Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "ibok4d", "we", "us", "our" — the operator of the online betting platform located at https://ibok4d.cam, duly licensed under applicable international gaming regulations.
• "Platform" — the ibok4d website, its mobile-optimised interface, and any associated digital services or applications we make available.
• "User", "you", "your" — any individual who visits, registers on, or uses the Platform, regardless of whether real-money activity is undertaken.
• "Personal Data" — any information that identifies or could reasonably identify a living individual, either on its own or in combination with other data, including name, national identity number, email address, IP address, device identifier, and financial account details.
• "Sensitive Personal Data" — a subset of Personal Data that warrants heightened protection, including government-issued identity documents, biometric data, and financial account credentials.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. For all data collected via the Platform, ibok4d is the Data Controller.
• "Data Processor" — a third party that processes Personal Data on behalf of ibok4d under a binding data processing agreement.
• "KYC" — Know Your Customer; the identity and age verification procedures required under our Terms & Conditions and applicable AML regulations.
• "IDR" — Indonesian Rupiah (Rp), the transaction currency of the Platform.

Data Controller Identity

ibok4d acts as the Data Controller for all Personal Data collected through the Platform. This means that ibok4d determines the purposes for which your data is processed and the manner in which it is stored and protected. We are accountable for ensuring that all data processing activities comply with applicable data protection laws and this Privacy Policy.

Our designated Data Protection Officer (DPO) oversees all privacy-related matters and can be contacted directly at the address provided in Section 15 of this Policy. The DPO operates independently and is responsible for monitoring compliance, providing guidance on data protection obligations, and acting as the first point of contact for regulatory authorities and data subjects.

Data We Collect

ibok4d collects Personal Data across the following categories, limited to what is necessary for the stated purpose in each case:

3.1 Registration & Account Data

• Full legal name (as it appears on your KTP or passport)
• Date of birth (for age verification; you must be 21 or older)
• Gender
• Registered email address
• Indonesian mobile phone number (for two-factor authentication and support)
• Username and encrypted password
• City and province of residence (for localisation and fraud prevention; e.g., Jakarta, Surabaya, Bandung, Bali)

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of your Indonesian National Identity Card (KTP — Kartu Tanda Penduduk), valid passport, or Indonesian driver's licence (SIM)
• Selfie photograph for biometric comparison (liveness check)
• Proof of address document (utility bill, bank statement, or official correspondence dated within three months)
• Payment method verification screenshots confirming account holder name

3.3 Financial & Transaction Data

• Indonesian bank account details (account number, account holder name, and bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, Bank Danamon)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit and withdrawal history, including timestamps and IDR amounts
• Bonus crediting and wagering history

3.4 Gameplay & Betting Data

• Betting history across all Game types (sports markets, live casino, slot games, togel draws)
• Session duration, bet frequency, and stake sizes
• Responsible gaming tool settings (deposit limits, self-exclusion status, cool-off periods)
• Game preferences and browsing behaviour within the Platform

3.5 Technical & Device Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Unique device identifiers and session tokens
• Platform access timestamps and page interaction logs

3.6 Communications Data

• Re cords of your Live Chat conversations with our support team
• Email correspondence sent to or received from [email protected]
• Support ticket history, including submitted screenshots or attachments
• Survey responses and feedback submissions (where voluntarily provided)

How We Collect Your Data

ibok4d collects Personal Data through the following channels:

4.1 Directly From You

The majority of Personal Data we hold is provided directly by you during account registration, the KYC verification process, deposit and withdrawal requests, gameplay activity, and communications with our support team. You are under no obligation to provide this data; however, certain data is a prerequisite for using specific features of the Platform.

4.2 Automatically Through Technology

When you access the Platform, our servers and analytics tools automatically record Technical & Device Data as described in Section 3.5. This data is collected via server logs, session cookies, and browser storage mechanisms and is used primarily for platform security, fraud detection, and performance optimisation.

4.3 From Third-Party Service Providers

In certain cases, we may receive supplementary information about you from trusted third-party Data Processors, including:

• Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, and e-wallet providers OVO, DANA, GoPay) who confirm transaction status and account holder identity.
• KYC verification technology providers who perform automated biometric checks and document authenticity analysis on our behalf.
• Fraud prevention and AML screening services that cross-reference account data against publicly available sanction lists and adverse media databases.
• Game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft) who return game session logs to our platform in order to settle bets and calculate winnings accurately.

