Privacy Policy

1. Introduction

d060 is committed to protecting the personal information of every player who interacts with our Platform. We handle personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy applies to all personal data processed by d060 in connection with the provision of its online gaming, sports-betting, and customer-support services.

d060 serves a predominantly Indonesian user base, including players across Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, Makassar, and all Indonesian provinces. Where relevant, we apply data-handling standards that reflect the expectations of Indonesian data-subject rights and applicable international regulations. We take our obligations seriously and invest continuously in our data-protection infrastructure to maintain the trust our players place in us.

If you have any questions about how d060 handles your personal data, or if you wish to exercise any of the rights described in this Policy, please contact our Data Protection team at [email protected]. We aim to respond to all privacy-related enquiries within five (5) business days.

2. Definitions

The following definitions apply throughout this Policy:

3. Personal Data We Collect

d060 collects only the Personal Data that is reasonably necessary for the purposes described in this Policy. The categories of data we collect include:

3.1 Registration & Account Data

• Identity Information: Full legal name, date of birth, gender, nationality, and country of residence.
• Contact Information: Email address, active Indonesian mobile phone number (typically beginning with +62), and residential address.
• Account Credentials: Username and hashed password. We never store passwords in plain text.
• Preferred Language & Currency: Language preference (English) and currency setting (Indonesian Rupiah, IDR/Rp).

3.2 KYC & Verification Data

• Government-Issued ID: Scanned or photographed copy of Indonesian KTP (national ID), passport, or driver's licence.
• Proof of Address: Utility bill, bank statement, or equivalent official document issued within the last three months.
• Proof of Payment Method: Screenshot or document confirming ownership of the bank account or e-wallet (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) used for transactions on d060.
• Source of Funds: Where required by anti-money-laundering obligations, documentation supporting the declared origin of deposited funds.

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods (bank transfer reference numbers, e-wallet transaction IDs).
• Account balance history, bonus credits, and wagering activity records.
• Bank account name and number (last four digits only for display purposes; full account details are stored encrypted).

3.4 Gaming & Behavioural Data

• Sports bets placed (markets, odds, stakes, outcomes) across BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, Champions League, AFF Cup (Piala AFF), and other competitions.
• Casino game sessions, slot game activity, live dealer participation, and togel (lottery) wager records.
• Session timestamps, session duration, login frequency, and device activity patterns — used to support responsible gaming monitoring.

3.5 Technical & Device Data

• IP address, device type (mobile/desktop/tablet), operating system, browser type, and version.
• Geolocation data (country and city level, derived from IP address) — used to enforce jurisdiction restrictions.
• Cookies, session tokens, and local storage data as described in clause 8.

3.6 Communications Data

• Records of live chat transcripts, email correspondence, and support ticket history with d060's customer service team.
• Survey responses, feedback submissions, and promotional opt-in preferences.

4. How We Collect Personal Data

d060 collects Personal Data through the following channels:

1. Directly from You: When you register an account, complete the KYC process, make a deposit or withdrawal request, submit a customer support enquiry, or participate in a promotion.
2. Automatically: Through cookies, tracking pixels, server logs, and analytics tools as you interact with the Platform. See clause 8 for full details.
3. From Third-Party Payment Processors: When you transact via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or other accepted payment methods, the relevant provider may share transaction confirmation data with d060.
4. From Identity Verification Services: Where we use a third-party KYC provider to cross-reference or validate the identity documents you submit.
5. From Fraud Prevention & AML Databases: We may receive flag data from third-party anti-fraud and anti-money-laundering screening services in order to comply with our licensing obligations.

5. Legal Basis for Processing

d060 processes your Personal Data under the following legal bases, depending on the nature of the processing activity:

6. How We Use Your Personal Data

d060 uses the Personal Data we collect for the following purposes, each grounded in the legal bases described in clause 5:

• Account Management: Creating, maintaining, and securing your d060 account, including password resets, session management, and account preference settings.
• Service Delivery: Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and other accepted payment methods; settling bets; crediting bonus funds; and providing access to all gaming products on the Platform.
• Identity Verification & Compliance: Verifying your age (21+), identity, and payment method ownership as part of our KYC process; screening against anti-money-laundering (AML) watchlists; and fulfilling regulatory reporting obligations required by our international gaming licence.
• Customer Support: Responding to account enquiries, resolving disputes, investigating complaints, and maintaining a record of communications for quality assurance and audit purposes.
• Fraud Prevention & Platform Security: Detecting and preventing fraudulent activity, bonus abuse, money laundering, account takeover attempts, and other conduct that violates our Terms & Conditions. This includes automated pattern analysis of betting and transaction behaviour.
• Responsible Gaming Monitoring: Tracking session duration, deposit frequency, and loss patterns to identify players who may be developing problematic gambling behaviour, and proactively offering self-exclusion, deposit limits, or intervention resources. See our Responsible Gaming Policy for full details.
• Platform Improvement & Analytics: Analysing aggregated, anonymised usage data to improve the layout, performance, and product offering of the d060 Platform; conducting A/B testing; and diagnosing technical issues.
• Marketing & Promotions: Sending promotional emails, SMS notifications, and personalised bonus offers to users who have opted in to receive such communications. You may opt out at any time by contacting [email protected] or using the unsubscribe link in any marketing email.
• Legal & Regulatory Obligations: Retaining records as required by applicable law, responding to lawful requests from regulatory authorities, and enforcing our contractual rights.

