Privacy Policy

1. Introduction

dsobet ("we", "us", or "our") operates the online betting platform accessible at https://dsobet.cam. We are committed to protecting the privacy and personal data of every user who visits our website, creates an account, or uses any of our services. This Privacy Policy explains in plain terms what data we collect, why we collect it, how we use and protect it, and what rights you have over your own information.

This policy applies to all personal data processed in connection with dsobet's services, including sports betting markets such as BRI Liga 1, the English Premier League, and other international leagues, live casino products powered by Evolution Gaming and Pragmatic Play, slot games, and lottery products such as togel (Indonesia's traditional numbers lottery). It also applies to customer support interactions conducted via live chat, WhatsApp, and email at [email protected].

dsobet serves players primarily in Indonesia — from Jakarta and Surabaya to Medan, Bandung, and Bali. We recognize that Indonesian players have a right to know exactly how their data is handled, and we are committed to transparent, responsible data governance. By accessing our platform or creating an account, you confirm that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.

2. Definitions

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, date of birth, address, phone number, email address, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" refers to dsobet, which determines the purposes and means of processing Personal Data.
• "Data Subject" refers to you — the individual whose Personal Data is collected and processed.
• "KYC" means Know Your Customer — the identity and age verification process we use to confirm that account holders are eligible to use dsobet's services.
• "Cookies" means small text files placed on your device by our platform to remember your preferences, session state, and browsing behavior within dsobet.
• "Third Parties" refers to entities other than dsobet and you, including payment processors, game providers, and analytics service providers.

3. Data We Collect

dsobet collects different categories of Personal Data depending on how you interact with our platform. We collect only what is necessary to provide and improve our services, verify your identity, process transactions, and comply with legal obligations.

3.1 Data You Provide Directly

• Registration data: Full legal name (as on your KTP), date of birth, gender, email address, phone number, and residential address in Indonesia.
• Identity verification (KYC) data: Copy of your Indonesian National ID Card (KTP), proof of address documents, and selfie photographs taken for identity confirmation.
• Financial data: Bank account details for Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet information (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history records.
• Support communications: Messages, chat transcripts, email correspondence, and call recordings from interactions with our customer support team.
• Self-imposed gaming limits: Deposit limits, loss limits, session time limits, and self-exclusion requests you submit through our responsible gaming tools.

3.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings.
• Usage and behavioral data: Pages visited, features used, bets placed, games played, session duration, click-stream data, and navigation paths within the dsobet platform.
• Geolocation data: Approximate geographic location derived from your IP address (city and region level; we do not access precise GPS location without explicit consent).
• Cookies and tracking pixels: Session cookies, preference cookies, and analytics data as described in Section 7.

3.3 Data We Receive from Third Parties

• Payment processors: Transaction confirmation data from BCA, BRI, BNI, Mandiri, and e-wallet providers to verify deposits and withdrawals.
• Game providers: Bet history, game round data, and RNG certification records from providers such as Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt.
• Fraud prevention services: Risk scores and flags from third-party fraud detection systems to protect the integrity of our platform.

4. How We Use Your Data

dsobet uses your Personal Data for the following clearly defined purposes:

We do not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human oversight. Where automated tools are used in risk scoring or fraud detection, a qualified team member reviews decisions before any account action is taken.

5. Legal Basis for Processing

dsobet processes your Personal Data on the following legal grounds, depending on the specific activity involved:

• Contractual necessity: Processing required to perform our contract with you, including account registration, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, KYC requirements, age verification, and financial record-keeping mandates.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where these interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications, certain cookies, and any other purposes for which we have specifically requested your consent. You may withdraw consent at any time by contacting our support team or updating your account preferences.

6. Data Sharing and Disclosure

dsobet does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We share your data only in the following limited and clearly defined circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process data on our behalf unde r strict data processing agreements. These include:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals securely.
• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other certified providers to deliver gaming content and maintain fair-play records.
• KYC and fraud prevention partners: Identity verification and risk management vendors who help us confirm user eligibility and detect fraudulent activity.
• Cloud infrastructure providers: Secure hosting and data storage services operating under enterprise-grade security standards and confidentiality agreements.
• Customer support platforms: Live chat and messaging service providers used to facilitate our 24/7 Indonesian-speaking support operations.

6.2 Legal and Regulatory Disclosure

dsobet may disclose your Personal Data to competent authorities, regulators, courts, or law enforcement agencies where required to do so by applicable law, court order, or regulatory obligation. This includes disclosures related to anti-money laundering investigations, fraud inquiries, or requests made under international cooperation frameworks. We will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of dsobet's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will provide advance notice of any such transfer and ensure the receiving party maintains the same standard of data protection described in this Privacy Policy.

6.4 Aggregate and Anonymized Data

We may share aggregated, anonymized statistical data — such as overall platform usage patterns, deposit volume trends, or game popularity metrics — with business partners, regulators, or the public. This data cannot be used to identify individual users and is not subject to the restrictions in this section.

