kris4d Privacy Policy

1. Introduction

Welcome to the kris4d Privacy Policy. This document explains how kris4d ("we", "us", "our", "Company") collects, uses, stores, protects, and shares your personal information when you access or use our website at https://kris4d.cam, mobile applications, and related services (collectively, the "Platform" or "Service").

We are committed to protecting your privacy and handling your personal data in accordance with applicable Indonesian data protection laws and international best practices. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of our Service.

By creating an account, accessing our Platform, or using our Service in any way, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with our privacy practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a kris4d account or use our Service, you directly provide us with the following categories of personal information:

• Account Registration Information: Full legal name as it appears on your Indonesian national identity card (KTP), date of birth, gender, email address, mobile phone number, residential address including city and postal code, and chosen username and password.
• Identity Verification Documents (KYC): Government-issued identification documents including Indonesian national identity card (KTP), proof of address such as utility bills or bank statements dated within the last three months, selfie photographs holding your identification document for verification purposes, and any additional documentation requested to verify your identity or comply with anti-money laundering regulations.
• Financial Information: Bank account details including bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or others), account holder name, account number, and routing information for deposit and withdrawal processing. For e-wallet transactions, we collect your registered mobile number and account identifier for OVO, DANA, GoPay, ShopeePay, or LinkAja.
• Transaction History: Complete records of all deposits, withdrawals, wagers placed, game outcomes, bonuses claimed, and account balance changes.
• Communications: Content of messages you send to our customer support team via live chat, email, WhatsApp, or in-app messaging, including any attachments such as screenshots or documents you provide.
• Responsible Gaming Preferences: Any deposit limits, loss limits, session time limits, self-exclusion periods, or reality check settings you configure through our responsible gaming tools.

2.2 Information Collected Automatically

When you access or use our Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile phone, tablet, desktop computer), operating system and version (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers such as IMEI or advertising ID, and device settings including language and time zone.
• Connection Information: IP address, internet service provider, connection type (WiFi, cellular 3G/4G/5G), geographic location derived from IP address or GPS data (if location services are enabled), and connection timestamps.
• Usage Data: Pages visited on our Platform, features used, games played, time spent on each page or game, click patterns, scroll depth, search queries entered, betting patterns and preferences, login and logout times, and session duration.
• Cookies and Similar Technologies: We use cookies, web beacons, local storage, and similar tracking technologies to recognize your device, remember your preferences, analyze usage patterns, prevent fraud, and improve user experience. See Section 8 for detailed information about cookies.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Providers: Transaction confirmation, processing status, and fraud detection information from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Game Providers: Game results, RTP data, and technical performance information from providers such as Pragmatic Play, Microgaming, Evolution Gaming, NetEnt, and others whose games are integrated into our Platform.
• Verification Services: Identity verification results, fraud risk scores, and compliance checks from third-party KYC and anti-money laundering service providers we engage to verify your documents and detect fraudulent activity.
• Affiliates and Marketing Partners: If you accessed kris4d through an affiliate link or marketing campaign, we may receive information about the referral source to attribute registrations and track marketing effectiveness.

3. How We Use Your Information

kris4d uses your personal information for the following legitimate business purposes:

3.1 Account Management and Service Provision

• Create, maintain, and manage your user account
• Process account registration and KYC verification to comply with legal requirements
• Authenticate your identity when you log in and verify ownership of payment accounts
• Provide access to games, sports betting markets, and other Platform features
• Process deposits, withdrawals, and internal balance transfers
• Apply bonuses, promotions, and loyalty rewards to your account
• Maintain accurate transaction records and account history
• Enforce deposit limits, loss limits, and other responsible gaming controls you have set

3.2 Customer Support and Communications

• Respond to your inquiries, support requests, and complaints via live chat, email, WhatsApp, or in-app messaging
• Send transactional notifications about deposits, withdrawals, bonuses, account changes, and security alerts
• Provide updates about Platform maintenance, new features, terms and conditions changes, and important service announcements
• Conduct customer satisfaction surveys to improve our Service quality

3.3 Legal Compliance and Risk Management

• Verify your age and ensure compliance with the 21+ age restriction
• Detect, prevent, and investigate fraud, money laundering, terrorist financing, and other illegal activities
• Monitor for problem gambling behaviors and enforce self-exclusion restrictions
• Comply with Indonesian gambling regulations, anti-money laundering laws, and international sanctions
• Respond to legal requests from law enforcement agencies, regulatory authorities, or courts
• Enforce our Terms and Conditions and protect our legal rights
• Maintain records required by law including transaction logs and audit trails

