Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings ascribed to them below:

• "dana50", "We", "Us", or "Our" refers to the dana50 online betting platform operating at https://dana50.wtf and its affiliated entities.
• "Player", "You", or "Your" refers to any individual who accesses our Website, creates an Account, or uses any dana50 Service.
• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, including but not limited to name, date of birth, national identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means dana50, the entity that determines the purposes and means of Processing Personal Data.
• "Third Party" means any entity other than the Player and dana50, including payment processors, game providers, and analytics providers.
• "KTP" refers to the Kartu Tanda Penduduk, the Indonesian National Identity Card issued by the Indonesian government.

---

2. Scope and Application

This Privacy Policy applies to all Personal Data collected by dana50 in connection with the operation of our online betting platform, including the Website at https://dana50.wtf, any associated mobile applications, and any communications between dana50 and Players through email, live chat, WhatsApp, or other channels.

This Policy is intended for Players who are residents of Indonesia and are at least 21 years of age. By accessing the Website or using any dana50 Service, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your Personal Data as described herein. If you do not agree, you must immediately cease using our Services and contact us to request Account closure.

This Policy does not apply to third-party websites or services that may be referenced on our platform. We encourage you to review the privacy policies of any third-party services independently.

---

3. Data We Collect

3.1 Identity and Registration Data

When you register an Account with dana50, we collect the following identity information:

• Full legal name (as it appears on your KTP)
• Date of birth
• Gender
• Indonesian National Identity Card (KTP) number
• Residential address
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) obligations and age verification requirements, we collect:

• Photographic copy or scan of your KTP
• Selfie photograph for biometric identity matching
• Proof of residential address (utility bill, bank statement, or government correspondence dated within three months)
• Proof of payment method ownership (bank statement showing your name and account number)

3.3 Financial and Transaction Data

In connection with deposits, withdrawals, and betting activity, we collect:

• Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account IDs)
• Deposit and withdrawal amounts, timestamps, and reference numbers
• Betting history including stakes, odds, game types, and outcomes
• Bonus and promotion activity
• Account balance history

3.4 Technical and Device Data

When you access the Website or mobile application, our systems automatically collect:

• IP address
• Device type, operating system, and browser version
• Session start and end timestamps
• Pages and features accessed
• Geolocation data (country and city level, derived from IP address)
• Cookie identifiers and session tokens

3.5 Communications Data

When you contact dana50 customer support via live chat, email, or WhatsApp, we retain records of those communications, including the content of your messages, timestamps, and the channel used. This data enables us to provide consistent support, track resolution of issues, and improve our services.

---

4. How We Collect Your Data

dana50 collects Personal Data through the following mechanisms:

• Directly from you: Registration forms, KYC document uploads, deposit and withdrawal requests, live chat and email communications, and survey participation.
• Automatically through technology: Server logs, cookies, web beacons, and mobile application analytics SDKs that record technical and usage data when you access our platform.
• From third parties: Identity verification service providers who confirm KTP validity, payment processors who confirm deposit and withdrawal transactions, fraud detection services, and geolocation data providers.

---

5. Purposes and Legal Bases for Processing

We process your Personal Data for the following purposes, each supported by a legitimate legal basis:

---

6. Data Sharing and Disclosure

dana50 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share your Personal Data only in the following limited circumstances:

6.1 Service Providers

We engage third-party service providers who process Personal Data on our behalf and under our instruction, bound by confidentiality agreements and data processing terms. These include:

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC services that validate the authenticity of KTP documents and biometric photographs.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, and NetEnt who deliver game content through our platform and may receive anonymized session identifiers.
• Fraud prevention services: Specialist providers who analyze transaction patterns to detect and prevent fraudulent activity.
• Cloud infrastructure providers: Hosting and database services that store platform data in secure, certified data centers.
• Analytics providers: Services that help us understand platform usage through aggregated, anonymized behavioral data.

6.2 Legal and Regulatory Disclosure

We may disclose your Personal Data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, valid legal process, or in response to a lawful request. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and, where legally permissible, will notify you of the disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of dana50's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on the Website before your Personal Data becomes subject to a different privacy policy.

---

7. International Data Transfers

dana50 operates with infrastructure and service providers located in multiple jurisdictions. As a result, your Personal Data may be transferred to and stored in countries outside Indonesia, including countries whose data protection laws may differ from those applicable in Indonesia.

