4play Platform Privacy Notice

This page describes what we collect when you use 4play and how we keep that data protected. We at 4play collect personal information during account registration, Know Your Customer (KYC) verification, and gameplay. We use this information to verify your eligibility, prevent fraud, process deposits and withdrawals through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and direct bank transfer, and comply with anti-money-laundering regulations.

Our data handling practices follow applicable law in jurisdictions where we operate. We do not sell personal data to advertisers or data brokers. We share information with payment partners only to the extent necessary to execute your transactions. This policy explains your rights regarding access, correction, and deletion of your data, and how to contact us with privacy questions.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's law.

What We Collect on 4play

Account Registration Data

When you register an account on 4play, we collect your email address, password, and full legal name. We also collect your date of birth to verify age eligibility under applicable law. We do not require a phone number at registration, but if you provide one, we use it for account recovery and important notifications regarding deposits, withdrawals, and account security.

Your email address is your primary account identifier and recovery mechanism. If you lose access to your email, we use phone number or identity document details to verify your identity before issuing a password reset. All registration data is encrypted and stored in our secure database.

Know Your Customer (KYC) Data

Before your first withdrawal on 4play, we request Know Your Customer (KYC) verification. This process requires you to provide a government-issued identity document (passport, national ID card, or driver's license with photo) and proof of residential address (utility bill, bank statement, or government letter dated within the past three months). We scan and store these documents in encrypted vaults with role-based access limited to our compliance team.

We use KYC data to verify your legal identity, confirm your age of majority under applicable law, and comply with anti-money-laundering (AML) and know-your-customer regulations in supported jurisdictions. KYC verification typically completes within one business day. Once verified, all future withdrawals process without additional document requests unless you change your registered name or address.

Payment and Transaction Data

We collect information about every deposit and withdrawal you make on 4play. This includes the payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account number), transaction amount, timestamp, and transaction status (completed, pending, or failed). We also collect your bank account or e-wallet account identifier to process refunds and prevent fraud.

We share payment data with our payment processors (mobile banking, local payment, online payment, banks, etc.) only to execute your transaction. These processors receive your account identifier and transaction amount; they do not receive your full identity details or gameplay history. We retain transaction records for a minimum period required by applicable law, typically five to seven years, for regulatory reporting and dispute resolution.

Gameplay and Account Activity Data

We log all your activity on 4play, including every live-dealer table session, slot game spin, sportsbook entry (Liga 1, Piala AFF, Champions League, esports markets), and Paito Mingguan draw participation. We record your stake, outcome, winnings or losses, timestamp, and game result. This data is stored in your account statement and accessible to you at any time.

We use gameplay data for auditing, dispute resolution, and regulatory reporting. If you dispute a game outcome, we use this log to verify the result and settle your complaint. We also use aggregated gameplay data (without personal identifiers) to monitor game fairness, detect fraud patterns, and maintain our certified random-number generator (RNG) certification.

Technical and Device Data

We collect technical information about your access to 4play, including your IP address, browser type, operating system (Android, iOS, Windows, macOS), device type, and referring website. We also log your session duration, pages visited, and actions taken within the app or website. This data helps us diagnose technical issues, prevent unauthorized access, and optimize 4play's performance on mobile and desktop.

We use IP addresses to detect multiple account creation from the same device (fraud prevention), block access from jurisdictions where we do not operate, and comply with geographical restrictions. IP addresses are logged for 90 days and then deleted unless there is an active dispute or fraud investigation.

Our 4play Data Protection and Privacy Practices

How We Protect Your Data

We protect all personal data stored on 4play using industry-standard encryption (TLS 1.2 or higher) for data in transit and AES-256 encryption for data at rest. Our servers are located in secure data centres with redundant backups and disaster-recovery protocols. Access to personal data is restricted to authorised staff on a need-to-know basis; all staff sign confidentiality agreements.

We conduct annual security audits and penetration testing to identify vulnerabilities. If we detect a security breach involving personal data, we notify affected users within 72 hours (or as required by applicable law) and provide guidance on protective steps. We maintain cyber-liability insurance to cover potential data breach costs.

Data Retention on 4play

We retain account registration data, KYC documents, and transaction records for the duration of your account plus a minimum period set by applicable law in supported jurisdictions (typically five to seven years after account closure). Gameplay data is retained for seven years to support dispute resolution and regulatory audits. Technical logs (IP addresses, browser data) are retained for 90 days and then deleted automatically.

If you close your account, we retain some data for regulatory compliance, fraud prevention, and dispute resolution. Closed accounts cannot be reopened; if you wish to return to 4play, you must create a new account. We do not permanently delete closed-account data unless required by law (e.g., data deletion request under applicable privacy law).

Third-Party Data Sharing

We do not sell personal data to third parties. We share data only in these circumstances: (1) payment processors (DANA, e-wallet, mobile banking, local payment, banks) to execute your transactions; (2) regulatory bodies and law enforcement when required by law; (3) fraud-prevention services to detect suspicious activity; (4) cloud hosting providers (Amazon Web Services, Google Cloud) who sign data-processing agreements and are bound by confidentiality.

We may share aggregated, anonymised data (e.g., "many active users in Jakarta played live roulette this month") for marketing, research, and platform improvement. This data cannot identify individual users. We never share gameplay data, payment details, or identity information with third-party advertisers or data brokers.

Your Rights on 4play

You have the right to access all personal data we hold about you on 4play. Submit a data-access request via the help portal, and we provide a copy of your data in a standard format within 30 days. You have the right to request correction of inaccurate data; if you notice errors in your registered name, email, or address, contact our support team and we update records immediately.

You have the right to request deletion of your data, subject to legal limitations. If you request account deletion, we close your account and delete or anonymise personal data after our standard retention period (typically five years for regulatory compliance). We cannot delete payment records or gameplay logs if they are required for regulatory reporting or dispute resolution. We acknowledge your request within 48 hours and provide a timeline for completion.

You have the right to object to direct marketing. If we send promotional emails, each email includes an unsubscribe link. You can opt out at any time, and we honor your preference within 48 hours. Opting out of marketing does not affect your account or service access.

Cookies and Tracking on 4play

We use cookies to maintain your login session, remember your preferences (language, game category), and track your activity for fraud prevention. Session cookies expire when you close your browser. Preference cookies persist for one year. We use analytics cookies (via Google Analytics or similar services) to understand how users navigate 4play and improve performance.

You can disable cookies in your browser settings, but this may prevent 4play from functioning correctly (you may be logged out frequently, preferences may not save). We do not use cookies to track you across other websites. Third-party cookies (from advertisers or analytics providers) are not set by 4play.

Contact Us About Privacy

If you have questions about your data, how we use it, or your privacy rights, contact us through the help portal on 4play. Our privacy team responds in English and Indonesian within two business days. For data-access requests, deletion requests, or privacy complaints, provide your account email and specify your request. We acknowledge all requests within 48 hours and provide a timeline for resolution. If you are unsatisfied with our response, you may lodge a complaint with your local data-protection authority or regulatory body.