Privacy Policy
Your Data, Protected by aka4d

aka4d is an online betting and casino platform operated at aka4d.pro, providing sports betting, live casino, Dragon Tiger, slot games, and daily togel (Indonesia's traditional numbers lottery) services to registered Members in Indonesia.

For the purposes of this Privacy Policy, aka4d acts as the data controller — meaning we determine the purposes for which, and the means by which, personal data relating to our Members and Platform visitors is processed.

Our primary service audience is Indonesian residents aged 21 and above. All personal data collected through the Platform is processed in accordance with the data protection principles set out in this policy and with applicable international data protection standards.

If you have any questions about how aka4d handles your personal data, you may contact us at any time via email at [email protected] — our support team is available 24/7 including all Indonesian public holidays, and responds to all privacy-related inquiries within two business days.

aka4d collects personal data through several channels: directly from you when you register or use the Platform, automatically through your interaction with the Platform, and in some cases from third-party service providers such as KYC verification partners and payment processors. The categories of data we collect are set out below.

2.1 Registration & Identity Data

• Full legal name (as it appears on your national identity card or passport)
• Date of birth (used to verify the 21+ age requirement)
• Residential address in Indonesia (city, province, postal code)
• Contact email address
• Mobile phone number
• Username and encrypted password

2.2 KYC Verification Data

When required for identity verification, withdrawal processing, or fraud prevention, we may collect:

• Scanned copy or photograph of a government-issued identity document (NIK/KTP, passport, or SIM)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days)
• Selfie photograph (live or uploaded) for facial verification against the identity document
• Proof of ownership of the payment method used for deposits (e.g., screenshot of BCA, BRI, OVO, or DANA account registered in your name)

2.3 Financial Transaction Data

• Deposit and withdrawal transaction records, including amounts in IDR (Rp), timestamps (WIB), payment channel used, and transaction reference numbers
• Bank account details (account name and last four digits of account number) for verified withdrawal recipients
• E-wallet identifiers (registered mobile number associated with OVO, DANA, GoPay, ShopeePay, or LinkAja accounts) for payment matching purposes

2.4 Gaming Activity Data

• Bet history, game session records, wagering amounts, game outcomes, and win/loss records
• Bonus and promotion participation records, including wagering progress against applicable requirements
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, session time reminders)

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP data
• Device type, operating system, and browser type/version
• Session timestamps, page views, click paths, and in-Platform navigation behavior
• Cookie identifiers and similar tracking technologies (see Clause 6 for full detail)

2.6 Communications Data

• Records of communications between you and our customer support team, including live chat transcripts and email correspondence
• Responses to surveys, feedback forms, or promotional opt-in records where you have chosen to engage

aka4d uses the personal data we collect for the following purposes. Each purpose is linked to a legal basis described in Clause 4.

aka4d does not use your personal data for fully automated decision-making that produces legal or similarly significant effects without human review. Where automated risk-scoring tools are used (e.g., for fraud detection), a human operator reviews any decision before action is taken against an account.

aka4d relies on the following legal bases when processing your personal data:

• Contract Performance: Processing that is necessary to fulfill our contractual obligations to you as a registered Member — including account management, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing required by applicable laws and regulatory requirements, including anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, and age verification mandates.
• Legitimate Interest: Processing that serves aka4d's genuine business interests — such as fraud prevention, platform security, service quality analytics, and responsible gaming monitoring — where those interests are not overridden by your rights and interests. You may object to processing based on legitimate interest by contacting us at [email protected].
• Consent: Processing that requires your explicit, freely given, and revocable consent — primarily the sending of optional promotional communications. You may withdraw your consent to marketing communications at any time by contacting our support team or updating your notification preferences in your Account dashboard. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

aka4d does not sell or rent your personal data to any third party. We share personal data with external parties only in the following limited and controlled circumstances:

5.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf, under strict contractual data processing agreements, for the following functions:

• Payment Processing: Local bank transfer infrastructure providers and e-wallet network partners (including those facilitating BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) receive only the minimum data required to process and reconcile financial transactions.
• KYC & Identity Verification: Third-party identity verification platforms that compare submitted documents and photographs against identity databases for age and fraud screening purposes.
• Gaming Content Providers: Game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — receive session-level identifiers necessary to deliver their game content and record game outcomes. These providers do not receive your full identity data.
• Platform Infrastructure: Cloud hosting, content delivery network (CDN), and cybersecurity service providers that maintain the technical infrastructure of the Platform.
• Customer Support Technology: Live chat and helpdesk platform providers that facilitate our 24/7 support operation.

5.2 Legal & Regulatory Disclosure

aka4d may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction — including disclosures required under anti-money-laundering or counter-terrorism-financing regulations. Where legally permitted, we will notify the affected Member of such a disclosure.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of aka4d's assets, Member personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice to affected Members prior to any such transfer taking effect and will ensure the acquiring entity is bound by data protection obligations at least as protective as those in this policy.

aka4d uses cookies and similar tracking technologies to operate the Platform effectively, maintain session continuity, prevent fraud, and analyze how Members interact with the Platform. The categories of cookies we use are as follows:

aka4d does not use third-party advertising or retargeting cookies. We do not participate in ad-network cookie exchanges. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

aka4d retains personal data for the periods set out below, or for such longer period as may be required by applicable law or regulatory obligation:

• Active Account Data: Retained for the entire duration that your Account remains active (i.e., open and not permanently closed).
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, consistent with financial record-keeping and anti-money-laundering regulatory requirements.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of verification, or from the date of account closure, whichever is later.
• Gaming Activity Records: Retained for a minimum of 3 years from the date of the relevant gaming session or event.
• Customer Support Communications: Retained for 2 years from the date of the final message in the relevant support thread.
• Marketing Consent Records: Retained for 3 years from the date of consent, or until consent is withdrawn, whichever is earlier.

