Privacy Policy

The following terms carry specific meanings throughout this Privacy Policy:

This Privacy Policy applies to all Personal Data collected by gen4d through or in connection with your use of the Platform, including data collected during registration, login, deposit, withdrawal, gameplay, customer support interactions, and marketing communications.

gen4d acts as the Data Controller in respect of all Personal Data described in this policy. As Controller, gen4d determines why and how your data is processed, and bears responsibility for ensuring that processing is carried out in accordance with applicable data protection law and international best-practice standards.

This policy applies to all Members and visitors regardless of their location, with particular relevance to individuals accessing the Platform from Indonesia. gen4d operates primarily to serve the Indonesian market and processes the Personal Data of Indonesian residents in accordance with the principles set out herein.

gen4d collects Personal Data in the following categories:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify the 21+ age requirement).
• Email address and Indonesian mobile phone number.
• Username chosen at registration.
• Residential address (city and province within Indonesia).

3.2 KYC & Verification Data

• Copy of government-issued photo identification (KTP — Kartu Tanda Penduduk, passport, or driving licence).
• Selfie photograph for liveness verification, where required.
• Proof of address documentation (utility bill, bank statement, or equivalent).
• Proof of payment method ownership where applicable (e.g., screenshot of bank account or e-wallet showing your name).

3.3 Financial & Transaction Data

• Bank account details (account number, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) used for deposits and withdrawals.
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Deposit and withdrawal history, including transaction amounts in Indonesian Rupiah (IDR), timestamps, and method used.
• Bonus and promotional credit history.

3.4 Gaming & Betting Activity Data

• Game session records (games played, wagers placed, outcomes, session duration).
• Sportsbook bet history (markets, selections, odds, stake amounts, results).
• Responsible gaming tool usage (deposit limit settings, cooling-off requests, self-exclusion status).

3.5 Technical & Device Data

• IP address and approximate geolocation (city/region level).
• Device type, operating system, browser type and version.
• Pages visited, time spent on page, click-path data, and referring URL.
• Session tokens and login timestamps.

3.6 Communications Data

• Contents of live chat transcripts and support ticket correspondence.
• Feedback and survey responses.
• Email and SMS communications sent to or received from gen4d.

gen4d collects Personal Data through the following means:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a survey or promotion.
• Automatically through technology: When you browse the Platform, our servers, cookies, and analytics tools automatically record technical and device data, including your IP address, session duration, and page interaction patterns.
• From third-party verification providers: When you submit KYC documents, our identity verification partners may return enriched data (e.g., document authenticity scores, sanctions-list screening results) that gen4d stores on your Account record.
• From payment processors: When you initiate a deposit or withdrawal via a local bank or e-wallet, transaction confirmation data is returned to gen4d by the payment processing intermediary.
• From fraud and risk screening systems: Our fraud detection partners may provide risk scores and device fingerprint data associated with your login and transaction activity.

gen4d processes your Personal Data only for specific, documented purposes. The table below sets out each processing purpose and the legal basis on which it relies:

Where gen4d relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting our support team or updating your Account communication preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

gen4d does not sell your Personal Data. We share data with third parties only in the following limited circumstances, and only to the extent necessary for the relevant purpose:

• Payment processors and banking partners: Transaction data (name, bank account number, amount, timestamp) is shared with our IDR payment processing partners — including intermediaries that connect to BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, and the major e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely to execute your requested deposit or withdrawal.
• KYC and identity verification providers: Identity documents and selfie images are transmitted to our contracted verification partner for document authenticity checking and sanctions screening. These providers operate under strict data processing agreements and are prohibited from using your data for any other purpose.
• Fraud detection and risk management providers: Device fingerprint data, IP address, and transaction behavioural signals are shared with our fraud screening platform to identify and prevent fraudulent or abusive activity.
• Game content providers: When you play a game powered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, your session data (player ID, stake, game outcome) is transmitted to the relevant studio's gaming server. These studios process data under their own privacy and data security frameworks.
• Cloud infrastructure and hosting providers: The Platform is hosted on enterprise-grade cloud infrastructure. Our hosting provider processes data solely on gen4d's instructions and under a data processing agreement.
• Legal and regulatory authorities: gen4d may disclose Personal Data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or in connection with the prevention or detection of criminal activity including money laundering.

The gen4d Platform primarily serves Members in Indonesia. Some of our Processors — in particular game content studios and cloud infrastructure providers — may be located in jurisdictions outside Indonesia. Where Personal Data is transferred internationally, gen4d takes the following steps to ensure an adequate level of protection:

• We enter into standard contractual data protection clauses with all international Processors, binding them to data security and purpose-limitation obligations equivalent to those described in this policy.
• We carry out documented transfer impact assessments before engaging any new international Processor that will handle Indonesian Members' Personal Data.
• Where technically feasible, we apply pseudonymisation or data minimisation to limit the Personal Data transmitted internationally to the minimum required for the processing purpose.

By using the gen4d Platform, you acknowledge that your data may be transferred to and processed in countries outside Indonesia. In such cases, gen4d remains fully responsible for the security and appropriate use of that data.

gen4d retains your Personal Data only for as long as is necessary for the purposes described in this policy, or as required by applicable law. Our standard retention periods are as follows:

Where retention periods above are driven by legal obligation, gen4d is not able to delete data earlier even upon your request. In all other cases, you may request deletion under Clause 11 of this policy.

