tab4d Privacy Policy

Overview

tab4d ("the Company", "we", "us", "our") operates the online betting and gaming platform accessible at tab4d.bet, offering sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), bingo online, and fish shooting games to Players based in Indonesia. As an operator serving real-money gaming accounts denominated in Indonesian Rupiah (IDR), we are required to collect and process certain categories of personal data to deliver our services, maintain regulatory compliance, and protect the integrity of the Platform.

This Privacy Policy applies to all personal data collected through the tab4d website (tab4d.bet), its mobile-optimized web interface, customer support channels (live chat and email), payment processing flows, and any other point of interaction between you and tab4d. It applies to registered Players, prospective Players who have initiated but not completed registration, and visitors who browse the Platform without registering.

This policy is written in plain international English and is governed by internationally recognized data protection principles, including data minimization, purpose limitation, storage limitation, accuracy, integrity, confidentiality, and accountability.

Data We Collect

tab4d collects personal data across several categories. The table below summarizes the primary categories of data we hold and provides examples of the specific data points within each category.

How We Collect Data

tab4d collects personal data through the following primary channels:

• Direct Submission: Data you provide when registering an Account, completing KYC verification, submitting a deposit or withdrawal request, contacting our support team, or responding to a survey or promotion.
• Automated Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, session timestamps, and page interaction events. This collection occurs via server logs, cookies, and analytics scripts operating within the tab4d Platform environment.
• Third-Party Verification Services: Where tab4d engages third-party KYC and identity verification providers to cross-reference the documents you submit during registration, those providers may return verified data points (e.g., confirmation that the name on your KTP matches your submitted documents) that are added to your Account record.
• Payment Processing Partners: When you initiate a deposit or withdrawal via a supported Indonesian bank or e-wallet, the payment provider transmits a transaction confirmation record — including transaction reference, amount, and timestamp — to tab4d. tab4d does not receive your full bank account credentials from payment processors; only the information necessary to confirm and reconcile the transaction is shared.
• Game Content Providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may transmit game session data — including wager amounts, game outcomes, and session duration — to tab4d in real time for wallet crediting, bonus tracking, and responsible gaming monitoring purposes.

Purpose of Use

tab4d processes personal data only for specific, documented purposes. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent or being required to do so by applicable law.

• Account Management: Creating, maintaining, and securing your tab4d Player Account; authenticating your identity at login; processing password resets and security verifications.
• KYC & Identity Verification: Verifying that you are a real person, are at least 21 years of age, and are the sole authorized holder of your Account. KYC verification is a prerequisite for withdrawal access and is mandatory for all real-money Players.
• Financial Transaction Processing: Processing deposits and withdrawals to and from verified Indonesian bank accounts and e-wallets; reconciling internal IDR Wallet balances; issuing winnings and bonus credits.
• Fraud Prevention & Anti-Money Laundering (AML): Monitoring transaction patterns and behavioral signals to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming Compliance: Monitoring your gaming activity for indicators of problem gambling behavior; applying deposit limits, session limits, and self-exclusion restrictions you have activated; contacting you proactively where our responsible gaming systems detect potentially harmful patterns.
• Customer Support: Responding to your inquiries, resolving Account disputes, processing account closure requests, and maintaining a record of your support history to ensure continuity of service.
• Platform Improvement: Analyzing aggregated, anonymized behavioral data to identify usability issues, optimize game loading performance, improve the mobile experience across Indonesian devices, and develop new product features.
• Marketing Communications (opt-in only): Sending promotional emails, SMS notifications, or in-platform messages about bonuses, seasonal promotions (e.g., Idul Fitri, Ramadhan cashback offers, Chinese New Year / Imlek specials), new game launches, and BRI Liga 1 or Champions League betting markets — but only where you have explicitly opted in to receive such communications. You may opt out at any time through your Account settings or by contacting support.
• Legal Compliance: Meeting our obligations under applicable international AML regulations, data protection standards, and any lawful order from a competent authority.

Legal Basis for Processing

tab4d processes your personal data on the following legal bases, each of which applies to specific processing activities:

• Contractual Necessity: The majority of our data processing — Account management, KYC verification, transaction processing, customer support — is necessary to perform the contract between you and tab4d (i.e., to deliver the gaming and betting services you have registered for). Without this processing, we cannot operate your Account.
• Legitimate Interests: Fraud detection, AML monitoring, platform security, and aggregated analytics are conducted on the basis of tab4d's legitimate interest in maintaining a secure, fair, and commercially viable platform. We have assessed that these interests are not overridden by your data protection rights given the limited nature of the data involved and the clear benefit to all Players of a fraud-free environment.
• Legal Obligation: Certain data retention and reporting activities are required by applicable international AML and know-your-customer (KYC) standards. Where a competent authority issues a lawful order requiring disclosure, tab4d will comply.
• Consent: Marketing communications and non-essential cookies are processed only on the basis of your freely given, specific, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Data Sharing

tab4d does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. We share your data only in the following limited circumstances:

