pena4d Privacy Policy

1. Introduction

pena4d is committed to protecting the privacy and security of our users' personal information. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data. This policy applies to all users of pena4d services, including visitors to our website, registered players, and anyone who interacts with our platform.

By using pena4d services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this policy, you should not use pena4d services.

We process your personal data in accordance with applicable data protection laws, including regulations governing online gaming, financial services, and consumer privacy in Indonesia and internationally. We are committed to transparency in our data practices and to giving you control over your personal information.

2. Data Controller Information

pena4d operates as the data controller for all personal information collected through our platform. As data controller, we determine the purposes and means of processing your personal data. We are responsible for ensuring that your information is processed lawfully, fairly, and transparently.

For any questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact us at [email protected]. We maintain a dedicated privacy team to handle data protection inquiries and will respond to your requests within a reasonable timeframe, typically within 30 days.

3. Information We Collect

pena4d collects several categories of personal information necessary to provide our gaming services, comply with legal obligations, and improve user experience. The types of information we collect include:

3.1 Information You Provide Directly

When you register for a pena4d account, you provide us with personal identification information including your full legal name as it appears on government-issued identification, your date of birth to verify you are at least 21 years old, your residential address in Indonesia, a valid email address, and a mobile phone number. You also create a username and password for account access.

During the KYC (Know Your Customer) verification process, you submit additional documentation including copies of your Indonesian National ID (KTP), proof of address such as utility bills or bank statements, and a selfie photograph holding your identification document. This information is required by international gaming regulations and anti-money laundering laws.

When you make deposits or request withdrawals, we collect financial information including bank account details, e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history. We do not store your full credit card numbers or sensitive payment credentials - these are handled securely by our licensed payment processors.

3.2 Information Collected Automatically

When you access pena4d, we automatically collect technical information about your device and usage patterns. This includes your IP address and approximate geolocation (used to verify you are accessing our services from Indonesia), device type and operating system, browser type and version, screen resolution and device identifiers, pages visited and time spent on each page, games played and betting activity, login times and session duration, and referring website or source of traffic.

We use cookies, web beacons, and similar tracking technologies to collect this information. For more details on how we use cookies, see Section 10 of this policy.

3.3 Information from Third Parties

We may receive information about you from third-party sources including payment processors who confirm successful transactions, identity verification services that validate your KYC documents, game providers who supply gameplay data and results, fraud prevention services that assess risk scores, and publicly available sources when necessary for regulatory compliance or fraud prevention.

4. How We Use Your Information

pena4d uses your personal information for the following purposes:

4.1 Service Provision

We use your information to create and manage your gaming account, process deposits and withdrawals in Indonesian Rupiah through BCA, BRI, BNI, Mandiri, and other Indonesian payment methods, provide access to casino games, sports betting markets including Indonesian favorites like BRI Liga 1 and Timnas Indonesia (Garuda) matches, live dealer experiences, and slot gacor titles, maintain accurate game records and transaction history, calculate and credit bonuses and promotional offers, and provide customer support in English and Indonesian.

4.2 Legal and Regulatory Compliance

We process your data to verify that you are at least 21 years of age, comply with anti-money laundering (AML) and counter-terrorist financing (CTF) regulations, prevent fraud, identity theft, and other illegal activities, respond to legal requests from authorities, courts, or regulators, and maintain records as required by gaming licenses and financial regulations.

4.3 Security and Fraud Prevention

We use your information to monitor for suspicious activity patterns, detect and prevent multiple account creation, identify collusion or cheating in games, protect against unauthorized account access, and implement responsible gaming measures including deposit limits and self-exclusion.

4.4 Communication

We use your contact information to send transactional emails about deposits, withdrawals, and account changes, provide customer service responses, notify you of promotional offers and bonuses (you can opt out of marketing communications), and send important updates about terms, policies, or service changes.

4.5 Service Improvement and Analytics

We analyze usage data to understand how users interact with pena4d, identify popular games and betting markets, optimize website performance and user experience, develop new features and services, and conduct internal research and analytics. All analytics are performed on aggregated, anonymized data whenever possible.

5. Legal Basis for Processing

Under data protection laws, we must have a lawful basis for processing your personal information. pena4d relies on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing gaming services) and to take steps at your request before entering into a contract (account registration).
• Legal Obligation: Processing is necessary to comply with legal obligations including age verification, KYC requirements, AML regulations, and financial reporting.
• Legitimate Interests: Processing is necessary for our legitimate interests in preventing fraud, ensuring security, improving our services, and conducting business analytics, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where required by law, we obtain your explicit consent before processing certain data, such as sending you marketing communications. You can withdraw consent at any time.

