Privacy Policy

The following definitions apply throughout this Privacy Policy:

• "key4d", "we", "us", or "our" refers to the key4d online gaming platform and its operating entity, accessible at https://key4d.ws.
• "Member", "you", or "your" refers to any individual who has registered an Account on the key4d platform or who otherwise interacts with our Services.
• "Personal Data" means any information that identifies or could reasonably be used to identify you as a natural person, either on its own or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" refers to key4d in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Third-Party Processor" means any external organisation that processes Personal Data on key4d's behalf, subject to a binding data processing agreement.
• "Services" means the full suite of products and features available on the key4d platform, including live casino, sportsbook, slots, togel (Indonesia's traditional numbers lottery), Live Dragon Tiger, and Bingo Online.
• "KYC" means Know Your Customer — the identity and age verification process applied to Members in line with internationally recognised anti-money laundering standards.

key4d collects the minimum Personal Data necessary to deliver its Services securely and in compliance with applicable regulatory obligations. The categories of data we collect are set out below:

key4d collects Personal Data through the following channels:

• Direct Submission: Information you provide when registering an Account, completing KYC, making a deposit or withdrawal request, contacting our support team via live chat or email, or responding to a promotional offer.
• Automated Technologies: Technical and Usage Data collected automatically when you access the key4d platform, including through cookies, web beacons, pixel tags, and server log files. See Section 7 (Cookies & Tracking) for full details.
• Third-Party Sources: Identity verification data returned by KYC and fraud-screening service providers when we verify your identity documents. Payment confirmation data from Indonesian banking partners and e-wallet operators (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) to confirm the status of financial transactions.
• Game Providers: Gameplay records and bet history transmitted by third-party game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to key4d's platform for wallet settlement, dispute resolution, and responsible gaming monitoring.

key4d uses your Personal Data strictly for the purposes described below. We do not sell your Personal Data to third parties for their own marketing purposes.

• Account Management: Creating and maintaining your Member Account, authenticating your identity at login, and managing Account preferences and security settings.
• Service Delivery: Processing deposits and withdrawals through your chosen Indonesian bank or e-wallet, settling game results, and crediting winnings to your wallet.
• KYC & Fraud Prevention: Verifying your identity and age (21+), screening transactions for signs of fraud or money laundering, and fulfilling obligations under applicable anti-money laundering frameworks.
• Customer Support: Responding to queries submitted via live chat, email ([email protected]), or WhatsApp (+62 811 000 4444), and resolving disputes or complaints in a timely manner.
• Responsible Gaming: Monitoring gameplay patterns to identify Members who may be exhibiting signs of problem gambling, enforcing deposit limits and self-exclusion orders, and facilitating voluntary cooling-off requests.
• Personalisation: Tailoring game recommendations, promotional offers, and platform content to your usage history and stated preferences — for example, surfacing relevant slot games or sportsbook markets based on your prior activity.
• Marketing Communications: Sending promotional emails, SMS notifications, and in-platform messages about bonuses, seasonal promotions (Ramadhan, Idul Fitri, Indonesian Independence Day, Nyepi, Chinese New Year), and new product launches — subject to your opt-in preferences.
• Platform Improvement: Analysing aggregated, anonymised Usage Data to identify technical issues, optimise page performance, improve the mobile experience for players across Jakarta, Surabaya, Bandung, Medan, Bali, and other cities, and develop new features.
• Legal Compliance: Retaining records as required by applicable law, responding to lawful requests from competent authorities, and enforcing our Terms & Conditions.

key4d processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — including Account registration, deposit/withdrawal processing, game settlement, and customer support. Without this processing, key4d cannot provide its Services.
• Legal Obligation: Processing required to comply with applicable law, including KYC identity verification, age verification, anti-money laundering checks, and record-keeping obligations.
• Legitimate Interests: Processing carried out for key4d's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, responsible gaming monitoring, and product analytics. key4d conducts a balancing assessment before relying on this basis.
• Consent: Processing for direct marketing communications, certain non-essential cookies, and any other processing where we have explicitly requested and received your agreement. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

key4d does not sell, rent, or trade your Personal Data. We share your data only in the limited circumstances described below, and always subject to appropriate contractual safeguards:

