Last Updated: January 1, 2026  |  Effective Date: January 1, 2026

1. Introduction and Scope

dipo4d ("we", "us", "our", or the "Company") operates the online gaming platform accessible at https://dipo4d.cam (the "Platform"). We are fully committed to protecting the personal information of every visitor and registered player who interacts with our services. This Privacy Policy (the "Policy") sets out in clear, plain language the categories of personal data we collect from users located in Indonesia and elsewhere, the purposes for which that data is processed, the parties with whom it may be shared, the safeguards we employ to keep it secure, and the rights you can exercise in relation to your data.

This Policy applies to all personal data collected through the Platform, our customer support channels (live chat, WhatsApp, email), our promotional communications, and any other service we operate under the dipo4d brand. By registering an account on dipo4d, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together govern your relationship with dipo4d.

2. Definitions

  • "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to a name, identification number, location data, online identifier, or factors specific to physical, economic, cultural, or social identity.
  • "Processing" means any operation performed on Personal Data, whether automated or not, including collection, recording, storage, adaptation, retrieval, use, disclosure, or erasure.
  • "Data Controller" means dipo4d, which determines the purposes and means of processing Personal Data.
  • "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
  • "Consent" means any freely given, specific, informed, and unambiguous indication of your wishes by which you signify agreement to the processing of your Personal Data.
  • "KYC" means Know Your Customer, the identity and age verification process we are obligated to conduct.

3. Personal Data We Collect

3.1 Registration and Account Data

When you create an account on dipo4d, we collect: your full legal name (as it appears on your Indonesian National Identity Card, or KTP), date of birth, gender, email address, mobile phone number, residential address (including city, province, and postal code), and your preferred username and password. This information is necessary to create and maintain your account, verify your identity, and comply with applicable regulatory requirements.

3.2 Identity Verification (KYC) Data

To process withdrawals and comply with anti-money laundering (AML) obligations, we collect copies of your Indonesian identity documents (KTP), proof of address (such as a utility bill or bank statement issued within the previous three months), and a selfie photograph of you holding your identity document. We may also request supplementary documents at our discretion where there is reasonable cause to do so.

3.3 Financial and Transaction Data

We collect the following financial information in connection with your deposits and withdrawals: your bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, or other supported banks), your e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, or LinkAja), transaction amounts and timestamps, currency (Indonesian Rupiah / IDR), deposit and withdrawal history, and details of any bonuses or promotions applied to your account. We do not store full debit or credit card numbers on our servers.

3.4 Gaming and Betting Activity Data

We maintain a complete record of your activity on the Platform, including all bets and wagers placed, game sessions and duration, win/loss history, bonus usage, and interaction with promotions. This data is used to operate the Platform, resolve disputes, detect fraud, and monitor for signs of problem gambling behaviour.

3.5 Device and Technical Data

When you access the Platform, our servers automatically collect certain technical information including your IP address, browser type and version, device type and operating system, screen resolution, time-zone setting, referring URL, pages visited, and session duration. This information is used for security monitoring, fraud prevention, and service optimisation.

3.6 Communications Data

When you contact our customer support team via live chat, WhatsApp, or email, we retain records of those communications including the content of messages, timestamps, and the outcome of any support request. These records are used for quality assurance, dispute resolution, training, and regulatory compliance.

3.7 Marketing Preferences

Where you have provided consent, we collect your marketing preferences, including the types of promotions and offers you wish to receive and your preferred communication channels (email, SMS, WhatsApp). You may withdraw marketing consent at any time through your account settings or by contacting support.

4. How We Collect Your Data

We collect Personal Data through the following means:

  • Direct interactions: Information you provide when registering, completing KYC, making transactions, contacting support, or participating in promotions.
  • Automated technologies: Cookies, web beacons, pixel tags, server logs, and similar tracking technologies collect technical data when you use the Platform.
  • Third-party sources: Identity verification providers, payment processors (including Indonesian banks and e-wallet operators), fraud prevention services, and analytics providers may share data with us in accordance with their own privacy policies.
  • Publicly available sources: We may supplement your information with data from publicly available sources to verify identity or detect fraud.

5. Legal Basis for Processing

We process your Personal Data on the following legal grounds:

  • Contractual necessity: Processing required to perform the contract between you and dipo4d, including operating your account, processing bets, and facilitating payments.
  • Legal obligation: Processing required to comply with anti-money laundering (AML) laws, identity verification requirements, and other applicable regulatory obligations.
  • Legitimate interests: Processing necessary for our legitimate business interests, including fraud detection, security monitoring, platform improvement, and responsible gaming monitoring, provided such interests are not overridden by your rights.
  • Consent: Processing based on your explicit consent, particularly for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. How We Use Your Personal Data

We use the Personal Data we collect for the following purposes:

  • Creating, managing, and securing your account
  • Processing deposits and withdrawals through Indonesian banks and e-wallets
  • Conducting KYC identity verification to comply with AML obligations
  • Operating sports betting, casino games, and other gaming services on the Platform
  • Detecting and preventing fraud, cheating, money laundering, and other prohibited activities
  • Monitoring for problem gambling behaviour and providing responsible gaming interventions
  • Personalising your experience, including recommending games and promotions relevant to your interests
  • Communicating with you about account matters, transaction notifications, security alerts, and support queries
  • Sending marketing communications where you have provided consent
  • Improving and optimising the Platform through analytics and user feedback
  • Complying with legal, regulatory, and audit requirements
  • Enforcing our Terms & Conditions and resolving disputes

7. Sharing and Disclosure of Personal Data

7.1 Service Providers and Data Processors

We share Personal Data with carefully selected third-party service providers who process data on our behalf under strict contractual data processing agreements. These include payment processing partners (Indonesian banks and e-wallet operato rs such as BCA, BRI, BNI, Mandiri, OVO, DANA, and GoPay), identity verification and KYC providers, fraud detection and cybersecurity firms, cloud hosting and infrastructure providers, customer support platform operators, email and SMS delivery services, and analytics and performance monitoring tools. All such providers are contractually prohibited from using your data for any purpose other than providing the contracted service to dipo4d.

