Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by desa4d ("we", "us", "our") in connection with the operation of the desa4d online betting platform accessible at https://desa4d.cam ("Platform").

This Policy applies to:

• All registered players with active or inactive desa4d accounts.
• Visitors who browse the Platform without registering an account.
• Individuals who communicate with desa4d via email or live chat support channels.
• Individuals whose data desa4d receives from third-party partners in connection with service delivery (e.g., payment processors, KYC verification providers).

This Policy is directed primarily at players based in Indonesia, our principal market. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, national identity number, email address, IP address, and payment account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means desa4d, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third-party service provider that processes Personal Data on behalf of desa4d, under contractual instruction and subject to data protection obligations.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawal facilities are enabled.
• "Cookies" means small text files placed on your device by the Platform to support functionality, security, and analytics.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including financial account information and government-issued identity document numbers.

desa4d collects the following categories of personal data, depending on your level of interaction with the Platform:

We do not knowingly collect sensitive special-category data such as racial or ethnic origin, religious beliefs, political opinions, or health information beyond what is strictly necessary for responsible gaming compliance (e.g., self-exclusion records).

desa4d collects personal data through the following channels:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, and session activity logs. This collection occurs via server logs and first-party cookies.
• Payment Processors: When you transact via a supported Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) or e-wallet (GoPay, OVO, DANA, ShopeePay, LinkAja), our payment processor may share transaction confirmation data with us to credit your account correctly.
• KYC Verification Partners: Third-party identity verification providers may share the results of document checks and biometric comparisons with us to confirm your eligibility to hold an account.
• Support Interactions: Data shared by you voluntarily when you contact our 24/7 support team via live chat or email at [email protected].

desa4d processes your personal data only for clearly defined, legitimate purposes. The table below sets out the primary purposes for which each data category is used:

We do not use your personal data for unsolicited third-party marketing, and we do not build advertising profiles based on your betting activity for sale to external advertisers.

desa4d processes personal data under the following legal bases, consistent with internationally recognized data protection principles:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and KYC verification.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements and international gaming license conditions.
• Consent: Where we rely on your consent for any specific processing activity (such as optional marketing communications), we will obtain that consent explicitly and separately, and you may withdraw it at any time by contacting [email protected].

desa4d does not sell your personal data. We may share your data with third parties only in the following limited circumstances:

• Payment Processors: We share necessary financial data with Indonesian banking partners and e-wallet providers (including GoPay, OVO, DANA, ShopeePay, and LinkAja) solely for the purpose of processing your transactions.
• KYC & Identity Verification Providers: We engage specialist third-party providers to verify identity documents and conduct age checks. These providers act as Data Processors under contractual data protection agreements.
• Game and Platform Technology Providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe) may receive anonymized session identifiers necessary to deliver their games via our Platform. They do not receive your full identity or financial data.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulators, or courts when required to do so by a valid legal order, court order, or applicable law — including cooperation with AML investigations.
• Business Continuity: In the event of a merger, acquisition, or asset sale involving desa4d, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third-party Data Processors engaged by desa4d are contractually bound to process your data only as instructed, to maintain appropriate security standards, and to delete or return data when their engagement ends.

desa4d uses first-party cookies and similar tracking technologies to support Platform functionality, maintain your session security, and improve our services. We do not use third-party advertising cookies or behavioral tracking cookies that build profiles for external advertisers.

The following cookie categories are used on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function. They maintain your login session, store your language preference, and prevent cross-site request forgery (CSRF). These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences such as display settings and notification choices, so you do not need to reconfigure them on each visit.
• Analytics Cookies: Collect anonymized data on how players navigate the Platform — which pages are visited most, how long sessions last, and where errors occur. This data is used internally to improve the user experience and is never tied back to individual identities.
• Security Cookies: Support fraud detection by helping us identify unusual login patterns, multiple account attempts from a single device, and other risk signals.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to the Platform. For all other cookie categories, you may opt out via your browser without affecting core account functionality.

desa4d retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal obligations. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your account relationship with desa4d and for a period of five (5) years following permanent account closure, to satisfy AML compliance and dispute resolution obligations.
• KYC Documents: Identity documents and verification records are retained for a minimum of five (5) years after your account is closed, in line with internationally recognized AML record-keeping standards.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for five (5) years from the date of each transaction.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter.
• Technical & Log Data: Server logs and IP address records are retained for up to twelve (12) months for security monitoring purposes, then purged.
• Marketing Consent Records: Records of consent and withdrawal of consent for optional communications are retained for six (6) years as evidence of compliance.

When a retention period expires, personal data is either securely deleted or irreversibly anonymized so that it can no longer be linked to any individual.

desa4d implements a layered security framework designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Transport Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.3 / 256-bit SSL, the same standard used by major international financial institutions.
• At-Rest Encryption: Sensitive data stored in our databases — including financial account details and identity document records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to production systems and player data is restricted to authorized personnel on a least-privilege basis. Multi-factor authentication is mandatory for all administrative access.
• Penetration Testing: Our Platform infrastructure undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities proactively.
• Incident Response: desa4d maintains a documented data breach response procedure. In the event of a confirmed breach that poses a risk to player rights, affected players will be notified without undue delay.
• Staff Training: All desa4d staff with access to personal data undergo mandatory data protection and security awareness training as part of onboarding and annually thereafter.

While we employ robust security measures, no online platform can guarantee absolute security. We encourage you to protect your own account by using a strong, unique password and enabling two-factor authentication where available.

As a desa4d player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to verified requests within 30 days.

desa4d strictly prohibits the use of its Platform by individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age. Our Platform is designed for adults only, and we implement age-verification controls at the registration and KYC stages to enforce this requirement.

If desa4d discovers or is notified that personal data belonging to a person under 21 has been collected — whether through misrepresentation at registration or any other means — we will:

• Immediately suspend the account in question.
• Initiate deletion of all personal data associated with that account, subject only to any overriding legal retention obligation.
• Return any real-money deposits made by the account holder to the original payment source, minus any administrative costs.
• Void and forfeit any winnings generated while the account was active.

If you are a parent or guardian and believe that a minor in your care has registered an account on desa4d, please contact us immediately at [email protected] so we can take swift action.

desa4d is an internationally operating platform. In the course of delivering our services, your personal data may be transferred to and processed in countries outside Indonesia where our technology infrastructure, KYC partners, or game providers are based.

Whenever personal data is transferred internationally, desa4d ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses binding the recipient to data protection standards equivalent to those described in this Policy.
• Transfers only to jurisdictions or organizations that maintain adequate data protection frameworks recognized by international standards.
• Encryption of data in transit for all cross-border transfers.

By using the Platform, you acknowledge that your data may be processed outside Indonesia in accordance with the safeguards described above.

desa4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered players via a notice on the Platform and, where practicable, by email to the address on file.

The date of the most recent revision is displayed at the top of this page. We recommend reviewing this Policy periodically. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

If you disagree with any amendment to this Policy, you have the right to close your account and request return of your balance by contacting [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way desa4d handles your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days.
• Support Language: English and Indonesian (Bahasa Indonesia) — native Indonesian-speaking agents are available around the clock.
• Operating Hours: 24 hours a day, 7 days a week, including Indonesian public holidays (Idul Fitri, Nyepi, Christmas, and all national holidays).
• Time Zone: WIB (Western Indonesia Time, UTC+7) — covering Jakarta, Surabaya, Bandung, Medan, Semarang, and all West & Central Java cities.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. desa4d will cooperate fully with any such authority in the investigation of a complaint.