dphoki Platform Privacy Notice
This page describes what we collect when you use dphoki and how we keep that data protected. Our privacy commitments are straightforward: we collect only what we need to verify your identity, process your payments, and keep your account secure. We do not sell your information to third parties, and we do not use your data for marketing purposes beyond service-related communications.
Our services are available only where applicable law permits. When you access dphoki from Jakarta, Surabaya, Bandung, or anywhere else in a supported jurisdiction, your data is subject to this policy and to the laws governing data protection in the jurisdiction where we process it. We take data security seriously because your trust in dphoki depends on it.
If you have questions about our privacy practices or wish to exercise your rights regarding your personal data, you can contact our support team anytime through the in-app messaging system or by email. We aim to respond to privacy inquiries within five business days.
What Data We Collect on dphoki
We collect data in several categories. When you register an account, we ask for your email address, a password you create, your full name, date of birth, and residential address. This information helps us verify your identity and comply with anti-money-laundering regulations that apply to all financial platforms in Indonesia and globally.
- Account data
- Email, name, date of birth, address, government ID number and document images
- Payment data
- Payment method details (e-wallet provider, bank virtual-account number); we do not store full credit card numbers
- Transaction history
- Every deposit, withdrawal, and wager amount, timestamp, game outcome, and balance at each step
- Device and network
- Your device type (Android / iOS), browser, IP address, and approximate location based on IP geolocation
When you fund your dphoki account, we record which payment method you used—whether it was DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or a bank virtual account with mobile banking, local payment, online payment, or e-wallet. We store the transaction reference number and the amount, but we do not store your full bank account number or payment credentials. Your payment processor (your bank or e-wallet provider) handles the actual transmission of funds and maintains their own encryption between your device and their servers.
Your dphoki Account Activity
We maintain a complete record of your activity on dphoki. This includes every deposit and withdrawal you request, the date and time, the amount, the payment method used, and the status (pending, completed, cancelled). We log every wager you place across our sportsbook (football matches, Liga 1 fixtures, badminton tournaments, MotoGP, and other sports), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), and esports markets (Mobile Legends, Free Fire, PUBG Mobile). We record the game outcome, your stake, and the result so that we can settle your account accurately and handle any disputes.
We collect technical information about how you access dphoki. If you log in via Android, we note the device model and operating system version. If you access through an iOS browser, we note the browser type. We record your IP address each time you log in, which helps us detect unauthorized access attempts and protect your account from fraud. We also note if you use our app on a weak network connection or experience any service interruptions, so we can improve reliability for users in areas with variable connectivity.
How We Use Your Data on dphoki
We use your personal data for specific, legitimate purposes. First, we verify your identity to comply with legal requirements and to prevent fraud, money laundering, and underage access. Second, we process your payments—we share your payment details with payment processors (banks and e-wallet providers) only to the extent necessary to complete your deposit or withdrawal. Third, we keep your account secure by monitoring for suspicious activity, unusual login patterns, or withdrawal requests that deviate from your normal behaviour.
We use your transaction history to settle your account accurately, calculate any winnings or losses, and provide you with statements and records for your own reference. If you dispute a withdrawal delay or question a game outcome, we review our logs to investigate and resolve the issue. We also use aggregated, anonymized data (data from which your individual identity has been removed) to understand how many users access dphoki during sporting events such as Liga 1 matches or Piala Indonesia tournaments, so we can scale our servers and ensure smooth performance during peak times.
We do not use your data to build marketing profiles, sell information to advertisers, or track your behaviour outside dphoki.
Third-Party Processors and Data Location
Our payment processors—payment gateways that handle DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank virtual-account transfers—have access to your payment information as necessary to process your transactions. These processors maintain their own privacy policies and are bound by data protection laws in their own jurisdictions. We do not control how they use data beyond the scope of transaction processing.
Our servers may be located outside Indonesia. This means your data may be processed in a data centre in another country, subject to that country's data protection laws. When your data moves across borders, it is encrypted in transit. By using dphoki, you acknowledge that your data may be stored and processed internationally and that you accept this as a condition of service.
Your Rights Regarding dphoki Data
You have the right to request access to your personal data that we hold. You can request a copy of your account information, transaction history, and KYC documents by contacting our support team. You also have the right to request that we correct inaccurate information (for example, if your address on file is outdated). You may request deletion of your data, although we may retain certain information for as long as required by law (typically seven years for financial records). If you request account closure, we will securely delete your personal data after any legal retention period expires.
- Data access: Contact our support team to request a copy of your personal data within 30 days.
- Data correction: You can update your profile information (name, address, email) directly in your account settings; contact support for changes that require verification.
- Account deletion: Request permanent closure through support; your data will be deleted according to legal retention schedules.
- Withdrawal of consent: You can disable non-essential cookies through your browser settings; core platform cookies cannot be disabled as they are necessary for account security.
Your dphoki Privacy Contact
If you have privacy questions, wish to exercise your data rights, or believe we have mishandled your personal information, contact our support team through the in-app messaging system, by email through your account dashboard, or via our website contact form. We will investigate your concern and respond within five business days. If you are not satisfied with our response, you may escalate your complaint to the data protection authority in your jurisdiction.
We may update this privacy notice from time to time to reflect changes in how we collect or use data, or to comply with new legal requirements. We will notify you of material changes by email or through an in-app announcement at least 30 days before the changes take effect. Your continued use of dphoki after such notice constitutes your acceptance of the updated policy.