Privacy Policy – pap4d Online Gaming Platform

1. Introduction & Scope
2. Definitions
3. Data We Collect
4. How We Use Your Data
5. Legal Basis for Processing
6. Data Sharing & Disclosure
7. Cookies & Tracking
8. Data Retention
9. Data Security
10. Your Rights
11. Children's Privacy
12. Cross-Border Transfers
13. Policy Amendments
14. Contact & Complaints

Last updated: January 2026 | Applies to: pap4d.club

256-bit SSL Encryption

All data in transit between your device and pap4d servers is encrypted end-to-end using industry-standard TLS 1.3.

No Data Sales

pap4d never sells your personal data to third-party advertisers, data brokers, or marketing aggregators.

Your Data, Your Rights

You may request access, correction, deletion, or portability of your personal data at any time via pap4d support.

Encrypted Storage

KTP and identity documents are stored in an isolated, AES-256 encrypted vault inaccessible to standard platform agents.

Defined Retention Periods

pap4d retains personal data only for as long as required by operational necessity and applicable regulatory obligations.

Marketing Opt-Out

You may withdraw consent to promotional communications at any time via account settings or by contacting support directly.

Introduction & Scope

This Privacy Policy ("Policy") describes how pap4d ("we", "us", "our", or "the Platform") collects, uses, stores, discloses, and protects personal data in connection with the operation of the online gaming platform at pap4d.club and all associated mobile-optimised interfaces.

This Policy applies to all individuals who visit pap4d.club, register as Members, interact with pap4d customer support, or otherwise provide personal data to pap4d in the course of using any Platform product, including slots, live casino, sportsbook, togel (Indonesia's traditional numbers lottery), Sakong, and crash games.

By accessing pap4d.club or registering an Account, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any aspect of this Policy, you must discontinue access to the Platform and may request account closure in accordance with the pap4d Terms & Conditions.

Relationship with Terms & Conditions: This Privacy Policy forms part of the binding agreement between pap4d and each Member, alongside the Terms & Conditions and the Responsible Gaming Policy. All three documents should be read together.

Definitions

Term	Meaning in This Policy
"Personal Data"	Any information that identifies or could reasonably be used to identify a natural person, including name, mobile number, email address, national identity number, IP address, device identifiers, and transaction history.
"Processing"	Any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, transfer, or deletion.
"Data Subject"	The natural person to whom Personal Data relates — in the context of pap4d, this is the registered Member or website visitor.
"KTP"	Kartu Tanda Penduduk — the Indonesian National Identity Card, used as the primary identity verification document for pap4d KYC.
"KYC"	Know Your Customer — the identity verification process pap4d conducts to confirm a Member's age, identity, and beneficial ownership of their registered payment methods.
"Third-Party Processor"	Any external organisation that processes Personal Data on pap4d's behalf under a written data processing agreement, such as payment gateway providers, game studio operators, and fraud screening services.
"Sensitive Personal Data"	A subset of Personal Data that warrants heightened protection, including government-issued identity document numbers, biometric data (selfie photos used for liveness checks), and financial account details.

Data We Collect

pap4d collects Personal Data through three primary channels: data you provide directly, data generated automatically through your use of the Platform, and data received from third-party service providers who assist in delivering our services.

3.1 Data You Provide Directly

Category	Specific Data Points	When Collected
Registration Data	Full legal name, mobile number (Indonesian format), chosen username, date of birth, email address	At account registration
Identity Verification (KYC)	KTP number, KTP photograph, selfie photograph (for liveness check), bank account name and number, e-wallet account details	Prior to first withdrawal; upon pap4d request
Financial Data	Deposit amounts, withdrawal amounts, payment method references (last 4 digits of account), transaction timestamps, IDR balance history	Each deposit and withdrawal transaction
Support Communications	Live chat transcripts, email content, complaint text, screenshots submitted as evidence	When you contact pap4d support
Responsible Gaming Preferences	Deposit limit values, loss limit values, session reminder frequency, self-exclusion start and end dates	When you configure responsible gaming tools

