Privacy Policy

Introduction

visa4d ("we", "us", "our", or "the Platform") is committed to protecting the privacy of all individuals who access and use our online betting and gaming services at https://visa4d.cam. This Privacy Policy describes in detail how visa4d collects, uses, stores, discloses, and safeguards the personal data of our members and visitors, with particular reference to the context of serving Indonesian players.

By registering an account on visa4d, accessing our platform, or using any of our Services, you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy. This policy should be read in conjunction with our Terms & Conditions, which govern the overall relationship between you and visa4d.

If you do not agree with any provision of this Privacy Policy, you must discontinue your use of the platform immediately and may request account closure by contacting our support team at [email protected].

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that can identify you as an individual, either directly or in combination with other data — including your name, national identity number, email address, phone number, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means visa4d, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third-party service provider that processes Personal Data on behalf of visa4d under contractual instruction and data protection obligations.
• "Member" or "you" refers to any individual who has registered an account on visa4d or who accesses the platform without registration (as a visitor).
• "Services" refers to all products and features offered on visa4d, including sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), and any associated support or communication channels.
• "KYC Data" means identity verification documents submitted by you during the Know Your Customer process, including government-issued photo identification (e.g., KTP — Indonesian National Identity Card) and proof of payment method ownership.
• "Cookies" means small text files stored on your device by the platform to support session management, analytics, and personalisation functions.

Data We Collect

visa4d collects Personal Data across several categories, depending on the nature of your interaction with the platform. The following table summarises the primary data types we process:

We do not knowingly collect sensitive categories of Personal Data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in government-issued identification documents submitted during KYC.

How Data Is Collected

visa4d collects your Personal Data through the following primary channels:

• Direct Submission: Information you actively provide during account registration, KYC document upload, support enquiries, or updates to your account profile.
• Automated Technical Collection: Data gathered automatically when you visit or interact with the platform, including cookies, server logs, IP address capture, and device fingerprinting used for fraud detection and security monitoring.
• Transaction Processing: Financial data collected during deposits and withdrawals via local Indonesian bank transfer channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Third-Party Verification Services: Identity verification data may be cross-checked against licensed third-party KYC and fraud-screening services under strict data processing agreements.
• Customer Support Interactions: Records of all communications with our Indonesian-speaking support team, including live chat sessions and email threads, are retained for quality assurance and dispute resolution purposes.

Purpose of Processing

visa4d processes your Personal Data for the following specific and legitimate purposes:

• Account Management: To create, maintain, verify, and administer your member account, including processing your login sessions and account preferences.
• Service Delivery: To provide the full range of betting and gaming Services you have elected to use, including processing bets, crediting winnings, and managing bonus allocations.
• Payment Processing: To execute deposit and withdrawal transactions accurately and securely via your chosen Indonesian payment method, and to verify bank and e-wallet account ownership.
• KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our platform's anti-fraud and responsible gaming obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-account abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To implement and monitor responsible gaming controls including deposit limits, loss caps, self-exclusion periods, and problem gambling indicators, in compliance with our duty of care to members.
• Platform Improvement: To analyse aggregated usage data for the purposes of improving platform performance, game offering, user experience, and customer support quality.
• Legal Compliance: To fulfil obligations under applicable laws and regulations, respond to lawful requests from competent authorities, and maintain records required for audit purposes.
• Communications: To send you transactional communications (account confirmations, deposit/withdrawal notifications, security alerts) and, where you have opted in, promotional communications about applicable offers and events.

Legal Basis for Processing

visa4d processes your Personal Data under the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have agreed to — including account management, payment processing, and service delivery.
• Legitimate Interests: Processing carried out in pursuit of visa4d's legitimate business interests, such as fraud detection, platform security, product improvement, and responsible gaming monitoring, provided those interests are not overridden by your fundamental rights.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering (AML) obligations, identity verification mandates, and retention requirements.
• Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to optional marketing communications and certain cookie categories. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

visa4d does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own commercial purposes. We may share your data only in the following limited and controlled circumstances:

• Payment Service Providers: Necessary financial data is shared with your chosen bank or e-wallet provider (e.g., BCA, BRI, OVO, DANA) solely to execute your requested transactions. These parties act as independent data controllers for the segments of data within their own payment infrastructure.
• KYC & Identity Verification Partners: Your KYC documents may be processed by a contracted third-party identity verification service operating under a strict data processing agreement with visa4d.
• Technology & Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers that operate as Data Processors under contractual data protection obligations and may process technical data to deliver platform infrastructure.
• Game Content Providers: Ga me studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe may receive anonymised session identifiers for the purpose of game delivery and fair-play certification. No personally identifiable data is shared with game studios beyond what is technically necessary for game session initialisation.
• Legal & Regulatory Authorities: We may disclose Personal Data to competent law enforcement, regulatory, or judicial authorities where we are required to do so by law, court order, or in response to a lawful government request. We will notify you of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of visa4d's assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer in advance where practicable.

