Privacy Policy

This Privacy Policy explains how DLALIO handles personal information when users register, use the application, publish content, participate in LIVE streaming, send gifts, request withdrawals, or interact with available features.

DLALIO aims to handle personal information responsibly and in accordance with applicable data-protection law.

Depending on the features actually used, DLALIO may process:

Account information: usernames, account identifiers, email addresses, profile information, and account settings.

Content and communications: uploaded content, LIVE stream content, messages, comments, support requests, reports, and appeals where those features exist.

Transactions: purchase records, gift records, Gems, withdrawal requests, transaction identifiers, amounts, currencies, payment status, and relevant payout references.

Technical and security information: IP addresses, device and browser information, login events, session information, technical logs, and security alerts where collected.

Usage information: interactions with features, settings, and relevant service-performance information where actually recorded.

Verification information: information needed to verify account or withdrawal eligibility where such verification is implemented. This includes the face-verification information described in section 17, but does not include identity documents, passport numbers or national ID numbers.

The published Policy must accurately reflect the information DLALIO actually collects. The application must not claim to collect information that it does not collect.

Information may be provided directly by users, generated through use of the service, or received from service providers where necessary to provide payments, hosting, account security, verification, or other supported features.

Information received from other sources must be handled lawfully and with any required notices or permissions.

DLALIO may use personal information, where appropriate and lawful, to:

• Create and manage accounts.
• Authenticate users and protect accounts.
• Provide content, LIVE streaming, and community features.
• Process purchases, gifting, rewards, and withdrawals.
• Respond to customer-support requests.
• Moderate content and investigate reports.
• Detect fraud, abuse, and security incidents.
• Maintain and improve service reliability.
• Meet legal, financial, and recordkeeping obligations.
• Resolve disputes and protect legal rights.

Information must not be used for an incompatible or undisclosed purpose unless permitted by law and any required notice or consent has been provided.

Where required by applicable law, DLALIO will identify a lawful basis for processing personal information. Depending on the circumstances, this may include performing a contract, complying with legal obligations, pursuing legitimate interests where permitted, or obtaining consent where required.

Users must be able to withdraw consent where applicable law grants that right.

DLALIO may share relevant information with service providers that support the actual operation of the platform, such as hosting providers, payment providers, account-security providers, and support services.

Information may also be disclosed where required or lawfully permitted by courts, regulators, law-enforcement authorities, or other relevant parties.

Service providers must receive only the information reasonably necessary for their functions and be subject to appropriate safeguards.

The final Policy must identify actual data-sharing arrangements where required by law. Do not invent a list of providers.

DLALIO may use cookies or similar technologies for authentication, session management, security, preferences, or other features that are actually implemented.

Optional analytics or advertising technologies must be handled according to applicable consent and disclosure requirements.

The application must not claim that a third-party analytics or advertising tool is in use unless it is actually configured.

DLALIO retains personal information only for as long as reasonably necessary for the relevant purposes, subject to applicable legal obligations and legitimate requirements involving security, fraud prevention, disputes, or legal claims.

Different types of records may have different retention periods.

Where information is no longer required and no valid retention obligation applies, it should be securely deleted or anonymized as appropriate.

Account closure does not automatically require immediate deletion of every record.

DLALIO must maintain appropriate technical and organizational measures to protect personal information.

Depending on the actual implementation, safeguards may include access controls, authentication protections, encryption, audit logs, backups, security monitoring, and incident-response procedures.

The published Policy must not claim that a safeguard is operational unless its implementation has been verified.

No online service can guarantee absolute security. Where a personal-information incident occurs, DLALIO will investigate and take any steps and notifications required by law.

Information may be processed in countries other than the user's country of residence if DLALIO's actual infrastructure or service providers require it.

Where international transfers occur, DLALIO will apply the safeguards required by applicable law.

Do not claim that information stays in a particular country unless that has been verified.

Subject to applicable law, users may have the right to request access to, correction of, or deletion of their personal information, and may have rights to object to or restrict certain processing, withdraw consent, obtain a portable copy of information, or complain to a relevant authority.

Requests may require identity verification to protect users against unauthorized disclosure.

Some requests may be limited by legal obligations, security needs, or other people's rights.