3.2 Data Collected Automatically

When you access pap4d.club, our servers and analytics systems automatically record the following technical data:

IP address and approximate geographic location (city and region level — pap4d does not collect precise GPS coordinates)
Device type, operating system version, and browser type and version
Session start and end times, pages visited, games launched, and betting actions taken
HTTP request logs, error logs, and performance metrics
Cookie identifiers and local storage values (see Section 7)

3.3 Data Received from Third Parties

pap4d may receive supplementary data about you from the following categories of third-party providers:

Payment processors (banks and e-wallet operators including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja): transaction confirmation status, payment reference numbers, and in some cases account name for matching purposes.
Fraud screening services: risk scores and flags associated with IP addresses, device fingerprints, or payment method identifiers.
Game studio providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming): game session logs, round results, bet amounts, and RNG certification records necessary for dispute resolution.

How We Use Your Data

pap4d uses Personal Data for the following purposes. Each purpose is tied to a legal basis as described in Section 5.

Account Management: Creating, maintaining, and securing your pap4d Account; authenticating your identity at login; enabling password recovery.
Service Delivery: Processing deposits and withdrawals, crediting winnings, applying bonus funds, settling sportsbook bets, and delivering all other Platform products to you.
Identity Verification (KYC): Confirming that you are aged 21 or older, that your identity matches the payment method you use, and that you are not subject to any self-exclusion or exclusion order.
Fraud Prevention & Security: Detecting and preventing fraudulent account creation, multiple-account abuse, money laundering, bonus abuse, automated bot activity, and unauthorised account access.
Responsible Gaming: Monitoring play patterns for signs of problem gambling behaviour; applying player-requested restrictions; administering self-exclusion programs; complying with any applicable responsible gaming regulatory requirements.
Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance and audit purposes.
Legal & Regulatory Compliance: Retaining transaction records and identity documentation as required by applicable anti-money laundering (AML) regulations and financial reporting obligations.
Platform Improvement: Analysing aggregated, anonymised usage data to improve game lobby design, payment flow efficiency, support response times, and overall platform performance.
Marketing Communications (with your consent): Sending promotional emails or SMS messages about new games, bonuses, seasonal offers (including Idul Fitri, Ramadhan, and major football tournament specials), and platform updates — only where you have opted in and not subsequently withdrawn consent.

                No Automated Decision-Making with Legal Effect: pap4d does not make decisions that produce significant legal effects about you — such as permanent account closure — based solely on automated processing without human review. Where automated systems flag an account for investigation, a pap4d compliance team member reviews the case before any consequential action is taken.
              

Legal Basis for Processing

pap4d processes your Personal Data under one or more of the following legal bases, depending on the processing activity:

Legal Basis	Processing Activities Covered
Contractual Necessity	Account creation; deposit and withdrawal processing; game session delivery; bonus application; customer support. Without this processing, pap4d cannot provide the Platform services you have contracted for.
Legal Obligation	KYC identity verification; AML transaction monitoring; retention of financial records for the legally required period; responding to lawful requests from regulatory or law enforcement authorities.
Legitimate Interests	Fraud detection and prevention; security monitoring; platform analytics (aggregated and anonymised); responsible gaming pattern detection; maintaining support records for dispute resolution. pap4d has assessed that its legitimate interests do not override your fundamental privacy rights for these activities.
Consent	Sending promotional marketing communications (email/SMS); placing non-essential cookies (analytics and preference cookies). You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

pap4d does not sell, rent, or trade your Personal Data. We share Personal Data only in the following limited and controlled circumstances:

Third-Party Processors under Contract: pap4d shares the minimum necessary Personal Data with service providers who process data on our behalf, including payment gateway operators, identity verification vendors, game studio providers, fraud screening services, and cloud infrastructure providers. All such providers are bound by written data processing agreements requiring them to use your data solely for the purposes pap4d instructs and to maintain equivalent data protection standards.
Payment Providers: To process deposits and withdrawals, pap4d shares necessary transaction details with Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers process your data in accordance with their own privacy policies and applicable Indonesian financial regulations.
Regulatory & Law Enforcement Authorities: pap4d may disclose Personal Data to competent authorities where required to do so by applicable law, court order, or legitimate regulatory request. Where permitted by law, pap4d will notify you of such a disclosure.
Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of pap4d's business, Personal Data held by pap4d may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any change to the applicable privacy policy.
With Your Explicit Consent: pap4d will share your data with third parties not described above only with your prior, informed, and freely given consent.

pap4d will never: sell your Personal Data to marketers; share your KTP or identity documents with game studios or promotional partners; or disclose your account balance or betting history to third parties outside the contexts described in this section.

Cookies & Tracking Technologies

pap4d uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform, maintain your login session, and improve your experience. The following categories of cookies are used:

Cookie Category	Purpose	Consent Required?
Strictly Necessary	Maintaining your authenticated session, storing your language preference, enabling the deposit and withdrawal flow, fraud prevention session tokens.	No — these are essential to Platform operation
Functional / Preference	Remembering your favourite games, storing your responsible gaming settings locally, maintaining display preferences.	Yes — consent required
Analytics	Aggregated, anonymised page-view and game-launch metrics used to improve Platform design and performance. pap4d uses first-party analytics and does not share these datasets with advertising networks.	Yes — consent required

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using Platform products. Disabling functional or analytics cookies will not affect your ability to play but may reduce personalisation features.

Data Retention

pap4d retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

Data Category	Retention Period	Basis
Account Registration Data	Duration of account + 5 years post-closure	AML regulatory obligation
KYC / Identity Documents	Duration of account + 5 years post-closure	AML / KYC regulatory requirement
Financial Transaction Records	Duration of account + 7 years post-closure	Financial record-keeping obligations
Game Session Logs	2 years from session date	Dispute resolution and audit
Customer Support Transcripts	3 years from interaction date	Dispute resolution and quality assurance
Marketing Consent Records	Duration of consent + 3 years post-withdrawal	Legal proof of consent basis
Technical Log Files (IP, session)	90 days rolling	Security monitoring and fraud detection

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

Data Security

pap4d implements a multi-layered security architecture to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational security measures include:

Transport Encryption: All data transmitted between your browser or device and pap4d's servers uses TLS 1.3 with 256-bit AES encryption. The pap4d.club domain enforces HTTPS-only access with HTTP Strict Transport Security (HSTS) headers.
Encryption at Rest: All Personal Data stored in pap4d's databases, including KTP documents and financial records, is encrypted at rest using AES-256.
Isolated KYC Vault: Identity verification documents (KTP photographs, selfie images) are stored in a separately access-controlled storage environment, inaccessible to standard customer service agents. Access is restricted to the compliance team on a need-to-know basis with full audit logging.
Access Controls: Internal access to pap4d systems is governed by role-based access control (RBAC). All administrative access requires multi-factor authentication. Access logs are retained and reviewed periodically.
Password Security: Account passwords are hashed using a one-way cryptographic function (bcrypt with a sufficiently high work factor). pap4d staff cannot retrieve your password — only a reset can be initiated.
Fraud & Intrusion Detection: Automated systems monitor for anomalous login attempts, unusual transaction patterns, and network-level intrusion indicators on a continuous basis.
Incident Response: pap4d maintains a documented security incident response plan. In the event of a data breach that poses a material risk to affected Data Subjects, pap4d will notify affected Members without undue delay.

Your Role in Security: pap4d's security measures are most effective when complemented by your own good practices. You should use a strong, unique password for your pap4d Account, enable OTP-based login verification where offered, never share your credentials, and contact support immediately if you suspect unauthorised access to your Account.

