sdy6d Privacy Policy

1.1 This Privacy Policy ("Policy") describes how sdy6d ("the Platform", "we", "us", "our"), accessible at https://sdy6d.cam, collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who visit, register on, or otherwise interact with the sdy6d platform.

1.2 sdy6d primarily serves the Indonesian market and directs its services at adult Indonesian players aged 21 and above. Where references to Indonesian law appear in this Policy, they are illustrative of the local context in which sdy6d operates; the Platform's overarching data-protection obligations are governed by internationally recognised data-privacy standards as further described in Clause 12.

1.3 By creating a sdy6d Account, accessing the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

1.4 This Privacy Policy should be read in conjunction with the sdy6d Terms & Conditions, which govern your use of the Platform as a whole.

For the purposes of this Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, mobile number, date of birth, financial account details, device identifiers, and IP addresses.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" — sdy6d, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — any third-party entity that processes Personal Data on behalf of sdy6d under a data-processing agreement (e.g., payment processors, KYC verification providers).
• "Cookies" — small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation.
• "KYC" — Know Your Customer identity-verification procedures required for anti-money-laundering compliance.
• "IDR / Rp" — Indonesian Rupiah, the primary currency used for transactions on sdy6d.

3.1 sdy6d collects only the Personal Data that is necessary for the legitimate operation of a licensed online betting platform. The categories of data we collect are set out in the table below:

3.2 sdy6d does not collect Special Category data (e.g., racial or ethnic origin, political opinions, health data, biometric data used for identification) except where a document submitted for KYC purposes incidentally contains such information, in which case it is stored only for the minimum period necessary to complete verification.

4.1 Directly from you, when you:

• Register for a sdy6d Account and complete the onboarding form;
• Complete KYC verification by submitting identity documents;
• Make a deposit or request a withdrawal via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or cryptocurrency;
• Contact customer support via Live Chat, email, or WhatsApp;
• Set Responsible Gaming preferences such as deposit limits or self-exclusion;
• Respond to surveys or promotional communications.

4.2 Automatically, when you interact with the Platform, through:

• Session cookies and local storage mechanisms that record login state and user preferences;
• Analytics tools that log page visits, game sessions, and feature usage;
• Server logs that capture IP addresses, device identifiers, and timestamps;
• Fraud-detection systems that monitor transaction patterns and login behaviour.

4.3 From third parties, specifically:

• KYC and identity-verification service providers who cross-reference documents against official databases;
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, e-wallet operators) who confirm transaction completion;
• Fraud-prevention and AML screening databases;
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe) who return game-session outcome data to sdy6d.

5.1 sdy6d processes your Personal Data on one or more of the following legal bases:

5.2 sdy6d does not use your Personal Data for automated decision-making that produces legal or similarly significant effects, except for fraud-screening processes that flag accounts for human review.

6.1 sdy6d does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Data sharing is limited to the following categories of recipients, under binding contractual obligations to protect your data:

• Payment processors and banking partners — BCA, BRI, BNI, Bank Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and cryptocurrency network infrastructure providers — receive only the transaction data necessary to execute deposits and withdrawals;
• KYC and identity-verification providers — receive identity documents and personal details solely to complete the verification process;
• AML and fraud-screening services — receive transaction data and account identifiers to perform automated risk screening;
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) — receive a Player identifier and session token to deliver game content; they do not receive your financial or identity data;
• IT infrastructure and hosting providers — operate the servers on which sdy6d data is stored, under strict data-processing agreements;
• Customer support tooling providers — process support-ticket content to facilitate helpdesk operations;
• Regulatory and law-enforcement authorities — when legally required by applicable law, court order, or regulatory direction.

7.1 sdy6d retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data — retained for the lifetime of the Account and for a minimum of five (5) years following Account closure, to satisfy AML record-keeping obligations under our gaming licence;
• Transaction data — retained for a minimum of five (5) years from the date of the transaction, or longer where required by applicable AML regulations;
• KYC documentation — retained for the lifetime of the Account and for a minimum of five (5) years following Account closure;
• Customer support communications — retained for three (3) years from the date of the communication, unless ongoing dispute resolution requires longer retention;
• Technical and usage data (server logs, session data) — retained for a maximum of twelve (12) months from collection date;
• Marketing consent records — retained for three (3) years from the date consent was granted or withdrawn.

7.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with industry-standard data-destruction practices.

8.1 sdy6d implements a layered security architecture to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and sdy6d servers is encrypted using 256-bit SSL/TLS encryption. The sdy6d certificate is maintained with a valid CA-signed certificate verified on each connection;
• Password hashing: Account passwords are stored using bcrypt with an appropriate cost factor. sdy6d never stores passwords in plaintext or in reversibly encrypted form;
• Two-Factor Authentication (2FA): All Players are encouraged to enable 2FA on their Accounts. 2FA is mandatory for withdrawal requests exceeding Rp 10.000.000 per day;
• Access controls: Internal access to Player Personal Data is restricted to staff with a documented operational need. All internal access is logged and audited;
• Penetration testing: The Platform undergoes independent third-party penetration testing on a quarterly basis;
• Data segmentation: Player funds are held in accounts segregated from sdy6d operational capital. Financial data is stored in systems isolated from publicly accessible platform components.

