Privacy Policy — rod4d

rod4d operates the online betting and gaming platform accessible at rod4d.app (the "Platform"). In providing our services — including sports betting, live casino, togel (Indonesia's traditional numbers lottery), slots, and in-play wagering — rod4d necessarily collects and processes personal information about individuals who interact with the Platform.

This Privacy Policy ("Policy") sets out the basis on which rod4d collects, stores, uses, discloses, and otherwise processes personal data relating to registered members, visitors, and prospective players (collectively, "you" or "your"). This Policy applies to all data processing activities conducted by rod4d in connection with the Platform, regardless of the device or method through which you access it.

This Policy should be read in conjunction with rod4d's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of a conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy will govern.

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other information held by rod4d.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Controller" means rod4d, as the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means a third party that processes Personal Data on rod4d's behalf and under rod4d's documented instructions.
• "Account" means a registered player account on the rod4d Platform.
• "KYC" means Know Your Customer — the identity verification procedures rod4d is required to conduct for anti-money laundering and fraud prevention purposes.
• "Cookies" means small text files placed on your device by the Platform that store session and preference information.
• "IDR" or "Rp" means Indonesian Rupiah, the currency in which all rod4d transactions are denominated.
• "WIB" means Western Indonesia Time (UTC+7), the default time zone used for all operational references in this Policy.

rod4d collects the following categories of Personal Data in connection with the Platform:

rod4d collects Personal Data through the following channels:

• Direct Submission: Data you voluntarily provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Technologies: Data collected automatically when you access or use the Platform, including through Cookies, web beacons, log files, and similar tracking technologies (see Section 8 for full details).
• Payment Processors: Transaction confirmation data received from third-party payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) when you execute a deposit or withdrawal.
• Identity Verification Providers: Verification results and risk scores from third-party KYC and AML screening services that cross-reference submitted identity documents against official databases and sanctions lists.
• Fraud Detection Partners: Device fingerprint scores, IP reputation scores, and behavioural risk signals from specialised fraud prevention technology partners.
• Publicly Available Sources: Publicly accessible information used to supplement or verify identity data, such as public records, social media profiles (only where relevant to a fraud or AML investigation), and official government registers.

rod4d processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including operating your Account, processing transactions, and resolving disputes.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering (AML) regulations, counter-terrorism financing (CTF) obligations, KYC mandates, and any orders from competent legal authorities.
• Legitimate Interests: Processing required for rod4d's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the Platform — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications. You may withdraw consent for marketing at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing communication. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

rod4d uses your Personal Data for the following purposes:

1. Account Management: To create, maintain, and administer your rod4d Account, including processing login authentication, updating account details, and managing Account closures.
2. Transaction Processing: To process all deposits and withdrawals in IDR via supported payment methods, to verify payment ownership, and to maintain accurate transaction records.
3. Identity Verification (KYC): To verify your identity, age (21+ requirement), and residential information in compliance with our AML and fraud prevention obligations.
4. Responsible Gaming: To monitor your betting behaviour and identify patterns that may indicate problem gambling, to enforce deposit limits and self-exclusion requests, and to send responsible gaming alerts where warranted.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, multi-account abuse, bonus abuse, and other prohibited conduct.
6. Customer Support: To respond to your enquiries, complaints, and support requests via live chat, email, or other communication channels.
7. Legal Compliance: To fulfil rod4d's obligations under applicable law, including responding to lawful requests from regulatory and law enforcement authorities.
8. Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the Platform's features, performance, and user experience.
9. Marketing & Personalisation: Where you have provided consent, to send promotional offers, seasonal bonuses (e.g., Idul Fitri, Ramadhan, Indonesian Independence Day promotions), and personalised game recommendations based on your play history.
10. Dispute Resolution: To investigate and resolve disputes regarding wager settlements, account balances, and bonus eligibility.

rod4d does not sell your Personal Data to third-party marketers. rod4d may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Payment Processors & Banking Partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja, for the purpose of processing your deposit and withdrawal instructions.
• KYC & AML Service Providers: Third-party identity verification and sanctions screening providers that process submitted documents and cross-reference them against global watchlists on rod4d's behalf.
• Game Content Providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited session and game-result data necessary to operate their games within the Platform.
• Fraud Prevention & Cybersecurity Partners: Specialised technology providers that assist rod4d in detecting and preventing fraudulent activity, account abuse, and platform security incidents.
• IT Infrastructure & Cloud Providers: Data hosting, content delivery, and infrastructure partners that store and transmit Platform data under strict contractual confidentiality and security requirements.
• Legal & Regulatory Authorities: Where rod4d is required by law, court order, or competent regulatory authority to disclose Personal Data, rod4d will comply with such obligations. rod4d will endeavour, where legally permissible, to notify affected players prior to such disclosure.
• Professional Advisers: Lawyers, auditors, and insurers acting under professional confidentiality obligations, where necessary for rod4d's legal, financial, and compliance operations.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of rod4d's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations. rod4d will notify affected players of any such transfer.

