Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by arta4d through our website (https://arta4d.cam), mobile applications, customer support channels, and any other platforms through which we deliver our online gaming services to users in Indonesia.

arta4d operates as an international online gaming platform providing casino games, sports betting (bandar bola), togel (lottery), sabung ayam (cockfighting), slots, and related entertainment services. We are committed to transparency in our data handling practices and empowering you with control over your personal information.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of arta4d services. By creating an account, depositing funds, or using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with arta4d, we collect the following personal information:

• Identity Information: Full legal name (as shown on your KTP/Indonesian National ID), date of birth, gender, nationality, and ID card number.
• Contact Information: Email address, mobile phone number, residential address (street address, city, postal code, province).
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers if you choose to set them.
• Financial Information: Bank account details (bank name, account number, account holder name) and e-wallet information (OVO, DANA, GoPay account identifiers) for deposits and withdrawals. We do not store full credit/debit card numbers; payment card transactions are processed through PCI-DSS compliant third-party payment gateways.
• Verification Documents: During KYC (Know Your Customer) verification, you submit copies of your Indonesian National ID (KTP), proof of address (utility bills, bank statements), and selfie photographs holding your ID. These documents are stored securely and used solely for identity verification and regulatory compliance.
• Communication Records: When you contact customer support via live chat, email, or WhatsApp, we retain records of your communications to improve service quality and resolve disputes.

2.2 Information Collected Automatically

When you access and use arta4d services, we automatically collect certain technical and behavioral information:

• Device Information: IP address, device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features accessed, games played, bets placed, deposit and withdrawal transactions, time spent on platform, clickstream data, and navigation patterns within the arta4d website.
• Location Data: We collect your IP-based geolocation to verify that you are accessing our services from within permitted jurisdictions and to comply with regional gambling regulations. We do not collect precise GPS location data.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance user experience, remember your preferences, maintain login sessions, and analyze platform performance. See Section 8 for detailed cookie information.
• Gaming Activity: Detailed records of your gaming sessions, including games played, bet amounts, winnings/losses, bonus utilization, active promotions, RTP (Return to Player) statistics, and game session durations.

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Results from third-party KYC and anti-money laundering (AML) verification services that cross-reference your documents against government databases and watchlists.
• Fraud Prevention Partners: Risk assessment data from fraud detection services that help us identify suspicious account activity, duplicate accounts, and potential security threats.

3. How We Use Your Information

3.1 Service Provision and Account Management

We use your personal information to:

• Create and maintain your arta4d account, including identity verification and age validation (21+ requirement).
• Process deposits, withdrawals, and internal fund transfers between your account wallets (main wallet, bonus wallet, etc.).
• Enable access to games, sports betting markets, live casino, and other gaming products offered by arta4d.
• Calculate and credit winnings, deduct losses, apply bonus terms, and manage your account balance accurately.
• Respond to customer support inquiries, technical issues, and account-related questions via live chat, email, or WhatsApp.
• Send essential service communications such as account verification confirmations, transaction receipts, withdrawal approvals, security alerts, and terms updates.

3.2 Legal and Regulatory Compliance

We process your personal data to comply with legal obligations:

• Verify your identity, age (minimum 21 years), and residency in Indonesia as required by gaming regulations.
• Conduct KYC (Know Your Customer) and AML (Anti-Money Laundering) checks to prevent fraud, money laundering, terrorism financing, and other illegal activities.
• Maintain transaction records, audit trails, and customer identification documents as mandated by international gaming licenses and Indonesian financial regulations.
• Report suspicious transactions to relevant authorities and cooperate with law enforcement investigations when legally required.
• Enforce our Terms & Conditions, detect and prevent terms violations, identify duplicate accounts, and investigate bonus abuse or fraudulent activity.

3.3 Marketing and Promotions (With Your Consent)

Subject to your marketing preferences, we may use your information to:

• Send promotional emails about new games, bonus offers, tournaments, cashback programs, VIP rewards, and special events relevant to Indonesian players (BRI Liga 1 promotions, Indonesian Independence Day specials, etc.).
• Display personalized game recommendations, slot gacor highlights, and featured bandar bola markets based on your gaming history and preferences.
• Notify you of birthday bonuses, loyalty tier upgrades, and exclusive VIP member benefits.

