Privacy Policy

1. Introduction

posd4 ("we," "us," or "our") operates an online betting platform serving users in Indonesia and internationally. We recognize that your personal information is valuable and sensitive, and we take our responsibility to protect it seriously. This Privacy Policy describes our practices concerning the personal data we collect from users of our website, mobile applications, and related services (collectively, the "Services").

This policy applies to all users who access or use posd4 Services, including visitors who browse our website without registering, registered members, and VIP players. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

We are committed to transparency in our data practices and compliance with applicable data protection laws, including international standards such as the General Data Protection Regulation (GDPR) principles, even though posd4 operates from offshore jurisdictions. If you have questions or concerns about how we handle your data, please contact our Data Protection Officer using the contact information provided at the end of this policy.

2. Information We Collect

posd4 collects several categories of personal information to provide, maintain, and improve our Services, comply with legal obligations, and protect our users. The types of information we collect include:

2.1 Information You Provide Directly

• Account Registration Data: When you create a posd4 account, we collect your full legal name, date of birth, email address, phone number, residential address, username, and password. This information is required to establish and maintain your account.
• Identity Verification (KYC) Documents: To comply with anti-money-laundering regulations and verify your age (21+ requirement), we collect copies of your Indonesian National Identity Card (KTP), proof of address documents (utility bills, bank statements), and selfie photographs holding your identity document. These documents are used solely for verification purposes and stored securely.
• Payment Information: We collect payment method details including bank account numbers, e-wallet account information, and transaction history. Financial data is encrypted and handled according to payment card industry (PCI) standards. We do not store complete credit card numbers on our servers.
• Communications with Customer Support: When you contact our support team via live chat, email, WhatsApp, or phone, we collect and store the content of your communications, including questions, complaints, and feedback. This helps us improve service quality and resolve issues efficiently.
• Responsible Gaming Preferences: If you set deposit limits, loss limits, session time limits, or request self-exclusion, we collect and store these preferences to enforce them and protect your welfare.

2.2 Information Collected Automatically

• Device and Browser Information: We automatically collect technical information about the devices you use to access posd4, including IP address, browser type and version, operating system, device model, unique device identifiers, mobile network information, and time zone settings.
• Usage Data: We collect information about how you interact with our Services, including pages visited, games played, bets placed, deposit and withdrawal history, session duration, clickstream data, and referral sources. This data helps us understand user behavior and improve platform functionality.
• Location Data: We collect your approximate geographic location based on your IP address to verify that you are accessing our Services from an eligible jurisdiction (Indonesia) and to comply with legal requirements. We do not collect precise GPS location unless you explicitly grant permission through your mobile device settings.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to recognize you, remember your preferences, analyze website traffic, and deliver personalized content. See Section 9 (Cookies & Tracking) for detailed information.

2.3 Information from Third-Party Sources

• Payment Processors: We receive transaction information from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals.
• Identity Verification Services: We may use third-party identity verification services to validate the authenticity of documents you submit during KYC verification and to screen against fraud databases and sanctions lists.
• Marketing Partners: If you arrive at posd4 through an affiliate link or marketing campaign, we may receive limited information about the referral source to attribute the acquisition and calculate affiliate commissions.

3. How We Use Your Data

posd4 uses the personal information we collect for the following purposes:

3.1 Providing and Managing Services

• Creating and maintaining your user account
• Processing your deposits, withdrawals, and financial transactions
• Enabling you to place bets and play games on our platform
• Applying bonuses, promotions, and VIP rewards to your account
• Providing customer support and responding to your inquiries
• Sending transactional notifications (deposit confirmations, withdrawal status, account updates)

3.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement) through KYC procedures
• Complying with anti-money-laundering (AML) and counter-terrorist-financing (CTF) regulations
• Detecting, preventing, and investigating fraud, cheating, collusion, and other prohibited activities
• Enforcing our Terms & Conditions and other policies
• Responding to legal requests from law enforcement, courts, or regulatory authorities
• Maintaining records required by our gaming licenses and applicable laws

3.3 Improving and Personalizing Services

• Analyzing user behavior and preferences to improve platform functionality
• Personalizing your experience with relevant game recommendations and offers
• Conducting research, analytics, and statistical analysis to enhance our Services
• Testing new features and optimizing user interface design
• Measuring the effectiveness of marketing campaigns and promotional offers

3.4 Marketing and Communications

• Sending promotional emails, SMS messages, and push notifications about bonuses, tournaments, and special offers (only if you have opted in to marketing communications)
• Displaying targeted advertisements based on your interests and activity
• Inviting you to participate in surveys, contests, and feedback programs
• Informing you about changes to our Services, policies, or features

