Privacy Policy

01 Introduction

post4d ("we", "us", "our") operates the online betting and gaming platform accessible at https://post4d.cam. In the course of providing our services — which include sports betting, live casino, togel (Indonesia's traditional numbers lottery), and slot gaming — we necessarily collect and process certain personal data relating to our registered members and website visitors.

This Privacy Policy has been prepared in accordance with internationally recognized data protection principles, including those reflected in the European Union's General Data Protection Regulation (GDPR), the OECD Privacy Guidelines, and applicable data governance standards relevant to the Indonesian market. Although Indonesia's Personal Data Protection Law (UU PDP) is the primary statutory framework applicable to Indonesian residents, post4d voluntarily aligns with the higher-standard principles of GDPR as a benchmark for global best practice.

This policy applies to all personal data collected from individuals who: (a) register or apply to register an account on post4d; (b) visit the post4d website without registering; (c) contact post4d through any support or communication channel; or (d) participate in post4d promotions, surveys, or competitions.

02 Definitions

• "Personal Data" — any information that directly or indirectly identifies a natural person, including name, identification number, location data, IP address, or any factor specific to the physical, physiological, economic, or social identity of that person.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — post4d, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third party engaged by post4d to process personal data on our behalf, subject to written data processing agreements.
• "Data Subject" — any natural person whose personal data is processed by post4d, including registered Users and unregistered website visitors.
• "Cookies" — small text files placed on a User's device by the Platform to facilitate session management, analytics, and personalization.
• "KYC" — Know Your Customer; the identity verification process applied to registered Users prior to withdrawal processing and periodically during account operation.

03 Data We Collect

post4d collects the following categories of personal data:

3.1 Identity Data

• Full legal name as it appears on a government-issued ID (KTP, passport, SIM).
• Date of birth (for age verification — post4d is a 21+ platform).
• Gender (optional, collected during KYC in some circumstances).
• Photograph or scanned copy of a government-issued ID document.

3.2 Contact Data

• Email address.
• Mobile telephone number (for SMS verification and security alerts).
• Residential address, including city, province, and postal code (Indonesia).

3.3 Financial Data

• Bank account details (bank name, account number, account holder name) for withdrawal processing — applicable to BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata accounts.
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Transaction history including deposit amounts, withdrawal amounts, and dates in IDR.

3.4 Technical Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Session duration and page interaction data.
• Login timestamps and access logs.

3.5 Betting and Gaming Activity Data

• Bet history, stake amounts, game types played, and win/loss records.
• Responsible gaming tool settings (deposit limits, self-exclusion requests).
• Bonus claims and wagering activity linked to promotions.

3.6 Communications Data

• Records of live chat, email, and any other support interactions with post4d staff.
• Responses to surveys or feedback requests (where voluntarily submitted).

04 How We Collect Data

post4d collects personal data through the following methods:

• Direct submission: information you provide voluntarily when registering an account, completing KYC, making a deposit or withdrawal request, or contacting support.
• Automated collection: technical and usage data collected automatically through cookies, server logs, and analytics tools as you interact with the Platform.
• Third-party sources: identity verification data received from KYC service providers; fraud risk signals from payment processors; geolocation data from IP intelligence services.
• Device permissions: where you access post4d through a mobile browser and grant permission, device-level signals (such as approximate location) may be collected to assist fraud detection.

05 Purpose of Processing

We process your personal data for the following specific purposes:

06 Legal Basis for Processing

post4d processes personal data on the following legal grounds:

• Contractual necessity: processing required to perform our obligations under the User Agreement — including account management, payment processing, and service delivery.
• Legal obligation: processing necessary to comply with applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and KYC regulations under our international gaming license.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and analytics — where these interests are not overridden by the rights of the Data Subject.
• Consent: processing for direct marketing communications, use of non-essential cookies, and certain analytics activities — where you have provided explicit, freely given, and withdrawable consent.

07 Data Sharing & Disclosure

7.1 Third-Party Service Providers

post4d engages carefully selected third-party processors to assist in delivering platform services. These include payment processors (supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja integrations), KYC verification providers, game content studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), fraud detection services, and cloud infrastructure providers. All third-party processors are bound by written data processing agreements requiring them to maintain confidentiality and apply appropriate security standards.

7.2 Regulatory and Law Enforcement Authorities

post4d may be required by law, court order, or competent regulatory authority to disclose personal data. We will only comply with such requests where we are legally obligated to do so and, where permitted, will notify the affected User of any such disclosure.

7.3 No Commercial Data Sales

post4d does not sell, rent, trade, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. Any data sharing is strictly limited to the operational purposes described in this policy.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of post4d's business assets, personal data held by post4d may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy policy applicable to your data post-transfer.

08 Data Retention

post4d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized and aggregated data may be retained indefinitely for platform analytics and statistical purposes.

09 Data Security

post4d applies a multi-layered security architecture to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS encryption: all data transmitted between your device and the post4d platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Encryption at rest: sensitive data fields — including financial data, identity documents, and passwords — are encrypted within our database infrastructure using AES-256 encryption.
• Access controls: personal data is accessible only to post4d employees and processors with a legitimate operational need. Access is governed by role-based permissions, enforced via multi-factor authentication.
• Password security: account passwords are hashed using a bcrypt algorithm and are never stored in plaintext. post4d staff cannot view your password.
• Fraud monitoring: automated systems continuously monitor account activity for anomalous behavior indicative of unauthorized access or fraudulent transactions.
• Regular security audits: our platform undergoes periodic independent security testing, including penetration testing and vulnerability assessments.
• Incident response: in the event of a personal data breach that poses a risk to your rights, post4d will notify affected Users and relevant authorities in accordance with applicable data protection law, without undue delay.

10 Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small data files placed on your device when you visit the post4d website. They allow the Platform to recognize your browser, remember your preferences, maintain your login session, and collect analytical information about your interactions with the site.

10.2 Types of Cookies We Use

10.3 Managing Cookies

You may configure your browser settings to refuse or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging in to your post4d account and accessing Platform services. For instructions on managing cookies in your specific browser, please refer to your browser's help documentation. You may also withdraw consent to non-essential cookies at any time by contacting our support team.

11 Your Data Rights

As a Data Subject, you hold the following rights in relation to the personal data post4d holds about you. To exercise any of these rights, please contact our support team at the address provided in Section 15.

• Right of Access: you may request a copy of the personal data post4d holds about you, together with information about how it is processed. We will respond within 30 days of receiving a verified request.
• Right to Rectification: you may request correction of any inaccurate or incomplete personal data we hold about you. Some corrections — such as changes to your legal name — may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations under AML and licensing regulations.
• Right to Restriction of Processing: you may request that we restrict processing of your data while a dispute about its accuracy or our legitimate grounds for processing is being resolved.
• Right to Data Portability: you may request your personal data in a structured, commonly used, machine-readable format (JSON or CSV), where technically feasible and where processing is based on your consent or contractual necessity.
• Right to Object: you may object to processing of your data carried out on the basis of legitimate interests, including profiling for marketing purposes. You may opt out of direct marketing communications at any time.
• Rights Related to Automated Decision-Making: post4d uses automated systems for fraud detection and responsible gaming monitoring. You have the right to request human review of any significant automated decision that affects your account.

12 Minors

The post4d platform is strictly for adults aged 21 years and older. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a minor, we will immediately close the relevant account, forfeit any associated balances, and securely delete the minor's data without undue delay.

If you are a parent or guardian and believe that a minor in your care has registered an account on post4d, please contact our support team immediately at [email protected] so that we may take prompt corrective action.

13 International Data Transfers

post4d operates as an internationally licensed platform. In the course of providing our services, personal data may be transferred to and stored on servers or processed by service providers located outside Indonesia. Where such transfers occur, post4d ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, and adequacy assessments — to ensure that your data receives a level of protection equivalent to that applicable in your home jurisdiction.

By registering an account on post4d, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia where our operational and technical infrastructure requires it. post4d will not transfer your data to any jurisdiction that does not offer an adequate standard of data protection without your explicit prior consent.

14 Policy Amendments

post4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. All amendments will be published on this page with an updated effective date. Where a change is material — for example, introducing a new category of data processing or a new third-party sharing arrangement — post4d will provide reasonable advance notice via the Platform or by email to your registered address before the change takes effect.

Your continued use of the post4d platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to remain informed of any changes. Historical versions of this Privacy Policy are available on request by contacting our support team.

15 Contact & Data Protection Inquiries

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by post4d, please contact our support and data protection team through the following channel:

Please include "Privacy Policy Inquiry" or "Data Rights Request" in the subject line of your email. Our support team is available 24 hours a day, 7 days a week, with peak staffing between 08:00 and 24:00 WIB (UTC+7). We aim to respond to all formal data protection requests within five business days of receipt and to resolve them fully within 30 calendar days.

All communications may be conducted in English or Bahasa Indonesia. Where a request is submitted in Bahasa Indonesia, our Indonesian-speaking support agents will handle the inquiry directly.