• KYC & Identity Verification Providers: To complete Account verification, tab4d works with licensed identity verification service providers. These providers process your KTP scan, name, date of birth, and photograph solely for verification purposes under binding data processing agreements with tab4d.
• Payment Processing Partners: To execute deposits and withdrawals, tab4d shares the minimum necessary transaction data with your chosen Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja). These partners operate under their own privacy frameworks and are independently responsible for their data handling practices.
• Game Content Suppliers: To deliver third-party game content and verify game outcomes, tab4d shares your Player session token and wager data with licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft). These studios do not receive your full identity or financial data — only the session-level data required for game operation.
• Fraud & AML Screening Services: tab4d may share account-level behavioral and transaction data with specialized AML screening platforms to detect and prevent financial crime. All such sharing is subject to confidentiality obligations.
• Legal & Regulatory Authorities: In response to a lawful order, subpoena, or regulatory request from a competent authority, tab4d may be required to disclose specific Player data. tab4d will, where legally permissible, notify you of any such request before disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of tab4d's business assets, Player data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and given the opportunity to close your Account and withdraw your balance before the transfer takes effect.

Cookies & Tracking Technologies

tab4d uses cookies and similar tracking technologies (local storage, session tokens, pixel tags) to operate the Platform, remember your session state, and improve your experience. The following cookie categories are in use:

• Strictly Necessary Cookies: These cookies are required for the Platform to function. They maintain your login session, store your IDR Wallet balance display state, and enable the navigation menus. These cookies cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymized data about how Players navigate the Platform — which game categories are most visited, how long sessions last, and where Players encounter friction in the deposit flow. The data is used to improve Platform performance, particularly for mobile Users accessing from Jakarta, Surabaya, Bandung, Bali, and other major Indonesian cities with varying mobile network conditions.
• Functional Cookies: These cookies remember your preferences — such as your preferred game category, last-viewed sport (e.g., BRI Liga 1, EPL), and responsible gaming reminder settings — so the Platform personalizes your experience across sessions.
• Marketing Cookies (opt-in only): If you have opted in to personalized promotions, tab4d may use first-party tracking pixels to measure the effectiveness of bonus offers and seasonal promotions. These pixels do not share your data with third-party advertising networks.

Data Security

tab4d employs a multi-layered security architecture to protect your personal data against unauthorized access, accidental loss, alteration, and disclosure. Our security measures include, but are not limited to:

• TLS/SSL Encryption: All data transmitted between your browser or device and the tab4d Platform is encrypted in transit using TLS 1.2 or higher. The padlock icon in your browser's address bar confirms that your connection to tab4d.bet is encrypted at all times.
• At-Rest Encryption: All personally identifiable data stored in tab4d's databases — including KTP scans, selfie photographs, bank account details, and transaction records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Player personal data within tab4d's internal systems is restricted on a strict need-to-know basis. Customer support agents can access the minimum data required to resolve your query; full identity and financial data is accessible only to authorized compliance and fraud teams.
• Intrusion Detection & Monitoring: tab4d operates continuous intrusion detection systems and automated anomaly monitoring across all Platform components. Any detected attempt to access Player data without authorization triggers an immediate security response.
• Password Security: Player passwords are hashed using a modern, salted cryptographic algorithm before storage. tab4d staff cannot view your plaintext password. In the event of a suspected Account compromise, your password will be reset and you will be notified immediately.
• Two-Factor Authentication (2FA): tab4d offers optional 2FA via SMS OTP (one-time password) for Account login. We strongly recommend that all Indonesian Players activate 2FA, particularly where the Account is accessed from multiple devices across Jakarta, Surabaya, Medan, Yogyakarta, or other locations.

Data Retention

tab4d retains personal data only for as long as necessary to fulfill the purpose for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply:

• Active Account Data: All personal data associated with an active Player Account is retained for the full duration of the Account's active status plus a post-closure period of five (5) years, in accordance with international AML record-keeping requirements.
• KYC Documents: KTP scans, selfie photographs, and associated identity verification records are retained for a minimum of five (5) years following Account closure. This retention period is required to satisfy AML and fraud investigation obligations.
• Transaction Records: Deposit, withdrawal, wager, and balance histories are retained for five (5) years following the transaction date or Account closure, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction.
• Marketing Preference Records: Records of your opt-in and opt-out decisions for marketing communications are retained for three (3) years following the last marketing communication you received, to demonstrate compliance with consent obligations.
• Technical Logs: Server access logs and session logs are retained for twelve (12) months from the date of generation, after which they are permanently deleted unless required for an ongoing security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized aggregate data (e.g., total deposit volumes by city, game category popularity across Indonesian time zones) may be retained indefinitely for statistical and product development purposes, as it no longer constitutes personal data.