7. Cookies and Tracking Technologies

dsobet uses cookies and similar tracking technologies to ensure our platform functions correctly, to remember your preferences, and to understand how users navigate and interact with our services. Below is a summary of the cookie categories we use:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will prevent core platform features — including login, deposits, and bet placement — from functioning correctly. For guidance on managing cookies in popular browsers, please consult your browser's official help documentation.

8. Data Retention

dsobet retains your Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law and regulatory obligations. The primary retention periods are set out in the table in Section 4. The following principles guide our retention practices:

• Active accounts: Personal Data associated with an active dsobet account is retained for the full duration of the account's existence plus the post-closure period required by law.
• Closed accounts: After voluntary or involuntary account closure, we retain KYC documents, financial records, and bet history for a minimum of five (5) years to comply with anti-money laundering regulations and to resolve any potential post-closure disputes.
• Support communications: Chat logs, email records, and support tickets are retained for three (3) years from the date of the last interaction to enable us to reference past interactions and maintain service quality.
• Inactive accounts: Accounts with no login activity for 12 consecutive months are classified as inactive. We will notify you by email before initiating any data review process related to inactive accounts.
• Analytics data: Behavioral and usage analytics data is anonymized after 24 months and may be retained indefinitely in aggregate, non-identifiable form for platform improvement purposes.

Once the applicable retention period has expired, your Personal Data is securely deleted or irreversibly anonymized using industry-standard data destruction procedures.

9. Security Measures

dsobet implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using bank-grade Transport Layer Security (TLS 1.2 and above), the same standard used by major Indonesian banks such as BCA and BNI.
• Data-at-rest encryption: Sensitive data stored in our databases — including KYC documents and financial records — is encrypted using AES-256 encryption.
• Access controls: Strict role-based access controls ensure that only authorized dsobet personnel who require access to specific data categories for their job function can retrieve that information. All access events are logged and audited.
• Two-factor authentication (2FA): We offer optional 2FA for player accounts and mandate 2FA for all internal administrative access.
• Regular penetration testing: Our platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: We maintain a documented data breach response plan. In the event of a security incident affecting your Personal Data, we will notify you and relevant authorities within the timeframes required by applicable law.

While we take every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials, and we strongly recommend using a strong, unique password and enabling 2FA on your dsobet account.

10. Your Rights

As a dsobet user, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a verified request.

• Right of access: You may request a copy of the Personal Data we hold about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data we hold. Some corrections may require updated KYC documentation.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records (see Section 8).
• Right to restriction: You may request that we limit the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: You may request a machine-readable copy of the Personal Data you have provided to us directly, to transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. We will honor marketing opt-out requests immediately upon receipt.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Please note that some rights may be limited where we are required by law to retain or process your data — for example, KYC records required for anti-money laundering compliance cannot be erased on request. We will always explain the specific reason if we are unable to fulfill a rights request.

11. Minors and Age Verification

dsobet's services are strictly intended for adults who are at least 21 years of age. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Our mandatory KYC process, which requires a valid Indonesian National ID Card (KTP), is specifically designed to verify that all account holders meet this age requirement before they can deposit funds or access any betting services.

If we have reason to believe that an account has been registered by or is being used by a person under 21 years of age, we will immediately suspend the account, initiate a full identity review, and if confirmed, permanently close the account. Any funds deposited during the suspension will be returned to the originating payment method after verification of ownership, minus any amounts wagered, and the matter may be reported to the relevant authorities.

If you believe a minor has accessed or registered on our platform, please report this to [email protected] immediately so we can take appropriate action. We take underage gambling with the utmost seriousness and maintain a zero-tolerance policy in this regard.

12. Changes to This Privacy Policy

dsobet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our services, legal obligations, or data processing practices. When we make material changes, we will take the following steps to inform you:

• Update the "Last Reviewed" date at the top of this page.
• Display a prominent notice on the dsobet platform informing users of the update.
• Send an email notification to the registered email address associated with your account, where the changes are significant enough to require your awareness before continued use.

Your continued use of the dsobet platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must stop using our services and may request account closure by contacting our support team. We encourage you to review this page periodically to stay informed about how we protect your data.

13. Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or the way dsobet handles your Personal Data, please do not hesitate to reach out to us through any of the following channels:

• Email (Privacy Requests): [email protected] — please use the subject line "Privacy Policy Inquiry" or "Privacy Rights Request" for faster routing to the correct team.
• Live Chat: Available 24/7 through your dsobet account dashboard. Our Indonesian-speaking agents can assist with general privacy queries in real time.
• WhatsApp Support: Contact our customer support line via WhatsApp for urgent privacy concerns. Available around the clock.

We aim to respond to all privacy-related inquiries within five (5) business days during standard working hours (Monday–Friday, 09:00–17:00 WIB). For formal rights requests, we will provide a substantive response within 30 calendar days, as required by applicable data protection standards.