Privacy Policy

1. Information We Collect

duar88 collects several categories of personal information to provide, maintain, improve, and secure our gaming services. The types of information we collect include:

1.1 Information You Provide Directly

When you register for a duar88 account or use our services, you voluntarily provide the following information:

• Account Registration Data: Full legal name, date of birth, gender, email address, phone number, residential address (street, city, postal code, province), and username/password combination.
• Identity Verification Documents (KYC): Copies of government-issued identification (Indonesian KTP, passport, or driver's license), proof of address documents (utility bills, bank statements dated within the last 3 months), and in some cases, photographs or selfies for facial recognition verification.
• Payment Information: Bank account details (bank name, account number, account holder name), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers or account IDs), and transaction history including deposit and withdrawal records.
• Communication Data: Content of messages you send to customer support via live chat, email, or WhatsApp, including any attachments, screenshots, or additional information you provide when seeking assistance.
• Preferences and Settings: Gaming preferences, notification settings, language preferences, responsible gaming limit settings (deposit limits, loss limits, session time limits), and marketing communication preferences.

1.2 Information Collected Automatically

When you access and use duar88, certain information is collected automatically through cookies and similar tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers (IP address, device ID), and mobile network information.
• Usage Data: Pages visited, features used, games played, betting history, session duration, click patterns, referral sources (how you found duar88), date and time of access, and frequency of visits.
• Location Data: Approximate geographic location derived from your IP address to ensure compliance with jurisdictional restrictions and provide localized services (displayed in WIB timezone, Indonesian Rupiah currency, etc.).
• Cookies and Tracking: Session cookies (temporary cookies deleted when you close your browser), persistent cookies (remain on your device for a set period), functional cookies (remember your preferences), and analytics cookies (help us understand how users interact with our platform).

1.3 Information from Third Parties

We may receive information about you from third-party sources to verify your identity, prevent fraud, and comply with anti-money laundering (AML) regulations:

• Payment Processors: Transaction confirmation data, payment method verification, and fraud risk assessments from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, etc.) and e-wallet providers.
• Identity Verification Services: Age verification results, identity document authentication, and fraud detection alerts from third-party KYC service providers.
• Responsible Gaming Databases: Self-exclusion status and problem gambling alerts from industry-wide responsible gaming databases (if you have registered for exclusion programs).

2. How We Use Your Information

duar88 uses your personal information for the following specific purposes, all of which are necessary to provide our gaming services and comply with legal obligations:

2.1 Account Management and Service Provision

• Creating and maintaining your player account
• Processing deposits and withdrawals in Indonesian Rupiah (IDR)
• Authenticating your identity when you log in
• Providing customer support and responding to inquiries
• Enabling gameplay and betting functionality across sports betting, casino games, slots, and other products
• Recording game outcomes and maintaining accurate balance information
• Administering bonuses, promotions, and loyalty rewards
• Processing tournament entries and distributing prizes

2.2 Regulatory Compliance and Legal Obligations

• Verifying you are 21 years of age or older (Indonesian legal gambling age)
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by gaming regulations
• Preventing underage gambling, fraud, money laundering, terrorist financing, and other illegal activities
• Detecting and investigating suspicious transactions or betting patterns
• Complying with legal requests from law enforcement or regulatory authorities
• Maintaining records required by gaming licenses and financial regulations
• Enforcing our Terms & Conditions and other policies

2.3 Platform Improvement and Analytics

• Analyzing user behavior to understand which games and features are most popular
• Identifying technical issues, bugs, and performance bottlenecks
• Conducting A/B testing to optimize user interface design
• Developing new games, betting markets, and platform features
• Personalizing content recommendations based on your gaming preferences
• Improving security measures and fraud detection algorithms

2.4 Marketing and Communication (With Your Consent)

• Sending promotional offers, bonus announcements, and new game alerts via email or SMS (only if you have opted in)
• Displaying personalized recommendations for games you might enjoy
• Notifying you about upcoming tournaments, special events, or jackpot opportunities
• Conducting customer satisfaction surveys to improve our services

You can opt out of marketing communications at any time through your account settings or by clicking unsubscribe links in emails. Opting out of marketing does not affect essential account-related communications (transaction confirmations, security alerts, policy updates).

