to12 Platform Privacy Notice

This page describes what we collect when you use to12 and how we keep that data protected. Our privacy commitment centres on transparent handling: we tell you upfront what information we need, why we need it, and how we store it. We do not sell your data to marketing companies or brokers.

When you register on to12, we collect personal identifiers—your name, email, phone number, and government-issued ID for verification. When you deposit through DANA, e-wallet, mobile banking, local payment, online payment, or bank transfers to e-wallet, mobile banking, local payment, and online payment, we record transaction details and payment destinations. We also log your gameplay activity, balance changes, and withdrawal requests. All this data is encrypted and stored on secure servers. We share information only where necessary to process your payments or comply with legal obligations.

This notice explains our data practices so you understand your privacy rights when using to12.

What We Collect on to12

We collect several types of data when you use our to12 platform. Personal information includes your legal name, email address, phone number, date of birth, and residential address. We collect this during account registration and update it when you change your details.

We also collect identity documents—photographs of your government-issued ID (National ID, Passport, or Driver License)—to verify your identity before you can deposit or withdraw. We collect payment information when you fund your account through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or direct bank transfers. This includes your payment method, transaction amounts, and confirmation details. We record all gameplay activity—which games you play, your bet amounts, spin results, and balance changes. We also log when you access to12, which device you use (Android phone, iPhone, desktop), your approximate location based on IP address, and how long you stay on our platform. This usage data helps us improve to12 and troubleshoot technical issues.

Data minimisation: We collect only data necessary to operate to12 and comply with financial regulations. We do not ask for unnecessary personal details beyond what account opening and payment processing require.

How We Use Your Data on to12

We use your data to manage your to12 account, process your deposits and withdrawals, verify your identity, and settle your winnings. Your name and address help us confirm you are who you claim during KYC verification. Your payment information allows us to credit your account when you deposit and route your winnings to the correct payment method. Your phone number enables us to send account security alerts and password reset codes via SMS.

We use your gameplay activity to calculate your account balance, track your betting history, and detect fraud or collusion. We analyse usage patterns (which games you play, how often you log in, which device you use) to improve to12's user experience and identify technical bugs. We may use your email to notify you about maintenance, new games, or account changes. We also use data to comply with legal obligations—for example, to help authorities investigate fraud, money laundering, or underage access if required by law.

Data Sharing and Third Parties

We do not sell your data to third parties. We share information only where necessary. When you deposit through mobile banking, local payment, online payment, e-wallet, mobile banking, or bank transfers, we share your deposit confirmation with our payment processor to complete the transaction. We also share transaction records with our banking partners and payment gateway providers to settle funds.

Payment processors: We share deposit and withdrawal instructions with e-wallet providers and banks to route your funds correctly.
Legal authorities: If required by law or court order, we disclose information to government agencies investigating fraud or financial crimes.
Support contractors: We may hire customer support contractors who access limited account data to help resolve disputes or technical issues. They are bound by confidentiality agreements.
Analytics providers: We use anonymised usage data to understand how players interact with to12 and improve our platform. This data cannot identify you personally.

We do not control how third-party payment processors handle your data once it leaves our systems. local payment, online payment, e-wallet, mobile banking, local payment, and your bank have their own privacy policies. We recommend reviewing those policies separately if you wish to understand their data practices.

Data Storage and Security

We store your data on encrypted servers using SSL technology. All communication between your phone or desktop browser and our servers is encrypted, so your data cannot be intercepted. Your password is stored as an encrypted hash—we never store your actual password, only a mathematically irreversible version of it. This means even we cannot recover your original password; if you forget it, we can only send you a password reset link.

Our servers may sit outside your jurisdiction—for example, in data centres in Southeast Asia or internationally. By using to12, you consent to your data being stored and processed outside your home country if required for platform operations. We maintain access logs showing who reviewed your account data and when, helping us detect unauthorised access. We also maintain automated backups so that if our primary servers fail, your data is not lost. We delete or anonymise data when it is no longer needed—typically, we retain active account data while your account is open, and we keep transaction records for the period required by law.

