Privacy Policy

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, date of birth, email address, phone number, residential address, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "Controller" means danaid, which determines the purposes and means of processing Personal Data collected on the Platform.
• "Processor" means any third-party service provider that processes Personal Data on behalf of danaid under a data processing agreement.
• "Platform" means the danaid website at https://danaid.cam and all associated sub-pages, mobile web interfaces, and services.
• "Player" / "You" means any individual who has registered or is in the process of registering an account on the Platform.
• "KYC Data" means identity verification documents and associated data submitted by a Player as part of the Know Your Customer process, including government-issued ID, address proof, and payment method documentation.
• "Cookie" means a small text file placed on your device by the Platform for the purposes described in Section 6.

This Privacy Policy applies to all Personal Data collected, processed, or stored by danaid in connection with the operation of the Platform. It applies to all registered Players and to any individual who accesses the Platform, whether or not they complete registration.

danaid serves players primarily located in Indonesia, including major cities such as Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and Makassar. Our privacy practices are designed to meet internationally recognized data protection standards while remaining practically aligned with the expectations and legal context of our Indonesian player base.

This Policy does not apply to third-party websites or services that may be referenced on the Platform. danaid is not responsible for the privacy practices of any third party.

danaid collects Personal Data through multiple channels. The categories of data we collect, and their sources, are as follows:

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, email address, Indonesian mobile phone number, residential address, and chosen username and password.
• KYC Documents: Government-issued photo ID (e.g., Indonesian KTP, passport, or SIM), proof of address dated within 90 days, and payment method documentation (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja account screenshots).
• Financial Data: Bank account details or e-wallet identifiers used for deposit and withdrawal transactions. danaid does not store full card numbers or full bank account credentials — financial data is processed through our secure payment processor partners.
• Support Communications: The content of any messages, emails, or live chat transcripts you send to the danaid support team.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
• Usage Data: Pages visited, time spent on each page, game sessions initiated, bets placed, and navigation patterns within the Platform.
• Cookie Data: Session identifiers, preference cookies, and analytics cookies as described in Section 6.
• Transaction Logs: Records of all deposits, withdrawals, bets, bonus activations, and account changes with associated timestamps (WIB).

3.3 Data from Third Parties

• Payment Providers: Transaction status confirmations and fraud signals from our payment processing partners, including Indonesian bank transfer networks and e-wallet providers.
• Identity Verification Services: Results from third-party KYC verification tools used to confirm the authenticity of submitted identity documents.
• Fraud Prevention Partners: Risk scores and device fingerprint data from anti-fraud service providers used to protect the integrity of the Platform.

danaid processes your Personal Data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use your data and the legal basis for each:

danaid does not use your Personal Data for automated decision-making that produces legal effects or similarly significantly affects you, except for automated fraud detection systems that may flag suspicious transactions for manual review.

danaid does not sell your Personal Data. We share your data only with the following categories of recipients, only to the extent necessary, and only under strict data protection agreements:

• Payment Processors: Indonesian bank transfer networks, e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), and international payment gateway partners that facilitate deposits and withdrawals.
• KYC Verification Providers: Third-party identity verification services that authenticate your submitted KYC documents and confirm your age (21+ requirement).
• Fraud Prevention & Security Services: Specialized security partners that provide device fingerprinting, IP reputation analysis, and transaction risk scoring to protect the Platform and all players from fraudulent activity.
• Cloud Infrastructure Providers: Secure hosting and server management partners that store Platform data in encrypted, access-controlled environments.
• Regulatory Authorities: Government agencies, licensing bodies, or law enforcement in response to valid legal requests, court orders, or where required to comply with applicable law — primarily anti-money laundering and counter-terrorism financing obligations.
• Legal & Professional Advisors: External legal counsel, auditors, and compliance consultants under strict confidentiality obligations where necessary to protect danaid's legal rights or obligations.

All third-party data processors acting on behalf of danaid are bound by written data processing agreements that impose obligations equivalent to those in this Policy. danaid remains responsible for the data handling practices of its processors.

danaid uses cookies and similar tracking technologies to provide and improve the Platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and analyze usage patterns.

Types of Cookies We Use:

• Essential Cookies: Required for basic Platform functionality, including user authentication, session management, and security. These cannot be disabled without breaking core functionality.
• Functional Cookies: Store your language preference, timezone (WIB default), and display settings to provide a personalized experience.
• Analytics Cookies: Collect anonymized or pseudonymized usage statistics to help us understand how players interact with the Platform and identify areas for improvement.
• Security Cookies: Detect and prevent fraudulent activity, including bot traffic, account takeover attempts, and session hijacking.

