Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how dx69 ("we", "us", "our", or the "Operator") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or the "User") who access or use the dx69 platform located at https://dx69.cam.

dx69 is committed to handling your personal data with the care, transparency, and respect it deserves. This Policy is designed to give you a clear and complete picture of our data practices, written in plain language rather than impenetrable legal jargon. We believe you have a genuine right to understand what happens to your information — and to exercise meaningful control over it.

By registering an account, accessing, or using the dx69 platform, you acknowledge that you have read and understood this Policy. This Policy forms an integral part of the dx69 Terms & Conditions and should be read together with them. Where this Policy conflicts with the Terms & Conditions on a data-privacy matter, this Policy prevails.

2. Definitions

The following definitions apply throughout this Policy:

3. Data We Collect

dx69 collects personal data across several categories, each collected for specific, justified purposes. We do not collect data beyond what is necessary for the purposes described below.

3.1 Registration Data

When you create an Account, we collect: full legal name; date of birth; nationality; residential address (including city and province within Indonesia, such as Jakarta, Surabaya, or Bandung); email address; and chosen username. This information is required to establish and maintain your Account.

3.2 KYC & Identity Verification Data

To comply with our anti-money laundering (AML) and Know Your Customer (KYC) obligations, we collect copies of government-issued identification documents. For Indonesian residents, this typically means your KTP (Kartu Tanda Penduduk — Indonesian National ID card) or a valid passport. We may also request proof of address and, in higher-risk cases, source-of-funds documentation. KYC data is treated as Sensitive Data and subject to enhanced security controls.

3.3 Financial Data

To process deposits and withdrawals, we collect: bank account name, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), bank account number, and transaction histories within your dx69 account. We do not store full payment card numbers on our servers; card transactions are processed by PCI-DSS certified third-party payment processors.

3.4 Transactional & Betting Data

We maintain records of all deposits, withdrawals, bets placed, games played, bonuses awarded, and account balance changes. This data is necessary for account management, dispute resolution, regulatory compliance, and responsible gaming monitoring.

3.5 Technical & Device Data

We automatically collect: IP address; browser type and version; operating system; device type and model; screen resolution; time zone; referring URL; and session timestamps. This data is used for platform security, fraud detection, and aggregate service analytics.

3.6 Communications Data

When you contact our support team (via live chat, WhatsApp, or email), we retain records of those communications, including transcripts, email correspondence, and any attachments you provide. This enables us to resolve disputes effectively and maintain quality standards.

3.7 Marketing Preferences

If you opt into receiving promotional communications, we retain your marketing consent record and preference settings. You may withdraw consent at any time via your Account settings or by contacting support .

4. How We Collect Your Data

dx69 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, place a bet, contact customer support, or update your account profile.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you browse or interact with the dx69 platform. See Section 10 for full details on our cookie practices.
• From third parties: We may receive data from identity verification service providers, fraud-detection agencies, payment processors (including those handling BCA, BRI, BNI, and Mandiri transactions), and publicly available sources when required for KYC or AML compliance purposes.
• From your device: Certain technical data — such as IP address, browser fingerprint, and device identifiers — is captured automatically by our servers when you connect to the platform.

5. Legal Basis for Processing

dx69 processes your personal data only when we have a valid legal basis for doing so. The primary legal bases we rely on are as follows:

Where we rely on legitimate interests as our legal basis, we carry out a balancing test to confirm that our interests do not override your fundamental rights and freedoms. You may request a summary of any such balancing test by contacting our support team.

6. How We Use Your Data

dx69 uses your personal data for the following purposes, all of which are necessary to deliver a safe, reliable, and personalised betting experience:

6.1 Account Management

We use your registration and profile data to create, maintain, and administer your dx69 account, verify your identity, and communicate important account-related information such as security alerts, withdrawal confirmations, and policy updates.

6.2 Transaction Processing

Financial data and bank account details are used exclusively to process your deposits and withdrawals through your chosen Indonesian banking channels — BCA, BRI, BNI, Mandiri, CIMB Niaga, or OCBC NISP — and to maintain accurate transaction records within your account.

6.3 KYC & Compliance

Identity documents and KYC data are processed to verify that you meet our eligibility requirements (including the 21+ age requirement), to comply with applicable AML obligations, and to prevent financial crime. This processing is mandatory; without it, we cannot permit withdrawals from your account.

