PRIVACY POLICY

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by duta88 through our website (https://duta88.cam), mobile applications, customer support channels, and any other digital platforms we operate. This policy governs data collected from users accessing our services from Indonesia and covers all gaming products we offer, including sports betting (including bandar bola football bookmaking markets), live casino games, slot machines, togel (Indonesia's traditional numbers lottery), and other gaming entertainment options.

duta88 acts as the data controller for all personal information collected through our platform. We are responsible for determining how your personal data is processed and ensuring compliance with applicable data protection laws and regulations in Indonesia. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern the overall use of our services.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a duta88 account, verify your identity, or use our services, we collect the following categories of personal information that you voluntarily provide:

• Identity Information: Full legal name, date of birth, place of birth, nationality, government-issued identification number (Indonesian National ID or passport number), and copies of identification documents submitted during KYC verification.
• Contact Information: Email address, mobile phone number, residential address (street address, city, province, postal code), and preferred communication language.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay account identifiers), payment transaction history, deposit amounts, withdrawal amounts, and payment method preferences.
• Account Credentials: Username, password (stored in encrypted form only), security questions and answers, and two-factor authentication settings.
• Verification Documents: Copies of government-issued photo identification, proof of address documents (utility bills, bank statements), selfie photographs for identity verification, and any additional documentation requested during enhanced due diligence procedures.
• Communications: Content of messages sent to customer support via live chat, email, WhatsApp, or in-app messaging, including your questions, complaints, feedback, and our responses.

2.2 Information Automatically Collected

When you access and use the duta88 platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, advertising ID), and device settings.
• Connection Information: IP address, internet service provider, connection type (WiFi, mobile data), approximate geographic location (city and country level based on IP address), and network performance data.
• Usage Data: Pages visited on our website, games played, bet types and amounts, session duration, click patterns, navigation paths, time spent on specific pages, feature usage, and interaction with promotional offers.
• Transaction Data: Complete history of deposits, withdrawals, bets placed, bet outcomes, winnings, losses, bonus activations, wagering progress, and account balance changes.
• Marketing Data: Responses to promotional emails, click-through rates on marketing communications, promotional offer redemptions, and marketing preference settings.

2.3 Information from Third Parties

In certain circumstances, we may receive personal information about you from third-party sources, including:

• Payment Processors: Transaction confirmation data, payment authentication results, and fraud risk assessments from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay).
• Identity Verification Services: Identity verification results, document authentication confirmations, and fraud detection alerts from third-party KYC service providers.
• Gaming Software Providers: Game session data, RNG results, and gameplay statistics from our licensed software partners (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe).
• Regulatory Authorities: Information shared by Indonesian regulatory bodies for compliance, auditing, or investigation purposes.

3. How We Use Your Information

duta88 processes your personal information for the following legitimate business purposes and legal obligations:

3.1 Account Management and Service Delivery

• Creating and maintaining your duta88 player account, including account registration, login authentication, and profile management.
• Processing deposits and withdrawals to and from your account using Indonesian banks and e-wallets.
• Enabling you to place bets on sports events, play casino games, slot machines, togel draws, and other gaming products.
• Calculating and crediting winnings, processing payouts, and maintaining accurate account balances.
• Providing customer support through live chat, email, WhatsApp, and other support channels.
• Communicating important account notifications, transaction confirmations, security alerts, and service updates.

3.2 Legal Compliance and Security

• Verifying your identity and age to ensure you are at least 21 years old and eligible to use online gaming services in Indonesia.
• Conducting Know Your Customer (KYC) verification to comply with anti-money laundering (AML) regulations and counter-terrorism financing (CTF) obligations.
• Detecting, preventing, and investigating fraud, money laundering, bonus abuse, account sharing, and other prohibited activities.
• Monitoring transactions for suspicious patterns that may indicate criminal activity or regulatory violations.
• Complying with legal obligations, court orders, regulatory requests, and government authority inquiries.
• Maintaining audit trails and transaction records as required by applicable Indonesian gambling regulations.
• Protecting the security and integrity of our platform against hacking, unauthorized access, data breaches, and cyber attacks.