DLALIO must provide a functioning process for receiving and responding to privacy requests within the applicable legal time limits.

DLALIO is intended for users aged 18 and over.

DLALIO does not permit people under 18 to create or use accounts. Users must not misrepresent their age to access the service.

If DLALIO becomes aware that an account violates this age restriction, it may restrict or close the account and handle associated personal information in accordance with applicable law.

DLALIO may use automated systems for security monitoring, fraud detection, abuse detection, or content moderation where those systems are actually implemented.

Automated signals may help identify activity requiring investigation or protective action.

Where required by law, DLALIO will provide information about relevant automated processing and applicable ways to request review or challenge a decision.

The Policy must not claim that planned AI or security systems are operational when they are not.

Links and integrations may lead users to independent third-party services with their own privacy practices.

DLALIO's Privacy Policy does not automatically govern the processing performed independently by those services.

DLALIO may update this Policy to reflect changes in services, information practices, or legal requirements.

The current version and effective date must be displayed. Material changes must be communicated where appropriate and required by law.

Where new consent is required, it must be obtained through an appropriate process.

Face verification is optional for ordinary browsing and navigation. It confirms that a real, live person is behind the account and that the live face matches a reference photo, and can help protect the community from impersonation and fake accounts. Certain protected features — including LIVE hosting when the applicable policy is enabled, and promoter activation — may require verification as part of their eligibility rules. A successful verification may display the blue verified badge. DLALIO does not ask for an identity document, passport, national ID number or full verification video. Verification must not be represented as completed when it has not been completed.

What is processed. You choose one reference photo from your device. When you start a live check, the front camera captures a short burst of still frames. DLALIO's server sends the reference photo and frames to its contracted identity-verification provider, currently Luxand.cloud, which performs a liveness check (to detect a photo, screen, mask or other presentation attack) and a face-similarity comparison. DLALIO receives the provider's pass/fail results and reference identifiers, not a reusable face template.

What DLALIO stores. DLALIO stores the reference photo privately outside the public web root, together with its integrity hash, upload time and deletion time. The reference is deleted no later than 7 days after upload, and you can delete it earlier from the verification page. Live frames are processed in memory and are not stored by DLALIO. DLALIO does not store raw face embeddings or biometric templates. It keeps the decision, status, timestamps, provider reference, consent version, review reason and audit records so that a badge can be trusted, reviewed, corrected or revoked.

Consent and lawful basis. DLALIO relies on your explicit consent for the processing of face and biometric information. Consent is recorded with the notice version and a timestamp before the camera is opened or a reference is uploaded. You may withdraw consent at any time by deleting your reference photo and contacting Support. Withdrawing consent prevents completing verification; it does not block ordinary browsing or navigation. Some features may remain unavailable until verification requirements are met if they require it under their specific rules. You may still sign out, contact Support, manage account settings, or request account closure. Withdrawal does not affect processing that already occurred or records DLALIO must keep for legal, security or dispute purposes.

Automated decision and human review. The provider's liveness verdict and face-match verdict must both pass before DLALIO's server records a verification. A client-side flag, an uploaded image, an opened camera or a timeout can never approve an account. Where a result is inconclusive, the attempt may be placed in a review queue. Authorized reviewers see status metadata, not a downloadable biometric file. You can ask for an explanation of a decision, request human review, correct information, or challenge an adverse outcome through Support.

Access, sharing and retention. Access to biometric evidence is restricted to the verification service and authorized personnel who need it for review, security, or legal obligations. There is no public URL and no general administrative download route for a reference photo. The contracted provider processes the images under a data-processing arrangement and only for the verification service. Reference photos and decision records may be processed outside South Africa; where that happens, DLALIO applies the safeguards required by applicable law.

Your POPIA rights. Subject to applicable law, including the Protection of Personal Information Act, 2013 (POPIA), you may request access to your personal information, correction or deletion of it, an explanation of an automated decision, or restriction of or objection to processing, and you may withdraw consent. You may also complain to South Africa's Information Regulator. DLALIO will verify your identity before acting on a request and will respond within the time required by law. Some records may be retained where the law, security, fraud prevention, or a legal claim requires it.

Users may submit privacy requests or complaints through DLALIO's official privacy contact.