Privacy Policy

Introduction

kyt4d is committed to protecting the privacy and personal data of every player who interacts with our platform. This Policy sets out a transparent account of the types of personal information we collect, the reasons we collect it, the parties with whom we may share it, and the steps we take to keep it secure.

This Policy applies to all users of the kyt4d platform, including visitors who browse the site without registering, players who have created an Account, and individuals who contact our customer support team. It covers data collected through the website at https://kyt4d.cam, our mobile-optimised interface, and any communications between you and kyt4d (including live chat, email, and WhatsApp support).

We process personal data primarily in the context of providing online sports betting and casino gaming services to players based in Indonesia. Where this Policy references Indonesian context — for example, payment channels such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja — it does so because these are the principal payment methods used by our player base, and their transaction records form part of the data we process.

Definitions

Data We Collect

kyt4d collects the following categories of personal data, depending on the nature of your interaction with the Platform:

3.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID).
• Date of birth (to verify you are at least 21 years of age).
• Email address.
• Mobile phone number (used for two-factor authentication and WhatsApp support at +62 811 0000 4444).
• Residential address in Indonesia (city, province, postal code).
• Username and encrypted password hash.

3.2 Identity Verification (KYC) Documents

• Scan or photograph of Indonesian National Identity Card (KTP) or valid passport.
• Proof of residential address (utility bill, bank statement, or official letter, issued within the past three months).
• Photograph or screenshot of the payment method (bank account or e-wallet) used to deposit, showing the account holder's name.
• Source of funds declaration for high-value depositors (cumulative deposits exceeding Rp 50.000.000 in any calendar month).

3.3 Financial & Transaction Data

• Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet account (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals.
• Transaction amounts, timestamps, and reference numbers.
• Account balance history and wagering activity records.
• Bonus claims, wagering contributions, and promotion participation history.

3.4 Technical & Device Data

• IP address and geolocation data derived from IP (country and city level only — we do not use GPS tracking).
• Device type, operating system, and browser version.
• Session timestamps, page views, and in-platform navigation events.
• Cookie identifiers and session tokens.

3.5 Communications Data

• Live-chat transcripts between you and kyt4d support agents.
• Email correspondence sent to or from [email protected].
• WhatsApp message records where you initiate contact with our support team.
• Complaint records and dispute resolution correspondence.

3.6 Responsible Gaming Data

• Self-imposed deposit limits, loss limits, session time reminders, and cooling-off periods you configure in your Account settings.
• Self-exclusion requests and their effective dates.
• Any problem-gambling risk flags raised by our Responsible Gaming monitoring tools.

How We Collect Your Data

kyt4d collects personal data through the following channels:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, use live chat or email support, or configure Responsible Gaming settings.
• Automatically via the Platform: Through cookies, server logs, and analytics tools when you browse or interact with the Platform. This includes IP address, device fingerprint data, and behavioural event data.
• From payment providers: When you initiate a deposit or withdrawal via a local bank (BCA, BRI, Mandiri, etc.) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), the relevant provider transmits transaction confirmation data to kyt4d, including masked account identifiers and transfer amounts.
• From KYC and identity verification vendors: kyt4d uses accredited third-party KYC service providers to verify the authenticity of identity documents submitted during the verification process. These providers return a verification result and risk score to kyt4d; they do not store your documents on our behalf beyond the verification window.
• From fraud prevention services: kyt4d's fraud-detection infrastructure processes technical data (IP address, device fingerprints, velocity checks) through an automated rules engine to flag potentially suspicious activity.

Purposes of Processing

We use your personal data for the following specific purposes:

Legal Basis for Processing

kyt4d processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including Account management, payment processing, and providing gaming services.
• Legal obligation: Processing required to comply with our international gaming licence conditions, AML regulations, and any applicable data protection laws — including KYC verification, transaction monitoring, and record retention.
• Legitimate interests: Processing necessary for our legitimate business interests where these are not overridden by your fundamental rights — including fraud prevention, platform security, and aggregated analytics for service improvement.
• Consent: Processing based on your freely given, specific, informed consent — including the sending of personalised marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

kyt4d does not sell or commercially transfer your personal data to third parties. We may share your data in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process data on our behalf under strict contractual obligations. These include:

• Payment processors: Indonesian banking and e-wallet infrastructure providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) who facilitate deposit and withdrawal transactions.
• KYC verification vendors: Accredited identity document verification services used to authenticate KTP, passport, and address documents submitted during onboarding.
• Fraud detection services: Technology partners whose systems analyse device and behavioural signals to identify and block fraudulent activity.
• Cloud infrastructure providers: Secure data-centre operators who host the kyt4d platform and its databases under industry-standard security controls.
• Customer communication platforms: Live-chat and email support infrastructure providers who process support interaction data on our behalf.

