ata4d Privacy Policy

1.1   ata4d ("we", "us", "our") is an internationally operated online gaming platform accessible at ata4d.onl, offering sports betting, live casino, slot gacor (high-payout slot games), togel (Indonesia's traditional numbers lottery), video poker, mahjong, and related gaming services primarily to English-preference players located in Indonesia.

1.2   This Privacy Policy describes how ata4d collects, uses, stores, shares, and protects the personal data of individuals who visit the Platform, register an account, or otherwise interact with our services. It also describes the rights you hold with respect to your own personal data and how to exercise those rights.

1.3   This Privacy Policy should be read alongside the ata4d Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. By registering an account or using the ata4d Platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.

1.4   ata4d may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The effective date displayed at the top of this document identifies the version currently in force. We will provide reasonable notice of material changes via the Platform or via the email address registered to your account.

3.1   ata4d collects personal data through several channels — directly from you when you register and use the Platform, automatically through technical means as you interact with our website, and from trusted third-party sources where permitted.

3.2   Registration and account data. When you create an ata4d account, we collect: your full legal name, date of birth, email address, mobile phone number, residential address (including city and province within Indonesia, e.g., Jakarta, Surabaya, Bandung, Bali, Yogyakarta), and your chosen username.

3.3   Identity verification (KYC) data. To verify your age and identity, we may collect copies of government-issued identity documents such as your national identity card (KTP), passport, or driving licence, together with a selfie or liveness-check image where required by our verification workflow.

3.4   Financial and transaction data. We record all deposits and withdrawals processed through your ata4d account, including the payment method used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in IDR, timestamps, and reference numbers. We do not store full bank account credentials — payment authentication is handled directly by your bank or e-wallet provider.

3.5   Gaming activity data. We record your wagering history across all product verticals — sportsbook bets, live casino sessions, slot spins, mahjong and video poker hands, and any other gaming activity on the Platform. This data is used for account management, dispute resolution, bonus tracking, and responsible gaming monitoring.

3.6   Technical and device data. When you access ata4d, our servers and analytics systems automatically collect: your IP address, browser type and version, operating system, device type, screen resolution, time zone, referring URL, pages visited, session duration, and clickstream data.

3.7   Communications data. If you contact ata4d's customer support team via live chat or email, we retain records of those communications, including the content of your messages and any attachments you send.

3.8   Marketing preferences. We record your opt-in or opt-out status for promotional communications, and any preferences you have set regarding the types of offers you wish to receive.

4.1   ata4d processes your personal data only for specific, legitimate purposes. The table below maps each processing activity to the lawful basis on which it rests.

4.2   ata4d does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects on you without human review. Automated systems may flag accounts for review (e.g., for responsible gaming or fraud purposes), but material account actions are reviewed by a human operator before being applied.

5.1   ata4d uses cookies and similar local-storage technologies to operate the Platform, remember your session, and understand how members use the site. Cookies do not contain your password or financial data.

5.2   The following categories of cookies are used on ata4d:

• Strictly necessary cookies: Essential for core Platform functionality, including session authentication, fraud detection signals, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your language preference, display settings, and other personalisation choices between sessions.
• Analytics cookies: Collect aggregated, anonymised data about how visitors navigate the Platform so we can improve page performance, layout, and content relevance. ata4d uses only first-party analytics or privacy-preserving analytics tools for this purpose.
• Marketing cookies: Used only where you have provided explicit consent. These track which promotional campaigns led you to ata4d and may be used to serve relevant offers within the Platform.

5.3   You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or marketing cookies will not affect your gaming experience.

6.1   ata4d does not sell, rent, or otherwise disclose your personal data to unaffiliated third parties for their own marketing purposes. Data sharing is limited to the following categories of recipients, each operating under appropriate data protection obligations:

• Payment processors and banking partners: To process your IDR deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and e-wallets OVO, DANA, GoPay, ShopeePay, and LinkAja. Only the minimum data necessary to execute a transaction is transmitted.
• KYC and identity verification providers: To verify your age and identity in accordance with our compliance obligations. These providers operate under strict data processing agreements and may not use your data for their own purposes.
• Game content providers: Licensed third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) receive limited session data necessary to deliver their game content within the ata4d Platform. Game providers do not receive your financial account details.
• Technology and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on our behalf under binding data processing agreements.
• Regulatory and law enforcement authorities: Where ata4d is required by applicable law, court order, or regulatory direction to disclose personal data. We will notify you of such disclosures where permitted by law.

