Last Updated: January 15, 2026

Your Privacy Matters

This Privacy Policy applies to all users of to2288 and describes how we handle personal information collected through our website (https://to2288.cam), mobile applications, and related services. By using to2288, you consent to the data practices described in this policy. If you do not agree with any aspect of this Privacy Policy, please discontinue use of our services immediately.

1. Introduction

to2288 ("we", "us", "our", "the Platform") operates an online betting and gaming platform serving players across Indonesia. We recognize that your privacy is important, and we are committed to complying with internationally recognized data protection principles and applicable Indonesian laws regarding the collection, use, and disclosure of personal information.

This Privacy Policy sets out the types of personal data we collect, how we use that data, who we share it with, and the rights you have regarding your personal information. We encourage all users to read this policy carefully and contact us if you have any questions or concerns about how your data is handled.

2. Information We Collect

to2288 collects various types of information from users during registration, account use, and interaction with our platform. The information we collect includes:

2.1 Personal Information You Provide

  • Registration Data: When you create an account, we collect your full name, date of birth, email address, phone number, residential address, and preferred currency (Indonesian Rupiah / IDR).
  • Identity Verification (KYC): To comply with legal and regulatory requirements, we collect copies of government-issued identification documents (e.g., National ID / KTP Nasional), proof of address documents (utility bills, bank statements), and selfie photos for identity verification purposes.
  • Payment Information: We collect details of your bank accounts and e-wallet accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay) used for deposits and withdrawals, including account holder name, account number, and transaction history.
  • Communication Records: We store records of all communications between you and to2288, including live chat transcripts, email correspondence, WhatsApp messages, and phone call recordings for quality assurance and dispute resolution purposes.
  • Betting and Gaming Data: We track your betting history, game play records, wagers placed, wins and losses, bonus claims, and all transactions on the platform.

2.2 Information We Collect Automatically

  • Technical Data: We automatically collect information about your device and internet connection, including IP address, browser type and version, operating system, device identifiers (IMEI, MAC address), screen resolution, time zone settings, and geographical location.
  • Usage Data: We track how you interact with the platform, including pages visited, features used, links clicked, time spent on each page, search queries, deposit and withdrawal patterns, and gameplay session duration.
  • Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing behavior and preferences. For more information, see our Cookies Policy below.

2.3 Information from Third Parties

  • Payment Providers: We receive transaction data from third-party payment processors (banks and e-wallet providers) to verify deposits and process withdrawals.
  • Game Providers: We receive gameplay data from third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, etc.) to facilitate game access and track your play history.
  • Fraud Prevention Services: We use third-party fraud detection and risk assessment tools that provide us with information about potentially fraudulent activity or high-risk transactions.

3. How We Use Your Information

to2288 uses the information we collect for the following purposes:

  • Account Management: To create and maintain your account, verify your identity, process deposits and withdrawals, and provide customer support.
  • Service Delivery: To enable you to place bets, play games, claim bonuses, and access all features of the platform.
  • Legal Compliance: To comply with Know Your Customer (KYC), Anti-Money Laundering (AML), and other legal and regulatory obligations.
  • Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multiple account use, bonus abuse, collusion, and other violations of our Terms and Conditions.
  • Communication: To send you account notifications, transaction confirmations, promotional offers, newsletters, responsible gaming messages, and platform updates via email, SMS, WhatsApp, or in-app notifications.
  • Personalization: To customize your experience on the platform, recommend games and betting markets based on your preferences, and display relevant promotions.
  • Analytics and Improvement: To analyze platform usage, identify trends, measure the effectiveness of marketing campaigns, and improve our services, features, and user experience.
  • Responsible Gaming: To monitor your betting patterns, identify signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide access to responsible gaming tools and support resources.

4. Legal Basis for Processing

Under applicable data protection laws, to2288 processes your personal data based on the following legal grounds:

  • Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under the Terms and Conditions, including account creation, payment processing, and service delivery.
  • Legal Obligation: Processing is required to comply with legal and regulatory requirements, including KYC, AML, age verification, and tax reporting obligations.
  • Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, analytics, marketing, and improvement of services, provided these interests do not override your fundamental rights and freedoms.
  • Consent: Where required by law, we process certain data (e.g., marketing communications, cookies) based on your explicit consent, which you may withdraw at any time.

