1 Definitions
Throughout this Privacy Policy, the following terms carry the meanings set out below:
- "kpk4d" / "we" / "us" / "our" — the online betting and live casino platform operated at kpk4d.cam and all associated service interfaces.
- "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, national ID number, email address, device identifiers, and financial account details.
- "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
- "Data Subject" / "you" / "your" — the natural person to whom the Personal Data relates; in the context of kpk4d, this is the registered Player or site visitor.
- "Data Controller" — the entity that determines the purposes and means of processing Personal Data. kpk4d acts as Data Controller for all data collected via the Platform.
- "Third-Party Processor" — a subcontractor or service provider engaged by kpk4d to process Personal Data on kpk4d's behalf and under kpk4d's documented instructions.
- "KYC" — Know Your Customer; the identity verification procedures kpk4d applies to confirm a Player's identity, age, and source of funds.
- "Cookie" — a small text file placed on your device by a web server to store session or preference information.
2 Data Controller
kpk4d operates as the Data Controller for all Personal Data collected through the Platform at kpk4d.cam. As Data Controller, kpk4d determines the purposes for which Personal Data is processed and is responsible for ensuring that processing activities comply with applicable data protection standards.
For all data-related enquiries, rights requests, or complaints, please contact our dedicated data protection team using the details set out in Section 14 of this Policy.
kpk4d operates internationally and processes data across multiple jurisdictions. Where data is transferred outside Indonesia, appropriate safeguards — including contractual protections — are applied as described in Section 7.
3 Data We Collect
kpk4d collects Personal Data through the following channels and categories:
3.1 Data You Provide Directly
- Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number
- KYC documents: Government-issued photo ID (KTP, passport, or driving licence), proof of address, and where required, source-of-funds documentation
- Payment data: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction reference numbers. kpk4d does not store full card numbers for Visa or Mastercard transactions — these are handled exclusively by PCI-DSS certified payment processors
- Support communications: Messages, attachments, and metadata exchanged via live chat, email, or WhatsApp when you contact kpk4d's support team
- Responsible gaming inputs: Self-declared limits, cooling-off period activations, and self-exclusion requests
3.2 Data Collected Automatically
- Device & access data: IP address, browser type and version, operating system, device type, screen resolution, and time-zone setting
- Session data: Pages visited, features accessed, bet slips viewed, time spent on each section, and navigation path through the Platform
- Transaction logs: Deposit and withdrawal records, bet placement timestamps, game round IDs, and settlement outcomes
- Cookies & similar trackers: As described in Section 9 of this Policy
3.3 Data Received from Third Parties
- Identity verification results from KYC service providers
- Fraud risk scores from third-party anti-fraud platforms
- Self-exclusion status from responsible gaming databases to which kpk4d subscribes
| Data Category |
Examples |
Collection Trigger |
| Identity |
Name, date of birth, national ID |
Registration / KYC |
| Contact |
Email address, phone number |
Registration |
| Financial |
Bank account, e-wallet ID, transaction history |
First deposit / withdrawal |
| Behavioural |
Betting patterns, session duration, game preferences |
Ongoing Platform use |
| Technical |
IP address, device fingerprint, browser data |
Every visit |
| Communications |
Support chat logs, email exchanges |
Customer support contact |
4 Legal Basis for Processing
kpk4d processes Personal Data under one or more of the following legal bases:
- Contractual necessity: Processing is required to create and manage your account, process deposits and withdrawals, settle bets, and deliver the services you have requested.
- Legal obligation: Processing is required to fulfil KYC, anti-money-laundering, and record-keeping obligations under applicable international regulations.
- Legitimate interests: Processing is necessary for kpk4d's legitimate interests in fraud detection, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your own rights and freedoms.
