Privacy Policy

1. Information We Collect

madu4d collects several types of information to provide, maintain, protect, and improve our services. The categories of personal data we collect include:

1.1 Information You Provide Directly

• Account Registration Data: When you create a madu4d account, we collect your full name, date of birth, email address, phone number, residential address, and country of residence. This information is required to verify that you meet eligibility requirements (21+ years of age, Indonesian residency or permitted jurisdiction).
• Identity Verification (KYC) Data: To comply with anti-money laundering (AML) and know-your-customer (KYC) regulations, we may request government-issued identification documents (e.g., Indonesian KTP, passport, driver's license), proof of address (utility bills, bank statements), and payment method verification documents.
• Payment and Financial Information: When you deposit or withdraw funds, we collect payment method details such as bank account numbers (for BCA, BRI, BNI, Mandiri, and other Indonesian banks), e-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency wallet addresses. We do not store full credit card numbers on our servers—payment processing is handled by secure third-party payment processors.
• Communication Data: When you contact our customer support team via live chat, email, phone, or social media, we collect the content of your communications, support tickets, complaint history, and related metadata to assist you and improve our services.

1.2 Information Collected Automatically

• Device and Technical Information: We automatically collect information about the devices you use to access madu4d, including IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data and Activity Logs: We log your activity on the Platform including pages visited, games played, bets placed, bet amounts, win/loss history, deposit and withdrawal transactions, login timestamps, session duration, and clickstream data. This helps us understand how you use our services and detect fraudulent or suspicious activity.
• Cookies and Tracking Technologies: madu4d uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, remember your preferences, maintain your logged-in session, deliver personalized content, and analyze site traffic. You can control cookie preferences through your browser settings, but disabling cookies may limit certain Platform functionality.
• Location Data: We may collect approximate geolocation information based on your IP address to verify compliance with jurisdictional restrictions and provide location-appropriate services. For mobile users who grant permission, we may collect precise GPS location data.

1.3 Information from Third Parties

• Payment Processors: We receive transaction confirmation, payment status, and verification data from third-party payment providers (banks, e-wallet operators, cryptocurrency exchanges, payment gateways).
• Identity Verification Services: We may use third-party identity verification and fraud prevention services to confirm your identity, age, and address as part of KYC compliance.
• Marketing Partners: If you arrive at madu4d through an affiliate or marketing partner, we may receive referral information to properly credit the referring party.

2. How We Use Your Information

madu4d uses the personal information we collect for the following purposes:

2.1 Service Provision and Account Management

• Create, maintain, and manage your madu4d account.
• Process deposits, withdrawals, and other financial transactions.
• Enable you to place bets, play games, and participate in promotions.
• Verify your identity, age, and eligibility to use our services (KYC compliance).
• Provide customer support and respond to your inquiries.
• Send you account-related notifications including transaction confirmations, security alerts, password resets, and account updates.

2.2 Legal and Regulatory Compliance

• Comply with Indonesian and international laws, regulations, and licensing requirements governing online gambling operations.
• Fulfill anti-money laundering (AML), counter-terrorist financing (CTF), and know-your-customer (KYC) obligations.
• Respond to legal requests, court orders, subpoenas, and regulatory inquiries from government authorities.
• Enforce our Terms and Conditions and investigate violations of our policies.
• Maintain records required by gaming regulators and financial authorities.

2.3 Security and Fraud Prevention

• Detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account takeovers, and other security threats.
• Monitor betting patterns to identify collusion, arbitrage betting, or other prohibited activities.
• Protect the integrity of our games and ensure fair play for all users.
• Implement security measures to safeguard your account and personal information from unauthorized access.

2.4 Platform Improvement and Analytics

• Analyze user behavior, preferences, and trends to improve Platform functionality and user experience.
• Conduct research and development for new games, features, and services.
• Test and optimize website performance, loading speeds, and mobile responsiveness.
• Generate aggregated, anonymized statistics and reports for internal business purposes.

2.5 Marketing and Communications (with your consent)

• Send you promotional emails, SMS messages, or push notifications about bonuses, new games, special offers, and events (you can opt out at any time).
• Personalize content, recommendations, and advertising based on your gaming preferences and activity history.
• Invite you to participate in surveys, promotions, and loyalty programs.

3. Legal Basis for Processing (GDPR)

For users in jurisdictions covered by GDPR or similar data protection laws, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing betting services, processing transactions, managing your account).
• Legal Obligation: Processing is required to comply with Indonesian law, international gaming regulations, AML/KYC requirements, tax obligations, and court orders.
• Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, security, Platform improvement, customer support) provided such interests do not override your fundamental rights and freedoms.
• Consent: Processing is based on your explicit consent (e.g., receiving marketing communications, using optional features). You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

4. How We Share Your Information

madu4d does not sell your personal information to third parties. We may share your data with the following categories of recipients under strict confidentiality and security obligations:

4.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Danamon, BSI), e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), cryptocurrency exchanges, and payment gateways to process deposits and withdrawals.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers that host our servers and store your data.
• Identity Verification Services: Third-party KYC/AML verification providers that confirm your identity, age, and address.
• Customer Support Tools: Live chat platforms, ticketing systems, and CRM software used to deliver customer support.
• Analytics and Marketing Services: Tools that help us analyze user behavior, optimize Platform performance, and deliver personalized content (e.g., Google Analytics, tracking pixels).

