Terms & Privacy

1. Who we are

This policy applies to the Tales Hero Indonesia (THI) website, including account features, Point purchases, transaction history, and support services available on the website.

2. Data we collect

The types of data we process depend on the features you use, including:

• Account data: user ID, character information, and data needed to manage the account.
• Transaction data: order number, selected package, amount, transaction time, payment status, and destination account.
• Support data: message content, email address, and transaction evidence sent when requesting help.
• Technical data: IP address, browser and device information, access time, and security records needed to protect the service.
• Session data: cookies or session data needed to keep you logged in and protect your account.

Please do not send passwords, PINs, OTP codes, card numbers, or confidential payment data through support channels.

3. How we use data

Data is used only as needed to:

• create and manage accounts and maintain the login process;
• process orders, verify payments, and deliver Point and bonuses;
• show purchase history and help resolve transaction issues;
• detect fraud, abuse, unauthorized access, and security incidents;
• maintain, improve, and develop the service; and
• meet legal obligations or respond to lawful requests from authorities.

4. Payments through Midtrans

Payments are processed by Midtrans as a payment service provider. THI receives the information needed to match an order, such as order number, amount, payment method, and transaction status. Sensitive data such as payment PINs or card numbers is processed by Midtrans under its own policy and does not need to be sent to THI.

5. When data is shared

We do not sell personal data. Data may be shared in a limited way with providers that support service operations, such as payment, hosting, database, or technical providers, only for necessary purposes. We may also share data when required by law or needed to protect the security, rights, and users of the service.

6. Storage and security

We retain data as long as needed to operate accounts, complete transactions, handle disputes, maintain security, or meet record-keeping obligations. We use reasonable safeguards to limit access and prevent loss or unauthorized use. No online system can be guaranteed completely secure, so users must also protect their passwords.

7. Cookies and login sessions

The website uses cookies or session mechanisms required for login, security, and feature operation. If cookies are blocked, features such as login or checkout may not work correctly. We do not use cookies to request passwords or payment PINs.

8. User rights

You may ask about data related to your account, correct inaccurate information, or request deletion when data is no longer needed and deletion does not conflict with record-keeping, security, or transaction obligations. To prevent abuse, we may ask you to verify that a request comes from the account owner.

9. Children and fair use

THI services are intended for reasonable use by people who are permitted to create and use an account. If a parent or guardian finds that a child's data was provided without permission, please contact us for review.

10. Third-party links

The website may link to Facebook, Instagram, Discord, Midtrans, or other third-party services. When you open those links, data processing follows each provider's privacy policy, not the THI Privacy Policy.

11. Policy changes

This policy may be updated when the service, payment providers, or applicable regulations change. The update date will be shown at the top of the page. We recommend checking this page before using important features or making a purchase.

12. Contact us

For questions, data requests, or security reports, contact us through the Contact page or by email at [email protected]. Include your account ID and order number when relevant, but never include a password, PIN, or OTP code.