6. Information Sharing and Disclosure

pena4d does not sell your personal information to third parties for marketing purposes. However, we do share your information with trusted service providers and partners in limited circumstances:

6.1 Service Providers

We share data with payment processors who handle deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), game providers who supply slots, live casino, and sports betting content (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe), identity verification services that validate KYC documents, cloud hosting providers who maintain our infrastructure, customer support platforms, and email service providers.

All service providers are contractually obligated to protect your data and may only use it to provide services to pena4d. They cannot use your data for their own purposes.

6.2 Legal Requirements

We may disclose your information when required by law, including to comply with court orders, subpoenas, or regulatory requests, to respond to legal processes, to cooperate with law enforcement investigations, to enforce our Terms and Conditions or protect our legal rights, and to protect the safety and security of pena4d, our users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent notice on our website before your information becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with other third parties when you have given explicit consent, such as connecting your account to social media platforms or participating in joint promotions with partners.

7. Data Security Measures

pena4d implements comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on role-specific permissions. All access is logged and monitored.
• Secure Infrastructure: We use enterprise-grade firewalls, intrusion detection systems, and regular security audits to protect our network infrastructure.
• Password Security: User passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Regular Security Assessments: We conduct regular security audits, penetration testing, and vulnerability assessments to identify and address potential weaknesses.
• Employee Training: All pena4d employees receive regular training on data protection and security best practices.
• Incident Response: We maintain a formal incident response plan to quickly detect, contain, and remediate any security breaches.

While we implement robust security measures, no system is completely secure. We cannot guarantee the absolute security of your information. You play an important role in protecting your account by choosing a strong password, not sharing your login credentials, and logging out after each session, especially on shared devices.

8. Data Retention

pena4d retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

Specific retention periods include: active account data is retained throughout the life of your account, transaction records and financial data are retained for a minimum of 7 years to comply with financial regulations and tax laws, KYC documents are retained for 5 years after account closure as required by anti-money laundering regulations, marketing consent records are retained until you withdraw consent or for 3 years if inactive, and gameplay and betting history is retained for 2 years for audit and dispute resolution purposes.

After the retention period expires, we securely delete or anonymize your personal information so that it can no longer be used to identify you. Anonymized data may be retained indefinitely for statistical and analytical purposes.

9. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request access to the personal information we hold about you. You can view much of your data directly in your account dashboard. For a complete copy of your data, contact our privacy team at [email protected].

9.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most information directly in your account settings, or contact customer support for assistance.

9.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent. Note that we may be legally required to retain certain information for compliance purposes.

9.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another controller.

9.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing communications, you can unsubscribe at any time using the link in our emails or by contacting support.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request to ensure data security.

10. Cookies and Tracking Technologies

pena4d uses cookies and similar tracking technologies to enhance user experience, analyze site usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the website to function properly. They enable core functionality such as account login, session management, and security features. You cannot opt out of essential cookies.
• Performance Cookies: These cookies collect information about how you use our website, such as which pages you visit most often and if you encounter error messages. This data helps us improve website performance.
• Functionality Cookies: These cookies remember your preferences and choices, such as language settings, username, and display preferences, to provide a more personalized experience.
• Analytics Cookies: We use analytics services to understand user behavior, measure site traffic, and identify popular content. This helps us optimize the pena4d experience.

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling cookies may affect the functionality of pena4d and prevent you from accessing certain features.

11. International Data Transfers

pena4d operates internationally and may transfer your personal information to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

These safeguards may include standard contractual clauses approved by data protection authorities, adequacy decisions confirming that the destination country provides an adequate level of data protection, or certification under recognized data protection frameworks. We take steps to ensure that your data receives the same level of protection regardless of where it is processed.

12. Children's Privacy

pena4d services are strictly for individuals who are at least 21 years of age, as required by Indonesian law and our Terms and Conditions. We do not knowingly collect personal information from individuals under 21. If we become aware that we have inadvertently collected information from someone under the legal gambling age, we will promptly delete that information and close the associated account.

If you are a parent or guardian and believe your child has provided personal information to pena4d, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Policy

pena4d reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you via email to your registered address and through a prominent notice on our website at least 30 days before the changes take effect.

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of pena4d services after changes become effective constitutes acceptance of the updated policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our privacy team:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Customer Support: Available 24/7 via live chat on our website

We are committed to addressing your privacy concerns promptly and transparently. Our privacy team will respond to your inquiry within 30 days, or sooner when possible. For urgent security concerns, please contact us immediately through live chat.