Privacy Policy

1. Introduction

Welcome to the pap4d Privacy Policy. This document outlines how pap4d ("we," "us," "our," or "the Company") collects, uses, protects, stores, and manages personal information from users ("you," "your," or "the User") of our online gaming platform located at https://pap4d.cam (the "Platform" or "Service"). At pap4d, we are deeply committed to protecting your privacy and handling your personal data with the utmost care, transparency, and security.

This Privacy Policy applies to all users who access or interact with the pap4d Platform, including visitors who browse without registering, registered account holders, and anyone who communicates with our customer support team. By accessing the Platform, creating an account, or using our services, you consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you should not use the pap4d Platform.

We operate in compliance with international data protection standards and Indonesian privacy regulations. Our commitment extends to implementing bank-grade security measures, limiting data collection to what is strictly necessary for service provision, and ensuring you maintain control over your personal information. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your overall use of pap4d services.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a pap4d account, you voluntarily provide personal information necessary for identity verification, account management, and regulatory compliance. This information includes:

• Identity Information: Full legal name, date of birth, nationality, and gender as they appear on your Indonesian KTP (Kartu Tanda Penduduk) or valid passport.
• Contact Information: Email address, phone number (mobile), and residential address in Indonesia including city, province, and postal code.
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers for account recovery purposes.
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals via BCA, BRI, BNI, Mandiri, or other supported Indonesian banks. E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja transactions.
• Identification Documents: Scanned or photographed copies of your Indonesian KTP or passport submitted during the KYC (Know Your Customer) verification process to confirm you meet the minimum age requirement of 21 years and to verify your identity.
• Communication Records: Content of messages exchanged with our customer support team via live chat, email, or WhatsApp, including inquiries, complaints, and feedback.

2.2 Information Collected Automatically

When you access and interact with the pap4d Platform, certain information is collected automatically through technological means:

• Device Information: Type of device (smartphone, tablet, desktop computer), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers.
• Connection Data: IP address, internet service provider (ISP), connection type (Wi-Fi, mobile data), and approximate geographic location derived from IP address (city/region level, not precise coordinates).
• Usage Data: Pages visited on the Platform, features accessed, time spent on each page, games played, bets placed, clickstream data, referral sources, and navigation patterns.
• Transaction History: Records of all financial transactions including deposit amounts, withdrawal requests, payment methods used, transaction timestamps, and transaction status (completed, pending, failed).
• Gaming Activity: Betting history across sports betting, casino games, slots, and lottery draws, including bet amounts, odds, outcomes, winnings, losses, and cumulative account balance over time.

2.3 Information from Third Parties

In limited circumstances, pap4d may receive information about you from third-party sources:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to confirm successful deposits and process withdrawals.
• Identity Verification Services: Automated verification results from third-party KYC service providers that cross-reference your submitted documents against government databases to detect fraud and ensure regulatory compliance.
• Marketing Partners: Aggregated demographic and interest data (never personally identifiable information) from advertising platforms to improve targeting of promotional campaigns to relevant audiences.

Data Category	Purpose	Legal Basis
Identity & Contact Info	Account creation, communication, age verification	Contract performance, legal obligation
Financial Data	Processing deposits/withdrawals, fraud prevention	Contract performance, legitimate interest
Gaming Activity	Service provision, responsible gaming monitoring	Contract performance, legal obligation
Device & Usage Data	Platform optimization, security, analytics	Legitimate interest, consent (cookies)

3. How We Use Your Information

pap4d collects and processes your personal information for specific, legitimate purposes related to providing, improving, and securing our gaming services. We use your data in the following ways:

3.1 Service Provision and Account Management

• Creating and maintaining your pap4d user account with unique login credentials
• Verifying your identity and age to ensure compliance with the 21+ minimum age requirement
• Processing deposits from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay)
• Executing withdrawal requests and transferring funds to your verified bank account or e-wallet
• Displaying your account balance, transaction history, and betting records in Indonesian Rupiah (Rp)
• Managing bonus eligibility, tracking wagering requirements, and crediting promotional offers
• Providing customer support via live chat, email, and WhatsApp in Indonesian and English

3.2 Security and Fraud Prevention

• Monitoring account activity for suspicious patterns indicative of unauthorized access, multi-accounting, bonus abuse, or fraudulent transactions
• Implementing anti-money laundering (AML) measures to detect and prevent financial crimes
• Protecting against automated attacks, bots, scraping, and other malicious activities
• Verifying the authenticity of identification documents submitted during KYC verification
• Investigating reported security incidents, policy violations, and disputes between users

3.3 Regulatory Compliance and Legal Obligations

• Complying with international gaming licensing requirements and regulatory reporting obligations
• Maintaining records for auditing purposes as required by gaming authorities
• Responding to lawful requests from law enforcement, regulatory bodies, or courts
• Implementing responsible gaming measures, including self-exclusion enforcement and problem gambling identification
• Adhering to data protection laws and privacy regulations applicable to Indonesian residents