8.2 In the event of a Personal Data breach that poses a risk to your rights and freedoms, sdy6d will notify affected players without undue delay and will take immediate remedial action in accordance with our incident-response procedures.

9.1 sdy6d uses cookies and similar technologies to operate the Platform effectively. Cookies are small text files stored on your device that help the Platform recognise your browser and remember your preferences across sessions.

9.2 Types of cookies used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing core Platform functionality;
• Functional cookies: Remember your language preference, display settings, and notification preferences. Disabled if you clear your browser cache;
• Analytics cookies: Collect aggregated, anonymised data on how players navigate the Platform — which pages are visited most, which features are used, average session duration. Used to improve the product;
• Security cookies: Support fraud-detection and bot-prevention systems by recording device fingerprinting signals and behavioural patterns during a session.

9.3 sdy6d does not use third-party advertising cookies or retargeting pixel technologies. No external ad network receives your data from sdy6d for behavioural advertising purposes.

9.4 You may configure your browser to refuse or delete cookies; however, doing so may cause certain Platform features (including login persistence and game-session continuity) to function incorrectly.

10.1 You hold the following rights in respect of your Personal Data held by sdy6d. To exercise any of these rights, submit a request to [email protected] with your Account details and a description of the right you wish to exercise. sdy6d will respond within 30 days.

10.2 Please note that certain rights are subject to limitations where processing is required to fulfil a legal obligation (e.g., AML record-keeping requirements may prevent immediate erasure of transaction history). sdy6d will explain any such limitations when responding to your request.

11.1 sdy6d strictly prohibits access to its Platform by individuals under 21 years of age. The Platform is not directed at minors and sdy6d does not knowingly collect Personal Data from persons under 21.

11.2 If sdy6d becomes aware that Personal Data has been collected from a person under 21 — whether through KYC review, a parental report, or any other means — the relevant Account will be immediately suspended, any balance returned to the source funding method, and all Personal Data associated with that Account permanently deleted, subject only to any mandatory AML record-keeping obligations.

11.3 If you are a parent or guardian and believe your child has attempted to register on sdy6d, please contact us immediately at [email protected].

12.1 sdy6d's platform infrastructure includes servers hosted in multiple geographic regions to ensure performance and resilience for players across Indonesia, including Jakarta, Surabaya, Medan, Bandung, Bali, and other cities. As a result, your Personal Data may be transferred to and stored on servers located outside Indonesia.

12.2 Where Personal Data is transferred to a third country, sdy6d ensures that appropriate safeguards are in place — including Standard Contractual Clauses (SCCs) or equivalent internationally recognised data-transfer mechanisms — to maintain a level of data protection equivalent to the standards described in this Policy.

12.3 Third-party Data Processors (payment gateways, KYC providers, analytics services) who process data outside Indonesia are contractually obligated to implement data-protection standards no less stringent than those described in this Policy.

13.1 The sdy6d Platform may embed or reference third-party services including game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe), payment gateways, and infrastructure services. These third parties operate under their own privacy policies and sdy6d is not responsible for their data-handling practices beyond the contractual obligations described in Clause 6.

13.2 Game content delivered by third-party studios is streamed within the sdy6d interface. The studio receives a session token and game-outcome data; it does not receive your financial details or KYC documentation.

13.3 sdy6d does not embed external advertising networks, social media tracking pixels, or affiliate-attribution technologies that would share your Personal Data with external marketing platforms.

14.1 sdy6d reserves the right to update this Privacy Policy at any time to reflect changes in data-processing practices, platform functionality, or applicable legal requirements. The current version of this Policy is always available at https://sdy6d.cam/privacy-policy.

14.2 Material changes — those that affect your rights or the way your data is used — will be communicated to registered Players via email or in-app notification at least seven (7) days before taking effect. Non-material changes (such as editorial corrections or clarifications) take effect immediately upon publication.

14.3 Your continued use of the Platform following notification of any amendment constitutes acceptance of the updated Policy. If you do not accept the updated terms, you must cease using the Platform and may request Account closure in accordance with the sdy6d Terms & Conditions.

15.1 For any privacy-related queries, data-subject rights requests, or complaints regarding sdy6d's data-handling practices, please contact us through the following channels:

15.2 If you are not satisfied with sdy6d's response to a privacy complaint, you have the right to escalate the matter to the relevant data-protection supervisory authority or to seek resolution through applicable legal channels.