Privacy Policy — dana31

This Privacy Policy applies to all personal data collected, processed, and stored by dana31 in connection with the operation of the Platform at https://dana31.cam. It covers data collected during account registration, identity verification (KYC), financial transactions, gameplay, customer support interactions, and general Platform browsing activity.

Dana31 operates as an internationally managed online betting and gaming platform serving English-preference players across Indonesia. We are committed to responsible data stewardship and apply internationally recognised data protection principles — including purpose limitation, data minimisation, storage limitation, and integrity and confidentiality — to all personal data we handle.

This policy should be read alongside our Terms & Conditions, which govern your contractual relationship with dana31, and our Responsible Gaming page, which explains the welfare tools available to all members.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the entity that operates the dana31 Platform. All data-related queries, requests, and complaints should be directed to our dedicated privacy team using the contact details set out in Clause 15.

Dana31 processes personal data as both a data controller (for account management, KYC, fraud prevention, and marketing communications) and, in limited circumstances, as a data processor on behalf of its licensed operating partners where required by applicable regulatory frameworks.

Dana31 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

Personal data is collected through the following channels and interactions:

• Direct Submission: Information you actively provide when creating an Account, completing KYC verification, submitting a support request, or configuring your account preferences.
• Automated Collection: Technical and usage data collected automatically as you browse and interact with the Platform, including via cookies, session tracking, and server logs.
• Transaction Processing: Financial data transmitted through your chosen deposit and withdrawal method — including local Indonesian bank transfers and e-wallet payments — during the course of transactions.
• Third-Party Sources: Identity verification data from regulated KYC service providers; fraud and AML screening data from third-party compliance partners; and, where applicable, data from payment processors to validate transaction legitimacy.
• Inferred Data: Profile and behavioural inferences drawn from your betting patterns, product usage, and session activity — used to personalise your experience and to support responsible gaming monitoring.

Dana31 processes personal data for the following specific, documented purposes:

• Account Management: Creating and maintaining your Member Account, including authentication, password management, and account status monitoring.
• Identity Verification (KYC): Confirming that all Members are who they claim to be, that they meet the 21+ age requirement, and that they are not subject to any applicable sanctions or exclusion orders.
• Transaction Processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja, and processing withdrawal requests to verified payment methods in Indonesian Rupiah (IDR / Rp).
• Service Delivery: Providing access to sports betting markets (BRI Liga 1, EPL, La Liga, Champions League, MotoGP, badminton, e-sports), casino games, togel (Indonesia's traditional numbers lottery), and slot gacor titles from Pragmatic Play, NetEnt, Microgaming, and other studios.
• Fraud Prevention & AML Compliance: Detecting and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct in accordance with our legal obligations.
• Customer Support: Responding to inquiries, resolving disputes, and providing assistance through our 24/7 Indonesian-speaking support team.
• Responsible Gaming: Monitoring gameplay patterns to identify potential signs of problem gambling and administering self-exclusion, deposit limits, and other player-protection tools.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Members who have consented to receive marketing communications. You may opt out at any time.
• Platform Improvement: Analysing aggregated usage data to enhance Platform performance, improve the user experience, and develop new features and betting markets.
• Legal Compliance: Meeting our obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records required by our operating licence conditions.

Dana31 processes personal data under one or more of the following lawful bases, depending on the specific processing activity in question:

Dana31 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. We share personal data only where it is necessary for the operation of the Platform, required by law, or expressly consented to by you.

Personal data may be shared with the following categories of third parties:

• Payment Processors & Banking Partners: Local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the financial data necessary to process your deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Regulated third-party providers that assist us in verifying your identity, confirming your age, and screening against applicable sanctions and exclusion lists. These providers are contractually bound to process data solely for the purposes specified by dana31.
• Fraud Prevention & AML Partners: Specialist compliance partners that assist dana31 in detecting and preventing money laundering, fraudulent activity, and multi-accounting. Data shared is limited to what is strictly necessary for screening purposes.
• Game Studios & Platform Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe may receive session and gameplay data where necessary to deliver their games on the Platform. These partners operate under their own privacy frameworks and are contractually required to maintain appropriate data security standards.
• IT Infrastructure & Hosting Providers: Cloud infrastructure and server hosting partners that store Platform data on our behalf. All infrastructure partners are bound by strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Dana31 may disclose personal data to governmental or regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, protect national security, or comply with a legal process.