3.3 Service Improvement and Personalization

• Analyzing usage patterns and player behavior to improve platform performance, user experience, and game offerings.
• Personalizing your gaming experience by recommending games, betting markets, and features based on your preferences and activity history.
• Testing new features, conducting A/B tests, and gathering feedback to enhance our services.
• Optimizing website load times, mobile app performance, and technical infrastructure based on usage data.
• Understanding which payment methods, games, and sports betting markets are most popular among Indonesian players.

3.4 Marketing and Promotional Communications

• Sending promotional offers, bonus announcements, exclusive deals, and marketing communications via email, SMS, push notifications, and in-app messages (only with your consent).
• Informing you about new games, special events, tournaments, and platform updates that may interest you.
• Conducting market research, surveys, and promotional campaigns to better understand Indonesian player preferences.
• Managing loyalty programs, VIP rewards, and player retention initiatives.

3.5 Responsible Gaming Protection

• Monitoring player activity for signs of problem gambling behavior, including excessive deposits, prolonged sessions, or unusual betting patterns.
• Implementing deposit limits, loss limits, session time reminders, and self-exclusion measures you have requested.
• Providing reality check notifications and responsible gaming tools to help you maintain control over your gambling activity.
• Contacting players who may be at risk of developing gambling problems to offer support resources and intervention options.

4. Legal Basis for Processing

Under applicable data protection laws, duta88 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing necessary to provide gaming services, process transactions, and fulfill our obligations under the Terms and Conditions you agreed to when creating your account.
• Legal Obligations: Processing required to comply with Indonesian laws, regulations, and legal obligations including KYC/AML requirements, age verification mandates, and regulatory reporting obligations.
• Legitimate Interests: Processing necessary for our legitimate business interests in operating a secure platform, preventing fraud, improving services, and ensuring platform integrity, provided these interests do not override your fundamental privacy rights.
• Consent: Processing based on your explicit consent for specific purposes such as marketing communications, cookies, and non-essential data collection (you may withdraw consent at any time).

5. Data Sharing and Disclosure

duta88 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for legitimate business purposes:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals.
• Gaming Software Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other licensed game suppliers who power our casino games and slots.
• Identity Verification Services: Third-party KYC and AML screening providers who verify your identity documents and conduct background checks.
• Cloud Hosting Providers: Secure data center and cloud infrastructure providers who host our platform and store encrypted data backups.
• Customer Support Tools: Live chat software providers, email service platforms, and customer relationship management (CRM) systems used to deliver support services.
• Analytics Providers: Web analytics and data analysis tools that help us understand platform usage and player behavior (using anonymized data where possible).

All third-party service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws. We conduct due diligence on all partners to ensure appropriate security measures are in place.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement, regulatory authorities, courts, or government agencies when:

• Required by law, court order, subpoena, or legal process.
• Necessary to comply with regulatory reporting obligations or audits.
• Required to investigate suspected fraud, money laundering, or other criminal activity.
• Necessary to protect the rights, property, or safety of duta88, our players, or the public.
• Requested by Indonesian tax authorities for tax compliance purposes.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and prominent platform notice before your data is transferred and becomes subject to a different privacy policy.

6. Data Security Measures

duta88 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmissions between your device and our servers are protected using industry-standard 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, financial information) is encrypted using AES-256 encryption algorithms.
• Access Controls: Strict role-based access controls limit employee access to personal data on a need-to-know basis. Multi-factor authentication is required for all administrative access to databases and systems.
• Network Security: Firewalls, intrusion detection systems, and DDoS protection safeguard our infrastructure against external attacks and unauthorized network access.
• Secure Data Centers: All servers are hosted in secure, certified data centers with 24/7 physical security, environmental controls, and redundant power systems.
• Regular Security Audits: We conduct regular internal security audits, vulnerability assessments, and penetration testing to identify and address potential security weaknesses.
• Employee Training: All duta88 employees receive mandatory data protection and security awareness training to ensure proper handling of personal information.
• Incident Response: We maintain a documented incident response plan to quickly detect, contain, and remediate any data breaches or security incidents.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to enhance our protections against evolving threats.