• KYC & Identity Verification Providers: Third-party providers that assist key4d in verifying your identity documents, checking age eligibility (21+), and screening against sanctions and fraud watchlists. These providers act as Data Processors under binding agreements and are prohibited from using your data for any purpose other than the verification service.
• Payment Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data necessary to process your deposits and withdrawals. key4d does not share your gameplay history or balance information with payment partners.
• Game Studio Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive a unique anonymised player identifier and bet/result data to facilitate game rounds and resolve disputes. These studios do not receive your full name, banking details, or contact information via key4d's integration.
• Customer Support Tools: Live chat and ticketing platform providers that process support transcripts on key4d's behalf. These providers are contractually bound to process data only as instructed by key4d.
• Analytics Providers: Aggregated and pseudonymised Usage Data may be shared with analytics partners for platform performance measurement. Raw Personal Data is not shared with analytics providers.
• Legal & Regulatory Authorities: key4d will disclose Personal Data to competent legal or regulatory authorities where required to do so by applicable law, valid court order, or binding regulatory requirement. Where permitted by law, key4d will notify affected Members of such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of key4d's assets, your Personal Data may be transferred to the successor entity, subject to the same level of protection as described in this Privacy Policy. key4d will notify Members of any such transfer via registered email.

key4d uses cookies and similar tracking technologies on the key4d.ws platform to maintain session continuity, detect fraud, measure performance, and (with your consent) deliver personalised content. The cookie categories we use are described below:

Most modern browsers allow you to refuse or delete cookies via your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the key4d platform, including the ability to log in and maintain an authenticated session. Instructions for managing cookies in common browsers are available from the browser developer's support pages.

key4d does not use cross-site tracking cookies that follow your browsing activity across third-party websites. All tracking on key4d.ws is limited to activity within the key4d platform itself.

key4d retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

• Active Account Data: Retained for the duration of your active Membership plus a minimum of five (5) years following Account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC Documents: Identity verification documents (KTP, passport, driving licence) are retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Financial Transaction Records: Deposit and withdrawal records, including payment method identifiers, are retained for a minimum of five (5) years following the date of the transaction.
• Support Communications: Live chat transcripts and support emails are retained for up to two (2) years from the date of the interaction, unless they relate to an open dispute, in which case they are retained until the dispute is resolved plus one (1) year.
• Marketing Preferences: Records of your opt-in or opt-out status are retained for the lifetime of your Account and for up to three (3) years following Account closure, to demonstrate compliance with consent obligations.
• Technical & Usage Data: Server log files and session data are retained for up to twelve (12) months, after which they are aggregated and anonymised or deleted.

When the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymised in accordance with key4d's internal data disposal procedures.

key4d applies a layered approach to data security, combining technical, organisational, and procedural controls to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• TLS/SSL Encryption: All data transmitted between your device and the key4d platform is encrypted in transit using industry-standard TLS 1.2 or higher. Our SSL certificate is maintained and renewed automatically.
• Encryption at Rest: Sensitive Personal Data stored in key4d's databases — including identity document references, financial account identifiers, and hashed password credentials — is encrypted at rest using AES-256 encryption.
• Password Hashing: Member passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm with a unique per-account salt, making stored password data irrecoverable even in the event of a database breach.
• Access Controls: Access to Personal Data within key4d's systems is restricted to employees and contractors who require it to perform their job functions. Access is governed by role-based permissions, multi-factor authentication (MFA), and formal access approval workflows.
• Fraud Detection Systems: Automated systems monitor Account activity in real time for anomalous patterns that may indicate unauthorised access, account takeover, or fraudulent transactions.
• Third-Party Security Audits: key4d's platform undergoes periodic security assessments conducted by independent third-party specialists to identify and remediate vulnerabilities.
• Incident Response: key4d maintains a documented data breach response plan. In the event of a breach that is likely to result in a high risk to your rights and freedoms, key4d will notify affected Members without undue delay and take immediate steps to contain and remediate the breach.

