Privacy Policy

tor55 (referred to in this Privacy Policy as "tor55", "we", "us", or "our") operates the online casino and sports betting platform accessible at tor55.vip. tor55 is the data controller responsible for the personal information collected through the Platform and through all associated customer service, payment processing, and promotional channels.

This Privacy Policy applies to all individuals who interact with the tor55 Platform in any capacity — including registered Players, visitors who browse without registering, and individuals who contact us via live chat or email. It applies regardless of the device or browser you use to access tor55.vip.

Our primary market is Indonesia, and this Policy is written with Indonesian Players in mind. We serve players across Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, Makassar, Palembang, and Yogyakarta, among many other Indonesian cities. All references to applicable data protection principles in this Policy reflect internationally recognised standards for responsible data handling.

tor55 collects only the personal data that is necessary to provide a safe, secure, and legally compliant gambling service. The categories of personal data we collect are detailed below.

tor55 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data for identification , or health data, except where a Player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case such information is handled with the highest degree of confidentiality and used solely to action the request.

tor55 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when creating a tor55 Account (registration form), completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically when you access tor55.vip, including data collected via cookies, web beacons, pixel tags, and server log files. See Clause 7 (Cookies & Tracking) for full details.
• Third-Party Payment Providers: Financial data shared with tor55 by Indonesian payment processors and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal transaction.
• Identity Verification Services: Where tor55 uses a third-party KYC verification service to authenticate identity documents, that provider may share verification outcomes and associated metadata with tor55.
• Fraud Prevention Agencies: tor55 may receive flagging data from third-party fraud detection services to identify high-risk account activity or patterns associated with money laundering.
• Publicly Available Sources: In limited circumstances, tor55 may supplement your profile with data drawn from publicly available sources (such as public records) to verify the accuracy of information you have provided.

tor55 uses your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process personal data are as follows:

• Account Management: Creating, maintaining, and administering your tor55 Account, including processing your registration, verifying your identity, and managing your Account settings, deposit limits, and self-exclusion preferences.
• Payment Processing: Processing deposits and withdrawals in IDR via your chosen Indonesian bank or e-wallet, reconciling transaction records, and issuing refunds where applicable.
• Regulatory Compliance: Meeting our obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) regulations, including retaining transaction records for the legally required period.
• Fraud Detection & Platform Security: Monitoring account and transaction activity to detect, investigate, and prevent fraudulent conduct, collusion, bonus abuse, and unauthorised access to the Platform.
• Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling, administering deposit limits, session time limits, and self-exclusion requests, and fulfilling our duty-of-care obligations toward Players.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining quality-assurance records of support interactions.
• Personalisation & Product Improvement: Analysing aggregate usage data to improve the tor55 Platform, tailor game recommendations to your preferences, and optimise the user experience for Indonesian players.
• Marketing Communications: Sending promotional emails, SMS messages, or in-app notifications about bonuses, new games, and special offers — but only where you have provided explicit consent or where a legitimate interest applies. You may withdraw consent at any time.
• Legal Claims: Establishing, exercising, or defending legal claims in connection with the Platform or any dispute arising from your use of it.

tor55 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing that is necessary to perform the contract between you and tor55 — specifically, to provide the betting and gaming services you have signed up for, process your financial transactions, and administer your Account.
• Legal Obligation: Processing that tor55 is required to carry out to comply with applicable law, including KYC, AML/CTF obligations, and statutory record-retention requirements.
• Legitimate Interests: Processing carried out in pursuit of tor55's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of direct marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

tor55 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We share personal data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Service Providers: Your financial data is shared with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit and withdrawal transactions. These providers act as independent data controllers under their own privacy policies.
• KYC & Identity Verification Providers: Identity documents and verification data may be shared with accredited third-party KYC service providers engaged by tor55 to perform identity and age verification checks. These providers are contractually bound to process data only on tor55's instructions and in accordance with applicable data protection standards.
• Fraud Prevention & Security Services: Technical and transactional data may be shared with specialist fraud detection and cybersecurity providers to protect the Platform and its players from fraudulent activity and unauthorised access.
• Game Studio Providers: Where you play games powered by third-party studios (including Pragmatic Play, Evolution Gaming, PG Soft, Habanero, NetEnt, Microgaming, and Spribe), certain gameplay session data may be transmitted to those providers' game servers as a technical necessity of game delivery. Game providers do not receive your identity or financial data.
• Professional Advisers: tor55 may share personal data with lawyers, auditors, accountants, and insurers in the course of obtaining professional advice or in connection with the management of a legal dispute.
• Regulatory & Law Enforcement Authorities: tor55 will disclose personal data to regulatory bodies, tax authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or binding regulatory directive. Where permitted, tor55 will notify the affected Player before disclosing their data.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or a material part of tor55's business, personal data held by tor55 may be transferred to the acquiring or successor entity, subject to equivalent privacy protections.

