btc4d Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below. Capitalised terms not defined here carry the meanings given to them in the btc4d Terms & Conditions.

• "btc4d" — refers to the operator of the btc4d online gaming platform accessible at btc4d.one, including its parent company, subsidiaries, and affiliated entities.
• "Member" — any individual who has completed registration on the btc4d Platform and holds an active or suspended account.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, contact details, financial account information, device identifiers, and behavioral data generated through platform use.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Controller" — the entity that determines the purposes and means of Processing Personal Data. btc4d is the Controller in respect of all Member Personal Data.
• "Processor" — a third party that processes Personal Data on behalf of btc4d under a contractual data processing agreement.
• "KYC" — Know Your Customer identity and age verification procedures conducted in accordance with applicable anti-money-laundering and responsible gaming obligations.
• "Cookies" — small text files placed on your device by the btc4d Platform to support session management, analytics, and personalisation functions.

btc4d collects Personal Data across several categories depending on the nature of your interaction with the Platform. The table below summarises the specific data points collected within each category:

btc4d collects Personal Data through the following channels:

• Direct submission — information you provide when registering an account, completing the KYC process, making a deposit or withdrawal, entering a promotion, or contacting our support team.
• Automated technical collection — data gathered automatically when you access the Platform, including IP addresses, device fingerprints, cookie data, session logs, and clickstream analytics. This collection occurs whether or not you are logged into your btc4d account.
• Third-party payment providers — when you initiate a deposit or withdrawal via a bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the payment provider may share transaction confirmation data with btc4d to reconcile your wallet balance.
• KYC and identity verification partners — btc4d uses licensed third-party identity verification services to cross-reference submitted KYC documents against authoritative databases. These partners share only a verification result (pass/fail) and flagged risk indicators, not the underlying document data, with btc4d's member-facing systems.
• Fraud prevention and risk services — btc4d may receive risk-scoring signals from third-party fraud prevention platforms to protect the integrity of the Platform and its members.

btc4d processes your Personal Data only for specified, explicit, and legitimate purposes. The table below maps each processing purpose to the relevant data categories:

btc4d does not use your Personal Data for automated individual decision-making that produces legal or similarly significant effects without human oversight, except where such processing is required for fraud prevention or regulatory compliance, in which case you retain the right to request human review of the decision.

btc4d relies on one or more of the following legal bases when processing your Personal Data:

• Contractual necessity — Processing is required to perform the contract between btc4d and you as a registered Member, including account management, payment processing, and delivery of gaming services.
• Legal obligation — Processing is required to comply with applicable anti-money-laundering regulations, age verification obligations, and international gaming licence conditions to which btc4d is subject.
• Legitimate interests — Processing is necessary for btc4d's legitimate interests in fraud prevention, platform security, abuse detection, and business analytics, provided those interests are not overridden by your fundamental rights.
• Consent — Where processing is not covered by the above bases — in particular, the use of your data for marketing and promotional communications — btc4d will request your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

btc4d does not sell your Personal Data. We share data only with third parties who have a legitimate need to receive it in connection with the services they provide to btc4d or to you, and only under strict contractual data protection obligations. The categories of recipients are as follows:

• Payment service providers — Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial and identity data required to execute deposit and withdrawal instructions.
• Identity verification and KYC partners — Licensed third-party verification services receive copies of KYC documents solely for the purpose of confirming member identity and age in compliance with btc4d's obligations as an internationally licensed gaming operator.
• Game content providers — Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive pseudonymised session data necessary to deliver and support the games they supply to the btc4d Platform.
• Fraud prevention and risk management services — Specialised third-party risk platforms may receive Technical Data and Gaming Activity Data to generate risk scores that help protect btc4d and its members from fraudulent account activity.
• Cloud infrastructure and hosting providers — btc4d uses internationally recognised cloud hosting providers to store and process data. These providers act as Processors under contractual data processing agreements and have no independent right to use your data.
• Regulatory and law enforcement authorities — btc4d may disclose Personal Data to competent authorities where required to do so by applicable law, court order, or the terms of its operating licence. btc4d will notify you of any such disclosure to the extent permitted by law.

btc4d retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. Our standard retention schedule is as follows:

When retention periods expire, Personal Data is securely deleted or irreversibly anonymised. Anonymised, aggregated data that cannot be linked back to any individual may be retained indefinitely for platform analytics purposes.

