How we encrypt and store your data
When you log into tycoon from your phone or browser, your connection travels through SSL encryption—the same technology banks use. Every password, payment detail, and game history is encrypted at rest, meaning the data is scrambled until it's needed. We do not store your full payment card numbers; instead, we tokenise them, converting sensitive data into secure references that our payment partners can verify without exposing the original digits.
Our servers are hosted on infrastructure that undergoes regular security audits. We segment your account data from our sports feeds, live-dealer camera streams, and game servers, so a breach in one area cannot cascade into another. When you deposit via GoPay, e-wallet, or mobile banking, we verify the transaction with the payment partner before crediting your balance—you do not receive funds until both systems agree the transfer is complete.
Two-factor authentication and login security
tycoon supports two-factor authentication (2FA) on your account. When you enable 2FA via email or SMS, anyone attempting to log in from a new device must enter a code that only you can access. We recommend 2FA if you regularly deposit or withdraw large amounts, or if you play during high-traffic events like Piala Indonesia finals.
Your login password should be unique—do not reuse the same password across tycoon, your bank, or other accounts. If you suspect your password has been compromised (for example, after sharing your device with family during Idul Adha), change it immediately. Our login page shows the date and time of your last successful sign-in; if you see a time you do not recognize, reset your password and contact support.
Steps to secure your login
- Create a strong, unique password (12+ characters, mix of letters, numbers, symbols).
- Enable two-factor authentication in account settings.
- Review your active sessions and sign out from unfamiliar devices.
- Update your recovery email address if you change your primary email.
- Never share your login credentials, even with support staff.
KYC verification and identity checks
Before you can withdraw funds from tycoon, we must verify your identity. This process, called KYC (Know Your Customer), protects both you and our payment partners. When you request your first withdrawal, we ask for a government-issued ID (such as a KTP or passport), a proof of address (utility bill, bank statement), and a selfie holding your ID. This is not punishment—it is a legal requirement for operators in regulated jurisdictions and for payment partners like local payment, online payment, e-wallet, and major Indonesian banks.
Our verification team reviews your documents within standard business windows. If a document is unclear (for example, if the photo is blurry or the address is obscured), we send you a request to resubmit. Once approved, your account is fully verified, and you can withdraw to any linked payment method without additional checks. If your personal details change (name, address, ID number), update them in your account settings so your records remain current.
What KYC documents we accept
- Government-issued ID: KTP, SIM, Paspor, or KITAS
- Proof of address: utility bill, bank statement, or tax ID card (dated within 3 months)
- Selfie with ID: a clear photo holding your ID next to your face, taken within the past 30 days
- Bank account verification: linking a mobile banking, local payment, online payment, or e-wallet account (optional, speeds up withdrawal approvals)
Spotting and reporting suspicious activity
You are the first line of defence for your own account. Watch for these warning signs: unexpected login notifications, deposits you did not make, or emails claiming you've won a prize without playing. tycoon will never ask you to "confirm" your password or payment details via email or SMS. If you receive such a message, it is a phishing attempt—delete it and report it to our support team.
If you notice unauthorized activity (for example, a withdrawal to a payment method you don't recognize), contact support immediately. We can freeze your account, reverse pending withdrawals, and help you regain control. Always keep your registered email address and phone number up to date so we can reach you quickly.
Payment security and withdrawal workflows
Deposits and withdrawals on tycoon pass through multiple checkpoints. When you deposit via mobile banking, the payment processor confirms the transfer before crediting your balance. When you request a withdrawal, we verify your linked payment method, cross-check it against your KYC documents, and flag any unusual amounts or frequencies for manual review. This is not meant to delay you unnecessarily—it is meant to catch fraud before it happens.
If you withdraw to a local payment, online payment, e-wallet, or mobile banking bank account, the transfer typically completes within standard banking hours. If you use a mobile wallet like local payment or online payment, the funds arrive as soon as our payment partner processes the request. During high-traffic periods (such as around Liga 1 finals or Imlek celebrations), your withdrawal may queue behind others, but the queue does not reflect a problem with your account.
Always verify that the payment method you've linked matches the name on your KYC documents. If you try to withdraw to an account under a different name, we will reject the request as a fraud preventative. Update your linked payment methods in your account if you change banks or wallets.