tor55.vip uses cookies and similar tracking technologies to deliver and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on tor55.vip:

tor55 does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving targeted advertising on external platforms. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

tor55 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account Data: Retained for the duration of your active Account, plus a minimum of 5 years following Account closure, to comply with AML/CTF record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial compliance requirements.
• KYC Verification Documents: Retained for a minimum of 5 years following the completion of the KYC process or Account closure, whichever is later.
• Customer Support Records: Live chat transcripts and email correspondence retained for 3 years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Records of your consent or opt-out status are retained for the duration of your Account and for 2 years after Account closure.
• Technical & Usage Data: Anonymised or pseudonymised analytical data may be retained indefinitely for statistical purposes, provided it cannot reasonably be used to identify any individual.

When personal data is no longer required, tor55 will securely delete or anonymise it in accordance with its internal data destruction procedures.

As a Player on the tor55 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Privacy team at [email protected], clearly stating the right you wish to exercise and providing sufficient information to verify your identity.

• Right of Access: You have the right to request a copy of the personal data tor55 holds about you, together with information about how it is used and with whom it is shared. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain Account information directly through your Account settings panel.
• Right to Erasure: You may request that tor55 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. This right is subject to legal retention obligations that may require tor55 to retain certain data notwithstanding an erasure request.
• Right to Restrict Processing: You may request that tor55 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is contested, or while an objection is being assessed.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that tor55 provide your personal data to you in a structured, commonly used, machine-readable format (e.g., JSON or CSV), or transmit it directly to another service provider where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

tor55 implements a comprehensive, layered approach to data security that meets internationally recognised standards for protecting personal and financial data. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or app and the tor55 servers is protected by 256-bit SSL/TLS encryption, ensuring that data in transit cannot be intercepted or tampered with.
• Data Encryption at Rest: Sensitive data stored in tor55's databases — including identity documents, financial records, and hashed credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within tor55's systems is strictly controlled on a need-to-know basis. All staff with access to personal data undergo data protection training and are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): tor55 strongly recommends enabling 2FA on your Account. When enabled, access to your Account requires both your password and a one-time code sent to your registered mobile number or authenticator app, significantly reducing the risk of unauthorised access.
• Penetration Testing & Vulnerability Management: tor55 engages independent security specialists to conduct regular penetration testing of the Platform. Identified vulnerabilities are prioritised and remediated in accordance with a defined patch-management schedule.
• Incident Response: tor55 maintains a documented data breach response plan. In the event of a security incident affecting your personal data, tor55 will assess the severity of the breach and notify affected Players and the relevant supervisory authority within the timeframes required by applicable law.

While tor55 takes all reasonable and proportionate steps to protect your data, no digital platform can guarantee absolute security. You are responsible for keeping your Account credentials confidential and for notifying tor55 immediately at [email protected] if you suspect any unauthorised use of your Account.

The tor55 Platform is strictly intended for adults aged 21 and over. tor55 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is conducted as part of the Account registration and KYC process, and tor55 reserves the right to require additional proof of age at any stage.

If tor55 becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through a misrepresentation at registration or by any other means — the affected Account will be suspended immediately, all associated funds will be withheld pending investigation, and the personal data will be securely deleted as soon as it is no longer required for the purposes of the investigation and any resulting legal obligations.

Parents and guardians who believe that a minor may have created a tor55 Account are urged to contact our support team immediately at [email protected]. We take underage gambling extremely seriously and will act on all such reports without delay.

tor55 reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. Where changes are material — meaning they affect how your data is used or your rights in relation to it — tor55 will provide at least 7 days' advance notice by email to your registered address and by a prominent notice on the Platform before the revised Policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date on which the most recent revision was made. We encourage you to review this Privacy Policy periodically so that you remain informed of how tor55 handles your personal data. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgement of the updated Policy.

If you do not agree with any revision to this Privacy Policy, you should stop using the Platform and request Account closure by contacting [email protected]. All data associated with your closed Account will be retained only for the minimum periods required by law as described in Clause 8 above.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about the way in which tor55 has handled your personal data, please contact us through the channels below:

tor55 aims to acknowledge all privacy-related enquiries within 5 business days (WIB) and to resolve them fully within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction or to the independent dispute resolution body designated by tor55's licensing authority.

For Indonesian-language support, our agents are available around the clock, including during Idul Fitri, Nyepi, and all Indonesian national public holidays. tor55 is committed to handling every privacy request with care, transparency, and respect.