When a retention period expires and no legal obligation requires continued retention, the relevant personal data is securely deleted or anonymized so that it can no longer be associated with an individual Member. Anonymized, aggregated statistical data derived from Member activity may be retained indefinitely for platform analytics purposes.

You may request earlier deletion of specific personal data categories by submitting a data deletion request to [email protected]. Please note that deletion requests cannot override mandatory legal retention obligations, and data retained pursuant to those obligations will not be deleted until the applicable retention period expires.

aka4d implements a layered set of technical and organizational security measures designed to protect Member personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our current security measures include:

• Encryption in Transit: All data transmissions between Members' devices and the Platform are encrypted using TLS 1.2 or higher (256-bit encryption). HTTPS is enforced across all Platform domains via HTTP Strict Transport Security (HSTS).
• Encryption at Rest: Sensitive personal data — including identity documents, KYC materials, and financial records — is encrypted at rest using AES-256 symmetric encryption in our database and file storage systems.
• Access Controls: Internal access to Member personal data is restricted on a strict need-to-know basis using role-based access controls (RBAC). All staff access to production data systems is logged and audited.
• Two-Factor Authentication (2FA): 2FA is required for all withdrawal requests and is available as an optional security enhancement for Member logins.
• Intrusion Detection & Monitoring: The Platform is monitored 24/7 by automated intrusion detection systems that alert our security team to anomalous access patterns, brute-force attempts, and other indicators of compromise.
• Penetration Testing: aka4d commissions regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach that is likely to result in risk to affected Members, aka4d will notify the affected individuals within 72 hours of becoming aware of the breach, providing details of the data involved and the steps being taken to contain and remediate the incident.

As a Member of aka4d, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team at [email protected] with the subject line "Data Rights Request — [Account Username]".

aka4d will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or we receive a high volume of requests simultaneously, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

We will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee. We will always notify you before applying any such fee.

aka4d strictly prohibits the use of the Platform by anyone under the age of 21 years. The Platform is not directed at, and does not knowingly collect personal data from, individuals under 21.

If aka4d becomes aware that personal data has been collected from an individual under 21, we will:

• Immediately suspend the associated Account pending investigation.
• Permanently close the Account upon confirming that the account holder is under 21.
• Return any deposited funds to the source payment method, net of any withdrawals already processed.
• Forfeit any winnings accrued during the period of underage use.
• Delete the personal data of the underage individual as promptly as practicable, subject to any mandatory legal retention requirements.

As a Platform that operates internationally and engages global technology service providers, aka4d may transfer certain categories of personal data to servers or service providers located outside Indonesia. Such transfers may include data processed by cloud infrastructure providers, KYC verification platforms, and game studio backend systems.

Whenever personal data is transferred internationally, aka4d ensures that appropriate safeguards are in place to maintain a level of protection equivalent to that provided under this Privacy Policy. These safeguards include:

• Entering into standard contractual clauses with the receiving party that obligate them to protect the data to the same standard as if it remained in Indonesia.
• Only transferring data to service providers that are certified under internationally recognized security and data protection frameworks (such as ISO 27001 or SOC 2 Type II).
• Conducting due diligence assessments on third-country service providers before engaging them for personal-data processing tasks.

If you would like further information about the specific safeguards in place for any particular international transfer, please contact us at [email protected].

aka4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this policy, we will:

• Post the revised Privacy Policy on this page with a new "Last Updated" date prominently displayed at the top of the document.
• Send an in-Platform notification or email to all registered Members at least 14 calendar days before the revised policy takes effect, summarizing the key changes in plain English.
• Where a change involves a new or materially different use of your personal data that requires fresh consent, we will seek your consent before that new processing begins.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any material change, you may close your Account before the change takes effect by contacting our support team. Closing your Account does not affect data retained pursuant to mandatory legal retention obligations under Clause 7.

Minor, non-material changes (such as corrections of typographical errors, clarifications of existing practices, or updates to contact details) may be made without advance notice, though the "Last Updated" date on this page will always reflect the most recent revision.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by aka4d, please contact our Data Protection team using the details below. All privacy-related inquiries are handled by a dedicated team member and are treated as confidential.

When submitting a data rights request, please include the following information to help us locate and process your request efficiently:

• Your full registered name as it appears on your aka4d Account
• Your Account username
• The email address associated with your Account
• A clear description of the right you wish to exercise (e.g., "I request a copy of all personal data held about me" or "I request deletion of my marketing consent record")
• Any supporting information that helps identify the specific data in question

We may need to verify your identity before processing a data rights request, to ensure we do not disclose or modify another person's data. Identity verification will typically involve confirming information that matches our records — we will not ask you to re-submit KYC documents unless strictly necessary for the specific request.

aka4d is committed to resolving all privacy concerns directly. If, after contacting us, you remain dissatisfied with how we have handled a privacy matter, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.