Privacy Policy

1. Introduction

Welcome to the dut8 Privacy Policy. This Privacy Policy explains how dut8 ("we", "us", "our", "the Company") collects, uses, discloses, stores, and protects personal information obtained from users ("you", "your", "User") of our online betting platform accessible at https://dut8.cam (the "Platform"). We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws and international best practices.

By accessing or using the dut8 Platform, creating an account, making deposits, placing bets, or otherwise engaging with our services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, you must not use our Platform or services.

This Privacy Policy works in conjunction with our Terms and Conditions and Responsible Gaming Policy to form the complete framework governing your use of dut8 services. We encourage you to read all these documents carefully to fully understand your rights and our obligations regarding your personal data.

2. Data Controller Information

dut8 acts as the data controller for all personal information collected through the Platform. As data controller, we determine the purposes and means of processing your personal data. We are responsible for ensuring that your personal information is processed lawfully, fairly, and transparently in accordance with applicable data protection regulations.

For all privacy-related inquiries, data access requests, correction requests, deletion requests, or complaints regarding the handling of your personal information, please contact our Data Protection Officer using the contact details provided in Section 13 of this Privacy Policy. We are committed to responding to all legitimate privacy requests within thirty (30) days of receipt.

3. Information We Collect

dut8 collects various types of personal information necessary to provide our betting services, comply with legal obligations, prevent fraud, and enhance user experience. The information we collect falls into the following categories:

3.1 Account Registration Information

When you create a dut8 account, we collect personal information including:

• Full Legal Name: Your complete name as it appears on your government-issued identification documents
• Date of Birth: To verify that you meet the minimum age requirement of 21 years
• Residential Address: Your complete physical address including street, city, province, and postal code
• Email Address: For account communications, notifications, and password recovery
• Phone Number: For account verification, security alerts, and customer support
• Username and Password: Your chosen credentials for account access
• Security Questions: Optional additional authentication for enhanced account security

3.2 Identity Verification Documents (KYC)

To comply with anti-money laundering regulations and prevent underage gambling, we collect identity verification documents including:

• Government-Issued ID: Indonesian National ID (KTP), passport, or driver's license showing photograph, full name, date of birth, and ID number
• Proof of Address: Recent utility bill, bank statement, or government correspondence dated within the last three months
• Verification Selfie: A photograph of you holding your ID document next to your face for identity confirmation
• Source of Funds Documentation: For large deposits, we may request employment verification, bank statements, or other proof of legitimate income sources

3.3 Financial and Transaction Information

We collect information related to your financial transactions on the Platform:

• Payment Method Details: Bank account numbers, e-wallet account identifiers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay accounts)
• Transaction History: Records of all deposits, withdrawals, bets placed, winnings, losses, and bonus claims
• Account Balance Information: Current balance, bonus balance, pending withdrawals, and transaction timestamps
• Payment Processor Data: Information provided by third-party payment processors for transaction verification and fraud prevention

3.4 Gaming Activity and Behavioral Data

We automatically collect information about your gaming activity and behavior on the Platform:

• Betting History: All bets placed including sport/game type, stake amount, odds, results, and timestamps
• Game Preferences: Which sports, games, and betting markets you engage with most frequently
• Session Information: Login times, logout times, session duration, pages visited, features used
• Responsible Gaming Data: Deposit limits set, self-exclusion requests, time-out periods, loss limits

3.5 Technical and Device Information

We automatically collect technical data when you access the Platform:

• Device Information: Device type, model, operating system, browser type and version, screen resolution
• Network Data: IP address, internet service provider, connection type, geographic location (country and city level)
• Usage Analytics: Pages viewed, navigation paths, clicks, scrolls, time spent on pages, search queries
• Cookies and Tracking Technologies: Session IDs, preference settings, authentication tokens (see Section 9 for details)

3.6 Communications and Customer Support

When you contact customer support or communicate with us, we collect:

