dorjituPrivacy Policy

This page describes what we collect when you use dorjitu and how we keep that data protected. We at dorjitu take your privacy seriously. When you register an account, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, or place a wager on Liga 1 matches or live-dealer tables, we collect specific information to process your request and prevent fraud.

We do not sell your personal data to third parties for marketing. We do share information with payment processors, verification vendors, and regulators where required by law. Our servers may sit outside your jurisdiction, but all data transfers comply with data protection standards. This policy explains what we collect, how long we store it, and what rights you have.

Read this policy in full before using dorjitu. If you have questions or wish to exercise your data rights, contact our privacy team through your account dashboard or email support.

What data we collect on dorjitu

We collect your information across three categories on dorjitu. Account registration data includes your name, email address, phone number, date of birth, and residential address. This is required to verify your identity and comply with anti-money-laundering (AML) regulations. Payment data includes your chosen deposit method (DANA account identifier, e-wallet wallet, mobile banking credentials, bank account, or local payment reference). We do not store full card numbers or banking passwords—payment processors handle credential storage directly. Gameplay data includes your wagers, settlements, balance history, and login timestamps.

When you upload Know-Your-Customer (KYC) documents on dorjitu—government ID, proof of address, and video selfie—we store these files encrypted on secure servers. KYC files are retained for the duration of your account plus seven years for regulatory compliance, after which we permanently delete them unless legal holds apply.

We also collect technical data: your IP address, device type (Android, iOS, desktop), browser version, and session activity. This helps us detect fraud, prevent account takeover, and improve dorjitu's performance. We do not track you across websites outside dorjitu—our tracking is internal to our platform only.

Cookies on dorjitu

We use session cookies to keep you logged into dorjitu during your visit. These cookies expire when you close your browser. We do not use persistent tracking cookies for advertising. Disabling cookies may prevent dorjitu login.

How we use your data on dorjitu

We use account and payment data on dorjitu to process deposits, withdrawals, and wagering. Your name, address, and ID are verified against government records to ensure you are of legal age and not listed on sanctions or fraud databases. Payment data is sent to our financial partners (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet gateways, and mobile banking, local payment, online payment, e-wallet banks) to execute transfers. We do not use this data for any other purpose without your explicit consent.

We use technical data (IP address, device fingerprint, session logs) to detect suspicious activity. If your account logs in from unusual locations—such as Jakarta one hour, then Surabaya the next—we flag this for review. Large or rapid withdrawals may trigger additional verification. This protects your account from unauthorised access.

We use gameplay data (wagering history, settlement records) to calculate payouts, settle disputes, and maintain audit trails. If you dispute an outcome on a Liga 1 match or live-dealer table, we reference game logs and video footage to resolve the claim fairly. Gameplay data is retained for one year after account closure.

Account registration data
Name, email, phone, date of birth, address. Retained for account lifetime plus seven years for AML compliance.
Payment data
Payment method identifiers (wallet account, bank details). Retained for compliance; shared with payment processors only.
Gameplay data
Wagers, settlements, balance history, transaction timestamps. Retained for one year post-account closure.
Technical data
IP address, device type, browser, session logs. Retained for 90 days; older logs archived then deleted.

Third parties and data sharing on dorjitu

We share your data with trusted partners only. Payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and online payment, e-wallet, mobile banking, local payment) receive your payment data to process deposits and withdrawals. KYC verification vendors receive your ID and address to confirm your identity against government databases. Fraud detection services receive your technical data (IP, device fingerprint) to flag suspicious patterns.

We share data with law enforcement and regulators when required by legal process (court order, subpoena, government directive). We also comply with anti-money-laundering obligations: if we detect suspicious patterns (large deposits followed by immediate withdrawal, multiple account creation from same IP), we file reports with relevant authorities in your jurisdiction.

We do not sell your data to advertisers, data brokers, or marketing firms. We do not share gameplay history or betting patterns with anyone outside dorjitu except as required by law. If you withdraw from dorjitu and later request account closure, we retain your data only as long as legally required, then delete it.

Your rights regarding dorjitu data

You have rights over your data on dorjitu. Right of access: you can request a copy of all data we hold about your account. Submit a request through your account dashboard or email our privacy team, and we will provide a downloadable report within 14 days. Right to rectification: if your address or contact info is outdated, update it directly in your account settings. Right to deletion: you can request account closure and permanent deletion of your personal data, except data we must retain for legal or regulatory reasons (AML records, dispute logs).

Right to data portability: you can request your data in a machine-readable format (CSV or JSON) so you can transfer it to another service. Right to opt-out: you can disable non-essential cookies or opt out of notification emails through account settings, though this may limit your dorjitu experience.

If you believe we have misused your data, you have the right to lodge a complaint with your local data protection authority. We also accept complaints directly: contact our privacy team at the address provided at the end of this policy. We will investigate and respond within 30 days.

Data security and storage on dorjitu

We at dorjitu use industry-standard encryption (TLS 1.2+) to protect data in transit between your device and our servers. All payment data, KYC documents, and account credentials are encrypted at rest using AES-256 encryption. Our servers sit in data centres across Indonesia and may be subject to local data protection laws. We conduct regular security audits and maintain backups to prevent data loss.

We limit employee access to your data: only staff with specific business need (fraud team, compliance, customer support) can view it, and all access is logged and monitored. Employees sign confidentiality agreements and undergo security training. We do not retain data longer than necessary—after your account closes or reaches regulatory retention limits, we schedule automatic deletion.

Policy changes and contact on dorjitu

We may update this privacy policy to reflect changes in our practices or legal requirements. Material changes (new data collection, altered retention periods, third-party sharing) will be announced via email at least 14 days before taking effect. Continued use of dorjitu after the notice period constitutes acceptance of the updated policy. If you disagree with any change, you can close your account and request data deletion (subject to retention obligations).

If you have questions about this privacy policy or wish to exercise your data rights, contact our privacy team. You can reach us through your dorjitu account dashboard via live chat (response within 24 hours), email support (response within 48 hours), or submit a formal data request form through your account settings. We serve account holders across Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta with multilingual support.

Our services are available only where local law permits. Users are responsible for verifying that their use of dorjitu complies with their jurisdiction's data protection and privacy regulations. If your country has stricter privacy laws than Indonesia, those laws apply to your data on dorjitu.

Last updated: This policy reflects our current practices. We review it annually or when material changes occur.

Related guides