The btc4d Platform uses Cookies and similar tracking technologies to deliver core platform functionality, understand how members use the site, and improve the overall experience. We use the following categories of Cookies:

• Strictly Necessary Cookies — Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without affecting your ability to use the Platform.
• Functional Cookies — Remember your preferences, such as language settings, preferred game lobby layout, and bet slip configuration, so you do not need to re-enter them on each visit.
• Analytics Cookies — Collect anonymised data about how pages are visited and how members navigate the Platform. This information is used to improve site performance and content relevance. These cookies are set only where you have provided consent.
• Marketing Cookies — Used to deliver relevant promotional content. btc4d does not share marketing cookie data with third-party advertising networks. These cookies are set only where you have provided consent.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent your access to the btc4d Platform. For detailed guidance on managing cookies in your specific browser, consult the help documentation provided by your browser's developer.

As a Member of btc4d, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact our Data Protection team at the address specified in Clause 13.

btc4d implements a comprehensive, layered security framework to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include, without limitation:

• 256-bit SSL/TLS encryption on all data in transit between your device and btc4d's servers.
• AES-256 encryption for sensitive data fields stored at rest, including KYC document data, financial identifiers, and authentication credentials.
• Multi-factor authentication (MFA) enforced for all btc4d staff accessing member data systems.
• Role-based access controls ensuring that staff can only access the categories of member data relevant to their specific job function.
• Regular penetration testing conducted by independent third-party security firms at least once per calendar year.
• Continuous intrusion detection monitoring on all production infrastructure, with automated alerts for anomalous access patterns.
• Incident response plan — in the event of a confirmed data breach affecting member Personal Data, btc4d will notify affected Members and relevant regulatory authorities within the timeframes required by applicable law, providing clear information on the nature of the breach and the steps taken to mitigate its impact.

While btc4d maintains robust security standards, no system is entirely immune to risk. Members are encouraged to use strong, unique passwords for their btc4d accounts and to enable any additional security options offered through the account settings panel.

The btc4d Platform is strictly for adults aged 21 years and over. btc4d does not knowingly collect Personal Data from individuals under the age of 21. If btc4d discovers that an account has been created by, or that Personal Data has been submitted by, a person under 21 years of age, that account will be immediately suspended, all balances will be frozen pending investigation, and any Personal Data collected will be securely deleted to the fullest extent permitted by applicable law.

btc4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or the introduction of new platform features that involve the processing of Personal Data. When a material change is made, we will notify registered Members via the email address associated with their account and post a prominent notice on the btc4d Platform at least 7 days before the revised policy takes effect.

Your continued use of the btc4d Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the revised policy, you should cease using the Platform and request account closure. The current version of this Privacy Policy, including its effective date, is always accessible at btc4d.one/privacy-policy.

For non-material changes — such as minor clarifications, typographical corrections, or updates to contact information — btc4d may update the policy without advance notice, although the "Last Updated" date at the top of this document will always reflect the most recent revision.

For all privacy-related enquiries, data rights requests, or questions about this Privacy Policy, please contact the btc4d Data Protection team through any of the following channels. All contact details are provided as plain text and are not clickable links.

• Email: [email protected] — include "Privacy Enquiry" or "Data Rights Request" in the subject line.
• WhatsApp: +62 811 0000 4D00 — available 24/7 for member support including privacy-related questions.
• Live Chat: Available 24 hours a day, 7 days a week, directly from the btc4d Platform after logging into your account.

btc4d's support team includes Indonesian-speaking agents available across all Indonesian time zones — WIB (UTC+7, covering Jakarta and Sumatra), WITA (UTC+8, covering Bali and Sulawesi), and WIT (UTC+9, covering Maluku and Papua). All formal data rights correspondence should be submitted in English to ensure accurate and timely processing.