Privacy Policy

1. Introduction

This Privacy Policy governs the collection, processing, and use of personal data by daplay (referred to as "we", "us", "our") in connection with the online gaming services provided through daplay.cam (the "Website"). This policy applies to all users of daplay, including residents of Indonesia who are at least 21 years of age.

We are committed to safeguarding the privacy of our users and ensuring that personal data is handled in accordance with international best practices and applicable data protection regulations. This policy should be read in conjunction with our Terms & Conditions, which govern your use of daplay services.

2. Data Controller

For the purposes of data protection law, daplay acts as the data controller for personal information collected through our Website and services. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable privacy regulations.

If you have questions or concerns about how we handle your personal data, please contact us at [email protected].

3. Information We Collect

daplay collects various types of personal information to provide, maintain, and improve our services. The categories of data we collect include:

3.1 Information You Provide Directly

When you register an account with daplay, you voluntarily provide us with personal information including:

• Identity Information: Full name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP or passport number).
• Contact Information: Email address, phone number, residential address, and postal code.
• Financial Information: Bank account details, e-wallet account information, payment card numbers (stored securely by our payment processors), and transaction history.
• Account Credentials: Username, password (encrypted), and security questions/answers.
• Verification Documents: Copies of identity documents (KTP, passport), proof of address (utility bills, bank statements), and payment method verification documents.

3.2 Information Collected Automatically

When you use daplay, we automatically collect certain technical and usage information:

• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features used, time spent on the Website, clickstream data, referral source, and navigation paths.
• Gaming Activity: Games played, bets placed, stakes, winnings, losses, session duration, gameplay patterns, and betting history.
• Location Data: Approximate geographic location derived from IP address to verify Indonesian residency and comply with geo-blocking requirements.
• Cookies and Tracking Technologies: Information collected via cookies, web beacons, and similar technologies (see Section 9 for details).

3.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment status, and fraud prevention data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
• Identity Verification Services: Verification results from KYC (Know Your Customer) compliance services that authenticate your identity documents.
• Fraud Prevention Agencies: Information related to fraud detection, risk assessment, and security screening.
• Marketing Partners: Aggregated demographic and interest data (non-personally identifiable) to improve targeting of promotions.

4. How We Use Your Information

daplay processes your personal data for the following legitimate purposes:

4.1 Service Provision and Account Management

• Create and maintain your daplay account.
• Process deposits, withdrawals, and other financial transactions.
• Provide access to casino games, sports betting, and lottery services.
• Maintain accurate records of your gaming activity and transaction history.
• Communicate with you about your account, transactions, and service updates.

4.2 Legal and Regulatory Compliance

• Verify your identity and age to ensure you are at least 21 years old and eligible to gamble.
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Detect and prevent fraud, money laundering, and other illegal activities.
• Respond to legal requests from law enforcement or regulatory authorities.
• Enforce our Terms & Conditions and prevent prohibited activities.

4.3 Security and Fraud Prevention

• Monitor for suspicious account activity and unauthorized access.
• Implement security measures to protect against cyber attacks and data breaches.
• Verify the legitimacy of financial transactions and detect payment fraud.
• Identify and prevent bonus abuse, collusion, and other forms of gaming fraud.

4.4 Customer Support

• Respond to your inquiries, complaints, and support requests.
• Troubleshoot technical issues and resolve disputes.
• Provide assistance with deposits, withdrawals, and account verification.
• Maintain records of customer service interactions for quality assurance.

4.5 Marketing and Promotions

• Send promotional emails about bonuses, special offers, and new games (with your consent).
• Personalize marketing communications based on your gaming preferences and activity.
• Conduct surveys and gather feedback to improve our services.
• Analyze user behavior to optimize website performance and user experience.

4.6 Responsible Gaming

• Monitor gaming patterns to identify potential problem gambling behaviors.
• Implement deposit limits, loss limits, and session time alerts.
• Process self-exclusion requests and ensure compliance with exclusion periods.
• Provide resources and support for players experiencing gambling-related harm.

5. Legal Basis for Processing

Under applicable data protection law, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms & Conditions and provide gaming services you have requested.
• Legal Obligation: Processing is required to comply with KYC, AML, age verification, and other regulatory requirements.
• Legitimate Interests: Processing is necessary for fraud prevention, security, and improving our services, provided such interests are not overridden by your data protection rights.
• Consent: Where required, we obtain your explicit consent before processing data for marketing purposes or using certain cookies.

6. Data Sharing and Disclosure

daplay does not sell your personal data to third parties. However, we may share your information with trusted partners and service providers in the following circumstances:

6.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and other software suppliers whose games you play on daplay.
• Identity Verification Services: Third-party KYC providers that verify your identity documents and perform background checks.
• Cloud Hosting Providers: Secure servers and data centers where your information is stored.
• Customer Support Platforms: Live chat software and ticketing systems used by our support team.

