Privacy Policy — spam4d

spam4d ("we", "us", "the Platform", "the Operator") operates the online betting platform accessible at spam4d.cam, offering sportsbook wagering, live casino games, slot titles, and togel (Indonesia's traditional numbers lottery) markets to eligible players in Indonesia. In delivering these services, we necessarily collect and process certain personal data about our users.

This Privacy Policy ("Policy") sets out a transparent account of the data practices applied across the entire spam4d platform. It covers data collected when you register an account, make deposits or withdrawals via Indonesian payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), place bets, contact our support team, and browse our website.

This Policy forms an integral part of our Terms & Conditions. By registering a spam4d account, you confirm that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, you must discontinue use of the platform and contact us to close your account.

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, deletion, or destruction.
• "Data Controller" means spam4d, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on spam4d's behalf and under our documented instructions.
• "Data Subject" means any identified or identifiable natural person whose Personal Data is processed — i.e., you, the player.
• "KYC" means Know Your Customer — the identity verification process described in our Terms & Conditions.
• "Cookies" means small text files placed on your device by our website to enable functionality, analytics, and session management.
• "AML" means Anti-Money Laundering — the legal and operational frameworks that require us to monitor and report certain financial activities.

spam4d collects Personal Data in several categories, depending on how you interact with the platform. The table below provides a structured overview:

We do not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is inherent in a standard KTP document provided by the player for identity verification.

spam4d collects your Personal Data through the following channels:

• Direct Provision: Information you actively provide when registering your account, completing KYC, depositing funds, withdrawing winnings, or contacting our support team.
• Automated Technologies: Cookies, web beacons, session logs, and server-side analytics that capture Technical Data each time you access the platform. See Clause 11 for full Cookie details.
• Payment Processors: Transaction confirmation data returned by Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when processing your deposit or withdrawal instructions.
• Identity Verification Partners: Third-party KYC service providers may return verification status data (pass/fail) to our platform after processing documents you submit.
• Fraud Prevention Services: Risk-scoring and device-fingerprinting signals received from fraud-prevention technology providers integrated into the platform.

We process your Personal Data only for specified, explicit, and legitimate purposes. The primary purposes are set out below:

1. Account Management: To create, maintain, and administer your spam4d account, including password recovery and profile updates.
2. Identity & Age Verification (KYC): To confirm that you are at least 21 years of age and a resident of Indonesia, as required by our Terms & Conditions.
3. Payment Processing: To facilitate deposits and withdrawals via your nominated Indonesian bank account or e-wallet in IDR (Rp).
4. Service Delivery: To provide access to sportsbook markets (BRI Liga 1, EPL, La Liga, Champions League, etc.), live casino, slot games, and togel lottery products.
5. Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and breaches of our Terms & Conditions.
6. Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and WhatsApp channels.
7. Responsible Gaming: To monitor for indicators of problem gambling behavior and to enforce deposit limits, time-outs, and self-exclusion requests as described on our Responsible Gaming page.
8. Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign information — but only where you have opted in to receive such communications. You may opt out at any time.
9. Platform Improvement: To analyze aggregated and anonymized usage data to improve platform performance, user experience, and product offerings.
10. Legal Obligations: To comply with any applicable legal or regulatory obligations placed on spam4d as an internationally operating online gaming platform.

For each category of processing described in Clause 5, spam4d relies on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and spam4d — including account creation, game access, and payment processing.
• Legal Obligation: Processing necessary to comply with applicable AML, KYC, responsible gaming, and data-retention laws and regulations.
• Legitimate Interests: Processing carried out for spam4d's legitimate business interests — such as fraud prevention, platform security, and aggregated analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — most notably for direct marketing communications. You may withdraw consent at any time by contacting our support team or updating your account communication preferences.

spam4d does not sell, rent, or trade your Personal Data to any third party for commercial gain. We may, however, share your data with carefully selected third parties in the following circumstances:

• Payment Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum data necessary to process your deposit or withdrawal instructions.
• KYC & Identity Verification Providers: Specialist third-party verification services that process your identity documents on our behalf to confirm eligibility and age. These providers act as Data Processors under binding data-processing agreements.
• Fraud Prevention & AML Screening Services: Technology providers that analyze transaction patterns and device signals to detect suspicious activity and protect the integrity of the platform.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session identifiers necessary to deliver game content. They do not receive your full personal profile.
• IT Infrastructure & Cloud Providers: Hosting and cloud-computing providers on whose infrastructure the spam4d platform operates. All such providers are bound by strict confidentiality and data-security obligations.
• Legal and Regulatory Authorities: We may disclose your Personal Data to law enforcement agencies, courts, or regulatory bodies where we are legally required to do so or where disclosure is necessary to protect the rights, property, or safety of spam4d, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of spam4d's assets, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

