daya Platform Privacy Notice

This page describes what we collect when you use daya and how we keep that data protected. We collect personal information during account registration, identity verification, payment processing, and gameplay to operate our platform securely and comply with anti-money-laundering regulations.

Our approach to your data is straightforward — we collect only what we need, we keep it encrypted, and we do not sell it to third parties. We process your information across multiple jurisdictions (your data may be stored on servers outside your location), and we retain it for the duration of your account plus a legally mandated retention period. This notice explains what data we collect, how we use it, your rights regarding that data, and how you can contact us if you have concerns.

We update this privacy notice periodically as our practices evolve. The version you see now reflects our current data handling standards across football betting, live-dealer games, slot games, and esports markets on daya.

What data we collect on daya

During account registration

When you open a daya account, we collect your name, email address, phone number, and date of birth. We use this information to create your account, send you account notifications, and verify your eligibility under applicable law in your jurisdiction. We do not share this information with marketing partners or use it for advertising outside our platform.

During identity verification (KYC)

Before your first withdrawal or when making a large deposit, we require Know Your Customer (KYC) verification. We ask you to upload a government-issued ID (national ID card or passport) and proof of address (utility bill, bank statement, or official letter). We collect this information to comply with anti-money-laundering regulations and to prevent fraud. Our KYC team reviews your documents and stores them in encrypted systems separate from your betting history.

Document security: We do not display your ID or address documents anywhere on your account or share them with third parties unless required by law.

During payment processing

When you deposit or withdraw via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we collect the transaction details — the payment method used, the amount, the date, and the status (confirmed, pending, or failed). We also collect the last four digits of your payment account for reference purposes. We do not store your full card numbers, PINs, or complete banking credentials. Payment processors (the wallets and banks themselves) handle the sensitive financial data.

During gameplay

We collect your betting activity — which games you play, which matches or draws you select, the amounts you wager, the outcomes, and your winnings or losses. We use this data to settle bets, display your account balance, generate your transaction history, and detect unusual patterns that might indicate fraud or account compromise. We do not sell this data or use it to profile you for external advertising.

Device and usage information

When you access daya (whether through web browser or mobile app), we collect your IP address, device type, operating system, and browser information. We use this to detect fraud, troubleshoot technical issues, and improve our platform. We also log the times you log in and out, so we can support account recovery if you forget your password or suspect unauthorized access.

We do not collect location data from your device unless you explicitly grant permission. We do not access your contacts, photos, or calendar. We do not use cookies for tracking across third-party websites — our cookies are limited to your daya session (remembering your login status, language preference, and betslip contents).

How we use and protect your data

Data processors and third parties

We use third-party processors to handle specific functions — payment processors (the payment wallets and banks listed above) to process deposits and withdrawals, hosting providers to store your data, and compliance vendors to assist with KYC verification. We have contracts with all third parties that require them to treat your data confidentially and to use it only for the purposes we specify. We do not allow third parties to sell or repurpose your data.

Data retention

We retain your account data (name, email, phone, betting history) for as long as your account is active. After you close your account, we keep records for a legally mandated period (typically five to seven years) to comply with anti-money-laundering regulations and to resolve disputes. We then delete or anonymize your data unless we are required by law to retain it longer.

Cross-border data storage: Our servers may sit outside your jurisdiction. If you are accessing daya from Jakarta, Surabaya, Bandung, or Medan, your data may be processed on servers in other countries. We protect that data using the same encryption standards regardless of location.

Your rights regarding your data

You have the right to request access to the personal data we hold about you. You can ask us what information we have collected, how we use it, and who we share it with. You also have the right to request correction if your data is inaccurate — for example, if your name is spelled wrong in our system. In some jurisdictions, you have the right to request deletion of your data, though we may retain it if we are legally required to do so.

To exercise these rights, contact our support team with your request. We will respond within standard business hours. Your request may require identity verification to ensure we are speaking with the actual account holder, not someone impersonating you.

Security measures

We use industry-standard encryption (SSL/TLS) to protect data in transit between your device and our servers. We use encrypted databases to protect data at rest. We limit access to your personal data to employees and contractors who have a legitimate business need to see it. We require all staff to sign confidentiality agreements. We do not guarantee absolute security — no online system is non-specific info secure — but we undertake to protect your data against unauthorized access using reasonable technical and organizational safeguards.

Contact for privacy concerns

If you have questions about how we use your data, want to request access to your information, or have privacy concerns, contact our support team. We provide English-language assistance during standard business hours. Our support channels are listed on the daya platform and in your account dashboard. We aim to respond to privacy inquiries within standard service windows.

We treat your personal information with respect and work to maintain your trust in daya. If you have additional questions about how your Liga 1 betting activity, Champions League selections, or payment details are handled, our support team can provide clarity on our specific practices and your rights under applicable law in your jurisdiction.

