Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set forth below:

• "Personal Data" or "Personal Information" refers to any information relating to an identified or identifiable individual, including but not limited to name, email address, phone number, postal address, date of birth, financial information, and online identifiers such as IP addresses and cookies.
• "Processing" refers to any operation performed on personal data, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, transmission, or deletion.
• "Data Controller" refers to dara88, the entity that determines the purposes and means of processing personal data.
• "Data Subject" refers to you, the individual whose personal data is being processed.
• "Third Party" refers to any individual or organization other than you or dara88, including payment processors, game providers, verification services, and marketing partners.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with dara88, you voluntarily provide personal information including:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (Indonesian KTP number, passport number, or driver's license number).
• Contact Information: Email address, mobile phone number (registered in Indonesia), residential address including street, city, postal code, and province.
• Account Credentials: Username, password, security questions and answers, and two-factor authentication settings.
• Financial Information: Bank account details (bank name, account holder name, account number) for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records.
• Verification Documents: Copies of identification documents (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), payment method verification documents, and selfie photographs with ID for enhanced verification.
• Communication Data: Records of your communications with our customer support team via live chat, email, or phone, including chat transcripts, email content, support tickets, and complaint details.

2.2 Information We Collect Automatically

When you access or use dara88 services, we automatically collect certain information about your device and usage patterns:

• Device Information: Device type (smartphone, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device manufacturer and model, unique device identifiers.
• Connection Information: IP address, Internet Service Provider (ISP), geographic location data (country, city, region based on IP address), connection type (WiFi, mobile data).
• Usage Information: Pages viewed, features used, time spent on each page, clicks and navigation patterns, games played, bets placed, search queries, referring URLs, date and time of access, session duration.
• Gaming Data: Betting history, game preferences, win/loss records, bonus usage, loyalty program participation, favorite games and sports, betting patterns and frequencies.
• Technical Data: Browser cookies, web beacons, pixel tags, local storage data, crash reports, error logs, performance metrics.

2.3 Information From Third-Party Sources

We may receive information about you from third-party service providers, including:

• Payment Processors: Transaction confirmation data, payment verification status, fraud risk assessments from Indonesian banks and e-wallet providers.
• Identity Verification Services: Age verification results, identity authentication status, address validation, document authenticity checks.
• Fraud Prevention Services: Risk scores, suspicious activity alerts, device fingerprinting data, IP reputation information.
• Marketing Analytics: Anonymized demographic data, user behavior patterns, market segment information (only when you have consented to marketing communications).

3. How We Use Your Information

dara88 processes your personal information for the following legitimate purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your member account
• Verifying your identity and age (21+ requirement)
• Processing deposits and withdrawals via Indonesian banks and e-wallets
• Enabling you to place bets on sports (bandar bola), play casino games, participate in togel draws, and bet on sabung ayam matches
• Managing your account balance and transaction history
• Processing bonus claims and tracking wagering requirements
• Administering VIP program membership and rewards

3.2 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests
• Providing customer service via live chat, email, and phone in Indonesian and English
• Sending transactional communications (deposit confirmations, withdrawal notifications, account alerts, password resets)
• Notifying you of account status changes, security alerts, or terms updates
• Resolving disputes and investigating complaints

3.3 Security, Fraud Prevention, and Compliance

• Detecting and preventing fraudulent activity, money laundering, collusion, and bonus abuse
• Monitoring for suspicious betting patterns and account anomalies
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Complying with legal obligations, regulatory requirements, and licensing conditions
• Responding to law enforcement requests and court orders
• Enforcing our Terms & Conditions and other platform policies
• Protecting the security and integrity of our platform infrastructure

3.4 Platform Improvement and Analytics

• Analyzing user behavior to improve platform functionality and user experience
• Testing new features, games, and services
• Conducting market research and statistical analysis
• Optimizing website performance, load times, and mobile responsiveness
• Identifying and fixing technical issues and bugs
• Developing new products and services tailored to Indonesian players

3.5 Marketing and Promotions (With Your Consent)

• Sending promotional emails about bonuses, tournaments, and special offers (only if you have opted in)
• Providing personalized game and betting recommendations based on your preferences
• Notifying you of new games, features, or significant platform updates
• Conducting promotional campaigns tied to Indonesian holidays (Indonesian Independence Day, Idul Fitri, Chinese New Year)

Note: You can opt out of marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account preferences, or contacting customer support. Opting out of marketing does not affect transactional communications necessary for account operation.

3.6 Responsible Gaming

• Monitoring gambling behavior for signs of problem gambling
• Enforcing deposit limits, loss limits, and session time limits you have set
• Processing self-exclusion and cooling-off period requests
• Providing reality check reminders during extended play sessions
• Preventing underage gambling by verifying age during registration

4. Information Sharing and Disclosure

dara88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients for the purposes described below:

4.1 Essential Service Providers

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These entities receive only the financial information necessary to complete transactions.
• Game Providers: Software suppliers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, Spribe) to deliver casino games, slots, and live dealer experiences. They may receive your username and betting activity but not your full personal details.
• Identity Verification Services: Third-party KYC providers to verify your age, identity, and address. These services receive your identification documents and personal details for verification purposes only.
• Cloud Hosting and IT Services: Infrastructure providers who host our servers, databases, and application platforms. They have limited access to encrypted data for maintenance and security purposes.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, regulators, law enforcement agencies, and courts when:

• Required by law, regulation, legal process, or governmental request
• Necessary to investigate suspected illegal activity, fraud, or violations of our Terms & Conditions
• Requested under anti-money laundering (AML) or counter-terrorism financing (CTF) regulations
• Required to protect the rights, property, or safety of dara88, our users, or the public
• Necessary to enforce legal claims or defend against legal proceedings

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and prominent platform notice before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Explicit Consent

We may share your information with third parties not listed above only with your explicit consent. You have the right to withdraw such consent at any time.

