Privacy Policy

day01 ("we", "us", "our", or the "Platform") is committed to safeguarding the privacy of every individual who visits, registers with, or otherwise interacts with the day01 online betting platform at https://day01.net. This Privacy Policy sets out a clear and transparent account of how we handle personal information in connection with the operation of our sportsbook, live casino, slot games, virtual sports, and Bandar Q products.

This policy applies to all personal data processed by day01 in connection with:

• The creation and management of member accounts.
• Deposits, withdrawals, and all financial transactions conducted on the platform.
• Identity verification (KYC) processes required for regulatory compliance.
• Participation in promotions, bonuses, and loyalty programmes.
• Communications between members and the day01 support team via live chat, email, or WhatsApp.
• General browsing of the day01 website, including the collection of usage analytics and cookies.

day01 serves a primarily Indonesian audience. Members are required to be at least 21 years of age. If you are under 21, you must not register for or use the day01 platform, and you must not submit any personal data to us.

For the purposes of applicable data protection legislation, day01 is the data controller in respect of all personal data collected through the platform. This means day01 determines the purposes for which, and the manner in which, your personal data is processed.

Where day01 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification services, or analytics providers — those third parties act as data processors and are contractually required to process data only on day01's documented instructions and in compliance with applicable data protection standards.

day01 collects only the personal data that is necessary and proportionate for the purposes described in this policy. The categories of data we collect are set out in the table below:

day01 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where such data is incidentally contained within a KYC document (for example, a photograph on an ID card). Such incidentally contained sensitive data is processed only for identity verification purposes and is not used for any other purpose.

day01 collects personal data through the following channels:

• Direct submission by you: When you complete the registration form, update your account profile, submit KYC documents, make a deposit or withdrawal request, or contact our support team.
• Automated technical collection: When you visit and interact with the day01 platform, our servers and analytics tools automatically record technical data such as your IP address, device identifiers, session duration, and pages visited. This data is collected via server logs and cookies (see Section 9).
• Third-party payment processors: When you initiate a deposit or withdrawal, your bank or e-wallet provider (e.g., BCA, BRI, OVO, DANA) transmits transaction confirmation data — including the sender's account name and last-four digits — to day01 in order to match your payment to your account.
• Identity verification partners: Where day01 uses a third-party KYC or fraud-detection service to assist with identity verification, that service may return a verification status and risk score to day01. The underlying document images are processed by the partner under strict data-processing agreements.
• Customer support interactions: When you contact us via live chat, email at [email protected], or WhatsApp at +62 811 0000 1234, the content of those communications is retained as part of your account record.

day01 processes your personal data only where a valid legal basis exists. The table below maps each processing purpose to the applicable legal basis:

day01 does not sell, trade, or rent your personal data to any third party. We share data only in the limited circumstances set out below, and only to the minimum extent necessary for the stated purpose:

• Payment processors and banking partners: To execute your deposit and withdrawal instructions, day01 transmits the necessary financial data to your selected bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers act as independent data controllers in respect of their own services and are governed by their own privacy policies.
• KYC and identity verification partners: To fulfil our AML obligations, day01 may share identity documents and related data with licensed third-party identity verification service providers. These providers are engaged under strict contractual data-processing agreements.
• Game content providers: Game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive technical session data (e.g., session token, game ID, wager amounts) to facilitate gameplay and resolve disputes. No directly identifiable personal data such as your full name or bank details is shared with game studios.
• IT infrastructure and cloud service providers: day01 uses third-party hosting, database management, and content delivery providers. These providers process data on day01's behalf and are bound by data-processing agreements that prohibit any use of member data beyond the agreed service scope.
• Legal and regulatory authorities: day01 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by applicable law, a court order, or a lawful regulatory request. Where legally permitted, day01 will notify the affected member before making such a disclosure.
• Business succession: In the event of a merger, acquisition, or transfer of substantially all of day01's assets to a successor entity, member data may be transferred as part of that transaction. Affected members will be notified in advance, and the successor entity will be required to honour the terms of this Privacy Policy.

day01's primary member base is located in Indonesia, and our core operational infrastructure is designed to serve this market. However, some of our third-party service providers — including cloud hosting providers, analytics platforms, and KYC partners — may be based in or operate data centres outside Indonesia.

Where personal data is transferred to a jurisdiction that does not have data protection laws equivalent to those applicable to day01, we implement appropriate safeguards to protect that data, including:

• Standard contractual clauses (SCCs) incorporated into data-processing agreements with the recipient party.
• Technical security measures, including encryption at rest and in transit, applied to all transferred data.
• Access controls that limit who within the recipient organisation can view or process identifiable member data.

