posd4 ("posd4", "we", "us", "our") operates the online gaming platform at posd4.org and all associated subdomains, mobile interfaces, and API endpoints. We are committed to protecting the privacy and security of every individual who visits, registers with, or interacts with the posd4 platform ("you", "your", "Member").
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have in relation to your personal data. It applies to all processing activities carried out by posd4 in connection with the operation of the platform, including account registration, identity verification (KYC), payment processing, customer support, responsible gaming management, and marketing communications.
This policy is written primarily for Members based in Indonesia, our principal target market. All amounts referenced are in Indonesian Rupiah (IDR / Rp) and all times default to Western Indonesia Time (WIB, UTC+7) unless otherwise stated.
By creating an account, using the platform, or submitting personal data to posd4 in any form, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you must cease using the platform immediately and may request account closure by contacting us at [email protected].
Important: This Privacy Policy forms part of the binding agreement between you and posd4, together with our Terms & Conditions. Capitalised terms not defined in this policy carry the meanings assigned to them in the Terms & Conditions.
For the purposes of this Privacy Policy, the following definitions apply:
posd4 collects only the personal data that is necessary for the purposes described in this policy. The categories of data we collect are set out in the table below:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, KTP / passport / SIM number and scan | At registration and KYC |
| Contact Data | Email address, mobile number, residential address (city, province, postal code, Indonesia) | At registration and account update |
| Financial Data | Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, account balance | At payment channel registration and each transaction |
| Transaction Data | Bet history, game session records, stake amounts, winnings, bonus credits and usage, wagering progress | Automatically during platform use |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone setting, geolocation (country/city level) | Automatically on each platform session |
| Usage Data | Pages visited, features accessed, session duration, click paths, game categories browsed, search queries within the platform | Automatically via cookies and server logs |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, feedback submissions | When you contact our support team |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, cooling-off period activations, session time controls, voluntary questionnaire responses | When you use responsible gaming tools or respond to welfare outreach |
posd4 does not collect or store full credit card or debit card numbers. All card-based payment flows — where available — are handled entirely by our PCI-DSS-compliant payment processor partners. posd4 receives only a tokenised reference to confirm transaction status.
We collect personal data through the following channels:
The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal request, use responsible gaming tools, contact our support team, respond to surveys or promotions, or update your account profile. You are responsible for the accuracy and completeness of the information you provide; inaccurate data may result in delayed transactions or account restrictions.
When you access the platform, our servers and analytics systems automatically record technical and usage data including your IP address, device fingerprint, browser headers, session timestamps, page navigation paths, and in-game events. This data is captured to ensure platform security, detect fraud, and improve the user experience.
During KYC, we may receive verification results and risk signals from third-party identity verification providers. These providers cross-reference the documents you submit against authoritative data sources to confirm identity authenticity and age compliance. posd4 receives a pass/fail determination and a risk score — we do not receive raw third-party database records.
Our payment channel partners — including those facilitating BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI bank transfers and OVO, DANA, GoPay, ShopeePay, LinkAja e-wallet transactions — transmit transaction confirmation data to posd4 to reconcile deposits and withdrawals. This includes transaction reference numbers, timestamps, and payment status codes.
posd4 uses cookies and similar tracking technologies as described in Section 8. You may manage cookie preferences through your browser settings, noting that disabling certain categories of cookies may affect platform functionality.
posd4 processes your personal data for the following clearly defined purposes:
posd4 processes your personal data on the following legal bases, applied depending on the specific processing activity:
posd4 does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. We share personal data only in the following limited circumstances:
We engage trusted third-party service providers who process personal data on posd4's behalf and strictly under posd4's instructions. These include:
All Data Processors are bound by contractual data processing agreements that restrict their use of your data to the specific purposes for which they were engaged and require them to implement appropriate security measures.
posd4 may disclose personal data to regulatory authorities, law enforcement bodies, or courts where required to do so by applicable law, by order of a competent authority, or in connection with our obligations under AML/CTF regulatory frameworks. Such disclosures are made only to the extent strictly necessary to comply with the applicable legal requirement.
In the event of a merger, acquisition, restructuring, or sale of all or a material part of posd4's business, personal data held by posd4 may be transferred to the acquiring entity as part of that transaction. In such circumstances, the receiving entity will be required to honour the terms of this Privacy Policy or provide Members with advance notice of any material changes to data processing practices.
posd4 may share personal data with additional third parties in specific circumstances where you have given your explicit, informed consent prior to the disclosure. You will always be told who the recipient is, what data will be shared, and for what purpose before consent is sought.
posd4 does not transfer personal data to third parties located outside of jurisdictions that provide an adequate level of data protection without implementing appropriate contractual safeguards. Where international data transfers occur, they are governed by standard contractual clauses or equivalent transfer mechanisms.
posd4 uses cookies and similar technologies (including pixel tags, web beacons, and local storage objects) to provide, secure, and improve the platform. The following categories of cookies are used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing, fraud-detection signals. Required for the platform to function. | No — disabling these will break core platform functionality. |
| Functional | Remembering your language preference, display settings, and responsible gaming tool configurations across sessions. | Yes — disabling resets preferences on each visit. |
| Analytics | Measuring page performance, tracking navigation paths, identifying high-error pages, and informing platform improvements. Data is pseudonymised. | Yes — platform will still function fully. |
| Marketing | Delivering relevant promotional content to logged-in Members based on game category preferences and session history. Never shared with external advertising networks. | Yes — you will still see promotions but they will be generic rather than personalised. |
You can manage cookie preferences through your browser settings at any time. Most modern browsers allow you to view, block, or delete cookies by category. Please note that blocking strictly necessary cookies will prevent you from logging in or using core platform features. Detailed instructions for managing cookies in common browsers are available through your browser's help documentation.
