diva4dPrivacy Policy

This page describes what we collect when you use diva4d and how we keep that data protected. We collect personal information during registration (name, email, phone, address), financial data during deposits and withdrawals (payment method details, transaction history), and behavioural data as you place bets or play games (match selections, stakes, session timestamps). All this information is encrypted, stored on secure servers, and shared only with third parties who help us process payments or comply with law.

Our diva4d privacy commitments are grounded in transparency: we tell you what we collect, why we collect it, how long we keep it, and what rights you have. We do not sell your data to advertisers. We do not use your information to profile you for marketing outside the diva4d platform. We comply with Indonesian data protection regulations and international standards for account security.

This policy applies to all diva4d services — sportsbook (Liga 1, Piala AFF, Champions League), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), and slot games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways). If you have questions after reading this policy, contact our support team via live chat during standard business hours.

What Data We Collect at diva4d

We collect data in three categories: account registration, financial transactions, and gameplay activity. During registration, we ask for your full name, email address, phone number, date of birth, residential address, and a unique username. We use this information to create your diva4d account, verify your identity (Know Your Customer compliance), and communicate with you about account changes, deposits, and withdrawals.

For financial transactions, we collect payment method details (your e-wallet username or bank account number) and transaction history (deposit amounts, withdrawal requests, timestamps, processor confirmations). We never store your full credit card number or bank password; payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) handle card and banking credentials directly.

During gameplay, we log every bet you place — which match or game, your stake, the odds, the result, and your account balance before and after. We also track your IP address, device type, browser version, and login timestamps. This information helps us detect fraudulent activity and resolve disputes fairly. We retain gameplay logs for a minimum of seven years to comply with financial record-keeping requirements.

How We Use Your Data

We use your diva4d account data for five main purposes. First, we use it to operate your account — process your deposits, settle your bets, and honour your withdrawals. Second, we use it to verify your identity and comply with anti-money-laundering (AML) regulations and Indonesian law. Third, we use it to detect fraud — comparing your IP address, device fingerprint, and bet patterns against known fraud indicators to protect your account and our platform.

Fourth, we use your data to support you — our support team accesses your transaction history and gameplay logs to answer questions about settlement delays, disputed bets, or payment issues. Fifth, we use aggregated, anonymized data to improve our platform — for example, analysing which markets (Liga 1, Piala AFF, Champions League) are most popular, which payment methods (mobile banking, local payment, online payment virtual accounts) have the slowest settlement times, or which games have the highest player retention.

We do not use your data for direct marketing outside the diva4d platform. We do not build profiles of your behaviour to sell to third-party advertisers. We do not track your activity on other websites. Your diva4d data stays within diva4d unless we are legally required to share it (e.g., law enforcement requests, regulatory investigations).

Third-Party Processors and Data Sharing

We share your data with third parties only when necessary to deliver our service or comply with law. Payment processors (e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking) receive your payment method details to execute deposits and withdrawals. These processors are contractually bound to protect your data and use it only for transaction processing.

Our hosting provider (cloud infrastructure company) stores our databases and backups. Our hosting servers may sit outside Indonesia; we ensure our provider meets international data protection standards and encrypts all data at rest and in transit. Our identity verification partner receives your government ID and proof-of-address documents to verify your identity. This partner is contractually forbidden from using your documents for any other purpose.

We may share anonymized data (e.g., "non-specific info of our users in Jakarta prefer Piala AFF markets") with research partners or public authorities. We will never share your personal name, account balance, or betting history without your explicit consent unless compelled by law. If a court order, regulatory investigation, or law enforcement request requires us to disclose your data, we will notify you (unless legally prohibited from doing so) and disclose only the minimum information legally required.

Your diva4d data is encrypted, stored securely, and shared only with third parties who help us run the platform or comply with law. We do not sell your data to advertisers.

Data Security and Encryption

We at diva4d encrypt all data in transit and at rest. When you log in or make a deposit, your connection uses TLS (Transport Layer Security) encryption — the same standard used by banks. Your sensitive data (ID documents, payment method details, account balance) is encrypted with AES-256 encryption when stored on our servers. Only authorized diva4d staff with role-based access can decrypt and view your data.