Purposes & Legal Basis for Processing

We process your Personal Data only where a valid legal basis exists. The table below sets out our primary processing activities, the purpose of each, and the corresponding legal basis:

Data Sharing & Third Parties

6.1 Categories of Recipients

ibok4d does not sell or rent your Personal Data to any third party. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment & Banking Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transactional data solely to execute your deposit and withdrawal instructions.
• KYC Technology Providers: Specialist identity verification vendors receive your KYC documents and biometric data to perform automated authenticity checks on our behalf under binding data processing agreements.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive an anonymised session token to deliver game content and return session results. They do not receive your full name, banking details, or contact information.
• Fraud Prevention & AML Services: Regulated screening providers may receive your name, date of birth, and account activity data to screen against sanction lists and politically exposed persons (PEP) databases.
• IT Infrastructure Providers: Hosting, cloud storage, and cybersecurity vendors who process data on our behalf under strict contractual data protection obligations.
• Regulatory Authorities: Law enforcement agencies, financial intelligence units, and gaming regulators where we are legally required to disclose information in response to a lawful request, court order, or regulatory directive.

6.2 No Advertising Networks

ibok4d does not share your Personal Data with advertising networks, data brokers, social media platforms, or any entity for the purpose of targeted advertising outside the Platform.

Data Retention

We retain your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. Our standard retention schedule is as follows:

At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. Anonymised and aggregated data (which cannot be used to identify you) may be retained indefinitely for statistical and business-improvement purposes.

Security Measures

ibok4d implements a comprehensive and layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

8.1 Technical Controls

• SSL/TLS 256-bit Encryption: All data in transit between your device and our servers is encrypted using Transport Layer Security (TLS 1.2 and above), the same standard used by major Indonesian banking institutions.
• Encryption at Rest: Sensitive Personal Data stored in our databases, including KYC documents and financial account details, is encrypted using AES-256 encryption.
• Two-Factor Authentication (2FA): All User accounts are protected by 2FA via one-time passwords (OTP) sent to your registered Indonesian mobile number.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade web application firewalls (WAF) and continuous intrusion detection and prevention systems (IDS/IPS).
• Regular Penetration Testing: Independent security assessors conduct periodic penetration tests and vulnerability assessments of our Platform infrastructure.

8.2 Organisational Controls

• Access to Personal Data is restricted on a strict need-to-know basis via role-based access controls (RBAC).
• All staff with access to Personal Data undergo background checks and mandatory data protection training on appointment and annually thereafter.
• Internal data handling policies are reviewed and updated at least annually or following any material change to our processing activities.
• A formal data breach response plan is in place, with designated response team members and defined notification timelines.

8.3 Breach Notification

In the event of a Personal Data breach that is likely to result in a high risk to your rights and freedoms, ibok4d will notify affected Users without undue delay and, in any event, within seventy-two (72) hours of becoming aware of the breach, where technically feasible. Notification will be sent to your registered email address and, where warranted, posted prominently on the Platform.

Your Rights as a Data Subject

You have the following rights in relation to your Personal Data held by ibok4d. To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 15. We will acknowledge your request within five (5) business days and aim to resolve it within thirty (30) calendar days.

9.1 Right of Access

You have the right to request a copy of all Personal Data we hold about you, together with information about how it is being processed, the categories of data held, the purposes of processing, and the third parties with whom it has been shared.

9.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. For account data, minor corrections (such as phone number updates) can be made directly through your account settings.

9.3 Right to Erasure ("Right to Be Forgotten")

You may request that we delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that we may be required to retain certain data for the periods specified in Section 7 in order to comply with legal obligations, and erasure requests will be assessed against those retention requirements.

9.4 Right to Restrict Processing

You may request that we temporarily suspend processing of your data in specific circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection you have raised is being assessed.

9.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to request that we transmit it directly to another controller, where technically feasible.