Dana31 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our regulatory obligations. The following general retention guidelines apply:

• Active Accounts: Personal data associated with active Member Accounts is retained for the duration of the account relationship and for a period of five (5) years following the date of account closure, in line with standard financial record-keeping requirements.
• Transaction Records: Deposit and withdrawal transaction records, including bank transfer and e-wallet data, are retained for a minimum of five (5) years from the date of the transaction to support AML compliance and dispute resolution obligations.
• KYC Documents: Identity verification documents (including copies of KTP and supporting materials) are retained for five (5) years following account closure, or longer where required by applicable regulatory obligations.
• Customer Support Records: Support correspondence and live chat transcripts are retained for two (2) years from the date of the interaction, or longer where the matter involves an unresolved dispute or legal claim.
• Marketing Data: Where you have consented to receive marketing communications, your contact details and preference data are retained until you withdraw your consent or request deletion, subject to any overriding legal obligations.
• Technical & Log Data: Server logs, IP address records, and session data are retained for a period of twelve (12) months from the date of collection, unless retained longer for specific fraud investigation purposes.

When personal data is no longer required for any of the above purposes, it is securely deleted or anonymised in accordance with our internal data destruction procedures.

Dana31 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and the dana31 Platform is encrypted using 256-bit SSL/TLS technology. This ensures that sensitive data — including login credentials, financial information, and personal details — cannot be intercepted in transit.
• Encrypted Data Storage: Personal data stored on dana31's servers is encrypted at rest. Database access is restricted to authorised personnel via role-based access controls, and all access events are logged for audit purposes.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their Accounts. Internal staff access to systems containing personal data requires mandatory multi-factor authentication.
• Penetration Testing & Audits: Dana31 commissions regular independent security audits and penetration tests of its Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All dana31 personnel with access to personal data receive mandatory training on data protection obligations, secure data handling practices, and incident response procedures.
• Incident Response: Dana31 maintains a documented data breach response plan. In the event of a breach that poses a significant risk to your rights, affected Members will be notified promptly in accordance with applicable legal requirements.

Dana31 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. A cookie is a small text file placed on your device by your browser when you visit the Platform.

The following categories of cookies are used on the dana31 Platform:

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, though some personalisation features may be affected. Dana31 does not use third-party advertising cookies or cross-site tracking cookies.

Subject to applicable law, you hold the following rights in respect of your personal data held by dana31. To exercise any of these rights, please contact us using the details in Clause 15. We will respond to all verified requests within 30 days.

Dana31 operates a strict 21+ only policy. The Platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. This restriction applies across all regions of Indonesia and internationally.

Age is verified as part of the KYC process. Where we have reasonable grounds to suspect that a Member may be under 21, the Account will be suspended and KYC documents requested immediately. If age verification confirms the Member is under 21, the Account will be permanently closed, any deposits returned (without bonus value), and any associated winnings forfeited.

If you become aware that a minor has registered an Account on dana31, please notify us immediately at support@dana31.cam. We take all such reports seriously and will investigate and act without delay.

As an internationally operated Platform, dana31 may transfer personal data to, or access it from, countries outside Indonesia. Where such transfers occur, dana31 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

Safeguards for international data transfers may include contractual clauses that impose data protection obligations on the receiving party, transfers to countries that provide an adequate level of data protection as assessed by relevant authorities, or other legally recognised transfer mechanisms as applicable.

All third-party service providers with whom data is shared internationally — including KYC providers, payment processors, and platform infrastructure partners — are subject to written data processing agreements that include data transfer safeguards. If you have questions about the specific safeguards applied to any particular transfer, please contact us at the details in Clause 15.

Dana31 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, we will notify Members via the email address associated with their Account and/or by displaying a prominent notice on the Platform, with at least seven (7) days' advance notice before the revised policy takes effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

The most current version of this Privacy Policy is always available at https://dana31.cam/privacy-policy. The "Last Reviewed" date at the top of this page reflects when the policy was most recently updated.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by dana31, please contact our privacy team through the following channel:

Our support team includes native Indonesian-speaking agents available across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones, ensuring that members from Jakarta to Bali to Makassar can reach us without delay. All privacy-related requests are handled with complete confidentiality and processed by designated personnel.

For formal legal notices relating to data protection matters, please mark your correspondence clearly as "Legal Notice — Data Protection" and direct it to the email address above.