duta168 Casino & Sportsbook Data Care

This page describes what we collect when you use duta168 and how we keep that data protected. We gather personal information—your legal name, email, phone number, government ID, and payment details—during account setup and verification. We also log your activity on duta168: every bet placed on Liga 1 or Piala AFF, every hand of blackjack or roulette at our live-dealer tables, every deposit and withdrawal. This data is encrypted, stored on secure servers, and used only for account management, fraud prevention, and regulatory compliance.

We do not sell your data to advertisers or marketing firms. We do not share your personal information with third parties except where required by law or to process your transactions (e.g., payment processors for DANA, e-wallet, mobile banking, local payment, or your bank). Your privacy on duta168 is a core commitment. This policy explains what we collect, why we collect it, how long we keep it, and what rights you have.

By using duta168, you consent to the data practices described in this policy. If you do not agree, do not create an account.

What Data We Collect on duta168

We collect different categories of data depending on how you interact with duta168. When you register, we collect your email address, a phone number, your legal name, date of birth, and a government-issued ID number (KTP for Indonesian users). This is our Know Your Customer (KYC) requirement and is mandatory before you can deposit or withdraw funds.

During account verification on duta168, we may request additional documents: a photo of your ID, a selfie for facial recognition, or proof of address (utility bill, bank statement). We use these documents to confirm your identity and prevent fraud and money laundering. Once verified, we retain these documents on encrypted servers for seven years to support regulatory compliance and dispute resolution.

We also collect payment information on duta168: the payment method used (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer), the amount, the timestamp, and the transaction status. We do not store full payment card details; our payment processors handle that encryption. We store only the last four digits and the payment method type for your reference.

Communication Data on duta168

When you contact our support team on duta168 via live chat, email, or phone, we keep a record of that conversation. This includes the date, time, subject, your message, our response, and any resolution. We use these records to improve our support quality, train staff, and handle disputes. Support conversations are retained for one year unless they relate to an ongoing dispute or legal matter.

If you enable two-factor authentication (2FA) on duta168, we store the phone number associated with your 2FA SMS codes. If you use an authenticator app, we store only the fact that 2FA is enabled; we do not store the app's secret key.

How We Use Your Data on duta168

We use personal data on duta168 for six main purposes. First, to verify your identity and comply with KYC regulations. Second, to process your deposits and withdrawals securely. Third, to manage your account—storing your balance, recording your bets, calculating payouts. Fourth, to prevent fraud and money laundering by monitoring for suspicious activity. Fifth, to resolve disputes by reviewing historical logs and session data. Sixth, to improve our service by analyzing usage patterns (aggregated, not individual).

We do not use your personal data for marketing purposes on duta168. We do not send promotional emails, SMS, or push notifications based on your data unless you explicitly opt in. We do not sell or share your email, phone, or ID number with advertisers, affiliate networks, or third-party marketers.

During major events like Liga 1 finals or Piala Indonesia tournaments, we may send operational notifications (e.g., "market is now live," "bonus promotion ends in 24 hours") to your registered email or phone. These are service notifications, not marketing, and you cannot opt out without closing your account.

Third-Party Processors & Data Sharing

Our identity-verification vendor receives your KYC documents (ID, photo, proof of address) to confirm your identity during account setup. This vendor uses facial recognition and database matching to prevent fraud and duplicate accounts. We retain your documents even after verification to support regulatory audits.

Our servers may physically sit outside Indonesia (on cloud infrastructure in Singapore or AWS regions). However, we encrypt all data in transit and at rest. Even our server administrators cannot view your unencrypted personal information without explicit approval from our data protection officer.

We may share aggregated, anonymized data with regulatory authorities if required by law (court order, subpoena, or government investigation). We do not disclose user names, account balances, or betting history unless legally compelled. When legally compelled, we notify you before disclosure (unless a gag order prevents it).

Data Retention & Deletion on duta168

We retain your personal data for as long as your account is active on duta168. If you close your account, we keep your data for seven years to support regulatory compliance, dispute resolution, and tax reporting. After seven years, we delete all personal information except aggregated activity statistics (which cannot identify you).

You can request deletion of your account and data before the seven-year retention period ends by contacting our privacy team. We process deletion requests within 30 days. However, we may retain data longer if required by law, if a dispute is pending, or if you have outstanding winnings to withdraw.

Transaction records on duta168 (bets, deposits, withdrawals) are retained for the full seven-year period even after account closure. These records support fraud investigation and regulatory compliance. Personal data like your name, ID, and email may be deleted upon request, but transaction logs remain for audit purposes.

Security Measures on duta168

We protect your data on duta168 using industry-standard encryption (TLS 1.3 for data in transit, AES-256 for data at rest). All personal information is encrypted before storage. Your password is hashed using bcrypt; we never store your password in plain text. Only you can decrypt your account data by logging in.

We restrict access to your data to essential staff (account managers, fraud analysts, support agents) who have signed confidentiality agreements. We monitor all internal access to sensitive data; any unusual access triggers an alert. Our servers are protected by firewalls and intrusion-detection systems.

We conduct annual security audits by independent third-party firms. If a security vulnerability is discovered, we patch it immediately and notify affected users. We have never experienced a data breach on duta168; however, if a breach occurs, we notify you within 72 hours as required by law.

Contact & Data Subject Rights on duta168

To exercise any of your data rights on duta168, contact our privacy team via email or through your account settings. We respond to all data requests within 30 days. If you have concerns about how we handle your data, you can lodge a complaint with Indonesia's Personal Data Protection Commission.

This privacy policy is effective as of the date shown in your account registration on duta168. We update this policy periodically to reflect changes in our practices or legal requirements. We notify you of material changes via email. Your continued use of duta168 after policy updates constitutes acceptance of the new terms.