3.5 Security and Responsible Gaming

• Monitoring for suspicious activity, fraud patterns, and security threats
• Implementing and enforcing responsible gaming tools (deposit limits, self-exclusion)
• Identifying users who may be experiencing gambling-related harm and offering support
• Protecting the integrity of our games and preventing unfair advantages
• Maintaining secure access controls and preventing unauthorized account access

4. Legal Basis for Processing

Under data protection laws, posd4 must have a valid legal basis to process your personal information. We rely on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions) and provide the Services you requested. This includes account management, transaction processing, and game access.
• Legal Obligations: Processing is required to comply with laws and regulations we are subject to, including KYC/AML requirements, gaming license conditions, tax reporting, and responses to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests or those of third parties, such as fraud prevention, network security, product improvement, and marketing (balanced against your privacy rights).
• Consent: In some cases, we process personal data based on your explicit consent, such as when you opt in to marketing communications or enable optional features. You may withdraw consent at any time.

5. Data Sharing and Disclosure

posd4 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes described in this policy:

5.1 Service Providers and Partners

• Payment Processors: Indonesian banks and e-wallet providers process your deposits and withdrawals. They receive transaction details necessary to complete payments.
• Game Providers: Third-party game developers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Asia Gaming) receive limited information necessary to deliver game content and track play.
• Identity Verification Services: KYC verification providers receive identity documents you submit to validate authenticity and screen against fraud databases.
• Cloud Hosting and IT Infrastructure: Our servers and databases are hosted by reputable cloud service providers who maintain physical and technical security measures.
• Customer Support Tools: Live chat, email, and ticketing systems used by our support team may be provided by third-party software vendors.
• Analytics and Marketing: We use analytics platforms (e.g., Google Analytics) and marketing tools to measure performance and deliver targeted advertising. These providers may place cookies on your device.

All third-party service providers are bound by contractual obligations to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

5.2 Legal and Regulatory Disclosures

We may disclose your personal information to law enforcement, regulatory authorities, courts, or government agencies when:

• Required by law, legal process, or valid government request
• Necessary to comply with our gaming license conditions or regulatory reporting obligations
• Needed to enforce our Terms & Conditions or protect our rights and property
• Required to investigate suspected fraud, money laundering, or other illegal activities
• Necessary to protect the safety, security, or rights of posd4, our users, or the public

5.3 Business Transfers

If posd4 is involved in a merger, acquisition, asset sale, bankruptcy, or similar corporate transaction, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with other parties when you have given explicit consent, such as when you authorize us to share information with a specific partner or participate in a co-branded promotion.

6. Data Security Measures

posd4 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS protocols. Sensitive data at rest (passwords, payment information, identity documents) is encrypted using advanced encryption standards (AES-256).
• Access Controls: Access to personal data is restricted to authorized posd4 personnel who require it to perform their job functions. Access is granted on a need-to-know basis and protected by role-based permissions.
• Authentication: We use strong password requirements and offer optional two-factor authentication (2FA) to prevent unauthorized account access. Administrative systems require multi-factor authentication.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) that monitor for suspicious activity 24/7.
• Regular Security Audits: We conduct regular internal security reviews and engage independent third-party security firms to perform penetration testing and vulnerability assessments.
• Data Segregation: Player funds are held in segregated bank accounts separate from operational capital. User data is stored in isolated databases with restricted access.
• Secure Development Practices: Our development team follows secure coding standards and conducts code reviews to prevent security vulnerabilities in our platform.
• Employee Training: All posd4 staff receive regular training on data protection, privacy laws, and security best practices.

While we employ robust security measures, no system is completely impervious to attack. If you suspect unauthorized access to your account, please contact our security team immediately at [email protected].

7. Data Retention

posd4 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Account Data: We retain account information, transaction history, and communications for the duration of your active account relationship plus seven (7) years after account closure, as required by anti-money-laundering regulations and our gaming licenses.
• Identity Verification Documents: KYC documents (KTP copies, proof of address, selfies) are retained for seven (7) years after account closure to satisfy regulatory record-keeping requirements.
• Financial Transaction Records: Deposit and withdrawal records, payment method details, and related financial data are retained for seven (7) years to comply with tax laws, anti-money-laundering regulations, and potential audit requirements.
• Marketing Communications Data: If you opt out of marketing, we will cease sending promotional content but retain a record of your opt-out preference indefinitely to ensure we do not contact you again.
• Responsible Gaming Records: Self-exclusion requests and records of problem gambling interventions are retained permanently to ensure we can honor your self-exclusion and identify attempts to circumvent restrictions.
• Anonymized Data: After personal identifiers are removed, we may retain anonymized or aggregated data indefinitely for analytical and statistical purposes.

When retention periods expire, we securely delete or anonymize personal data in accordance with data protection best practices. Deletion methods include secure overwriting of digital storage media to prevent data recovery.

8. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. You may request information about the categories of data we hold, the purposes of processing, recipients of your data, and retention periods. To request your data, contact our Data Protection Officer at [email protected].

8.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings. For data you cannot modify yourself (such as identity documents), contact customer support.

8.3 Right to Erasure (Right to be Forgotten)

In certain circumstances, you may request deletion of your personal data, such as when it is no longer necessary for the purposes collected, you withdraw consent, or you object to processing. However, we may retain data when required by law (e.g., AML record-keeping for 7 years) or to establish, exercise, or defend legal claims.

8.4 Right to Restrict Processing

You may request that we limit how we use your data while you contest its accuracy, object to processing, or when we no longer need the data but you require it for legal claims.

8.5 Right to Data Portability

For data you provided based on consent or contract, you may request a copy in a structured, commonly used, machine-readable format (e.g., CSV, JSON). We will provide the data within 30 days of a valid request.

8.6 Right to Object

You may object to processing based on legitimate interests (e.g., marketing, analytics). If you object, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests or need the data for legal claims.

8.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal. Use the "unsubscribe" link in emails or adjust settings in your account dashboard.

8.8 Exercising Your Rights

To exercise any privacy rights, contact us at [email protected] or through our live chat support. We will respond to your request within 30 days. We may request additional information to verify your identity before fulfilling requests. There is no fee for exercising your rights unless requests are clearly unfounded, excessive, or repetitive.

9. Cookies and Tracking Technologies

posd4 uses cookies, web beacons, and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content. This section explains what these technologies are and how we use them.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, recognize you on return visits, and provide functionality. Cookies do not contain personal information themselves but may be linked to personal data we store about you.

9.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic site functions like login, account access, shopping cart (if applicable), and security. Without these, the site cannot function properly.	Session or up to 1 year
Performance Cookies	Collect anonymous information about how visitors use our site (pages visited, error messages, session duration). Used to improve website performance.	Up to 2 years
Functionality Cookies	Remember your preferences (language, currency, username) so you don't have to re-enter them. Enhance personalization.	Up to 1 year
Targeting/Advertising Cookies	Track your browsing across sites to build a profile of your interests and deliver relevant ads. May be set by third-party advertising partners.	Up to 2 years

9.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Disabling cookies may affect site functionality (e.g., you may need to log in repeatedly). To manage cookies, access your browser settings:

• Google Chrome: Settings > Privacy and Security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Privacy, search, and services > Cookies and site permissions

You can also opt out of interest-based advertising by visiting industry opt-out platforms like the Digital Advertising Alliance (DAA) or Network Advertising Initiative (NAI).

10. International Data Transfers

posd4 operates internationally and may transfer your personal information to servers located outside Indonesia, including jurisdictions that may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards to protect your information, including:

• Standard Contractual Clauses (SCCs) approved by data protection authorities
• Ensuring recipients are subject to legally binding data protection obligations equivalent to those in this policy
• Verifying that third-party service providers maintain adequate security measures
• Limiting data transfers to countries recognized as providing adequate protection

By using posd4 Services, you acknowledge and consent to the transfer of your personal information outside Indonesia for the purposes described in this Privacy Policy.

11. Children's Privacy

posd4 is strictly intended for adults aged 21 and older. We do not knowingly collect personal information from individuals under 21 years of age. Our Terms & Conditions explicitly prohibit underage use, and we implement age verification through mandatory KYC checks.

If we discover that we have inadvertently collected personal information from someone under 21, we will immediately delete that information, close the account, and forfeit any funds (which may be donated to responsible gaming charities). If you believe a minor has created an account on posd4, please report it immediately to [email protected].

Parents and guardians should monitor their children's internet usage and ensure minors do not access gambling websites. Consider using parental control software to block access to online gambling platforms.

12. Policy Updates and Changes

posd4 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service offerings. When we make material changes, we will notify you by:

• Posting a prominent notice on our website homepage for at least 30 days
• Sending an email notification to your registered email address
• Displaying a pop-up notification upon your next login
• Updating the "Last Updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of posd4 Services after changes become effective constitutes your acceptance of the updated policy.

For minor, non-substantive changes (e.g., clarifications, formatting, updated contact information), we may not provide advance notice but will update the "Last Updated" date.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how posd4 handles your personal information, please contact us:

Data Protection Officer

• Email: [email protected]
• Subject Line: "Privacy Inquiry - [Your Account Username]"
• Response Time: We aim to respond to privacy inquiries within 72 hours and fulfill data subject requests within 30 days.

General Customer Support

• Live Chat: Available 24/7 through the posd4 website
• WhatsApp: Contact our Indonesian-speaking support team
• Email: [email protected]

Specific Inquiries

• Security Concerns: [email protected]
• Legal/Compliance: [email protected]
• Responsible Gaming: [email protected]