Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes how dutajt ("we", "us", "our", or "the Platform") collects, uses, stores, discloses, and protects personal information belonging to users ("you", "your", or "User") who access or use the dutajt online gaming platform available at https://dutajt.cam, including all related mobile and web interfaces.

dutajt serves players primarily located in Indonesia, and we recognize that privacy is a fundamental right. This Policy has been prepared to meet internationally recognized data-protection principles while reflecting the practical realities of operating a platform that accepts deposits via local Indonesian payment channels — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja — and which offers betting products including football markets on BRI Liga 1 and major international leagues, togel (Indonesian numbers lottery), sabung ayam (cockfighting), and slot gacor (high-payout slot games).

By registering for a dutajt account, accessing any part of our website, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, you must discontinue use of the platform immediately.

2 Definitions

• "Personal Data" means any information that, alone or in combination with other data, can directly or indirectly identify a natural person, such as your name, national identity number (NIK on KTP), phone number, email address, IP address, or payment account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, transmission, disclosure, erasure, or destruction.
• "Data Controller" refers to dutajt, which determines the purposes and means of processing your Personal Data.
• "Data Processor" refers to a third party that processes Personal Data on behalf of dutajt under a contractual arrangement and in accordance with our instructions.
• "KTP" means Kartu Tanda Penduduk, the Indonesian National Identity Card issued to Indonesian citizens.
• "KYC" means Know Your Customer, the verification procedure through which dutajt confirms your identity, age, and residency before enabling full account functionality.
• "Cookies" means small text files stored on your device by your web browser to enable platform functionality and analytics.
• "Third-Party Service Providers" means payment processors, game software providers, identity-verification agencies, analytics platforms, and customer-support systems we engage to deliver our services.

3 Information We Collect

3.1 Information You Provide Directly

When you register for a dutajt account, complete our KYC verification process, contact customer support, or participate in promotions, you may provide:

• Full legal name and date of birth (to confirm you are at least 21 years of age)
• Indonesian national identity number (NIK) as shown on your KTP
• Email address and active Indonesian mobile phone number
• Residential address in Indonesia (city, province, postal code)
• Photographs of your KTP, proof-of-address documents, and selfie verification images submitted for KYC
• Payment account information including bank account numbers (BCA, BRI, BNI, Mandiri, etc.) or e-wallet credentials (OVO, DANA, GoPay, ShopeePay) associated with your dutajt account
• Communications you send to our support team via live chat or email

3.2 Information Collected Automatically

When you access or use the dutajt platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographical location derived from it
• Device type, operating system, browser type and version
• Session start and end timestamps, pages visited, and features used
• Bet history, game activity, wagering patterns, and transaction logs
• Cookies, pixel tags, local storage data, and similar tracking technologies
• Referral URL and source attribution data

3.3 Information from Third Parties

We may receive additional information about you from trusted third parties, including:

• Identity verification and age-check agencies confirming KYC data
• Payment processors confirming transaction status and fraud signals
• Anti-fraud and anti-money-laundering (AML) screening databases
• Analytics providers aggregating behavioural data across sessions

4 How We Use Your Information

dutajt processes your Personal Data for clearly defined purposes. The table below summarises our principal processing activities and the legal basis for each:

5 Cookies and Tracking Technologies

dutajt uses cookies and similar technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how players interact with our services. The categories of cookies we deploy are:

• Strictly Necessary Cookies: Essential for you to navigate the site and use core features such as logging in, maintaining your session, and accessing your account balance. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred payment method, and odds display format so you do not have to re-enter them each visit.
• Analytics Cookies: Help us understand aggregated usage patterns — which pages are visited most, where players drop off in the registration flow, and how betting features are used. Data collected is anonymised and used solely for internal product improvement.
• Marketing Cookies: Used only where you have given explicit consent, these track whether you arrived via a promotional campaign and enable us to avoid showing you irrelevant offers.

You can manage or withdraw your cookie consent at any time by adjusting your browser settings. Please note that disabling strictly necessary cookies may prevent you from using certain parts of the dutajt platform.

6 Disclosure of Your Information

dutajt does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your information only in the following strictly limited circumstances:

6.1 Service Providers

We engage trusted third-party processors to deliver specific services on our behalf, including payment gateway operators (to process your BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and ShopeePay transactions), identity-verification agencies for KYC processing, game software providers such as Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt, customer-support platform vendors, and cloud hosting and infrastructure providers. Each processor is contractually bound to handle your data solely for the stated purpose and to maintain standards no less protective than those described in this Policy.