5. How We Share Your Information

to2288 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with the following categories of recipients:

  • Service Providers: We engage third-party companies to provide essential services such as payment processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay), identity verification (KYC providers), game content delivery (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft), customer support tools, analytics platforms, and marketing services. These providers are contractually obligated to protect your data and use it only for the specific services they provide to us.
  • Legal and Regulatory Authorities: We may disclose your information to government agencies, law enforcement, regulators, courts, or other authorities if required by law, legal process, court order, or to comply with regulatory obligations such as AML reporting.
  • Fraud Prevention and Security: We may share information with fraud detection services, credit reference agencies, and other platforms to prevent fraudulent activity, verify identity, and protect the integrity of our services.
  • Business Transfers: In the event of a merger, acquisition, sale of assets, or corporate restructuring, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.
  • With Your Consent: We may share your information with other third parties where you have given us explicit consent to do so.

Data Security Commitment

to2288 employs industry-standard security measures to protect your personal information. All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology. Our databases are protected by firewalls, access controls, and encryption at rest. All payment data is processed through certified secure payment gateways and is never stored on our servers in unencrypted form. We conduct regular security audits and vulnerability assessments to ensure the ongoing protection of your data.

6. International Data Transfers

to2288 is an internationally operated platform. Your personal information may be transferred to, stored, and processed in countries outside of Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer your data internationally, we take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable laws, including the use of standard contractual clauses, data processing agreements, and adherence to internationally recognized data protection frameworks.

7. Data Retention

to2288 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

  • Account Data: Retained for the duration of your active account and for a minimum of 5 years after account closure to comply with legal, tax, and regulatory requirements.
  • Transaction Records: Retained for a minimum of 7 years to comply with financial regulations and tax laws.
  • KYC Documents: Retained for the duration of your account and for a minimum of 5 years after closure as required by AML regulations.
  • Communication Records: Retained for a minimum of 3 years for quality assurance and dispute resolution purposes.
  • Marketing Data: Retained until you withdraw consent or request deletion, unless retention is required for legal compliance.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with our data retention policy and applicable laws.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
  • Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, subject to legal and regulatory retention obligations.
  • Right to Restriction: You have the right to request that we restrict processing of your personal data in certain circumstances.
  • Right to Data Portability: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: You have the right to object to processing of your personal data for certain purposes, including marketing and profiling.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact our Data Protection Officer via email at [email protected] or through the contact methods listed at the end of this policy. We will respond to your request within 30 days. Please note that certain rights may be limited by legal and regulatory obligations.

9. Cookies and Tracking Technologies

to2288 uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content. Types of cookies we use include:

  • Essential Cookies: Required for the platform to function properly, including login sessions, shopping cart functionality, and security features. These cookies cannot be disabled.
  • Performance Cookies: Collect anonymous information about how you use the platform, including pages visited, links clicked, and errors encountered. This data helps us improve platform performance.
  • Functionality Cookies: Remember your preferences and settings, such as language, currency, and display options.
  • Marketing Cookies: Used to deliver personalized advertisements and track the effectiveness of marketing campaigns. These cookies may track your browsing activity across multiple websites.

You can control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality and user experience of the platform.

10. Third-Party Links

Our platform may contain links to third-party websites, including game providers, payment processors, and support organizations. to2288 is not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit through our platform.

11. Children's Privacy

to2288 strictly prohibits use of our services by persons under the age of 21. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from a person under 21 years of age, we will immediately delete that information and close the associated account. Parents and guardians are encouraged to monitor their children's internet use and use parental control tools to prevent access to gambling websites.

12. Changes to This Privacy Policy

to2288 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Any changes will be effective immediately upon posting to the platform. We will notify users of significant changes via email or in-app notification. The "Last Updated" date at the top of this policy indicates when the most recent revisions were made. Your continued use of the platform following any changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Your Trust is Our Priority

At to2288, we are committed to earning and maintaining your trust through transparent data practices and robust security measures. We handle your personal information with the highest level of care and in full compliance with applicable data protection laws. If you have any concerns about how your data is being used, please do not hesitate to contact us. Thank you for choosing to2288 as your trusted betting and gaming platform.

Our Privacy Commitments

These are the core principles that guide how to2288 handles your personal data every day.

256-Bit SSL Encryption

All data transmitted between your device and our servers is protected by bank-grade SSL encryption technology, ensuring your information cannot be intercepted.

No Data Selling

We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data is used exclusively to provide and improve our services.

Strict Access Controls

Your personal data is accessible only to authorized personnel who require it to perform their duties. All access is logged and monitored for security purposes.

Regulatory Compliance

We comply with international data protection standards and applicable Indonesian laws, including KYC, AML, and data retention regulations.

Your Rights Respected

We honor your rights to access, rectify, delete, and control your personal data. Submit a request anytime through our support channels.

Regular Security Audits

We conduct ongoing security assessments and vulnerability testing to ensure your data remains protected against emerging threats.

Need More Information?

Want to learn more about how we protect your data, our terms of service, or responsible gaming practices? Explore our other resources or contact our support team.