Service availability

We at daya provide our services only where local law permits. Our platform and all features (football betting on Liga 1 and Champions League, live-dealer tables, slot games, and esports markets) are not available in jurisdictions where online gaming is prohibited by applicable law. We respect the regulatory frameworks established by each region and do not operate in areas where our services would violate local statutes. The availability of daya services may vary depending on your location and the legal environment in your jurisdiction. We maintain this approach to ensure that our operations remain compliant with diverse regulatory standards across regions where our platform may be accessed. We do not name specific jurisdictions as legal or illegal; instead, we defer to each region's applicable law. Our terms of service outline the jurisdictional scope of our offerings in detail. If you are uncertain whether daya services are available in your location, we recommend consulting local legal resources or contacting our support team for clarification. Our commitment to jurisdictional compliance means that access to our platform may be restricted or terminated if we determine that a user's location falls outside our service area or if we receive legal notice requiring service termination.

Account eligibility

Eligibility to open an account on daya is determined by the laws applicable in your jurisdiction. We do not impose a universal age or eligibility requirement across all regions; instead, we defer to the legal standards established by each jurisdiction. During account registration, you will be asked to confirm that you meet the eligibility criteria under your local law. Our verification process includes identity confirmation through Know Your Customer (KYC) procedures to ensure that account holders meet their jurisdiction's eligibility requirements. We collect government-issued identification documents to validate identity and age. If your jurisdiction specifies additional eligibility conditions beyond age — such as residency, citizenship, or professional status — we may request additional documentation to confirm compliance. Our registration system is designed to prevent account creation by ineligible users, though we rely on user honesty and document verification to enforce these standards. We do not use age badges or exclusion tooling as eligibility markers; instead, we verify eligibility through our KYC process. If you have questions about your personal eligibility to open an account on daya, we recommend consulting your local gaming regulations or contacting our support team for clarification based on general legal frameworks applicable to your region.

Local-law responsibility

Users of daya are solely responsible for ensuring that their access and use of our platform comply with the laws and regulations of their own jurisdiction. We provide our services on the understanding that each user has independently assessed the legality of online gaming in their location before creating an account, placing bets on Liga 1 or Champions League fixtures, or participating in any other daya offering. We do not provide legal advice, and we do not warrant that our services are legal in any particular jurisdiction. The legal status of online gaming varies significantly across regions and can change over time. Some jurisdictions prohibit online gaming entirely; others permit it under specific conditions, licenses, or regulatory oversight. It is your responsibility to understand these distinctions and to act in compliance with your local law. We reserve the right to restrict or terminate access to our platform if we determine that a user's jurisdiction prohibits our services or if we receive legal notice requiring service termination in your location. By creating an account and using daya, you acknowledge that you have made an independent assessment of the legality of online gaming in your location and assume full responsibility for compliance with local law.

Data and privacy scope

This privacy notice explains what data we collect from users of daya, how we use it, and your rights regarding that data. We collect personal information during account registration (name, email, phone, date of birth), identity verification (government-issued ID, proof of address), payment processing (transaction details from DANA, OVO, GoPay, ShopeePay, LinkAja, QRIS, BCA, Mandiri, BRI, BNI), and gameplay (betting selections, amounts, outcomes). We also collect device and usage information (IP address, device type, login activity). Our full data handling practices are set out in detail in our standard security practices policy on this page. We do not sell personal data to third parties. Data is stored securely using encryption and is retained for the duration of your account plus a legally mandated retention period thereafter. We may share data with third-party processors (payment providers, hosting companies, KYC vendors) under confidentiality contracts. You have the right to request access to the personal data we hold about you, and in some jurisdictions, you may request correction or deletion of your data subject to legal and regulatory constraints. Our data collection for Know Your Customer (KYC) purposes is necessary for regulatory compliance, fraud prevention, and risk management. We use industry-standard encryption and security measures to protect your data from unauthorized access.

Contact for legal inquiries

Users with questions about this privacy notice, requests for access to personal data, concerns about data handling, or other privacy-related inquiries should contact our support team. We provide English-language assistance during standard business hours. Our support channels are listed on the daya platform and accessible through your account dashboard. Response times vary depending on the complexity of your inquiry and support volume, but we aim to address privacy questions within standard service windows. For formal legal notices, regulatory inquiries from government agencies, or data subject access requests under applicable data protection law, please refer to the contact information provided in our legal notice pageWe maintain a dedicated compliance team to handle privacy inquiries, jurisdictional questions, and regulatory submissions. If you believe our platform is handling your data in violation of your local law or if you have concerns about how daya processes information collected during Liga 1 betting, Piala AFF participation, or other platform activity, we encourage you to report this concern through our support channels or to your local data protection authority.