kid4d Privacy
Policy

kid4d is an internationally operated online casino and sportsbook platform accessible at kid4d.vip, designed and operated primarily for players based in Indonesia. For the purposes of this Privacy Policy, "kid4d", "we", "us", and "our" refers to the operator of the kid4d Platform and its authorised service partners responsible for the processing of personal data in connection with the Services.

This Privacy Policy applies to all individuals who visit, register on, or otherwise interact with the kid4d Platform — including prospective players who browse without creating an account, registered players with an active Account, and former players whose accounts have been closed.

This policy should be read alongside our Terms & Conditions, which govern the contractual relationship between you and kid4d. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

kid4d collects personal data in a number of categories depending on your level of interaction with the Platform. The categories and specific data points collected are described below.

When you create an Account on kid4d, we collect the following information:

• Full legal name (as it appears on your Indonesian KTP or passport)
• Date of birth (for age verification — you must be 21 or older)
• Email address
• Mobile phone number (for account security and withdrawal verification)
• Preferred payment method and associated account details (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay account identifiers)
• Username and hashed password (the plain-text password is never stored)

Before your first withdrawal — and at any point where we are legally or operationally required to verify your identity — we may collect the following KYC documentation:

• Scan or photograph of your Indonesian KTP (Kartu Tanda Penduduk) or valid passport
• Proof of payment method (e.g., a redacted bank statement or mobile banking screenshot confirming your name and account number)
• Selfie photograph, in some cases held alongside your identity document and a handwritten date/note

We record full details of all financial transactions on the Platform, including deposits, withdrawals, bonus credits, wager placements, game outcomes, and balance adjustments. This data is retained for audit, anti-money-laundering, and dispute resolution purposes.

We collect data about how you interact with the Platform, including:

• Games played, bet amounts, session duration, and win/loss history
• Responsible gaming tool usage (deposit limits, session reminders, self-exclusion)
• Navigation paths, click patterns, and feature usage within the Platform

This data is used to personalise your experience, improve Platform performance, identify problem gambling indicators, and prevent fraud.

When you access the Platform, our servers automatically record the following technical data:

• IP address and approximate geolocation (city-level, derived from IP)
• Device type, operating system, and browser version
• Session timestamps and log-in/log-out records
• Referring URL (the page you visited before arriving at kid4d)

We retain records of all communications between you and the kid4d support team, including live chat transcripts, WhatsApp message exchanges (where permitted by applicable law), and email correspondence. These records are retained for dispute resolution, quality assurance, and regulatory compliance purposes.

kid4d collects personal data through the following channels and mechanisms:

• Directly from you: When you register an account, submit KYC documents, make a deposit or withdrawal request, contact our support team, or participate in a promotion.
• Automatically via the Platform: Through server logs, session tracking, and first-party analytics tools embedded in the Platform interface. These tools record device data, IP address, navigation behaviour, and gameplay events.
• From cookies and similar technologies: As described in Section 8 (Cookies & Tracking), we use first-party cookies and similar technologies to maintain session state, remember preferences, and measure Platform performance.
• From payment service providers: When you initiate a deposit or withdrawal, our payment partners (such as those facilitating BCA, BRI, Mandiri, OVO, DANA, or GoPay transactions) may pass us transaction metadata, including confirmation status and the name registered on your payment account, for reconciliation and anti-fraud purposes.
• From identity verification services: Where we use a third-party KYC vendor to assist with document verification, that vendor may return a verification status, risk score, and extracted data fields from the documents you submit.
• From publicly available sources: In limited circumstances, we may cross-reference publicly available information (such as sanctions lists or adverse-media databases) as part of our anti-money-laundering (AML) obligations.

The personal data we collect is used for the following purposes:

If you have opted in to receive marketing communications from kid4d, we may send you email notifications about new promotions, seasonal offers (such as Ramadhan bonus campaigns or Indonesian Independence Day promotions on 17 August), game launches, and other Platform updates. You may withdraw your consent at any time by contacting our support team or following the unsubscribe link in any marketing email. Withdrawal of consent will not affect the lawfulness of any processing carried out before your withdrawal.

kid4d processes personal data on one or more of the following legal grounds depending on the specific processing activity:

• Contractual necessity: Processing that is required to perform the contract between you and kid4d — for example, creating your Account, processing your deposits and withdrawals, and settling your bets. Without this processing, we cannot provide the Services.
• Legal obligation: Processing that is required to comply with applicable legal and regulatory obligations — for example, KYC verification, anti-money-laundering record-keeping, and responding to lawful requests from competent authorities.
• Legitimate interests: Processing that is necessary for our legitimate business interests, provided those interests are not overridden by your data protection rights — for example, fraud detection, platform security, responsible gaming monitoring, and Platform improvement analytics.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you marketing communications. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing before withdrawal.

kid4d does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below:

We engage carefully vetted third-party service providers to assist in operating the Platform. These providers process personal data strictly on our instructions and are contractually prohibited from using it for their own purposes. Categories of service provider include:

• Payment processing partners facilitating transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja
• KYC and identity verification technology vendors
• Cloud infrastructure and hosting providers
• Game studio software providers (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe) — game providers receive only pseudonymous player session tokens, not full identity data
• Customer support platform providers (live chat and ticketing system vendors)
• Cybersecurity and fraud detection service providers

We may disclose personal data to governmental authorities, law enforcement agencies, or regulators where we are legally required or compelled to do so by a valid court order, statutory obligation, or regulatory direction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will notify you of the disclosure where we are legally permitted to do so.

