Privacy Policy
How tas4d Protects Your Data

tas4d ("we", "us", "our") is the data controller responsible for the personal information collected through the tas4d platform, accessible at tas4d.pro, including all associated subdomains, mobile interfaces, and integrated services. As data controller, we determine the purposes for which and the means by which your personal data is processed.

This Privacy Policy applies to all individuals who access or use the tas4d platform, whether as registered players, prospective players browsing the site, or individuals who contact our support team. It applies regardless of the device or method used to access the platform, including desktop browsers, mobile browsers, and any native application interfaces.

tas4d collects personal data across several categories depending on your level of interaction with the platform. The table below summarizes the types of data we collect and the context in which each category is gathered.

We do not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (beyond identity document verification), health data, or data concerning sexual orientation, unless you voluntarily provide such information in a support communication and it is directly relevant to resolving your inquiry.

tas4d collects personal data through three primary channels:

1. Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, respond to a promotion, or update your account settings. This is the primary source of Identity, Contact, Financial, and Communications Data.
2. Automatically through technology — when you browse or interact with the tas4d platform, we automatically collect Technical Data and Usage Data via cookies, web beacons, server logs, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details on how these technologies work and how you can control them.
3. From third parties — we may receive data about you from identity verification service providers who assist with KYC processing, from payment processors including e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) and banks (BCA, BRI, BNI, Mandiri) in the course of transaction processing, and from fraud detection partners who help us identify suspicious account activity.

We use the personal data we collect for the following purposes. Each purpose is matched to the category of data used and the legal basis that authorizes the processing (see Section 5 for legal bases).

• Account creation and management: We use Identity and Contact Data to create your player account, authenticate your identity on login, and manage your account settings and preferences throughout your relationship with tas4d.
• Processing transactions: We use Financial Data to process your deposits and withdrawals via your chosen payment method — including local Indonesian banks and e-wallets — and to maintain an accurate record of all transactions in your account history.
• KYC and age verification: We use Identity Documents and Identity Data to verify that you are at least 21 years of age and to confirm your identity before approving your first withdrawal, in compliance with our responsible gaming and anti-fraud obligations.
• Providing and improving the platform: We use Technical Data and Usage Data to diagnose technical issues, analyze platform performance, understand how players navigate and engage with our games and sports markets, and make data-informed product improvements.
• Fraud detection and security: We process Technical Data, Usage Data, and Financial Data to identify patterns consistent with fraudulent activity, money laundering, bonus abuse, multi-account violations, and other prohibited conduct described in our Terms & Conditions.
• Customer support: We use Communications Data and Identity Data to respond to your support requests, resolve account disputes, and maintain records of our interactions with you.
• Marketing and promotions: Where you have opted in, we use Contact Data and Usage Data to send you personalized promotional offers, including bonuses tied to events such as BRI Liga 1 fixtures, Idul Fitri, Ramadhan, and Indonesian Independence Day (17 August). You may opt out at any time.
• Legal and regulatory compliance: We process Identity Data, Financial Data, and transaction records to meet our obligations under applicable anti-money-laundering requirements and to respond to lawful requests from courts or regulatory authorities.

Every instance of personal data processing at tas4d rests on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and tas4d — i.e., to operate your account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable law, including age verification, KYC, and anti-money-laundering obligations to which tas4d is subject under its operating license.
• Legitimate interests: Processing that serves tas4d's legitimate business interests, provided those interests do not override your fundamental rights and freedoms. This covers fraud prevention, platform security, product analytics, and improving the player experience.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

tas4d does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for each purpose:

• Payment processors and banking partners: To execute deposits and withdrawals, we share the minimum necessary financial and identity information with your chosen payment provider — including BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers are bound by their own privacy policies and applicable banking and financial services regulations.
• Identity verification providers: We work with accredited KYC service providers to verify the authenticity of identity documents submitted by players. These providers process Identity Documents solely for verification purposes and are contractually prohibited from using your data for any other purpose.
• Game software providers: Certain game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive pseudonymized player identifiers and gameplay data to facilitate live game sessions and resolve game disputes. Full identity data is not shared with game providers.
• Fraud prevention and analytics services: We share Technical Data and Usage Data (in pseudonymized or aggregated form where feasible) with fraud detection platforms and analytics providers who help us maintain platform integrity.
• Legal and regulatory authorities: We will disclose personal data to courts, law enforcement agencies, or regulatory bodies when required to do so by a valid court order, statutory obligation, or regulatory directive. We will notify you of such disclosure where permitted by law.
• Business successors: In the event of a merger, acquisition, or sale of all or part of tas4d's business assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this policy. We will notify you of any such change in control.

tas4d uses cookies and similar tracking technologies (including web beacons and server-side session tokens) to operate the platform, maintain your login session, and understand how players interact with our games and content. The cookies we use fall into the following categories:

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, restrict third-party cookies, or alert you each time a cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features.

tas4d does not use third-party advertising networks or serve retargeting ads on external websites. Marketing cookies on the tas4d platform are first-party and are used solely within the platform environment to measure the performance of internal promotions.

