Your Privacy Matters
to cak4d

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" means the cak4d website accessible at cak4d.bio, including all sub-pages, features, and services accessible through it.
• "Member" means any individual who has completed the registration process and holds an active account on the Platform.
• "Personal Data" means any information that identifies or could reasonably identify a living individual, including but not limited to names, email addresses, phone numbers, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
• "Data Controller" means cak4d, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third-party entity that Processes Personal Data on behalf of cak4d under a contractual agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawals and certain account features are activated.
• "Cookies" means small data files placed on your device by the Platform to support functionality, analytics, and personalisation.

cak4d collects the following categories of Personal Data from Members and visitors:

We do not intentionally collect special-category data (such as racial or ethnic origin, religious beliefs, health data, or political opinions) from Members. If any such data is incidentally received — for example, in a free-text support message — it will not be stored in a retrievable special-category data field and will be treated with the highest level of care.

3.1 Directly From You. The majority of Personal Data cak4d holds about you is provided directly by you during account registration, KYC document upload, deposit and withdrawal requests, support communications, and completion of account settings.

3.2 Automatically. When you access the Platform, our servers and analytics tools automatically record Technical Data and Usage Data, including your IP address, device fingerprint, browser session data, and behavioural click data. This occurs whether or not you are logged in to an account.

3.3 Via Cookies and Tracking Technologies. cak4d uses first-party cookies, session cookies, and limited analytics tools to maintain your logged-in session, remember your preferences, measure Platform performance, and support responsible gaming monitoring. Full details are set out in Clause 9.

3.4 From Third-Party Payment Providers. When you complete a deposit or withdrawal, our payment processing partners — including Indonesian bank transfer networks and e-wallet platforms — may return confirmation data to cak4d, such as transaction reference numbers, account holder names, and payment timestamps. We receive only the minimum data necessary to reconcile the transaction.

3.5 From Game Providers. Third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may return game session data — round IDs, bet amounts, outcomes — to cak4d for the purposes of transaction settlement, dispute resolution, and responsible gaming oversight.

cak4d Processes your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your Member account, including password resets and account recovery.
• Identity & Age Verification (KYC): Confirming that you are at least 21 years of age and are an eligible resident, as required by our responsible gaming and anti-fraud commitments.
• Transaction Processing: Receiving deposits and processing withdrawals via approved Indonesian payment methods, reconciling balances, and issuing bonus credits.
• Fraud Prevention & Security: Detecting and preventing fraudulent account activity, bonus abuse, money laundering, collusion, and unauthorised access.
• Responsible Gaming: Monitoring betting patterns for indicators of problem gambling behaviour, enforcing self-exclusion restrictions, and respecting deposit and session limits you have set.
• Customer Support: Responding to your queries, complaints, and disputes via live chat, email, and WhatsApp.
• Legal Compliance: Meeting obligations under applicable anti-money laundering (AML) regulations, our international gaming licence conditions, and any legally valid requests from regulatory authorities.
• Platform Improvement: Analysing aggregated and anonymised Usage Data to improve game offerings, platform performance, user experience, and promotional strategies.
• Marketing Communications (with consent): Sending you promotional offers, bonus notifications, and platform updates via email or SMS where you have provided explicit consent, or where we have a legitimate interest in informing existing Members of relevant updates.

cak4d relies on the following legal bases to Process your Personal Data, depending on the purpose involved:

• Contractual Necessity: Processing that is required to perform the contract between you and cak4d — including account management, payment processing, and game access — is carried out on the basis of contractual necessity. Without this Processing, cak4d cannot provide the Services.
• Legal Obligation: Processing required to comply with applicable laws — including KYC verification, AML transaction monitoring, and retention of financial records — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming oversight, and aggregate analytics is carried out on the basis of cak4d's legitimate interests, provided those interests do not override your fundamental data rights.
• Consent: Processing for optional marketing communications is carried out only where you have provided explicit, informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior Processing or your ability to use the Platform.

