dk168 Privacy Policy

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly — including name, identification number, location data, online identifiers, or factors specific to that person's identity.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means dk168, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of dk168 under a written data processing agreement.
• "User" / "You" means any individual who accesses, registers on, or uses the dk168 platform.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification process required of all dk168 Users before withdrawals are processed.
• "Cookies" means small text files placed on your device by the dk168 platform to facilitate functionality, analytics, and personalization.

This Privacy Policy governs all Personal Data collected and processed by dk168 in connection with:

• Registration and maintenance of a dk168 User account.
• Deposits, withdrawals, and transaction processing via Indonesian payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja).
• Use of sports betting, live casino, slot, and other gaming services on the dk168 platform.
• Customer support interactions conducted by email or live chat.
• Participation in dk168 promotions, bonuses, and loyalty programs.
• Visits to https://dk168.cam regardless of whether a User is registered.

This policy applies to Users primarily located in Indonesia. dk168 acknowledges that Indonesian players are the primary audience of this platform and takes into account the expectations of Indonesian data subjects in its data governance practices.

dk168 collects the following categories of Personal Data, depending on your level of interaction with the platform:

dk168 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data unless specifically required by a regulatory obligation.

dk168 collects Personal Data through the following methods:

• Direct submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or claiming a promotion.
• Automated technologies: Data collected automatically when you access the platform, including cookies, pixel tags, server logs, and session tracking technologies. See Clause 11 for details on our cookie practices.
• Third-party payment processors: Transaction confirmation data received from Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) as part of payment processing.
• Identity verification providers: Data received from third-party KYC verification service providers used to confirm the identity and age of registering Users.
• Fraud prevention and AML services: Data received from compliance screening providers used to detect fraudulent activity and meet anti-money laundering obligations.

dk168 processes your Personal Data for the following purposes:

• Account management: Creating, operating, and maintaining your dk168 User account, including authentication and account security.
• Transaction processing: Facilitating deposits and withdrawals via your chosen Indonesian payment method, and maintaining accurate financial records.
• KYC compliance: Verifying your identity and age in accordance with regulatory obligations applicable to online gaming operators.
• Anti-money laundering (AML): Screening transactions and account activity against AML obligations and sanctions lists as required by the platform's licensing framework.
• Customer support: Responding to your inquiries, resolving disputes, processing complaints, and maintaining support records.
• Platform improvement: Analyzing aggregated usage data to improve platform performance, game offerings, and user experience.
• Promotions and marketing: Sending promotional communications about bonuses, new games, and seasonal offers — only where you have provided marketing consent.
• Responsible gaming: Monitoring account activity to identify signs of problem gambling behavior and applying self-exclusion or deposit limits where requested or required.
• Legal compliance: Complying with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, and other security threats.

dk168 relies on the following legal bases when processing your Personal Data:

• Contract performance: Processing necessary to provide the services you have requested — including account operation, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC verification, AML screening, and responses to lawful authority requests.
• Legitimate interests: Processing necessary for dk168's legitimate business interests — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where we rely on your freely given, specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

dk168 does not sell your Personal Data. We share your data only in the following circumstances:

• Payment processors: We share financial data with Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) as necessary to process your transactions.
• KYC and AML providers: Identity verification and compliance screening providers receive the data necessary to verify your identity and conduct required compliance checks.
• Game technology providers: Game studios and platform technology providers (such as Pragmatic Play, Evolution Gaming, and other certified partners) may receive pseudonymized usage data as necessary to deliver their services.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and technical infrastructure providers process data on our behalf under data processing agreements that impose equivalent data protection obligations.
• Regulatory and law enforcement authorities: We may disclose Personal Data to competent authorities where required by law, a court order, or a binding regulatory directive.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of dk168's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

dk168's platform infrastructure and some of its third-party service providers may operate in jurisdictions outside Indonesia. When Personal Data is transferred internationally, dk168 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses or equivalent contractual protections with the receiving party.
• Transfer to jurisdictions that provide an adequate level of data protection as recognized by relevant international frameworks.
• Technical and organizational security measures appropriate to the sensitivity of the data being transferred.

By using the dk168 platform, you acknowledge that your data may be transferred and processed in jurisdictions outside Indonesia as described in this clause.

dk168 retains your Personal Data for no longer than necessary to fulfill the purposes described in this Privacy Policy, taking into account the following factors:

• Active accounts: Personal Data is retained for the duration of your account relationship with dk168 and for a period thereafter as required to meet legal, regulatory, and audit obligations.
• KYC and transaction records: Identity verification documents and transaction records are retained for a minimum of five (5) years following account closure, in accordance with standard anti-money laundering regulatory requirements applicable to the platform's licensed jurisdiction.
• Support communications: Customer support records are retained for a minimum of two (2) years from the date of the interaction.
• Marketing data: Where you have consented to marketing communications, your marketing preference data is retained until you withdraw consent or request deletion.
• Closed accounts: Following account closure, residual data is minimized and retained only to the extent required by applicable legal obligations.

When Personal Data is no longer required and no legal obligation mandates its continued retention, dk168 will securely delete or anonymize that data in accordance with its internal data lifecycle management procedures.

dk168 implements a layered set of technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and dk168's servers.
• Encryption-at-rest for sensitive data stored on dk168's infrastructure.
• Access controls and role-based permissions limiting employee access to Personal Data on a need-to-know basis.
• Regular security audits and penetration testing conducted by independent third-party cybersecurity specialists.
• Multi-factor authentication requirements for administrative access to systems holding Personal Data.
• Incident response procedures enabling dk168 to detect, report, and remediate Personal Data breaches promptly.

Notwithstanding these measures, no method of transmission over the internet or electronic storage is completely secure. While dk168 strives to protect your data using commercially reasonable safeguards, we cannot guarantee absolute security. You are responsible for maintaining the security of your own account credentials.

dk168 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are:

• Essential cookies: Required for the platform to function. These cannot be disabled without affecting core functionality such as login sessions and security. No consent is required for essential cookies.
• Analytics cookies: Used to collect aggregated statistical data about how Users interact with the platform — including pages visited, session duration, and navigation paths. This data helps us improve platform performance. Analytics cookies are set only with your consent.
• Functional cookies: Remember your preferences such as language settings and display options to personalize your experience. Set only with your consent.
• Marketing cookies: Used to deliver promotional content relevant to your interests. Marketing cookies are set only with your explicit opt-in consent.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core dk168 platform but may affect certain personalization features.

As a dk168 User, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected]. dk168 will respond to all valid requests within 30 calendar days.

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

dk168 is an adults-only platform. The minimum age to register and use dk168 is 21 years. dk168 does not knowingly collect Personal Data from persons under 21 years of age. If we become aware that a registered User is under 21 years old, we will immediately suspend and close that account and delete the associated Personal Data, subject only to any retention obligations that override deletion.

If you have reason to believe that a minor is using the dk168 platform, please report it immediately to [email protected] so we can investigate and take appropriate action.

The dk168 platform does not contain links to external third-party websites. All navigation on the platform stays within dk168's own domain. This Privacy Policy applies solely to data processing carried out by dk168 in connection with https://dk168.cam.

dk168 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When a material change is made, dk168 will provide notice via a prominent announcement on the platform and/or by email to your registered address.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. Your continued use of the dk168 platform following notification of any amendment constitutes acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how your Personal Data is being handled, please contact dk168 using the details below:

We aim to resolve all privacy-related inquiries within 30 calendar days of receipt. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. dk168 will cooperate fully with any such regulatory investigation.

For questions about our responsible gaming practices, please visit our Responsible Gaming page. For general platform questions, see our FAQ.