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, regulators, courts, and other legal authorities when required by law, court order, subpoena, or regulatory investigation. This includes Indonesian authorities such as the Financial Transaction Reports and Analysis Centre (PPATK) for AML compliance, tax authorities, and gaming regulators in our licensing jurisdictions.

4.3 Business Transfers

If madu4d undergoes a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity as part of the business transaction. We will notify you via email and/or prominent notice on the Platform before your data is transferred and becomes subject to a different Privacy Policy.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes. Such data does not constitute personal information under data protection laws.

5. Data Retention

madu4d retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Your account data is retained for as long as your account remains active.
• Closed Accounts: After account closure, we retain certain information for up to 7 years to comply with AML regulations, tax laws, regulatory audits, dispute resolution, and legal proceedings.
• Transaction Records: Financial transaction data (deposits, withdrawals, bets, payouts) is retained for at least 5 years as required by Indonesian financial reporting laws and international gaming regulations.
• KYC Documents: Identity verification documents are retained for at least 5 years after account closure per AML compliance requirements.
• Marketing Communications: If you opt out of marketing emails, we retain your email address on a suppression list to honor your opt-out preference.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with our data destruction policies.

6. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format to transfer to another service provider.
• Right to Object: You can object to processing of your data for direct marketing purposes or based on legitimate interests.
• Right to Restrict Processing: You can request temporary restriction of processing in certain circumstances (e.g., while we verify data accuracy).
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw consent at any time without affecting prior lawful processing.
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority if you believe we have violated your privacy rights.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or through our customer support team. We will respond to your request within 30 days as required by applicable data protection laws.

7. International Data Transfers

madu4d operates internationally and may transfer your personal data to servers located outside Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Ensuring the recipient country has been deemed to provide adequate data protection by relevant authorities.
• Implementing technical and organizational security measures to protect data in transit and at rest.

By using madu4d, you consent to the transfer of your information to countries outside Indonesia for the purposes described in this Privacy Policy.

8. Security Measures

madu4d implements comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmissions between your device and our servers are protected by 256-bit SSL/TLS encryption. Sensitive data stored on our servers is encrypted at rest.
• Access Controls: Personal data is accessible only to authorized personnel who require access to perform their job functions. Access is granted based on the principle of least privilege.
• Multi-Factor Authentication: We offer and encourage users to enable two-factor authentication (2FA) for account login to prevent unauthorized access.
• Secure Data Centers: Our servers are hosted in secure, certified data centers with physical security controls, redundant power supplies, and disaster recovery systems.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans to identify and address potential security weaknesses.
• Employee Training: All staff members receive data protection and security awareness training to ensure proper handling of personal information.

While we implement industry-standard security measures, no online system is completely invulnerable. You acknowledge that you provide personal information at your own risk, and we cannot guarantee absolute security.

9. Cookies and Tracking Technologies

madu4d uses cookies and similar tracking technologies to enhance your browsing experience and improve Platform functionality. Types of cookies we use include:

Cookie Type	Purpose	Duration
Essential Cookies	Required for Platform functionality, session management, security, and login authentication. Cannot be disabled.	Session / Persistent
Performance Cookies	Collect anonymized data on Platform usage, page load times, and errors to improve performance.	Persistent (up to 2 years)
Functional Cookies	Remember your preferences (language, currency, display settings) for a personalized experience.	Persistent (up to 1 year)
Marketing Cookies	Track your activity across sites to deliver relevant advertising and measure campaign effectiveness.	Persistent (up to 1 year)

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, but doing so may impair Platform functionality. For more information on cookies, visit www.allaboutcookies.org.

10. Children's Privacy

madu4d services are strictly intended for adults aged 21 years or older (or the legal gambling age in your jurisdiction, whichever is higher). We do not knowingly collect personal information from individuals under the legal gambling age. If we become aware that we have collected data from a minor, we will take immediate steps to delete that information and close the associated account. If you believe a minor has provided us with personal information, please contact us immediately at [email protected].

11. Third-Party Links and Services

The madu4d Platform may contain links to third-party websites, applications, or services (e.g., payment processors, social media platforms, affiliate sites). This Privacy Policy applies only to madu4d. We are not responsible for the privacy practices, content, or security of third-party sites. We encourage you to review the privacy policies of any third-party services you access through our Platform. Providing personal information to third-party sites is at your own risk.

12. Changes to This Privacy Policy

madu4d reserves the right to modify, update, or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email notification, prominent banner on the Platform homepage, or in-account notification. The "Effective Date" at the top of this document will reflect the most recent revision. Your continued use of madu4d after any changes to this Privacy Policy constitutes acceptance of the updated terms. If you do not agree with the changes, you must stop using the Platform and may request account closure and data deletion (subject to legal retention obligations).

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy, our data practices, or wish to exercise your data protection rights, please contact us: