Privacy Policy — dki4d

This Privacy Policy ("Policy") applies to all personal data collected, stored, processed, and shared by dki4d ("we", "us", "our") in connection with the operation of the dki4d online gaming platform accessible at https://dki4d.cam ("Platform"). It applies to all registered players, visitors to the Platform, and any individual whose personal data is processed in connection with the use of our Services.

By registering an Account on dki4d, completing a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and dki4d, and our Responsible Gaming page, which describes the player-protection tools available to you.

We may update this Policy periodically. The most current version will always be available on this page, identified by the "Last Updated" date at the top. Material changes will be communicated to registered players via email or in-Platform notification.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

dki4d collects only the Personal Data that is necessary for the lawful, efficient, and secure operation of the Platform. The categories of Personal Data we collect are set out in the table below:

We collect Personal Data through the following channels:

• Direct submission: Data you provide when completing the registration form, the KYC verification process, deposit or withdrawal requests, or when contacting our customer support team by email or live chat.
• Automated technical collection: Data collected automatically when you access or use the Platform, including IP addresses, device identifiers, session logs, and cookie data. This collection occurs regardless of whether you are logged into your Account.
• Payment processors: Confirmation data returned by Indonesian bank transfer systems and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when a transaction is initiated or completed. dki4d does not receive or store your full bank account PIN or e-wallet authentication credentials.
• Third-party verification providers: Results of identity verification checks performed by accredited KYC/AML service providers engaged by dki4d to fulfil our compliance obligations.
• Game providers: Session and outcome data returned by licensed game studio partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) in respect of games played on the Platform.

dki4d processes your Personal Data for the following purposes:

1. Account creation and management: To register your Account, verify your identity, maintain your Account settings, and communicate with you about your Account status.
2. Service delivery: To provide access to sports betting, live casino, slots, togel, and all other gaming Services on the Platform.
3. Payment processing: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, and others) and e-wallets, and to reconcile transaction records in IDR.
4. KYC and AML compliance: To verify your age (21+) and identity as required by applicable international gaming and anti-money laundering standards, and to monitor transactions for suspicious activity.
5. Responsible gaming: To implement and enforce the deposit limits, time-out periods, and self-exclusion settings you configure through your Account, and to identify indicators of problem gambling behaviour where applicable.
6. Customer support: To respond to your inquiries, resolve disputes, and provide assistance with Account, payment, or game-related issues via live chat and email.
7. Platform security: To detect and prevent fraud, unauthorized Account access, bonus abuse, and other prohibited conduct as described in our Terms & Conditions.
8. Analytics and improvement: To understand how players use the Platform, identify technical issues, and improve the user experience, game catalog, and payment options.
9. Legal obligations: To comply with applicable laws, respond to lawful requests from regulatory authorities or law enforcement, and maintain records as required by international AML and gaming compliance frameworks.
10. Promotional communications: Where you have opted in, to send you information about bonuses, promotions, seasonal offers (e.g., Idul Fitri, Ramadhan, and Indonesian Independence Day promotions), and platform updates. You may withdraw this consent at any time through your Account settings or by contacting support.

dki4d does not process your Personal Data for purposes incompatible with those listed above without first obtaining your consent or establishing a separate lawful basis.

dki4d processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and dki4d — including Account registration, payment processing, game delivery, and customer support — is carried out on the basis that it is necessary to fulfill our contractual obligations to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and responding to regulatory or law enforcement requests.
• Legitimate interests: Processing carried out to pursue dki4d's legitimate business interests — including fraud prevention, platform security, analytics, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent — such as the receipt of promotional communications or the use of non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

dki4d does not sell or rent your Personal Data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors and banking partners: Indonesian bank transfer providers and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data required to process deposits and withdrawals in IDR.
• KYC and AML verification providers: Accredited third-party identity verification services receive identity document data solely for the purpose of completing the KYC verification required before withdrawals can be processed.
• Game studio providers: Licensed game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) receive a pseudonymized player identifier and the session data required to operate their games within the Platform. They do not receive your full name, contact details, or financial information.
• IT and infrastructure service providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on our behalf under binding data-processing agreements that restrict their use of your data to the services they provide to dki4d.
• Regulatory authorities and law enforcement: Where we are required by law, court order, or a binding request from a competent regulatory authority to disclose your Personal Data, we will do so to the minimum extent required to comply with the applicable legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of dki4d's assets, your Personal Data may be transferred to the acquiring entity, which will be bound by the terms of this Privacy Policy with respect to your information. You will be notified of any such transfer in advance.

dki4d retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Where Personal Data is no longer required for any of the above purposes, it is securely deleted or irreversibly anonymized. Anonymized aggregate data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes Personal Data.

