Privacy Policy — tiga37

At tiga37, we are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data in accordance with Indonesian data protection regulations.

Effective Date: 1 January 2026  |  Last Updated: 1 January 2026

Core Data Protection Principles

tiga37 operates under strict data protection principles designed to give you full control over your personal information and ensure transparency in every data processing activity.

256-Bit Encryption

All data transmission between your device and tiga37's servers is encrypted using 256-bit SSL/TLS encryption — the same security standard used by banks and government institutions worldwide.

No Data Sale

tiga37 does not sell, rent, lease, or trade your personal data to third parties for marketing purposes. Your information is used exclusively for platform operations, regulatory compliance, and service delivery.

KYC Data Security

Identity documents submitted during KYC verification are stored in encrypted format on secure servers with access restricted to authorized compliance personnel only. Documents are never shared with external parties except as required by Indonesian law.

Access & Correction Rights

You have the right to access all personal data tiga37 holds about you, to request correction of inaccurate information, and to request deletion of your data after account closure (subject to legal retention requirements).

Data Retention Limits

Personal data is retained only as long as necessary to fulfill the purposes for which it was collected, or as required by Indonesian financial and gambling regulations (typically 7 years for transaction records).

Cookie Control

tiga37 uses cookies to enhance user experience and maintain session security. You can control cookie settings via your browser. Disabling cookies may limit certain platform features but will not prevent account access.

Enterprise-Grade Data Security

Two-Factor Authentication

Optional 2FA via SMS or authenticator app adds an extra layer of security to your account login.

PCI DSS Compliant

All payment processing adheres to Payment Card Industry Data Security Standards for financial data protection.

Zero-Knowledge Architecture

Your password is hashed locally before transmission. tiga37 never stores or has access to your plaintext password.

Activity Monitoring

Real-time alerts for suspicious login attempts, unusual withdrawal requests, or account setting changes.

Questions About Your Privacy?

Our FAQ covers common privacy questions, or reach out to our Data Protection Team directly for personalized assistance.