy published on the t200m Platform at any given time is the current operative version. The date of the most recent update is displayed at the top of this page. We recommend that you review this Privacy Policy periodically to stay informed of how we protect your data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way t200m handles your Personal Data, please reach out to us through any of the following channels:
This Privacy Policy was last reviewed and updated on 1 January 2026. The version published on the t200m Platform at any given time is the current and operative version.
You've reviewed how t200m safeguards your data. Our platform is secure, SSL-encrypted, and internationally regulated. Ready to explore the casino, back your favourite team, or spin the reels?
21+ only. Gambling involves financial risk. Please play responsibly. Full Terms & Conditions apply.