Privacy Policy

1. Introduction

Welcome to the Privacy Policy of dara4d. We recognize that your personal data is valuable and sensitive, and we are committed to handling it with the highest standards of care, transparency, and security. This Privacy Policy governs the collection, processing, storage, and disclosure of personal information gathered through your use of the dara4d platform, accessible at https://dara4d.cam and all associated services.

By creating an account, depositing funds, placing bets, or otherwise interacting with the dara4d platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with any aspect of this policy, please discontinue use of our services immediately.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the broader contractual relationship between you and dara4d.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal information is dara4d, the operator of the platform at https://dara4d.cam. The data controller determines the purposes and means of processing personal data and is accountable for compliance with data protection regulations.

All inquiries, requests, or complaints regarding the processing of your personal data should be directed to our Data Protection Officer at the contact details provided in Section 14 of this Privacy Policy.

3. Data We Collect

dara4d collects several categories of personal data to provide, secure, and improve our services. The specific data collected depends on how you interact with the platform. Categories of data collected include:

3.1 Identity and Contact Information

• Full legal name (as it appears on your Indonesian National Identity Card — KTP Nasional)
• Date of birth and age verification data
• Email address
• Mobile telephone number
• Residential address (city, province, postal code)
• National identity card number (KTP) or passport number
• Photographic copies of identity documents submitted for KYC verification
• Selfie photographs holding identity documents

3.2 Account and Transaction Information

• Username and encrypted password
• Account balance and transaction history (deposits, withdrawals, wagers, winnings)
• Payment method details (bank account number and bank name, e-wallet phone number)
• Deposit and withdrawal timestamps, amounts, and currency
• Bonus claim history and wagering progress
• Account settings and preferences (language, notifications, responsible gaming limits)

3.3 Behavioral and Gaming Data

• Betting history (sports bets, togel lottery entries, casino game rounds, live dealer sessions)
• Game preferences and session duration
• Device type, operating system, browser type, and screen resolution
• IP address, approximate geolocation (city-level, derived from IP), and timezone
• Pages visited, links clicked, and navigation patterns on the platform
• Timestamps of login, logout, and session activity

3.4 Communications Data

• Support tickets, live chat transcripts, and email correspondence with customer service
• Feedback, survey responses, and complaint records
• Marketing communication preferences (opt-in/opt-out status)

3.5 Compliance and Fraud Prevention Data

• Source of funds documentation (bank statements, payslips, proof of income)
• Enhanced due diligence records for high-value transactions
• Records of self-exclusion requests and responsible gaming interactions
• Fraud detection markers, risk scores, and anomaly flags generated by our security systems

4. How We Collect Data

dara4d collects personal data through the following methods:

4.1 Directly From You

The majority of personal information is provided directly by you during account registration, when you complete your player profile, upload KYC documents, make deposits or withdrawals, place bets, communicate with support, or adjust account settings.

4.2 Automatically Through Your Use of the Platform

Certain data is collected automatically as you navigate and interact with the platform. This includes device information, IP address, session data, and behavioral analytics captured through cookies, web beacons, and similar tracking technologies. See Section 10 for more details on cookies.

4.3 From Third-Party Service Providers

We may receive data from third-party partners who assist in providing our services, including:

• Payment processors (banks, e-wallet providers) who confirm transaction success and account ownership
• Identity verification services that validate the authenticity of submitted documents
• Fraud detection and prevention services that analyze transaction patterns
• Marketing analytics providers (with your consent) who measure campaign performance

4.4 From Publicly Available Sources

In certain compliance scenarios, we may supplement your data with information from publicly accessible sources such as sanctions lists, politically exposed persons (PEP) databases, and adverse media screening tools to fulfill our anti-money-laundering obligations.

5. How We Use Your Data

dara4d processes your personal data for the following purposes, each grounded in a lawful basis under applicable data protection law:

5.1 Account Management and Service Provision

Purpose: To create, maintain, and administer your player account; to process deposits and withdrawals; to settle bets and credit winnings; to manage bonuses and loyalty programs.
Lawful Basis: Performance of contract (our Terms & Conditions with you).

5.2 Identity Verification and Compliance

Purpose: To verify your age (21+ requirement); to confirm your identity and prevent fraud, money laundering, and account takeover; to comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
Lawful Basis: Legal obligation and legitimate interest in preventing fraud and complying with regulatory requirements.

5.3 Customer Support and Communication

Purpose: To respond to your inquiries, resolve technical issues, process complaints, and provide general assistance.
Lawful Basis: Performance of contract and legitimate interest in maintaining customer satisfaction.

5.4 Platform Security and Fraud Prevention

Purpose: To monitor for suspicious activity, detect and prevent fraud, protect against unauthorized access, and enforce our Terms & Conditions (including detection of multi-accounting, bonus abuse, and collusion).
Lawful Basis: Legitimate interest in protecting our business, other users, and the integrity of the platform.

5.5 Responsible Gaming and Player Protection

Purpose: To implement self-exclusion requests, enforce deposit and loss limits, monitor for problem gambling indicators, and provide responsible gaming resources.
Lawful Basis: Legal obligation (where required by licensing conditions) and legitimate interest in promoting player welfare.

5.6 Marketing and Promotional Communications (With Consent)

Purpose: To send you promotional offers, bonus announcements, newsletters, and personalized recommendations based on your gaming preferences — only if you have opted in to receive such communications.
Lawful Basis: Consent. You may withdraw consent and unsubscribe at any time via your account settings or the unsubscribe link in any marketing email.

