deckPrivacy Policy
This page describes what we collect when you use deck and how we keep that data protected. We at deck take your privacy seriously and maintain strict practices around data collection, storage, encryption, and third-party access. Our privacy commitment applies whether you are accessing deck from Jakarta, Surabaya, Bandung, Medan, or Semarang, and across all device types—mobile app, mobile browser, or desktop.
We collect information necessary to operate our platform securely: your account credentials, identity verification documents for KYC compliance, payment method details for deposits and withdrawals, and gameplay activity records. We do not sell your data to third parties for marketing. We use your information to prevent fraud, comply with regulations, deliver our services, and respond to support requests.
Our deck privacy practices are designed to balance transparency with security. This policy explains what we collect, why, how long we retain it, your rights regarding your data, and how to contact us with privacy concerns.
What we collect when you use deck
When you register for a deck account, we collect your email address, chosen password, and basic contact information. During KYC verification on deck, we request identity documents (passport or national ID), a clear photo of your ID, and a selfie. We store these documents encrypted and separate from your account credentials. We do not share these documents with third parties except when required by law or to prevent fraud.
When you deposit on deck using DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer via mobile banking, local payment, online payment, or e-wallet, we record your payment method details, transaction history, and deposit timestamps. We use this information to process your request, prevent duplicate charges, and comply with anti-money-laundering regulations. We do not store full credit-card numbers or passwords for your payment apps—we only store confirmation tokens returned by payment processors.
Data we collect on deck
- Account: email, password hash, username, registration timestamp
- Identity: government ID photo, selfie, name, date of birth, address
- Payment: deposit and withdrawal history, payment method tokens, transaction amounts
- Gameplay: bet history, game outcomes, account balance changes, session duration
- Technical: IP address, device type, browser version, error logs
How we store and protect your data on deck
We at deck use SSL encryption for all data transmission between your device and our servers. This means your login credentials, payment information, and account details are encrypted while traveling over the internet. We store encrypted passwords and sensitive documents on servers behind firewalls and access controls. Only our deck technical team—bound by confidentiality agreements—can access these systems.
Our deck servers may be located outside your jurisdiction. We maintain backup copies of your account data to ensure service continuity in case of hardware failure. These backups are encrypted and stored in geographically separated data centers. We periodically audit our security practices and implement industry-standard protections such as intrusion detection and regular patch updates.
How we use your data on deck
We use your data to operate deck: processing deposits and withdrawals, verifying your identity, settling your gameplay transactions, and maintaining your account. We analyze gameplay patterns to detect fraud—for example, unusual withdrawal requests or account access from new locations trigger additional verification on deck. We retain logs to investigate disputes and comply with regulatory requests.
We do not sell your data to third parties for marketing. We may share your information with payment processors (to complete transactions) and compliance partners (to verify identity and prevent money laundering). We disclose information to law enforcement only when required by court order or to prevent imminent harm. We do not use your data to build advertising profiles or contact you for unsolicited marketing.
- KYC Verification
- We collect identity documents to verify you are a real person and comply with anti-money-laundering regulations
- Fraud Prevention
- We analyze account activity to detect unauthorized access or suspicious withdrawal patterns
- Service Delivery
- We use your data to process transactions, settle bets, and respond to support requests
- Legal Compliance
- We retain records to meet regulatory requirements and respond to lawful information requests
How long we retain your data on deck
We retain your deck account information as long as you maintain an active account. If you close your account, we retain certain records for a minimum of five years to comply with anti-money-laundering regulations and legal holds. We retain transaction history indefinitely so we can settle disputes and provide account statements if requested. We delete personal documents (ID photos, selfies) after your KYC verification is confirmed and processed, except where regulations require longer retention.
We retain gameplay logs for at least two years. We retain IP addresses and device identifiers for one year unless they are associated with fraud investigation. If you request deletion of your account, we securely erase personal information according to these retention schedules, except where we are legally required to retain data.
Cookies and tracking on deck
Our deck platform uses cookies to maintain your login session, remember your preferences, and protect against cross-site request forgery. Session cookies expire when you close your browser. Preference cookies (such as your chosen language or table stakes) persist for one year. We do not use tracking cookies to follow your activity across other websites.
If you disable cookies in your browser, some deck features may not function properly—for example, you may be logged out frequently or unable to remember your preferred game stakes. We use analytics services that collect aggregate usage data (which games are popular, which payment methods users prefer) but do not track individual behavior across sites.
Your rights regarding data on deck
You have the right to request what personal data we hold about you on deck. You can request a copy of your account information, payment history, and gameplay records by contacting our support team. You have the right to correct inaccurate information—for example, if your address is outdated, you can request an update. You have the right to request deletion of your account, subject to legal retention requirements.
You have the right to opt out of non-essential communications. If you receive promotional emails from deck, you can unsubscribe by clicking the link in the email. You cannot opt out of service-critical communications (account security alerts, withdrawal confirmations, KYC verification updates). If you believe we have misused your data, you have the right to lodge a complaint with our support team or your local data-protection authority.
Third-party processors and deck data
We work with payment processors to handle your mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank-transfer transactions. These processors access only the information necessary to complete payments—your name, account number, and transaction amount. They maintain their own privacy policies, and we recommend reviewing those policies to understand how they handle your data.
We use cloud providers to store deck data and backups. These providers sign data-processing agreements committing them to protect your information and use it only as we direct. We also work with compliance and identity-verification partners to fulfill KYC requirements. We do not allow these partners to use your data for their own purposes.
Contact us about privacy and deck data practices
If you have questions about our deck privacy practices, want to request your data, or wish to lodge a complaint, contact our support team via email or in-app messaging. We respond in English and Indonesian during business hours. We will acknowledge your request within five business days and aim to provide complete responses within 30 days. If your request is complex or requires investigation, we may ask for additional time.
If you believe we have violated your privacy rights, you can escalate your concern to our compliance team for review. Our deck privacy policy may be updated from time to time to reflect changes in our practices or applicable regulations. We will notify you of material changes by email or through an on-platform notification. Your continued use of deck after an update indicates acceptance of the revised policy.
We maintain transparency around data handling, security practices, and your rights. Our goal is to operate deck with integrity and respect for your personal information while delivering reliable gaming and sportsbook services in supported jurisdictions.