Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by duit66 through our website (duit66.cam), mobile-optimized platform, customer support channels, and any other services we provide. This policy covers Indonesian residents and players who access duit66 services from within Indonesia.

duit66 operates as an online gaming platform offering casino games, sports betting, and live dealer experiences to adult players (21 years and older) in Indonesia. As part of our operations, we collect and process personal information necessary to provide these services, comply with legal obligations, prevent fraud, and enhance user experience.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policy, which together govern your relationship with duit66.

2. Data Controller Information

duit66 acts as the data controller for all personal information collected through our platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for its secure handling in compliance with applicable data protection regulations.

Data Controller: duit66 Gaming Platform
Website: duit66.cam
Contact Email: [email protected] (displayed as plain text - not a clickable link)
Data Protection Officer: Available upon request through customer support

3. Information We Collect

duit66 collects various types of personal information necessary to provide gaming services, ensure security, and comply with legal requirements. The information we collect includes:

3.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, email address, phone number, residential address, preferred currency (Indonesian Rupiah), username, and password.
• Identity Verification (KYC) Documents: Indonesian National Identity Card (KTP), proof of address (utility bills, bank statements), selfie photographs for facial verification, and any additional documentation required for enhanced due diligence.
• Financial Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records.
• Communication Data: Messages exchanged with customer support, feedback submissions, survey responses, and any other communications you initiate with duit66.
• Responsible Gaming Preferences: Deposit limits, session time limits, self-exclusion requests, and other responsible gaming tool settings.

3.2 Information Collected Automatically

• Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, device identifiers, and mobile network information.
• Usage Data: Pages visited, games played, bet history, session duration, click patterns, navigation paths, referral sources, and feature usage statistics.
• Location Data: Approximate geographic location derived from IP address to ensure compliance with Indonesian jurisdiction requirements and detect suspicious access patterns.
• Cookies and Similar Technologies: Session cookies, persistent cookies, web beacons, and other tracking technologies as detailed in Section 9 below.

4. How We Use Your Information

duit66 processes your personal data for the following legitimate purposes:

4.1 Service Provision and Account Management

• Creating and managing your player account
• Processing deposits, withdrawals, and financial transactions
• Providing access to casino games, sports betting, and live dealer experiences
• Administering bonuses, promotions, and VIP rewards programs
• Delivering customer support and responding to inquiries
• Sending transactional notifications (deposit confirmations, withdrawal approvals, account updates)

4.2 Legal Compliance and Security

• Verifying your identity and age to comply with 21+ age restrictions
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Detecting and preventing fraud, abuse, and illegal activities
• Investigating suspicious transactions or account behavior
• Enforcing our Terms & Conditions and resolving disputes
• Responding to legal requests from law enforcement or regulatory authorities

4.3 Platform Improvement and Personalization

• Analyzing usage patterns to enhance user experience and platform functionality
• Personalizing game recommendations and promotional offers based on preferences
• Conducting internal research, analytics, and testing to improve our services
• Developing new features and optimizing existing services

4.4 Marketing Communications (With Consent)

• Sending promotional emails about bonuses, new games, and special offers
• Delivering SMS notifications about exclusive promotions (where opted-in)
• Displaying personalized in-platform promotions and recommendations

You may opt out of marketing communications at any time through account settings or by contacting customer support. Transactional communications (account notifications, withdrawal confirmations) cannot be opted out of as they are essential to service provision.

5. Data Sharing and Third Parties

duit66 does not sell your personal information to third parties. However, we may share your data with trusted service providers and partners under strict confidentiality agreements in the following circumstances:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Gaming Software Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and other licensed game studios to deliver gaming content.
• Identity Verification Services: Third-party KYC verification providers to confirm your identity and prevent fraud.
• Customer Support Platforms: Live chat, email, and communication tools used to deliver customer service.
• Analytics Providers: Tools for website analytics, user behavior tracking, and platform optimization.
• Cloud Hosting Services: Secure servers and data storage infrastructure providers.

All third-party service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

5.2 Legal and Regulatory Disclosure

We may disclose your personal information when required by law, legal process, or government request, including but not limited to:

• Compliance with court orders, subpoenas, or legal investigations
• Cooperation with law enforcement agencies in fraud or criminal investigations
• Regulatory reporting requirements under gaming and financial regulations
• Protection of duit66's legal rights and interests in disputes or litigation

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or business reorganization involving duit66, your personal data may be transferred to the acquiring entity. You will be notified of any such change in ownership or control of your personal information.

