Your data. Your control. Our commitment.
We built tupai win around your account security and privacy. This policy explains exactly how we collect, store and protect your information — from your QRIS, DANA, OVO...
Privacy Policy — Full Details
tupai win collects personal information when you open your account, make deposits via DANA, OVO, GoPay or QRIS, and play across our live casino tables, slots and sportsbook. We use this data to verify your identity, process payouts, prevent fraud and improve your experience. We do not sell your data to third parties. In supported regions across Indonesia, your information is held
securely and processed in line with local and international data protection frameworks. You can request access to or deletion of your data at any time via our support team.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Questions & Data Requests
How We Keep Your Privacy Strong
SSL Encryption
All data in transit between your device and our servers is encrypted with 256-bit SSL technology. Payment details and personal information travel securely every time.
PCI DSS Compliance
We meet Payment Card Industry Data Security Standards. DANA, OVO, GoPay and QRIS transactions are tokenized and never stored in plain text on our systems.
Regular Audits
Independent security firms audit our infrastructure quarterly. We test encryption, access logs and fraud detection to catch vulnerabilities before they spread.
Fraud Detection
Our system monitors account activity in real time. Unusual logins, deposit patterns or withdrawal requests trigger verification checks to protect your account.
Limited Staff Access
Only designated team members can view customer data, and only for account support, fraud prevention or legal compliance. All access is logged and audited.
Indonesia Data Law
We align with Indonesian data protection regulations. Your information is processed transparently, stored securely and shared only with trusted payment processors and legal partners.
How Our Privacy Stacks Up
| Data Minimalism | We ask for only what we need: name, email, phone, ID and payment details. No unnecessary fields, no hidden third-party integrations. |
|---|---|
| Transparent Retention | Account data stays on file for the life of your membership. Closed accounts are held for 12 months for compliance, then securely deleted. |
| No Marketing Sell-Off | Your email and phone are never sold to marketers or resold to other platforms. We use them only for account notifications and policy updates. |
| Cookie Clarity | We use cookies for login persistence and fraud prevention. You can clear them anytime in your browser without losing your account access or balance. |
| Third-Party Limits | Payment processors (DANA, OVO, GoPay, QRIS) see transaction data only. Hosting and analytics partners see no personal names or payment details. |
| Breach Response | If a breach occurs, we notify affected accounts within 48 hours and provide step-by-step guidance to secure your account and reset credentials. |
| Policy Updates | Changes to this privacy policy are announced 30 days in advance. Material changes require your active consent before they take effect. |