Privacy Policy

pay4d ("we", "us", "our") operates the online gaming platform accessible at pay4d.vu and any associated subdomains or mobile browser interfaces (collectively, the "Platform"). In the course of providing sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), sabung ayam (traditional cockfighting), and all other gaming products offered on the Platform, pay4d collects and processes personal data relating to individuals who interact with the Platform.

This Privacy Policy applies to:

• All registered Members of the Platform, regardless of their location.
• Visitors who browse the Platform without registering an account.
• Individuals who contact pay4d via live chat, email, or any other support channel.
• Any other individual whose personal data pay4d processes in connection with the operation of the Platform.

This Policy does not apply to third-party websites, applications, or services that may be referenced on the Platform. pay4d is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external sites you visit.

pay4d acts as the data controller with respect to all personal data collected and processed under this Policy. Our primary contact for data-related enquiries is [email protected].

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, identity card number, email address, telephone number, IP address, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• "Member" means any individual who has successfully completed the account registration process on the Platform.
• "Wallet" means the in-platform IDR balance account associated with each Member's registered profile.
• "KYC" (Know Your Customer) means the identity verification process through which pay4d confirms a Member's identity and age, as required by our international operating standards.
• "Cookie" means a small text file stored on your device by your browser when you visit the Platform, used to remember preferences and enable certain functionality.
• "Third-Party Processor" means a company or individual engaged by pay4d to process Personal Data on its behalf, under a written data processing agreement.

pay4d collects the following categories of Personal Data, depending on how you interact with the Platform:

pay4d collects Personal Data through the following means:

• Directly from you — when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automatically via the Platform — through server logs, cookies, pixel tags, and similar tracking technologies that record your interactions with the Platform each time you visit or use it.
• From payment providers — when you initiate a deposit or withdrawal, your bank (BCA, BRI, BNI, Mandiri, or others) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) transmits transaction confirmation data to pay4d to verify the successful completion of the payment.
• From identity verification services — pay4d may use licensed third-party KYC service providers to assist in verifying the authenticity of identity documents you submit. These providers return a verification result (pass/fail) and may share supporting data points with pay4d for record-keeping purposes.
• From fraud prevention and risk management services — pay4d works with specialist fraud detection providers that share risk signals (such as device fingerprint data or known-fraud indicators) to help protect the Platform and its Members from financial crime.

pay4d processes your Personal Data on the following legal bases:

• Contract performance: Processing your Identity Data, Contact Data, and Financial Data is necessary for pay4d to open and maintain your account, process deposits and withdrawals, settle bets, and provide the services you have requested.
• Legal obligation: pay4d is required by its international operating licence and applicable anti-money laundering (AML) and counter-terrorist financing (CTF) obligations to collect and retain KYC documentation and transaction records for a defined minimum period.
• Legitimate interests: pay4d processes Technical Data and Gaming Data to maintain Platform security, detect fraud, improve product quality, conduct analytics, and administer responsible gaming programmes. These interests are balanced against Members' privacy interests and do not override them.
• Consent: Where we send you marketing communications (promotional emails, bonus offers), we do so on the basis of your consent, which you may withdraw at any time by contacting support at [email protected].

pay4d uses your Personal Data for the following purposes:

1. Account management: Creating, maintaining, and administering your Member account, including processing your registration, verifying your identity, and managing your Wallet balance.
2. Transaction processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, and Mastercard; processing withdrawal requests to your verified bank account or e-wallet; and maintaining an accurate ledger of all financial activity on your account.
3. Identity verification (KYC): Confirming that you are at least 21 years of age, verifying the accuracy of the information you have provided, and satisfying our AML/CTF compliance obligations.
4. Platform security and fraud prevention: Monitoring for suspicious account activity, detecting duplicate accounts, identifying coordinated bonus abuse, and preventing unauthorized access to Member accounts.
5. Responsible gaming: Administering deposit limits, session timers, cooling-off periods, and self-exclusion requests; monitoring gaming patterns that may indicate problem gambling; and proactively contacting Members who display markers of harm.
6. Customer support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining records of our communications with you.
7. Platform improvement: Conducting anonymised analytics to understand how Members use the Platform, identify technical issues, optimise the user experience, and develop new product features.
8. Marketing communications: Sending you information about promotions, bonuses, and new products, where you have consented to receive such communications. You may opt out at any time.
9. Legal compliance: Retaining records as required by our international operating licence, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.

pay4d does not sell, rent, or trade your Personal Data to any third party. We share Personal Data only in the following limited and controlled circumstances:

• Payment processors: We share your Financial Data with the payment service providers required to process your deposit or withdrawal (e.g., your chosen bank or e-wallet operator). These providers act as independent data controllers and are subject to their own privacy policies.
• KYC and identity verification providers: We share your Identity Data and verification documents with licensed KYC service providers solely for the purpose of confirming your identity. These providers are contractually bound to process your data only for this purpose and to apply appropriate security measures.
• Fraud prevention and risk services: We may share Technical Data and limited transaction data with specialist fraud detection services to protect the Platform and its Members.
• Game content providers: Pay4d's Platform hosts games supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. When you play their games, your session data is processed by the relevant game provider's certified servers. Game providers are contractually prohibited from using this data for any purpose other than game delivery and certification auditing.
• Legal and regulatory authorities: We may disclose your Personal Data to government bodies, law enforcement agencies, or courts where we are required to do so by law, by court order, or in connection with our regulatory obligations under our international gaming licence. We will notify you of any such disclosure where permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of pay4d's business, your Personal Data may be transferred to the acquiring entity. We will notify affected Members and ensure that appropriate data protection commitments are in place before any such transfer occurs.

