ddakji Casino & Sportsbook Data Care

This page describes what we collect when you use ddakji and how we keep that data protected. We collect personal information — your email, identity documents, payment details — only to verify your account, process deposits and withdrawals, and comply with regional law. We do not sell your data to third parties, and we do not use it for marketing beyond account notifications.

Our servers may sit outside your jurisdiction, but we encrypt all data in transit and at rest. Your account is protected by password and optional two-factor authentication. We review access logs regularly and alert you if we detect unusual activity. This policy explains our practices in plain language so you understand what happens to your information on ddakji.

We are committed to transparency. If you have questions about how we handle your data, contact our support team through live chat, email, or in-app help.

What we collect on ddakji

We collect your email address when you register. This is your account identifier and how we send you password resets, withdrawal confirmations, and security alerts. We collect your full name, date of birth, and national ID number during KYC verification — this is required by Indonesian law to prevent fraud and money laundering. We store a photo of your identity document (KTP, passport, or national ID) and proof of address (utility bill, rental agreement, or government letter) to verify your identity.

We collect your payment information — the bank account or e-wallet details you provide for deposits and withdrawals. We do not store full credit card numbers; payment processors handle card data directly. We collect your phone number if you enable two-factor authentication. We log your IP address, device type, and browser information when you access ddakji — this helps us detect unauthorized access and prevent fraud.

We collect gameplay data — your bets, wins, losses, and account balance history. This data is used to calculate your account statement, process withdrawals, and comply with audit requirements. We do not use gameplay data for any other purpose. We do not sell it to third parties or use it to profile you for marketing.

How we use your data

We use your email to send account notifications — password resets, deposit confirmations, withdrawal approvals, and security alerts. We use your identity information to verify your account and comply with KYC regulations. We use your payment details to process your deposits and withdrawals. We use your IP address and device information to detect fraud and prevent unauthorized access to your account.

We use your gameplay data to calculate your account balance, generate your transaction history, and process your withdrawal requests. We use this data to comply with audit and regulatory requirements. We do not use your data to profile you, target you with marketing, or sell it to third parties. We do not share your data with other gaming platforms or betting operators.

Our support team may access your account data to help you with login issues, KYC questions, or withdrawal reviews. Our compliance team accesses your data to verify account activity and detect suspicious patterns. Our technical team accesses logs to maintain platform security and investigate technical issues. All access is logged and reviewed regularly.

Third-party processors and data sharing

We use third-party payment processors to handle deposits and withdrawals. These processors receive your payment information — bank account or e-wallet details — to complete transactions. We do not control how these processors use your data; they have their own privacy policies. We select processors that meet security standards and comply with Indonesian law.

We may share your data with law enforcement or regulatory authorities if required by law. We do not share your data with marketing companies, data brokers, or other third parties. We do not use your data for targeted advertising. If we are acquired or merge with another company, we will notify you and give you the option to delete your account before any data transfer occurs.

Your rights on ddakji

You have the right to access your data. Log into your account and view your profile, transaction history, and account settings. You have the right to correct your data — if your name or address is wrong, contact support and we will update it. You have the right to delete your account and request that we delete your data, subject to legal retention requirements. We may retain your data for a period after account deletion to comply with audit and regulatory requirements.

You have the right to object to data processing. If you believe we are using your data inappropriately, contact our support team. You have the right to data portability — we can export your account data in a standard format if you request it. You have the right to lodge a complaint with the Indonesian data protection authority if you believe we have violated your privacy rights.

Cookies and tracking

We use cookies to keep you logged in and remember your preferences. These are session cookies that expire when you close your browser. We do not use cookies to track you across other websites. We do not use third-party tracking pixels or analytics that profile your behavior. Our website does not use Google Analytics or similar services that track users across the internet.

You can disable cookies in your browser settings, but this may prevent you from logging into your ddakji account. We do not use cookies for marketing or advertising purposes.

Security and data protection

We encrypt all data in transit using TLS (Transport Layer Security). Your password is hashed and salted — we do not store your password in plain text. We encrypt sensitive data at rest, including identity documents and payment information. We review access logs regularly and alert you if we detect unusual login activity from a new device or location.

We recommend enabling two-factor authentication in your account settings. This adds an SMS code requirement during login, preventing unauthorized access even if someone obtains your password. We recommend using a strong, unique password and changing it regularly. If you suspect your account has been compromised, change your password immediately and contact support.

Data retention

We retain your account data for as long as your account is active. After you delete your account, we retain your data for a period to comply with audit and regulatory requirements — typically 5–7 years. We may retain transaction records longer if required by law. We delete your identity documents and payment information after the retention period expires, unless we are required by law to retain them longer.

Contact us about your data

If you have questions about how we handle your data, contact our support team. We are available via live chat during platform hours, email at any time, and in-app help. You can also reach us through our office in Jakarta, Surabaya, Bandung, Medan, or Semarang — contact details are available in our legal notice.

We take data privacy seriously. If you believe we have violated your privacy rights, we encourage you to contact us first so we can address your concern. If you are not satisfied with our response, you have the right to lodge a complaint with the Indonesian data protection authority.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or in-app notification. Your continued use of ddakji after changes are posted means you accept the updated policy. We encourage you to review this page regularly to stay informed about how we protect your data.