Privacy Policy

This Privacy Policy applies to all personal data processed by daduku ("we", "us", "our", "the Platform") in connection with the services provided through https://daduku.cam. By registering an account, depositing funds, placing bets, or otherwise interacting with our platform, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

daduku respects your fundamental right to privacy. We are committed to handling your personal data in a lawful, fair, and transparent manner consistent with applicable data protection regulations. This policy forms part of our broader commitment to maintaining trust with our Members across Indonesia — from Jakarta and Surabaya to Medan, Bandung, Bali, and beyond.

If you do not agree with any aspect of this Privacy Policy, you should not use daduku's services. Questions or concerns regarding this policy should be directed to our Data Protection Officer using the contact details provided in Section 15.

daduku acts as the data controller for all personal information collected through the Platform. As the data controller, we determine the purposes for which and the means by which personal data is processed. We are responsible for ensuring that your data is handled in accordance with applicable privacy laws and the commitments set out in this policy.

Our registered office and primary contact point for data protection enquiries is accessible via the email address provided in Section 15 of this document. All data subject access requests, consent withdrawal notifications, and complaints should be directed to this address.

daduku collects and processes the following categories of personal data in order to provide our services, comply with legal obligations, and enhance your user experience:

4.1 Direct Collection. The majority of personal data we hold is provided directly by you during account registration, KYC verification uploads, deposit and withdrawal requests, when placing bets or playing games, and when contacting customer support.

4.2 Automated Collection. Certain technical and behavioral data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies whenever you interact with the daduku Platform. This data is used for analytics, fraud detection, and user experience optimization.

4.3 Third-Party Sources. In limited circumstances, we may receive data about you from third parties, including:

• Payment processors (BCA, BRI, BNI, Mandiri, e-wallet providers) confirming transaction authenticity and ownership verification.
• Identity verification service providers assisting with KYC document validation.
• Affiliate partners who referred you to daduku (we receive only non-identifiable referral codes, not personal details).
• Publicly accessible databases used for anti-fraud checks and regulatory compliance screening.

daduku processes your personal data for the following specific purposes:

• Account Management: Creating and maintaining your Member account, authenticating your identity at login, managing your profile and preferences.
• Service Provision: Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja; accepting and settling sports bets across BRI Liga 1, EPL, La Liga, Champions League, badminton, MotoGP, and e-sports; providing access to live casino, slots, and togel lottery games; crediting bonuses and tracking wagering requirements.
• Communication: Responding to support enquiries via Live Chat and email; sending transactional notifications (deposit confirmations, withdrawal status updates, KYC requests); delivering promotional offers where you have opted in.
• Compliance & KYC: Verifying your identity and age (21+ requirement) using KTP, passport, or other government-issued documents; conducting anti-money laundering (AML) checks; complying with licensing authority requirements; responding to lawful requests from regulatory bodies.
• Fraud Prevention & Security: Detecting duplicate accounts; identifying suspicious betting patterns, bonus abuse, and coordinated fraud; monitoring for unauthorized access attempts; protecting the integrity of games and sports markets.
• Responsible Gaming: Enforcing deposit limits, loss caps, and self-exclusion requests; providing reality checks and session timers; identifying Members who may benefit from additional player-protection interventions.
• Analytics & Improvement: Understanding user behavior to improve website navigation, optimize game selection, refine bonus structures, and enhance customer support quality; conducting A/B testing on new features.
• Legal Obligations: Maintaining records as required by our operating license; retaining transaction logs for audit purposes; preserving evidence in the event of disputes or regulatory investigations.

daduku processes your personal data under the following legal bases recognized by international data protection frameworks:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions you accepted at registration). This covers account management, payment processing, bet settlement, and game provision.
• Legal Obligation: Processing is required to comply with laws and regulations applicable to daduku, including KYC and AML requirements, licensing conditions, record-keeping obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for daduku's legitimate business interests — fraud prevention, security monitoring, analytics for service improvement, and direct marketing to existing customers — provided these interests do not override your fundamental rights and freedoms. You may object to legitimate-interest processing at any time.
• Consent: Where processing is not covered by the above bases, we rely on your explicit, freely given, informed consent. This applies primarily to optional marketing communications and certain cookie categories. You may withdraw consent at any time without affecting the lawfulness of processing performed prior to withdrawal.

7.1 Third-Party Service Providers. daduku shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include:

• Payment processors (Indonesian banks and e-wallet providers) for deposit and withdrawal execution.
• KYC and identity verification services for document validation and fraud screening.
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) for casino and live dealer game delivery.
• Cloud hosting and infrastructure providers for data storage and platform availability.
• Customer support software vendors for Live Chat and ticketing systems.
• Analytics platforms for traffic analysis and user behavior insights.

All third-party processors are bound by strict data processing agreements requiring them to handle your data securely, use it only for the specified purpose, and comply with applicable privacy laws.

7.2 Legal and Regulatory Disclosures. daduku may disclose your personal data when required by law, court order, or regulatory authority; to enforce our Terms & Conditions or other agreements; to protect the rights, property, or safety of daduku, our Members, or the public; or to detect, prevent, or address fraud, security vulnerabilities, or technical issues.