3.4 Platform Improvement and Analytics

• Analyzing user behavior patterns to identify popular games, optimize page layouts, and improve navigation
• Testing new features, game integrations, and payment methods with select user groups
• Measuring platform performance, page load times, and mobile app responsiveness
• Identifying technical issues, bugs, and areas requiring optimization across devices and browsers
• Gathering aggregated, anonymized statistics about Indonesian player preferences for togel lottery games, football betting on BRI Liga 1 and EPL, and slot game categories

3.5 Marketing and Communications

• Sending promotional emails about new game releases, bonus offers, and special events (with opt-out option)
• Delivering personalized recommendations based on your gaming preferences and betting history
• Notifying you of significant account events, such as large wins, withdrawal approvals, or security alerts
• Communicating important updates to our Terms and Conditions, Privacy Policy, or responsible gaming resources
• Conducting customer satisfaction surveys to improve service quality (participation is voluntary)

4. Information Sharing and Disclosure

pap4d respects your privacy and limits information sharing to circumstances where disclosure is necessary for service provision, legal compliance, or with your explicit consent. We do not sell your personal information to third parties for marketing purposes.

4.1 Service Providers and Business Partners

We share limited personal information with trusted third-party service providers who assist in operating the pap4d Platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive your financial account details necessary to process deposits and withdrawals. These entities are bound by banking confidentiality laws.
• Game Providers: Software studios like Pragmatic Play, Evolution Gaming, Microgaming, and Spribe receive minimal technical data (bet amounts, game outcomes) necessary to deliver gaming content but do not have access to your identity or contact information.
• Identity Verification Services: KYC providers receive copies of your submitted identification documents to perform automated verification checks against government databases, fraud detection lists, and age verification systems.
• Cloud Infrastructure Providers: Hosting companies that store encrypted database backups and platform data in secure data centers with restricted physical and digital access controls.
• Customer Support Tools: Live chat and ticketing software providers that facilitate communication between you and our support team (conversations are logged for quality assurance and training purposes).

All third-party service providers are contractually bound to confidentiality agreements, data processing terms consistent with this Privacy Policy, and industry-standard security practices. They are prohibited from using your information for purposes other than providing contracted services to pap4d.

4.2 Legal Requirements and Protection of Rights

pap4d may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal processes such as court orders, subpoenas, or regulatory investigations
• Respond to lawful requests from law enforcement or government authorities investigating criminal activity
• Enforce our Terms and Conditions, including investigating potential violations
• Protect the rights, property, safety, or security of pap4d, our users, or the public from harm or illegal activity
• Detect, prevent, or address fraud, security breaches, or technical issues

4.3 Business Transfers

In the event that pap4d undergoes a business transition such as merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. You will be notified via email and/or prominent notice on our Platform of any such change in ownership or control of your personal data, along with choices you may have regarding your information.

5. Data Security Measures

Protecting your personal information is a top priority at pap4d. We employ multiple layers of security controls using industry-leading technologies and best practices:

5.1 Technical Security

• SSL/TLS Encryption: All data transmitted between your device and pap4d servers is encrypted using 256-bit Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols, the same standard used by major Indonesian banks for online banking.
• Password Protection: User passwords are hashed using bcrypt or similar one-way cryptographic functions, meaning even pap4d administrators cannot view your actual password. We enforce strong password requirements (minimum length, character variety) and recommend periodic password changes.
• Database Encryption: Sensitive information stored in our databases (personal details, financial records, identification documents) is encrypted at rest using AES-256 encryption, ensuring data remains protected even if physical servers were compromised.
• Firewall Protection: Multi-layered network firewalls block unauthorized access attempts, distributed denial-of-service (DDoS) attacks, and malicious traffic before reaching pap4d servers.
• Intrusion Detection Systems: Automated monitoring tools continuously scan for suspicious activity, unusual access patterns, and potential security breaches, triggering immediate alerts to our security team.

5.2 Organizational Security

• Access Controls: Employee access to user data is restricted on a need-to-know basis using role-based permissions. Only authorized personnel with legitimate business reasons (customer support, compliance, fraud investigation) can access personal information.
• Background Checks: All employees with access to user data undergo background screening and sign confidentiality agreements before handling sensitive information.
• Security Training: Regular training programs educate staff on data protection principles, social engineering threats (phishing, pretexting), and incident response procedures.
• Audit Trails: All access to personal information is logged with timestamps, user IDs, and purpose documentation, creating an auditable trail for compliance and forensic purposes.
• Third-Party Audits: Independent security firms periodically conduct penetration testing, vulnerability assessments, and security audits of pap4d infrastructure to identify and remediate potential weaknesses.

5.3 Your Security Responsibilities

While pap4d implements robust security measures, protecting your account also requires your participation:

• Never share your password, username, or security question answers with anyone, including pap4d staff (legitimate support agents will never ask for your password)
• Use strong, unique passwords that combine uppercase and lowercase letters, numbers, and symbols
• Enable two-factor authentication (2FA) when available for additional login security
• Log out of your account when using shared or public devices
• Keep your email account secure, as it is used for password resets and sensitive account notifications
• Report any suspicious account activity, unauthorized transactions, or security concerns immediately to customer support

6. Data Retention

pap4d retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Active Account Data

While your pap4d account remains active, we retain all associated information (profile details, transaction history, gaming records) to provide ongoing services, maintain account functionality, and ensure accurate financial record-keeping.