7.2 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or regulatory directive. We may also disclose data where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of dipo4d, our users, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on the Platform before your data becomes subject to a different privacy policy as a result of such a transfer.

7.4 No Sale of Personal Data

dipo4d does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. Any sharing of data is strictly limited to the purposes described in this Policy.

8. International Data Transfers

Some of our service providers and infrastructure partners operate servers outside of Indonesia. Where your Personal Data is transferred internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses, data processing agreements, and technical security measures equivalent to those applied within Indonesia. By using the Platform, you acknowledge that your data may be processed in countries outside Indonesia that may have different data protection laws, and you consent to such transfers where necessary to deliver our services.

9. Data Retention

We retain your Personal Data for as long as your account remains active and for a minimum of five (5) years following account closure, in order to comply with anti-money laundering regulations, resolve disputes, enforce agreements, and respond to regulatory inquiries. KYC documents are retained for a minimum of five years from the date of verification. Transaction records are retained for a minimum of five years from the date of the transaction. Marketing consent records are retained until you withdraw consent, plus a further two years for compliance documentation purposes.

After the applicable retention period expires, we securely delete or anonymize your Personal Data in a manner that prevents reconstruction or identification. Anonymized and aggregated data (which cannot identify you) may be retained indefinitely for statistical analysis and service improvement purposes.

10. Security Measures

dipo4d employs a comprehensive, multi-layered security framework to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
  • AES-256 encryption for sensitive data stored in our databases, including KYC documents and financial records
  • Two-factor authentication (2FA) available for all user accounts
  • Firewall protection and intrusion detection systems monitoring for unauthorized access attempts
  • DDoS mitigation technology to maintain platform availability and protect against network-level attacks
  • Regular penetration testing and security audits conducted by independent cybersecurity firms
  • Strict access controls ensuring that only authorized personnel can access Personal Data, on a need-to-know basis
  • Employee training on data protection and information security best practices

While we implement industry-leading security measures, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that poses a significant risk to your rights and freedoms, we will notify you and any applicable regulatory authorities as required by law, within the timeframes prescribed by applicable data protection regulations.

Security Tip: Always use a strong, unique password for your dipo4d account and enable two-factor authentication. Never share your login credentials with anyone. dipo4d staff will never ask for your password.

11. Cookies and Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognize your device and remember information about your visit, such as your preferences and session status. We also use related technologies including web beacons, pixel tags, and local storage objects.

11.2 Categories of Cookies We Use

  • Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing core functionality.
  • Functional Cookies: Remember your preferences, such as language settings, display preferences, and recently viewed games, to provide a more personalized experience.
  • Analytics Cookies: Collect aggregated, anonymized data about how users interact with the Platform, including pages visited, time spent, and navigation paths. This data helps us improve our services.
  • Marketing Cookies: Used (with your consent) to deliver relevant promotional content based on your gaming interests and activity. These cookies do not track your activity outside the dipo4d Platform.

11.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking strictly necessary cookies may prevent the Platform from functioning correctly. Detailed instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation. You may also adjust your marketing cookie preferences at any time through your account settings on the Platform.

12. Your Privacy Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your Personal Data held by dipo4d:

  • Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
  • Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data. You can update most account information directly through your account settings.
  • Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (e.g., AML record-keeping requirements).
  • Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, for example while a dispute about its accuracy is resolved.
  • Right to Data Portability: You may request a copy of data you have provided to us in a structured, machine-readable format.
  • Right to Object: You may object to processing of your Personal Data based on our legitimate interests. You have an absolute right to object to direct marketing at any time.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will respond to all valid requests within 30 days of receipt. We may ask you to verify your identity before processing your request. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee.

13. Children's Privacy

The dipo4d Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not use the Platform or provide any personal information to us. If we discover that we have inadvertently collected data from a person under 21, we will delete that data immediately and close the associated account. Parents or guardians who believe that their child may have registered on the Platform are urged to contact us immediately at [email protected] so that we can take prompt action.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or business operations. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where we have your email address, by sending you an email notification at least 14 days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how we protect your data. Archived versions of previous Privacy Policies are available on request from our support team.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data processing practices, please contact our Data Protection team through any of the following channels:

  • Email: [email protected] (subject line: "Privacy Inquiry")
  • Live Chat: Available 24 hours a day, 7 days a week, directly on the Platform
  • WhatsApp: +62 812 3456 7890 (available 24/7 in Bahasa Indonesia and English)

We are committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.

Your Trust Matters: dipo4d is committed to handling your personal information with the highest standards of confidentiality and security. We never sell your data and will always be transparent about how it is used.

End-to-End Encryption

All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by major banks worldwide.

No Data Selling

We never sell, rent, or trade your personal information to third parties for commercial gain. Your data is used solely to operate and improve your gaming experience.

Secure KYC Handling

Your identity documents are encrypted, stored securely, and accessed only by authorized verification personnel. We delete KYC data after mandatory retention periods expire.

Full Data Control

You retain the right to access, correct, export, or erase your personal data at any time. Submit a request to our support team and we will respond within 30 days.

Transparent Cookie Use

We clearly explain every category of cookie we use and give you meaningful control over your cookie preferences through your account settings and browser options.

24/7 Privacy Support

Our bilingual support team is available around the clock to address any privacy concern, data request, or question about how your information is handled.

Have More Questions?

Review our Terms & Conditions for the full rules governing your account, or visit our FAQ for quick answers to the most common questions.