Privacy Policy — How kay4d Protects Your Data

This Privacy Policy governs the collection, processing, storage, use, and disclosure of personal data by kay4d ("kay4d", "we", "us", "our") in connection with the operation of the online betting and casino platform available at https://kay4d.cam (the "Platform").

kay4d acts as the data controller in respect of the personal data of registered users ("Members") and visitors to the Platform. This means kay4d determines the purposes and means by which your personal data is processed.

This Policy applies to:

• All current and former registered Members of the Platform.
• Visitors who browse the Platform without registering an Account.
• Individuals who communicate with kay4d via our support channels (email, live chat).
• Individuals whose data is submitted by a registered Member in connection with a referral programme.

This Policy does not apply to third-party websites or services that may be accessible via links on the Platform. Those services operate under their own independent privacy policies, and kay4d accepts no responsibility for their data practices.

We collect personal data that you provide directly, data generated automatically through your use of the Platform, and data received from third-party service providers. The categories of personal data we collect include:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is strictly required for identity verification. We do not knowingly collect personal data from individuals under the age of 21.

kay4d collects personal data through the following mechanisms:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, adding a payment method, placing a bet, or contacting our support team.
• Automated collection: Technical and usage data collected automatically as you navigate the Platform, via first-party cookies, session storage, server-side access logs, and our analytics infrastructure.
• Third-party service providers: Identity and fraud signals received from our KYC verification partner, payment confirmation data from Indonesian bank and e-wallet processors, and device fingerprint signals from our fraud-detection layer.
• Referral submissions: If another Member refers you to the Platform under a referral programme, we may receive your contact details from that Member solely for the purpose of extending the referral invitation.

We do not purchase contact lists or acquire personal data from data brokers for the purpose of unsolicited outreach.

We process your personal data only for specific, documented purposes. The table below maps each processing purpose to the data categories involved:

We do not use your personal data to make fully automated decisions that produce significant legal effects on you without human review. Our responsible gaming monitoring systems may flag accounts for human review, but account restriction or closure decisions are always reviewed by a staff member.

kay4d processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and kay4d — including creating your Account, processing transactions in IDR, and delivering gaming services — is carried out because it is necessary to fulfil our obligations to you as a Member.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, anti-money-laundering record-keeping, and responding to lawful requests from competent authorities.
• Legitimate interests: Processing carried out to pursue kay4d's legitimate business interests where those interests are not overridden by your rights and interests, including fraud prevention, platform security, and internal analytics used to improve the Member experience.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — in particular, the sending of promotional and marketing communications via email, SMS, or push notification. You may withdraw your consent at any time through your Account settings or by contacting support, and withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

kay4d does not sell, rent, or exchange your personal data with third parties for their own independent marketing or commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment processors and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum personal and financial data necessary to process your deposit or withdrawal transactions.
• KYC and identity verification providers: Our third-party KYC partner receives copies of your identity documents and verification selfie solely to confirm your identity and age eligibility. They operate under strict contractual data processing obligations.
• Fraud detection and security vendors: Technical and behavioural data may be shared with our fraud prevention service provider to detect and block fraudulent account activity, bonus abuse, and money-laundering patterns.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, Spribe, and Playtech receive session tokens and pseudonymous player identifiers necessary to deliver their game content within the Platform. These providers do not receive your name, contact details, or financial data.
• Platform analytics providers: Pseudonymous technical and usage data is shared with our analytics infrastructure provider to support performance monitoring and product improvement.
• Legal and regulatory disclosure: kay4d may disclose personal data to competent governmental or regulatory authorities where required to do so by applicable law, court order, or lawful regulatory request. We will notify you of such requests where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of kay4d's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments. We will notify you of any such transfer in advance where practicable.

All third-party service providers who receive personal data on our behalf are contractually bound to process that data only in accordance with our instructions, to maintain appropriate security measures, and not to use it for any other purpose.

The kay4d Platform serves members primarily located in Indonesia. Our core infrastructure is hosted in data centres designed to serve the Southeast Asian region, with server locations selected to minimise latency for users in Jakarta, Surabaya, Bandung, Medan, Bali, and other major Indonesian cities.

Some of our third-party service providers — including game content providers and fraud detection vendors — may process data in jurisdictions outside Indonesia. Where such international transfers occur, kay4d ensures that appropriate safeguards are in place, including:

• Contractual clauses that impose data protection obligations on the recipient equivalent to those applicable under applicable privacy law.
• Transfers only to service providers that operate in jurisdictions with adequate data protection standards or that have implemented supplementary technical and organisational measures.
• Regular review of our international transfer arrangements to ensure they remain appropriate and compliant.

You may request further information about the specific safeguards applicable to international transfers of your personal data by contacting our support team at the address in Section 15 of this Policy.

We retain your personal data only for as long as it is necessary for the purposes described in this Privacy Policy or as required by applicable legal or regulatory obligations. Our general retention periods are as follows:

• Active Account data: Retained for the duration of your Account's active status plus a period of five (5) years following Account closure, to satisfy anti-money-laundering record-keeping requirements.
• KYC documents and verification data: Retained for five (5) years from the date of verification or from the date of Account closure, whichever is later.
• Transaction records (deposits, withdrawals, bet history): Retained for five (5) years from the date of each transaction.
• Customer support communications: Retained for two (2) years from the date of the final communication in each support case, or longer if the matter relates to an unresolved dispute.
• Marketing preference records: Retained for the duration of your Account plus three (3) years to demonstrate consent history if required.
• Server logs and technical data: Retained for twelve (12) months and then automatically deleted unless flagged as part of an active security or fraud investigation.