6.1 Data Processors. cak4d shares Personal Data with carefully selected third-party Data Processors who act strictly under our instructions and under contractual data protection obligations. These include: payment processing partners (Indonesian banks and e-wallet networks), game content providers, cloud hosting and infrastructure providers, anti-fraud and identity verification services, and customer support platform providers.

6.2 Legal Authorities. cak4d may disclose Personal Data to law enforcement agencies, regulatory bodies, or government authorities where legally required to do so — for example, in response to a valid court order, regulatory audit, or AML investigation. cak4d will only disclose the minimum data necessary to satisfy the legal requirement.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of cak4d's business, Member Personal Data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being assumed by the new controller.

6.4 No Commercial Data Sales. cak4d does not sell, rent, license, or otherwise commercialise your Personal Data to any third party for their own marketing purposes. This prohibition is absolute and applies regardless of the data category.

6.5 Aggregate and Anonymised Data. cak4d may share aggregated, anonymised, and non-personally-identifiable statistical data — such as platform traffic reports or game popularity metrics — with business partners, content providers, or in public-facing communications. Such data cannot be used to identify individual Members.

7.1 Active Accounts. While your cak4d account remains open and active, we retain your Personal Data for as long as is necessary to provide the Services, maintain your account history, and support any ongoing responsible gaming obligations.

7.2 Closed Accounts. Following account closure — whether at your request or initiated by cak4d — we retain certain categories of Personal Data for a period of at least five (5) years from the date of closure. This retention period is required to fulfil AML compliance obligations, support resolution of disputes raised after account closure, and satisfy any applicable regulatory audit requirements.

7.3 Financial Records. Transaction records, deposit and withdrawal histories, and KYC documentation are retained for a minimum of five (5) years from the date of each transaction or document submission, in line with standard financial record-keeping requirements.

7.4 Marketing Data. Marketing preference data and consent records are retained for as long as your account is active, plus a reasonable period following account closure to demonstrate compliance with consent requirements. If you withdraw consent for marketing, your contact details will be added to a suppression list to prevent future marketing contact.

7.5 Deletion Requests. Where you request deletion of your Personal Data and no legal retention obligation prevents it, cak4d will action the deletion request within 30 calendar days of receiving adequate verification of your identity. Data subject to mandatory retention periods will be securely deleted at the earliest permissible date.

8.1 Technical Safeguards. cak4d implements industry-standard technical security measures to protect your Personal Data, including 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, multi-factor authentication for internal administrative access, and regular vulnerability assessments and penetration testing of Platform infrastructure.

8.2 Organisational Safeguards. Access to Member Personal Data within cak4d is restricted on a strict need-to-know basis. Staff who handle Personal Data are trained on data protection obligations and are contractually bound by confidentiality obligations. Access rights are reviewed regularly and revoked immediately upon staff departure.

8.3 Incident Response. In the event of a data security incident that is likely to result in a risk to your rights or interests, cak4d will notify affected Members via email to their registered address without undue delay, and no later than 72 hours after becoming aware of the breach, to the extent that notification is practicable.

8.4 Your Role in Security. You are responsible for maintaining the confidentiality of your cak4d account credentials. cak4d will never ask you for your password via email, live chat, or any other channel. If you suspect that your account has been compromised, contact our support team immediately.

9.1 What We Use. cak4d uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including maintaining your logged-in session, remembering your language preference, and enabling core security features. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember choices you make (such as preferred deposit method or responsible gaming limit settings) to personalise your experience. Disabling these may reduce convenience but will not prevent Platform access.
• Analytics Cookies: Collect anonymised data about how visitors use the Platform — pages visited, time on site, navigation paths — to help cak4d improve the user experience. This data is aggregated and does not identify individual Members.
• Responsible Gaming Cookies: Track session duration and betting frequency to support the responsible gaming tools available in your account settings, such as session time reminders.

9.2 Managing Cookies. You may configure your browser to refuse or delete cookies at any time. Note that disabling strictly necessary cookies will impair your ability to use the Platform, including your ability to log in. Instructions for managing cookies are available in your browser's help documentation.