2.5 Responsible Gaming and Player Protection

• Monitoring gambling behavior for signs of problem gaming (excessive session times, frequent large losses, chasing behavior)
• Enforcing self-imposed limits (deposit limits, loss limits, session time limits)
• Processing self-exclusion requests and preventing re-registration during exclusion periods
• Providing reality-check reminders and account activity summaries
• Sharing information with responsible gaming support organizations (with your consent)

3. How We Protect Your Information

duar88 implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

3.1 Technical Security Measures

• Encryption: All data transmitted between your device and duar88 servers is protected by 256-bit SSL/TLS encryption—the same level of security used by banks and financial institutions. Personal information stored in our databases is encrypted at rest using AES-256 encryption.
• Secure Servers: Player data is stored on secure servers located in professionally managed data centers with redundant power supplies, climate control, fire suppression systems, and 24/7 physical security monitoring.
• Firewall Protection: Multi-layered firewall systems block unauthorized network access and prevent common cyber attacks such as DDoS (Distributed Denial of Service), SQL injection, and cross-site scripting (XSS).
• Intrusion Detection: Automated systems continuously monitor for suspicious activity, unauthorized access attempts, and potential security breaches, triggering immediate alerts for our security team.
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments at least annually to identify and remediate potential weaknesses.

3.2 Access Controls

• Access to personal data is restricted to authorized duar88 employees and contractors who require the information to perform their job functions (customer support, compliance, technical operations).
• All staff members with data access undergo background checks, sign confidentiality agreements, and receive data protection training.
• Multi-factor authentication (MFA) is required for all administrative access to sensitive systems and databases.
• Access logs are maintained to track who accessed what data and when, enabling rapid response in case of unauthorized access.

3.3 Data Breach Response

In the unlikely event of a data breach that compromises your personal information, duar88 will:

• Immediately investigate the scope and cause of the breach
• Take immediate steps to contain the breach and prevent further unauthorized access
• Notify affected users within 72 hours via email and account notification
• Report the breach to relevant regulatory authorities as required by law
• Provide guidance on protective measures you can take (changing passwords, monitoring financial accounts, etc.)
• Implement additional security measures to prevent similar incidents in the future

4. Information Sharing and Disclosure

duar88 does not sell your personal information to third parties for marketing purposes. However, we may share your information with the following categories of recipients for the purposes described:

4.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction information necessary to process deposits and withdrawals.
• Game Providers: Software developers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and others receive anonymized gameplay data for technical operations and game integrity monitoring.
• Identity Verification Services: Third-party KYC providers receive identification documents and personal information to verify your age, identity, and address as required by gaming regulations.
• Customer Support Tools: Live chat platforms and ticketing systems may store communication history to provide efficient support services.
• Analytics Providers: Anonymized usage data may be shared with analytics platforms to help us understand user behavior and improve services.

All third-party service providers are contractually bound to maintain the confidentiality and security of your information and are prohibited from using your data for any purpose other than providing services to duar88.

4.2 Legal and Regulatory Requirements

We may disclose your personal information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests from gaming authorities or law enforcement
• Investigate and prevent fraud, money laundering, terrorist financing, or other criminal activity
• Enforce our Terms & Conditions and protect our legal rights
• Protect the safety, security, and rights of duar88, our users, or the public
• Respond to emergency situations involving imminent harm to persons or property

4.3 Business Transfers

In the event of a merger, acquisition, asset sale, reorganization, or bankruptcy involving duar88, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5. Your Privacy Rights

As a duar88 user, you have the following rights regarding your personal information:

5.1 Right to Access

You have the right to request a copy of all personal information we hold about you. To request your data, contact our customer support team at [email protected]. We will provide your information in a commonly used electronic format within 30 days of receiving your request.

