Privacy Policy — 4plays

1 Introduction

4plays ("we", "us", "our") operates the online gaming platform accessible at https://4plays.cam and is committed to protecting the privacy and personal data of every user ("you", "your") who accesses or uses our Services. This Privacy Policy has been prepared in accordance with internationally recognized data protection principles and reflects our obligations to handle your personal information with transparency, care, and accountability.

Our platform primarily serves players based in Indonesia, and we recognize the importance of maintaining the trust of our community across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and every other region of the archipelago. Whether you deposit via BCA, BRI, BNI, or Mandiri, or fund your account through OVO, DANA, or GoPay, every transaction and every interaction with 4plays involves data that we handle with the highest standards of discretion.

This policy covers:

• What personal data 4plays collects from you and about you.
• The purposes for which we collect and process your data.
• How long we retain your data and who we may share it with.
• The rights you have over your own data and how to exercise them.
• The security measures we deploy to protect your information.

This Privacy Policy should be read alongside our Terms & Conditions, which governs your use of the 4plays platform as a whole.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

3 Data We Collect

4plays collects the following categories of personal data in the course of providing our Services:

3.1 Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you a re 21 years of age or older)
• Indonesian National ID number (NIK from KTP) or passport number
• Gender (where provided voluntarily)

3.2 Contact Data

• Email address
• Mobile phone number (including WhatsApp number where provided)
• Residential address (city, province, postal code)

3.3 Financial Data

• Bank account name, number, and branch (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, and others)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used
• Account balance and wagering activity records

3.4 Technical Data

• IP address and approximate geolocation (city/region level)
• Device type, operating system, browser type and version
• Session timestamps and duration
• Referring URL and navigation path within the platform
• Unique device identifiers and cookies

3.5 Behavioral and Gaming Data

• Bet history across all product verticals — sports markets, casino games, togel draws, and live dealer sessions
• Game preferences, session frequency, and average stake levels
• Responsible gaming tool usage (deposit limits set, self-exclusion requests)
• Bonus and promotion interactions

3.6 Communications Data

• Records of live chat conversations with our support team
• Email correspondence sent to or received from 4plays
• Survey responses and feedback submissions

3.7 Verification Documents

• Scanned or photographed copies of KTP (National ID), SIM (driver's license), or passport submitted during KYC
• Proof of address documents (bank statements, utility bills)
• Selfie images submitted as part of liveness verification

4 How We Collect Data

4plays collects personal data through the following methods:

4.1 Direct Collection

You provide data directly to us when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our customer support team, or respond to a promotion or survey. This is the primary source of your personal data on our platform.

4.2 Automated Collection

When you visit https://4plays.cam, our servers automatically log technical data including your IP address, device details, browser type, and session timestamps. This data is collected via server logs, cookies, and similar tracking technologies embedded in our platform pages. See Clause 7 for full details on our Cookie policy.

4.3 Third-Party Sources

We may receive supplementary data about you from trusted third-party sources in the following contexts:

• Payment processors: Confirmation of transaction status from Indonesian bank networks and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• KYC and identity verification partners: Validation results from third-party document verification services that confirm the authenticity of your submitted ID documents.
• Fraud and risk management providers: Risk scores or flagging data from anti-fraud systems that help protect the integrity of the platform.
• Analytics partners: Aggregated, non-identifiable traffic data from web analytics services used to improve platform performance.

5 Purpose & Legal Basis for Processing

We process your personal data only where we have a valid lawful basis to do so. The table below sets out the primary purposes for which 4plays processes personal data and the corresponding legal basis for each:

Where we rely on your consent as the legal basis for processing (for example, to send you promotional emails about upcoming bonuses or seasonal offers during Ramadhan and Idul Fitri), you have the right to withdraw that consent at any time by contacting our support team or adjusting your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6 Data Sharing and Disclosure

6.1 Service Providers

4plays shares personal data with carefully selected third-party service providers who assist us in delivering the platform and its Services. These providers act as Data Processors and are contractually bound to process your data only on our documented instructions and in accordance with applicable data protection standards. Categories of service providers include:

• Payment gateway and banking integration providers (to facilitate IDR transactions via BCA, BRI, BNI, Mandiri, and e-wallets)
• KYC and identity verification technology partners
• Cloud hosting and infrastructure providers
• Fraud detection and risk analytics vendors
• Customer support platform providers (live chat software)
• Game studio content providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) who receive only the minimum data necessary to facilitate game sessions

6.2 Legal and Regulatory Disclosure

4plays may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or binding regulatory directive. We will notify you of any such disclosure to the extent permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 4plays's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any material change in the Data Controller via email and a prominent notice on the platform.

