Privacy Policy — yok4d

yok4d is Indonesia's premier online betting platform, serving over 2.5 million registered members across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Palembang, Makassar, and beyond. As an operator that handles financial transactions and sensitive personal data daily, we recognize that responsible data stewardship is not just a legal obligation — it is a cornerstone of the trust our members place in us.

This Privacy Policy explains, in plain and precise terms, what personal data we collect when you visit or use the Platform, why we collect it, how we use it, with whom we may share it, how long we keep it, and what rights you have as a data subject. We do not sell personal data to third parties for commercial marketing purposes. We do not use your data in ways that are inconsistent with the purposes described in this Policy.

If you have questions about anything in this document, please contact our support team using the details in Section 14.

The following terms are used throughout this Privacy Policy with the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly — including name, national identification number, email address, IP address, payment account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Subject" means the individual to whom Personal Data relates — in this context, any member, user, or visitor of the yok4d Platform.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, yok4d.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of yok4d under a binding data-processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process required of all members before withdrawals are permitted.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, remember preferences, and collect analytics data.
• "Platform" means the yok4d website at https://yok4d.cam and all associated mobile-optimized interfaces operated by the Company.

yok4d collects Personal Data across several categories, depending on how you interact with the Platform. The table below summarises each category, specific data points within it, and the primary reason for collection.

yok4d collects Personal Data through the following channels:

4.1 Direct Collection

You provide data directly to us when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion. Data provided directly by you includes Identity Data, Contact Data, Financial Data, KYC Document Data, and Communications Data.

4.2 Automated Collection

When you access the Platform, we automatically collect Technical Data and Usage Data via server logs, session management systems, and analytics tools embedded in the Platform. This collection occurs regardless of whether you are a registered member or an anonymous visitor.

4.3 Cookies and Tracking Technologies

The Platform uses cookies, pixel tags, and similar technologies to collect Technical Data and Usage Data. See Section 9 for a full description of the cookies we use and how to manage them.

4.4 Third-Party Sources

In limited circumstances — primarily for fraud prevention and AML screening — we may receive data about you from third-party identity verification services, payment processors, and financial intelligence providers. Data received from third parties is processed only for the specific purpose for which it was obtained and is subject to the same protections as directly collected data.

We process your Personal Data only where we have a lawful basis to do so. The primary purposes and their corresponding legal bases are as follows:

• Account Management and Service Delivery: Processing is necessary to perform the contract between you and yok4d. This covers account creation, authentication, deposit and withdrawal processing, bet settlement, and customer support.
• KYC and Age Verification: Processing is required to comply with our legal obligations under applicable anti-money laundering regulations and our commitment to preventing underage gambling. All members must be at least 21 years of age.
• Fraud Prevention and Security: Processing is in our and your legitimate interests to detect, investigate, and prevent fraudulent transactions, account takeovers, and other security threats.
• Anti-Money Laundering (AML) Compliance: Processing is necessary to meet our legal and regulatory obligations to monitor transactions for suspicious activity and report as required.
• Responsible Gaming Monitoring: Processing is in the legitimate interests of members and the Company to identify patterns of play that may indicate problem gambling, enabling timely intervention through our Responsible Gaming Tools.
• Marketing and Promotions: Where you have provided explicit consent, we may use your contact data to communicate promotional offers, bonuses, and seasonal campaigns. You may withdraw consent at any time by contacting support or updating your account preferences.
• Platform Improvement and Analytics: Processing of anonymised and aggregated Usage Data is in our legitimate interests to improve platform performance, game offerings, and user experience.
• Legal Claims: Processing may be necessary to establish, exercise, or defend legal claims arising from your use of the Platform.

