Privacy Policy

1 Introduction

This Privacy Policy explains how diva55 ("we", "us", "our", "the Company") collects, uses, stores, and protects personal information provided by users ("you", "your", "the Player") of the website located at https://diva55.cam and all associated sub-domains (collectively, "the Platform").

By creating an account on the Platform, making a deposit, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein.

If you do not agree with the terms of this Privacy Policy, you must not use the Platform or provide any personal information to diva55.

2 Data Controller

For the purposes of applicable data protection laws, diva55 is the data controller responsible for your personal information collected through the Platform.

All enquiries regarding the processing of your personal data, requests to exercise your data protection rights, or concerns about how we handle your information should be directed to our Data Protection Officer via the contact details provided in Section 14 of this policy.

3 Information We Collect

diva55 collects several categories of personal information to provide, secure, and improve our services. The specific data collected includes:

3.1 Registration Information

When you create an account on the Platform, we collect:

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify age eligibility — 21 years or older)
• Gender
• Email address
• Mobile phone number
• Residential address in Indonesia (street, city, postal code)
• Username and password (passwords are stored in hashed, irreversible format)
• Preferred currency (Indonesian Rupiah)

3.2 Verification Documents (KYC)

To comply with anti-money-laundering regulations and verify your identity, we collect:

• Government-issued photo identification (KTP — Indonesian national identity card, or valid passport)
• Proof of address documents (utility bills, bank statements, or official government correspondence dated within 90 days)
• Proof of payment method ownership (screenshots of e-wallet accounts or bank account statements showing your name as the account holder)
• Selfie photograph holding your ID document for facial verification (when required for enhanced security checks)

3.3 Transaction Data

We record all financial transactions conducted through your account, including:

• Deposit amounts, timestamps, and payment method used
• Withdrawal requests, amounts, destinations, and processing status
• Betting activity including wagers placed, game types, outcomes, and timestamps
• Bonus activations, wagering progress, and completion status
• Account balance history and currency conversions (where applicable)

3.4 Technical Information

When you access the Platform, we automatically collect certain technical data including:

• IP address and geolocation data (city-level, not precise GPS coordinates)
• Device type, operating system, and browser version
• Screen resolution and device identifiers
• Pages visited, click patterns, time spent on pages
• Referring websites and search terms used to find diva55
• Session durations and login timestamps

3.5 Communication Records

We retain records of all communications between you and diva55, including:

• Live chat transcripts with customer support agents
• Email correspondence
• Phone call recordings (where you have been notified and consented)
• WhatsApp or social media messages sent to official diva55 support channels

4 How We Use Your Data

diva55 processes your personal data for the following specific purposes:

4.1 Account Management

To create, maintain, and administer your player account, verify your identity, process registrations, and manage your account settings and preferences.

4.2 Transaction Processing

To process deposits, withdrawals, and internal transfers; verify payment method ownership; prevent duplicate transactions; and maintain accurate financial records as required by law.

4.3 Service Delivery

To provide access to sports betting, live casino, slot games, and other gaming services; calculate winnings and losses; apply bonuses and promotions; and deliver customer support.

4.4 Security and Fraud Prevention

To monitor for suspicious activity, detect and prevent fraud, money laundering, collusion, and other prohibited activities; verify player age and identity; and protect the integrity of the Platform and other users.

4.5 Legal and Regulatory Compliance

To comply with licensing requirements, anti-money-laundering laws, tax reporting obligations, and other applicable legal obligations; respond to lawful requests from authorities; and maintain records for the legally required retention periods.

4.6 Customer Support

To respond to your enquiries, troubleshoot technical issues, resolve disputes, investigate complaints, and provide personalized assistance in Indonesian and English languages.

4.7 Marketing and Promotions

To send you promotional emails about bonuses, tournaments, new games, and special offers (only if you have opted in to marketing communications). You may opt out at any time via the unsubscribe link in any marketing email.

4.8 Platform Improvement

To analyze usage patterns, measure website performance, conduct A/B testing, identify areas for improvement, and develop new features based on aggregated, anonymized player behavior data.

5 Legal Basis for Processing

Under applicable data protection laws, diva55 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms and Conditions you agreed to when creating your account.
• Legal Obligation: Processing is required to comply with anti-money-laundering regulations, tax laws, licensing requirements, and other applicable legal obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests in preventing fraud, ensuring platform security, improving services, and operating a sustainable business, provided these interests do not override your fundamental rights.
• Consent: For marketing communications and certain optional data collection activities, we rely on your freely given, specific, informed consent, which you may withdraw at any time.

6 Data Sharing and Third-Party Disclosure

diva55 does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, we share limited personal information with the following categories of third parties as necessary to operate the Platform:

6.1 Payment Processors

We share transaction data with banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These processors operate under their own privacy policies and data protection obligations.