By using the day01 platform, you acknowledge that your personal data may be processed in countries outside Indonesia and consent to such transfers being conducted under the safeguards described above.

day01 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below represent our standard practice:

When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised and aggregated data (from which you cannot be identified) may be retained indefinitely for analytical and research purposes.

day01 uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience on the platform. A cookie is a small text file placed on your device when you visit a website. The types of cookies we use are described below:

As a day01 member, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request — [Right Type]". We will acknowledge your request within 48 hours and respond in full within 30 days.

day01 sends promotional communications — including bonus offers, free bet announcements, seasonal promotions tied to events such as BRI Liga 1 fixtures, Idul Fitri, or Ramadhan campaigns, and new game launch notifications — only to members who have explicitly opted in to receive such communications.

• Opt-in: During registration, you will be given a clear choice to opt in to marketing communications via email, SMS, or WhatsApp. This consent is entirely optional and is not a condition of creating an account.
• Opt-out: You may withdraw your marketing consent at any time by clicking the unsubscribe link in any marketing email, replying "STOP" to any marketing SMS or WhatsApp message, or by contacting support. Withdrawal of consent will be processed within 5 business days.
• Service communications: Regardless of your marketing preferences, day01 will continue to send you essential service communications — such as account security alerts, deposit/withdrawal confirmations, KYC request notifications, and updates to these policies. These are not marketing communications and cannot be unsubscribed from while your account is active.

The day01 platform is strictly intended for adults aged 21 and over. day01 does not knowingly collect, store, or process personal data from any individual under the age of 21. If we become aware that a member has provided false information about their age during registration, we will immediately suspend the account, void any associated bets or winnings, and securely delete all personal data associated with that account.

If you are a parent or guardian and believe that a minor in your care has registered an account with day01, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

day01 supports the responsible gaming initiatives described in our Responsible Gaming Policy and actively works to prevent access by underage individuals. Members who suspect that a minor is accessing the platform using their account credentials should contact support immediately and change their account password.

day01 implements a comprehensive set of technical and organisational security measures to protect member data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Transport Layer Security (TLS 1.2/1.3): All data transmitted between your device and the day01 platform is encrypted using industry-standard TLS protocols. Our SSL certificate is maintained and renewed continuously to prevent lapses in encryption coverage.
• Encryption at rest: Sensitive data fields — including bank account details, identity document references, and password hashes — are encrypted at rest using AES-256 encryption. Passwords are hashed using bcrypt with a per-user salt and are never stored in recoverable plain text.
• Access controls: Internal access to member data is granted on a strict need-to-know basis using role-based access control (RBAC). All internal access events are logged with timestamps and reviewed periodically by our security team.
• Two-factor authentication (2FA): Members are strongly encouraged to enable 2FA on their day01 accounts. 2FA adds an additional layer of security by requiring a one-time code in addition to your password when logging in from an unrecognised device.
• Penetration testing and vulnerability scanning: day01 conducts periodic penetration tests and automated vulnerability scans on its infrastructure to identify and remediate security weaknesses before they can be exploited.
• Incident response: day01 maintains a documented security incident response plan. In the event of a confirmed data breach, our response team will assess the scope and impact, notify affected members without undue delay where required, and take all necessary steps to contain and remediate the incident.
• Staff training: All day01 personnel who handle member data receive regular data protection and security awareness training. Personnel are bound by confidentiality obligations as a condition of their engagement.

The day01 platform may contain links to third-party websites or services — for example, game studio promotional pages or payment provider information portals. These third-party sites operate independently of day01 and are governed by their own privacy policies, which day01 neither controls nor endorses.

day01 is not responsible for the privacy practices of any third-party website you may access via a link on the day01 platform. We strongly recommend that you review the privacy policy of any third-party site before providing any personal data to that site.

day01 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or platform functionality. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

• Material changes: Where a proposed change materially affects the way in which day01 processes your personal data, we will provide advance notice by displaying a prominent notice on the platform and, where we hold a verified email address for you, by sending a notification email at least 14 days before the change takes effect.
• Minor changes: Non-material updates — such as clarifications of existing language, corrections of typographical errors, or the addition of new contact details — may be made without advance notice, though the "Last Updated" date will always be updated to reflect the revision.
• Continued use: Your continued use of the day01 platform after a revised Privacy Policy has taken effect constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with a revised policy, you should discontinue use of the platform and contact support to discuss account closure.

Archived versions of previous Privacy Policy editions are available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way day01 handles your personal data, please reach out to our team through any of the channels below. We are committed to responding promptly and transparently to all privacy-related enquiries.

• Email: [email protected] — use subject line "Privacy Request" for data rights enquiries. Responses within 24–48 hours on business days (WIB).
• Live Chat: Available 24/7 directly on the day01 platform. For sensitive data matters, please use email to create a written record of your request.
• WhatsApp: +62 811 0000 1234 — available for general privacy enquiries in Indonesian or English. Please note that account data decisions must be confirmed via email for security reasons.