posd4 implements a comprehensive, multi-layered security framework designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, and destruction. Key security measures include:
Your Responsibility: While posd4 implements strong technical safeguards, the security of your account also depends on your own practices. Keep your password confidential, enable 2FA, and contact [email protected] immediately if you suspect your account has been accessed without authorisation.
posd4 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal retention obligations. Our standard retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity and KYC Records | 5 years after account closure | AML/KYC regulatory obligation |
| Transaction and Financial Records | 5 years after account closure | AML/KYC regulatory obligation |
| Account Profile Data | Duration of account + 2 years post-closure | Contractual / legitimate interests |
| Customer Support Communications | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Responsible Gaming Records | 5 years after account closure | Regulatory / vital interests |
| Technical and Usage Logs | 13 months from collection | Legitimate interests (security, analytics) |
| Marketing Consent Records | Until consent withdrawn + 1 year | Consent / legal obligation |
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identified or identifiable individual. Where anonymisation is not technically feasible within the applicable timeframe, data is placed under restricted access pending secure deletion.
As a data subject, you hold the following rights in relation to your personal data held by posd4. These rights are subject to applicable legal exceptions and verification of your identity before any action is taken:
To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your account username and a description of the right you wish to exercise. We will acknowledge your request within 5 business days and fulfil it within 30 days, or notify you of any extension required for complex requests.
Identity verification is required before any privacy rights request can be acted upon. This is to ensure that posd4 does not disclose, amend, or delete personal data in response to a fraudulent request made by a third party impersonating a Member.
The posd4 platform is strictly restricted to individuals aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process, and all registrations are assessed for age compliance.
If posd4 becomes aware or has reasonable grounds to believe that personal data belonging to an individual under 21 has been collected — whether through false registration information, unauthorised access to a parent's or guardian's account, or any other means — posd4 will: (a) immediately suspend the affected account; (b) delete all personal data associated with the underage individual as promptly as technically feasible; and (c) void all bets and forfeit all balances in accordance with our Terms & Conditions.
If you are a parent or guardian and believe that your child under the age of 21 has accessed the posd4 platform, please contact us immediately at [email protected] with the relevant account details. We will investigate and take appropriate action within 24 hours of receiving your report.
The posd4 platform may contain references to third-party game studios, payment providers, and sports data sources. While these partnerships are integral to platform functionality, third-party websites, applications, or services operate under their own independent privacy policies over which posd4 has no control and for which posd4 accepts no responsibility.
We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the platform — particularly your bank or e-wallet provider, whose data handling practices govern how your payment information is managed on their side of any transaction.
posd4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or our data processing practices. The "Effective Date" at the top of this page reflects the date on which the current version came into force.
When we make material changes to this policy — meaning changes that meaningfully affect your rights, the categories of data we collect, or the purposes for which we use your data — we will notify you by email to the address registered to your account and by a prominent in-platform notification at your next login. The notification will summarise the key changes and provide a link to the updated policy. Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised policy.
If you do not agree with any amendment, you must stop using the platform and may request account closure by contacting our support team before the effective date of the change. Previous versions of this Privacy Policy are archived and available upon request by emailing [email protected] with the subject line "Privacy Policy Archive Request".
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way posd4 processes your personal data, please contact our Data Protection team using the details below. All communications regarding privacy matters are handled with strict confidentiality.
When contacting us regarding a privacy matter, please include your account username, a clear description of your enquiry or request, and — where relevant — the specific section of this policy your question relates to. This helps us route your request efficiently and respond accurately without unnecessary back-and-forth.
Responsible Gaming Concerns: If your privacy enquiry relates to responsible gaming data — such as a self-exclusion record, a deposit limit configuration, or a welfare assessment — please also visit our Responsible Gaming page for dedicated guidance and immediate access to self-help tools.
Behind every clause in this policy is a concrete technical or operational control. Here is what that looks like on the ground.
Every byte of data exchanged between your device and the posd4 platform travels over TLS 1.3 with 256-bit encryption. Sensitive records stored in our databases are encrypted at rest with AES-256, ensuring your identity and financial data remain unreadable to any unauthorised party.
Before processing any withdrawal, posd4 confirms your identity, age (21+), and payment method ownership through a multi-step KYC process. This protects both you and the platform — ensuring funds always go to their rightful owner and preventing underage access.
posd4 has a firm, unconditional policy against selling, renting, or trading Member personal data to any third party for their own commercial purposes. Data shared with service providers is governed by strict contractual agreements that prohibit any secondary use.
Your privacy rights are not just clauses on a page — they are actionable. You can access, correct, export, or request deletion of your personal data by contacting support. Marketing opt-outs take effect immediately, and consent withdrawals are processed without delay.
Responsible gaming data — including self-exclusion records, deposit limits, and welfare assessments — is treated as Sensitive Personal Data and subject to the most stringent access controls within our systems. This data is never used for marketing purposes.
posd4's data security practices and privacy controls are reviewed through independent security assessments and penetration tests on a regular schedule. Findings are acted upon promptly, ensuring our controls remain effective against evolving threats.
Our Indonesian-speaking support team is available 24/7 to answer any data privacy questions. Explore the platform with confidence — your personal data is protected every step of the way.