Where we transfer Personal Data internationally, we take appropriate safeguards to ensure that your data receives an equivalent level of protection, including:

• Contractual clauses requiring recipient entities to protect your data to standards consistent with this Policy.
• Transfers only to service providers who maintain internationally recognized security certifications such as ISO 27001 or SOC 2 Type II.
• Ensuring that any cross-border transfers comply with applicable Indonesian data protection regulations.

---

8. Data Retention

We retain your Personal Data for as long as your Account remains active and for a minimum period thereafter as required by our legal and regulatory obligations. Specific retention periods are set out below:

• Account and identity data: Retained for the duration of your Account and for a minimum of 5 years after Account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years after Account closure or the last transaction date, whichever is later.
• Financial and transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Communications data: Retained for up to 3 years from the date of the last communication.
• Technical and device data: Retained for up to 12 months from collection, after which it is aggregated and anonymized.
• Marketing preferences: Retained until you withdraw consent, after which your opt-out preference is recorded and retained indefinitely to prevent re-contact.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be linked to any individual.

---

9. Security Measures

dana50 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, loss, disclosure, or destruction. Our security infrastructure includes:

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols, ensuring that your Personal Data and financial information cannot be intercepted in transit.
• AES-256 data encryption at rest: Sensitive Personal Data stored in our databases, including KYC documents and financial records, is encrypted at the storage level.
• Multi-factor authentication (MFA): Players are encouraged to enable MFA on their Accounts for an additional layer of login security.
• Penetration testing: Our platform undergoes regular third-party security audits and penetration tests to identify and remediate vulnerabilities.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis, with role-based access controls and audit logging of all data access events.
• Fraud monitoring: Automated systems monitor transactions and login activity in real time to detect and respond to suspicious behavior.

While we maintain robust security practices, no system can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected Players and relevant authorities in accordance with applicable law.

---

10. Cookies and Tracking Technologies

dana50 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session integrity, and gather analytics data. The types of cookies we use include:

• Essential cookies: Strictly necessary for the Website to function, including session authentication tokens and security cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, default betting market, and notification choices to provide a personalized experience across sessions.
• Analytics cookies: Collect anonymized data about how you use the Website — pages visited, time spent, and actions taken — to help us improve platform performance and user experience.
• Fraud prevention cookies: Identify and flag unusual access patterns that may indicate unauthorized account access or fraudulent activity.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will significantly impair your ability to use the dana50 platform. We do not use third-party advertising or retargeting cookies.

---

11. Your Rights and Choices

Subject to applicable Indonesian data protection law and our regulatory obligations, you have the following rights with respect to your Personal Data held by dana50:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right of Rectification: You may request that inaccurate or incomplete Personal Data be corrected or updated. For identity-critical fields (name, date of birth), corrections require supporting documentation.
• Right of Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that AML and KYC records cannot be deleted before the statutory retention period expires.
• Right to Restrict Processing: You may request that we limit our processing of your Personal Data in certain circumstances, such as while a rectification request is being resolved.
• Right to Data Portability: You may request that we provide your Personal Data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to processing based on our legitimate interests where you believe your individual rights and freedoms override those interests.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 calendar days. In certain cases, we may need to verify your identity before processing your request.

---

12. Children's Privacy

dana50 Services are strictly for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a person under 21, we will immediately close the associated Account, void any bets or gaming activity, refund any deposits net of bonus funds received, and permanently delete all Personal Data associated with that individual.

If you believe a minor has registered an Account with dana50, please contact us immediately at [email protected] so that we can take prompt corrective action.

---

13. Changes to this Policy

dana50 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform functionality. When we make material changes, we will:

• Post the revised Policy on this page with an updated effective date.
• Send a notification to your registered email address summarizing the key changes.
• Display a prominent notice on the Website for a minimum of 14 days following the update.

Your continued use of dana50 Services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of our Services and request Account closure.

---

14. Contact and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact our Data Protection Officer through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the dana50 Website and mobile application
• WhatsApp: +62 812-3456-7890

Our Data Protection Officer will acknowledge your inquiry within 2 business days (WIB) and provide a substantive response within 30 calendar days.