As an internationally operating platform serving Indonesian players, spam4d may transfer your Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, we implement appropriate safeguards to ensure that your data receives a standard of protection equivalent to that described in this Policy, including:

• Binding contractual clauses (standard contractual clauses or equivalent data transfer agreements) with all Data Processors receiving your data internationally.
• Selection of service providers operating in jurisdictions that maintain recognized data-protection standards.
• Regular review of international Data Processor agreements to ensure ongoing compliance with our data-protection obligations.

By using the spam4d platform, you acknowledge and consent to the international transfer of your Personal Data under the safeguards described above.

spam4d retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention schedules are as follows:

Upon expiry of the applicable retention period, your Personal Data is securely deleted or anonymized in a manner that prevents re-identification. Anonymized data derived from your usage may be retained indefinitely for aggregate analytics and platform improvement purposes.

spam4d applies a layered, defense-in-depth approach to data security. Our technical and organizational security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit using industry-standard TLS protocols.
• Encryption at Rest: Sensitive data fields — including identity documents and financial account details — are encrypted at the database layer using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions and comprehensive access logging.
• Multi-Factor Authentication: Administrative access to systems containing Personal Data requires multi-factor authentication.
• Regular Security Audits: The platform undergoes periodic penetration testing and security assessments conducted by independent third-party specialists.
• Incident Response Plan: spam4d maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify affected players promptly in accordance with applicable obligations.

spam4d uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session state, and to understand how players interact with our services. The cookie categories we use are described below:

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect your experience on the spam4d platform. spam4d does not use cookies for third-party advertising or cross-site tracking purposes.

As a Data Subject, you hold a meaningful set of rights over your Personal Data held by spam4d. We are committed to honoring these rights promptly and without undue obstruction. Your rights are summarized below:

To exercise any of the above rights, please contact our Data Protection Officer using the details set out in Clause 16. We will acknowledge your request within 48 hours and aim to fulfill it within 30 days. In complex cases, this period may be extended by a further 30 days, with notification to you explaining the reason for the delay.

The spam4d platform is strictly for adults aged 21 years and older. We do not knowingly collect Personal Data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If we become aware that Personal Data has been collected from a person under the age of 21 — whether through misrepresentation at registration or any other means — we will immediately suspend the relevant account, initiate a full data deletion process for all associated records, and take appropriate steps to prevent future access.

If you are a parent or guardian and believe that a minor in your care has registered an account with spam4d, please contact us immediately using the details in Clause 16. We will investigate and act on your report without delay.

The spam4d platform may occasionally reference or display content from third-party service providers — such as game studios, streaming data providers, or payment processors — whose services are integrated into the platform experience. While we apply due diligence in selecting our partners, spam4d does not control and is not responsible for the privacy practices or content of any third-party service operating under its own terms and privacy policy.

We encourage you to review the privacy policies of any third-party service you interact with independently of spam4d. This Policy applies solely to Personal Data collected and processed by spam4d in connection with your use of the spam4d platform at spam4d.cam.

spam4d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. When material changes are made, we will notify registered players via email and display a prominent notice on the platform at least seven (7) days before the revised Policy takes effect.

The "Last updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the spam4d platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use and contact us to close your account before the effective date.

We recommend that you review this Policy periodically to stay informed about how we protect your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by spam4d, please contact our Data Protection Officer (DPO) through any of the following channels:

• Live Chat: Available 24/7 directly through the spam4d platform — select "Privacy / Data Request" as your enquiry category.
• WhatsApp Support: Available 24/7 — contact details provided upon account registration.
• Email (DPO): [email protected] — please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line for priority routing.
• Response Time: All privacy-related enquiries are acknowledged within 48 hours and resolved within 30 calendar days (WIB business hours apply to initial triage).

For urgent matters relating to suspected unauthorized account access, data breach concerns, or requests to immediately restrict processing of your data, please use the live chat channel to ensure the fastest possible response from our security and compliance team.