9.3 No Third-Party Advertising Cookies. cak4d does not permit third-party advertising networks or social media platforms to set tracking cookies on the Platform for the purpose of profiling you for targeted advertising.

As a Member of cak4d, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team via live chat or email. We will respond within 30 calendar days of receiving your verified request.

• Right of Access: You may request a copy of all Personal Data cak4d holds about you, along with information about how it is being used.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct it. For certain data categories (such as your registered name), correction may require re-submission of KYC documents.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where Processing is unlawful. This right is subject to any overriding legal retention obligations described in Clause 7.
• Right to Restrict Processing: You may request that cak4d limits how your Personal Data is used — for example, while a rectification request is under review — rather than deleting it outright.
• Right to Data Portability: Where Processing is based on your consent or on a contractual basis, you may request that cak4d provides your Personal Data to you in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to Processing carried out on the basis of legitimate interests, including profiling for marketing purposes. If you object to marketing communications, cak4d will cease those communications immediately.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing carried out before withdrawal.

11.1 21+ Only. The cak4d Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. By registering an account, you confirm that you are 21 or older.

11.2 Underage Account Discovery. If cak4d discovers — through KYC verification, a complaint, or any other means — that a Member is under 21, the account will be immediately suspended. All Bonus Funds will be forfeited, and any Real Money Balance will be returned to the original deposit payment method. All Personal Data associated with the underage account will be deleted as soon as the refund process is complete, subject to any legal obligation to retain fraud-related records.

11.3 Parental Controls. If you are a parent or guardian and believe your child has accessed the cak4d Platform or provided Personal Data to us, please contact our support team immediately. We will investigate and take prompt remedial action.

12.1 Game Provider Integrations. The cak4d Platform integrates directly with licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. When you launch a game powered by one of these studios, your game session data (round IDs, bet amounts, outcomes) is shared with that studio for settlement and integrity purposes. Each studio operates under its own data protection framework and licensing obligations.

12.2 No Responsibility for External Sites. The cak4d Platform does not contain outbound links to external websites. Should you independently navigate to a third-party site, cak4d has no responsibility for that site's privacy practices or content. This Privacy Policy applies solely to the cak4d Platform at cak4d.bio.

13.1 Cross-Border Processing. As an internationally licensed platform, cak4d may transfer and store your Personal Data on servers located outside of Indonesia. This may include jurisdictions within Asia-Pacific and in data centres operated by our cloud infrastructure providers.

13.2 Transfer Safeguards. Where Personal Data is transferred outside Indonesia, cak4d ensures that appropriate safeguards are in place to protect your data to a standard equivalent to this Privacy Policy. These safeguards include contractual data protection clauses with all third-party processors and, where applicable, transfers only to jurisdictions recognised as providing adequate data protection standards.

13.3 Indonesian Member Rights. Regardless of where your Personal Data is stored or Processed, your rights as described in Clause 10 remain fully applicable. You may exercise those rights at any time by contacting our support team.

14.1 Right to Update. cak4d reserves the right to update or amend this Privacy Policy at any time. Material changes — those that affect how we use your Personal Data or the rights available to you — will be communicated to registered Members via email to the address on file, and/or via a prominent notice on the Platform, at least 14 calendar days before the change takes effect.

14.2 Continued Use as Acceptance. Your continued use of the cak4d Platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the changes, you should cease using the Platform and contact support to close your account.

14.3 Versioning. The current version of this Privacy Policy is always accessible at cak4d.bio/privacy-policy. The "Last updated" date at the top of this page reflects when the current version took effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a data protection concern, please contact the cak4d support team through the following channels:

• Live Chat: Available 24/7 on cak4d.bio — Indonesian-speaking agents are always on hand.
• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +62 811 0000 0000 (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including all Indonesian public holidays (WIB, UTC+7).

When submitting a data rights request, please include your registered account username and a clear description of the right you wish to exercise. We may request additional identity verification before actioning your request.