6.2   All third-party data processors engaged by ata4d are contractually required to: process data only on ata4d's documented instructions; implement appropriate technical and organisational security measures; and not sub-process data without ata4d's prior written authorisation.

7.1   ata4d retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The following retention periods apply as a general guide:

7.2   Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised such that it can no longer be attributed to any individual. Anonymised aggregate data may be retained indefinitely for statistical and operational purposes.

8.1   ata4d implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport encryption: All data in transit between your device and ata4d servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser's address bar confirms this connection is active.
• Password security: Member passwords are stored exclusively as salted cryptographic hashes using a modern hashing algorithm. ata4d staff cannot read your password in plain text — ever.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All internal access is logged and reviewed.
• Network security: ata4d's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services.
• Data at rest: Sensitive data stored on ata4d servers is encrypted at rest using AES-256 encryption.
• Security audits: ata4d conducts periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses.
• Staff training: All ata4d staff with access to personal data receive regular data protection and information security training.

8.2   While ata4d takes all reasonable steps to secure your data, no transmission over the internet and no storage system can be guaranteed to be 100% secure. You also play a role in security — please use a strong, unique password for your ata4d account and never share your login credentials with anyone.

9.1   As a member of ata4d and as a data subject under applicable international data protection principles, you hold the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data ata4d holds about you, along with information about how it is used and with whom it has been shared.
• Right of rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update basic account details (email address, phone number, address) directly from your account settings dashboard.
• Right of erasure: You may request that ata4d delete your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to overriding retention obligations — for example, transaction records and KYC documents may be retained for the periods set out in Clause 7 regardless of an erasure request.
• Right to restrict processing: You may request that ata4d restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where ata4d processes your data on the basis of consent (principally for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on ata4d's legitimate interests. ata4d will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

9.2   To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". Please include your registered username and a description of the right you wish to exercise. ata4d will respond within 30 days of receiving a valid request.

9.3   ata4d will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

10.1   The ata4d Platform is strictly intended for adults aged 21 and above. ata4d does not knowingly collect personal data from any person under the age of 21.

10.2   Age verification is a mandatory step of the account registration process. Where ata4d has reasonable grounds to believe that an account holder is under 21, the account will be suspended immediately, wagering activity will be voided, and any deposits will be returned pending satisfactory age verification.

10.3   If you believe that ata4d may have inadvertently collected data from a person under 21, please notify us immediately at [email protected]. We will investigate the matter and delete the relevant data promptly upon confirmation.

11.1   As an internationally operated platform, ata4d may transfer your personal data to servers or service providers located in countries other than Indonesia. Where such transfers occur, ata4d takes appropriate steps to ensure that your data receives a level of protection consistent with international data protection standards.

11.2   Safeguards applied to international data transfers include contractual data protection clauses binding all recipient entities to ata4d's data protection standards, and selection of service providers located in jurisdictions that maintain adequate data protection frameworks.

11.3   Your personal data will not be transferred to a jurisdiction that ata4d considers to offer materially inadequate data protection without your explicit consent or a recognised legal mechanism for the transfer.

12.1   The ata4d Platform integrates third-party game content from licensed providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. When you launch a game from one of these providers, the game interface may be served from the provider's own servers. Each provider's own privacy policy governs any data that provider collects directly through their game interface.

12.2   ata4d has no control over, and accepts no responsibility for, the privacy practices of third-party game providers or payment processors beyond our contractual obligations as described in Clause 6. We encourage you to review the privacy policies of any third-party services you interact with.

12.3   This Privacy Policy applies exclusively to data processed by ata4d in its capacity as Data Controller. It does not extend to data collected by third parties acting in their own capacity.

13.1   ata4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The revised policy will be published at ata4d.onl/privacy-policy with an updated effective date.

13.2   For material changes — those that meaningfully alter how we use your data or the rights available to you — ata4d will provide at least 14 days' advance notice via a prominent notice on the Platform and, where possible, via the email address registered to your account.

13.3   Your continued use of the ata4d Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated policy, you must cease using the Platform and may close your account by contacting [email protected].

14.1   For any questions, concerns, or requests relating to this Privacy Policy or the personal data ata4d holds about you, please contact our support team through the following channel:

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request"
• Live Chat: Available 24/7 directly from the ata4d Platform
• Response time: Data rights requests acknowledged within 5 business days; substantive response within 30 days
• Languages: English (primary); Indonesian-speaking agents available on request

14.2   ata4d is committed to resolving privacy concerns promptly and fairly. If you are not satisfied with our response to a data rights request, you may refer the matter to the supervisory authority or data protection regulator applicable in your jurisdiction.