Your Rights

As a Data Subject, you hold the following rights with respect to the Personal Data pap4d holds about you. To exercise any of these rights, please contact pap4d support via live chat or email at the address provided in Section 14.

Right of Access

You may request a copy of the Personal Data pap4d holds about you and information about how it is used. pap4d will respond within 30 days of a verified request.

Right to Rectification

If any Personal Data pap4d holds about you is inaccurate or incomplete, you may request that it be corrected. For account details, you may update some fields directly in your Account dashboard.

Right to Erasure

You may request deletion of your Personal Data where it is no longer necessary for the purposes it was collected. Note that data subject to legal retention obligations cannot be deleted until those periods expire.

Right to Restrict Processing

You may request that pap4d restrict processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved — without requiring full deletion.

Right to Data Portability

For data processed on the basis of consent or contractual necessity, you may request a machine-readable copy of your Personal Data for transfer to another service provider.

Right to Object

You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. You may also withdraw marketing consent at any time.

pap4d will verify your identity before processing any rights request. If a request is refused, pap4d will provide a written explanation of the reason. You retain the right to escalate to the relevant data protection authority if you are dissatisfied with pap4d's response.

Children's Privacy

Strictly No Minors: pap4d is an adults-only platform. Access is restricted to individuals aged 21 years or older. pap4d does not knowingly collect Personal Data from anyone under the age of 21.

If pap4d discovers or has reason to believe that Personal Data has been collected from a person under the age of 21, all such data will be immediately deleted and the associated Account permanently closed, with any deposited funds returned to the originating payment method subject to verification.

If you are a parent or guardian and believe your child has registered an Account on pap4d, please contact pap4d support immediately via live chat so that the Account can be reviewed and closed without delay.

Cross-Border Data Transfers

pap4d operates as an internationally licensed platform and may store or process your Personal Data on servers located outside Indonesia. Where such cross-border transfers occur, pap4d ensures that appropriate safeguards are in place to protect your data to an equivalent standard as required by the governing jurisdiction's data protection laws.

Safeguards used for cross-border transfers may include:

Standard contractual clauses (data processing agreements) with third-party processors located outside Indonesia that obligate them to maintain equivalent data protection standards.
Transfers to jurisdictions that have been assessed as providing an adequate level of data protection comparable to applicable Indonesian standards.
Binding corporate rules or equivalent intra-group data transfer frameworks where applicable.

Upon written request, pap4d will provide information about the specific safeguards applied to any cross-border transfer of your Personal Data.

Policy Amendments

pap4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When a material change is made — meaning a change that significantly affects your rights or how your data is used — pap4d will:

Update the "Last Updated" date at the top of this page.
Post a notice on the pap4d Platform accessible to logged-in Members upon next login.
Where the change affects processing activities based on your consent, request renewed consent before continuing those activities.

Your continued use of the pap4d Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. The current version of this Policy is always available at pap4d.club/privacy-policy. If you have any objection to the revised Policy, please contact support to discuss your options, including account closure.

Contact & Complaints

For any privacy-related queries, data subject rights requests, or complaints about pap4d's data handling practices, please contact us through the following channels:

pap4d Data Protection Contact
Primary channel: Live chat via pap4d.club (available 24/7 — fastest response, typically under 2 minutes)
Email: [email protected] (plain text — not a clickable link)
Response time: Within 24 hours for written requests; data subject rights requests acknowledged within 5 business days
Language: Indonesian-speaking agents available on all shifts

When submitting a data subject rights request, please include your registered mobile number or username so that pap4d can verify your identity before processing the request. pap4d will not action rights requests submitted without sufficient identifying information to confirm the requester's identity.

If you are not satisfied with pap4d's response to a privacy complaint, you retain the right to escalate the matter to the relevant data protection or privacy authority in the jurisdiction governing your use of the Platform.

pap4d Privacy Policy

Contents