duniacash Privacy Policy

This page describes what we collect when you use duniacash and how we keep that data protected. Our privacy practices reflect our commitment to transparency and compliance with applicable data-protection standards across the jurisdictions where we operate. We collect personal information only to the extent necessary to operate your account, process your payments via DANA, e-wallet, mobile banking, local payment, online payment, or bank transfer, and verify your identity before withdrawals.

We do not sell, share, or monetize your personal data. We do not use your information for marketing, profiling, or third-party advertising unless you explicitly consent. Our servers may sit outside your jurisdiction; however, we apply the same security and access controls regardless of physical server location. This policy governs your use of duniacash across all game categories—slot tournaments, live-dealer tables, sportsbook markets, and account management.

If you have specific questions about how your data is handled, how long we retain it, or how to exercise your rights, contact our compliance team via the Help section of your duniacash account or email our support desk directly.

What data we collect on duniacash

We collect the following personal information when you create a duniacash account and use our platform:

Identity information: We collect your full name, national identity card number, date of birth, and phone number during account registration and Know-Your-Customer (KYC) verification.
Contact details: We collect your email address and, if you provide it, a backup phone number for account recovery and support communication.
Payment information: We collect the name, account number, and bank details of your funding source (DANA wallet, e-wallet account, mobile banking account, local payment account, online payment account, or bank account) when you deposit or request a withdrawal.
Activity logs: We log every action on your duniacash account—slot tournament entries, live-dealer table sessions, sportsbook wagers, login times, withdrawal requests, and customer support interactions. These logs are retained indefinitely for compliance and dispute resolution.
Device and connection data: We collect your IP address, device type, operating system, browser version, and geographic location (derived from IP) for security monitoring and fraud prevention.
Communication records: We retain all email, chat, and in-app messages between you and our support team.

We do not collect biometric data, browsing history outside duniacash, or personal information unrelated to account operation and payment processing. We do not use cookies for tracking or profiling; we use session cookies only to maintain your login state and remember your account preferences (e.g., preferred language, default payment method).

Note: Our KYC verification process requires a selfie and identity card photograph for security. We store these documents in encrypted form, accessible only to our compliance team. We delete verification photos after account closure unless applicable law requires retention.

How we use your data on duniacash

We use your personal information solely for the following purposes:

Account operation: We use your name, email, and phone number to create and maintain your duniacash account, generate account statements, and communicate about account status.
Payment processing: We use your bank details and payment method information to process deposits and withdrawals through e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, or mobile banking.
Identity verification: We use your identity card number, selfie, and personal details to verify that you are the authorised account holder before permitting withdrawals.
Compliance and anti-fraud: We use your activity logs, IP address, and device data to detect suspicious activity, prevent fraud, and comply with applicable anti-money-laundering (AML) regulations.
Customer support: We use your contact details and account history to respond to your inquiries, resolve disputes, and troubleshoot technical issues.
Legal and regulatory: We retain your data to comply with legal holds, respond to law-enforcement requests, and defend against legal claims.

We do not use your data for marketing, automated decision-making, or profiling beyond account security and fraud detection.

We at duniacash retain personal data only as long as necessary to operate your account and comply with applicable law—typically three to seven years after account closure.

duniacash compliance team

Third-party data processors

We engage third-party service providers to operate duniacash. These vendors may access your personal information subject to contractual data-protection obligations:

Payment processors: local payment, online payment, e-wallet, mobile banking, local payment, and your bank receive your account details to process deposits and withdrawals. These entities maintain separate privacy policies and are responsible for their own data handling.
Hosting and infrastructure: Our servers are hosted by third-party cloud providers. Your data is encrypted both in transit and at rest; the hosting provider does not have encryption keys and cannot read your information.
KYC verification services: We may engage third-party identity verification services to validate your national identity card. These services receive your card image and personal details solely for verification purposes and are contractually prohibited from retaining or reusing your data.
Customer support platform: We use a third-party helpdesk system to manage support tickets and chat. Your support messages are encrypted and stored in this system; the vendor is contractually bound not to disclose or reuse your data.

All third-party processors are required to maintain security standards equivalent to our own and to comply with applicable data-protection laws. We do not share your data with vendors beyond what is necessary for them to provide their service.

Your rights on duniacash

You have the following rights regarding your personal data:

Access: You may request a copy of all personal data we hold about you. Submit this request via our Help section or email, and we will provide your data within seven business days.
Correction: If your personal information is inaccurate or incomplete, you may update it directly through your duniacash account settings or contact our support team to assist.
Deletion: You may request deletion of your account and associated data. We will delete your account information within seven days of your request, except for data we are legally required to retain (e.g., transaction records for tax or AML compliance). Retained data will be de-identified or anonymised.
Portability: You may request a machine-readable copy of your personal data in a standard format (e.g., CSV or JSON). We will provide this within seven business days of your request.
Objection: You may object to processing of your data for specific purposes. We will honour objections except where processing is required by law (e.g., KYC verification for withdrawals).

To exercise any of these rights, contact our compliance team via the Help section of your duniacash account. Provide your account email and a clear description of your request. We will confirm receipt and provide a response within seven business days.

Data security on duniacash

We protect your personal information using industry-standard encryption, secure servers, and access controls. All data transmitted between your device and our duniacash platform is encrypted using TLS 1.2 or higher. Passwords are hashed and salted; we never store or transmit passwords in plain text. Personal documents (identity cards, selfies) are encrypted and stored in a separate system with restricted access.

We conduct regular security audits and penetration testing to identify and remediate vulnerabilities. Our staff are trained on data security and confidentiality. We maintain a data breach protocol: if we detect unauthorised access to your personal information, we will notify you within 72 hours and describe the scope of the breach and remediation steps taken.

Note: No security system is absolute. We cannot guarantee against all breaches; however, we maintain comprehensive insurance and incident response procedures to minimise harm if a breach occurs.

Data retention and deletion

We retain personal data as long as necessary to operate your account and comply with applicable law. Retention timelines vary by data type:

Account information: Retained during your account's active status and for three years after account closure.
Transaction records: Retained for seven years to comply with tax and anti-money-laundering regulations.
KYC verification documents: Retained for three years after account closure, then deleted.
Support communications: Retained for three years after your final message.
Device and connection logs: Retained for one year for security monitoring.

Upon account closure, we delete your account information except for data subject to legal retention requirements. You may request accelerated deletion of non-mandatory data via our compliance team.

Changes to this policy

We may update this privacy policy to reflect changes in our practices or applicable law. We will notify you via in-app alert if material changes occur. Your continued use of duniacash after a policy update constitutes acceptance of the updated terms. We recommend reviewing this policy periodically to stay informed of our data practices.

Contact our compliance team

If you have questions, concerns, or requests regarding this privacy policy or our data handling practices, contact us via the Help section of your duniacash account or email our support desk. Our multilingual team is available during extended business hours across Jakarta, Surabaya, Bandung, Medan, and Semarang timezones. We will respond to privacy inquiries within seven business days.