7.2 Legal & Regulatory Disclosure

kyt4d may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other competent bodies where we are legally required to do so — for example, in response to a valid court order, an AML investigation request, or a licensing authority audit. In all such cases, we disclose only the minimum data necessary to satisfy the legal requirement.

7.3 Business Transfers

In the event that kyt4d undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and ensure the recipient is bound by obligations no less protective than this Policy.

International Data Transfers

8.1 The kyt4d platform is operated under an international gaming licence, and some of the service providers we use may process data in jurisdictions outside Indonesia. Where personal data is transferred internationally, kyt4d takes the following safeguards:

• We transfer data only to jurisdictions that provide an adequate level of data protection, or to recipients who have agreed to standard contractual clauses that impose equivalent protections.
• All international data processing agreements require the recipient to implement appropriate technical safeguards, including encryption at rest and in transit.
• We conduct periodic assessments of our international data processors to confirm their continued compliance with our data protection requirements.

8.2 By using the kyt4d Platform, you acknowledge that your personal data may be transferred to and stored on servers located outside Indonesia in connection with the services described in this Policy.

Data Retention

kyt4d retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by our legal and regulatory obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised such that it can no longer be attributed to any individual.

Cookies & Tracking Technologies

10.1 kyt4d uses the following categories of cookies when you access the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function — these include session tokens that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These remember your preferences — for example, your preferred language setting, your last-visited game category, and your notification preferences. Disabling these may reduce your experience quality but will not prevent access to the Platform.
• Analytics Cookies: We use first-party analytics to understand how players navigate the Platform, which features are most used, and where usability issues arise. This data is aggregated and not used to identify individual players. We do not use Google Analytics or any third-party advertising analytics service.
• Security & Fraud Prevention Cookies: These cookies help us detect automated bots, identify unusual login patterns, and flag potentially fraudulent sessions. They are essential to Platform security.

10.2 kyt4d does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. We do not share cookie data with social media platforms or advertising networks.

10.3 Most browsers allow you to control or delete cookies through the browser's settings menu. Blocking strictly necessary cookies will prevent you from logging in to the Platform. For all other cookie categories, you may opt out without losing access to core functionality.

Your Privacy Rights

As a player on the kyt4d platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected] (plain text — not a link). We aim to respond to all data rights requests within 30 calendar days of receipt.

• Right of Access: You may request a copy of all personal data kyt4d holds about you, together with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct or complete it.
• Right to Erasure ("Right to Be Forgotten"): You may request that kyt4d delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note: we may be unable to delete data that we are legally required to retain (e.g., AML transaction records).
• Right to Restriction of Processing: You may ask us to pause processing of your data while a rectification or objection request is being assessed.
• Right to Data Portability: For data processed on the basis of consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV).
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Security Measures

12.1 kyt4d implements a layered security architecture to protect personal data from unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and our servers.
• Encryption at rest for all databases containing personal and financial data, using AES-256 or equivalent standard.
• Role-based access control (RBAC) so that only staff with a documented, approved operational need can access identifiable player records.
• Multi-factor authentication (MFA) required for all kyt4d internal staff accounts with access to player data.
• Regular penetration testing conducted by independent security firms to identify and remediate vulnerabilities.
• Automated intrusion detection systems that monitor for unusual access patterns and generate alerts for the security team.
• Data minimisation in logs: Server and application logs are configured to redact sensitive fields (passwords, full card numbers, ID document numbers) before writing to disk.

12.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, kyt4d will notify affected players promptly — and in no case later than 72 hours after becoming aware of the breach — with details of what occurred, what data was involved, and what steps we are taking to mitigate harm.

Minors & Age Restriction

13.1 The kyt4d platform is strictly for adults aged 21 years and over. We do not knowingly collect personal data from individuals under 21. Age verification is a mandatory step in our KYC process, and any Account found to belong to a person under 21 will be immediately closed.

13.2 If you are a parent or guardian and believe that a minor has submitted personal data to kyt4d, please contact us immediately at [email protected] (plain text — not a link). We will promptly investigate and delete any such data upon confirmation.

Changes to This Policy

14.1 kyt4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will:

• Update the "Effective Date" at the top of this page.
• Send a notification to your registered email address with a summary of the key changes.
• Display a notice on the Platform for a minimum of 14 days following the update.

14.2 Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the Platform and may request Account closure as described in our Terms & Conditions.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please reach out to the kyt4d team through any of the following channels:

• Live Chat: Available 24/7 via the in-platform chat widget — average first response under 90 seconds.
• Email (plain text — not a link): [email protected]
• WhatsApp (plain text — not a link): +62 811 0000 4444 — available 07:00–23:00 WIB (UTC+7).

All formal privacy requests will receive a substantive written response within 30 calendar days. Complex requests may take up to an additional 60 days, in which case we will notify you of the extension and the reason within the initial 30-day window.