6.4 Fraud Prevention & Security

Technical and behavioural data — including IP addresses, device fingerprints, login patterns, and betting histories — are analysed by automated systems and our security team to detect and prevent fraud, multi-accounting, bonus abuse, match-fixing, and unauthorised access attempts.

6.5 Responsible Gaming

We monitor betting behaviour and account activity as part of our responsible gaming obligations. This includes identifying patterns that may indicate problem gambling and triggering proactive outreach or protective measures where appropriate. This processing is in your interest and forms part of our duty of care as a platform operator.

6.6 Customer Support

Communications data — including live chat transcripts, email correspondence, and support ticket records — is used to resolve your enquiries and complaints, improve our support quality, and train our Indonesian-speaking support agents.

6.7 Marketing & Promotions

Where you have provided consent, we use your contact details and preference data to send personalised promotional offers, bonus notifications, and news about new games or features. You can opt out of marketing communications at any time via your account settings or by contacting support. Opting out does not affect transactional communications such as withdrawal confirmations or security alerts.

6.8 Platform Improvement

Aggregated and anonymised technical data is used to analyse platform performance, identify areas for improvement, conduct A/B testing of new features, and ensure that dx69 continues to deliver a high-quality experience for players across Indonesia.

7. Sharing Your Data

dx69 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary:

7.1 Payment Processors

To facilitate deposits and withdrawals through Indonesian bank transfer channels, we share relevant financial data with our payment processing partners. These partners are contractually bound to process your data only for the stated transaction purpose and to maintain appropriate security standards.

7.2 Identity Verification Providers

We engage specialist third-party KYC service providers to assist with identity document verification and sanctions screening. These providers act as Data Processors under our instruction and may not use your data for any other purpose.

7.3 Game Technology Providers

Certain game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive anonymised session identifiers to facilitate game delivery, random number generation audits, and jackpot calculations. Full personal data is not shared with game providers unless required for dispute resolution.

7.4 Legal & Regulatory Authorities

We may disclose your personal data to law-enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid court order, or our licensing authority's directives. We will notify you of any such disclosure where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the Operator's business, your personal data may be transferred to the successor entity as part of that transaction. We will provide notice of any such transfer and ensure that your data remains protected to at least the standard described in this Policy.

7.6 Professional Advisers

We may share personal data with our legal counsel, auditors, and professional advisers where necessary for the conduct of their services, subject to strict confidentiality obligations.

8. Data Retention

dx69 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes that may arise. Our standard retention periods are as follows:

Once a retention period expires, personal data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify any individual.

9. Data Security

dx69 applies a comprehensive, defence-in-depth approach to protecting your personal data. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or app and our servers.
• AES-256 encryption at rest for all personal data and KYC documents stored in our databases.
• Role-based access controls (RBAC) ensuring that only authorised personnel with a genuine operational need can access your personal data.
• Multi-factor authentication (MFA) required for all internal staff access to systems holding personal data.
• Regular penetration testing conducted by independent third-party security firms at least twice per year.
• Automated intrusion detection and prevention systems (IDS/IPS) monitoring network traffic around the clock.
• Incident response plan that enables us to detect, contain, and notify affected users of any confirmed data breach within the timeframe required by applicable law.

Despite these measures, no online platform can guarantee absolute security. We therefore encourage you to protect your own account by using a strong, unique password, enabling two-factor authentication via your account settings, and never sharing your login credentials with any third party.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, dx69 will notify affected users without undue delay, providing clear information about the nature of the breach, the data affected, and the steps we are taking to address it.

10. Cookies & Tracking Technologies

dx69 uses cookies and similar technologies to keep the platform functioning correctly, remember your preferences, and understand how Users interact with our services. We categorise our cookies as follows:

10.1 Strictly Necessary Cookies

These cookies are essential for the platform to operate and cannot be disabled without breaking core functionality. They include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. No consent is required for these cookies as they are technically indispensable.

10.2 Functional Cookies

These cookies remember your preferences — such as your preferred language setting, odds format (decimal, fractional, or Hong Kong), and display layout — to provide a personalised experience. They are set with your consent and can be disabled, though doing so may affect platform usability.

