bot4d Privacy Policy

1. Definitions and Scope

This Privacy Policy is issued by bot4d ("the Company," "We," "Us," or "Our") and governs the collection, processing, storage, and use of personal data belonging to all users ("You," "Your," or "User") who access or interact with the bot4d platform at bot4d.cam, including all associated subdomains and mobile-optimized services.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that can identify You directly or indirectly, including name, email address, date of birth, mobile number, national identification number, IP address, and payment account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, deletion, or destruction.
• "Data Controller" refers to bot4d, which determines the purposes and means of processing your Personal Data.
• "Data Processor" refers to third-party entities that process Personal Data on behalf of bot4d under documented instructions, including payment processors and KYC verification providers.
• "Consent" means any freely given, specific, informed, and unambiguous indication of Your agreement to the processing of Your Personal Data.

This Policy applies to all individuals who register an account with bot4d, including registered members located in Indonesia and other jurisdictions where bot4d operates. By creating an account and using our services, You acknowledge that You have read, understood, and consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

When You register an account, complete KYC verification, contact support, or interact with bot4d's services, You provide us with information that we collect and process. This includes:

• Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, and residential address in Indonesia (including city, province, and postal code).
• Identity Verification (KYC) Data: Government-issued identification documents (e-KTP, Indonesian passport, or driver's license), selfie photographs, and proof of address documents.
• Financial Data: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, and others), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction histories related to deposits and withdrawals in Indonesian Rupiah (IDR).
• Communications Data: Records of messages sent to and received from our customer support team, including live chat transcripts and email correspondence.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, and any information you voluntarily provide regarding gambling habits or well-being concerns.

2.2 Information Collected Automatically

When You access the bot4d platform, we automatically collect certain technical and behavioral data. This includes:

• Device and Browser Data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage Data: Pages visited, time spent on each page, features accessed, betting markets viewed, game sessions initiated, and navigation paths through the platform.
• Session Data: Login and logout timestamps, session duration, authentication events, and failed login attempts.
• Geolocation Data: Approximate geographic location derived from your IP address, used to comply with jurisdictional restrictions on gambling services. We do not collect precise GPS-level location data.
• Transaction Metadata: Payment timestamps, transaction amounts, payment method used, and transaction status — not the underlying financial account contents.

2.3 Information from Third Parties

bot4d may receive information about you from trusted third-party sources, including:

• KYC and identity verification service providers, who confirm the authenticity of the documents you submit.
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, and e-wallet operators), who relay transaction confirmation data.
• Anti-fraud and responsible gaming services that provide risk-scoring signals to help us identify suspicious account activity.
• Publicly available sources such as government sanction lists and politically exposed persons (PEP) databases, reviewed as part of our AML compliance obligations.

3. How We Use Your Information

bot4d uses your Personal Data for the following purposes:

Purpose	Data Used	Basis
Account creation and management	Registration data, contact details	Contract performance
Identity verification (KYC)	ID documents, selfie, address proof	Legal obligation
Processing deposits and withdrawals	Financial data, transaction metadata	Contract performance
Customer support and communications	Communications data, account data	Legitimate interest / Contract
Fraud detection and AML compliance	Usage data, financial data, third-party signals	Legal obligation / Legitimate interest
Responsible gaming monitoring	Betting history, deposit patterns, self-exclusion data	Legal obligation / Legitimate interest
Platform security and abuse prevention	Device data, session data, IP address	Legitimate interest
Service improvement and analytics	Usage data, session data (anonymized)	Legitimate interest
Promotional communications (with consent)	Email address, betting preferences	Consent

We do not use your Personal Data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent. We do not engage in profiling for automated decision-making that produces legal or similarly significant effects on you, without providing a right to human review.

4. Legal Basis for Processing

bot4d processes your Personal Data based on one or more of the following legal grounds:

• Performance of a Contract: Processing is necessary to provide you with the betting and gaming services you have signed up for, including account management, deposits, withdrawals, and bet settlement.
• Legal Obligation: Certain processing activities — such as KYC identity verification, anti-money laundering checks, and responsible gaming monitoring — are required by applicable law and our regulatory licensing conditions.
• Legitimate Interests: We process some data to pursue our legitimate business interests, such as fraud prevention, platform security, and service quality improvement, provided these interests do not override your fundamental rights and freedoms.
• Consent: For activities such as sending promotional emails and personalized bonus offers, we rely on your freely given, specific consent. You may withdraw consent at any time by contacting our support team or updating your account preferences.

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

bot4d uses the following categories of cookies and similar technologies on the platform:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that maintain your login state, CSRF protection tokens, and security cookies. You cannot opt out of these without disabling the platform entirely.
• Performance Cookies: Used to analyze platform usage — such as which pages receive the most traffic, how long sessions last, and where users encounter errors. Data collected is aggregated and anonymized.
• Functional Cookies: Remember your preferences, such as your preferred language, display settings, and time zone (WIB, WITA, or WIT), to improve your experience on return visits.

5.2 What We Do Not Use

bot4d does not deploy advertising or targeting cookies. We do not embed third-party social media pixels (Facebook Pixel, Twitter tags, Google Ads remarketing) on our platform. We do not participate in behavioral advertising networks.

5.3 Managing Cooki es

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Instructions for managing cookies are available in your browser's help documentation. Continuing to use the bot4d platform without changing your browser settings constitutes acceptance of our cookie use as described above.