7. Data Sharing & Disclosure

d060 may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data-protection safeguards:

1. Payment Service Providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
2. KYC & Identity Verification Partners: Accredited third-party identity verification services may receive copies of your KYC documents to perform automated or manual verification checks on our behalf. Such partners are contractually bound to use your data solely for this purpose.
3. Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session identifiers and bet data necessary to operate their games within the d060 Platform. No additional Personal Data beyond what is operationally required is shared.
4. Anti-Fraud & AML Service Providers: We may share transaction and identity data with fraud prevention databases and AML screening services as required by our licensing obligations and international regulatory standards.
5. Technology & Hosting Providers: Cloud infrastructure providers and software vendors who process data on our behalf under binding data-processing agreements that prohibit independent use of your data.
6. Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or our licensing authority, d060 may disclose Personal Data to government bodies, regulators, or law enforcement agencies. We will notify you of any such disclosure where legally permitted to do so.
7. Business Transfers: In the event of a merger, acquisition, restructuring, or sale of d060's business or assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

d060 does not share your Personal Data with affiliates, marketing partners, or data brokers for purposes unrelated to the provision of our services.

8. Cookies & Tracking Technologies

d060 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain secure sessions, and gather analytics data. The following categories of cookies may be placed on your device:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Withdrawing consent for optional cookies does not affect cookies already set prior to withdrawal.

9. Data Retention

d060 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your account's active status, plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in line with international AML standards.
• Transaction Records: All deposit, withdrawal, and wagering records are retained for a minimum of five (5) years for regulatory and audit purposes.
• Customer Support Communications: Email and live chat records are retained for three (3) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing Preferences: Opt-in records are retained for the duration of your account and for two (2) years following opt-out, to demonstrate compliance with consent requirements.
• Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it can no longer be attributed to any individual.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised using industry-standard data destruction procedures.

10. Data Security

d060 implements a comprehensive suite of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes:

• TLS/SSL Encryption: All data transmitted between your device and the d060 Platform is encrypted using 256-bit TLS/SSL protocols, ensuring that sensitive information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive Personal Data — including KYC documents, bank account details, and hashed passwords — is stored using AES-256 encryption on secured servers with restricted access controls.
• Access Controls: Internal access to Personal Data is strictly limited on a role-based, need-to-know basis. All staff with data access undergo regular privacy and security training.
• Intrusion Detection & Monitoring: Real-time monitoring systems and intrusion detection tools operate continuously to identify and respond to suspicious activity targeting our servers or user accounts.
• Regular Security Audits: d060 engages independent security specialists to conduct periodic vulnerability assessments and penetration tests of our Platform infrastructure.
• Incident Response Plan: In the event of a confirmed data breach affecting your Personal Data, d060 will notify affected users and relevant regulatory authorities within the timeframes prescribed by applicable law.

11. Your Data Protection Rights

Subject to applicable law and certain conditions, you have the following rights in relation to the Personal Data d060 holds about you:

1. Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is being processed. We will provide this within 30 days of receiving a valid request.
2. Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
3. Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to our legal and regulatory data-retention obligations, which may require us to retain certain data for up to five years.
4. Right to Restrict Processing: You may request that we limit how we use your Personal Data in certain circumstances, such as while we verify the accuracy of data you have disputed.
5. Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that we provide your data in a structured, machine-readable format, or transfer it directly to another service provider where technically feasible.
6. Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes, or to processing based on legitimate interests where your individual rights and freedoms override those interests.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include sufficient information to verify your identity. We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) calendar days.

12. International Data Transfers

d060 is an internationally operating platform and, as such, your Personal Data may be processed in countries outside Indonesia. This may occur when our cloud hosting infrastructure, KYC partners, or game content providers (such as Pragmatic Play, Evolution Gaming, or Microgaming) operate servers or staff in jurisdictions beyond Indonesian borders.

Where Personal Data is transferred internationally, d060 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under applicable data protection principles. Safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions recognised as providing adequate data protection.

By registering an account with d060 and using our Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this clause, subject always to the protections outlined throughout this Policy.

13. Third-Party Links & Integrations

The d060 Platform may contain references to third-party services, including payment gateways (BCA, OVO, GoPay), game studios, and streaming providers. When you interact with these third-party services, you are subject to their respective privacy policies and terms. d060 is not responsible for the data practices of any third party, and we encourage you to review the privacy policies of any external service you use in connection with your d060 account.

We do not embed social media tracking pixels or third-party advertising networks on the d060 Platform in a manner that would allow those parties to collect Personal Data about you without your knowledge.

14. Minors & Age Restriction

The d060 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, store, or process Personal Data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC processes.

If d060 becomes aware that Personal Data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data, close the associated account, and return any deposits (less any processing fees) through available payment channels. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected].

15. Changes to This Privacy Policy

d060 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, our data-processing practices, or Platform features. When material changes are made, we will notify registered Users via email or a prominent on-Platform notice at least seven (7) days before the revised Policy takes effect.

The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how we protect your data. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

If you do not agree with any material change to this Policy, you should cease using the Platform and contact us to request the closure of your account and withdrawal of your remaining Balance before the revised Policy takes effect.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way d060 handles your Personal Data, please reach out to our support team using the contact details below. Our team includes Indonesian-speaking staff and is available around the clock.