Privacy controls for your Tikal account and personal information

Effective Date: August 13, 2026 Last Updated: August 13, 2026

This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit Tikal, create an account, contact support, make a payment, complete verification, use a promotion or manage safer-gambling controls. It also explains your rights and choices. By using our services, you acknowledge the practices described here.

Who controls your data

Tikal is operated by 3-102-937015 Limitada, registered in San José, Montes de Oca, Barrio Dent, Costa Rica. Pagorax Limited, registration HE 478916 in Nicosia, Cyprus, supports payment processing. Other providers may act as processors or independent controllers for hosting, games, verification, fraud prevention, analytics and payment services.

Information we collect

We may collect:

• identity and account data, including name, date of birth, username and account identifiers;
• contact data, including address, email and telephone details;
• verification data, such as identity documents, proof of address, payment ownership and source-of-funds evidence;
• transaction data, including deposits, withdrawals, balances, payment methods and transaction references;
• gameplay and promotion data, including stakes, game rounds, outcomes, bonus status and wagering progress;
• safer-gambling data, including limits, exclusions, interactions and account-risk indicators;
• technical data, including IP address, browser, device, operating system, identifiers, logs and security events;
• communication data from support messages, complaints, surveys and account notices;
• marketing preferences, consent records and interaction with emails or on-site promotions.

Do not submit information about another person unless you are authorised to do so.

Why we process personal data

We use data to create and administer accounts; provide games and account functions; process deposits and withdrawals; verify identity, age and payment ownership; detect fraud, collusion, abuse and security threats; administer bonuses; provide support; apply safer-gambling tools; comply with legal and regulatory duties; resolve disputes; measure performance; and improve our services.

Where applicable, processing relies on contractual necessity, legal obligation, legitimate interests, consent or the establishment and defence of legal claims. Legitimate interests include account security, fraud prevention, service measurement, network protection and responsible product management. Where consent is the basis, you may withdraw it without affecting earlier lawful processing.

Cookies and similar technologies

We use cookies, local storage, pixels and comparable technologies to keep you signed in, remember preferences, protect sessions, measure site performance, attribute promotions and understand how services are used. Essential technologies support login, security and account functions. Analytics and marketing technologies help measure traffic and communication performance where permitted.

Browser controls can remove or block cookies, but disabling essential storage may affect login, cashier and security functions. Marketing choices can also be adjusted through account preferences or the unsubscribe link in eligible communications.

Payments, verification and automated signals

Payment providers receive the information required to authorise and reconcile a transaction. Verification and fraud-prevention providers may compare documents, device signals, account history and payment behaviour. Automated indicators can identify a transaction for manual review; significant account decisions are reviewed under applicable procedures.

Never send full card credentials or a password to support. Upload requested documents only through the designated secure route.

Who may receive data

We may share relevant data with group service providers, hosting companies, game suppliers, payment processors, verification providers, security and anti-fraud services, communication platforms, professional advisers, auditors, insurers and analytics providers. Data may also be disclosed to regulators, law-enforcement bodies, courts or other authorities where required or legally justified.

We require processors to use personal data only for authorised purposes and to apply appropriate safeguards. We do not sell personal data as an ordinary commercial product.

International transfers

Our services involve providers in more than one country. Where personal data moves across borders, we use contractual, organisational and technical safeguards appropriate to the transfer and the applicable law. These may include approved contractual clauses, transfer assessments and access controls.

Retention

Retention depends on account status, transaction history, verification duties, safer-gambling requirements, disputes, security needs and legal obligations. Some account and payment records must remain after closure. When data is no longer required, we delete, anonymise or securely isolate it according to our retention procedures.

Security

We apply encryption in transit, controlled access, authentication, monitoring, logging, secure hosting, fraud detection, staff procedures and vendor controls. No online system can remove every risk. You are responsible for protecting your password, device and registered email and for reporting suspected compromise promptly.

Your rights

Depending on the law that applies, you may request access, correction, deletion, restriction, objection, portability or information about processing. You may withdraw consent and opt out of eligible marketing. You may also complain to a competent data-protection authority.

We may need to verify identity before completing a request. Some rights are limited where data must be retained for legal, payment, fraud-prevention, safer-gambling or dispute purposes.

Age and children

Our services are for people who have reached the legal gambling age, never below 18. We do not knowingly create accounts for children. If we identify underage use, we investigate, secure the account and handle associated data under applicable requirements.

External links

Links to payment services, game providers or other websites are governed by their own privacy notices. Review those notices before submitting information directly to another organisation.

Policy changes

We may update this Policy to reflect legal, technical or service changes. The date above shows the latest revision. Material changes may also be communicated through the site, account or registered contact channel.

Privacy enquiries

Submit privacy requests through the Help or Support area or the privacy contact route stated in your account. Identify the request and the registered email, but do not include passwords or full payment credentials. Formal correspondence may be directed to 3-102-937015 Limitada, San José, Montes de Oca, Barrio Dent, Costa Rica.