We perform regular security audits and penetration testing to identify and fix vulnerabilities. Our servers are protected by firewalls, intrusion-detection systems, and automated monitoring. We require all staff to complete data protection training and sign confidentiality agreements. We maintain an incident response plan; if a security breach occurs, we will notify affected users within 72 hours (as required by Indonesian regulation) and provide information about the breach, affected data, and steps to protect yourself.

We do not ask you to provide sensitive information via email or chat. We do not store your login password in plain text; we hash it using bcrypt with a random salt. We never ask you to share your payment method details outside the diva4d Cashier; any request for this information outside our platform is a phishing attempt.

Cookies and Tracking

We use cookies to remember your login status, your language preference, and your session state. These are essential cookies — without them, you would have to re-enter your password on every page. We also use analytics cookies to understand how you navigate diva4d (which markets you browse, how long you spend on each section, which payment methods you use). These cookies do not identify you personally; they are linked to your account only via a random session ID.

We do not use third-party tracking cookies. We do not allow Google Analytics, Facebook Pixel, or other external trackers to follow your activity. Your diva4d activity stays within our platform. You can disable cookies in your browser settings, but this will prevent you from logging in to your account or accessing the diva4d Cashier.

Your Rights on diva4d

You have the right to access, correct, or delete your personal data. You can log into your diva4d account settings and download a copy of your data (personal information, transaction history, gameplay logs) in machine-readable format. You can request that we correct any inaccuracies in your profile (for example, if your address is misspelled). You can request that we delete your account and associated personal data, subject to legal retention requirements (we must retain financial records for seven years for AML compliance).

To exercise these rights, contact our support team via live chat or email the address in our contact section below. We will respond within 30 days. If you are unhappy with our response, you may escalate your complaint to the Indonesian data protection authority or seek legal advice. Your rights under this privacy policy do not override legal or regulatory requirements — we may be obliged to retain your data even if you request deletion.

Data Retention and Account Closure

We retain your account data as long as your account is active. If you close your diva4d account, we delete your personal information (name, email, phone, address) within 30 days, except where retention is required by law. We retain your financial records (deposits, withdrawals, transaction history) for seven years to comply with AML regulations and Indonesian banking law. We retain your gameplay logs (bets placed, results, odds) for seven years to support dispute resolution and regulatory inquiries.

If your account is dormant (no login or activity) for three years, we may archive your data and mark your account for deletion. We will send you an email notification at least 60 days before deletion. If you re-activate your account within that window, your data will be restored.

Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our practices, new regulations, or technical improvements. We will publish the updated policy on this page and notify you via email if the changes affect your rights or our use of your data significantly. We will give you at least 30 days to review the changes. If you do not agree with the updated policy, you may close your diva4d account.

The "last updated" date at the bottom of this page shows when we last revised it.

Contact Us and Data Protection

If you have questions about our privacy practices or wish to exercise your data rights, you can reach our support team via live chat (available during standard business hours) or send an email to the address below. For urgent privacy concerns, contact our data protection officer directly.

Our diva4d support team will respond to your inquiry within 30 days. If you are filing a formal data access request, we will provide your data in a structured, commonly used, machine-readable format (such as CSV or JSON). If you are requesting data deletion, we will confirm deletion within 30 days, except where legal retention requirements apply.

For complaints or escalations related to our privacy practices, you may also contact the Indonesian data protection authority or seek legal advice. We comply with Indonesian Law No. 27 of 2022 on Personal Data Protection and international privacy standards. Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law.

1. We encrypt your data in transit and at rest

   TLS encryption for login and payments; AES-256 for stored data.

2. We share your data only with trusted processors

   Payment providers, hosting partners, and identity verifiers — all contractually bound to protect your data.

3. We retain financial records for seven years

   Required by AML and banking regulations; personal data is deleted after account closure unless legal retention applies.

4. You can access, correct, or delete your data

   Contact our support team to request your data in machine-readable format or to close your account.

Last updated: This privacy policy is current and reflects our practices as of this page's publication date. For the most recent version, check this page directly.

For more information on our terms, see our Terms and Conditions or contact our support team via live chat. Questions about account security or payment data? See our FAQ page or reach out to our English-language support team during standard business hours.