Most web browsers allow you to control cookies through their settings. You can block or delete cookies, but doing so may impair your ability to use certain features of the Platform. Essential cookies cannot be disabled.

danaid does not use third-party advertising cookies or allow external ad networks to track your behavior on the Platform.

danaid retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are as follows:

• Active Account Data: Retained for the duration of your active account plus 7 years following account closure, to comply with financial record-keeping and AML obligations.
• KYC Documents: Retained for a minimum of 7 years following account closure or the completion of the most recent transaction, whichever is later, to meet regulatory requirements.
• Transaction Logs: Retained for 7 years to comply with financial audit and dispute resolution requirements.
• Support Communications: Retained for 3 years from the date of the last communication, or longer if the communication relates to an unresolved complaint or legal matter.
• Marketing Consent Records: Retained for 3 years following withdrawal of consent, or until you request deletion.
• Security & Fraud Logs: Retained for 5 years to support ongoing fraud investigations and to prevent re-registration by excluded individuals.

After the applicable retention period expires, Personal Data is securely deleted or anonymized such that it can no longer be associated with an identifiable individual. Anonymized data may be retained indefinitely for statistical and research purposes.

danaid employs industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, loss, alteration, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your device and the Platform is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including KYC documents and financial records, is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data is restricted to authorized personnel on a strict need-to-know basis. All employees and contractors with data access are bound by confidentiality obligations and receive regular data protection training.
• Secure Infrastructure: Platform data is hosted on secured, redundant servers with regular backups. Physical access to data centers is restricted and monitored.
• Security Monitoring: Automated intrusion detection systems monitor for suspicious activity 24/7. Regular vulnerability assessments and penetration tests are conducted by independent security firms.
• Incident Response: In the unlikely event of a data breach affecting your Personal Data, danaid will notify you and applicable regulatory authorities within 72 hours in accordance with best-practice breach notification standards.

While danaid implements robust security measures, no system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your account password and for notifying danaid immediately if you suspect unauthorized account access.

As a danaid player, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact us using the details in Section 14.

danaid will respond to all data rights requests within 30 days. If we are unable to fulfill a request due to legal obligations or other legitimate grounds, we will explain the reason in our response. There is no charge for exercising your data rights unless your request is manifestly unfounded or excessive.

danaid is an adults-only platform. You must be at least 21 years of age to register an account or use the Platform. danaid does not knowingly collect Personal Data from individuals under the age of 21.

If we discover that we have inadvertently collected Personal Data from a person under 21 years of age, we will immediately delete that data, close the associated account, and refund any deposited funds (less any winnings, which will be forfeited) in accordance with our Terms & Conditions.

If you believe danaid has collected data from a minor, please contact us immediately at [email protected] so we can investigate and take appropriate action.

danaid operates internationally and may transfer your Personal Data to servers and service providers located outside of Indonesia. All such transfers are subject to appropriate safeguards to ensure your data receives an equivalent level of protection to that provided under this Policy.

Specifically, when danaid transfers Personal Data internationally, we ensure:

• The receiving country has been deemed to have adequate data protection standards by relevant international bodies, or
• The transfer is governed by standard contractual clauses or binding corporate rules that impose equivalent data protection obligations on the recipient, or
• The transfer is necessary for the performance of our contract with you (e.g., processing a withdrawal to your Indonesian bank account via an international payment network).

You may request further details about the safeguards applied to specific international transfers by contacting us using the details in Section 14.

The danaid Platform may contain links to third-party websites or services, including payment provider portals, game provider platforms, or informational resources. danaid is not responsible for the privacy practices of any third party.

When you leave the danaid Platform to access a third-party site, you do so at your own risk. We encourage you to review the privacy policy of any third-party service you access. This Privacy Policy applies solely to Personal Data collected by danaid on the Platform.

danaid may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform functionality. When we make material changes, we will notify you by one or more of the following methods:

• Posting a prominent notice on the Platform homepage;
• Sending an email to your registered email address;
• Displaying an in-account notification upon your next login.

Material changes will take effect 14 days after notice is provided, giving you time to review the updated Policy. Non-material changes (e.g., clarifications, formatting, or contact detail updates) take effect immediately upon publication.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Policy. If you do not accept the changes, you must cease using the Platform and may request account closure and data deletion, subject to our legal retention obligations.

The "Last Updated" date at the top of this page indicates when this Policy was most recently revised. We recommend reviewing this Policy periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy, our data handling practices, or wish to exercise any of your data rights, please contact the danaid Data Protection Team:

• Email: [email protected] (Subject line: "Privacy Inquiry — [Your Account Username]")
• WhatsApp: +62 811 0000 0000 (display only — not a clickable link)
• Live Chat: Available 24/7 via the in-platform chat widget (Indonesian-speaking agents available)

We aim to acknowledge all privacy inquiries within 24 hours (WIB) and provide a substantive response within 30 days. For complex requests, we may extend this period by a further 30 days and will inform you of the extension and the reasons for it.

If you are not satisfied with our response to your data protection inquiry, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.