Your Rights and Data Access on to12

You have the right to access your personal data stored on to12. Through your account settings, you can view your profile information, transaction history, and gameplay records. You can request that we correct or update any inaccurate data—for example, if your address changes. You also have the right to request deletion of your account and associated data, subject to our legal obligations to retain certain financial records.

To exercise these rights, contact our support team through your to12 account. We respond to data access requests within a few business days. Note that we cannot delete data required by financial regulations—for example, we must retain transaction records and KYC documentation for the periods specified by Indonesian law.

Cookies and Tracking on to12

We use cookies and similar tracking technologies on to12. Cookies are small files stored on your phone or browser that help us remember your login state, language preference, and gameplay session. Cookies make to12 easier to use—you do not have to re-enter your login credentials on every page. We also use cookies to track user behaviour on our platform, helping us understand which games are popular and where players encounter technical issues.

1

Session cookiesEssential

These keep you logged in to your to12 account. Without them, you would log out after each page load.
2

Preference cookiesOptional

These remember your language and theme settings on to12.
3

Analytics cookiesOptional

These track your behaviour to help us improve to12. You can disable them through your browser settings.

You can manage cookies through your browser or phone settings. Most browsers allow you to delete cookies and block new ones. Note that disabling session cookies will log you out of to12. Analytics cookies are optional; disabling them does not affect your ability to play.

Policy Updates and Contact

We may update this privacy notice from time to time as we improve to12 or change our practices. We notify you of material changes by email or in-app message. Your continued use of to12 after a change means you accept the updated policy. If you have questions about how we handle your data or wish to exercise your privacy rights, contact us through your to12 account support section. We respond to privacy inquiries within a few business days.

Our services are available only where local law permits. Your jurisdiction may have specific data protection laws—for example, regulations about data retention or cross-border transfers. We comply with applicable laws where we operate. We do not operate in jurisdictions where our services are prohibited, and we cannot provide privacy guarantees for jurisdictions with restricted access to to12.

Special Considerations for Mobile Users

Our to12 platform is primarily accessed via mobile (Android and iOS). When you use our mobile app or browser on your phone, your device transmits certain data to our servers. This includes your device type, operating system version, unique device identifier, and IP address. We use this data to troubleshoot app crashes, optimise performance, and detect fraud. We do not track your physical location using GPS unless you explicitly grant permission through your phone's settings.

Push notifications on Android and iOS require permission to send. We use notifications to alert you about account security, deposit confirmations, and withdrawal updates. You can disable notifications through your device settings. Disabling notifications will not affect your account or gameplay; you simply will not receive alerts. If you toggle notifications off during Idul Fitri, Idul Adha, Imlek, or other holidays, they remain off until you re-enable them.

Data Retention and Deletion

We retain your data for as long as your to12 account is active and for a period afterward as required by law. Financial regulators in Indonesia typically require platforms to retain transaction records and KYC documentation for a minimum period—we comply with these mandates. When you request account closure, we mark your account as inactive. Your personal data remains encrypted and inaccessible to our support team, but we retain it for the legally mandated retention period. After that period, we securely delete all personal data associated with your account. We cannot recover deleted data. Backup copies are also deleted or anonymised according to our retention schedule. If you have specific questions about your data deletion timeline, contact our support team.

Trust and Fairness on to12

Platform security layers

We at to12 protect your account and personal data through multiple security layers. All communication between your phone and our servers uses SSL encryption—the same technology banks and payment processors use to secure financial information. When you log in, enter your ID during KYC verification, or request a withdrawal, that data travels through an encrypted tunnel that no third party can intercept. We store all sensitive information—passwords, ID documents, bank account numbers—in isolated database systems with restricted access controls. Our engineering team performs regular security audits and penetration testing to identify and patch vulnerabilities before they can be exploited. If we detect unusual login attempts—for example, a login from a new country or device—we send you an alert and may require additional verification. We also offer optional two-factor authentication: you can enable SMS verification or email confirmation for logins and withdrawal requests. Our servers maintain automated backups and disaster recovery systems so that even if our primary infrastructure experiences an outage, your account data remains safe and recoverable. We implement session timeouts: after subject to verification of inactivity, we log you out automatically to protect your account if you leave your phone unattended. Password resets require verification through your registered email and phone number—a two-step process that prevents unauthorised password changes. When you request a password reset on to12, we send a link valid for one hour. We follow standard compliance frameworks used across Indonesian banking and fintech platforms.