6.2 Legal and Regulatory Obligations

We may disclose Personal Data when required to do so by applicable law, court order, or lawful request from a competent government authority. In such cases, we will notify you of the disclosure to the extent permitted by law.

6.3 Anti-Fraud and AML Compliance

Where we have reasonable grounds to suspect fraudulent activity, money laundering, or other criminal conduct, we may share relevant account and transaction data with specialist anti-fraud agencies or law-enforcement bodies.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of dutajt's assets, your Personal Data may be transferred to the acquiring entity. We will provide reasonable advance notice and ensure that the receiving party is bound by privacy obligations consistent with this Policy before any transfer occurs.

7 International Data Transfers

dutajt primarily serves Indonesian players and processes most data within the region. However, some third-party service providers — particularly game software studios and cloud infrastructure vendors — may store or process data in jurisdictions outside Indonesia. When such transfers occur, we ensure that adequate safeguards are in place, including contractual clauses that require recipients to protect data to a standard equivalent to this Policy. By using dutajt, you acknowledge and consent to these transfers where necessary for the delivery of our services.

8 Data Retention

We retain your Personal Data for as long as your account is active and for a period thereafter as required by our legal and regulatory obligations. Specific retention periods include:

• Account and identity data (KYC records): Retained for a minimum of 5 years following account closure to satisfy AML record-keeping requirements.
• Transaction records (deposits, withdrawals, bet histories): Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your active consent plus 2 years for audit purposes.
• Technical logs (IP addresses, session data): Retained for up to 12 months unless a longer period is required for an active investigation.

When Personal Data is no longer required, we securely delete or anonymise it so that it can no longer be linked back to you.

9 Your Rights and Choices

As a dutajt user, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact us at [email protected] with sufficient detail to allow us to identify your account and process your request within 30 calendar days.

10 Security Measures

dutajt implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and our servers
• Encryption at rest for sensitive fields including payment account numbers and KYC document images
• Role-based access controls ensuring that only authorised personnel can access Personal Data, and only to the extent necessary for their specific duties
• Multi-factor authentication requirements for all internal systems that store or process user data
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• 24/7 intrusion-detection and anomaly-monitoring systems alerting our security team to suspicious activity in real time
• Data minimisation practices — we collect and retain only the information genuinely required to deliver our services

No method of electronic transmission or storage is completely infallible. In the unlikely event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities promptly and without undue delay in accordance with applicable law.

11 Children and Minors

dutajt strictly prohibits access to or use of our platform by anyone under the age of 21. We do not knowingly collect Personal Data from individuals under 21 years of age. If we discover that a user is under 21, we will immediately suspend the account, void any pending transactions, and permanently delete all associated Personal Data. If you believe a minor has created a dutajt account, please report this to us at [email protected] and we will investigate and act immediately.

12 Marketing Communications

With your explicit consent provided during registration or subsequently, dutajt may contact you with promotional offers, bonus notifications, tournament announcements, and seasonal promotions — including those tied to Indonesian cultural occasions such as Idul Fitri, Ramadan, Independence Day (17 August), and Chinese New Year (Imlek). These communications may be sent via email or SMS to your registered mobile number.

You may withdraw your marketing consent at any time by:

• Clicking the "Unsubscribe" link in any promotional email we send you
• Updating your communication preferences in your dutajt account settings
• Contacting our support team directly at [email protected]

Withdrawing marketing consent does not affect the legal basis for processing your data for account management and service-related communications, which we will continue to send as necessary.

13 Responsible Gaming and Data

Some of the most sensitive data we process relates to our responsible gaming obligations. dutajt monitors gaming behaviour — including session duration, deposit frequency, wagering velocity, and betting patterns — to identify potential signs of problem gambling. Where our systems flag a concern, trained responsible gaming specialists may review your account data and reach out to offer support tools such as deposit limits, session time-outs, or self-exclusion.

This processing is conducted on the basis of our legitimate interest in promoting safe gambling and our legal obligation to maintain a responsible gaming environment. Responsible gaming data is treated with the highest level of confidentiality and is never used for marketing profiling purposes. For full details of our responsible gaming tools, please visit our Responsible Gaming page.

14 Changes to This Policy

dutajt reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will notify you by posting the revised Policy on this page with an updated "Last Updated" date, and by sending a notification to your registered email address. Your continued use of the dutajt platform after the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.

15 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how dutajt handles your Personal Data, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via your account dashboard
• Response Time: We aim to acknowledge all privacy-related requests within 3 business days and resolve them within 30 calendar days

If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data-protection authority in your jurisdiction.