Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how dphoki ("we," "us," or "our") collects, uses, discloses, and protects the personal information of individuals ("you" or "your") who register for an account, access our website at https://dphoki.cam, or use any of our online gaming services including sports betting, casino games, live dealer games, slots, and lottery services such as togel (Indonesia's traditional numbers lottery).

At dphoki, we are committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with applicable data protection laws and international gaming regulations. We recognize that when you choose to share your personal information with us, you are placing significant trust in our organization. This Privacy Policy outlines our practices and your rights regarding your personal data.

By creating an account on dphoki, accessing our platform, or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you must immediately discontinue use of our services and close your account.

2. Information We Collect

dphoki collects various types of personal information to provide, maintain, and improve our gaming services, verify your identity, process financial transactions, prevent fraud, and comply with legal and regulatory obligations. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register for a dphoki account, you voluntarily provide the following personal information:

• Identity Information: Full legal name (as it appears on your government-issued identification), date of birth, gender, and nationality
• Contact Information: Residential address in Indonesia (including street address, city, province, and postal code), email address, and mobile phone number
• Account Credentials: Username and password (passwords are encrypted and never stored in plain text)
• Financial Information: Bank account details for deposits and withdrawals (including bank name, account number, and account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja identifiers), and transaction history
• Verification Documents: Copies or photographs of government-issued identification documents (Indonesian national ID card or KTP, passport, or driver's license), proof of address documents (utility bills, bank statements, or government correspondence), and selfie photographs for identity verification (KYC compliance)
• Communication Records: Any information you provide when contacting our customer support team via live chat, email, WhatsApp, or Telegram, including support tickets, feedback, and correspondence

2.2 Information We Collect Automatically

When you access and use dphoki services, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, or tablet), operating system and version, browser type and version, screen resolution, and device identifiers
• Connection Data: IP address, internet service provider, connection type, and approximate geographic location (city and province level, derived from IP address)
• Usage Data: Pages visited, features used, time spent on platform, clickstream data, referral sources, search queries within our site, and navigation patterns
• Gaming Activity: Bets placed (including date, time, amount, game type, and outcome), deposits and withdrawals (amounts, methods, timestamps), games played, session duration, win/loss records, and bonus usage
• Cookies and Tracking Technologies: Session cookies, preference cookies, analytics cookies, and similar technologies that help us understand how you use our services and improve your experience

2.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers to confirm successful deposits and withdrawals
• Identity Verification Services: Verification results from third-party KYC service providers used to authenticate your identity documents and prevent fraud
• Fraud Prevention Services: Risk assessment data from security partners to detect fraudulent activity, money laundering, or policy violations

3. How We Use Your Information

dphoki uses your personal information for the following specific purposes, all of which are necessary to provide our gaming services, ensure platform security, and comply with legal obligations:

3.1 Service Provision and Account Management

• Create, maintain, and manage your player account
• Process your registration and verify your eligibility (21+ age requirement for Indonesian residents)
• Authenticate your identity each time you log in to protect against unauthorized access
• Provide access to our full range of gaming services including sports betting, casino games, slots, and togel lottery draws
• Display personalized content, game recommendations, and account information
• Remember your preferences, settings, and saved payment methods for convenience

3.2 Financial Transactions and Payments

• Process deposits to your account via Indonesian banks and e-wallets
• Execute withdrawal requests and transfer winnings to your registered bank account or e-wallet
• Maintain accurate financial records of all deposits, wagers, wins, losses, and withdrawals
• Calculate and apply bonuses, promotions, and loyalty rewards
• Generate transaction receipts and account statements for your records
• Detect and prevent payment fraud, chargebacks, and unauthorized transactions

