dorawin Privacy Policy

This page describes what we collect when you use dorawin and how we keep that data protected. We at dorawin treat your personal information — your name, email, payment details, and betting history — with the same care we apply to account security and settlement accuracy. Our privacy practices align with standard data-protection principles and comply with applicable Indonesian regulations governing online services.

When you register on dorawin, we collect only the minimum information needed to verify your identity, process your deposits and withdrawals, and fulfill our anti-money-laundering obligations. We do not sell your data to third parties, nor do we share your betting activity with external advertisers. Our processors (payment partners, hosting providers, analytics services) are bound by contractual confidentiality agreements.

This policy applies to all dorawin users regardless of location (Jakarta, Surabaya, Bandung, Medan, or any supported region). If you have privacy questions or wish to exercise your data rights, our support team can guide you through the process. Services on dorawin are available only where local law permits.

What We Collect and Why

We collect data in three categories: identity information, financial details, and activity logs. Identity data — your full legal name, national ID number (KTP or equivalent), date of birth, and contact email — is mandatory for account opening. We use this to verify you are who you claim to be and to comply with anti-money-laundering (AML) regulations. Your phone number is optional but helps us contact you if we detect suspicious account activity.

Financial details include your payment method (e.g., QRIS, e-wallet, mobile banking, local payment virtual account, online payment, e-wallet, mobile banking) and transaction history. We do not store full payment credentials; our processors handle card and bank data directly. We retain transaction records — deposit amounts, withdrawal requests, settlement confirmations — to reconcile your balance and troubleshoot disputes. These records are encrypted and accessible only to authorized dorawin staff.

Activity logs track when you log in, which games you access, and when you place bets or withdraw funds. We use these logs to detect unusual patterns (e.g., logins from multiple countries in minutes) and protect your account from unauthorized access. We also use aggregated, anonymized activity data to improve game performance and user interface design.

How Long We Keep Your Data

We retain your identity and financial records for as long as your dorawin account is active, plus a minimum of five years after closure. This retention supports regulatory audits, dispute resolution, and fraud investigation. Activity logs (login timestamps, game sessions) are retained for two years and then anonymized. If you request deletion, we suppress your data from active systems but maintain encrypted archives for compliance purposes.

Our Data Protection and Third-Party Processors

We at dorawin encrypt all data in transit (between your device and our servers) and at rest (stored on our systems). Our infrastructure is hosted on secure cloud servers; we do not operate our own data centres. Our hosting provider (a third-party data processor) is contractually obligated to maintain confidentiality and follows security standards aligned with international best practices.

Payment processors — the companies that handle QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank virtual-account transfers — receive only the minimum information needed to complete a transaction. They do not receive your full name or betting history; they see only the transaction amount and a reference ID. These processors are licensed by the Indonesian financial regulator and maintain their own privacy policies.

We use analytics services (e.g., aggregated usage metrics) to understand how dorawin is accessed — which games are popular, whether users prefer mobile or browser, which cities have the most traffic. This data is anonymized and does not include personal identifiers. Our analytics processor does not have access to your name, ID number, or payment details.

• Identity verification: We may contract a third-party KTP-verification service to validate your national ID. This service receives only your ID number and name; we receive a yes/no confirmation.
• Fraud detection: We use automated systems to flag suspicious patterns (e.g., impossible login locations, unusually rapid withdrawals). These systems analyze your activity but do not share results outside dorawin.
• Email and SMS: We may use a third-party email/SMS provider to send you account notifications (e.g., password reset, withdrawal confirmation). This provider sees only your email address and phone number, not your betting data.

Our policy is transparent: we collect only what we need, we protect it rigorously, and we do not sell it. Third parties we work with are bound by the same principles.

Your Rights on dorawin

You have the right to access, correct, and delete your personal data. To request access, log into your dorawin account and navigate to Settings → Privacy, or email our support team. We will provide a copy of your data within five business days. To correct errors (e.g., if your registered name is misspelled), use the Settings interface or contact support; corrections are processed within two business days.

You have the right to request deletion of your account and associated data. We will suppress your data from active systems immediately; however, encrypted archives may be retained for five years to comply with financial-record regulations. If you request deletion during an active tournament window (e.g., mid-Piala AFF or mid-Idul Fitri promotional period), settlement of pending bets must complete first.

You have the right to object to automated processing and request human review if we flag your account for fraud investigation. Contact our support team, and a member of our team will review your case within three business days. You also have the right to lodge a complaint with Indonesia's data-protection authority if you believe we have mishandled your data.

Cookies and Similar Technologies

We use session cookies to keep you logged into dorawin and to remember your language and interface preferences. These cookies are essential and expire when you close your browser. We also use persistent cookies (valid for up to one year) to recognize you if you return to dorawin and to measure usage patterns. You can disable cookies in your browser settings, but doing so may impair your dorawin experience (e.g., you may need to re-enter your password frequently).

We do not use third-party cookies for tracking or advertising. Our cookies serve only functional and analytical purposes and do not identify you personally.

Contact and Policy Updates

If you have privacy questions or wish to exercise your data rights, contact us via email or in-app chat. Our support team responds within standard business hours. We update this policy periodically to reflect changes in our practices or legal requirements. Updates are effective immediately upon posting; we do not provide notice of minor clarifications but will email you if we make material changes that affect your rights.

Our commitment is to keep dorawin's handling of your data honest and transparent. We do not use dark patterns, hidden terms, or surprise practices. Every data element we collect has a documented business or legal purpose.