kepo4d Privacy Policy

This Privacy Policy ("Policy") is published by kepo4d ("we", "us", "our"), the operator of the online betting and gaming platform accessible at kepo4d.cam. It describes how kepo4d collects, processes, stores, shares, and safeguards personal data provided by or collected about individuals ("Members", "you") who register for, access, or use our Services.

This Policy should be read alongside kepo4d's Terms & Conditions, which govern your use of the Platform as a whole. By accepting our Terms & Conditions at registration, you also confirm your acceptance of this Privacy Policy. Where any conflict exists between this Policy and another document, this Policy governs with respect to privacy and data protection matters.

1. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including but not limited to names, identification numbers, location data, online identifiers, and factors relating to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means kepo4d in its capacity as the entity that determines the purposes and means of processing Members' personal data.
• "Data Processor" means any third party that processes personal data on behalf of kepo4d under a contractual data processing agreement.
• "KYC" means the Know Your Customer identity and age verification process required under kepo4d's compliance and anti-money laundering obligations.
• "Cookies" means small text files placed on a Member's device by the Platform to facilitate browsing, session management, analytics, and personalization functions.
• "Services" means all products and features offered through kepo4d.cam, including sports betting, live casino, togel (Indonesia's traditional numbers lottery), slot games, and any other gaming or wagering products.

2. Scope & Application

This Policy applies to all personal data processed by kepo4d in connection with the provision of its Services to Members, including data collected via the kepo4d.cam website, any mobile-optimized interface, email correspondence, live chat interactions, and telephone communications with our support team.

This Policy applies to all Members who have registered an account on kepo4d, including Members who are resident in Indonesia and who access the Platform from Indonesian territory. kepo4d's primary market is Indonesia, and our data handling practices are designed to respect the privacy expectations and applicable legal obligations relevant to Indonesian residents.

This Policy does not apply to the privacy practices of third-party websites, services, or applications that may be linked from the Platform. kepo4d is not responsible for the privacy policies or data practices of any third party, and we encourage you to review the privacy policy of any third-party service you access.

3. Data We Collect

kepo4d collects the following categories of personal data from or about Members:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification details (such as Indonesian KTP, Passport, or SIM number and images).
• Contact Data: Email address, Indonesian mobile phone number, and residential address in Indonesia.
• Financial Data: Bank account name and number (for institutions including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon), and e-wallet account identifiers (for OVO, DANA, GoPay, ShopeePay, and LinkAja).
• Transaction Data: Full records of all deposits, withdrawals, wagers, wins, losses, bonus activity, and promotional claims made through a Member's kepo4d account.
• Technical Data: IP address, device type and model, operating system, browser type and version, time zone setting, session start and end timestamps, and connection type.
• Usage Data: Pages viewed, game sessions initiated and completed, features interacted with, click patterns, referral source, and navigation paths through the Platform.
• Communications Data: Records of live chat transcripts, email correspondence, support tickets, and any formal complaints submitted to kepo4d.
• Responsible Gaming Data: Self-imposed limit settings, self-exclusion requests, reality-check configurations, and any responsible gaming assessments conducted by our team.

4. How We Collect Data

kepo4d collects personal data through the following channels and methods:

• Direct submission by you: Data you provide when completing our registration form, submitting KYC documents, making deposits or withdrawal requests, contacting our support team, or responding to surveys or promotions.
• Automated technical collection: Data collected automatically when you access or use the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Clause 8 for full details on our use of cookies.
• Third-party verification services: Identity and document verification data returned to us by licensed KYC service providers as part of our Member verification process.
• Payment processors: Transaction confirmation data and payment status updates provided by banks (such as BCA, BRI, BNI, Mandiri) and e-wallet providers (such as OVO, DANA, GoPay, ShopeePay, LinkAja) when you make deposits or withdrawals.
• Game providers: Game session data and RNG outcome records provided by our licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe) for the purposes of dispute resolution and account reconciliation.
• Fraud detection and security services: Risk signals, device fingerprint scores, and behavioral anomaly flags provided by our fraud prevention technology partners.

5. Legal Basis for Processing

kepo4d processes personal data under one or more of the following legal bases, depending on the nature and purpose of the processing activity:

1. Contractual necessity: Processing required to enter into or perform the contract between kepo4d and a Member, including account registration, identity verification, deposit processing, withdrawal processing, and delivery of gaming Services.
2. Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) regulations, and regulatory reporting duties.
3. Legitimate interests: Processing carried out in kepo4d's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, business analytics, and improvement of Services, where such interests are not overridden by the Member's privacy rights.
4. Consent: Processing based on the Member's freely given, specific, informed, and unambiguous consent, including the sending of marketing and promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. How We Use Your Data

kepo4d uses the personal data collected from Members for the following purposes:

• To create, maintain, verify, and manage your kepo4d account.
• To process deposits and withdrawals in Indonesian Rupiah (IDR) via your nominated payment method.
• To verify your identity and age in accordance with our KYC obligations (you must be at least 21 years of age to hold an account on kepo4d).
• To deliver the Services you have requested, including access to sports betting markets, live casino games, togel draws, and slot titles.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct.
• To monitor your gaming activity for responsible gaming indicators and, where necessary, to intervene with appropriate protective measures.
• To communicate with you regarding your account, including transaction confirmations, security alerts, and support responses.
• To send you promotional offers, bonus notifications, and event announcements where you have provided consent to receive marketing communications.
• To resolve disputes, process formal complaints, and maintain records for regulatory and legal compliance purposes.
• To analyze usage patterns and improve the performance, features, and user experience of the Platform.
• To conduct internal audits and quality assurance reviews of our customer service team.

