tha24 is committed to protecting your personal information. This Privacy Policy explains what data we collect when you use the tha24 platform, how we use and store it, who we share it with, and what rights you have over your own information. Please read this document before registering an account.
The following definitions apply throughout this Privacy Policy:
tha24 collects Personal Data across several categories depending on how you interact with the platform. The table below summarizes the main data categories and specific data points we may hold about you:
| Category | Examples of Data Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, national ID number (KTP / passport), gender | Registration & KYC |
| Contact Data | Email address, phone number, residential address (city, province, Indonesia) | Registration & profile updates |
| Financial Data | Bank account number, bank name (BCA, BRI, BNI, Mandiri, etc.), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Deposit / withdrawal requests |
| KYC Documentation | Scanned or photographed identity documents, selfies for liveness verification, proof of address documents | KYC verification process |
| Technical Data | IP address, device type, operating system, browser type and version, session tokens, login timestamps | Each platform session |
| Usage Data | Pages visited, games played, bet history, deposit and withdrawal logs, bonus redemption records, session duration | Ongoing platform use |
| Communication Data | Live-chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Responsible Gaming Data | Self-exclusion status, deposit and loss limit settings, cooling-off period records | When tools are activated by the player |
We collect only the data necessary for the purposes described in this policy. We do not collect sensitive categories of Personal Data (such as health data, political opinions, or religious beliefs) unless you voluntarily provide such information in a support communication, in which case it is used solely for the purpose of resolving your query.
The majority of Personal Data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotional survey. You are under no obligation to provide this data, but failure to provide mandatory information (such as identity verification documents) will prevent full use of certain platform features, including withdrawals.
When you access tha24, our servers and analytics tools automatically record Technical Data and Usage Data. This includes your IP address, the pages you visit, the games you launch, the duration of your sessions, and the device and browser you use. This data is collected via server logs, session cookies, and analytics scripts. It helps us operate the platform securely, detect fraud, and improve the user experience.
We may receive Personal Data about you from the following third-party sources:
tha24 processes your Personal Data on one or more of the following legal grounds:
tha24 uses your Personal Data for the following specific purposes:
We use your Identity Data, Contact Data, and Financial Data to create and maintain your account, verify your age and identity, process deposits and withdrawals, settle bets and game outcomes, and provide customer support. These are core operational uses without which the tha24 service cannot function.
We use Identity Data, KYC Documentation, Financial Data, and Technical Data to meet our AML and KYC obligations, screen accounts against international sanctions watchlists, detect and investigate suspicious activity, and prevent multiple-account abuse, bonus fraud, and match-fixing. Data processed for compliance purposes may be retained for extended periods as required by applicable regulations.
We use Usage Data and Responsible Gaming Data to monitor player behaviour for signs of problem gambling, enforce self-exclusion and deposit limits that you set, and contact you proactively if our monitoring systems detect patterns associated with harmful play. This processing is carried out in your interest and forms part of our responsible gaming obligations.
With your explicit consent, we may use your Contact Data and Usage Data to send you personalised promotional offers, bonus notifications, and platform news by email or push notification. You may opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing does not affect your ability to use the tha24 platform.
We use aggregated and anonymised Usage Data and Technical Data to analyse platform performance, understand how players navigate the site, identify popular games and features, and inform product development decisions. Where data is fully anonymised, it no longer constitutes Personal Data and is not subject to the restrictions in this policy.
We may use any category of Personal Data held about you to establish, exercise, or defend legal claims, including disputes over bet outcomes, account closures, or financial transactions. Data used for this purpose will be retained until the relevant claim is fully resolved.
tha24 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share your data only in the following limited circumstances:
We engage third-party Processors who handle Personal Data strictly on our instructions and for no other purpose. These include payment gateway providers, KYC verification vendors, fraud-screening services, cloud hosting providers, email delivery platforms, and customer support tooling. All Processors are subject to data processing agreements that impose confidentiality obligations and data security standards equivalent to those described in this policy.
To resolve game disputes and ensure accurate settlement, we may share session identifiers and relevant bet records with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Pocket Games Soft. These studios receive only the minimum data necessary to resolve the specific query.
We may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or government authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, we will disclose only the data specifically requested and will notify you of the disclosure where we are legally permitted to do so.
If tha24 is involved in a merger, acquisition, asset sale, or restructuring, your Personal Data may be transferred to the successor entity as part of that transaction. We will notify you via email or a prominent platform notice before your data is transferred and becomes subject to a different privacy policy.
We may share your data with additional third parties where you have given your explicit, informed consent to that specific sharing. You may withdraw such consent at any time by contacting [email protected].
tha24 retains Personal Data for as long as necessary to fulfil the purposes described in this policy, subject to the following minimum retention periods:
| Data Category | Minimum Retention Period | Reason |
|---|---|---|
| Identity & KYC Data | 5 years after account closure | AML regulatory requirement |
| Financial transaction records | 5 years after each transaction | AML & accounting obligations |
| Bet and game history | 3 years after account closure | Dispute resolution & licence compliance |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming obligation |
| Support communications | 2 years after resolution | Quality assurance & legal claims |
| Technical & session logs | 12 months on a rolling basis | Security monitoring & fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of lawful marketing basis |
When Personal Data is no longer required for any retention purpose, it is securely deleted or irreversibly anonymised. Anonymised data derived from your records may be retained indefinitely for aggregated statistical analysis.
tha24 implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. Key measures include:
Cookies are small text files placed on your device by a website you visit. They are widely used to make websites function correctly, improve efficiency, and provide information to site operators. tha24 uses cookies and similar tracking technologies (including local storage and session tokens) to operate core platform functions and to understand how players use the site.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, CSRF protection, responsible gaming tool enforcement | Session / up to 24 hours |
| Functional | Remembering your language preference, game lobby display settings, and last-visited sections | Up to 30 days |
| Analytics | Aggregated usage statistics — pages visited, feature interactions, session length — to improve platform design | Up to 12 months |
| Fraud Detection | Device fingerprinting and behavioural signals used to detect multiple-account abuse and suspicious login patterns | Up to 12 months |
You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will prevent core platform functions — including login and bet placement — from working correctly. tha24 does not use cookies to serve third-party advertising on its platform.
Subject to applicable law and the conditions described below, you have the following rights in relation to your Personal Data held by tha24:
To exercise any of the above rights, submit a written request to [email protected]. We will respond within 30 days of receiving a valid request. We may need to verify your identity before actioning a request. There is no fee for submitting a rights request, though we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
tha24 is strictly an adult platform. Access is limited to individuals aged 21 and over. We do not knowingly collect Personal Data from anyone under the age of 21. Our registration process requires date-of-birth entry, and KYC verification includes age confirmation against government-issued identity documents.
If tha24 discovers — or has reasonable grounds to believe — that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the data to the extent permitted by our regulatory retention obligations, and report the incident where required by our licence authority. Parents or guardians who believe their child may have registered on tha24 should contact us immediately at [email protected].
tha24's platform infrastructure is hosted on servers located outside Indonesia. When you use tha24, your Personal Data is transferred to and processed in jurisdictions that may have different data protection laws from those in Indonesia. We take the following steps to ensure your data remains protected during international transfers:
By registering an account on tha24, you acknowledge that your Personal Data will be transferred to and processed in jurisdictions outside Indonesia for the purposes described in this policy.
tha24 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or platform features. When we make material changes, we will notify registered players by email to the address on file and via a prominent notice on the tha24 platform at least 7 days before the revised policy takes effect.
Non-material changes — such as typographical corrections or clarifications that do not alter the substance of any section — may be published without advance notice. The "Last updated" date at the top of this page will always reflect the most recent revision. Your continued use of the tha24 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms.
We encourage you to review this Privacy Policy periodically. The current version is always accessible at https://tha24.cam/privacy-policy.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how tha24 handles your Personal Data, please contact our Data Support team using the details below. All privacy-related queries will receive a substantive response within 30 days of receipt.
If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant supervisory authority in the jurisdiction under which tha24 holds its operating licence.
Six core principles that underpin every data decision we make on the tha24 platform.
All data transmitted between your browser and tha24 is protected by TLS 1.2+ encryption. Sensitive records stored on our servers use AES-256 encryption at rest, keeping your details secure from interception.
tha24 never sells, rents, or trades your Personal Data to third-party advertisers. Data sharing is limited strictly to service providers who need it to operate the platform and to regulators where legally required.
Identity and age verification protect both you and the platform. KYC documentation is encrypted, access-controlled, and retained only for the regulatory minimum period before secure deletion.
You can request access to, correction of, or deletion of your Personal Data at any time. You can also withdraw marketing consent or request a portable copy of your data by contacting our support team.
Bank and e-wallet details (BCA, BRI, BNI, OVO, DANA, GoPay, and others) are used solely to process your transactions. Financial identifiers are never shared with game studios or marketing partners.
Usage patterns are monitored to support responsible gaming. If our systems detect signs of harmful play, we may reach out proactively. This data is never used for commercial profiling or sold to third parties.
Our FAQ page covers common questions about account verification, security, and how your information is used. You can also review our full Terms & Conditions or visit the Responsible Gaming page for additional information on how we support safe play.
21+ tha24 is intended for adults only. Play responsibly. Gambling involves financial risk.