3.3 Legal and Regulatory Compliance

• Verify your age to enforce the 21+ minimum age requirement mandated by Indonesian law and international gaming standards
• Complete Know Your Customer (KYC) verification to comply with anti-money-laundering (AML) and counter-terrorism-financing (CTF) regulations
• Monitor transactions for suspicious activity patterns that may indicate money laundering, fraud, or other illegal activities
• Respond to legal requests from law enforcement, regulatory authorities, or courts when legally required
• Maintain records required by gaming licenses and financial regulations (typically retained for 5-7 years as mandated by law)
• Enforce our Terms and Conditions and investigate potential violations

3.4 Security and Fraud Prevention

• Detect and prevent fraudulent account creation, identity theft, and unauthorized access
• Identify cheating, collusion, bonus abuse, and other violations of fair play policies
• Monitor for bot activity, automated betting systems, and arbitrage exploitation
• Protect against cyber attacks, hacking attempts, and data breaches
• Verify that players are accessing our services from permitted locations within Indonesia
• Investigate disputes, suspicious betting patterns, and account security incidents

3.5 Customer Support and Communication

• Respond to your inquiries, support requests, and complaints via live chat, email, or messaging platforms
• Send important account notifications including deposit confirmations, withdrawal approvals, KYC status updates, and security alerts
• Provide updates on bonuses you've claimed, wagering requirements progress, and promotional offers you've opted into
• Communicate changes to our Terms and Conditions, Privacy Policy, or service features
• Request feedback on your experience and conduct customer satisfaction surveys (only with your consent)

3.6 Platform Improvement and Analytics

• Analyze usage patterns to understand how players interact with our platform and identify areas for improvement
• Test new features, game releases, and interface designs to optimize user experience
• Generate aggregated statistical reports on platform performance, game popularity, and player behavior (these reports contain no personally identifiable information)
• Improve website performance, loading speeds, and mobile responsiveness
• Enhance search functionality and navigation based on common user journeys

4. Legal Basis for Processing (GDPR Principles)

Although dphoki primarily serves Indonesian players, we adhere to international data protection principles similar to those established by the European Union's General Data Protection Regulation (GDPR). We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (the Terms and Conditions you agreed to when registering), including providing gaming services, processing payments, and managing your account
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC/AML requirements, age verification mandates, tax reporting obligations, and responses to lawful requests from authorities
• Legitimate Interests: Processing is necessary for our legitimate business interests in preventing fraud, maintaining platform security, improving services, and protecting our rights and property, provided these interests do not override your privacy rights
• Consent: For marketing communications and certain optional features, we obtain your explicit consent before processing personal data, and you may withdraw consent at any time

5. How We Protect Your Information

dphoki employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

Security Measure	Description
SSL/TLS Encryption	256-bit encryption for all data transmitted between your device and our servers, identical to standards used by major banks
Database Encryption	All stored personal data is encrypted at rest using advanced encryption algorithms; passwords are hashed with bcrypt and never stored in plain text
Firewalls and Intrusion Detection	Multi-layer firewall protection and real-time monitoring for suspicious activity, hacking attempts, and unauthorized access
Access Controls	Strict internal access controls ensure only authorized dphoki employees can access personal data, limited to roles requiring such access (principle of least privilege)
Regular Security Audits	Independent third-party security assessments and penetration testing conducted regularly to identify and address vulnerabilities
Secure Data Centers	Personal information stored in certified, physically secure data centers with redundant backups and disaster recovery protocols

Despite our comprehensive security measures, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information using commercially reasonable means, we cannot guarantee absolute security. You also play a role in protecting your data by maintaining strong, unique passwords, not sharing your login credentials, and logging out after gaming sessions on shared devices.

