Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by dipo4 (referred to as "we," "us," or "our") through our website located at https://dipo4.cam, any associated mobile applications, and all related services, features, and functionalities (collectively, the "Platform"). This policy covers how we handle personal information of users who register accounts, place bets, or otherwise interact with our betting services, including Indonesian residents who access our sports betting, live casino, slot games, and related products such as bandar bola (football betting markets), togel (lottery-style numbers games), and mix parlay (accumulator bets).

dipo4 operates as an international online betting platform serving Indonesian players. We are committed to complying with applicable data protection regulations, including international privacy standards and best practices for handling personal information of users in Indonesia and other jurisdictions where we operate. Our data processing activities are designed to ensure the highest levels of security, transparency, and respect for individual privacy rights.

2. Data Controller Information

dipo4 is the data controller responsible for your personal information collected through the Platform. For any questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact our Data Protection Officer at:

• Email: [email protected]
• Response Time: We aim to respond to all privacy inquiries within 5 business days
• Contact Hours: 24/7 via email or live chat on our website

3. Information We Collect

3.1 Information You Provide Directly

When you register an account with dipo4 or use our services, you voluntarily provide us with the following categories of personal information:

• Account Registration Data: Full legal name, date of birth, gender, residential address (street, city, province, postal code), Indonesian mobile phone number, email address, chosen username, and password.
• Identity Verification Data: Government-issued identification documents (KTP, passport, or driver's license), selfie photographs for identity confirmation, and any additional documentation requested as part of our Know Your Customer (KYC) compliance procedures.
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals via BCA, BRI, BNI, or Mandiri; e-wallet identifiers for OVO, DANA, or GoPay transactions; transaction history including deposit amounts, withdrawal requests, and payment method preferences.
• Communication Data: Any information you provide when contacting our customer support team via live chat, email, or other communication channels, including your inquiries, feedback, complaints, and our responses.
• Marketing Preferences: Your consent preferences for receiving promotional communications, newsletters, bonus offers, and other marketing materials from dipo4.

3.2 Information Collected Automatically

When you access and use the dipo4 Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (desktop, mobile phone, tablet), operating system and version, browser type and version, screen resolution, device identifiers (IP address, device ID), and mobile network information.
• Usage Data: Pages visited, time spent on each page, click patterns, navigation paths, referring and exit pages, search queries entered on our Platform, features accessed, games played, bets placed, and timestamps of all activities.
• Location Data: IP-based geolocation information to verify your location is within Indonesian territory and to comply with geographic restrictions on betting services.
• Cookies and Tracking Technologies: We use cookies (small text files stored on your device) to remember your login credentials, personalize your experience, analyze Platform performance, and deliver targeted advertising. You can control cookie preferences through your browser settings, though disabling certain cookies may limit Platform functionality.

3.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from external sources, including:

• Payment Processors: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to verify deposit and withdrawal processing.
• Identity Verification Services: Third-party KYC and anti-fraud services that confirm the authenticity of identification documents and flag suspicious account activity.
• Marketing Partners: If you access dipo4 through an affiliate link or marketing campaign, we may receive referral information from the affiliate partner.
• Public Sources: Publicly available information from social media profiles or business registries if necessary to verify account ownership or prevent fraud.

4. How We Use Your Information

dipo4 processes your personal data for the following legitimate purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your user account on the dipo4 Platform.
• Authenticating your identity and verifying your age (21+ requirement for Indonesian users).
• Processing deposits, withdrawals, and other financial transactions via your chosen payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay).
• Enabling you to place bets on sports events, play casino games, slots, togel, and other betting products offered by dipo4.
• Managing your VIP tier status, loyalty rewards, cashback calculations, and bonus eligibility.
• Settling bets, crediting winnings, and maintaining accurate transaction records.