You can opt out of marketing communications at any time by clicking "Unsubscribe" in our emails or adjusting your communication preferences in your account settings. Note that you cannot opt out of essential service communications (transaction confirmations, security alerts, terms updates).

3.4 Platform Improvement and Analytics

We analyze aggregated and anonymized data to:

• Monitor platform performance, identify technical bugs, optimize load times, and improve mobile responsiveness.
• Understand user behavior patterns, popular games, peak playing hours, and conversion funnels to enhance user experience.
• Develop new features, game categories, and payment methods tailored to Indonesian player preferences.
• Test and refine our responsible gaming tools (deposit limits, session timers, self-exclusion features) to maximize their effectiveness.

3.5 Security and Fraud Prevention

We use your information to protect our platform and users:

• Detect and prevent unauthorized account access, identity theft, payment fraud, and account takeover attempts.
• Identify duplicate accounts, bonus abuse schemes, collusion between players, and manipulation of game outcomes.
• Monitor unusual betting patterns, high-risk transactions, and activities that may violate our Terms & Conditions.
• Implement IP address blocking, device fingerprinting, and behavioral analytics to maintain platform integrity.

4. Legal Basis for Processing (GDPR and Indonesian Law)

We process your personal data based on the following legal grounds:

• Contract Performance: Processing is necessary to fulfill our contractual obligations under the arta4d Terms & Conditions, including account creation, payment processing, and service delivery.
• Legal Obligation: We are required by law to verify your identity, age, and source of funds to comply with AML/CTF regulations and gaming licensing requirements.
• Legitimate Interests: We have legitimate business interests in preventing fraud, maintaining platform security, improving our services, and communicating with customers about their accounts.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you can withdraw at any time without affecting our core services.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We share your personal information with trusted third-party service providers who assist us in operating the arta4d platform:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers (OVO, DANA, GoPay, etc.) receive your payment information to process deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Game Providers: Slot game studios, live casino providers, and sports data feeds may receive anonymized gameplay data for analytics and fair play monitoring.
• Identity Verification Services: Third-party KYC/AML providers access your submitted documents to verify your identity against government databases and international watchlists.
• Cloud Hosting and Data Storage: We use secure cloud infrastructure providers to host our platform and store encrypted data backups.
• Customer Support Tools: Live chat software and ticketing systems process your communications with our support team.
• Analytics and Marketing Platforms: Anonymized or aggregated data may be shared with analytics tools to measure campaign performance and user engagement.

All third-party service providers are contractually obligated to maintain the confidentiality and security of your data. They are prohibited from using your information for their own purposes or sharing it with other parties without our authorization.

5.2 Legal Disclosures

We may disclose your personal information when required by law or to protect our legal rights:

• In response to valid court orders, subpoenas, or legal processes issued by Indonesian or international courts.
• To comply with government investigations, regulatory audits, or requests from law enforcement agencies.
• To report suspicious transactions to financial intelligence units as mandated by AML/CTF regulations.
• To enforce our Terms & Conditions, investigate fraud or terms violations, and protect arta4d's intellectual property rights.
• To protect the safety, rights, or property of arta4d, our employees, users, or the public (e.g., preventing threats of violence or illegal activity).

5.3 Business Transfers

If arta4d undergoes a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

5.4 No Selling of Personal Data

arta4d does not sell, rent, or trade your personal information to third parties for their marketing purposes. Any data sharing described above is solely for operational, legal, or security purposes necessary to provide our services.

6. Data Security Measures

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by SSL/TLS encryption (minimum 256-bit). Sensitive data stored in our databases (passwords, payment details) is encrypted at rest using AES-256 encryption.
• Access Controls: Employee access to personal data is restricted on a need-to-know basis. Only authorized personnel with legitimate business reasons can access customer information. All access is logged and monitored.
• Network Security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and DDoS mitigation services. Regular security audits and penetration testing are conducted by independent cybersecurity firms.
• Secure Data Centers: Customer data is stored in ISO 27001-certified data centers with physical security controls including 24/7 surveillance, biometric access, and redundant power/cooling systems.
• Regular Backups: Encrypted data backups are maintained in geographically separate locations to ensure business continuity and disaster recovery capabilities.
• Payment Security: Our payment processors are PCI-DSS Level 1 certified. We do not store full credit/debit card numbers on our servers; payment card data is tokenized through secure payment gateways.
• Employee Training: All arta4d staff undergo mandatory data protection and security awareness training. Confidentiality agreements are signed by all employees and contractors.