6. Information Sharing and Disclosure

dphoki does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:

6.1 Service Providers and Business Partners

We share necessary information with trusted third-party service providers who assist us in operating our platform and delivering services to you. These parties are contractually obligated to protect your data and use it only for the specific purposes we authorize. Examples include:

• Payment Processors: Banks and e-wallet providers processing your deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.)
• Identity Verification Services: Third-party KYC providers verifying your identification documents
• Cloud Hosting Providers: Secure servers storing our platform data and backups
• Customer Support Tools: Live chat software and ticketing systems facilitating support interactions
• Analytics Services: Platforms providing aggregated usage statistics and performance metrics

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or lawful requests from government authorities
• Cooperate with law enforcement investigations into suspected illegal activity, money laundering, or terrorism financing
• Enforce our Terms and Conditions and investigate potential violations
• Protect the rights, property, and safety of dphoki, our employees, and our players
• Detect, prevent, or address fraud, security breaches, or technical issues

6.3 Business Transfers

In the event that dphoki is involved in a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

7. Your Privacy Rights

As a dphoki player, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you, including account details, transaction history, and verification documents
• Right to Rectification: Request correction of inaccurate or incomplete personal information
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements (we must retain certain records for 5-7 years for regulatory compliance)
• Right to Restrict Processing: Request limitation on how we use your data in certain circumstances
• Right to Data Portability: Request transfer of your data to another service provider in a structured, machine-readable format (where technically feasible)
• Right to Withdraw Consent: Withdraw your consent for marketing communications or optional data processing at any time
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes

To exercise any of these rights, please contact our Data Protection team via email at [email protected] or through our 24/7 live chat support. We will respond to verified requests within 30 days. Please note that exercising certain rights (such as data erasure) may require closing your account.

8. Cookies and Tracking Technologies

dphoki uses cookies and similar technologies to enhance your experience, analyze usage patterns, and maintain platform functionality. Cookies are small text files stored on your device that help us recognize you on return visits. We use the following types of cookies:

• Essential Cookies: Necessary for platform functionality including login authentication, session management, and security. These cannot be disabled without affecting core services.
• Preference Cookies: Remember your settings, language choices, and display preferences for a personalized experience.
• Analytics Cookies: Collect aggregated usage statistics to help us understand how players interact with our platform and identify areas for improvement.
• Marketing Cookies: Track promotional campaign effectiveness and display relevant bonus offers (only used with your consent).

You can control cookie settings through your browser preferences. However, blocking essential cookies may prevent you from accessing certain features or logging into your account.

9. Data Retention

dphoki retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations. Retention periods vary based on data type:

• Active Account Data: Retained for the duration of your account plus 7 years after closure (regulatory requirement)
• Financial Records: Retained for 7 years to comply with tax and anti-money-laundering regulations
• KYC Verification Documents: Retained for 5 years after account closure as mandated by gaming authorities
• Communication Records: Retained for 3 years for quality assurance and dispute resolution
• Marketing Consent Records: Retained until you withdraw consent, then deleted within 30 days

After retention periods expire, personal data is securely deleted or anonymized beyond recovery.

10. International Data Transfers

While dphoki primarily serves Indonesian players, our platform infrastructure may involve servers and service providers located outside Indonesia. When personal data is transferred internationally, we ensure appropriate safeguards are in place through contractual agreements requiring equivalent data protection standards, secure data transfer protocols, and compliance with international privacy principles.

11. Children's Privacy

dphoki services are strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that a minor has created an account, we will immediately terminate the account, delete all associated personal data, and forfeit any funds in accordance with our Terms and Conditions and responsible gaming obligations. Parents or guardians who believe a minor has accessed our services should contact us immediately at [email protected].

12. Changes to This Privacy Policy

dphoki reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by email (to the address registered on your account) and display a prominent notice on our website. The "Last Updated" date at the bottom of this policy indicates when the most recent revision was made. Continued use of dphoki services after changes become effective constitutes acceptance of the revised Privacy Policy.

13. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us through the following channels:

• Email: [email protected] (Data Protection inquiries receive priority handling and responses within 48 hours)
• 24/7 Live Chat: Available directly through our website for immediate assistance
• Support Availability: Indonesian-speaking support agents available 24 hours a day, 7 days a week, including public holidays

When contacting us about privacy matters, please include your full name, registered email address, and a detailed description of your inquiry or request. For security purposes, we may ask you to verify your identity before processing data access or deletion requests.