4.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations applicable to online gambling operators.
• Verifying that you meet age and jurisdictional eligibility requirements (21+ and Indonesian residency).
• Preventing fraud, money laundering, collusion, bonus abuse, and other prohibited activities outlined in our Terms & Conditions.
• Responding to legal requests from law enforcement, regulatory authorities, or courts when required by applicable law.
• Maintaining records of betting activity and financial transactions as required by international gaming regulations.

4.3 Customer Support and Communication

• Providing 24/7 customer support to answer your questions, resolve technical issues, and address account-related concerns via Indonesian-speaking support staff.
• Sending transactional communications such as deposit confirmations, withdrawal approvals, account security alerts, and important policy updates.
• Notifying you of changes to our Terms & Conditions, Privacy Policy, or other legal documents.

4.4 Marketing and Personalization

• Sending promotional emails, SMS messages, or push notifications about new games, bonus offers, tournaments, and special events (only if you have consented to receive marketing communications).
• Personalizing your Platform experience by recommending games, betting markets, and promotions based on your preferences and betting history.
• Conducting surveys and requesting feedback to improve our services and better understand Indonesian player preferences.

4.5 Platform Improvement and Analytics

• Analyzing Platform usage patterns, betting trends, and user behavior to optimize website performance, mobile responsiveness, and user interface design.
• Testing new features, games, and betting products before full launch.
• Detecting and fixing technical bugs, security vulnerabilities, and system errors.
• Conducting data analytics to understand market trends and improve odds competitiveness on football (BRI Liga 1, EPL, Champions League), casino games, and other betting products.

4.6 Security and Fraud Prevention

• Monitoring account activity for signs of unauthorized access, suspicious betting patterns, or attempts to exploit bonuses or system vulnerabilities.
• Implementing security measures such as two-factor authentication, encryption, and intrusion detection systems to protect your account from unauthorized access.
• Investigating suspected violations of our Terms & Conditions, including collusion, multi-accounting, use of betting bots, or other forms of cheating.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations under the Terms & Conditions you agreed to when registering your account, including providing betting services, processing transactions, and managing your account.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC/AML requirements, age verification mandates, tax reporting obligations, and responses to lawful government requests.
• Legitimate Interests: Processing serves our legitimate business interests in preventing fraud, improving Platform security, optimizing user experience, conducting analytics, and maintaining the integrity of our betting markets, provided these interests do not override your fundamental privacy rights.
• Consent: For marketing communications and certain optional data processing activities (such as personalized advertising), we obtain your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Data Sharing and Disclosure

dipo4 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under strict confidentiality obligations:

6.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process your deposits and withdrawals.
• Identity Verification Services: Third-party KYC/AML compliance providers who verify your identification documents and screen for fraud risk.
• Game Providers: Software suppliers who power our slot games, live casino tables, and other betting products, who may receive anonymized or pseudonymized usage data.
• Cloud Hosting Providers: Infrastructure and data storage providers who host our Platform servers and databases under strict data security agreements.
• Customer Support Tools: Live chat software providers and help desk platforms used to deliver customer service.
• Marketing Services: Email delivery platforms, SMS gateways, and advertising networks used to send promotional communications (only if you have consented).

6.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or government authorities when required by law, court order, or legal process, or when we believe in good faith that disclosure is necessary to:

• Comply with applicable laws, regulations, or legal obligations.
• Respond to valid legal requests, subpoenas, or warrants from authorities in Indonesia or other jurisdictions.
• Protect the rights, property, or safety of dipo4, our users, or the public.
• Detect, prevent, or investigate fraud, security breaches, or other illegal activities.
• Enforce our Terms & Conditions or other legal agreements.

6.3 Corporate Transactions

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate restructuring involving dipo4, your personal information may be transferred to the acquiring entity, successor company, or relevant parties involved in the transaction, subject to the same privacy protections outlined in this policy.

7. International Data Transfers

dipo4 operates internationally and may transfer your personal data to servers and service providers located outside Indonesia, including jurisdictions that may have different data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by international data protection authorities.
• Data processing agreements with third-party service providers requiring them to protect your data according to international standards.
• Encryption and secure transmission protocols for all cross-border data transfers.
• Limiting data access to authorized personnel only, regardless of location.

