deragon22Privacy Policy

This page describes what we collect when you use deragon22 and how we keep that data protected. When you create an account, deposit funds, or play games on our platform, we handle your personal information according to strict data-protection standards. We do not sell your data to advertisers or marketing firms.

Our privacy commitments apply whether you access deragon22 via our Android app, iOS browser, or desktop web interface. We encrypt all data in transit and at rest. Your account information, payment history, and game records are accessible only to authorized deragon22 staff and external processors we trust.

If you have questions about how we handle your data, contact our support team via live chat, email, or phone. We explain our practices transparently and respond to privacy requests within standard timelines.

What Data We Collect on deragon22

Account Registration and Identity Verification

When you open an account on deragon22, we collect your email, password, phone number, and legal name. Before you can deposit, we require identity verification (KYC). You submit a government-issued ID photo and a selfie holding the same ID. We also collect your date of birth, residential address, and payment method details (e.g., your DANA or e-wallet account identifier, or bank account number for transfers).

We keep these documents encrypted on secure servers. Our KYC verification process is automated—we cross-check your ID against official registries to confirm you are who you claim to be. Once verified, your KYC data is archived securely and accessed only when we need to process withdrawals or investigate account disputes.

Payment and Transaction Data

Every deposit and withdrawal creates a transaction record. We log the date, time, amount, payment method, and your account balance before and after. If you deposit via mobile banking, local payment, or online paymentwe store a reference ID linking to your payment provider—we do not store your full card number or wallet PIN. Bank transfers via e-wallet, mobile banking, local payment, or online payment are logged with your account name and transfer reference.

We retain these records for seven years to comply with financial regulations. They are encrypted and accessible only to our finance and compliance teams.

Payment security: We never store your full credit card number or e-wallet password. Payment processors handle sensitive data—we retain only transaction identifiers.

Game and Betting Activity

When you play on deragon22, we log every hand, spin, bet, and result. For football betting during Liga 1 season or Piala Indonesia tournaments, we record your selections, stakes, and settlement outcomes. For live-dealer games, we log your table joins, bet amounts, and game results. For slot games like Aviator or Sweet Bonanza, we record your spins and payouts.

Your game history is stored encrypted and viewable only in your account. This history helps you track your play patterns and verify settlements. We retain game records for five years for dispute resolution and regulatory purposes.

Device and Usage Information

We collect technical data about how you access deragon22. On mobile, we log your device type (Android or iOS), operating system version, app version, and IP address. On desktop, we collect your browser type and IP address. We also log when you log in, how long you are active, and which features you use.

We use this information to detect unusual access patterns (e.g., login from an unexpected location) and to improve our platform. We do not use device data to profile you or sell insights to third parties.

Cookies and Tracking

Our website and app use cookies to keep you logged in and to remember your preferences. These are functional cookies—they do not track your browsing elsewhere. We do not place marketing or analytics cookies that follow you across the web. If you disable cookies in your browser, you may not be able to stay logged in on deragon22.

How We Use Your Data and Your Rights on deragon22

Data Use and Purpose Limitation

We use your data only for purposes directly related to operating deragon22. Your email is used for account recovery, transaction notifications, and customer support. Your phone number is used for two-factor authentication and account alerts. Your payment data is used to process deposits and withdrawals. Your game activity is used to settle bets and detect fraud.

We do not use your data for marketing emails, behavioral advertising, or third-party sales. If we run seasonal promotions (around Idul Fitri, Idul Adha, or Imlek), we notify you only through in-app messages or your registered email if you have opted in to promotional emails.

Third-Party Processors

We work with external processors who handle specific functions. Payment processors (like DANA, e-wallet, and our bank partners) receive only the data needed to process your transaction. KYC verification vendors receive your ID and selfie only for verification. Our email service provider sends your account notifications but does not use your email for marketing.

All processors sign data-protection agreements and are prohibited from using your data for their own purposes. Our servers may sit outside your jurisdiction—if you reside in Jakarta, Surabaya, Bandung, or Medan, your data may be processed internationally. By using deragon22, you consent to this international processing.

Your data rights on deragon22

  • Right to access: Request a copy of your data anytime
  • Right to correction: Update incorrect information in your account
  • Right to deletion: Request deletion of non-essential data after account closure
  • Right to portability: Receive your data in standard format
  • Right to object: Opt out of promotional communications

Data Retention and Deletion

We keep your account data as long as your account is active. After you close your account, we retain transaction records for seven years for financial compliance. We delete KYC documents (ID photos, selfies) after three years unless you request earlier deletion. Game history is archived for five years then deleted automatically.

If you request data deletion, we remove personal information (email, phone, name) within 30 days, but we retain encrypted transaction records required by law. You can request your data or schedule deletion by contacting our support team.

Data Security and Encryption

We encrypt all data in transit (using TLS protocol) and at rest (using AES-256 encryption). Your password is hashed and cannot be viewed by staff—if you forget it, we send a reset link to your email. Access to your account data is restricted to authorized employees on a need-to-know basis. We audit access logs regularly and revoke access for staff who leave deragon22.

Our servers are protected by firewalls, intrusion detection, and regular security testing. We do not guarantee absolute security—no system is completely immune to attack—but we maintain industry-standard protections.

Jurisdiction and Legal Compliance

deragon22 operates under jurisdiction-restricted access principles. Our services are available only where local law permits. If we receive a legal order from authorities, we comply with data requests as required by law. Users are responsible for verifying that their access and use comply with their own jurisdiction's legal framework.

Updates to This Policy

We may update this privacy policy as our platform evolves or regulations change. We notify users of material changes via email and in-app alert. Continued use of deragon22 after the notice period constitutes acceptance of the new policy.

deragon22 Data Protection Team
Privacy and Compliance Officer

We treat your personal data as confidential and protect it with the same care we expect for our own. Questions about how we handle your information? Contact us anytime.

Contact Us About Privacy

To request access to your data, exercise your rights, or report a privacy concern, reach our support team via live chat (in-app), email, or phone. We respond to privacy requests within 10 business days. If you believe we have mishandled your data, you have the right to lodge a complaint with your local data-protection authority.