10.3 Analytics Cookies

We use aggregated analytics data to understand which areas of the platform are most popular, how Users navigate between pages, and where technical errors occur. Analytics data is anonymised and does not identify individual users. These cookies require your consent.

10.4 Security & Fraud-Detection Cookies

Certain cookies and device fingerprinting techniques are used by our fraud-detection systems to identify suspicious login patterns, multi-accounting attempts, and bot activity. These operate under our legitimate interests in keeping the platform safe and are not subject to consent requirements.

10.5 Managing Cookies

You can manage or withdraw consent for non-essential cookies at any time via your browser settings. Most modern browsers allow you to block or delete cookies entirely. Note that disabling certain cookies may impair your ability to log in or use some platform features. You can also clear existing cookies from your browser's history/privacy settings at any time.

11. Your Rights Over Your Personal Data

Subject to applicable law and our legitimate operational requirements, you have the following rights in relation to your personal data held by dx69:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is being used.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations — we cannot erase KYC or financial records that we are legally required to keep.
• Right to Restrict Processing: You may ask us to suspend the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing. Where you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to all valid requests within 30 calendar days. In complex cases this period may be extended by a further 30 days, in which case we will inform you of the extension and the reason for it.

12. Minors & Age Restriction

dx69 is strictly an adults-only platform. You must be at least 21 years of age to register an account or use any of our services. We do not knowingly collect personal data from individuals under the age of 21.

During the registration process, we ask all Users to confirm their date of birth. Any Account for which we subsequently discover the holder is under 21 will be immediately suspended. All funds in such an account — including deposits, winnings, and bonuses — will be retained pending investigation and may be returned to the original payment source after verification, less any amounts required to meet our legal obligations.

If you believe that a minor has accessed or registered on the dx69 platform, please notify us immediately at [email protected] (plain text — not a clickable link). We will investigate and take appropriate action as a matter of priority. We also recommend that parents and guardians install appropriate content-filtering software to prevent minors from accessing online gambling platforms.

13. International Data Transfers

dx69 is operated by an entity incorporated outside Indonesia, and our servers and data processors may be located in jurisdictions other than Indonesia. As a result, your personal data may be transferred to, stored in, or processed in countries that have different data protection laws from those in Indonesia.

Where such transfers occur, we ensure that adequate safeguards are in place to protect your personal data to a standard that is at least equivalent to the protections described in this Policy. Safeguards we rely on include:

• Contractual data protection clauses incorporated into all agreements with Data Processors located in third countries.
• Transfers only to jurisdictions that maintain internationally recognised data protection standards appropriate to the sensitivity of the data transferred.
• Encryption of all data in transit using TLS 1.2 or higher, regardless of the destination jurisdiction.

By using dx69 and providing your personal data, you acknowledge that your data may be transferred internationally as described in this section. You may contact our support team for further information about the specific transfer mechanisms we employ.

14. Changes to This Privacy Policy

dx69 reserves the right to update or revise this Privacy Policy at any time. When material changes are made — changes that significantly affect how we collect, use, or share your personal data — we will notify registered users via the email address associated with their account at least 14 calendar days before the changes take effect.

Minor changes — such as typographical corrections, clarifications that do not alter your rights, or updates to reflect new legal terminology — may take effect immediately upon publication. The effective date at the top of this page will be updated accordingly.

We encourage you to review this Policy periodically to stay informed about our data practices. Your continued use of the dx69 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the revised terms, you should cease using the platform and may close your account in accordance with our Terms & Conditions.

15. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dx69 handles your personal data, please contact our Data Privacy team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via your Account dashboard — our Indonesian-speaking agents can assist in both English and Bahasa Indonesia
• Subject Line: Please mark privacy-related emails with the subject "Privacy Request — [Your Username]" to ensure prompt routing to our Data Privacy team
• Response Time: We aim to acknowledge all privacy-related requests within 2 business days and provide a full response within 30 calendar days

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. For Indonesian residents, the responsible authority under UU PDP is the Ministry of Communication and Information Technology of the Republic of Indonesia (Kementerian Komunikasi dan Informatika / Kominfo).

We take all privacy complaints seriously and will work diligently to resolve any issues in a fair, transparent, and timely manner. Your trust is fundamental to everything we do at dx69, and we are committed to earning and maintaining it.