kit4d Privacy Policy

The following terms carry the meanings assigned below throughout this Privacy Policy:

kit4d collects Personal Data across several distinct categories, depending on how you interact with the Platform:

2.1 Registration Data

When you create a kit4d Account, we collect your full name, date of birth, residential address (city and province within Indonesia), email address, and chosen username. This information is required to open and maintain your Account and to verify that you meet the minimum age requirement of 21 years.

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering regulations and to process withdrawals above applicable thresholds, kit4d collects copies of government-issued identity documents. For Indonesian members, this typically means a scan or photograph of your Kartu Tanda Penduduk (KTP) or a valid Indonesian passport. In some cases, supplementary documents such as a bank statement or utility bill may be requested to confirm residential address.

2.3 Financial & Transaction Data

kit4d records all deposit and withdrawal transactions associated with your Account, including the payment method used (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or ShopeePay), transaction amounts in Indonesian Rupiah (IDR), timestamps, and reference numbers. We do not store full bank account numbers or e-wallet PINs; these remain with your financial institution or wallet provider.

2.4 Gaming Activity Data

We record your betting and gaming history across all products on the Platform — including sportsbook wagers, togel (Indonesia's traditional numbers lottery) stake details, live casino sessions, and slot play — for the purposes of account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical & Device Data

When you access the Platform, our servers automatically log your IP address, browser type and version, operating system, device model, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.

2.6 Communications Data

If you contact kit4d's customer support team via live chat or email, we retain a record of the communication, including the content of messages, timestamps, and the agent who handled your enquiry. This record is used for quality assurance, dispute resolution, and training purposes.

kit4d uses the Personal Data we collect for the following purposes:

• Account management: Creating and maintaining your Member Account, authenticating your identity at login, and providing access to all Platform features.
• Payment processing: Facilitating deposits and withdrawals in IDR via your chosen local bank or e-wallet, verifying transaction legitimacy, and maintaining accurate financial records.
• KYC & compliance: Verifying your age (minimum 21 years) and identity to satisfy anti-money-laundering (AML) and counter-financing-of-terrorism (CFT) obligations applicable to our operating licence.
• Responsible gaming: Monitoring betting patterns to identify signs of problem gambling behaviour, applying self-imposed deposit limits or cooling-off periods you have requested, and contacting you if our systems flag unusual activity. For more information, see our Responsible Gaming page.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and improving the quality of our support service.
• Fraud prevention & security: Detecting and preventing fraudulent activity, unauthorised Account access, collusion, and other prohibited conduct as described in our Terms & Conditions.
• Platform improvement: Analysing aggregated usage data and gaming patterns to improve the design, functionality, and content of the kit4d Platform.
• Marketing communications: Sending promotional emails about bonuses, seasonal offers (such as Idul Fitri or Ramadhan specials), and new game launches — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time.
• Legal obligations: Retaining records as required by applicable law, responding to lawful requests from regulatory authorities, and defending against legal claims.

kit4d processes your Personal Data on one or more of the following legal bases:

kit4d does not sell or commercially share your Personal Data. We disclose data only in the limited circumstances described below, and only to the extent strictly necessary:

• Payment service providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC vendors process identity document images on our behalf to confirm age and identity. These vendors operate under strict data processing agreements and are prohibited from using your data for any purpose other than the verification service.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive pseudonymous session identifiers to deliver their games and calculate results. These providers do not receive your name, financial data, or identity documents.
• Regulatory authorities: kit4d may disclose Personal Data to competent regulatory or law enforcement authorities when required by applicable law or a valid legal process, including in connection with AML investigations.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all assets, Personal Data may be transferred to the acquiring entity subject to equivalent privacy protections remaining in place.

The kit4d Platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. The categories of cookies we deploy are as follows:

You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to log in and use core Platform features.

kit4d retains Personal Data for the shortest period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or our licensing conditions. The general retention schedule is as follows:

• Account and registration data: Retained for the duration of your active membership and for a period of five years following Account closure, in accordance with AML record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of verification or Account closure, whichever is later, as required by anti-money-laundering regulations.
• Transaction records: Retained for a minimum of five years for financial compliance and dispute resolution purposes.
• Customer support communications: Retained for two years from the date of the interaction for quality assurance and dispute resolution.
• Marketing consent records: Retained for the duration of your consent and for one year following withdrawal of consent, to demonstrate compliance with consent management obligations.
• Technical logs: Retained for 90 days and then automatically purged, unless a specific security incident investigation requires extended retention.