Your Rights

As a Player whose personal data is processed by tab4d, you hold the following rights with respect to your data. To exercise any of these rights, please contact our support team using the details provided in Section 15.

• Right of Access: You may request a copy of all personal data tab4d holds about you. We will provide this in a structured, machine-readable format within thirty (30) calendar days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Identity data corrections may require you to submit updated KTP documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to our legal obligations to retain certain data categories for AML compliance — we will inform you of any retention obligations that prevent full erasure at the time of your request.
• Right to Restrict Processing: You may request that tab4d restricts its processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint is being investigated.
• Right to Data Portability: You may request that tab4d provides your personal data in a portable format so that you can transfer it to another service provider. This right applies to data processed on the basis of consent or contractual necessity.
• Right to Object: You may object at any time to processing based on tab4d's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights, or where the processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw consent at any time through your Account settings. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Minors

The tab4d Platform is strictly an adults-only service. Access to real-money gaming and betting is restricted to individuals who are at least 21 years of age. tab4d does not knowingly collect personal data from any person under the age of 21.

During the registration process, Players are required to confirm that they are 21 or older. This self-declaration is supplemented by KYC identity verification, which cross-references the date of birth on your KTP. Any Account where KYC reveals that the holder is under 21 will be immediately suspended, all pending withdrawals cancelled, and deposited funds returned to the originating payment account after deduction of any bonus credits received.

If you are a parent or guardian and believe that a minor in your care has registered an Account on tab4d, please contact our support team immediately at support at tab4d dot bet. We will investigate and close the Account within 24 hours of receiving a verified report, and will return any real-money deposits made to the originating payment method.

Third-Party Services

The tab4d Platform integrates third-party services to deliver specific functionality. Each third-party provider operates under its own privacy policy and is independently responsible for its data handling practices. tab4d selects third-party providers that meet appropriate data security and privacy standards, and we enter into data processing agreements with each provider that impose obligations consistent with this Privacy Policy.

Third-party integrations active on the tab4d Platform include:

• Game Content Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft. These studios receive Player session tokens and wager data to operate game rounds and transmit verified outcomes back to tab4d for wallet settlement.
• Payment Infrastructure Partners: Indonesian bank transfer gateways and e-wallet APIs for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja. These partners receive only the transaction-level data necessary to process your deposit or withdrawal.
• Identity Verification (KYC) Providers: Specialized KYC technology providers that perform document authenticity checks and liveness verification on KTP submissions.
• Analytics & Performance Monitoring: Server-side analytics tools that collect anonymized Platform usage data to inform product improvements. These tools do not receive personally identifiable information.

tab4d does not integrate third-party advertising networks, social media tracking pixels, or data broker services. Any links to third-party websites that may appear in informational content on the Platform are provided for reference only; tab4d has no control over, and accepts no responsibility for, the privacy practices of those external sites.

International Data Transfers

As an internationally operated online gaming platform serving Players in Indonesia, some of the data processing activities described in this Privacy Policy may involve the transfer of personal data to servers and service providers located outside Indonesia. In particular, certain game content studio infrastructure and KYC verification platforms operate from server environments located in jurisdictions including Malta, the Isle of Man, the Philippines, and Singapore.

Where personal data is transferred internationally, tab4d ensures that appropriate safeguards are in place to protect your data to a standard that is at least equivalent to the protections described in this Privacy Policy. Safeguards include contractual data protection clauses in agreements with all international service providers, and selection of providers whose hosting infrastructure meets ISO 27001 or equivalent information security certification standards.

Your financial data — specifically your Indonesian bank account details and e-wallet credentials — is processed exclusively by Indonesian-domiciled payment partners and is not transferred to international servers outside the scope of the payment transaction.

Policy Amendments

tab4d reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new product features, third-party integrations, or applicable legal requirements. When a material change is made to this Privacy Policy, we will update the "Last Updated" date at the top of this page and notify registered Players via email or in-platform notification.

Your continued use of the tab4d Platform after the publication of an updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree with the updated Privacy Policy, you must discontinue use of the Platform and may request Account closure in accordance with Section 12 of our Terms & Conditions.

We recommend reviewing this Privacy Policy at least once per calendar quarter. Significant changes — such as changes to data retention periods, the introduction of new data sharing arrangements, or changes to your rights — will be highlighted prominently at the top of the updated policy document for a period of thirty (30) days following publication.

Contact

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a potential data security concern, please contact tab4d's privacy and support team through the following channel. Our team includes native Indonesian-speaking agents available around the clock across WIB, WITA, and WIT time zones:

For responsible gaming concerns — including activating deposit limits, cool-off periods, or self-exclusion — please visit our dedicated Responsible Gaming page or contact the support team directly. 21+ only. Gambling involves risk. Play responsibly.