yok4d does not sell your Personal Data to third parties. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: We share Financial Data with payment service providers — including the Indonesian banks BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and Bank Permata, and e-wallet operators OVO, DANA, GoPay, ShopeePay, and LinkAja — to facilitate deposits and withdrawals. These processors operate under their own privacy policies and applicable Indonesian financial regulations.
• KYC and Identity Verification Providers: We share Identity Data and KYC Document Data with third-party identity verification services engaged by the Company to perform automated and manual document checks.
• Game Software Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session identifiers to deliver game content. These providers do not receive your full Identity Data.
• Fraud and AML Screening Services: We share relevant transaction and identity data with third-party compliance and financial intelligence services to meet our anti-money laundering obligations.
• Regulatory and Law Enforcement Authorities: We may disclose Personal Data to competent authorities when required by law, court order, or regulatory directive. We will inform you of such disclosure where legally permissible.
• Group Companies and Affiliates: Where yok4d operates within a group structure, data may be shared with affiliated entities for consolidated compliance reporting and internal audit purposes, subject to equivalent data protection standards.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, Personal Data held by the Company may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the lifetime of your active account, plus a minimum of 5 years following account closure, to meet AML record-keeping obligations.
• Financial and Transaction Data: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC Document Data: Retained for a minimum of 5 years following the completion of KYC verification, or from account closure, whichever is later.
• Usage and Technical Data: Server logs are retained for up to 12 months. Aggregated and anonymised analytics data may be retained indefinitely for statistical purposes.
• Communications Data: Support transcripts and correspondence are retained for up to 3 years from the date of the last communication in a thread, to support dispute resolution.
• Marketing Consent Records: Records of consent (and withdrawal of consent) are retained for as long as may be needed to demonstrate compliance.

When retention periods expire, Personal Data is securely deleted or irreversibly anonymised. In the event of an ongoing legal dispute, regulatory investigation, or court order, data directly relevant to the matter will be preserved until the matter is fully resolved.

yok4d employs a layered security framework to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. Our key technical and organisational measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit using industry-standard TLS protocols.
• Encryption at Rest: Sensitive data stored in our databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within our organisation is restricted on a strict need-to-know basis. All staff with access to member data are subject to confidentiality agreements and regular security training.
• Two-Factor Authentication (2FA): All internal staff accounts require 2FA. Members are strongly encouraged to enable 2FA on their player accounts.
• Penetration Testing: The Platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Intrusion Detection: Automated intrusion detection and anomaly monitoring systems operate continuously to identify and respond to suspicious activity in real time.
• Incident Response: In the event of a confirmed data breach that affects your Personal Data, we will notify affected members and, where required, applicable regulatory authorities within the timeframes prescribed by applicable law.

The yok4d Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. The following cookie categories are in use:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling Strictly Necessary cookies will impair the Platform's core functionality, including login and payment processing. Detailed browser-level cookie management instructions are available in your browser's help documentation.

As a data subject, you hold the following rights with respect to your Personal Data held by yok4d. To exercise any of these rights, please contact us using the details in Section 14. We will respond to all valid requests within 30 days of receipt, or notify you if additional time is needed.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. For KYC-related data corrections, updated documentation may be required.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your Personal Data. This right is subject to overriding legal obligations — for example, we are required to retain financial and KYC records for a minimum of 5 years and cannot delete them before those retention periods expire.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict processing of your data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: You have the right to receive Personal Data you have provided to us in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your data for direct marketing purposes. You may also object to processing based on legitimate interests, and we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The yok4d Platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes date-of-birth verification, and all accounts are subject to mandatory KYC identity checks that confirm age.

If we discover, or have reasonable grounds to believe, that Personal Data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the data to the extent legally permitted, and withhold any associated funds pending investigation. Any winnings generated by an underage user are forfeited.

If you are a parent or guardian and believe your child has registered an account on the Platform, please contact us immediately at support [at] yok4d.cam so that we can take prompt action.

yok4d operates as an internationally licensed platform. Some of our data processors — including cloud infrastructure providers, game studios, and KYC verification vendors — may be located outside Indonesia. Where Personal Data is transferred to countries outside Indonesia, we ensure that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses or equivalent data transfer agreements with all international Data Processors.
• Due diligence assessments of third-country recipients to confirm that adequate data protection standards are maintained.
• Binding corporate rules where data is transferred within affiliated group companies.

By using the Platform, you acknowledge that your data may be processed in jurisdictions outside Indonesia. We take all reasonable steps to ensure that such processing is carried out with the same level of protection described in this Privacy Policy.

yok4d reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. When material changes are made, we will notify you via email to your registered address or by displaying a prominent notice on the Platform at least 7 days before the revised Policy takes effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must stop using the Platform and contact support to request account closure.

The current version of this Privacy Policy is always accessible at https://yok4d.cam/privacy-policy. The "Last Reviewed" date at the top of this document reflects the date of the most recent revision.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the yok4d Data Protection team through the following channel:

We aim to resolve all privacy-related queries and rights requests promptly and fairly. If you are not satisfied with our response, you have the right to escalate your complaint to the applicable data protection or consumer protection authority in your jurisdiction.