3.4 Platform Improvement and Analytics

• Analyze usage patterns to understand how players interact with our Platform
• Identify technical issues, bugs, and performance bottlenecks
• Optimize user interface, game selection, and payment processing workflows
• Conduct A/B testing to evaluate new features and improvements
• Generate aggregated, anonymized statistical reports that do not identify individual users
• Develop new products, features, and services based on user preferences

3.5 Marketing and Promotions (With Your Consent)

• Send promotional emails about new games, special bonuses, tournaments, and exclusive offers tailored to your preferences and gaming history
• Display personalized recommendations for games and betting markets you may enjoy
• Notify you about loyalty program tier upgrades and rewards you have earned
• Invite you to participate in special events, VIP promotions, or player competitions

You may opt out of marketing communications at any time by adjusting your communication preferences in your account settings or clicking the unsubscribe link in promotional emails. Opting out of marketing does not affect transactional communications necessary for Service provision.

4. Legal Basis for Processing

Under applicable data protection laws, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms and Conditions) including account creation, game provision, payment processing, and customer support.
• Legal Obligation: Processing is required to comply with Indonesian and international laws including age verification, KYC requirements, anti-money laundering regulations, taxation obligations, and responses to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests including fraud prevention, security monitoring, Platform improvement, analytics, and protection of our legal rights, provided these interests do not override your fundamental privacy rights.
• Consent: For marketing communications and certain optional data collection practices, we rely on your explicit consent which you may withdraw at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. How We Share Your Information

kris4d does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we share your information with the following categories of recipients as necessary to operate our Service:

5.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive your payment account details and transaction information to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Microgaming, Evolution Gaming, NetEnt, Play'n GO, Spribe, Pocket Games Soft, and other software providers receive limited information such as user ID, session tokens, and betting activity necessary to deliver their games through our Platform.
• KYC and Verification Services: Third-party identity verification providers receive your KYC documents to verify authenticity, detect forgeries, and perform compliance checks against sanctions lists and politically exposed persons databases.
• Customer Support Tools: Live chat platforms, email service providers, and CRM systems process your communications with our support team to help us respond efficiently and maintain service quality.
• Analytics and Monitoring: Website analytics platforms, server monitoring tools, and security services receive anonymized or pseudonymized usage data to help us improve Platform performance and detect security threats.
• Cloud Infrastructure: Data center providers and cloud hosting services store our databases and Platform infrastructure in secure facilities with industry-standard physical and technical safeguards.

All service providers are contractually obligated to handle your data securely, use it only for specified purposes, and comply with applicable data protection laws.

5.2 Legal and Regulatory Authorities

We disclose personal information to law enforcement agencies, regulatory authorities, tax authorities, courts, and other governmental bodies when required by Indonesian law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Investigate and prevent fraud, money laundering, or other criminal activities
• Protect the rights, property, or safety of kris4d, our users, or the public
• Enforce our Terms and Conditions or other agreements
• Respond to tax authorities regarding player winnings and transaction reporting

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other business transaction involving kris4d, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email or prominent notice on our Platform before your information becomes subject to a different privacy policy.

6. Data Security

kris4d implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All data transmission between your device and our servers is protected by 256-bit SSL/TLS encryption, the same technology used by major financial institutions. Sensitive data at rest including passwords, financial information, and KYC documents is encrypted using AES-256 encryption.
• Access Controls: Personal information is accessible only to authorized employees and contractors who require access to perform their job functions. Access is granted on a need-to-know basis and protected by multi-factor authentication.
• Network Security: Our Platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, DDoS mitigation, and continuous security monitoring to detect and respond to threats in real-time.
• Secure Data Centers: Our databases are hosted in ISO 27001 certified data centers with 24/7 physical security, environmental controls, redundant power supplies, and disaster recovery capabilities.
• Regular Audits: We conduct quarterly security audits and annual penetration testing by independent cybersecurity firms to identify vulnerabilities and ensure compliance with security best practices.
• Employee Training: All staff receive mandatory training on data protection, security protocols, and confidentiality obligations. Employees sign non-disclosure agreements prohibiting unauthorized disclosure of user information.
• Incident Response: We maintain a comprehensive data breach response plan to quickly detect, contain, and remediate security incidents. In the unlikely event of a breach affecting your personal information, we will notify you and relevant authorities as required by law.

