tuturu Privacy Policy

This page describes what data we collect when you use tuturu, how we protect it, and your rights regarding your information. We at tuturu take data security seriously — your email, phone number, payment details, and game history are encrypted and stored securely on our servers.

When you create a tuturu account, fund it via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or mobile banking, local payment, online payment, e-wallet transfers, and engage with our slots, live-dealer tables, sports markets, or esports games, you share personal and financial information with us. We use this information only to operate your account, process your deposits and withdrawals, verify your identity, and comply with applicable law.

Our tuturu privacy policy applies to all users regardless of location — whether you access from Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, or another region where our services are available. We do not track you across third-party websites, and we do not sell your data to advertisers. Your privacy on tuturu is protected by encryption and strict internal access controls.

What Data We Collect on tuturu

We collect the following information when you use tuturu:

Account information: Your legal name, date of birth, email address, and phone number. We use this to verify your identity and set up your account.
Identity documents: Your government-issued ID (national ID, passport, or driving licence), and sometimes a selfie holding that ID. We store these securely for Know Your Customer (KYC) verification.
Payment information: When you deposit via QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, we collect transaction records. We do not store your full card or bank account number — we use tokenisation so your financial data remains protected.
Game activity: Your tuturu balance, deposit history, withdrawal history, game results, and bet amounts. We retain this data for dispute resolution and regulatory compliance.
Device and usage: Your device type (Android, iOS, desktop), browser type, IP address, and pages you visit on tuturu. We use this to detect fraud, diagnose technical issues, and improve our platform.
Communication records: If you contact our support team via in-app chat or email, we store your messages, our responses, and any attachments you send.

Cookies: Our tuturu platform uses cookies to maintain your login session, remember your preferences, and measure site traffic. Cookies are small text files stored on your device. You can disable cookies in your browser settings, but some tuturu features may not work correctly if you do.

How We Use Your Data on tuturu

We at tuturu use your data only for legitimate business and legal purposes:

Account management: We use your name and contact information to set up your account, send you login links, and notify you of account activity.
Payment processing: We use your payment details to process deposits and withdrawals. Your bank or e-wallet provider sees your transaction but does not access your tuturu balance or game history.
Identity verification: We verify your identity to comply with anti-money-laundering (AML) and Know Your Customer (KYC) regulations. This protects both you and us against fraud.
Dispute resolution: If a game outcome or transaction is disputed, we review your tuturu history to investigate. We may request additional information from you.
Fraud detection: We monitor your IP address, device, login patterns, and betting behavior for signs of fraud, hacking, or collusion. If we detect unusual activity, we may temporarily lock your account and ask for verification.
Legal compliance: We use your data to comply with local law, respond to government requests, and report suspicious activity to relevant authorities.
Platform improvement: We analyze how users interact with tuturu to identify bugs, improve performance, and design better features.

We do not use your tuturu data for marketing to third parties, and we do not sell your information. We do not share your game history, balance, or deposit records with advertisers. Any tuturu communication you receive is generated only by our team.

Our tuturu platform relies on third-party services to operate. When you use tuturu, your data is processed by:

Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and online payment, e-wallet, mobile banking, local payment. They process your transactions and see your deposit or withdrawal request. Each processor has its own privacy policy.
Live-dealer studios: Our live casino games are streamed from multi-camera studios run by licensed providers. These studios see your bets and game activity. We contractually require them to maintain confidentiality.
Cloud server providers: Our tuturu servers may be hosted outside your country (e.g., in Singapore, Malaysia, or Australia). These providers access our database but do not access individual user data directly. We contractually require them to keep your data encrypted.
Analytics providers: We use tools to measure tuturu traffic, identify broken links, and understand user behavior. These tools do not have access to your account balance, payment details, or game history — only aggregated usage statistics.
Compliance and AML services: We use third-party verification services to check your identity against sanction lists and fraud databases. These services see your name, ID number, and date of birth but not your tuturu balance or game activity.

We have data-processing agreements with all third parties to ensure they handle your tuturu data securely and confidentially. If you wish to know which third parties process your data or request that we limit their access, contact our support team.

Note: Our cloud servers may be located outside Indonesia. By using tuturu, you acknowledge that your data may be processed outside your jurisdiction. We apply the same security standards regardless of server location.

Data Retention on tuturu

We at tuturu retain your data for different periods depending on its type:

Account information: We retain your name, email, and phone number as long as your tuturu account is active. If you close your account, we retain this data for one year to handle disputes.
Identity documents: We retain your ID photo and verification documents for seven years after your tuturu account closes to comply with AML regulations. We cannot delete this data on request.
Payment records: We retain your deposit and withdrawal history indefinitely for regulatory compliance and dispute resolution.
Game history: We retain your tuturu game results, bets, and balance history indefinitely for dispute resolution. You can review your game history anytime in your account.
Support chat: We retain your tuturu support chat transcripts for one year to resolve complaints and improve our service.
Cookies: Session cookies expire when you log out of tuturu. Analytics cookies expire after 12 months.

Your Rights on tuturu

We at tuturu recognize your right to access and control your personal data. You may:

Request a copy: Contact our support team and request a copy of all your tuturu data in a readable format. We provide it within 30 days.
Update your information: Log into your tuturu account and update your email, phone number, or password anytime.
Close your account: You may close your tuturu account by contacting our support team. We delete your account from active systems but retain verification documents and transaction records for legal compliance.
Opt out of cookies: You may disable analytics cookies in your browser. Your tuturu login session requires essential cookies and cannot be disabled.
Dispute data accuracy: If you believe your tuturu data is incorrect, contact our support team with details. We investigate and correct errors within five business days.

We cannot delete your tuturu game history, payment records, or ID documents because these are required by law. If you request deletion of data we must retain, we will explain the legal reason why we cannot comply.

Security of Your tuturu Data

We at tuturu use industry-standard encryption to protect your data. All communication between your device and our tuturu servers is encrypted using SSL (Secure Sockets Layer). Your password is hashed so even our staff cannot read it. Your payment information is tokenised so we do not store full card or bank details.

Our tuturu servers are protected by firewalls, intrusion-detection systems, and regular security audits. We limit employee access to your data on a need-to-know basis. We train our staff on data confidentiality and require them to sign confidentiality agreements.

Despite these measures, no online system is completely secure. If you suspect a breach — for example, you receive a tuturu email you did not request or see unauthorised activity in your account — contact our support team immediately. We will investigate and take corrective action.

Children's Data on tuturu

Our tuturu platform is not intended for users under the legal age of majority in their jurisdiction. We do not knowingly collect data from children. If we discover that a tuturu account belongs to a child, we will close the account and delete the child's data (except where we must retain it by law). If you believe a child has opened a tuturu account, contact our support team immediately.

Contact Us About Your tuturu Data

If you have questions about our tuturu privacy policy, wish to request a copy of your data, or believe your privacy rights have been violated, contact our support team:

In-app chat: Click the Help icon in your tuturu account (if you are logged in). Our team responds during 08:00–23:00 Jakarta time daily.
Email: Send your privacy inquiry to our support email address. We respond within five business days.

Our tuturu privacy policy may change as we update our systems or comply with new laws. We notify you of material changes via email or in-app message. Continued use of tuturu after a policy update means you accept the new policy. This policy was last updated and is effective as of its publication date.