5.2 Right to Correction

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance with information that cannot be self-edited.

5.3 Right to Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions. We may be required to retain certain data to comply with financial regulations, anti-money laundering laws, dispute resolution, or other legal obligations. To request account deletion, contact customer support. Account deletion is permanent and cannot be reversed.

5.4 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another service provider. Contact customer support to request a data export.

5.5 Right to Object

You have the right to object to certain types of data processing, particularly for marketing purposes. You can opt out of marketing communications through your account settings or by clicking unsubscribe links in promotional emails. Note that you cannot opt out of essential service communications (transaction confirmations, security alerts, policy updates).

5.6 Right to Restrict Processing

In certain circumstances, you have the right to request that we temporarily restrict processing of your personal information while we investigate a dispute, verify accuracy, or assess the legality of processing. Contact customer support to request processing restrictions.

6. Cookies and Tracking Technologies

duar88 uses cookies and similar tracking technologies to enhance your gaming experience, analyze platform usage, and provide personalized content. Cookies are small text files stored on your device that allow us to recognize you across sessions and remember your preferences.

6.1 Types of Cookies We Use

6.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to refuse all cookies, accept only certain cookies, or receive notifications when cookies are set. Note that disabling essential cookies may prevent you from accessing certain duar88 features or may require you to re-authenticate more frequently. Disabling functional, analytics, or marketing cookies will not prevent basic platform usage but may result in a less personalized experience.

7. Data Retention

duar88 retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy and to meet legal, regulatory, and business requirements:

• Active Accounts: Personal information for active accounts is retained indefinitely as long as your account remains open and in use.
• Closed Accounts: After voluntary account closure, most personal information is deleted within 90 days, except for data required by law to be retained longer (typically 5-7 years for financial transaction records, identity verification documents, and anti-money laundering compliance).
• Financial Records: Transaction history, deposit and withdrawal records, and payment method information are retained for a minimum of 7 years to comply with financial regulations and tax laws.
• Communication Records: Customer support conversations and correspondence are retained for 3 years for dispute resolution and service improvement purposes.
• Marketing Data: If you opt out of marketing communications, your contact information is retained in a suppression list indefinitely to ensure we do not contact you in the future.

8. International Data Transfers

duar88 operates internationally and may transfer, store, and process your personal information in jurisdictions outside Indonesia. While Indonesia's data protection laws may differ from those in other countries, we ensure that all international data transfers are protected by appropriate safeguards including:

• Standard contractual clauses approved by data protection authorities
• Binding corporate rules for intra-company transfers
• Adequacy decisions recognizing equivalent data protection standards
• Explicit consent from users where required by law

Regardless of where your data is processed, it remains subject to the protections outlined in this Privacy Policy and applicable data protection laws.

9. Children's Privacy

duar88 services are intended exclusively for individuals 21 years of age or older in accordance with Indonesian legal standards for gambling participation. We do not knowingly collect personal information from anyone under 21 years of age. If we discover that we have inadvertently collected information from a minor, we will immediately delete that information and terminate the associated account. If you believe a minor has created an account on duar88, please contact our customer support team immediately at [email protected] so we can take appropriate action.

10. Changes to This Privacy Policy

duar88 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Provide prominent notice on our website homepage
• Send email notification to registered users (if the changes significantly affect your rights)
• In some cases, request renewed consent for new data processing activities

Your continued use of duar88 services after policy changes become effective constitutes acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

• Email: [email protected] (Subject line: "Privacy Policy Inquiry")
• Live Chat: Available 24/7 through the duar88 website
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours

For formal complaints about our data handling practices, you may also contact the relevant data protection authority in your jurisdiction if you believe we have violated applicable data protection laws.