9.6 Right to Object

You have the right to object at any time to the processing of your Personal Data where we rely on legitimate interests as our legal basis. You also have the right to object to processing for direct marketing purposes at any time, without providing any reason.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time with effect going forward. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your preferred language, login session status, and betting preferences. ibok4d uses cookies and similar technologies (including local storage and session tokens) to operate the Platform efficiently and securely.

10.2 Types of Cookies We Use

10.3 Managing Cookies

You may disable non-essential cookies at any time through your browser's privacy settings. Please note that disabling strictly necessary cookies will prevent you from logging in to the Platform. For instructions on managing cookies in popular browsers, please consult your browser's help documentation. Adjusting cookie settings at the browser level will apply across all websites you visit, not only ibok4d.

International Data Transfers

As an internationally licensed platform, ibok4d may transfer your Personal Data to Data Processors located in countries outside Indonesia. Where such transfers occur, we ensure that an adequate level of protection is applied to your data by implementing one or more of the following safeguards:

• Binding contractual clauses (standard contractual clauses) that impose equivalent data protection obligations on the recipient as those applicable to ibok4d.
• Transfers only to countries or jurisdictions that have been assessed as providing an adequate level of data protection by recognised international standards.
• Where neither of the above applies, transfers are made only with your explicit informed consent, or where the transfer is strictly necessary for the performance of our contract with you (for example, to process an international payment).

You may request details of the specific safeguards applied to any international transfer of your Personal Data by contacting our Data Protection Officer.

Children's Privacy

ibok4d is strictly an adults-only platform. We do not knowingly collect, store, or process Personal Data relating to any person under the age of 21. Our registration process includes mandatory date-of-birth capture and KYC age verification specifically to enforce this restriction.

If we become aware that Personal Data belonging to a person under the age of 21 has been collected — whether through KYC review, a report from a third party, or our own monitoring — we will immediately close the associated account, reverse or forfeit any funds in accordance with our Terms & Conditions, and permanently delete all Personal Data belonging to that individual from our systems within thirty (30) days.

Marketing Communications

13.1 Opt-In Consent

ibok4d will only send you direct marketing communications — including promotional bonus offers, seasonal campaign notifications tied to events such as Idul Fitri, Ramadhan, and Indonesian Independence Day, and BRI Liga 1 match-day promotions — where you have expressly opted in to receive them. This opt-in is requested at the time of account registration and can be updated at any time through your account settings.

13.2 Channels Used

Marketing communications may be delivered via email, SMS to your registered Indonesian mobile number, or in-Platform notifications. We do not conduct outbound telephone marketing calls.

13.3 Opting Out

You may withdraw your marketing consent at any time by:

• Clicking the unsubscribe link included in every marketing email;
• Updating your notification preferences in your account settings; or
• Sending a written opt-out request to [email protected].

Opt-out requests are processed within five (5) business days. Withdrawal of marketing consent does not affect your ability to use the Platform or receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent regardless of marketing consent status as they are necessary for the performance of your contract with us.

Changes to This Policy

ibok4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes — that is, changes that meaningfully affect how we collect, use, or share your Personal Data — will be communicated to you via email to your registered address and by a prominent notice on the Platform at least fourteen (14) days before the updated Policy takes effect.

Non-material changes (such as typographical corrections or minor clarifications that do not alter the substance of our data practices) may be made without prior notice, though the "Effective Date" at the top of this Policy will always reflect the date of the most recent revision. We recommend that you review this Privacy Policy periodically to remain informed of how we protect your data.

Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by ibok4d, please contact our Data Protection Officer through the following channels:

• Email: [email protected] — please use the subject line "Privacy / Data Protection Enquiry" for fastest routing to our DPO.
• Live Chat: Available 24/7 on the Platform. Ask to be connected to the Privacy or Data Protection team.
• Response Time: We acknowledge all privacy-related enquiries within five (5) business days and aim to provide a full response within thirty (30) calendar days. For complex requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

Please note that all contact details are provided as plain text only. ibok4d does not use clickable email or telephone links on this page in accordance with our platform-wide security and accessibility standards.

If you are unsatisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. For Indonesian residents, data protection oversight falls under the Ministry of Communication and Information Technology (Kominfo) and, for matters relating to financial data, under the Financial Services Authority (OJK).