6.2 Closed Account Data

When you voluntarily close your account or we terminate an account for Terms violations, we retain certain information for specific retention periods:

• Identity and KYC Documents: Retained for 5-7 years post-closure as required by anti-money laundering (AML) regulations and gaming licensing requirements
• Financial Transaction Records: Retained for 7 years to comply with tax laws, accounting standards, and potential audit requirements
• Gaming Activity Logs: Retained for 3-5 years for dispute resolution, regulatory reporting, and responsible gaming research purposes
• Communication Records: Customer support conversations retained for 2 years for quality assurance, training, and complaint resolution

6.3 Anonymization and Deletion

Once retention periods expire and no legal holds exist, personal information is either securely deleted (irreversible removal from all systems and backups) or anonymized (stripped of all identifying details) such that it can no longer be linked to you. Anonymized data may be retained indefinitely for statistical analysis, trend identification, and platform improvement without privacy implications.

7. Your Privacy Rights

As a pap4d user, you have specific rights regarding your personal information. We are committed to facilitating the exercise of these rights through clear processes and responsive support.

7.1 Access and Portability

You have the right to request access to the personal information pap4d holds about you. Upon verification of your identity, we will provide a copy of your data in a commonly used, machine-readable format (PDF or CSV). This includes profile information, transaction history, betting records, and communication logs.

7.2 Correction and Update

You can update most personal information (email address, phone number, residential address) directly through your account settings. For changes to name, date of birth, or other KYC-verified details, contact customer support with supporting documentation. We will process corrections within 5-10 business days.

7.3 Deletion and Erasure

You may request deletion of your personal information by submitting a written request to customer support. However, deletion requests are subject to certain limitations. We cannot delete information required for ongoing legal obligations (AML record-keeping, tax reporting), active dispute resolution, or fraud investigation. Once legal retention periods expire, deletion will be processed.

7.4 Objection and Restriction

You can object to certain data processing activities, particularly direct marketing communications. Use the unsubscribe link in promotional emails or adjust email preferences in account settings. You may also request restriction of processing (temporarily limiting use of your data) in specific circumstances, such as during dispute resolution.

7.5 Exercising Your Rights

To exercise any privacy rights, contact pap4d at [email protected] with "Privacy Rights Request" in the subject line. Include your full name, registered email address, and specific request. We will respond within 30 days, though complex requests may require additional time (up to 90 days total) with explanation.

8. Cookies and Tracking Technologies

pap4d uses cookies and similar tracking technologies to enhance user experience, maintain session security, and gather analytics. Cookies are small text files stored on your device by your web browser. We use both session cookies (deleted when you close your browser) and persistent cookies (remain until expiry or manual deletion).

8.1 Types of Cookies We Use

• Essential Cookies: Strictly necessary for Platform functionality. These enable account login, maintain your session, remember language preferences, and ensure security. Essential cookies cannot be disabled without impairing core services.
• Performance Cookies: Collect anonymous usage statistics such as page views, time on site, and navigation paths to help us optimize Platform design and improve loading speeds.
• Functional Cookies: Remember your preferences (display settings, game filters, bet slip configurations) to provide personalized experiences across sessions.
• Advertising Cookies: Track your interactions with promotional content to measure campaign effectiveness and deliver relevant bonus offers (with your consent).

8.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or receive warnings before cookies are stored. Note that disabling essential cookies will impair pap4d Platform functionality, including preventing login and transaction processing.

9. International Data Transfers

While pap4d primarily serves Indonesian residents, our technical infrastructure may involve international data transfers. User data is stored on secure servers located in jurisdictions with robust data protection laws. When data is transferred internationally (for example, to cloud service providers or payment processors with global operations), we ensure appropriate safeguards are in place, including standard contractual clauses, Privacy Shield certifications (where applicable), or equivalent mechanisms ensuring data protection standards equivalent to those in Indonesia.

10. Changes to This Policy

pap4d reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. When material changes occur, we will notify you through prominent Platform notices, email announcements, or in-app alerts at least 30 days before changes take effect. The "Last Updated" date at the top of this page indicates the most recent revision. Your continued use of pap4d services after the effective date constitutes acceptance of the updated Privacy Policy. We encourage periodic review of this page to stay informed about how we protect your information.

11. Contact Information

For questions, concerns, or requests related to this Privacy Policy or pap4d's data protection practices, please contact us through the following channels:

• Email: [email protected] (include "Privacy Inquiry" in the subject line for priority routing)
• Live Chat: Available 24/7 on the pap4d website and mobile app (select "Privacy/Data Protection" as your inquiry topic)
• Customer Support Line: Available in Indonesian and English, operational hours displayed in WIB timezone

Our dedicated privacy team will respond to all inquiries within 5-7 business days. For urgent matters related to suspected data breaches or unauthorized account access, use live chat for immediate assistance.