divaPrivacy Policy

This page describes what we collect when you use diva and how we keep that data protected. Our privacy practices apply to all account holders accessing our sportsbook, live-dealer tables, slot games, and esports markets. We collect personal information to verify your identity, process deposits and withdrawals, settle game outcomes, and comply with applicable law. We do not sell your data to third parties for marketing purposes, but we may share it with payment processors, identity-verification services, and legal authorities when required.

We at diva operate across multiple jurisdictions where online gaming is legally available. Your data may be stored on servers located outside your home country, subject to the data-protection standards we maintain. This policy explains what information we collect, how we use it, who has access to it, and what rights you have regarding your personal data.

By creating a diva account, you consent to the data practices described in this policy. If any practice conflicts with your expectations or local law, we encourage you to contact our privacy team before depositing funds or engaging in gameplay.

What Data We Collect at diva

We at diva collect personal information in several categories. First, we collect identity data: your full name, date of birth, address, government-issued identification number, and proof of address (utility bill, bank statement, or equivalent). This information is mandatory for account verification and Know Your Customer (KYC) compliance. We do not activate real-money gameplay until identity verification is complete.

Second, we collect payment information. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we record your payment method, transaction amount, and timestamp. We do not store full payment credentials (such as complete card numbers or wallet passwords); instead, we store a reference token provided by your payment processor. This token allows us to process future transactions without re-entering sensitive details.

Third, we collect gameplay data. Every slot spin, live-table hand, and sports wager is logged with the wager amount, outcome, settlement time, and resulting balance change. We retain this data indefinitely for dispute resolution, fraud detection, and regulatory compliance. Your account statement displays this history, and you can download transaction records at any time.

Data retention: We at diva retain identity and payment data for the duration of your account plus seven years after closure, as required by financial-services regulations. Gameplay data is retained indefinitely.

Fourth, we collect technical data. When you access diva, we log your IP address, device type, browser version, and approximate geographic location (derived from IP). We use this data to detect fraud, prevent unauthorized access, and understand platform usage patterns. We do not use this data for marketing or behavioral profiling.

How We Use Your Data

We use identity data to verify your eligibility to use diva, comply with Know Your Customer regulations, and prevent fraud. We share this data with third-party identity-verification services (such as document-scanning providers) to confirm the authenticity of your submitted documents. These services operate under strict confidentiality agreements and do not retain your data after verification is complete.

We use payment data to process deposits and withdrawals, reconcile transactions, and detect suspicious activity. We share payment information with your chosen payment provider (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, or your bank) to complete the transaction. We do not share payment data with any other third party without your explicit consent.

We use gameplay data to settle outcomes accurately, resolve disputes, and detect fraud or collusion. We do not use gameplay data for marketing, profiling, or any purpose unrelated to platform operations. Your gameplay history is visible only to you and to our support team when investigating disputes or account issues.

We use technical data to maintain platform security, detect unauthorized access attempts, and understand usage patterns. We do not use technical data to build behavioral profiles or target you with marketing. We may aggregate technical data (such as "X% of users access diva from mobile devices") for internal reporting, but this aggregation does not identify you personally.

1

Identity verificationPurpose

We use identity data to confirm your eligibility and comply with regulatory requirements. This data is shared with third-party verification services only.
2

Payment processingPurpose

We use payment data to complete deposits and withdrawals. Payment information is shared only with your chosen payment provider.
3

Dispute resolutionPurpose

We use gameplay data to investigate disputes and resolve account issues. This data is accessed only by our support and compliance teams.
4

Fraud detectionPurpose

We use technical and gameplay data to detect suspicious patterns and prevent unauthorized access. Fraud detection is automated and does not involve manual profiling.

Your Rights and Our Data Protection Practices on diva

We at diva recognize your rights regarding your personal data. You have the right to access your data: you can download your account statement, identity documents, and transaction history at any time via your diva dashboard. You have the right to correct inaccurate data: if your name, address, or other information is incorrect, contact our support team and we will update it. You have the right to request deletion of your data, subject to legal retention requirements: we will delete your account and associated data upon request, except for information we are required to retain by financial-services or anti-money-laundering regulations.

We at diva employ industry-standard security measures to protect your data. All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). Data stored on our servers is encrypted at rest using AES-256 encryption. We restrict access to your data to employees and contractors who need it to perform their job functions. We conduct regular security audits and penetration testing to identify and remediate vulnerabilities. However, no security measure is absolute; while we maintain robust protections, we cannot guarantee that your data will never be compromised.

Note: Our servers may be located outside your home jurisdiction. By using diva, you consent to the transfer and storage of your data in jurisdictions where we operate, subject to the data-protection standards we maintain.

We at diva do not use cookies for tracking or profiling. We use session cookies (temporary cookies that expire when you close your browser) to maintain your login state and remember your preferences. We do not use third-party cookies or analytics services that track your behavior across websites. You can disable cookies in your browser settings; doing so may limit some diva features but will not prevent core functionality.

We at diva do not share your data with third parties for marketing purposes. We may share data with payment processors, identity-verification services, and legal authorities as described in this policy. We do not sell your data, and we do not permit third parties to use your data for their own purposes. If we are acquired or merge with another company, we will notify you and provide an opportunity to opt out before your data is transferred to the new entity.

If you have questions about our privacy practices, believe we have misused your data, or wish to exercise your rights regarding your personal data, contact our privacy team via the in-app support form or email. We respond to privacy inquiries within ten business days. If you are unsatisfied with our response, you may escalate your complaint to the data-protection authority in your jurisdiction.

diva privacy team

Data protection and compliance officer

Our privacy team maintains this policy to reflect current data practices and applicable regulations. We update this policy periodically; continued use of diva after an update constitutes acceptance of the revised policy.