6.2 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement, regulators, courts, or government agencies when:

• Required by law, court order, or legal process.
• Necessary to comply with regulatory obligations or licensing requirements.
• Responding to lawful requests for information in criminal investigations.
• Protecting the rights, property, or safety of daplay, our users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity as part of the business transaction. We will notify you via email or prominent notice on the Website before your data is transferred and becomes subject to a different privacy policy.

7. Data Retention

daplay retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Type	Retention Period	Reason
Account Information	Duration of account + 5 years after closure	Regulatory compliance, dispute resolution
Transaction Records	7 years from transaction date	Financial reporting, tax compliance, AML requirements
KYC Documents	5 years after account closure	Regulatory obligations, fraud prevention
Gaming History	5 years from last activity	Dispute resolution, responsible gaming monitoring
Marketing Consent	Until withdrawal of consent	Legal requirement to honor opt-out requests
Customer Support Records	3 years from last interaction	Quality assurance, complaint handling

When personal data is no longer needed, we securely delete or anonymize it in accordance with data protection best practices.

8. Data Security

daplay implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration:

• Encryption: All data transmission between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, payment details) is encrypted using industry-standard algorithms.
• Access Controls: Personal data is accessible only to authorized employees and contractors who need it to perform their duties. Access is granted on a least-privilege basis and monitored through audit logs.
• Secure Infrastructure: Data is stored on enterprise-grade servers in secure data centers with physical access controls, fire suppression, and redundant power systems.
• Regular Security Audits: We conduct periodic vulnerability assessments, penetration testing, and security audits to identify and remediate weaknesses.
• Incident Response: We maintain a data breach response plan to detect, investigate, and mitigate security incidents. In the event of a breach affecting your data, we will notify you as required by law.
• Payment Security: Credit card and bank account details are processed through PCI-DSS compliant payment gateways. daplay does not store full payment card numbers on our servers.

While we implement stringent security measures, no system is completely invulnerable. You also play a role in protecting your data by keeping your account credentials confidential, using strong passwords, and logging out after gaming sessions on shared devices.

9. Cookies and Tracking Technologies

daplay uses cookies and similar tracking technologies to enhance user experience, analyze website traffic, and deliver personalized content.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to remember your preferences, recognize you on return visits, and track your browsing behavior.

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Website to function properly. These enable core features like account login, secure transactions, and session management. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous data about how visitors use the Website, such as most-visited pages and error messages. This helps us improve website performance.
• Functionality Cookies: Remember your preferences (language, currency, region) to provide a personalized experience.
• Advertising Cookies: Track your browsing activity to deliver targeted advertisements and measure campaign effectiveness. These cookies may be set by third-party ad networks.

9.3 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies, but doing so may impact website functionality. Disabling essential cookies will prevent you from using certain features of daplay.

10. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you, including details about how it is processed.
• Right to Rectification: Correct inaccurate or incomplete personal information in your account.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements.
• Right to Restriction: Limit how we process your data in certain circumstances (e.g., while disputing accuracy).
• Right to Data Portability: Receive your personal data in a structured, machine-readable format and transfer it to another service provider.
• Right to Object: Object to processing based on legitimate interests, particularly for direct marketing purposes.
• Right to Withdraw Consent: Withdraw previously granted consent for marketing communications or optional data processing.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days. Please note that certain rights may be limited by legal obligations (e.g., we cannot delete transaction records required for regulatory compliance).

11. International Data Transfers

Your personal data may be transferred to and processed in countries outside Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law. When transferring data internationally, we implement safeguards such as:

• Standard contractual clauses approved by data protection authorities.
• Ensuring recipients are located in countries with adequate data protection laws.
• Requiring third-party service providers to implement appropriate security measures.

By using daplay, you consent to the transfer of your personal data outside Indonesia for the purposes described in this Privacy Policy.

12. Children's Privacy

daplay services are strictly for individuals aged 21 and over. We do not knowingly collect personal data from anyone under 21 years of age. If we discover that a minor has provided personal information, we will immediately delete their account and data.

If you believe a person under 21 has registered on daplay, please contact us immediately at [email protected] so we can take appropriate action.

13. Third-Party Websites

The daplay Website may contain links to third-party websites, including payment processors, game providers, and social media platforms. This Privacy Policy applies only to daplay. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

14. Changes to This Privacy Policy

daplay reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated via:

• Email notification to your registered email address.
• Prominent notice on the Website homepage or login screen.
• In-account message upon next login.

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Continued use of daplay services after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through the Website
• WhatsApp: +62 812 3456 7890 (09:00 - 02:00 WIB)

We are committed to resolving privacy concerns promptly and will respond to your inquiry within 5 business days.