At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

kit4d employs a layered security architecture to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction:

• Transport security: All communications between your device and kit4d servers are encrypted with TLS 1.3. Connections using older, insecure protocol versions are rejected.
• Data-at-rest encryption: Databases containing Personal Data are encrypted using AES-256. Encryption keys are stored separately from the data they protect, in a dedicated key management system.
• Password handling: Member passwords are never stored in plain text. They are hashed using bcrypt with a per-account salt before being written to the database. kit4d staff cannot read your password; only you know it.
• Two-factor authentication (2FA): All Members are encouraged to enable 2FA on their Account. Support staff accounts and administrative access to Member data require 2FA as a mandatory control.
• Access controls: Access to Member Personal Data within kit4d's internal systems is restricted on a strict need-to-know basis. All internal access events are logged and subject to periodic audit.
• Penetration testing: The Platform undergoes regular independent security assessments. Critical findings are remediated within 48 hours of identification.

As a Member, you have the following rights in relation to your Personal Data held by kit4d. To exercise any of these rights, contact our support team via live chat or by emailing [email protected] from the address registered on your Account:

• Right of access: You may request a copy of all Personal Data kit4d holds about you. We will respond within 30 days of receiving a verified request.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most Account details directly from your Account settings page.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations. Note that we are unable to delete data we are required by law to retain (e.g., KYC records and transaction history for AML compliance).
• Right to restriction of processing: In certain circumstances, you may request that we limit the way we use your Personal Data while a dispute or complaint is under review.
• Right to data portability: You may request that we provide your Personal Data in a commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time with no negative effect on your Account. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to object: You may object to processing based on legitimate interests. kit4d will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

kit4d will respond to all rights requests within 30 calendar days. In complex or high-volume cases, this period may be extended by an additional 30 days with prior notification to you.

The kit4d Platform is strictly for adults aged 21 years and over. kit4d does not knowingly collect Personal Data from any person under the age of 21. If you believe that a minor has registered an Account on kit4d — whether your own child or another person in your household — please contact our support team immediately at [email protected].

Upon receiving a credible report that a minor has registered an Account, kit4d will:

1. Immediately suspend the Account pending investigation.
2. Conduct an age verification review using available KYC data.
3. Permanently close the Account if the minor status is confirmed.
4. Return any deposited funds (net of any bonus abuse adjustments) to the originating payment method.
5. Delete the minor's Personal Data to the extent permitted by legal retention obligations.

kit4d uses industry-standard age verification tools at registration and at the KYC stage to minimise the risk of underage access. Parents and guardians are encouraged to use parental control software and to keep login credentials for any gambling-related services strictly private and inaccessible to minors in their household.

kit4d's primary operations serve members in Indonesia. Some of our service providers — including certain game studios and cloud infrastructure partners — may process data on servers located outside Indonesia. Where Personal Data is transferred internationally, kit4d ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into our agreements with all international Processors.
• Selection of Processors that operate under privacy frameworks offering a level of protection equivalent to or exceeding applicable Indonesian data protection standards.
• Documented transfer impact assessments for transfers to jurisdictions that do not benefit from an adequacy determination.

You may request further information about international transfer safeguards applicable to your data by contacting our support team.

kit4d may update this Privacy Policy from time to time to reflect changes in our data practices, service offerings, or applicable legal requirements. When material changes are made, we will notify Members via email to the registered Account address and by displaying a prominent notice on the Platform at least seven days before the changes take effect.

The version number and last-updated date displayed at the top of this page indicate the current version of the Policy. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should close your Account before the effective date and request deletion of your Personal Data in accordance with Clause 9.

Previous versions of this Privacy Policy are available on request from our customer support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kit4d handles your Personal Data, please reach out through any of the following channels:

• Live Chat: Available 24/7 directly through the Platform. Our agents respond in both English and Bahasa Indonesia. Average response time is under two minutes across all Indonesian time zones (WIB, WITA, and WIT).
• Email: [email protected] — Written privacy enquiries are acknowledged within 24 hours and fully resolved within 30 calendar days.

For requests to exercise your data rights under Clause 9, please include your registered username and a brief description of your request. We may ask you to verify your identity before processing the request to protect your Account security.

For concerns related to responsible gaming — including deposit limits, self-exclusion, or time-out features — please visit our dedicated Responsible Gaming page or raise the matter directly through live chat. All responsible gaming requests are handled with priority and full confidentiality.