dora99 ("we", "us", "our") is committed to protecting your personal information and respecting your privacy. This Privacy Policy describes the types of personal data we collect from users of our platform, how we use that data, who we share it with, and the rights you have regarding your personal information.
This Privacy Policy applies to all users who access dora99 through our website at https://dora99.cam, mobile applications, and any other digital channels we operate. By creating an account or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.
If you do not agree with the terms of this Privacy Policy, you must immediately discontinue use of dora99 and refrain from providing any personal information to us.
Privacy Commitment: We only collect data that is necessary for providing our services, complying with legal obligations, and improving your user experience. We never sell your personal information to third parties.
dora99 acts as the data controller for all personal information collected through the platform. As the data controller, we determine the purposes for which and the means by which your personal data is processed.
For any questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact our Data Protection team at:
- Email:
- Subject Line: "Privacy Request — [Your Account Username]"
- Response Time: We aim to respond to all privacy-related inquiries within 72 hours (WIB business hours).
We collect several categories of personal information to provide, maintain, and improve our services. The data we collect falls into the following categories:
3.1 Account Registration Data
- Identity Information: Full legal name, date of birth, gender, nationality
- Contact Information: Email address, phone number, residential address
- Account Credentials: Username, password (stored in hashed, encrypted form)
- Preferred Language & Currency: Default language setting (all transactions are in IDR)
3.2 Identity Verification (KYC) Data
- Government-Issued ID: Copy of your Indonesian National Identity Card (KTP), showing your photograph, full name, date of birth, and KTP number
- Proof of Address: Utility bills, bank statements, or government correspondence showing your current residential address
- Selfie Verification: Photograph of yourself holding your identity document
- Financial Verification: Bank account ownership verification screenshots or statements (where applicable for large withdrawals)
3.3 Transaction & Financial Data
- Payment Method Details: Bank account numbers (masked for security), e-wallet account identifiers (OVO, DANA, GoPay), transaction history
- Deposit & Withdrawal Records: Transaction amounts, timestamps, payment method used, transaction status
- Betting History: Complete record of all bets placed, including stake amounts, odds, outcomes, winnings, and losses
- Account Balance: Current balance, bonus balance, wagering requirements status
3.4 Technical & Usage Data
- Device Information: IP address, device type, operating system, browser type and version, screen resolution
- Log Data: Access times, pages viewed, click paths, session duration, referring URLs
- Cookies & Tracking Technologies: Session cookies, preference cookies, analytics cookies (see Section 9 for details)
- Geolocation Data: Country and city-level location derived from IP address (not GPS-level tracking)
3.5 Communications Data
- Customer Support Interactions: Live chat transcripts, email correspondence, WhatsApp messages, support ticket content
- Marketing Preferences: Opt-in/opt-out status for promotional emails, SMS notifications, and push notifications
- Survey & Feedback Responses: Any feedback, ratings, or survey responses you choose to provide
dora99 processes your personal data for the following purposes:
4.1 Service Provision & Account Management
- Creating and maintaining your user account
- Processing deposits, withdrawals, and bet settlements
- Verifying your identity and age (21+ requirement enforcement)
- Communicating with you about account activities, transactions, and service updates
- Providing customer support and resolving technical issues
- Administering bonuses, promotions, and VIP program benefits
4.2 Legal & Regulatory Compliance
- Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
- Preventing fraud, money laundering, and terrorist financing
- Detecting and preventing underage gambling
- Responding to legal requests, court orders, and regulatory inquiries
- Maintaining records as required by applicable gambling regulations
4.3 Platform Security & Integrity
- Detecting and preventing fraudulent activities, bonus abuse, and terms violations
- Identifying and blocking suspicious betting patterns and account sharing
- Protecting against unauthorized access, hacking attempts, and DDoS attacks
- Monitoring for use of automated betting software or bots
4.4 Service Improvement & Analytics
- Analyzing user behavior to improve platform usability and functionality
- Conducting internal research on betting patterns and preferences to optimize our offerings
- Testing new features, games, and payment methods
- Generating anonymized and aggregated statistics for business intelligence
4.5 Marketing & Personalization (With Your Consent)
- Sending promotional emails about new games, bonuses, and special offers
- Delivering personalized content and recommendations based on your betting history
- Notifying you of exclusive VIP events and tier upgrade opportunities
- Conducting customer satisfaction surveys and loyalty program communications
You may opt out of marketing communications at any time via the unsubscribe link in any email, or by adjusting your preferences in your account settings.
Under international data protection principles, dora99 processes your personal data on the following legal bases:
- Contractual Necessity: Processing is necessary to perform our contract with you (providing betting services, processing transactions, managing your account).
- Legal Obligation: Processing is required to comply with legal and regulatory obligations, including KYC/AML compliance, age verification, and tax reporting.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, service improvement, and customer support, provided these interests are not overridden by your fundamental rights.
- Consent: Where required, we rely on your explicit consent for processing activities such as marketing communications and the use of non-essential cookies.