6. Data Sharing and Third Parties

6.1 Service Providers and Data Processors

bot4d works with a carefully selected group of third-party service providers who process Personal Data on our behalf. All such providers are bound by data processing agreements that require them to handle your data securely, use it only for the purposes we specify, and comply with applicable data protection obligations. These providers include:

• KYC and Identity Verification Providers: Third-party services that authenticate the identity documents you submit during account verification.
• Payment Processors: Banks and e-wallet operators (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive only the minimum data required to process your transactions in Indonesian Rupiah.
• Cloud Infrastructure Providers: Our platform is hosted on secure, enterprise-grade cloud infrastructure with physical data centers subject to strict access controls and independent security audits.
• Customer Support Platforms: Live chat and ticketing systems used by our support team to respond to your inquiries in English and Indonesian.
• Anti-Fraud and Risk Management Services: Providers that help us detect suspicious activity, prevent account takeovers, and fulfill our AML screening obligations.

6.2 Legal Disclosures

bot4d may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, court order, or regulatory demand. We will notify you of any such disclosure where permitted by law and where doing so would not compromise an investigation or legal process.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or part of bot4d's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address on record before your data becomes subject to a materially different privacy policy.

7. Data Retention

bot4d retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

• Account and Registration Data: Retained for the duration of your active account and for a minimum of 5 years following account closure, in compliance with anti-money laundering regulations applicable to online betting platforms.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction Records: Retained for a minimum of 5 years to satisfy financial record-keeping obligations and to support dispute resolution.
• Customer Support Communications: Retained for 3 years following the closure of a support ticket or the date of the last interaction, whichever is later.
• Usage and Session Data: Retained in identifiable form for up to 13 months, after which it is anonymized and may be retained indefinitely for statistical purposes.
• Marketing Preferences and Consent Records: Retained for the duration of your account and for 2 years following consent withdrawal, to demonstrate compliance with consent requirements.

When your Personal Data is no longer required, it is securely deleted or anonymized using industry-standard data erasure procedures. Data stored in backup systems is overwritten in accordance with our scheduled backup rotation cycles.

8. Data Security

bot4d implements a multi-layered security framework to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction. Key security measures include:

• Transport Security: All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption. HTTP Strict Transport Security (HSTS) is enforced to prevent downgrade attacks.
• Data at Rest: Sensitive data stored in our databases — including financial account details and identity documents — is encrypted at rest using AES-256.
• Access Controls: Access to Personal Data is restricted to authorized personnel on a strict need-to-know basis. All internal access events are logged and reviewed by our security team.
• Two-Factor Authentication (2FA): We encourage all users to enable 2FA on their accounts. All internal administrative access to production systems requires mandatory 2FA.
• Penetration Testing: Our platform undergoes regular independent penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Security Incident Response: We maintain a documented incident response plan. In the event of a confirmed data breach involving your personal information, we will notify you within 72 hours of becoming aware of the incident.

While bot4d takes all reasonable and commercially practical steps to protect your data, no system is completely immune from risk. You are responsible for maintaining the security of your own account credentials, including your password and any 2FA devices. Never share your login details with anyone — bot4d staff will never ask for your password.

9. Your Rights and Choices

As a bot4d user, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team at the details provided in Section 13.

9.1 Right to Access

You have the right to request a copy of the Personal Data we hold about you, along with information about how it is processed. We will provide this information within 30 days of receiving a valid request. In some cases — such as requests that are repetitive or manifestly unfounded — we may charge a reasonable administrative fee or decline the request.

9.2 Right to Rectification

If any of the Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update basic account details (such as your email address or phone number) directly through your Account Settings panel.

9.3 Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Please note that we may be unable to delete data that we are legally required to retain (such as KYC documents and transaction records under AML regulations).

9.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved, or where processing is unlawful but you prefer restriction over deletion.

9.5 Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that we transmit this data directly to another controller where technically feasible.

9.6 Right to Object

You have the right to object to the processing of your Personal Data where we rely on legitimate interests as our legal basis. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims.

9.7 Withdrawing Consent

Where we process your Personal Data on the basis of your consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To unsubscribe from marketing emails, use the unsubscribe link in any promotional email or contact our support team directly.

10. Children's Privacy

The bot4d platform is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or retain any Personal Data from individuals under the age of 21. If we discover that a user has misrepresented their age during registration and is under 21, we will immediately close the account, void all Bets, and delete the associated Personal Data in accordance with our data retention policy — retaining only what is legally required for AML and fraud prevention purposes.

If you are a parent or guardian and believe that a minor has created an account on bot4d using false information, please contact us immediately at [email protected] so we can investigate and take appropriate action.

11. International Data Transfers

bot4d's primary user base is located in Indonesia. However, due to the nature of cloud-hosted infrastructure and third-party service providers, your Personal Data may be transferred to and processed in countries outside Indonesia. In such cases, bot4d ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements with all international processors containing standard contractual clauses and data protection obligations.
• Transfer only to jurisdictions that provide an adequate level of data protection, or to processors that have implemented certified security frameworks.
• Regular review of international data transfer arrangements to ensure ongoing compliance with applicable data protection standards.

By using the bot4d platform, you acknowledge and consent to the transfer of your Personal Data to locations outside Indonesia as described in this section.

12. Changes to This Privacy Policy

bot4d reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the platform for a period of at least 14 days following the change.
• Send an email notification to the address registered on your account, where the changes materially affect your rights or how we process your data.

Your continued use of the bot4d platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Previous versions of this Policy are available upon request.

13. Contact Information

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please reach out to us through any of the following channels:

• Data Protection Inquiries: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Inquiry" or "Data Rights Request" for faster routing
• Live Chat: Available 24/7 on the platform in English and Indonesian (WIB, UTC+7)
• Response Time: Email responses within 24 hours; live chat responses within 90 seconds

You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe your Personal Data has been processed in a manner that is inconsistent with applicable law.