In all cases of third-party data sharing, rod4d requires recipients to process your Personal Data only for the specified purpose and to implement appropriate technical and organisational security measures.

rod4d uses Cookies and similar tracking technologies to operate and improve the Platform. The following categories of Cookies are in use:

rod4d does not use third-party advertising or behavioural tracking cookies for the purpose of serving ads on external websites. You can manage Cookie preferences through your browser settings; however, disabling strictly necessary Cookies will impair Platform functionality and may prevent you from logging in or completing transactions.

rod4d retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the lifetime of the Account and for a minimum of five (5) years after permanent Account closure, in line with standard AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial regulatory obligations.
• KYC Documents: Retained for a minimum of five (5) years after the end of the business relationship, or longer where required by a specific legal obligation or ongoing investigation.
• Customer Support Communications: Retained for three (3) years from the date of the final communication in a support thread, unless the matter relates to an unresolved legal dispute.
• Marketing Preferences: Retained until you withdraw consent or close your Account, whichever is earlier.
• Technical and Usage Data: Anonymised or aggregated after twenty-four (24) months; raw Technical Data retained for up to twelve (12) months for security and fraud analysis purposes.

At the end of the applicable retention period, rod4d will securely delete or irreversibly anonymise your Personal Data, unless retention is required to comply with a legal obligation, defend a legal claim, or fulfil another overriding legitimate purpose.

rod4d implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the rod4d Platform is encrypted using TLS 1.2 or higher with 256-bit encryption, preventing interception in transit.
• Encryption at Rest: Sensitive Personal Data stored on rod4d's servers — including identity documents, financial data, and account credentials — is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to systems processing Personal Data is restricted to authorised rod4d personnel on a strict need-to-know basis. All access is logged, audited, and subject to multi-factor authentication requirements.
• Penetration Testing: rod4d conducts regular third-party penetration tests and vulnerability assessments of its Platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Incident Response: rod4d maintains a documented data breach response plan. In the event of a security incident that poses a risk to your rights and freedoms, rod4d will notify affected players and relevant authorities within the timeframes required by applicable law.
• Staff Training: All rod4d staff with access to Personal Data receive mandatory data protection and security awareness training on a recurring basis.

Subject to applicable law and certain conditions, you have the following rights in respect of your Personal Data held by rod4d:

• Right of Access: You have the right to request a copy of the Personal Data rod4d holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data rod4d holds about you. You may update certain Account details directly via your Account dashboard; for other corrections, please contact support.
• Right to Erasure: You have the right to request deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to rod4d's legal retention obligations and may not apply to data rod4d is required to retain under AML or financial regulations.
• Right to Restrict Processing: You have the right to request that rod4d restricts processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data for direct marketing purposes at any time, without providing justification. You also have the right to object to processing based on legitimate interests, though rod4d may override your objection where it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

rod4d will not discriminate against you for exercising your data protection rights. rod4d may, however, be required to verify your identity before processing a rights request to ensure Personal Data is not disclosed to an unauthorised third party.

Age verification is conducted as part of the Account registration and KYC processes. Where rod4d discovers that Personal Data has been collected from a person under the age of 21, that data will be deleted immediately, the Account will be permanently closed, and any funds on deposit will be returned to the originating payment method following appropriate verification. If you believe a minor has registered an Account on rod4d, please contact [email protected] immediately.

rod4d operates as an internationally regulated online gaming platform and may store or process your Personal Data on servers located outside Indonesia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in your country of residence, rod4d will implement appropriate safeguards to ensure that your data remains protected. These safeguards may include:

• Standard contractual clauses (SCCs) approved by relevant data protection authorities, incorporated into rod4d's data processing agreements with international Processors.
• Binding corporate rules applicable to data transfers within rod4d's corporate group, where applicable.
• Transfer impact assessments conducted to evaluate the legal environment of the destination jurisdiction and the additional technical protections (e.g., encryption, pseudonymisation) applied to mitigate identified risks.

By using the rod4d Platform and submitting your Personal Data, you acknowledge that your data may be transferred, stored, and processed internationally in accordance with this Policy.

The rod4d Platform may contain references to third-party game studios, payment gateways, and content partners. If you navigate away from the Platform to a third-party website or service, that third party's own privacy policy governs the collection and use of your data. rod4d has no control over third-party privacy practices and accepts no responsibility or liability for third-party data processing activities.

rod4d recommends that you review the privacy policy of any third-party service you access in connection with the Platform, particularly those of your chosen payment provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), before submitting personal or financial information.

rod4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, processing activities, or Platform features. The "Last Updated" date at the top of this page will be revised to reflect any changes.

Where amendments are material — such as changes to the categories of data collected, new third-party sharing arrangements, or changes to your rights — rod4d will notify registered players via a Platform announcement or email to the registered address at least seven (7) days prior to the changes taking effect, unless an immediate change is required by law or urgent security necessity.

Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree to the amended Policy, you should cease using the Platform and may request Account closure and withdrawal of any available balance.

If you have any questions, concerns, or complaints regarding this Privacy Policy or rod4d's data processing activities, please contact rod4d's Data Protection team through the following channel:

rod4d takes all privacy complaints seriously and will investigate and respond to each complaint in good faith. If you are not satisfied with rod4d's response to your privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.

For responsible gaming concerns, including requests for self-exclusion, deposit limits, or session time-outs, please refer to our dedicated Responsible Gaming page or contact support directly at [email protected].