- Consent: Where kpk4d sends optional marketing communications or places non-essential cookies, we rely on your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5 How We Use Your Data
kpk4d uses collected Personal Data for the following documented purposes:
- Account creation and management: Registering your account, authenticating your login, and maintaining your account profile and preferences
- KYC and age verification: Confirming that you are at least 21 years of age and verifying your identity in accordance with our obligations
- Payment processing: Receiving deposits and issuing withdrawals via your nominated Indonesian bank account or e-wallet
- Bet settlement and gaming: Recording wagers, calculating results, and crediting winnings to your account balance
- Fraud prevention and security: Detecting account takeover attempts, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions
- Responsible gaming: Monitoring account behaviour for indicators of problem gambling and enforcing player-defined limits and exclusion requests
- Customer support: Responding to your enquiries, resolving disputes, and processing account management requests
- Service improvement: Analysing aggregated, anonymised usage patterns to improve Platform performance, navigation, and product offerings
- Marketing communications (consent-based only): Sending promotional emails, bonus notifications, and event alerts — only where you have explicitly opted in and only to the email address or phone number on your account
- Legal compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory authorities, and defending or prosecuting legal claims
kpk4d does not use Personal Data for automated decision-making that produces legal or similarly significant effects on Players, except where expressly permitted by law and communicated in advance.
6 Data Sharing & Disclosure
kpk4d does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Disclosure to third parties is limited strictly to the following categories and contexts:
- KYC and identity verification providers: Third-party services that validate identity documents and run database checks against sanctions lists and politically exposed persons registries. These providers operate under data processing agreements that restrict use of your data to the stated verification purpose.
- Payment processors: Banks and e-wallet operators (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) receive only the minimum transaction data required to execute payment instructions. These parties are independent controllers for their own KYC purposes.
- Fraud prevention and anti-money-laundering services: kpk4d shares selected behavioural and transactional signals with specialist third-party platforms to detect and prevent financial crime.
- Responsible gaming registries: Where a Player activates self-exclusion, relevant data may be shared with responsible gambling support networks to enforce cross-platform exclusion where technically feasible.
- IT infrastructure and cloud services: Hosting, database management, and network security providers process data on kpk4d's behalf under strict data processing agreements.
- Legal and regulatory authorities: kpk4d will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by a valid legal obligation, court order, or where disclosure is necessary to protect the safety of any person.
- Corporate transactions: In the event of a merger, acquisition, or restructuring, Personal Data may be transferred to the successor entity subject to equivalent privacy protections.
Any Third-Party Processor engaged by kpk4d is contractually bound to process your Personal Data only on documented instructions from kpk4d, to maintain appropriate security standards, and to delete or return data upon contract termination.
7 International Data Transfers
kpk4d operates from and engages service providers across multiple countries. As a result, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Indonesia. Where such transfers occur, kpk4d ensures that adequate protections are in place, including:
- Contractual clauses that impose equivalent data protection standards on receiving parties
- Transfer to jurisdictions recognised as providing an adequate level of data protection
- Where neither of the above applies, your explicit consent obtained prior to transfer
Players located in Indonesia should be aware that Indonesian data protection law — including the Personal Data Protection Law (UU PDP) — may impose specific requirements regarding cross-border data transfers. kpk4d is committed to complying with applicable Indonesian data protection obligations to the extent relevant to its operations.
8 Retention Periods
kpk4d retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or contractual requirements. The following indicative retention periods apply:
| Data Category |
Retention Period |
Basis |
| Account & identity records |
5 years after account closure |
AML / legal obligation |
| KYC documents |
5 years after account closure |
AML / legal obligation |
| Transaction records |
5 years after last transaction |
Financial record-keeping |
| Support communications |
3 years after case closure |
Legitimate interest / dispute resolution |
| Marketing consent records |
Until consent withdrawn + 2 years |
Consent accountability |
| Session & device logs |
13 months from collection |
Security / fraud prevention |
| Self-exclusion records |
Indefinitely (to prevent re-registration) |
Responsible gaming / legal obligation |
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.
9 Cookies & Tracking Technologies
kpk4d uses cookies and similar technologies (local storage, session tokens, pixel tags) on the Platform to provide a functional, secure, and personalised experience. The categories of cookies in use are as follows:
- Strictly necessary cookies: Required for core Platform functionality including login session management, CSRF protection, and load balancing. These cookies cannot be disabled without rendering the Platform non-functional. No consent is required for their placement.
