Privacy Policy

This Privacy Policy applies to all personal data collected, processed, stored, and shared by api4d in connection with the operation of the online betting platform accessible at https://api4d.bet (the "Platform"). It governs data processing activities for all Members, visitors, and prospective registrants regardless of their location, provided they access the Platform from Indonesia or another jurisdiction in which access is not expressly prohibited.

The following defined terms are used throughout this Policy:

api4d collects Personal Data across several categories depending on how you interact with the Platform. The table below summarises the main data categories, specific data points within each category, and the purpose for which each category is collected.

api4d collects Personal Data through the following channels and mechanisms:

• Direct Registration: When you create a Member account on the Platform, you provide Identity Data and Contact Data directly through the registration form.
• KYC Submissions: When you submit identity documents, proof of address, or payment method confirmation to complete our Know Your Customer process, the documents and extracted data are collected and stored.
• Deposits & Withdrawals: When you initiate a transaction via a local Indonesian bank (BCA, BRI, BNI, Mandiri) or e-wallet (OVO, DANA, GoPay), Financial Data is collected from your transaction confirmation and our payment gateway partner's response.
• Platform Interactions: As you browse the Platform, place bets, play casino games, or participate in togel draws, Gaming & Wagering Data and Technical Data are automatically generated and recorded by our platform infrastructure.
• Customer Support Channels: When you contact our support team via live chat or email, the content of those communications, together with any attachments or screenshots you provide, is recorded as Communications Data.
• Cookies & Tracking Technologies: The Platform uses cookies, web beacons, local storage objects, and similar technologies to collect Technical Data automatically when you visit or interact with the Platform. See Section 7 for full details.
• Third-Party Payment Providers: Our payment processing partners may share transaction confirmation data with api4d to reconcile deposits and withdrawals. This data is limited to transaction reference numbers, amounts in IDR (Rp), timestamps, and payment method identifiers.
• Responsible Gaming Requests: If you contact our support team to request a self-exclusion, deposit limit adjustment, or cooling-off period, any health or well-being information you voluntarily share in that context is treated as Sensitive Data and handled with an elevated level of care.

api4d processes your Personal Data for the following specific purposes. Each purpose is tied to a legal basis described in Section 5.

• Account Creation & Management: To register your account, verify your identity and age (21+), authenticate your login sessions, manage your profile settings, and maintain your account in good standing.
• Payment Processing: To process deposits and withdrawals in Indonesian Rupiah (IDR / Rp), verify that the receiving payment method matches your registered identity, and maintain accurate financial records of all transactions.
• KYC & Regulatory Compliance: To satisfy anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations imposed by our licensing authority. This includes verifying that funds deposited on the Platform are derived from legitimate sources.
• Platform Delivery & Game Integrity: To deliver the betting and gaming products you access — including the sportsbook, live casino, slots, and togel draws — and to ensure that all outcomes are generated and settled fairly and accurately.
• Fraud & Security Monitoring: To detect, investigate, and prevent fraudulent activity, unauthorised access, multi-accounting, bonus abuse, match-fixing involvement, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support & Dispute Resolution: To respond to your support queries, investigate account-related complaints, and facilitate the resolution of betting disputes in a fair and timely manner.
• Responsible Gaming: To monitor wagering patterns for indicators of problem gambling behaviour, implement self-exclusion or deposit limit requests, and proactively reach out to Members displaying concerning activity patterns — all consistent with our Responsible Gaming Policy.
• Promotional Communications: Where you have given explicit consent, to send you information about bonuses, promotions, seasonal offers (e.g., Idul Fitri bonus campaigns, Ramadhan reload offers, Independence Day specials), and new platform features via email or in-platform notifications. You may withdraw consent at any time.
• Platform Analytics & Improvement: To analyse aggregate and anonymised usage data in order to improve Platform performance, user experience, game library curation, and payment method availability for Indonesian Members.
• Legal Obligations: To comply with any legal order, regulatory request, court judgment, or law enforcement direction requiring the disclosure of Personal Data, where we are legally compelled to do so.

