Privacy Policy

1. Introduction and Scope

1.1 Who We Are

dara51 (referred to as "we", "us", "our", or "the Platform") operates an online gaming platform serving Indonesian residents. We are the data controller responsible for your personal information collected through our website https://dara51.cam, mobile applications, and related services.

1.2 Scope of This Policy

This Privacy Policy applies to all personal data collected by dara51 through any means, including account registration, deposits and withdrawals, gameplay activity, customer support interactions, marketing communications, and cookies. This policy should be read in conjunction with our Terms & Conditions, which govern your use of dara51 services.

1.3 Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gaming services, processing transactions).
• Legal Obligation: Processing is required to comply with legal and regulatory obligations (KYC/AML verification, age verification, responsible gaming requirements).
• Legitimate Interests: Processing serves our legitimate business interests (fraud prevention, platform security, service improvement) while respecting your rights.
• Consent: You have provided explicit consent for specific processing activities (marketing communications, optional data collection).

2. Information We Collect

2.1 Information You Provide Directly

When you register for a dara51 account or use our services, we collect the following personal information:

• Identity Data: Full legal name, date of birth, nationality, gender, and government-issued identification documents (Indonesian ID card / KTP, passport).
• Contact Data: Email address, Indonesian mobile phone number, residential address including city and postal code.
• Financial Data: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account identifiers), transaction history, deposit and withdrawal records.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers.
• Verification Documents: Photographs or scans of identity documents, proof of address documents (utility bills, bank statements), selfie photographs for identity verification.
• Communication Data: Customer support chat transcripts, email correspondence, feedback submitted through contact forms.

2.2 Information Collected Automatically

When you access or use dara51 services, we automatically collect certain technical and usage data:

• Device Information: Device type (smartphone, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, advertising ID).
• Connection Data: IP address, internet service provider, geographic location (country, region, city level derived from IP), time zone setting.
• Usage Data: Pages visited, features accessed, time spent on each page, navigation paths, clicks and interactions, search queries entered on our site.
• Gameplay Data: Games played, bets placed, bet amounts, game outcomes, timestamps of gaming sessions, winnings and losses, bonus usage patterns.
• Cookies and Tracking: Data collected through cookies, web beacons, pixel tags, and similar technologies (see Section 8 for details).

2.3 Information from Third Parties

We may receive limited personal data from third-party sources including payment processors (transaction confirmation, fraud screening results), identity verification services (document authenticity checks, sanctions list screening), and affiliate partners (referral source identifiers). All third-party data sources are vetted for compliance with data protection regulations.

3. How We Use Your Personal Data

3.1 Service Delivery and Account Management

We use your personal data to provide core dara51 services:

• Create and maintain your gaming account.
• Process deposits, withdrawals, and internal account transfers.
• Enable gameplay on casino games, sports betting, live dealer tables, and lottery games.
• Calculate and credit bonuses, process promotional offers, track loyalty program progress.
• Provide customer support and respond to your inquiries.
• Send transactional communications (deposit confirmations, withdrawal notifications, password reset emails).

3.2 Legal and Regulatory Compliance

We are legally required to use your data for:

• Age Verification: Confirming you are 21 years or older as required by Indonesian gambling age restrictions.
• KYC (Know Your Customer): Verifying your identity to prevent fraud, money laundering, and terrorist financing.
• AML (Anti-Money Laundering): Monitoring transaction patterns for suspicious activity and reporting to authorities when legally obligated.
• Responsible Gaming Enforcement: Implementing self-exclusion requests, deposit limits, and other player protection measures.
• Regulatory Reporting: Providing data to licensing authorities and regulators as required by law.

3.3 Security and Fraud Prevention

To protect dara51 and our players, we use personal data to detect and prevent fraudulent activity, unauthorized account access, bonus abuse, collusive play, underage gambling attempts, payment fraud and chargebacks, and automated bot usage. Security measures include behavioral analysis, device fingerprinting, IP geolocation verification, and transaction velocity monitoring.

3.4 Service Improvement and Analytics

We analyze aggregated and anonymized data to improve dara51 services. This includes understanding user preferences, optimizing platform performance and load times, identifying and fixing bugs or technical issues, developing new features and games, personalizing user experience based on preferences, and conducting A/B testing of platform features. Analytics data is typically aggregated and does not identify individual users.

3.5 Marketing Communications (With Consent)

If you have opted in to receive marketing communications, we may use your contact information to send promotional emails about new games, bonuses, and special offers, SMS notifications about time-sensitive promotions, push notifications through our mobile app, and personalized bonus recommendations based on gaming history. You can opt out of marketing communications at any time through account settings or unsubscribe links in emails.

4. Data Sharing and Disclosure

4.1 When We Share Your Data

dara51 does not sell your personal data to third parties. We only share your data in the following limited circumstances:

4.2 Service Providers and Partners

We share necessary data with trusted third-party service providers who help us operate dara51:

• Payment Processors: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay). We share transaction amounts, account identifiers, and timestamps.
• Game Providers: To enable gameplay on slots, live casino, and other games. We share player identifiers and bet data but not full personal profiles.
• Identity Verification Services: To verify KYC documents and perform anti-fraud checks. We share submitted documents and identity information.
• Customer Support Tools: To provide efficient support via live chat and ticketing systems. Support agents access relevant account information to resolve issues.
• Analytics Providers: To analyze platform usage and performance. We typically share anonymized or pseudonymized data.
• Cloud Hosting Services: To store data securely on cloud servers. All hosting providers are contractually bound to protect your data.