pay4d uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies may be placed on your device when you visit pay4d.vu:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly and you will be unable to log in or place bets. Disabling other cookie types will not affect core Platform functionality but may reduce the quality of your experience.

pay4d retains your Personal Data for as long as is necessary to fulfil the purposes described in this Policy, and in any event for the minimum periods required by our international operating licence and applicable AML/CTF regulations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account's active life plus a minimum of five (5) years following account closure, to satisfy KYC record-keeping obligations.
• Financial Data and Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AML/CTF requirements.
• KYC Documents: Retained for the duration of your account plus five (5) years following closure, or longer where required by regulatory demand.
• Gaming and Betting Data: Retained for a minimum of three (3) years following the date of the relevant session or bet, for dispute resolution and auditing purposes.
• Support Communications: Retained for a minimum of two (2) years from the date of the last communication in a thread.
• Technical and Analytics Data: Anonymised and aggregated after twelve (12) months; identifiable Technical Data deleted after twenty-four (24) months.
• Self-Exclusion Records: Retained for a minimum of ten (10) years from the date of the self-exclusion request, to prevent re-registration during the exclusion period.

When Personal Data is no longer required and its retention period has expired, pay4d will securely delete or anonymise it in accordance with our internal data destruction procedures.

pay4d implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your browser or device and the Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). The padlock icon in your browser's address bar confirms this encryption is active.
• Encryption at Rest: Sensitive Personal Data — including KYC documents, financial account numbers, and password hashes — is encrypted at rest using AES-256 or equivalent standards in our database infrastructure.
• Access Controls: Access to production systems and Personal Data is granted on a strict need-to-know basis. All staff with data access are subject to background checks, confidentiality agreements, and mandatory privacy training. Access logs are maintained and reviewed regularly.
• Multi-Factor Authentication: All administrative access to Platform infrastructure requires multi-factor authentication. Members are also strongly encouraged to enable 2FA on their accounts.
• Intrusion Detection and Monitoring: pay4d operates continuous 24/7 monitoring of Platform infrastructure for anomalous activity, intrusion attempts, and security incidents.
• Penetration Testing: The Platform undergoes regular independent security assessments and penetration tests by qualified third-party security professionals. Critical findings are remediated with priority.
• Data Breach Response: In the event of a confirmed data breach that poses a risk to Members, pay4d will notify affected individuals without undue delay and take all reasonable steps to contain and remediate the incident.

As a data subject, you hold a number of rights with respect to the Personal Data pay4d holds about you. These rights are described below. To exercise any of these rights, please contact us at [email protected] with a clear description of your request and proof of identity. We will respond within 30 days of receiving a valid, complete request.

• Right of Access: You have the right to request a copy of the Personal Data pay4d holds about you, along with information about how it is being processed.
• Right to Rectification: If any of the Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request that pay4d delete your Personal Data. This right is subject to limitations — for example, we cannot erase data that we are legally required to retain for AML/CTF compliance purposes or to prevent re-registration of a self-excluded Member.
• Right to Restriction: You may request that pay4d restrict the processing of your Personal Data in certain circumstances, for example where you contest the accuracy of the data or have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: Where processing is based on legitimate interests, you have the right to object on grounds relating to your particular situation. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The Platform may contain references to, or integrations with, third-party services — including payment providers, game studios, and identity verification services. Where your interaction with a third-party service involves the transmission of Personal Data to that party, that data is governed by the third party's own privacy policy.

pay4d exercises care in selecting third-party service providers and requires all processors to demonstrate adequate data protection standards as a condition of engagement. However, pay4d accepts no responsibility or liability for the privacy practices of third parties once data has left the pay4d environment. We encourage you to review the relevant privacy policies of any third-party payment channel (BCA, BRI, OVO, DANA, GoPay, etc.) that you use in connection with the Platform.

The pay4d Platform is strictly intended for adults aged 21 years and over. pay4d does not knowingly collect, process, or retain Personal Data from any individual under the age of 21. The registration process includes a date-of-birth declaration, and KYC verification is designed to confirm that all Members meet the minimum age requirement.

If pay4d becomes aware that Personal Data has been collected from a person under 21 — whether through registration, KYC review, or any other means — the relevant account will be immediately suspended, all associated data will be reviewed, and the account will be closed. Any Wallet balance held in such an account will be handled in accordance with our Terms & Conditions.

pay4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. When material changes are made to this Policy, we will notify Members through one or more of the following channels:

• A prominent notice displayed upon login to the Platform.
• An email notification sent to your registered email address.
• An updated "Effective Date" displayed at the top of this page.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendments, you should stop using the Platform and request account closure before the amended Policy takes effect.

We encourage you to review this page periodically to remain informed of how pay4d protects your Personal Data. Previous versions of this Policy are available upon request by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a complaint about how pay4d has handled your Personal Data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — for all formal data rights requests and privacy complaints. Please include "Privacy Request" or "Data Complaint" in the subject line to ensure prompt routing.
• Live Chat: Available 24/7 directly within the Platform. For informal privacy queries, our support agents can assist you in real time. For formal requests requiring a written record, email is preferred.
• Response Time: pay4d will acknowledge all privacy-related requests within 48 hours and issue a substantive response within 30 calendar days of receipt of a complete, verified request.