Game fairness and RTP

Our to12 platform hosts both algorithmic games and live-dealer tables, each with different fairness guarantees. Algorithmic games—slot games like Aviator, Fortune Tiger, Sweet Bonanza, Gates of Olympus, and Mahjong Ways—use a certified random number generator (RNG) that produces unpredictable results. Each spin is independent, and the RNG ensures that long-term payouts match the game's published RTP (Return to Player) percentage. For example, a game with will return an average of 96 cents per dollar wagered over many thousands of spins, but individual results are always random. Live-dealer games—blackjack, roulette, baccarat, Dragon Tiger—involve a real dealer or real physical selection in a studio that we stream to your device. The fairness guarantee comes from transparency: you see the dealer's actions and the physical results in real time, so there is no hidden manipulation. Football betting on Liga 1, Piala AFF, or other tournaments is based on real match outcomes—we do not control the results; we simply price the odds according to our risk models. For esports markets like Mobile Legends or Free Fire, results depend on actual tournament outcomes. Our games and bets are not rigged. The fairness of to12 depends on accurate RNG certification and honest payout calculations, which we display transparently in your account history. You can verify that your winnings match the paytable and that your account balance reflects all transactions accurately.

KYC verification process

We require Know Your Customer (KYC) verification before you can deposit or withdraw funds on to12. KYC exists for multiple reasons: it confirms that you own your account (preventing account takeover by someone else), ensures your withdrawal requests go to your own bank account (preventing fraud), and helps us comply with Indonesian financial regulations that govern payment processors and online gaming platforms. When you create a to12 account, we collect your name, email, and phone number. To unlock deposits and gameplay, you then submit a government-issued ID—a National ID (KTP), Passport, or Driver License. We ask for a clear photo of both sides of your document if applicable. You must confirm that the name on your ID matches your account registration exactly. We then send you a verification code via SMS and ask you to enter it on our app or website—this confirms you control the phone number registered to your account. Our verification team reviews submissions during business hours, typically completing the check within a few hours. If we spot any issues—a blurry photo, a name mismatch, or incomplete information—we send you a message in your to12 account explaining what we need. You can resubmit documents as many times as needed at no cost. Once verified, your account remains active indefinitely unless you request closure or violate our terms. We keep your verification on file, so future withdrawals do not require resubmission. If you update your phone number, change your legal name, or show signs of unusual activity, we may request re-verification, but this is rare and explained transparently.

User feedback and review channels

We encourage players to share feedback about to12 through multiple channels. In your account, you can submit feedback or report a problem directly to our support team. We also monitor reviews posted on third-party sites and community forums. While we cannot claim to be "top-rated" or "best-reviewed" because these claims are often unverifiable, we do read what players say and use that feedback to improve our platform. If you encounter a technical issue—a deposit that doesn't appear, a withdrawal that is delayed, or a game that doesn't load correctly—you can report it through our help section. We log all reports and investigate them individually. Some issues resolve quickly (a temporary connection drop, a cached page view), while others may require escalation to our engineering or payment teams. We commit to responding to support requests within a few hours during business days. We also post regular updates on our platform about maintenance windows, new games, and payment changes so players stay informed. Player feedback shapes our roadmap—if many users report the same issue or request a feature, we prioritise it. While we cannot guarantee customer support because that requires significant resources, we make a genuine effort to address concerns promptly and transparently. We provide documentation in our FAQ covering common questions about accounts, deposits, withdrawals, and games so you can self-serve for routine enquiries. If you need personal assistance beyond our FAQ, our support team is available during published hours through email and in-app messaging.