When personal data is no longer required, we apply secure deletion procedures to ensure it cannot be reconstructed or recovered. Anonymised or aggregated data derived from your usage — from which you cannot be individually identified — may be retained indefinitely for statistical and analytical purposes.

kay4d implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport security: All data in transit between your browser or device and the Platform is encrypted using TLS 1.2 or higher. We enforce HTTPS-only access across the entire Platform domain.
• Data at rest: Sensitive data stored in our databases — including KYC documents and financial identifiers — is encrypted at rest using AES-256 encryption.
• Password security: User passwords are never stored in plaintext. We apply a strong one-way hashing algorithm with per-user salts to all stored credentials.
• Access controls: Access to production systems and personal data stores is restricted to authorised personnel on a strict need-to-know basis. All staff access is logged, audited, and reviewed regularly.
• Fraud monitoring: Automated fraud detection systems monitor Account activity in real time for unusual patterns, including abnormal login locations, atypical transaction volumes, and device anomalies.
• Penetration testing: The Platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses proactively.
• Incident response: kay4d maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and interests, we will notify affected Members without undue delay.

While we take data security seriously and invest in robust protective measures, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your kay4d Account and to contact our support team immediately if you believe your Account has been accessed without your authorisation.

kay4d uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to gather analytics data that helps us improve the Member experience. The types of cookies we use are described below:

kay4d does not use third-party advertising cookies or permit advertising networks to place tracking cookies on the Platform. We do not engage in cross-site behavioural advertising or retargeting.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. For detailed guidance on managing cookies in your specific browser, please consult your browser's help documentation.

As a Member of the kay4d Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at the address provided in Section 15. We will respond to all valid requests within 30 calendar days and will not charge a fee for reasonable requests.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed. We will provide this in a clear, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it without undue delay. You may also update many details directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. This right is subject to legal retention obligations — for example, transaction records required for anti-money-laundering compliance cannot be deleted before the mandatory retention period expires.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider.
• Right to Object: You have the right to object at any time to processing of your personal data carried out on the basis of our legitimate interests, including profiling for personalisation purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (in particular, for marketing communications), you may withdraw that consent at any time through your Account settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

If you are not satisfied with our response to a data rights request, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction.

The kay4d Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from, or provide services to, individuals under the age of 21. Age verification is a mandatory component of our KYC process; no Member may complete registration or make a deposit without confirming their date of birth and, where required by our compliance procedures, submitting a valid government-issued Indonesian ID (KTP or passport) demonstrating they meet the minimum age requirement.

If kay4d becomes aware, or has reasonable grounds to believe, that a Member is under the age of 21, we will immediately:

• Suspend the Account pending investigation.
• Cease processing the Member's personal data for any purpose other than completing the investigation and satisfying any relevant legal obligations.
• Return any deposits that can be verified as belonging to the minor, less any winnings derived from gameplay during the period of access, and close the Account permanently.

If you are a parent or guardian and believe that a minor in your care has registered an Account on the Platform without authorisation, please contact our support team immediately at the email address in Section 15. We will investigate and respond within 24 hours.

The kay4d Platform may, from time to time, display content embedded from or links to third-party game providers (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, PG Soft, Spribe, and Playtech). While we carefully vet all third-party providers before integrating their content on the Platform, these providers operate under their own independent privacy policies and data practices.

kay4d is not responsible for the privacy practices of third-party game providers or any other third-party services. We recommend that you review the privacy notices of any third-party services you interact with. In all cases, the personal data shared with game providers through the Platform is limited to pseudonymous session identifiers — your name, contact details, and financial information are not transmitted to game providers.

kay4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered Members by email to the address on record and by displaying a prominent notice on the Platform for a period of no less than seven (7) days before the revised Policy takes effect.

The effective date displayed at the top of this document reflects the most recent revision. We recommend bookmarking this page and reviewing it periodically. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

Where a proposed amendment would involve a material change to the basis on which we process data for which we rely on your consent, we will seek fresh consent from you before the amendment takes effect.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how kay4d processes your personal data, please contact our team through the following channel:

• Data & Privacy Enquiries Email: [email protected] (plain text — not a clickable link; please copy and paste into your email client)
• Subject Line for Data Requests: Please use "Data Rights Request — [Your Username]" to ensure your message is routed directly to our privacy team.
• Support Hours: 24 hours a day, 7 days a week, including all Indonesian public holidays.
• Response Time: We acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 30 calendar days of receipt.
• Languages: Requests may be submitted in English or Indonesian (Bahasa Indonesia). Native Indonesian-speaking privacy team members are available to assist.

For responsible gaming-related requests — including deposit limit adjustments, cooling-off periods, or self-exclusion — please visit our dedicated Responsible Gaming page or mark your support message with the subject "Responsible Gaming Request".

This Privacy Policy was last reviewed and updated on 1 January 2026. This document supersedes all previous versions of the kay4d Privacy Policy. If you downloaded or saved a prior version, please refer to this online version as the sole authoritative current text.