• Support Tickets: Your inquiries, complaints, feedback, and our responses
• Chat Transcripts: Live chat conversations with customer support representatives
• Email Correspondence: Email messages exchanged between you and dut8
• Phone Call Recordings: Recordings of customer support calls (where permitted by law and with prior notice)

4. How We Use Your Data

dut8 processes your personal information for the following legitimate purposes:

4.1 Account Management and Service Provision

• Creating, maintaining, and managing your user account
• Processing your deposits, withdrawals, and betting transactions
• Verifying your identity, age, and address through KYC procedures
• Authenticating your login credentials and preventing unauthorized access
• Providing customer support and responding to your inquiries
• Communicating important account information, security alerts, and service updates

4.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Preventing underage gambling by verifying age through document verification
• Maintaining records required by gaming licenses and regulatory authorities
• Cooperating with law enforcement investigations and legal proceedings when required by law
• Reporting suspicious transactions to relevant financial intelligence units

4.3 Fraud Prevention and Security

• Detecting and preventing fraudulent activities, money laundering, and identity theft
• Monitoring account activity for suspicious behavior and security threats
• Identifying and blocking duplicate accounts and bonus abuse
• Protecting the integrity of our games and preventing cheating or collusion
• Enforcing our Terms and Conditions and other policies

4.4 Responsible Gaming and Player Protection

• Implementing and monitoring deposit limits, loss limits, and wagering limits
• Processing self-exclusion and time-out requests
• Identifying signs of problem gambling behavior through activity pattern analysis
• Providing access to responsible gaming tools and support resources
• Preventing access to the Platform during self-exclusion periods

4.5 Service Improvement and Personalization

• Analyzing user behavior to improve Platform design, functionality, and user experience
• Personalizing content, promotions, and game recommendations based on your preferences
• Conducting market research and collecting feedback to enhance our services
• Testing new features, games, and betting markets with user segments
• Optimizing Platform performance, load times, and mobile responsiveness

4.6 Marketing and Promotions (with Consent)

• Sending promotional emails about bonuses, special offers, and new games (only with your consent)
• Providing personalized bonus offers based on your gaming preferences
• Notifying you about tournaments, competitions, and special events
• Delivering targeted advertisements on our Platform (you can opt out at any time)

5. Data Sharing and Disclosure

dut8 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data in the following limited circumstances:

5.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who perform services on our behalf, including:

• Payment Processors: Banks and payment gateways that process deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay)
• Identity Verification Services: Third-party KYC/AML verification providers that authenticate identity documents
• Game Providers: Software suppliers like Pragmatic Play, PG Soft, Evolution Gaming that provide casino games and receive betting data for game operation
• Customer Support Tools: Live chat platforms, ticketing systems, and CRM software used to deliver customer service
• Cloud Storage Providers: Secure data centers and cloud infrastructure providers that host our databases
• Analytics Services: Platform analytics tools that help us understand user behavior and improve services

All service providers are contractually bound to maintain confidentiality and use your data only for the specified purposes.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, regulators, or law enforcement when:

• Required by law, court order, subpoena, or legal process
• Requested by gaming regulators or licensing authorities for compliance audits
• Necessary to report suspected money laundering or terrorist financing to financial intelligence units
• Required to protect our legal rights, enforce our Terms and Conditions, or defend against legal claims
• Necessary to protect the safety and security of our users or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity or successor company. We will provide notice before your personal information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your personal information with third parties for purposes not described in this Privacy Policy when we have obtained your explicit consent to do so. You may withdraw your consent at any time by contacting our Data Protection Officer.