The gen4d Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to personalise your experience, and to understand how Members use the service so we can continue to improve it.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to operate. These include session authentication tokens, load-balancing cookies, and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without severely degrading your experience.
• Functional cookies: Remember your preferences such as your preferred game category, language settings, and responsible gaming tool configurations. Disabling these cookies means your preferences will not persist between sessions.
• Analytics cookies: Collect aggregated, anonymised data about how Members navigate the Platform — pages viewed, time on site, click paths, and error events. This data is used solely to improve Platform performance and user experience. We use privacy-respecting analytics tools that do not share raw user data with third-party advertisers.
• Security and fraud prevention cookies: Device fingerprinting and session consistency checks that help our risk management systems identify anomalous login or transaction behaviour.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in and using key Platform features.

gen4d implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the gen4d Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). This protects your login credentials, payment details, and session data in transit.
• Encryption at rest: Sensitive Personal Data — including KYC documents, password hashes, and payment method details — is stored in encrypted form in our database. Encryption keys are managed separately from the encrypted data.
• Two-factor authentication (2FA): gen4d offers SMS OTP-based 2FA for all Member Accounts. We strongly encourage all Members to enable 2FA to protect against unauthorised access.
• Access controls: Internal access to Member Personal Data is restricted on a strict need-to-know basis. Customer support agents can access only the data fields necessary to resolve your specific query. All internal data access is logged and audited.
• Segregated payment data: Payment account numbers and e-wallet identifiers are stored in an isolated, access-controlled vault separate from the main Member database, minimising the risk of bulk exposure.
• Security testing: The Platform undergoes periodic penetration testing and vulnerability scanning by qualified security professionals. Critical vulnerabilities are remediated within 24 hours of discovery.
• Incident response: gen4d maintains a documented data breach response plan. In the event of a confirmed breach affecting your Personal Data, we will notify affected Members and relevant authorities within the timeframes required by applicable law.

Despite these measures, no online system can guarantee absolute security. You also play an important role in keeping your data safe: use a strong, unique password for your gen4d Account, enable 2FA, and never share your login credentials with anyone.

As a gen4d Member, you hold a number of rights in relation to your Personal Data. gen4d respects and upholds these rights, subject to any legal obligations that require us to retain or continue processing certain data regardless of your request.

To exercise any of the above rights, please contact the gen4d Data Privacy team via live chat (available 24/7 after login) or by emailing [email protected]. We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days. In cases of complexity or high request volume, we may extend this period by a further thirty (30) days, of which we will notify you in advance.

The gen4d Platform is strictly restricted to individuals aged 21 and above. gen4d does not knowingly collect or process Personal Data from anyone under the age of 21.

If gen4d discovers or has reasonable grounds to believe that a Member is under 21 years of age, we will immediately suspend the relevant Account, commence KYC verification to confirm the individual's age, and — where the under-age status is confirmed — permanently close the Account and return any net deposited funds (after deducting any bonus amounts and associated winnings) to the verified payment source.

If you are a parent or guardian and believe that a minor in your care has registered an Account on gen4d, please contact our support team immediately at [email protected]. We will investigate and take appropriate action as a matter of priority. We encourage parents and guardians to make use of internet filtering and parental control software to prevent minors from accessing online gaming platforms.

The gen4d Platform may contain references to third-party game studios and payment providers. When you interact with third-party game content (for example, launching a slot title from Pragmatic Play or a live table from Evolution Gaming), a direct connection is established between your browser and the third party's gaming server. That connection is governed by the third party's own privacy policy, not this document.

gen4d is not responsible for the data practices, privacy policies, or security standards of third-party service providers. We recommend that you review the privacy policies of any third-party service you interact with through the Platform. Where possible, gen4d screens third-party partners for data security compliance before integration and requires contractual data protection commitments as a condition of partnership.

gen4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and functionality of the Platform. The date of the most recent revision is displayed prominently at the top of this page.

Where changes are material — for example, a new category of Personal Data being collected, a new purpose for processing, or a new category of third-party recipient — we will notify Members by email to the address registered on their Account at least fourteen (14) days before the changes take effect. For non-material amendments (such as clarifications of existing practices or corrections of typographical errors), changes will take effect upon publication without prior notice.

Your continued use of the gen4d Platform after the effective date of any amendment constitutes your acknowledgement of the updated policy. If you do not agree with any amendment, you must cease using the Platform and may request closure of your Account in accordance with the process described in our Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how gen4d handles your Personal Data, please contact us through the following channels:

• Live chat: Available 24/7 via the gen4d Platform (accessible after login). Live chat is the fastest channel for routine data queries and preference updates.
• Email: [email protected] — for data rights requests, please include "Privacy Request" in the subject line along with your registered username or Account ID to help us locate your record promptly.

Our support team includes Indonesian-speaking agents available during peak WIB (Western Indonesia Time, UTC+7) hours, with English-language support available around the clock. We are committed to treating all privacy-related enquiries with respect, confidentiality, and urgency.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to a relevant supervisory or data protection authority in your jurisdiction. gen4d will cooperate fully with any such authority in the investigation of a complaint.