5. Data Security Measures

dara88 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols (minimum 256-bit encryption). Sensitive data stored in our databases is encrypted at rest using AES-256 encryption.
• Secure Authentication: Password requirements enforce strong passwords with minimum complexity. Optional two-factor authentication (2FA) provides an additional security layer for account access.
• Network Security: Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) protect our infrastructure from cyber attacks. Regular penetration testing and vulnerability assessments identify and remediate security weaknesses.
• Data Segregation: Personal data, financial data, and gaming data are stored in separate logical databases with access controls. Payment card data (if applicable) is tokenized and never stored in plaintext.
• Secure Development: Our development team follows secure coding practices and conducts code reviews to prevent vulnerabilities. All software updates undergo security testing before deployment.

5.2 Organizational Security Controls

• Access Controls: Only authorized employees with legitimate business need can access personal data. Access is granted on a role-based, least-privilege basis and logged for audit purposes.
• Staff Training: All employees receive regular data protection and information security training. Staff with access to sensitive data undergo additional specialized training.
• Confidentiality Agreements: All employees, contractors, and service providers sign confidentiality agreements prohibiting unauthorized data disclosure.
• Incident Response: We maintain a data breach response plan to quickly detect, contain, and remediate security incidents. Affected users will be notified promptly in accordance with applicable data breach notification laws.
• Regular Audits: Internal and external audits assess our compliance with security standards and data protection regulations.

5.3 Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication for enhanced security
• Log out after each session, especially on shared or public devices
• Never respond to phishing emails or messages requesting your password or personal information
• Keep your contact information current so we can reach you about security alerts
• Immediately notify customer support if you suspect unauthorized account access

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. dara88 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) to enhance your experience, analyze platform usage, and deliver personalized content.

6.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality including account login, session management, security features, and transaction processing. These cookies cannot be disabled without severely impairing platform usability.
• Performance Cookies: Collect anonymous information about how you use our platform, which pages are most visited, and any error messages encountered. This data helps us optimize performance and user experience.
• Functionality Cookies: Remember your preferences such as language selection, display settings, favorite games, and customized interface options to provide a personalized experience.
• Analytics Cookies: Help us understand user behavior patterns, traffic sources, and feature usage through tools like Google Analytics. This data is aggregated and anonymized.
• Marketing Cookies: Track your browsing activity to deliver targeted promotional content and measure advertising campaign effectiveness (only used if you have consented to marketing communications).

6.3 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to:

• View and delete cookies stored on your device
• Block third-party cookies while allowing first-party cookies
• Block all cookies (note: this may impair platform functionality)
• Receive notifications before cookies are stored

To opt out of analytics tracking, visit the cookie settings section of your account preferences. Note that disabling essential cookies will prevent you from using certain platform features including account login and payment processing.

7. Data Retention

dara88 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Active Account Data

While your account remains active, we retain your personal information, financial records, and gaming history to provide ongoing services, comply with legal obligations, and prevent fraud.

7.2 Closed Account Data

When you close your account voluntarily or we terminate your account:

• Identity and Financial Data: Retained for 7 years to comply with anti-money laundering regulations, taxation requirements, and dispute resolution needs.
• Transaction Records: Retained for 7 years for financial auditing, regulatory compliance, and fraud investigation purposes.
• Gaming History: Retained for 5 years for game integrity monitoring, dispute resolution, and regulatory reporting.
• Communication Records: Retained for 3 years for customer service quality assurance and dispute resolution.
• Marketing Data: Deleted immediately upon account closure or marketing opt-out, except where required for legal compliance.

7.3 Anonymized Data

We may retain anonymized, aggregated data indefinitely for statistical analysis, market research, and platform improvement. This data cannot be used to identify you personally.

8. Your Privacy Rights

As a dara88 user, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of all personal data we hold about you. To exercise this right, submit a data access request via email to [email protected] with the subject line "Data Access Request." We will respond within 30 days with a comprehensive report of your data.

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you can update it directly through your account settings or by contacting customer support. We will correct verified inaccuracies within 10 business days.

8.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose, you withdraw consent, or you object to processing. Note that we may be legally required to retain certain data (e.g., financial records for 7 years), and deletion requests will be subject to these legal obligations.

8.4 Right to Restrict Processing

You can request that we limit how we use your personal information in specific situations, such as while we investigate a complaint you have made about data accuracy.

8.5 Right to Data Portability

You can request a machine-readable export of your personal data to transfer to another service provider. We will provide data in commonly used formats (CSV, JSON, PDF).

8.6 Right to Object

You can object to processing of your personal data for marketing purposes at any time by clicking unsubscribe links in emails or adjusting your account preferences. You may also object to processing based on legitimate interests by contacting our Data Protection Officer.

8.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] or through the account settings section. We may request additional verification of your identity before processing requests to prevent unauthorized access.

9. Children's Privacy

dara88 services are strictly for individuals aged 21 years or older, consistent with Indonesian legal requirements for gambling participation. We do not knowingly collect personal information from individuals under 21 years of age.

If we discover that we have inadvertently collected personal data from someone under 21, we will immediately delete that information and permanently close the associated account. If you believe an underage individual has provided personal information to dara88, please contact us immediately at [email protected].

Parents and guardians should monitor their children's internet usage and ensure minors do not access gambling websites. We recommend using parental control software to block gambling sites on devices accessible to children.

10. Changes to This Privacy Policy

dara88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Send email notifications to all registered users
• Display a prominent notice on the platform homepage and login page
• Require acceptance of the updated policy before you can continue using services (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of dara88 services after policy updates are posted constitutes acceptance of the revised terms.

11. Contact Our Data Protection Officer