6. Data Security Measures

duit66 employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption: All data transmissions between your device and our servers are protected by 256-bit SSL (Secure Sockets Layer) encryption, the same technology used by major Indonesian banks.
• Secure Storage: Personal data is stored on encrypted servers with restricted access, protected by firewalls and intrusion detection systems.
• Access Controls: Only authorized duit66 personnel with legitimate business need can access personal data. All access is logged and monitored.
• Regular Audits: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses.
• Staff Training: All employees receive data protection and security training and are bound by confidentiality agreements.
• Two-Factor Authentication: Optional 2FA is available to enhance account security.

While we implement robust security measures, no method of internet transmission or electronic storage is 100% secure. You acknowledge and accept the inherent risks of online data transmission. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately of any suspected security breach.

7. Data Retention Periods

duit66 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Specific retention periods include:

• Active Accounts: Data is retained throughout your account lifetime and for as long as you continue using duit66 services.
• Closed Accounts: After voluntary account closure, personal data is retained for 5 years to comply with financial regulations, AML requirements, and to resolve any outstanding disputes or investigations.
• KYC Documents: Identity verification documents are retained for 7 years following account closure to comply with Indonesian financial record-keeping regulations.
• Transaction Records: Financial transaction history is retained for 7 years as required by tax and financial auditing regulations.
• Marketing Data: If you opt out of marketing communications, your contact information is retained only on our suppression list to honor your opt-out preference.
• Legal Disputes: Data relevant to ongoing legal disputes, investigations, or regulatory inquiries is retained until the matter is fully resolved.

After applicable retention periods expire, personal data is securely deleted or anonymized so that it can no longer identify you.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you, including account details, transaction history, and communications.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. You can update most account information directly through account settings.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal retention obligations. Account closure may be necessary to fully exercise this right.
• Right to Restrict Processing: Request limitation of how we process your data under certain circumstances, such as while disputing data accuracy.
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: Object to processing of your personal data for marketing purposes or based on legitimate interests. You can opt out of marketing at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.
• Right to Lodge a Complaint: File a complaint with a data protection supervisory authority if you believe your rights have been violated.

To exercise any of these rights, contact our Data Protection Officer at [email protected] (plain text only). We will respond to all requests within 30 days. Some requests may require identity verification to protect your information from unauthorized access.

9. Cookies and Tracking Technologies

duit66 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits.

9.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, account login, session management, and security features. These cannot be disabled without affecting service operation.
• Performance Cookies: Collect anonymous data about how visitors use our platform, which pages are most popular, and where errors occur. Used to improve platform performance.
• Functionality Cookies: Remember your preferences (language, currency, display settings) to provide personalized experiences across sessions.
• Analytics Cookies: Track user behavior, navigation patterns, and feature usage to help us understand how players interact with duit66 and identify improvement opportunities.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness. You can opt out of marketing cookies through browser settings.

9.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify browser settings to decline cookies or alert you when cookies are being sent. Disabling essential cookies may impact platform functionality and prevent you from accessing certain features. Detailed cookie management instructions are available in your browser's help documentation.

10. International Data Transfers

duit66 primarily serves Indonesian players and stores data within secure facilities designed for the Indonesian market. However, some of our service providers and technology partners may operate internationally, which may involve transferring your personal data outside Indonesia.

When international data transfers occur, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Privacy Shield certification or equivalent international data protection frameworks
• Binding corporate rules requiring the same level of data protection across all jurisdictions
• Your explicit consent for specific transfers where required by law

All international data transfers comply with applicable Indonesian data protection regulations and international privacy standards.

11. Children's Privacy Protection

duit66 is strictly an adult-only platform. We do not knowingly collect personal information from individuals under 21 years of age. All users must be at least 21 years old and provide valid age verification during the KYC process.

If we discover that we have inadvertently collected personal data from a minor, we will immediately delete such information and terminate the associated account. Parents and guardians who believe their child has provided personal information to duit66 should contact us immediately at [email protected] (plain text).

We encourage parents to use internet filtering software and parental controls to prevent minors from accessing online gambling websites.

12. Changes to This Privacy Policy

duit66 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service offerings. Material changes will be communicated through:

• Prominent notice on our website homepage
• Email notification to registered players
• In-account messaging upon next login

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. Your continued use of duit66 services following any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

If you do not agree with any changes to this Privacy Policy, you must discontinue using duit66 services and may request account closure and data deletion in accordance with Section 8 above.

13. Contact and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how duit66 handles your personal data, please contact us through the following channels:

• Data Protection Officer Email: [email protected] (displayed as plain text - not a clickable link)
• General Customer Support: Available 24/7 via live chat in your account dashboard
• WhatsApp Support: Contact number available in your account settings
• Email Support: [email protected] (plain text)

When contacting us regarding privacy matters, please include your full name, registered email address, and detailed description of your inquiry or request. We will respond to all privacy-related inquiries within 30 days. For urgent security matters, please use our 24/7 live chat for immediate assistance.