The dki4d Platform uses cookies and similar technologies to operate securely and efficiently. We categorize our cookies as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display options, and previously selected payment methods, so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect anonymized data about how players navigate and use the Platform — including pages visited, time spent, and error events — to help us identify and fix technical issues and improve the user experience. This data does not identify you personally.

dki4d does not use third-party advertising cookies, social media tracking pixels, or any cross-site behavioral profiling technology.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from using the Platform. Blocking functional or analytics cookies will not affect your ability to place bets or access your Account, but may degrade certain conveniences such as saved preferences.

dki4d implements a multi-layered security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Our technical and organizational security measures include:

• TLS 1.3 encryption for all data transmitted between your device and our servers — ensuring your login credentials, financial data, and gaming activity are never sent in plain text;
• AES-256 encryption at rest for all sensitive Personal Data stored on our servers;
• Bcrypt password hashing — your password is never stored in plain text; only a cryptographic hash is retained;
• Two-factor authentication (2FA) available for Account login — we strongly encourage all players to enable this feature;
• Role-based access controls restricting staff access to Personal Data on a need-to-know basis;
• Regular independent security audits and penetration testing by accredited third-party security firms;
• DDoS protection and web application firewall (WAF) to defend against network-layer and application-layer attacks;
• Automated anomaly detection to identify and flag unusual login activity, payment patterns, or session behavior that may indicate unauthorized access or fraud.

In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, dki4d will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

As a player whose Personal Data is processed by dki4d, you hold the following rights with respect to your information:

• Right of Access: You may request a copy of the Personal Data we hold about you, including the categories of data, the purposes for which it is processed, and the third parties to whom it has been disclosed.
• Right of Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you. For Account data such as your name or address, you may also update certain information directly through your Account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been processed unlawfully. Note that we are legally required to retain certain records (e.g., KYC and transaction data) for defined periods as described in Section 8, which may limit our ability to fulfil an erasure request in full.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, where you contest the accuracy of the data pending verification, or where you object to processing based on legitimate interests.
• Right to Data Portability: You may request a copy of the Personal Data you provided to us in a structured, commonly used, machine-readable format (such as JSON or CSV), where the processing is based on your consent or a contractual necessity.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes, or where processing is based on legitimate interests and you believe your rights override those interests. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where we rely on your consent to process your Personal Data (e.g., for promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Data Privacy team at [email protected] with the subject line "Data Privacy Request". We will respond to verified requests within 30 calendar days. We may ask you to confirm your identity before processing the request.

If dki4d discovers or is notified that an Account has been registered by an individual under the age of 21, the Account will be immediately and permanently closed, all associated Personal Data will be securely deleted in accordance with our retention policy, and any funds held in the Account will be returned to the deposit source after applicable transaction costs.

If you are a parent or guardian and believe that your child has registered an Account on dki4d, please contact us immediately at [email protected] with subject line "Minor Account Report". We will investigate and act without delay.

dki4d operates as an internationally licensed platform. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia where our servers, cloud infrastructure providers, or third-party service partners are located.

Where such international transfers occur, dki4d ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Binding contractual clauses in agreements with all third-party Processors that require them to process Personal Data only for the agreed purpose, to implement adequate security measures, and to comply with applicable data protection standards;
• Transfer only to jurisdictions or service providers that maintain data protection standards equivalent to, or exceeding, internationally recognized best practice;
• Regular review of third-party Processor agreements to ensure ongoing compliance.

You may request details of the safeguards in place for any specific international transfer by contacting us at [email protected].

dki4d reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The updated Policy will be published on this page with a revised "Last Updated" date.

Where changes are material — meaning they affect your rights or how your data is used in a way that could reasonably be of concern to you — we will notify registered players in advance via email to the address registered on your Account, or via a prominent in-Platform notification.

Your continued use of the Platform following the publication of a revised Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any amendments, you may close your Account as described in our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact us using the details below:

• Email: [email protected] — use subject line "Data Privacy" to ensure prompt routing to our Data Privacy team.
• Response time: We aim to respond to all privacy-related inquiries within 5 business days (WIB, UTC+7), and to complete verified data subject requests within 30 calendar days.
• Language: Our support team includes Indonesian-speaking agents available during WIB business hours, though this Policy and all formal correspondence are conducted in English.

If you believe that dki4d has not handled your Personal Data in accordance with this Privacy Policy, you have the right to lodge a complaint. We encourage you to contact us directly in the first instance so that we can investigate and resolve your concern promptly. If you remain unsatisfied after our response, you may escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.