5.7 Analytics and Platform Improvement

Purpose: To analyze user behavior, measure platform performance, identify technical issues, optimize user experience, and develop new features and game offerings.
Lawful Basis: Legitimate interest in improving our services and maintaining a competitive platform.

5.8 Legal and Regulatory Reporting

Purpose: To respond to lawful requests from law enforcement, regulatory authorities, and courts; to comply with tax reporting obligations; to enforce legal rights and defend against claims.
Lawful Basis: Legal obligation and legitimate interest in protecting our legal rights.

6. Data Sharing & Disclosure

dara4d does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality and data protection obligations:

6.1 Service Providers and Processors

We engage trusted third-party service providers to perform functions on our behalf, including payment processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay), identity verification, fraud screening, cloud hosting, customer support platforms, and email delivery. These providers process your data solely on our instructions and are contractually bound to protect your information.

6.2 Game Developers and Platform Providers

Certain game studios and live casino providers (such as Evolution Gaming, Pragmatic Play, and others) may receive limited technical data (username, session ID, bet history) necessary to operate their games and settle wagers. These partners are bound by confidentiality agreements.

6.3 Regulatory and Licensing Authorities

We may disclose your data to gaming regulators, licensing bodies, and compliance auditors as required by the terms of our operating license or applicable gambling law.

6.4 Law Enforcement and Legal Authorities

We may disclose your data in response to lawful requests from courts, law enforcement agencies, or government authorities; to comply with subpoenas or legal process; to enforce our Terms & Conditions; or to protect the rights, property, or safety of dara4d, our users, or the public.

6.5 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy. You will be notified of any such transfer.

7. Data Security

dara4d employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security). Passwords are hashed using bcrypt with salting. Sensitive personal data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. All staff undergo data protection training and are bound by confidentiality obligations.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services.
• Regular Security Audits: We conduct periodic penetration testing, vulnerability assessments, and security audits performed by independent third-party firms.
• Incident Response Plan: We maintain a documented data breach response plan to detect, contain, and report security incidents within the timeframes required by applicable law.

While we implement robust security measures, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

8. Data Retention

dara4d retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Retention periods vary by data type:

• Account and Transaction Data: Retained for the duration of your active account, plus seven (7) years following account closure to comply with financial record-keeping and AML obligations.
• Identity Verification Documents: Retained for seven (7) years following account closure or the last KYC verification, in line with regulatory requirements.
• Marketing Communications Data: Retained until you withdraw consent or request deletion, after which it is removed within 30 days.
• Customer Support Records: Retained for three (3) years following case resolution for quality assurance and dispute resolution purposes.
• Fraud and Security Logs: Retained for up to ten (10) years to support ongoing fraud investigations, legal proceedings, and regulatory compliance.
• Anonymized Analytics Data: May be retained indefinitely for statistical and research purposes, as it cannot be re-associated with an identifiable individual.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer identify you.

9. Your Privacy Rights

Under applicable data protection laws, you have certain rights regarding your personal data. dara4d respects these rights and provides mechanisms to exercise them:

9.1 Right to Access

You have the right to request a copy of the personal data we hold about you. You can view much of this information directly in your account dashboard. For a comprehensive data export, contact our Data Protection Officer at the email provided in Section 14.

9.2 Right to Rectification

If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings. For changes to KYC-verified data, contact customer support with supporting documentation.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Note that we may be legally required to retain certain data (e.g., financial records, AML documentation) even after you request deletion. In such cases, we will restrict processing to the minimum necessary to fulfill legal obligations.

9.4 Right to Restriction of Processing

You have the right to request that we limit how we use your data in specific situations, such as when you contest the accuracy of the data or object to processing.

9.5 Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

9.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. To opt out of marketing communications, use the unsubscribe link in any email or adjust your preferences in your account settings.

9.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

9.8 Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

10. Cookies & Tracking Technologies

dara4d uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They allow the platform to remember your preferences, keep you logged in, and track your activity across sessions.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function (e.g., session management, security, fraud detection). These cannot be disabled.
• Performance and Analytics Cookies: Collect anonymous data on how users interact with the platform to improve performance and user experience.
• Functional Cookies: Remember your preferences (language, currency, display settings) to personalize your experience.
• Marketing and Targeting Cookies: Track your activity to deliver relevant promotional offers and measure campaign effectiveness. These require your consent and can be disabled via your account settings or browser settings.

10.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling certain cookies may affect platform functionality. For detailed instructions on managing cookies in popular browsers, visit your browser's help documentation.

11. Third-Party Links

The dara4d platform may contain links to third-party websites, services, or game providers (e.g., live casino studios). This Privacy Policy does not apply to those external sites. We are not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party site you visit.

12. Children's Privacy

dara4d services are strictly intended for adults aged 21 and older. We do not knowingly collect, process, or solicit personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will take immediate steps to delete that information and close the associated account.

If you are a parent or guardian and believe your child has provided personal information to dara4d, please contact us immediately at the email provided in Section 14 so we can take corrective action.

13. Changes to This Privacy Policy

dara4d reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated to registered users via email or on-site notification at least 14 days before taking effect. The "Last Updated" date at the top of this page indicates the most recent revision.

Your continued use of the platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you must cease using dara4d services and may request account closure and data deletion by contacting customer support.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Privacy Inquiry / Data Protection Request
• Response Time: We aim to respond to all privacy-related inquiries within 30 calendar days.

For general customer support inquiries not related to privacy, you may also reach us via live chat on the platform (available 24/7 with Indonesian-speaking agents).