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account password and must notify us immediately if you suspect unauthorized access to your account.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

• Active Accounts: Personal data of active accounts is retained for the duration of your relationship with arta4d plus any additional period required by law.
• Closed Accounts: After voluntary account closure, we retain your data for up to 7 years to comply with Indonesian financial recordkeeping requirements, tax regulations, and AML/CTF obligations. KYC documents and transaction records must be maintained for regulatory audit purposes.
• Marketing Data: If you unsubscribe from marketing communications, we will remove your email from promotional lists within 10 business days but may retain a record of your opt-out preference to honor your request.
• Legal Holds: Data may be retained longer if required by ongoing legal proceedings, regulatory investigations, or disputes.

After the retention period expires, your personal information is securely deleted or anonymized such that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the arta4d website. They enable us to recognize your browser, remember your preferences, and provide personalized experiences across sessions.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for basic website functionality, including login session management, security features, and load balancing. These cookies cannot be disabled without breaking core functionality.
• Performance Cookies: Collect anonymized data about how visitors use our site (pages visited, time on site, error messages) to help us optimize platform performance.
• Functional Cookies: Remember your preferences such as language settings, currency display (IDR), and game filters to enhance user experience.
• Marketing Cookies: Track your activity across arta4d to deliver personalized promotions and measure advertising campaign effectiveness. These cookies require your consent and can be disabled in your browser or account settings.

8.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies may impair core functionality such as login and payment processing.

To adjust cookie preferences in common browsers:

• Chrome: Settings > Privacy and Security > Cookies and other site data
• Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Edge: Settings > Cookies and site permissions

9. Your Privacy Rights

Under Indonesian data protection regulations and international privacy standards (GDPR where applicable), you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used electronic format within 30 days of your request.
• Right to Rectification: Correct inaccurate or incomplete personal information in your account. You can update most information directly through your account settings or by contacting customer support.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data. This right is subject to legal limitations – we must retain certain data for regulatory compliance (AML/CTF recordkeeping) even after account closure.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances (e.g., while disputing data accuracy or if you object to processing).
• Right to Data Portability: Receive your personal data in a machine-readable format and transmit it to another service provider where technically feasible.
• Right to Object: Object to processing based on legitimate interests (e.g., direct marketing, profiling). We will cease such processing unless we demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on consent (marketing communications, non-essential cookies), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with "PRIVACY REQUEST" in the subject line. We will respond within 30 days and may require identity verification to prevent unauthorized access.

10. Children's Privacy

arta4d services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under the age of 21. Our registration process requires date of birth entry, and our KYC verification confirms age through government-issued identification documents.

If we discover that we have inadvertently collected information from a person under 21 years of age, we will immediately delete that account and purge all associated data from our systems. If you believe a minor has created an account on arta4d, please contact us immediately at [email protected] so we can take appropriate action.

Parents and guardians are encouraged to monitor their children's internet usage and utilize parental control tools to prevent access to gambling websites.

11. International Data Transfers

arta4d operates internationally and may transfer your personal data to countries outside Indonesia for processing and storage. These countries may have different data protection laws than Indonesia. When we transfer data internationally, we ensure adequate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by international data protection authorities.
• Contracts with third-party processors requiring them to maintain equivalent security standards.
• Processing in jurisdictions recognized as providing adequate data protection levels.

By using arta4d services, you consent to the transfer of your information to countries outside Indonesia where necessary to provide our services. We take all reasonable steps to ensure your data receives the same level of protection regardless of location.

12. Changes to This Privacy Policy

arta4d reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations. Material changes will be communicated through:

• Email notification sent to your registered email address at least 30 days before the changes take effect.
• Prominent notice displayed on the arta4d website and upon login to your account.
• Updated "Last Updated" date at the top of this Privacy Policy.

Your continued use of arta4d services after the effective date of the updated Privacy Policy constitutes acceptance of the changes. If you do not agree to the modified policy, you must cease using our services and close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

13. Contact Information

For questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact:

• Data Protection Officer Email: [email protected] (Subject: PRIVACY INQUIRY)
• Customer Support: 24/7 live chat available through the arta4d website
• Response Time: We aim to respond to privacy-related inquiries within 5 business days and resolve issues within 30 days.

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the Indonesian Data Protection Authority or other relevant supervisory authority in your jurisdiction.

By using arta4d services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.