6.4 No Sale of Personal Data

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your browser or device when you visit https://4plays.cam. They allow the platform to recognize your device across sessions, remember your preferences, maintain your login state, and gather analytics data about how users interact with our pages.

7.2 Types of Cookies We Use

7.3 Managing Cookies

You can manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair core platform functionality, including your ability to log in and maintain a gaming session. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your experience.

8 Data Retention

4plays retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your account's existence plus a minimum of 5 years following account closure, to satisfy anti-money-laundering (AML) record-keeping obligations.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction in line with internationally recognized financial record-keeping standards.
• KYC documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Customer support records: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter as evidence of the consent having been given.
• Technical / server logs: Retained for 12 months on a rolling basis.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual.

9 Security Measures

4plays employs a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS protocols, ensuring that sensitive information including login credentials and financial data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal data and financial records stored in our databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 4plays is strictly role-based. Only personnel who require access to specific data categories to perform their job functions are granted that access, and all access is logged and audited.
• Two-Factor Authentication (2FA): 2FA is available to all users and is required for internal staff accounts. We strongly encourage all players to enable 2FA on their 4plays account.
• Vulnerability Management: Our platform undergoes regular penetration testing and security audits by qualified third-party security professionals. Identified vulnerabilities are remediated in accordance with a documented patching schedule.
• DDoS Protection: Our infrastructure is protected against distributed denial-of-service attacks to ensure platform availability and data integrity during attempted cyber incidents.

10 Your Data Rights

Subject to applicable law and the specific circumstances of each request, you have the following rights in relation to the personal data that 4plays holds about you:

To exercise any of these rights, submit your request in writing to [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 60 days, of which we will notify you promptly.

4plays will not charge a fee for reasonable data rights requests. However, if a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline to act on the request.

11 Children's Privacy

The 4plays platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from anyone under the age of 21. If you are a parent or guardian and believe that a minor in your care has submitted personal data to 4plays or created an account on our platform, please contact us immediately at [email protected].

Upon receiving a verified report of underage use, 4plays will promptly investigate the account, close it if the report is substantiated, delete all associated personal data to the extent not required for legal compliance, and return any real-money balance to the payment source from which it originated. Bonus funds associated with any such account will be forfeited.

We strongly encourage parents and guardians in Indonesia to use parental control software to restrict minors' access to online gaming websites.

12 International Data Transfers

4plays's primary operational infrastructure is hosted in data centers outside Indonesia. As a result, your personal data may be transferred to and stored in countries other than Indonesia. These transfers are necessary to deliver our Services and are conducted in accordance with applicable data protection frameworks.

When transferring personal data internationally, 4plays ensures that adequate safeguards are in place, which may include:

• Contractual clauses binding the recipient to data protection standards equivalent to those applied by 4plays.
• Transfers only to jurisdictions recognized as providing an adequate level of data protection.
• Appropriate technical and organizational measures applied at the destination, including encryption and access controls.

By using 4plays and providing us with your personal data, you acknowledge and consent to these international transfers subject to the safeguards described above.

13 Third-Party Links and Services

The 4plays platform may contain references to third-party game studios, payment providers, and other external services. While we take care to work only with reputable partners, 4plays is not responsible for the privacy practices of any third-party website or service that you access independently of our platform.

Game content delivered within the 4plays interface by studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft is subject to each studio's own privacy and data handling practices in relation to their proprietary game software. 4plays governs only the data that passes through our own platform systems.

We encourage you to review the privacy policies of any third-party service you engage with, including the banks and e-wallet providers through which you transact (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja), as their data practices are governed by their own policies and are outside 4plays's control.

14 Changes to This Privacy Policy

4plays reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the Services we offer. The date of the most recent revision is displayed prominently at the top of this page.

When we make material changes to this policy — such as introducing a new category of data collection or a new sharing arrangement — we will notify you by email to the address registered on your account and by posting a prominent notice on the 4plays platform for a minimum of 14 days prior to the change taking effect.

Your continued use of the 4plays platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 4plays handles your personal data, please reach out to our team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data enquiries: "Privacy Enquiry — [Your Username]"
• Live Chat: Av ailable 24/7 via the platform interface
• Response Time: General enquiries within 2 hours; formal data rights requests within 30 calendar days (WIB business hours)