growdicePrivacy Policy

This page describes what we collect when you use growdice and how we keep that data protected. When you open an account, deposit via DANA or e-wallet, or place a wager during Liga 1 matches, we record your activity. That data stays encrypted on our servers and is never sold to third parties without your consent or unless required by law.

We at growdice are committed to transparency about data handling. You have the right to know what we collect, how long we keep it, who can access it, and how to request deletion. This policy explains each of these points in plain language, so you understand our privacy practices before and after you use our platform.

If you have questions about how we use your data, contact our support team. We respond during business hours. Our services are available only in jurisdictions where local law permits; data handling practices comply with the regulations that apply in your region.

What We Collect and Why

Account Registration Data

When you register for growdice, we collect your email address, name, date of birth, phone number, and password. We use this data to create and manage your account, verify your identity during KYC, send you account notifications, and help you recover your account if you forget your password. This information is mandatory; we cannot create an account without it.

Your email is also used for marketing communications if you have opted in. You can disable marketing emails at any time via your account settings or by clicking the unsubscribe link in any email from us.

Payment and Transaction Data

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or mobile banking, we record the payment method, amount, date, and transaction reference. We keep this data to process withdrawals, prevent fraud, and comply with anti-money-laundering regulations. Your payment card or e-wallet account number is never stored on our servers; instead, it is tokenized by the payment processor and we store only the token. This means we cannot see your full card number or e-wallet credentials.

Your transaction history is private and visible only to you and our support team. We do not share transaction data with marketing companies, advertisers, or other third parties.

Wager and Game Activity

We at growdice record every wager you place—the game, stake, outcome, time, and result. This data is used to settle your account balance, resolve disputes, detect abuse (e.g., collusion between players), and comply with regulatory audits. Your wager history is kept indefinitely while your account is active; after account closure, we retain it for seven years as required by most gaming jurisdictions.

Game activity during tournaments like Liga 1, Piala AFF, or Piala Indonesia is subject to the same privacy protection as casual play. We do not share individual wager details publicly; aggregated, anonymized data may be used for platform analytics.

Device and Location Data

When you access growdice, we log your IP address, browser type, operating system, and approximate location (based on IP geolocation). We use this data to detect fraud, prevent access from prohibited jurisdictions, and improve platform performance. Location data helps us enforce jurisdiction restrictions; if you attempt to access growdice from a region where our services are not available, your account will be suspended.

We do not use GPS location from your device; we rely only on IP-based geolocation. If you use a VPN, we may reject or flag your session as suspicious.

Data we collect on growdice

  • Email, name, date of birth, phone number, government ID (during KYC)
  • Payment method, amount, date, and transaction reference (but not full card/wallet credentials)
  • Every wager: game, stake, outcome, timestamp, result
  • IP address, browser type, operating system, and approximate location
  • Support communications: emails, chat logs, and dispute documentation

Our growdice Data Protection Practices

Data Storage and Security

We store all data on encrypted servers located outside your jurisdiction (typically in data centres in Singapore or the Netherlands). Data is encrypted both in transit (via HTTPS) and at rest (via AES-256 encryption). Our servers are protected by firewalls, intrusion detection, and regular security audits. We do not store passwords in plain text; they are hashed using industry-standard algorithms.

Access to your data is restricted to essential staff (account support, compliance, fraud detection) on a need-to-know basis. All staff sign non-disclosure agreements. We conduct annual security training and penetration tests to identify and fix vulnerabilities.

Third-Party Processors

We use third-party processors to handle payments, email delivery, and analytics. Our payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive only the data necessary to process your transaction. Email providers receive your email address and name. Analytics services receive aggregated, anonymized data only (not personal identifiers).

All third-party processors sign data-processing agreements confirming they will not use your data for their own purposes and will comply with applicable privacy laws. We do not share data with advertisers, data brokers, or marketing networks.

Cookies and Tracking

We at growdice use cookies to remember your login session, preferences, and account balance. Essential cookies are necessary for the platform to function; you cannot disable these. Optional cookies track how you navigate the platform to help us improve user experience. You can disable optional cookies in your browser settings without losing platform functionality.

We do not use third-party tracking pixels or cross-site cookies. Our analytics do not track you across other websites.

Data retention
Active accounts: indefinite. Closed accounts: seven years (regulatory requirement). Then deleted unless law requires longer retention.
Encryption standard
AES-256 at rest; TLS 1.2+ in transit. Passwords hashed with bcrypt or equivalent.
Data location
Servers outside your jurisdiction (typically Singapore or Netherlands). Subject to local data protection laws where physically located.
Access controls
Staff access limited to need-to-know. All staff sign non-disclosure agreements. Annual security training required.

Your Rights and Data Requests

You have the right to request a copy of all data we hold about you. Contact our support team with "Data Export Request" in the subject line. We will compile your data and send it within a standard business window (typically 5–10 working days). The export includes account details, transaction history, and wager records in a portable format (CSV or JSON).

You can also request data correction (if information is inaccurate) or deletion (if you close your account and request permanent erasure). Deletion requests are processed within 30 days for active data; archived data required for regulatory compliance is retained as described above.

Legal Compliance and Disclosure

We at growdice comply with applicable privacy laws in jurisdictions where our services operate. If we receive a legal request (subpoena, court order, or law enforcement request) for your data, we will disclose only the minimum required by law and will notify you unless legally prohibited. We do not voluntarily share data with government agencies.

Our servers may sit outside your jurisdiction. This means your data may be subject to the privacy laws of the country where our servers are located (e.g., Singapore or Netherlands) in addition to your local laws. By using growdice, you accept this cross-border data transfer.

Dispute Resolution and Contact

If you have a privacy concern or believe we have mishandled your data, contact our support team at the email or in-app channel listed in our footer. We will respond within a standard business window. If you are unsatisfied with our response, you may lodge a complaint with your local data protection authority (e.g., the Indonesian Ministry of Communication and Information Technology if you are in Jakarta, Surabaya, Bandung, or Medan).

Your privacy protections
  • Data encrypted in transit and at rest
  • No sale of personal data to third parties
  • Right to access, correct, or delete your data
  • Annual security audits and staff training
Privacy limitations
  • Servers located outside your jurisdiction; subject to foreign data laws
  • Data retained 7 years post-closure for regulatory compliance
  • Legal requests may compel disclosure; we notify only where not prohibited

Policy Updates

We may update this privacy policy to reflect changes in our practices, technology, or legal requirements. Updates are posted on this page with a revised date. Major changes (e.g., new third-party processors or extended data retention) will be communicated to you via email at least 30 days before taking effect. Your continued use of growdice after an update constitutes acceptance of the new policy.

Our commitment to protecting your data is fundamental to how we operate growdice. We believe transparency builds trust. If you have suggestions for improving our privacy practices, contact our compliance team. Our services are available only where local law permits; privacy safeguards apply uniformly across all supported regions.