Withdrawal of Consent: Where we process your data based on consent, you have the right to withdraw that consent at any time by contacting our support team or adjusting your account settings.
dora99 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality obligations:
6.1 Service Providers & Processors
- Payment Processors: Third-party payment gateways that facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other methods
- Identity Verification Services: KYC/AML compliance providers that verify your identity documents
- Game Providers: Software studios (e.g., Pragmatic Play, Evolution Gaming, Microgaming) that provide game content and whose games you choose to play
- Hosting & Infrastructure Providers: Cloud hosting services, CDN providers, and server management companies
- Customer Support Tools: Live chat platforms, ticketing systems, and CRM software
- Analytics Providers: Web analytics services that help us understand platform usage (data is anonymized where possible)
6.2 Legal & Regulatory Authorities
We may disclose your personal data to law enforcement agencies, courts, regulatory bodies, or government authorities when:
- Required by law, court order, subpoena, or legal process
- Necessary to prevent fraud, money laundering, or other criminal activity
- Required to comply with gambling licensing obligations and regulatory audits
- Necessary to protect the rights, property, or safety of dora99, our users, or the public
6.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy.
dora99 employs industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure:
- Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (passwords, payment details, KYC documents) is encrypted using AES-256 encryption.
- Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis, using role-based access controls (RBAC).
- Authentication: User accounts are protected by strong password requirements. We recommend enabling two-factor authentication (2FA) for additional security.
- Secure Infrastructure: Our servers are hosted in secure, access-controlled data centers with 24/7 monitoring, intrusion detection systems, and regular security audits.
- Regular Security Testing: We conduct regular penetration testing, vulnerability assessments, and security audits to identify and remediate potential weaknesses.
- Employee Training: All employees with access to personal data undergo regular training on data protection principles and security best practices.
Your Responsibility: While we implement robust security measures, you are responsible for maintaining the confidentiality of your account credentials. Never share your password with anyone, and always log out after using shared or public devices.
dora99 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:
- Active Accounts: Personal data associated with active accounts is retained for the duration of your relationship with dora99.
- Closed Accounts: Following voluntary account closure, we retain transactional and identity data for a minimum of 5 years to comply with anti-money laundering regulations and tax reporting obligations.
- Suspended Accounts: Data from accounts suspended for terms violations is retained for 7 years for legal defense and fraud prevention purposes.
- Marketing Data: If you opt out of marketing communications, we retain a suppression record of your email address to ensure we do not contact you again.
- Inactive Accounts: Accounts with no activity for 12 consecutive months are considered dormant. After 24 months of inactivity, accounts may be permanently closed and data archived.
After the applicable retention period expires, personal data is either securely deleted or anonymized such that it can no longer be associated with you.
dora99 uses cookies and similar tracking technologies to enhance your user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device by your web browser.
Types of Cookies We Use
- Essential Cookies: Required for the platform to function properly (login sessions, transaction processing, security). These cannot be disabled.
- Functional Cookies: Remember your preferences (language, currency, layout preferences) for a more personalized experience.
- Analytics Cookies: Help us understand how users interact with dora99 (pages visited, time spent, click patterns) to improve our services. Data is anonymized where possible.
- Marketing Cookies: Track your activity across sessions to deliver relevant promotional content and measure the effectiveness of advertising campaigns. These require your consent.
Managing Cookies
You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect platform functionality and prevent you from accessing certain features.
For more information on managing cookies, visit your browser's help documentation or consult www.allaboutcookies.org.
Under applicable data protection laws, you have the following rights regarding your personal data:
- Right to Access: You may request a copy of all personal data we hold about you, including account details, transaction history, and KYC documents.
- Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most account information directly via your account settings.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to our legal obligations to retain certain records for regulatory compliance.
- Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances (e.g., while we verify accuracy of disputed data).
- Right to Data Portability: You may request a machine-readable export of your personal data to transfer to another service provider.
- Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Exercising Your Rights
To exercise any of these rights, please contact our Data Protection team at with the subject line "Privacy Rights Request — [Your Account Username]". We will respond to all requests within 30 days. We may request additional verification to confirm your identity before processing certain requests.
dora99 may contain links to third-party websites, game providers, or payment processors. This Privacy Policy applies only to dora99. We are not responsible for the privacy practices or content of any third-party websites you visit via links on our platform.
We encourage you to review the privacy policies of any third-party services you interact with. When you leave dora99 to visit a third-party website, your personal data is governed by that third party's privacy policy, not ours.
dora99 is an adults-only platform. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that a user is under 21, we will immediately close the account, forfeit any winnings, and delete all associated personal data (after returning any deposits to the funding source).
If you believe that a minor has provided personal information to dora99, please contact us immediately at with the subject line "Underage User Report".
dora99 operates under an international offshore gaming license. Your personal data may be transferred to, stored at, or processed in jurisdictions outside Indonesia, including countries that may not have data protection laws equivalent to those in Indonesia.
When we transfer your data internationally, we implement appropriate safeguards to ensure your data receives an adequate level of protection, including:
- Contractual data protection clauses with third-party processors
- Adherence to international privacy frameworks and standards
- Technical and organizational security measures consistent with this Privacy Policy
By using dora99, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.
dora99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When material changes are made, we will update the "Last Updated" date at the top of this page and notify registered users via email or in-platform notification.
Your continued use of dora99 following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
The most current version of this Privacy Policy is always accessible at https://dora99.cam/privacy-policy.