All third-party service providers are carefully vetted and bound by data protection agreements to use your information only for specified purposes.

4.3 Legal Obligations and Protection

We may disclose your personal data when required by law or to protect rights and safety. This includes complying with court orders, subpoenas, or regulatory requests, cooperating with law enforcement investigations, reporting suspicious transactions to financial authorities (AML compliance), enforcing our Terms & Conditions and preventing fraud, and protecting the safety and security of dara51, our employees, and other users.

4.4 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity. We will notify you via email and prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

5. Data Security Measures

5.1 Technical Security

dara51 employs industry-standard security measures to protect your personal data:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest (passwords, payment details) is encrypted using AES-256 encryption.
• Secure Authentication: Passwords are hashed using bcrypt with salt. We support two-factor authentication (2FA) for enhanced account security.
• Firewall Protection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems.
• Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis. Access is logged and monitored.
• Regular Security Audits: We conduct regular vulnerability assessments and penetration testing by independent security firms.

5.2 Organizational Security

Beyond technical measures, we maintain strong organizational security practices. All employees and contractors handling personal data receive data protection training and sign confidentiality agreements. Data breach response plans are in place with clear escalation and notification procedures. We maintain backup systems with encrypted backups stored in geographically distributed locations, and access to personal data is granted based on role-based permissions with regular access audits.

5.3 Your Security Responsibilities

Account security is a shared responsibility. You must keep your password confidential and use a strong, unique password, enable two-factor authentication (2FA) when available, avoid accessing your account on public or shared Wi-Fi networks, log out of your account when using shared devices, and notify us immediately if you suspect unauthorized account access. dara51 is not liable for losses resulting from your failure to protect your credentials.

6. Data Retention Periods

6.1 Active Account Data

We retain your personal data for as long as your dara51 account remains active. Active retention includes all profile information, financial data, gameplay history, and communication records necessary for ongoing service delivery.

6.2 Closed Account Data

If you close your account, we retain certain data for legal, regulatory, and business purposes:

• KYC/AML Records: Retained for 7 years after account closure to comply with anti-money laundering regulations.
• Financial Transaction Records: Retained for 7 years for tax, audit, and dispute resolution purposes.
• Gameplay History: Retained for 5 years to resolve disputes, detect patterns of abuse, and comply with gaming regulations.
• Marketing Opt-Out Records: Retained indefinitely to honor your marketing preferences even if you close your account.
• Self-Exclusion Records: Retained indefinitely to enforce responsible gaming commitments and prevent reopening of self-excluded accounts.

6.3 Data Deletion

After applicable retention periods expire, personal data is securely deleted or anonymized beyond recognition. Anonymized data (which cannot identify you) may be retained indefinitely for statistical analysis and research purposes.

7. Your Privacy Rights

7.1 Rights Available to You

Subject to applicable law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to Restrict Processing: Request temporary restriction of how we process your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format and transmit it to another service provider.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent for processing activities that rely on your consent (does not affect prior lawful processing).

7.2 How to Exercise Your Rights

To exercise any privacy rights, contact our Data Protection Team at [email protected] with subject line "Privacy Rights Request". Include your full name, registered email, account username (if applicable), and specific right you wish to exercise. We will respond within 30 days and may require identity verification before fulfilling requests.

7.3 Limitations on Rights

Certain rights may be limited by legal obligations. For example, we cannot delete data required for AML compliance, dispute resolution, or active self-exclusion enforcement. We will explain any limitations when responding to your request.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device that allow dara51 to recognize you, remember preferences, and collect usage data. We use cookies and similar technologies (web beacons, pixel tags, local storage) to enhance your experience and improve our services.

8.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Essential for account login, security, and core platform functions. Cannot be disabled.	Session or 1 year
Functional	Remember preferences (language, currency, display settings).	1 year
Analytics	Measure site traffic, page views, user behavior to improve services.	2 years
Marketing	Track campaign effectiveness and deliver personalized offers (requires consent).	6 months - 2 years

8.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notification before cookies are set. Note that disabling strictly necessary cookies may impair platform functionality (e.g., inability to log in).

9. Changes to This Privacy Policy

dara51 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated via email to your registered address and prominently displayed on our website. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of dara51 after changes are published constitutes acceptance of the updated policy. We recommend reviewing this page periodically to stay informed about how we protect your data.

10. Contact Information and Data Protection Inquiries

10.1 Data Protection Contact

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Team:

• Email: [email protected] (subject: "Privacy Policy Inquiry")
• Live Chat: Available 24/7 through your dara51 account dashboard
• Response Time: We aim to respond to all privacy inquiries within 10 business days

10.2 Complaints and Escalation

If you believe dara51 has not adequately addressed your privacy concern, you may escalate the matter to our senior management team. While we strive to resolve all issues directly, you also have the right to lodge a complaint with relevant data protection authorities in your jurisdiction.