6.2 Identity Verification Services

We use third-party KYC verification providers to validate identity documents, perform age verification checks, and conduct anti-fraud screening. Only the minimum necessary data is shared for verification purposes.

6.3 Game Providers

Game session data (not personal identification) is shared with software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft to deliver live casino, slot games, and other gaming content.

6.4 Cloud Service Providers

We use secure cloud hosting and infrastructure services to store data and deliver the Platform. These providers operate under strict data processing agreements and are bound by confidentiality obligations.

6.5 Legal Authorities

We may disclose personal data to law enforcement, regulatory bodies, or other government authorities when required by law, court order, or valid legal process; or when necessary to protect the rights, property, or safety of diva55, our users, or the public.

7 Data Security Measures

diva55 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols, the same standard used by banks and financial institutions.
• Encryption at Rest: Personal data stored on our servers is encrypted using AES-256 encryption, ensuring that even if storage media is compromised, data remains unreadable without decryption keys.
• Access Controls: Employee access to personal data is restricted based on role-based permissions and the principle of least privilege. All access is logged and monitored.
• Multi-Factor Authentication: Administrative systems and sensitive operations require multi-factor authentication to prevent unauthorized access.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments of our infrastructure on a quarterly basis.
• Incident Response Plan: We maintain a documented incident response procedure to detect, contain, and remediate security breaches within 72 hours, with immediate notification to affected users where required by law.
• Secure Development Practices: Our development team follows secure coding standards and conducts code reviews to prevent common vulnerabilities such as SQL injection and cross-site scripting.

While we employ industry-leading security practices, no system can be guaranteed 100% secure. You play a critical role in protecting your account by maintaining a strong, unique password and never sharing your login credentials with anyone.

8 Data Retention Periods

diva55 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to meet legal and regulatory obligations:

• Active Accounts: Personal data for active accounts is retained for the duration of your relationship with diva55 plus any applicable regulatory retention period.
• Closed Accounts: After account closure, personal identification and transaction records are retained for a minimum of five (5) years to comply with anti-money-laundering regulations and tax laws.
• Marketing Data: If you opt out of marketing communications, your email address is added to a suppression list but retained indefinitely to honor your opt-out preference.
• Communication Records: Customer support chat logs, emails, and call recordings are retained for two (2) years for quality assurance and dispute resolution purposes.
• Technical Logs: Server logs, IP addresses, and session data are typically retained for ninety (90) days unless longer retention is required for security investigations or legal proceedings.

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with an identifiable individual.

9 Your Data Protection Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a commonly used electronic format within thirty (30) days of a valid request.

9.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You can update most account information directly via your account settings, or contact customer support for assistance.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Note that we may be legally required to retain certain data even after you request erasure, particularly transaction records required for anti-money-laundering compliance.

9.4 Right to Restrict Processing

You have the right to request that we temporarily halt processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit that data to another controller where technically feasible.

9.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests, including profiling and direct marketing. If you object to marketing, we will cease processing your data for that purpose immediately.

9.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

9.8 Right to Lodge a Complaint

If you believe we have mishandled your personal data, you have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.

10 Cookies and Tracking Technologies

diva55 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function properly, including session management and security. These cannot be disabled.
• Performance Cookies: Collect anonymized information about how you use the Platform to help us improve functionality and user experience.
• Functionality Cookies: Remember your preferences such as language, currency, and interface settings.
• Analytics Cookies: Help us understand traffic sources, popular pages, and user navigation patterns through aggregated, non-identifiable data.

You can control cookie preferences through your browser settings. Blocking certain cookies may impact Platform functionality and your user experience.

11 International Data Transfers

diva55 primarily serves players in Indonesia. However, some of our service providers, including cloud hosting infrastructure and game content providers, may be located outside Indonesia. When personal data is transferred internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-group transfers
• Explicit consent where required by applicable law

All international transfers are conducted in compliance with applicable data protection laws and subject to appropriate safeguards.

12 Children's Privacy

diva55 services are strictly restricted to individuals aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information and close any associated account. Parents or guardians who believe a minor has provided personal data to diva55 should contact us immediately at [email protected].

We employ age verification mechanisms during registration and KYC processes to prevent underage access. Any attempt to circumvent age restrictions will result in permanent account closure and forfeiture of funds.

13 Changes to This Privacy Policy

diva55 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service offerings. Material changes will be communicated via email to your registered email address and/or through a prominent notice on the Platform homepage.

We will provide at least thirty (30) days' notice before any material change takes effect. Your continued use of the Platform after the effective date of the updated Privacy Policy constitutes acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this document indicates when the policy was most recently revised.

14 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how diva55 handles your personal data, please contact us through the following channels:

For formal data subject access requests or complaints, please submit your request in writing to the Data Protection Officer email address above. We are committed to resolving all privacy-related concerns promptly and transparently.