7. Data Retention

duta88 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:

• Active Accounts: Personal data is retained for the duration of your active account relationship with duta88 plus a reasonable period afterward to address any disputes or legal claims.
• Closed Accounts: After you close your account, we retain certain personal information for a minimum of 5 years to comply with Indonesian financial record-keeping regulations, tax obligations, and anti-money laundering requirements.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for 7 years in accordance with Indonesian financial regulations and audit requirements.
• Marketing Data: Marketing preference data and communication history are deleted within 12 months after you unsubscribe or request removal from marketing lists.
• Legal Holds: If your data is subject to ongoing legal proceedings, regulatory investigations, or disputes, retention may be extended until the matter is fully resolved.

Once the retention period expires and data is no longer required for legal or business purposes, we securely delete or anonymize your personal information to prevent identification.

8. Your Privacy Rights

Under applicable Indonesian data protection laws, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To submit an access request, contact our customer support team with your account details. We will provide a comprehensive report of your data within 30 days of verification. The first copy is provided free of charge; additional copies may incur a reasonable administrative fee.

8.2 Right to Correction

If you believe any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update many details directly through your account settings (email, phone, address), or contact support for assistance with other data fields.

8.3 Right to Deletion

You may request deletion of your personal information when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent where processing was based on consent. However, we may retain certain data where legally required (e.g., transaction records for tax and AML compliance).

8.4 Right to Restrict Processing

You may request that we limit how we process your personal information in certain circumstances, such as when you contest the accuracy of data or object to processing based on legitimate interests.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider where technically feasible.

8.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications through your account settings or by clicking unsubscribe links in promotional emails.

8.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications, optional cookies), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 12. We will respond to your request within 30 days after verifying your identity.

9. Cookies and Tracking Technologies

duta88 uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits.

9.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Enable core platform functionality like login, account access, and transaction processing. These cannot be disabled.	Session or up to 1 year
Performance Cookies	Collect anonymous usage statistics to help us understand how visitors interact with our platform and identify technical issues.	Up to 2 years
Functionality Cookies	Remember your preferences (language, timezone, display settings) to provide a personalized experience.	Up to 1 year
Marketing Cookies	Track your activity across sessions to deliver relevant promotional offers and measure marketing campaign effectiveness.	Up to 1 year

9.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may impact platform functionality. To opt out of marketing cookies specifically, adjust your preferences in your duta88 account settings under Privacy & Communications. Note that disabling essential cookies will prevent you from accessing your account and using our services.

10. Children's Privacy

duta88 services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will immediately delete such information and close the associated account. If you believe a minor has provided personal information to duta88, please contact us immediately at the email address provided in Section 12.

11. International Data Transfers

Your personal information is primarily stored on secure servers located within Indonesia to ensure compliance with local data residency requirements. However, some of our third-party service providers (such as cloud infrastructure providers and gaming software suppliers) may process data on servers located outside Indonesia. When international data transfers occur, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities.
• Adequacy decisions confirming the recipient country provides adequate data protection.
• Binding corporate rules for transfers within our corporate group.
• Explicit consent for specific transfers where required by law.

12. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how duta88 handles your personal information, please contact our Data Protection Officer:

For general customer support inquiries not related to privacy or data protection, please use the standard support channels: [email protected] or live chat.

13. Changes to This Privacy Policy

duta88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Sending an email notification to the address registered on your account.
• Displaying a prominent notice on our homepage and within your account dashboard.
• Requiring you to review and accept the updated policy before continuing to use certain services.

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of duta88 services after policy changes constitutes your acceptance of the updated terms.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Indonesia, including applicable data protection and privacy regulations. Any disputes arising from this Privacy Policy or our data practices shall be subject to the exclusive jurisdiction of the competent courts in Jakarta, Indonesia.