International Data Transfers

visa4d operates platform infrastructure across multiple jurisdictions to ensure service reliability and performance for members in Indonesia. As a result, your Personal Data may be transferred to, stored in, or processed in countries outside of Indonesia, including jurisdictions where data protection laws may differ from those applicable in Indonesia.

Where such transfers occur, visa4d ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses (equivalent to internationally recognised standard contractual clauses) between visa4d and the receiving entity.
• Transfer only to jurisdictions that maintain adequate data protection standards as assessed by visa4d's data governance team.
• Technical security controls — including end-to-end encryption in transit and at rest — applied uniformly regardless of the jurisdiction in which data is processed.

By using visa4d's Services, you acknowledge and consent to these cross-border data transfers subject to the safeguards described above.

Data Retention

visa4d retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal Data associated with an active member account is retained for the full duration of the account's existence and for a minimum period of five (5) years following account closure, to support dispute resolution, audit trails, and anti-money laundering record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years for financial audit and fraud investigation purposes.
• Communication Records: Customer support chat transcripts and email correspondence are retained for two (2) years from the date of the interaction.
• Technical & Log Data: Server logs, IP address records, and device fingerprint data used for security and fraud detection are retained for up to twelve (12) months.
• Marketing Consent Records: Records of your marketing opt-in or opt-out status are retained for the lifetime of your account and for three (3) years following account closure.

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised in accordance with visa4d's data destruction procedures, unless a specific legal obligation requires continued retention.

Data Security

visa4d applies a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. Our key security controls include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or app and our servers is encrypted using industry-standard Transport Layer Security protocols, preventing interception by third parties.
• Encryption at Rest: Sensitive Personal Data and financial records stored in our databases are encrypted at rest using AES-256 encryption.
• Access Controls: Strict role-based access controls (RBAC) ensure that only authorised personnel with a legitimate operational need can access member Personal Data. Access is logged and audited.
• Regular Security Audits: Our platform infrastructure undergoes scheduled penetration testing and independent security audits to identify and remediate vulnerabilities before they can be exploited.
• Fraud Detection Systems: Automated monitoring systems analyse transaction patterns and login behaviour in real time to detect and flag anomalous activity indicative of account compromise or financial fraud.
• Staff Training: All visa4d personnel with access to member data receive mandatory data protection and information security training on an annual basis.

While visa4d employs best-practice security standards, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring the security of the device you use to access the platform.

Cookies & Tracking Technologies

visa4d uses cookies and similar tracking technologies to deliver, maintain, and improve the platform experience. The following categories of cookies are deployed:

• Strictly Necessary Cookies: Essential for core platform functionality, including session authentication, security token management, and load balancing. These cookies cannot be disabled without impairing your ability to use the platform.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how members navigate and interact with the platform, enabling us to identify usability improvements and performance bottlenecks.
• Functionality Cookies: Store your preferences — such as preferred language, time zone (WIB/WITA/WIT), and display settings — to personalise your session experience.
• Security & Fraud Detection Cookies: Support our fraud prevention and bot-detection systems by recording device characteristics and behavioural patterns across sessions.

You can manage or delete non-essential cookies via your browser settings at any time. Please note that disabling certain cookies may affect the functionality or performance of specific platform features. visa4d does not currently support granular cookie preference management via an in-platform consent management panel, but this feature is under development.

Your Data Rights

As a member of visa4d, you hold a set of rights in relation to your Personal Data. These rights can be exercised by contacting our support team at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) days of receiving a verifiable request.

Minors & Age Restriction

visa4d's Services are strictly restricted to adults aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you are not permitted to register an account or use any Services offered by visa4d.

If visa4d becomes aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. All funds deposited by a minor will be returned to the originating payment method after identity verification, and any bonuses or winnings accrued will be forfeited.

If you are a parent or legal guardian and believe that a person under your care has registered an account on visa4d without your consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Policy Amendments

visa4d reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify active members via a platform notification or email to the address registered on their account.

Your continued use of visa4d's Services following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we handle your Personal Data. If you disagree with any changes, you may request account closure by contacting support before the revised policy takes effect.

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by visa4d, please contact our Data Protection team using the details below. All enquiries will be acknowledged within 48 hours and resolved within 30 days where possible.

• Email: [email protected] (plain text — copy and paste into your email client; this is not a clickable link)
• Support Hours: 08:00 – 24:00 WIB (UTC+7), seven days a week
• Language: Enquiries may be submitted in English or Indonesian (Bahasa Indonesia)

If you are not satisfied with visa4d's response to a data protection concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. For members based in Indonesia, this may include relevant government digital and consumer protection bodies.