As a Member of key4d, you have the following rights in relation to your Personal Data. key4d will respond to all verified rights requests within thirty (30) days of receipt, or notify you if an extension is required:

• Right of Access: You may request a copy of the Personal Data that key4d holds about you, along with information about how it is used and who it has been shared with.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may also update certain Account details directly via your Account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that key4d may be required to retain certain data for legal compliance purposes (see Section 8), in which case we will inform you of the scope of any deletion that can be performed.
• Right to Restriction of Processing: You may request that key4d restricts the processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contract with you, and is carried out by automated means, you may request that key4d provides your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing of your Personal Data based on key4d's legitimate interests, including profiling for marketing purposes. You may also opt out of direct marketing communications at any time by following the unsubscribe instructions in any marketing email or by contacting [email protected].
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the rights above, please contact the key4d Data Privacy team at [email protected] with the subject line "Data Privacy Request". key4d may need to verify your identity before processing your request to prevent unauthorised access to another person's data.

key4d operates an internationally distributed infrastructure. Some of your Personal Data may be processed by key4d's servers, cloud service providers, or third-party processors located outside Indonesia. When such transfers occur, key4d ensures that adequate safeguards are in place to protect your data, including:

• Standard contractual clauses (SCCs) or equivalent data transfer agreements with overseas processors that impose data protection obligations equivalent to those described in this Privacy Policy.
• Transfer only to jurisdictions that key4d has assessed as providing an adequate level of data protection for the categories of Personal Data involved.
• Ongoing monitoring of overseas processors to verify continued compliance with contractual data protection obligations.

By using the key4d platform, you acknowledge that your Personal Data may be transferred to, stored, and processed in countries outside Indonesia as described in this section.

The key4d platform is strictly for adults aged 21 and over. key4d does not knowingly collect, process, or retain Personal Data belonging to individuals under the age of 21. Age verification is performed as part of the KYC process for all Members.

If key4d discovers that Personal Data belonging to an individual under the age of 21 has been collected — whether through a falsified registration or otherwise — the relevant Account will be permanently closed, all funds will be returned to the verified payment source, and all associated Personal Data will be securely deleted without undue delay.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account on the key4d platform, please contact us immediately at [email protected] so that we can take appropriate action.

The key4d platform may reference or display the names of third-party services such as Indonesian banks (BCA, BRI, BNI, Mandiri), e-wallets (OVO, DANA, GoPay), and game studios (Pragmatic Play, Evolution Gaming) in an informational context. key4d does not embed links to third-party websites within its platform content and is not responsible for the privacy practices of any external organisation.

If you navigate to a third-party website independently — for example, your online banking portal to complete a deposit transfer — the privacy policy of that third party governs the collection and use of your data on their platform. key4d has no visibility into or control over data processing conducted by third parties on their own platforms.

key4d reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or platform features. When material changes are made, key4d will notify registered Members via the email address on file at least seven (7) days before the revised Policy takes effect.

The "Last Updated" date displayed at the top of this page indicates when the most recent revision was published. Your continued use of the key4d platform after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should cease using the platform and may request Account closure before the effective date.

If you have any questions, concerns, or formal requests relating to this Privacy Policy or key4d's handling of your Personal Data, please contact us through any of the following channels:

• Email: [email protected] — for all data privacy requests, please use the subject line "Data Privacy Request". Monitored 24 hours a day, 7 days a week (WIB).
• Live Chat: Available within the key4d platform. Average response time under 2 minutes. Agents are available in English and Indonesian.
• WhatsApp: +62 811 000 4444 — available during WIB business hours for general privacy queries.

key4d aims to resolve all privacy-related enquiries promptly and constructively. If you are unsatisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.