- Functional cookies: Remember your preferences such as language, odds format, and display settings. Disabled by default on first visit pending your acceptance.
- Analytics cookies: Aggregate, anonymised data on how Players navigate the Platform — page views, session duration, and feature engagement. Used to improve the Platform experience. Disabled by default pending consent.
- Responsible gaming cookies: Track session duration to trigger in-session time alerts you have configured. These are treated as strictly necessary cookies for Player welfare purposes.
kpk4d does not use third-party advertising or retargeting cookies. No data from your activity on kpk4d is shared with advertising networks for the purpose of serving you ads on other websites.
You may manage cookie preferences through your browser settings at any time. Note that disabling functional or analytics cookies will not impair your ability to place bets, deposit, or withdraw funds, but may reduce the personalisation of your experience.
10 Your Data Rights
Subject to applicable law, you hold the following rights with respect to your Personal Data held by kpk4d. To exercise any of these rights, please contact us using the details in Section 14. kpk4d will respond to verified requests within 30 calendar days.
Right of Access
Request a copy of all Personal Data kpk4d holds about you.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data.
Right to Erasure
Request deletion of your Personal Data, subject to legal retention obligations.
Right to Restrict Processing
Request that we limit how we use your data in certain circumstances.
Right to Portability
Receive a structured, machine-readable copy of data you provided to us.
Right to Object
Object to processing based on legitimate interests, including direct marketing.
Withdraw Consent
Withdraw previously given consent at any time with no penalty.
Right to Complain
Lodge a complaint with a relevant data protection supervisory authority.
Certain rights may be subject to exemptions where kpk4d is required by law to retain data regardless of a deletion or restriction request — for example, KYC records required under anti-money-laundering obligations. kpk4d will always explain any applicable exemption clearly when responding to a rights request.
11 Minors & Age Verification
kpk4d's Platform is strictly intended for adults of 21 years of age or older. We do not knowingly collect Personal Data from persons under 21. Age is verified during the registration process and may be subject to additional documentary checks during KYC review.
If kpk4d becomes aware that Personal Data has been collected from a person under 21 — whether through misrepresentation at registration or any other means — the relevant account will be closed immediately, all funds returned to the depositing payment method after completion of any mandatory fraud checks, and the Personal Data deleted in accordance with our retention obligations.
If you are a parent or guardian and believe a minor in your care has registered on kpk4d, please contact us immediately at
[email protected] with the subject line "Minor Account Report". We will prioritise your request and close the account within one business day.
12 Security Measures
kpk4d implements a layered information security programme designed to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Key measures include:
- Encryption in transit: TLS 1.3 is enforced on all connections between your browser and kpk4d's infrastructure. Connections using outdated TLS versions are rejected.
- Encryption at rest: Personal Data stored on kpk4d's servers is encrypted using AES-256 with key management handled by a dedicated hardware security module.
- Access controls: Internal access to Personal Data is restricted to staff with a documented business need, governed by role-based access control and multi-factor authentication on all administrative systems.
- Penetration testing: kpk4d's Platform undergoes regular third-party security assessments. Critical findings are remediated within 72 hours; high-severity findings within 14 days.
- Incident response: kpk4d maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, you will be notified without undue delay where required by applicable law.
- Two-factor authentication (2FA): Available to all Players for account login and mandatory for withdrawal requests above defined thresholds. kpk4d strongly encourages all Players to enable 2FA.
While kpk4d applies industry-standard technical and organisational safeguards, no system is completely immune to attack. Players are encouraged to use strong, unique passwords, enable 2FA, and report any suspicious account activity to [email protected] immediately.
13 Policy Amendments
kpk4d may update this Privacy Policy from time to time to reflect changes in our data processing practices, operational requirements, or applicable law. Material changes will be communicated to registered Players via email at least 14 calendar days before taking effect, and a prominent notice will be displayed on the Platform.
The "Last updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with the changes, you should cease using the Platform and may request account closure in accordance with clause 12 of the Terms & Conditions.
Prior versions of this Privacy Policy are archived and available upon request — contact [email protected] with the subject line "Privacy Policy Archive Request".