api4d processes your Personal Data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions — including account management, payment processing, game delivery, and customer support. Without this processing, we cannot provide the Platform services to you.
• Legal Obligation: Processing necessary to comply with applicable legal requirements — including KYC, AML/CTF obligations, and responses to valid legal orders from competent authorities.
• Legitimate Interests: Processing carried out in furtherance of api4d's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — principally for the sending of direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Vital Interests: In exceptional circumstances, processing may be necessary to protect your vital interests or those of another person — for example, where a Member discloses a medical emergency or suicidal ideation during a support interaction, and we need to refer the matter to emergency services.

api4d does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the following limited and controlled circumstances:

• Payment Processors: We share Financial Data with our payment gateway partners — including those facilitating transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, and GoPay — strictly to the extent necessary to process your deposit and withdrawal transactions. These partners operate under data processing agreements that prohibit them from using your data for any purpose beyond transaction execution.
• Game Studio Providers: When you play a game provided by a third-party studio (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), your session data — including bet amounts and game outcomes — is shared with that studio's platform infrastructure for game-state management and result certification. Studios do not receive your identity or financial details.
• KYC & Identity Verification Providers: We engage specialist identity verification services to assist with document authentication and age verification. These providers process your submitted identity documents and return a verification result to api4d. They are contractually prohibited from retaining or independently using your identity data.
• Fraud Prevention & AML Partners: We may share Technical Data, account activity signals, and transaction patterns with specialist fraud-detection and AML compliance platforms. These services help us identify multi-accounting, bonus abuse, and money-laundering patterns. All such partners are bound by strict data processing agreements.
• Cloud Infrastructure Providers: The Platform operates on cloud infrastructure. Our hosting provider stores server logs, database records, and backup data on our behalf in secured, access-controlled data centres. They do not independently access or use your Personal Data.
• Legal & Regulatory Authorities: We will disclose Personal Data to government bodies, regulators, law enforcement agencies, or courts where we are legally required to do so by a valid court order, subpoena, regulatory directive, or applicable law. We will notify you of such a disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of api4d's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will provide notice prior to your Personal Data being transferred and becoming subject to a different privacy policy.

api4d uses cookies and similar tracking technologies to operate the Platform efficiently, secure your session, and — where you have consented — to deliver personalised experiences and measure the effectiveness of our marketing. The following cookie categories are in use:

You may manage or withdraw your consent to non-essential cookies at any time via the cookie preference centre accessible from the Platform's footer. Withdrawing consent to analytics or marketing cookies will not affect your ability to access the Platform or any of its betting and gaming features. Disabling strictly necessary cookies may impair Platform functionality.

We do not use third-party advertising networks or retargeting pixel technologies that share your browsing behaviour with external advertising platforms.

api4d retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Identity Data, Contact Data, Account Data, and Financial Data are retained for the full duration of your active Membership plus a minimum of 5 years following account closure, to satisfy AML record-keeping obligations and to defend against potential legal claims.
• KYC Documents: Identity documents and verification records are retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later — in line with standard AML compliance retention requirements.
• Transaction Records: Full records of all deposits, withdrawals, and wagering activity (including togel draw participations and sportsbook bet histories) are retained for a minimum of 5 years following each transaction date.
• Communications Data: Live chat transcripts and support email records are retained for 2 years from the date of the interaction, or for the duration of any active dispute to which they relate, whichever is longer.
• Marketing Preference Data: Retained until you withdraw consent, at which point your marketing profile is deleted within 30 days. A record of your opt-out is retained indefinitely to demonstrate consent status.
• Analytics Data: Aggregated and anonymised analytics data, from which individual identification is not possible, may be retained indefinitely for long-term product improvement purposes.
• Closed / Suspended Accounts: Where an account is closed voluntarily, the full retention periods above apply from the date of closure. Where an account is suspended due to fraud, AML investigation, or prohibited conduct, data may be retained beyond standard periods for the duration of any ongoing investigation or legal proceedings.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with industry-standard data destruction protocols.

api4d implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, alteration, and disclosure. Our security measures include, but are not limited to, the following:

• Transport Encryption: All data transmitted between your device and the api4d Platform is protected by 256-bit TLS (Transport Layer Security) encryption. Every page on the Platform is served over HTTPS. Unencrypted HTTP connections are automatically redirected to HTTPS.
• Data-at-Rest Encryption: Sensitive Data stored in our databases — including NIK values, financial account details, and KYC document files — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Password Security: Member passwords are never stored in plain text. We apply industry-standard one-way hashing with per-user salting, ensuring that even in the event of an unauthorised database access, password values cannot be recovered.
• Access Controls: Access to production systems containing Personal Data is restricted to authorised api4d personnel on a strict need-to-know basis. All administrative access is logged, monitored, and subject to multi-factor authentication.
• Fraud & Anomaly Detection: Our platform monitoring systems continuously analyse login patterns, transaction behaviours, and session characteristics to detect suspicious activity — including attempts at unauthorised account access, unusual withdrawal patterns, and multi-account signals.
• Penetration Testing: api4d commissions regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate weaknesses in our infrastructure before they can be exploited.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, api4d will notify affected Members and the relevant supervisory authority within the timeframe required by applicable law. Notification will include the nature of the breach, categories of data affected, likely consequences, and remediation steps taken.

As a data subject, you hold a set of meaningful rights over the Personal Data that api4d holds about you. These rights may be exercised at any time by contacting our Data Protection contact as described in Section 14. api4d will respond to all verified rights requests within 30 days of receipt.

To exercise any of the above rights, contact us at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request" and a description of the right you wish to exercise. We may ask you to verify your identity before processing the request.

The api4d Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from any individual under the age of 21. Participation in online betting by persons under 21 is strictly prohibited under our Terms & Conditions and our Responsible Gaming Policy.

During registration, api4d requires confirmation of date of birth and, where triggered, submission of a government-issued ID confirming age. Any account found to have been registered by an individual under 21 years of age will be immediately closed, all associated funds forfeited, and any Personal Data collected deleted as promptly as our legal retention obligations allow.

The api4d Platform integrates services provided by third-party game studios, payment processors, and technology vendors. While api4d selects these partners carefully and requires them to maintain data protection standards consistent with our own, we are not responsible for the privacy practices of these third parties in relation to their own independent data processing activities.

Game studios integrated on the Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — each maintain their own privacy policies governing how they process game session data within their own server environments. We encourage you to review those policies independently if you have concerns about data handling at the studio level.

Payment partners — including those facilitating transactions via BCA, BRI, BNI, Mand iri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja — process your transaction data under their own regulatory obligations. api4d shares only the minimum data necessary with these partners to execute your requested payment transaction.

The Platform does not contain hyperlinks to external third-party websites. All navigation within the Platform remains within the api4d domain. Accordingly, the risk of inadvertent data exposure through outbound links is minimised by design.

api4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform functionality. When we make material changes to this Policy, we will:

• Update the "Last updated" date displayed at the top of this page;
• Post a prominent notice on the Platform's homepage for a minimum of 14 days following the change;
• Where the change materially affects how we process your Personal Data, send an in-platform notification or email to all active Members prior to the change taking effect;
• Where required by applicable law, seek fresh consent from affected Members before implementing the change.

Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with an amendment, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We recommend that you review this Privacy Policy periodically — at minimum when you receive a notification of change — to stay informed about how api4d protects your Personal Data. Prior versions of this Policy are available upon written request to our support team.

api4d takes its data protection responsibilities seriously. If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights described in Section 10, or wish to report a potential data protection concern, please use the contact information below. Our team is available 24/7 with Indonesian-speaking support agents on hand for Members who prefer to communicate in Bahasa Indonesia, even though this Platform is operated in English.

If you are not satisfied with our response to a data rights request or privacy complaint, you have the right to escalate your concern to the relevant supervisory authority in your jurisdiction. Indonesian residents may contact the Kementerian Komunikasi dan Informatika (Ministry of Communication and Information Technology) or seek guidance from the Otoritas Jasa Keuangan (OJK) for matters relating to financial data.

api4d is committed to resolving all privacy complaints promptly, transparently, and in good faith. We regard every data protection enquiry as an opportunity to improve our practices and reinforce the trust that our Members place in us.