7. Data Sharing & Disclosure

kepo4d does not sell, rent, or trade your personal data to any third party. We may share your personal data with carefully selected third parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• KYC and identity verification providers: Licensed identity verification services that process your government-issued ID documents to confirm your identity and age on our behalf.
• Payment processors and financial institutions: Banks (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate the processing of your deposits and withdrawal requests in IDR.
• Licensed game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, who require certain session data to deliver and support the games you play on the Platform.
• Fraud prevention and security services: Technology partners that provide device fingerprinting, IP risk scoring, and behavioral analytics to help us identify and prevent fraudulent activity.
• IT infrastructure and cloud service providers: Hosting, database, and cybersecurity service providers that store and maintain our Platform infrastructure under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, kepo4d may disclose personal data to the relevant authorities. We will notify you of such disclosures to the extent permitted by law.
• Professional advisers: Lawyers, auditors, insurers, and compliance consultants engaged by kepo4d, subject to binding confidentiality obligations.

All third-party Data Processors engaged by kepo4d are required to sign a data processing agreement that obliges them to process personal data only on kepo4d's documented instructions, to implement appropriate technical and organizational security measures, and to assist kepo4d in meeting its obligations to Members under this Policy.

8. Cookies & Tracking Technologies

kepo4d uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) on the Platform. These technologies serve the following functional and analytical purposes:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your logged-in session, processing transactions securely, and preserving your account preferences. These cookies cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data on how Members navigate and use the Platform, enabling us to identify performance bottlenecks and improve the user experience.
• Functional Cookies: Used to remember your preferences (such as language settings and game lobby configurations) to personalize your experience on kepo4d.
• Security Cookies: Used to support our fraud detection and account security systems, including session integrity checks and device recognition for trusted-device management.

You may configure your browser settings to refuse non-essential cookies at any time. Please note that disabling certain cookies may affect the functionality of some features on the Platform. kepo4d does not use cookies to deliver third-party advertising on this Platform.

9. Data Security

kepo4d implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmissions between your browser or device and the kepo4d Platform.
• Encryption at rest for sensitive personal data and financial records stored on our servers.
• Role-based access controls that restrict access to personal data to only those kepo4d employees and contractors who require it to perform their job functions.
• Multi-factor authentication for kepo4d staff accessing internal systems that hold Member data.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Incident response procedures that ensure prompt detection, containment, and notification in the event of a data security breach affecting Members.

In the event of a data security breach that is likely to result in a high risk to the rights and freedoms of affected Members, kepo4d will notify affected Members without undue delay via the email address registered to their account and will take all reasonable steps to mitigate the impact of the breach.

10. Data Retention

kepo4d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory retention obligations, and to support the resolution of any disputes or legal claims. The principal retention periods that apply to each data category are summarized in the Data Collection table above.

Financial transaction data and KYC identity documents are subject to an extended retention period of seven (7) years following account closure, in accordance with anti-money laundering regulations and international financial record-keeping standards applicable to our licensed operating jurisdiction.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original data. Where anonymization is technically feasible, kepo4d may retain anonymized data for longer periods for aggregate analytics and platform improvement purposes.

If you request deletion of your personal data before the end of a mandatory retention period, kepo4d will restrict active processing of your data to the minimum extent required to fulfil the retention obligation, and will delete the data as soon as the retention period expires.

11. Your Rights

As a Member of kepo4d, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Protection team using the details in Clause 16:

• Right of Access: You have the right to request a copy of the personal data kepo4d holds about you and information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to Human Review of Automated Decisions: You have the right to request human review of any automated decision that significantly affects you.

kepo4d will respond to all data rights requests within 30 days of receipt. We may extend this period by a further 60 days in complex or high-volume cases, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

12. Children & Minors

kepo4d's Services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account, access the Platform, or use any of our Services.

If kepo4d discovers or is notified that personal data belonging to an individual under the age of 21 has been collected through the registration process, we will immediately close the associated account, void all wagers placed, return any deposited balance to the originating payment method, and securely delete all associated personal data without undue delay.

If you are a parent or guardian and believe that a person under your care has registered an account on kepo4d without your knowledge or consent, please contact our support team immediately using the details provided in Clause 16.

13. Marketing Communications

kepo4d may send you promotional emails, bonus notifications, and event announcements where you have provided your consent to receive such communications at the time of registration or subsequently through your account preferences. Marketing communications from kepo4d are sent in English.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by kepo4d.
• Updating your notification preferences within your kepo4d account dashboard.
• Submitting a written opt-out request to our support team at the email address listed in Clause 16.

Withdrawal of marketing consent will be processed within 5 business days. Please note that opting out of marketing communications will not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are necessary for the operation of your account.

14. Third-Party Links

The kepo4d Platform may, from time to time, contain references to third-party services, game providers, or payment partners. kepo4d is not responsible for the privacy policies, data practices, or content of any third-party service. This Policy applies solely to data collected and processed by kepo4d through kepo4d.cam and its associated Services.

We encourage you to review the privacy policy of any third-party service you choose to access in connection with your use of kepo4d. The inclusion of any third-party reference on the Platform does not constitute an endorsement of that third party's privacy practices.

15. Policy Amendments

kepo4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our Services. Where changes are material, we will notify affected Members via the email address registered to their account and/or by a prominent notice on the Platform at least seven (7) days before the changes take effect.

The date at the top of this page reflects the most recent revision of this Policy. Continued use of kepo4d following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should cease using the Platform and may close your account by contacting our support team.

We recommend that you review this Policy periodically to stay informed of how kepo4d protects your personal data. The current version is always available at kepo4d.cam/privacy-policy.

16. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kepo4d, please contact our Data Protection team through the following channel:

If you are not satisfied with kepo4d's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in kepo4d's licensed operating jurisdiction. kepo4d will cooperate fully with any regulatory investigation arising from a Member's privacy complaint.