Privacy Policy — cak4d

1. Introduction

This Privacy Policy ("Policy") is issued by cak4d ("we", "us", "our", "the Platform") and applies to all personal data processed in connection with your use of the cak4d website at https://cak4d.cam and any related mobile or application interfaces. cak4d operates as an international online gaming and sports betting brand primarily serving English-preference players across Indonesia, including major cities such as Jakarta, Surabaya, Bandung, Medan, Semarang, Bali, and Makassar.

By registering an account, depositing funds, or otherwise using the cak4d platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please cease using the Platform and contact us to close your account.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, all of which form part of the agreement between you and cak4d.

2. Definitions

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means cak4d, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of cak4d under a written data processing agreement.
• "User" / "Player" means any individual who has created an account on the cak4d Platform.
• "KYC" (Know Your Customer) means the identity and age verification process conducted before processing withdrawals or fulfilling regulatory obligations.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation.

3. Data We Collect

cak4d collects the following categories of personal data from registered users and site visitors:

3.1 Identity Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Nationality and country of residence
• Government-issued identification number (KTP number, passport number, or driver's licence number)
• Photograph or scanned copy of identity document (submitted during KYC)

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address and postal code

3.3 Financial Data

• Bank account details (bank name, account holder name, account number) for payment processing via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history, deposit amounts, withdrawal amounts, and account balances

3.4 Technical and Usage Data

• IP address, browser type and version, operating system, and device identifiers
• Login timestamps, session durations, and geographic location derived from IP address
• Clickstream data, pages visited, features used, and betting/gaming activity logs

3.5 Communications Data

• Content of live chat, email, or support ticket communications with cak4d's customer service team
• Records of any formal complaints or disputes submitted to cak4d

4. How We Collect Data

cak4d collects personal data through the following channels:

• Direct submission: Information you provide when completing the registration form, submitting KYC documents, or contacting our support team.
• Automated technical collection: Data gathered automatically when you access the Platform, including cookies, server logs, and device fingerprinting technologies.
• Payment processors: Transaction confirmation data received from our payment partners in connection with deposits and withdrawals.
• Third-party identity verification services: Data returned by licensed KYC and AML (Anti-Money Laundering) screening providers used to verify your identity and assess financial risk.
• Fraud detection systems: Signals received from fraud prevention partners, including device reputation databases and behavioural analytics engines.

5. Purposes of Processing

We process your personal data for the following clearly defined purposes:

6. Legal Basis for Processing

cak4d processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the agreement between you and cak4d, including account management, payment processing, and bet settlement.
• Legal obligation: Processing necessary to comply with applicable anti-money laundering laws, age verification requirements, and financial reporting obligations.
• Legitimate interests: Processing undertaken in the legitimate interests of cak4d, including fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have given explicit, freely given, and informed consent — specifically in relation to marketing communications. You may withdraw this consent at any time by contacting support.

7. Data Sharing & Disclosure

cak4d does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data with the following categories of recipient, solely to the extent necessary for the purposes described in Section 5:

• Payment service providers: Banks and e-wallet operators (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) require sufficient transaction data to process deposits and withdrawals.
• KYC and AML screening providers: Licensed identity verification and anti-money-laundering partners who verify document authenticity and screen against sanctions lists.
• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, and Spribe receive limited session data required to deliver and audit their games within the cak4d platform.
• Fraud prevention and cybersecurity partners: Technical vendors who monitor the platform for unauthorised access, bot activity, and account takeover attempts.
• Legal and regulatory authorities: Where cak4d is required by applicable law, court order, or regulatory directive to disclose personal data — including responses to lawful law-enforcement requests.
• Professional advisers: Lawyers, auditors, and accountants engaged by cak4d who are subject to professional confidentiality obligations.

All third-party data processors engaged by cak4d are bound by written data processing agreements that restrict their use of personal data to the specific purposes for which it was shared.

8. International Data Transfers

cak4d operates internationally, and some of the third-party processors listed in Section 7 are located outside Indonesia. Where personal data is transferred to a country that does not provide an equivalent level of data protection, cak4d implements appropriate safeguards — including standard contractual clauses and data processing agreements — to ensure that your personal data receives a consistent standard of protection regardless of where it is processed.

9. Data Retention

cak4d retains personal data for only as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer communications: Retained for three (3) years from the date of the interaction, or longer where related to an unresolved dispute.
• Technical and usage logs: Retained for a rolling period of twelve (12) months, after which they are aggregated and anonymised.
• Marketing consent records: Retained for the duration of the consent and for three (3) years thereafter as evidence of that consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

10. Security Measures

cak4d implements a layered information security framework to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction:

• Transport encryption: All data transmitted between your browser and the cak4d platform is protected by 256-bit SSL/TLS encryption.
• At-rest encryption: Sensitive personal data and financial records stored on cak4d's servers are encrypted at rest using AES-256 or equivalent standards.
• PCI-DSS compliance: Financial data infrastructure meets Payment Card Industry Data Security Standards to protect payment-related information.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication for all staff.
• Intrusion detection: Continuous network monitoring, automated anomaly detection, and regular third-party penetration testing are employed to identify and address potential vulnerabilities.
• Incident response: cak4d maintains a documented data breach response procedure. In the event of a breach that is likely to result in high risk to your rights and freedoms, we will notify affected users without undue delay.

11. Cookies & Tracking Technologies

cak4d uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security tokens, and load-balancing cookies. No consent is required for these cookies.

11.2 Performance & Analytics Cookies

These cookies collect aggregated, anonymised data about how users navigate the Platform — such as which pages are most visited and how long sessions last. This data helps us identify performance bottlenecks and improve the user experience. We use privacy-compliant analytics tools that do not transmit raw personal data to third parties.

11.3 Functionality Cookies

These cookies remember your preferences — such as your preferred language, last-used payment method, and display settings — so that you do not need to re-enter them on each visit.

11.4 Targeting and Marketing Cookies

With your consent, cak4d may use cookies to deliver personalised promotions and relevant content based on your browsing behaviour within the Platform. You may withdraw this consent at any time by adjusting your browser's cookie settings or by contacting our support team.

12. Your Data Rights

Subject to applicable law and certain limited exceptions, you have the following rights in relation to your personal data held by cak4d:

To exercise any of these rights, please submit a request to [email protected]. We will respond within 30 days of receiving a valid request. We may ask you to verify your identity before processing any data rights request.

13. Protection of Minors

cak4d's services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Where we become aware that a registered user is under 21, the account will be immediately suspended, all related personal data will be handled in accordance with our responsible-gaming obligations, and any funds in the account will be dealt with per our Responsible Gaming policy.

If you are a parent or guardian and you believe that a minor under your care has registered on the cak4d platform, please contact us immediately at [email protected].

14. Third-Party Links & Embedded Content

The cak4d Platform may contain embedded content or functionality delivered by third-party providers — including game studios such as Evolution Gaming, Pragmatic Play, and Spribe — that operate under their own privacy policies. cak4d is not responsible for the data practices of these third parties once their content is accessed. We encourage you to review the privacy notices of any third-party service provider whose content you interact with through the Platform.

15. Policy Amendments

cak4d reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify registered users via the email address on file or via a prominent notice on the Platform. The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following notification of a material change constitutes acceptance of the revised Policy.

16. Contact & Complaints

For any questions, data rights requests, or complaints regarding this Privacy Policy or cak4d's data practices, please contact our Data Protection team:

If you are not satisfied with our handling of a data rights request or complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. cak4d will cooperate fully with any lawful regulatory investigation.