In the event of a merger, acquisition, asset sale, or corporate restructuring affecting kid4d, personal data held by the Platform may be transferred to the successor entity as part of that transaction. In such circumstances, we will notify affected players in advance and ensure that the successor entity is bound by privacy obligations at least as protective as those in this policy.

In any other circumstances where we wish to share your personal data with a third party not described above, we will seek your explicit consent before doing so and will provide clear information about the identity of the recipient and the purpose of the sharing.

kid4d retains personal data for as long as it is necessary for the purposes described in this policy, subject to any legal or regulatory retention obligations. The following retention schedule applies:

At the end of each retention period, personal data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised so that it can no longer be attributed to any individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and research purposes.

kid4d uses cookies and similar technologies to ensure the Platform functions correctly, to maintain your logged-in session, to remember your preferences, and to analyse aggregate Platform usage. We do not use third-party advertising cookies or cross-site tracking technologies.

• Essential Cookies: Required for the Platform to function. These include session management cookies that keep you logged in during a gaming session. The Platform cannot function without these cookies, and they do not require your consent.
• Preference Cookies: Store your settings such as language preference and display configuration. These persist across sessions for your convenience.
• Analytics Cookies: First-party analytics tools that measure aggregate page views, session durations, and navigation paths to help us understand Platform performance and identify areas for improvement. No individual-level profiling is performed. These cookies are set by kid4d directly, not by a third-party analytics vendor.
• Security Cookies: Used for fraud detection and account security purposes, including device fingerprinting to identify unusual login behaviour.

You may control non-essential cookies through your browser settings. Most modern browsers (including Chrome, Firefox, Safari, and Edge) allow you to block or delete cookies via their privacy or settings menu. Please note that disabling essential cookies will prevent you from logging in to the Platform and will disrupt core functionality.

kid4d takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kid4d Platform.
• Salted cryptographic password hashing — your password is hashed at the point of creation and the hash is what we store. No member of staff can retrieve your plain-text password.
• Two-factor authentication (2FA) available on all accounts. We strongly recommend enabling 2FA via your account security settings.
• Isolated KYC document storage in access-controlled repositories with full audit logging of every access event.
• Regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Employee access controls — personal data is accessible only to staff members with a legitimate need-to-know basis, governed by strict role-based access policies.
• Incident response plan — in the event of a data breach affecting your personal data, we will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

While we take every reasonable precaution to protect your data, no digital system can guarantee absolute security. You are responsible for maintaining the security of your own login credentials and device. If you suspect your Account has been compromised, contact our support team immediately.

Depending on applicable law, you may have the following rights in relation to your personal data held by kid4d. To exercise any of these rights, please contact our support team through the channels listed in Section 14.

• Right of Access: You may request a copy of the personal data we hold about you. We will respond within 30 days of a verified request.
• Right of Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Basic account details (name, email, phone) can be updated directly via the account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. We will honour such requests where we are not legally required to retain the data. Note that KYC records and transaction data must be retained for the periods set out in Section 7 to satisfy anti-money-laundering obligations regardless of an erasure request.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while we investigate the accuracy of data you have disputed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a machine-readable copy of the personal data you have provided to us.
• Right to Object: You may object to processing based on legitimate interests — for example, you may opt out of analytics-based profiling by adjusting your cookie preferences or contacting support.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

kid4d does not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered an account on the Platform or submitted personal data to us, please contact our support team immediately. Upon verification, we will close the Account, void all associated transactions, and delete the personal data of the underage individual in accordance with our data retention obligations.

As part of our KYC process, every player must verify their age by submitting a valid government-issued identity document. Accounts where age verification cannot be completed satisfactorily will not be permitted to deposit, play, or withdraw funds.

Parents and guardians who are concerned about a minor's access to gambling content are encouraged to use internet filtering tools and parental control software to block access to gambling websites. For further guidance, please visit our Responsible Gaming page.

As an internationally operated online gaming platform, kid4d processes and stores some personal data on servers located outside of Indonesia. When personal data is transferred to, or accessed from, a jurisdiction outside Indonesia, we ensure that appropriate safeguards are in place to protect that data to a standard at least equivalent to that described in this policy.

Safeguards we implement for international data transfers include:

• Contractual data processing agreements with all service providers that impose binding privacy and security obligations equivalent to those in this policy.
• Transfer to service providers located in jurisdictions that maintain recognised data protection frameworks, or where standard contractual clauses are in place.
• Pseudonymisation of data transferred to third-party analytics or game providers, ensuring that full identity data is not passed to these recipients.

Game studio software providers such as Pragmatic Play, Evolution Gaming, and Spribe operate their game servers globally. When you play a game, a pseudonymous session token (not your identity data) is passed to the game server to facilitate game play. No full personal data is transmitted to game studio servers in the course of normal play.

kid4d reserves the right to update or modify this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new sharing arrangement — we will provide at least seven (7) days' advance notice via a prominent notification on the Platform and/or by email to the address registered on your Account.

The date at the top of this page ("Last updated") will always reflect when the most recent version of the policy took effect. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and contact our support team to close your Account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kid4d handles your personal data, please reach out to our support team. We are available around the clock and our Indonesian-speaking agents are on hand to assist players across all Indonesian time zones (WIB / WITA / WIT).

We aim to respond to all privacy-related enquiries within 2 business hours via live chat, and within 24 hours for email submissions. Data rights requests (access, erasure, rectification, portability) are resolved within 30 calendar days of identity verification.

For responsible gaming concerns, including self-exclusion requests or deposit limit adjustments, please visit our dedicated Responsible Gaming page or contact support directly. For general terms governing your use of the Platform, please review our Terms & Conditions.