6. Data Security Measures

dut8 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Security Measures

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL/TLS protocols
• Database Encryption: Personal data stored in our databases is encrypted at rest using industry-standard encryption algorithms
• Secure Password Storage: User passwords are hashed and salted using strong one-way cryptographic functions
• Firewall Protection: Multi-layered firewalls protect our servers from external attacks and unauthorized access attempts
• Intrusion Detection Systems: Real-time monitoring systems detect and respond to security threats and suspicious activity
• Regular Security Audits: Independent security experts conduct penetration testing and vulnerability assessments

6.2 Organizational Security Measures

• Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data on a need-to-know basis
• Employee Training: All staff members receive regular training on data protection, privacy regulations, and security best practices
• Confidentiality Agreements: Employees and contractors sign confidentiality agreements prohibiting unauthorized disclosure
• Incident Response Plan: Documented procedures for detecting, investigating, and responding to data breaches
• Data Minimization: We collect and retain only the minimum personal data necessary for specified purposes

Despite our security measures, no method of transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately of any suspected unauthorized access.

7. Data Retention

dut8 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

Data Category	Retention Period	Justification
Account Information	Active account + 7 years after closure	Legal requirement for financial and gaming records
KYC Documents	Active account + 5 years after closure	Anti-money laundering compliance
Transaction Records	Active account + 7 years after last transaction	Financial regulatory requirements
Betting History	Active account + 7 years after last bet	Gaming license requirements and dispute resolution
Support Communications	3 years after last interaction	Customer service improvement and dispute records
Marketing Consent	Until consent is withdrawn	Ongoing marketing authorization
Technical Logs	12 months	Security monitoring and troubleshooting

After the retention period expires, we securely delete or anonymize your personal information. Anonymized data that no longer identifies you may be retained indefinitely for statistical analysis and business intelligence purposes.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format within 30 days of your verified request.

8.2 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, you withdraw consent, or you object to processing. This right is subject to legal retention requirements that may require us to maintain certain records.

8.4 Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as while we verify accuracy or assess legitimate interests.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider, where technically feasible.

8.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.

8.7 Right to Withdraw Consent

Where processing is based on consent (such as marketing communications), you may withdraw that consent at any time by clicking unsubscribe links in emails, adjusting account settings, or contacting customer support. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 13. We will respond to all legitimate requests within 30 days. We may request additional information to verify your identity before processing sensitive requests.

9. Cookies and Tracking Technologies

dut8 uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content. Cookies are small text files stored on your device that remember your preferences and activity.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly, including authentication, security, and session management. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language, currency, and display settings to enhance your experience.
• Analytics Cookies: Help us understand how visitors use the Platform by collecting anonymous usage statistics, page views, and navigation paths.
• Marketing Cookies: Track your browsing activity to deliver personalized advertisements and promotional offers. You can opt out of these cookies.

9.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or receive warnings before cookies are stored. However, disabling cookies may limit your ability to use certain Platform features. To opt out of analytics cookies, you can use browser plugins or adjust your cookie preferences in your account settings.

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside Indonesia where dut8 operates servers or engages service providers. These countries may have different data protection laws than Indonesia. We ensure that all international transfers comply with applicable data protection regulations through:

• Contractual clauses that require recipients to provide equivalent data protection
• Privacy Shield frameworks or equivalent certification where applicable
• Ensuring recipients are located in jurisdictions with adequate data protection laws

By using dut8 services, you consent to the transfer of your personal information to these jurisdictions for the purposes described in this Privacy Policy.

11. Children's Privacy Protection

dut8 services are strictly intended for individuals aged 21 years or older. We do not knowingly collect, use, or solicit personal information from anyone under the age of 21. If we become aware that we have collected personal information from a minor without proper parental consent, we will take immediate steps to delete that information and terminate the associated account.

If you believe that a minor has provided personal information to dut8, please contact us immediately using the contact details in Section 13. Parents and guardians are encouraged to monitor their children's online activities and prevent access to gambling websites.

12. Changes to This Privacy Policy

dut8 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations. Material changes will be communicated through prominent notices on the Platform, email notifications to registered users, or other appropriate communication channels.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Continued use of the Platform after changes become effective constitutes acceptance of the revised Privacy Policy.

13. Contact Information for Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

When contacting us about privacy matters, please include your full name, registered email address, account username (if applicable), and a detailed description of your request or concern. For security purposes, we may request additional information to verify your identity before processing certain requests.

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.