While we implement industry-leading security measures, no system is completely immune to attack. You also play a critical role in protecting your account by choosing a strong, unique password, enabling two-factor authentication if available, never sharing your login credentials, logging out after each session on shared devices, and immediately reporting any suspicious account activity to our support team.

7. Data Retention

kris4d retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Account information, transaction history, and gaming activity are retained for the duration of your account relationship plus any applicable legal retention periods.
• Closed Accounts: After account closure, we retain core account data including registration information, KYC documents, and transaction records for a minimum of 7 years to comply with Indonesian anti-money laundering regulations, tax reporting requirements, and legal dispute resolution needs.
• Marketing Communications: If you opt out of marketing emails, we retain a record of your opt-out preference indefinitely to ensure we respect your choice.
• Customer Support Records: Support chat logs, emails, and case notes are retained for 3 years to maintain service quality and resolve potential disputes.
• Technical Logs: Server logs, security logs, and analytics data are typically retained for 90 days to 1 year depending on the type of log and its purpose.

Once the retention period expires and the information is no longer needed, we securely delete or anonymize personal data to prevent recovery or reconstruction.

8. Cookies and Tracking Technologies

kris4d uses cookies, web beacons, local storage, and similar technologies to enhance your experience, analyze Platform usage, prevent fraud, and deliver relevant content. Key categories of cookies we use include:

• Essential Cookies: Necessary for basic Platform functionality including session management, authentication, security features, and load balancing. These cookies cannot be disabled without severely impairing Platform usability.
• Performance Cookies: Collect anonymous data about how visitors use our Platform including page views, navigation paths, load times, and error messages to help us identify and fix technical issues.
• Functional Cookies: Remember your preferences such as language settings, display options, and recently played games to provide a personalized experience across sessions.
• Analytics Cookies: Help us understand user behavior patterns, popular features, conversion rates, and demographic trends through aggregated, anonymized reporting.
• Marketing Cookies: Track your interactions with promotional content to measure campaign effectiveness and deliver relevant offers. These cookies may be set by third-party advertising partners.

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are stored. However, blocking essential cookies may prevent you from using certain Platform features. Mobile app users can manage tracking through device privacy settings.

9. Your Privacy Rights

Under Indonesian data protection laws and international standards, you have the following rights regarding your personal information:

• Right of Access: You may request confirmation of whether we process your personal information and obtain a copy of the data we hold about you. This information is largely accessible through your account dashboard.
• Right to Rectification: If your personal information is inaccurate or incomplete, you may request corrections. You can update most information directly in your account settings.
• Right to Erasure: You may request deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes collected or if you withdraw consent. However, we may retain information required for legal compliance or legitimate business interests.
• Right to Restriction: You may request that we limit processing of your personal information in certain situations, such as while we verify accuracy of disputed data.
• Right to Data Portability: You may request your personal information in a structured, commonly used, machine-readable format to transfer to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact our Data Protection Officer via email at [email protected] (display only). We will respond to your request within 30 days. We may require additional information to verify your identity before processing requests that involve access to or deletion of personal data.

10. International Data Transfers

Your personal information is primarily stored on servers located in secure data centers within the Asia-Pacific region. However, some of our service providers, game studios, and payment processors may be located in other countries including Europe, North America, and other regions.

When we transfer your personal information outside Indonesia, we ensure appropriate safeguards are in place including standard contractual clauses, binding corporate rules, or other legally approved transfer mechanisms to protect your data in accordance with Indonesian and international standards. These safeguards require third-party recipients to implement equivalent data protection measures.

11. Children's Privacy

kris4d strictly prohibits use of our Platform by individuals under 21 years of age. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from someone under 21, we will promptly delete the account and purge all associated personal information.

If you believe a minor has created an account on kris4d, please contact our customer support immediately so we can take appropriate action.

12. Changes to This Privacy Policy

kris4d reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by email to the address associated with your account or by displaying a prominent notice on our Platform.

The updated Privacy Policy will take effect immediately upon posting unless otherwise specified. Your continued use of our Service after the effective date constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

13. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact us through the following channels:

• Data Protection Officer: [email protected] (display only)
• Customer Support: Available 24/7 via live chat through your account dashboard
• WhatsApp: +62 812 3456 7890 (display only, text-only support)
• Mailing Address: kris4d Data Protection Officer, Jakarta, Indonesia

We aim to respond to all privacy inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Indonesian data protection authority.