tas4d retains personal data only for as long as necessary to fulfill the purpose for which it was collected or to comply with applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active account data (Identity, Contact, Financial, Usage): Retained for the duration of your account relationship with tas4d, plus an additional period of five years following permanent account closure, to support any post-closure dispute resolution, regulatory inquiry, or legal proceeding.
• KYC documents (Identity Documents, verification records): Retained for five years from the date of verification or from the date of account closure, whichever is later, in compliance with applicable anti-money-laundering record-keeping obligations.
• Transaction records (Financial Data, deposit and withdrawal logs): Retained for five years following each transaction, consistent with financial record-keeping requirements.
• Support communications (Communications Data): Retained for three years from the date of the last communication in a support thread, unless the communication relates to a formal complaint or legal dispute, in which case it is retained for five years.
• Analytics and Technical Data: Aggregated analytics data is retained indefinitely in anonymized form. Raw session logs containing IP addresses are retained for a maximum of 12 months before being anonymized or deleted.
• Marketing preferences and consent records: Retained for the duration of your account plus three years, to provide evidence of consent and to honor opt-out requests correctly.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized data (from which you can no longer be identified) may be retained and used for statistical and analytical purposes indefinitely.

As a player on the tas4d platform, you have the following rights in relation to your personal data. These rights apply regardless of whether you are a current or former account holder. To exercise any right, submit a written request to [email protected] with the subject line "Privacy Request" and we will respond within 30 calendar days.

tas4d implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Key measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your browser and our servers is encrypted using TLS 1.3, preventing interception by third parties on the network path.
• Encryption at rest: Sensitive data fields — including identity document scans, payment method details, and hashed passwords — are encrypted at rest using AES-256 encryption on our database servers.
• Password security: Player passwords are stored as salted cryptographic hashes. tas4d staff never have access to your plaintext password and will never ask you to provide it via any communication channel.
• Access control: Internal access to personal data is governed by role-based access control (RBAC). Only staff members with a verified operational need are granted access to personally identifiable records, and all access events are logged and subject to periodic audit.
• Penetration testing: tas4d commissions independent security assessments and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Incident response: We maintain a documented data breach response plan. In the event of a security incident that affects your personal data, we will notify impacted players promptly and take immediate remedial action to contain and investigate the breach.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are also responsible for safeguarding your own account credentials — do not share your password with anyone, and contact support immediately if you suspect unauthorized access to your account.

tas4d is strictly an adults-only platform. Access is permitted only to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under 21.

To enforce this restriction, tas4d requires players to confirm their date of birth at registration and to submit a government-issued photo ID (such as an Indonesian KTP or passport) before their first withdrawal is processed. Automated age-estimation checks are also applied at the registration stage as a first-pass control.

If we discover that an account has been created by or on behalf of a person under 21, we will immediately suspend the account, delete or return any associated funds in accordance with applicable law, and permanently delete any personal data collected from the underage individual, except where retention is required for legal or regulatory purposes (such as maintaining a record of the age violation for audit purposes).

The tas4d platform integrates several third-party services in order to deliver its full range of features. These include game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), payment processing services (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, BSI), and identity verification providers. Each of these third parties operates under its own privacy policy and data processing practices.

tas4d is not responsible for the privacy practices of third-party providers. Where we share data with these parties, we do so under data processing agreements that require them to implement appropriate security measures and to process your data only for the purpose for which it was shared. However, we strongly encourage you to review the privacy policies of any third-party payment or identity service you use in connection with your tas4d account.

The tas4d platform does not contain links to external third-party websites outside of the platform's own pages. If you navigate away from tas4d.pro via a link that appears in a game interface provided by a third-party studio, your activity on that external site is governed by that site's own privacy policy and is outside our control.

tas4d reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data processing practices, applicable law, platform features, or the services we offer to Indonesian players. The date of the most recent revision is displayed at the top of this document under "Last Updated."

When we make material changes to this policy — such as collecting a new category of data, sharing data with a new category of third party, or changing our retention periods — we will notify registered players by email at the address on file at least 7 days before the changes take effect.

For minor, non-material changes (such as clarifications in language that do not alter your rights or our data practices), we may update the policy without advance notice. Your continued use of the tas4d platform following any update to this policy constitutes your acknowledgment of the revised version. If you do not agree with the updated policy, you should stop using the platform and request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tas4d handles your personal data, please contact our privacy team using the details below. We are committed to resolving all privacy-related inquiries promptly and transparently.

• Email: [email protected] — use subject line "Privacy Request" for data rights submissions and "Privacy Concern" for general inquiries
• Response time: General privacy inquiries — within 24 hours. Formal data rights requests — within 30 calendar days.
• Live Chat: Available 24/7 through the chat widget in your logged-in account interface. Suitable for general privacy questions; formal data requests should be submitted by email for audit-trail purposes.
• Support hours: 24 hours a day, 7 days a week, including all Indonesian public holidays — WIB (UTC+7). Native Indonesian-speaking agents are available on every shift for players who prefer to discuss privacy matters in Bahasa Indonesia.