kpk4d Privacy Policy

The following terms carry the meanings assigned to them throughout this Privacy Policy:

kpk4d acts as the Data Controller for all Personal Data collected through the kpk4d.pro Platform. As Data Controller, kpk4d determines the purposes for which your Personal Data is collected and the manner in which it is processed.

All data protection enquiries, access requests, and erasure requests should be directed to our support team at support@kpk4d.pro (plain text — not a clickable link). We will acknowledge all data-related requests within 5 business days and provide a substantive response within 30 calendar days.

kpk4d is committed to operating in compliance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

kpk4d collects Personal Data across several categories. The specific data we hold about you depends on how you interact with our Platform:

3.1 Registration & Account Data

• Full legal name
• Date of birth (used to verify the 21+ age requirement)
• Email address and mobile phone number
• Residential address (city, province — e.g., Jakarta, Surabaya, Bandung, Bali)
• Username and hashed password
• Preferred language and notification preferences

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (KTP — Indonesian National Identity Card, or valid passport)
• Selfie image holding the identity document
• Proof of payment method ownership (e.g., screenshot of BCA, BRI, BNI, Mandiri, or OVO account showing your registered name and account number)
• Additional documents requested during enhanced due diligence (EDD) where applicable

3.3 Financial Transaction Data

• Deposit and withdrawal amounts (denominated in IDR / Rp)
• Bank account numbers and e-wallet identifiers used for deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction timestamps and reference numbers
• Bonus and promotional credit transaction history

3.4 Gaming & Betting Activity Data

• Game sessions played, bet amounts, win/loss records, and game history across all products (sportsbook, live casino, slots, poker tournaments, fish shooting)
• Sportsbook selections including markets, odds accepted, and bet types (e.g., mix parlay (multi-leg accumulator bets combining multiple markets))
• Session duration, start and end times (recorded in WIB, UTC+7)
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Platform access timestamps and navigation logs

3.6 Communications Data

• Content of live chat conversations with customer support agents
• Email correspondence with support@kpk4d.pro
• Feedback, complaints, and dispute records

kpk4d collects your Personal Data through the following channels:

• Directly from you: When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our customer support team, or participate in promotional activities.
• Automatically: Through cookies, web beacons, session tracking scripts, and server logs when you browse and interact with kpk4d.pro. This includes device identifiers, IP addresses, and clickstream data.
• From third-party payment processors: When you initiate a transaction through a linked bank account or e-wallet (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), we receive confirmation and transaction reference data from those providers.
• From identity verification partners: Where kpk4d uses a third-party KYC/AML provider to cross-reference your submitted identity documents against national or international identity databases, we receive verification results and risk scores.
• From fraud prevention services: We may receive data from fraud prevention and anti-money laundering (AML) monitoring services to detect and prevent prohibited conduct on the Platform.

kpk4d processes your Personal Data for clearly defined purposes. The table below sets out the key processing activities, their purposes, and the legal basis on which each activity is conducted:

Where kpk4d relies on consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time by updating your communication preferences in your Account settings or contacting support@kpk4d.pro. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

kpk4d does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly for the purposes outlined in this Policy:

• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive session and game-outcome data necessary to deliver their games on our Platform. These providers operate under data processing agreements with kpk4d.
• Payment processors & banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja receive only the minimum transaction data required to process your deposits and withdrawals. We do not share your full profile with payment partners.
• KYC & identity verification providers: Third-party providers used to cross-reference identity documents and perform AML screening receive your name, date of birth, and document reference data for verification purposes only.
• Fraud prevention & cybersecurity services: IP addresses, device fingerprints, and behavioural signals may be shared with security providers to detect account takeover attempts, bonus abuse, and money laundering activity.
• Legal and regulatory authorities: kpk4d may disclose Personal Data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, valid court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.
• Professional advisers: Our legal counsel, auditors, and accountants may access relevant data under strict confidentiality obligations in the course of providing professional services to kpk4d.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of kpk4d's business, your Personal Data may be transferred to the acquiring entity. You will be notified of any such transfer and the new entity's privacy practices before the transfer takes effect.

kpk4d retains your Personal Data for the following periods, after which data is securely deleted or anonymised:

Where data is retained beyond the period of your active account solely to fulfil a legal obligation, access to that data is restricted to kpk4d's compliance and legal teams. It is not used for any commercial or marketing purpose.

kpk4d implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security programme includes:

• AES-256 SSL/TLS encryption on all data transmission between your device and kpk4d servers, including login pages, cashier pages, and the KYC upload portal.
• Password hashing using bcrypt with per-user salts. kpk4d never stores your password in plain text.
• Two-factor authentication (2FA) available to all players via their Account settings. We strongly encourage all players to enable 2FA.
• Access controls: Personal Data is accessible internally only on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
• Infrastructure security: kpk4d's servers are hosted in ISO 27001-certified data centres with physical access controls, redundant power supply, and 24/7 monitoring.
• Regular security audits: Our Platform undergoes periodic penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response: kpk4d maintains a documented data breach response plan. In the event of a confirmed breach affecting your Personal Data, we will notify affected players without undue delay and take all necessary remediation steps.