By using dipo4 services, you consent to the transfer of your personal data to international destinations as described in this policy.

8. Data Security Measures

dipo4 employs comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by banks and financial institutions worldwide.
• Secure Data Storage: Personal data is stored in secure, access-controlled databases with regular backups and disaster recovery protocols.
• Access Controls: Strict role-based access controls ensure that only authorized dipo4 employees and service providers can access personal data, and only to the extent necessary to perform their job functions.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential weaknesses in our systems.
• Employee Training: All dipo4 staff members who handle personal data receive regular training on data protection principles, security best practices, and confidentiality obligations.
• Incident Response: We maintain a data breach response plan to promptly detect, investigate, and mitigate any security incidents, and to notify affected users and authorities as required by law.

While we implement industry-leading security measures, please note that no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account password and for all activities that occur under your account.

9. Data Retention

dipo4 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data type:

• Account Data: Retained for the duration of your active account, plus an additional period after account closure as required by gaming regulations and anti-money laundering laws (typically 5-7 years).
• Transaction Records: Financial transaction history (deposits, withdrawals, bets, winnings) is retained for at least 7 years to comply with tax reporting and audit requirements.
• Identity Verification Documents: KYC documents (ID scans, selfies, proof of address) are retained for the duration of your account relationship plus 7 years after account closure for regulatory compliance.
• Communication Records: Customer support chat logs and email correspondence are retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Data: If you unsubscribe from marketing communications, we retain your email address on a suppression list indefinitely to honor your opt-out request.
• Cookies and Usage Data: Most cookies expire automatically after your browsing session or after a set period (typically 30 days to 2 years), though you can delete cookies manually through your browser settings.

After the applicable retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you as an individual.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you, including information about how we process it and who we share it with.
• Right to Rectification: Request correction of inaccurate or incomplete personal data in your account profile.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to Restrict Processing: Request that we limit how we use your personal data while a dispute or investigation is pending.
• Right to Data Portability: Request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: Object to processing of your personal data based on our legitimate interests, particularly for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent for marketing communications or other optional data processing activities at any time without affecting the lawfulness of processing based on consent before withdrawal.
• Right to Lodge a Complaint: File a complaint with a data protection supervisory authority if you believe your privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days. Note that some rights are subject to legal limitations, and we may need to verify your identity before processing your request.

11. Children's Privacy

dipo4 services are strictly intended for adults aged 21 years or older, in accordance with Indonesian gambling age restrictions. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such information and permanently close the account. Parents or guardians who believe their child has provided personal information to dipo4 should contact us immediately at [email protected].

12. Marketing Communications and Opt-Out

With your consent, dipo4 may send you promotional emails, SMS messages, or push notifications about new games, bonus offers, tournaments, and special events. You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email.
• Replying "STOP" to any SMS marketing message.
• Adjusting your notification preferences in your account settings.
• Contacting customer support to update your marketing preferences.

Please note that even if you opt out of marketing communications, we will still send you essential transactional messages related to your account, such as deposit confirmations, withdrawal notifications, and important security alerts.

13. Third-Party Links and Services

The dipo4 Platform may contain links to third-party websites, social media platforms, or services that are not operated by us. This Privacy Policy applies only to dipo4 and does not govern the data practices of external websites or services. We encourage you to review the privacy policies of any third-party sites you visit, as we are not responsible for their privacy practices or content.

14. Changes to This Privacy Policy

dipo4 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by posting the updated policy on this page with a new "Last Updated" date and, where appropriate, by sending an email notification or displaying a prominent notice on the Platform. Your continued use of dipo4 services after any changes become effective constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Privacy Inquiry - [Your Account Username]
• Response Time: We will respond to all privacy-related inquiries within 5 business days
• Live Chat: Available 24/7 on our website for urgent privacy concerns

Our Indonesian-speaking support team is here to assist you with any privacy-related questions and to help you exercise your data protection rights under this policy.