Legal and Jurisdiction Information

Service availability

We at diva provide our gaming and sportsbook services only in jurisdictions where such activities are legally permissible under applicable local law. Our services—including slot games such as Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, and Mahjong Ways; live-dealer tables including roulette, baccarat, blackjack, and Dragon Tiger; sportsbook markets covering Liga 1, Piala AFF, Champions League, and Piala Indonesia; and esports offerings like Mobile Legends, Free Fire, and PUBG Mobile—are offered only where the applicable law permits them. We do not advertise, market, or offer access to diva in regions where online gaming or sportsbooks are prohibited by statute or regulatory framework. Account holders are solely responsible for determining whether access to diva complies with the laws of their own location. We maintain no published list of "approved" or "restricted" jurisdictions because such determinations vary by region and change over time. Instead, we operate on the principle that diva services are available where the applicable law permits them. Before creating an account on diva, depositing funds via DANA, OVO, GoPay, ShopeePay, LinkAja, QRIS, BCA, Mandiri, BRI, or BNI, or wagering, we recommend that you verify the legal status of online gaming in your jurisdiction. Consult local legal counsel or your jurisdiction's gaming regulator if you are uncertain. Our terms of service include binding language stating that we do not offer services in jurisdictions where online wagering is prohibited. By creating a diva account, you implicitly represent that your access is lawful under your local law.

Account eligibility

Account creation on diva requires that you meet the minimum age and legal capacity requirements established by your jurisdiction. We do not impose a universal age threshold because the legal age of majority varies across regions. Instead, we require all account applicants to submit identity verification documents (government-issued identification, proof of address, or equivalent). Our verification team reviews submitted documents to confirm that you meet your jurisdiction's legal eligibility criteria before account activation and before permitting real-money wagering on slots, live tables, or sports markets. Users who are under the legal age of majority in their region, who lack legal capacity due to guardianship or court order, or who are otherwise ineligible under applicable law cannot open or maintain a diva account. We also reserve the right to decline account creation or suspend an existing account if we reasonably believe a user does not meet eligibility criteria. This verification process applies uniformly to all applicants; we make no exceptions based on perceived risk or user profile. Once your account is active, continued eligibility is assumed unless we receive information indicating otherwise.

Local-law responsibility

You acknowledge and accept that access and use of diva are entirely your responsibility. Before creating an account, depositing funds, or placing any wager or gaming activity on our platform, you must independently verify that all such actions comply with the laws, regulations, and licensing requirements applicable to your jurisdiction. We publish our terms of service and this privacy policy to inform you of our operational framework, but we cannot and do not provide individual legal advice regarding the lawfulness of your access or gaming activity in your specific location. Laws governing online gaming, sportsbooks, and wagering services vary significantly across regions and change periodically. A jurisdiction that permits online gaming today may restrict or prohibit it tomorrow, and vice versa. You remain solely responsible for staying informed of legal changes that may affect your eligibility to use diva. If you continue accessing or using diva after becoming aware that such access violates your local law, that decision and any resulting legal consequences are yours alone. diva cannot be held liable for your failure to comply with your jurisdiction's laws, regulations, or licensing requirements, nor for any penalties, legal actions, or other consequences arising from such non-compliance.

Data and privacy scope

Our collection, use, and retention of your personal data are governed by this privacy policy. When you create a diva account and engage in gaming or sportsbook activities, we collect information necessary for identity verification (Know Your Customer, or KYC), payment processing, fraud prevention, and legal compliance. This includes your name, date of birth, address, government-issued identification number, bank account details or mobile-wallet credentials, and comprehensive transaction history covering all deposits, withdrawals, and gaming activity. We use this data to verify your eligibility and identity, process deposits and withdrawals through DANA, OVO, GoPay, ShopeePay, LinkAja, QRIS, BCA, Mandiri, BRI, BNI, detect suspicious or fraudulent activity, settle game outcomes and sports bets accurately, and comply with legal and regulatory obligations imposed by the jurisdictions in which diva operates. We do not share your personal data with third parties for marketing purposes, but we may disclose it to financial institutions, payment processors, identity-verification services, law enforcement agencies, and regulatory authorities if required by law, court order, or legitimate compliance obligation. Our data security practices include encryption of sensitive information, access controls limiting employee access to necessary data, and regular security audits. However, no security measure is absolute; while we employ industry-standard protections, we cannot guarantee that your data will never be compromised. For detailed information about what data we collect, how long we retain it, your rights regarding data access and deletion, and how we handle your information, please review this full privacy policy.

Contact for legal inquiries

If you have questions about our data practices, your privacy rights on diva, your jurisdiction's laws as they relate to our data handling, or concerns about potential regulatory violations, you may contact our privacy and compliance team via email or our in-app support form. We maintain a dedicated privacy-inquiry channel separate from general customer support to ensure your message reaches the appropriate department. Response times vary depending on inquiry volume and complexity, but we typically acknowledge receipt within one business day and provide a substantive response within ten business days. We do not provide individual legal advice; instead, we clarify how our data practices operate, how our privacy policy applies to your specific situation, and what options are available if you have concerns about data handling. In some cases, we may advise you that we are unable to maintain your account or process your requested transaction if we reasonably believe your circumstances fall outside the scope of jurisdictions where diva lawfully operates. For urgent privacy matters, data-breach notifications, or other time-sensitive inquiries, you may also contact our data protection officer through the formal privacy contact form available in the footer of our platform.