While kpk4d takes all reasonable and practicable steps to protect your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect your account has been compromised, contact support@kpk4d.pro immediately.

kpk4d uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. The following categories of cookies are used:

You can control non-essential cookies through your browser's settings. Most modern browsers allow you to block or delete cookies; however, disabling functional or analytics cookies may affect the quality of your experience on kpk4d.pro. kpk4d does not use third-party advertising or retargeting cookies.

kpk4d respects your rights over your Personal Data. Subject to applicable law and any overriding legal obligations on kpk4d's part, you have the following rights:

• Right of Access: You may request a copy of all Personal Data kpk4d holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic profile information directly from your Account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where we no longer have a lawful basis to retain it. Note that data subject to legal retention obligations (e.g., KYC documents, financial transaction records) cannot be deleted before the mandatory retention period expires.
• Right to Restrict Processing: In certain circumstances, you may request that we limit processing of your data — for example, while you contest the accuracy of data we hold.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request your data in a machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. If you opt out of marketing communications, we will cease all such communications within 5 business days.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection team at support@kpk4d.pro with the subject line "Data Rights Request" and a description of your request. We may ask for verification of your identity before processing the request to protect you against unauthorised data access.

kpk4d operates exclusively for adults aged 21 years and over. We do not knowingly collect Personal Data from any individual under the age of 21. Our registration process requires confirmation of date of birth and, where required, submission of a government-issued KTP or passport to verify age.

If kpk4d discovers that Personal Data belonging to a minor has been collected — whether through misrepresentation during registration or any other means — the following steps will be taken immediately:

• The associated Account will be permanently suspended.
• All funds in the Account will be withheld pending investigation and returned to the verified source of deposit if no fraudulent activity is found.
• All Personal Data collected in relation to the minor will be securely deleted from kpk4d's systems, subject to any mandatory legal retention requirements.
• The incident may be reported to the relevant child protection authorities where required by law.

We strongly encourage parents and guardians in Indonesian households to use parental control software and to keep gambling platforms inaccessible to minors. If you believe a minor has accessed the kpk4d Platform, please contact us immediately at support@kpk4d.pro.

kpk4d's primary server infrastructure is hosted in data centres outside of Indonesia. As a result, your Personal Data may be transferred to and processed in jurisdictions other than Indonesia. Where such international transfers occur, kpk4d ensures appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses with all third-party processors located outside Indonesia.
• Use of hosting providers certified to internationally recognised security standards (ISO 27001 / SOC 2 Type II).
• Transfer only of the minimum data necessary for the specific processing activity, consistent with the data minimisation principle.

By using the kpk4d Platform, you acknowledge and consent to the transfer of your Personal Data to servers and processors located outside of Indonesia for the purposes described in this Policy. kpk4d will always ensure that any international transfer is governed by appropriate contractual protections that provide a standard of data protection equivalent to that described in this Policy.

kpk4d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Where reasonably practicable, provide advance notice of significant changes via email to your registered address or via a prominent notice on the Platform prior to the changes taking effect.
• Where required by applicable law, seek your renewed consent before processing your Personal Data under the revised terms.

Your continued use of the kpk4d Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed of how your data is being handled. If you have any objections to a revised Policy, please contact us at support@kpk4d.pro before the changes take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or kpk4d's data protection practices, please contact our team through the following channels:

• Email: support@kpk4d.pro (plain text — not a clickable link). Use subject line "Privacy Policy Enquiry" for data-related requests.
• Live Chat: Available 24/7 via the chat widget on kpk4d.pro.
• Response Time: All privacy-related enquiries are handled within 5 business days; substantive data rights responses are provided within 30 calendar days (WIB, UTC+7).

For questions about responsible gaming, self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page. For general account questions, our FAQ page covers the most common topics including registration, KYC, deposits, withdrawals, and bonuses.