7.3 Business Transfers. In the event of a merger, acquisition, corporate reorganization, or sale of all or substantially all of daduku's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

7.4 No Sale of Data. daduku does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. Any data shared with partners is strictly limited to service provision and is governed by contractual privacy protections.

daduku employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage. Our security infrastructure includes:

• 256-Bit SSL Encryption: All data transmitted between your device and daduku's servers is encrypted using Secure Socket Layer (SSL) technology with 256-bit encryption strength.
• Secure Data Storage: Personal data is stored on servers located in secure, access-controlled data centers. Database records are encrypted at rest.
• Access Controls: Employee access to personal data is restricted on a need-to-know basis. All daduku staff undergo background checks and privacy training before being granted system access.
• Password Protection: Member passwords are hashed using cryptographic algorithms and are never stored or transmitted in plain text.
• Firewall & Intrusion Detection: Network-level security controls monitor for and block malicious traffic. Automated intrusion detection systems alert our security team to potential threats in real time.
• Regular Security Audits: Third-party penetration testing and vulnerability assessments are conducted quarterly to identify and remediate potential security weaknesses.
• Incident Response Plan: In the event of a data breach, daduku has established procedures to contain the incident, assess its impact, notify affected Members and relevant authorities within the timeframes prescribed by law, and implement corrective measures to prevent recurrence.

While we employ robust security measures, no method of electronic transmission or storage is 100% secure. You also have a responsibility to protect your account by using a strong, unique password, enabling two-factor authentication where available, and not sharing your login credentials with others.

9.1 Retention Periods. daduku retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, and resolve disputes. Specific retention periods vary by data type:

• Account & Profile Data: Retained for the duration of your active account, plus 7 years following account closure to meet licensing and audit requirements.
• Transaction Records: Retained for 7 years from the date of the transaction to comply with financial record-keeping regulations and to support dispute resolution.
• KYC Documents: Retained for 7 years following account closure or the last verification update, whichever is later.
• Communication Logs: Live Chat and email correspondence retained for 3 years for quality assurance and complaint handling purposes.
• Marketing Consent Records: Retained for the duration of consent, plus 3 years following withdrawal to demonstrate compliance with consent requirements.
• Technical & Analytics Data: Aggregated and anonymized after 2 years such that it can no longer be linked to an individual Member.

9.2 Secure Deletion. At the end of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer identify you. Deletion is performed using methods that render data unrecoverable.

Subject to applicable law, you have the following rights regarding your personal data held by daduku:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update certain information directly through your Account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or when you withdraw consent. Note that we may be required to retain certain data to comply with legal obligations.
• Right to Restrict Processing: You may request that we suspend processing of your personal data in certain situations, such as while we verify data accuracy or assess whether your legitimate interests override ours.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format and transmit it directly to another controller where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing performed prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory data protection authority if you believe daduku has violated your privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 15. We will respond to all valid requests within 30 days (or sooner if required by applicable law). We may request additional information to verify your identity before processing your request.

11.1 What Are Cookies. Cookies are small text files placed on your device by websites you visit. They enable the website to recognize your device on subsequent visits and store information about your preferences and activity.

11.2 Types of Cookies We Use. daduku uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable core features such as secure login, session management, and transaction processing. These cookies cannot be disabled without severely impacting Platform functionality.
• Performance & Analytics Cookies: Used to understand how Members interact with the Platform — which pages are visited most, how long sessions last, and where navigation issues occur. This data is aggregated and anonymized. These cookies help us improve user experience.
• Functional Cookies: Remember your preferences (language selection, time zone, favorite games) to provide a more personalized experience on return visits.
• Marketing Cookies: Track your activity across the Platform to deliver relevant promotional offers and measure the effectiveness of our advertising campaigns. These cookies require your consent and can be disabled through your browser or Account settings.

11.3 Managing Cookies. Most web browsers allow you to control cookies through their settings. You can typically set your browser to refuse all cookies, accept only certain types, or notify you when a cookie is being set. Note that disabling strictly necessary cookies will prevent you from using essential Platform features. Instructions for managing cookies in popular browsers can be found in your browser's help documentation.

11.4 Third-Party Cookies. Some cookies on daduku are set by third-party services such as analytics providers and game studio partners. We do not control these third-party cookies; they are governed by the privacy policies of the respective third parties.

The daduku Platform integrates with and may contain links to third-party websites, services, and payment processors including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja, and game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft.

These third-party services operate under their own privacy policies, which may differ from ours. daduku is not responsible for the privacy practices or content of external sites and services. We encourage you to review the privacy policies of any third-party service before providing them with personal information.

When you use integrated payment methods or play games from third-party providers, you may be subject to their terms of service and privacy policies in addition to daduku's. By using these services through our Platform, you acknowledge and accept this arrangement.

daduku's services are strictly prohibited to individuals under the age of 21. We do not knowingly collect, use, or store personal data from anyone under 21 years of age. Our registration process includes age verification checks, and we conduct ongoing monitoring to detect underage account creation.

If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that information from our systems and close the associated account. Any deposits made by an underage individual will be returned to the source account following verification with the account holder's legal guardian.

If you are a parent or guardian and believe your child has provided personal information to daduku, please contact us immediately using the details in Section 15 so we can take appropriate action.

daduku reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. When material changes are made, we will provide notice by:

• Displaying a prominent notice on the Platform homepage for at least 14 days prior to the changes taking effect;
• Sending an email notification to the address registered to your Account (where feasible); and
• Updating the "Last Updated" date at the top of this page.

Your continued use of daduku following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

The most current version of this Privacy Policy is always accessible at https://daduku.cam/privacy-policy. We encourage you to review this policy periodically to stay informed about how we protect your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or daduku's data processing practices, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Enquiry — [your registered email address]" for fastest routing.
• Live Chat: Available 24/7 via the chat widget on the Platform. Our Indonesian-speaking and English-speaking support agents can assist with general privacy questions and escalate formal data subject access requests to the Data Protection Officer.

We aim to respond to all privacy-related enquiries within 5 business days and to fulfill data subject access requests within 30 days of verification of your identity. Complex requests may require additional time; we will notify you if an extension is necessary.