tag4d Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" means the tag4d website at https://tag4d.bio and all associated services, mobile interfaces, APIs, and features.
• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, date of birth, Indonesian National Identity Card (KTP) number, residential address, email address, mobile number, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, consultation, use, disclosure, erasure, and destruction.
• "Controller" means tag4d, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means a third party that processes Personal Data on behalf of tag4d under a data processing agreement.
• "Player" / "You" means any natural person who registers an account, makes a deposit, places a wager, or otherwise uses the Platform.
• "KYC" means Know Your Customer — the identity and age verification procedures described in this policy and in our Terms & Conditions.

2 Data We Collect

tag4d collects Personal Data in several categories, each serving a specific operational or compliance purpose:

2.1 Registration Data

When you create an account, we collect your full legal name, date of birth, residential address in Indonesia, email address, and Indonesian mobile phone number. This information is required to create and administer your account and to comply with our age-verification obligations (21+ only).

2.2 Identity Verification (KYC) Data

To process withdrawals above Rp 500.000 or when required by our compliance program, we collect copies of identity documents such as your Indonesian National Identity Card (KTP), passport, or driving licence. We may also collect proof of address documents such as recent utility bills or bank statements from BCA, BRI, BNI, Mandiri, CIMB Niaga, or other recognised Indonesian financial institutions.

2.3 Financial Data

We collect transaction records — including deposit amounts, withdrawal requests, game wager history, and balance movements — denominated in Indonesian Rupiah (IDR). We collect the name and account reference of the payment method you use (e.g., BCA account name, OVO registered number, DANA registered number). We do not store complete bank account numbers, full card numbers, or CVV codes.

2.4 Technical & Usage Data

When you access the Platform, our servers automatically log your IP address, browser type and version, operating system, referring URL, pages visited, session duration, clickstream data, and device identifiers. This data is used for security monitoring, fraud detection, and to improve Platform performance.

2.5 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including chat transcripts and email correspondence. This allows us to resolve disputes, improve our service quality, and maintain an audit trail.

2.6 Marketing Preferences

We record whether you have opted in or out of receiving promotional communications from tag4d, and which communication channels (email, SMS) you have consented to. We also record the date and method of any consent you provide or withdraw.

3 How We Collect Your Data

tag4d collects Personal Data through the following channels:

• Directly from you: during account registration, KYC submission, deposit and withdrawal requests, support interactions, and when you update your account profile.
• Automatically: through server logs, session tracking technologies, and cookies placed on your device when you visit or use the Platform (see Section 7 for full cookie details).
• From payment processors: when you initiate a deposit or withdrawal, our payment gateway partners (processing transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) may provide transaction confirmation data and payer name verification to us.
• From identity verification services: we may use third-party KYC and document verification providers to cross-check the authenticity of identity documents you submit. These providers process your data strictly under our instruction and under a data processing agreement.
• From fraud prevention services: we may receive signals from fraud intelligence networks to identify suspicious account activity, including IP reputation scores and device fingerprint databases.

4 How We Use Your Data

tag4d uses your Personal Data for the following purposes:

1. Account administration: creating and maintaining your Player account, authenticating logins, and managing account settings and preferences.
2. Service delivery: processing deposits and withdrawals in Indonesian Rupiah, crediting winnings, applying bonuses, and providing access to games including slots, live casino, sportsbook, and togel (Indonesia's traditional numbers lottery).
3. Identity and age verification: confirming that you are a real person, at least 21 years of age, and resident in Indonesia, in compliance with our responsible gaming obligations.
4. Fraud prevention and security: detecting and preventing fraudulent transactions, account takeovers, money laundering, bonus abuse, and other forms of Prohibited Conduct as defined in our Terms & Conditions.
5. Customer support: responding to your enquiries, resolving disputes, and improving the quality of our support team's interactions.
6. Legal and regulatory compliance: maintaining records required by applicable anti-money laundering (AML) regulations and responding to lawful requests from regulatory or law enforcement authorities.
7. Marketing communications: sending you promotional offers, bonus alerts, and product updates via email or SMS — only where you have given your explicit prior consent. You may withdraw this consent at any time.
8. Platform improvement: analysing aggregated and anonymised usage data to identify technical issues, improve navigation, and develop new features that serve our Indonesian player base better.
9. Responsible gaming: monitoring gameplay patterns that may indicate problem gambling behaviour, in order to proactively offer tools such as deposit limits, cooling-off periods, and self-exclusion as described on our Responsible Gaming page.

5 Legal Basis for Processing

tag4d processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: processing that is necessary to perform the contract between you and tag4d — i.e., operating your account, delivering games, and processing financial transactions. Without this processing, we cannot provide the service.
• Legal obligation: processing required to comply with applicable laws, including anti-money laundering regulations and identity verification requirements.
• Legitimate interests: processing for fraud prevention, security monitoring, and Platform improvement, where those interests are not overridden by your rights. We conduct a balancing test before relying on this basis.
• Consent: processing for direct marketing communications. You may withdraw consent at any time by contacting us at [email protected] or via your account settings. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

6 Data Sharing

tag4d does not sell your Personal Data. We share data only in the following limited circumstances:

6.1 Payment Processors

To process your deposits and withdrawals, we share necessary transaction data with payment gateway providers that handle transfers via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers receive only the data required to complete the specific transaction and are contractually prohibited from using it for any other purpose.

6.2 KYC and Identity Verification Providers

We use certified third-party identity verification services to validate KTP documents, passports, and proof-of-address submissions. These providers act as data processors under binding agreements and may not use your data independently of our instructions.

6.3 Game Software Providers

Some game outcomes and session data are processed by licensed game software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers receive only the technical session data required to deliver the game (e.g., bet amounts, game session tokens) and not your full personal profile.

6.4 Legal and Regulatory Disclosure

We may disclose your Personal Data to law enforcement authorities, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of tag4d, our Players, or third parties. We will notify you of any such disclosure to the extent permitted by law.

6.5 Business Transfers

In the event that tag4d undergoes a merger, acquisition, or sale of substantially all of its assets, your Personal Data may be transferred to the acquiring entity. You will be notified via email and a prominent Platform notice at least 30 days before any such transfer, and you will retain the right to request deletion of your data prior to the transfer.

7 Cookies & Tracking Technologies

tag4d uses cookies and similar tracking technologies to operate the Platform and improve your experience. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: essential for the Platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking the Platform.
• Functional cookies: remember your preferences such as preferred language display, notification settings, and last-visited game category. These are not strictly necessary but improve your experience.
• Analytics cookies: collect anonymised data about how Players interact with the Platform — which pages are visited most, where users drop off, and how long sessions last. This data is used in aggregate form only to improve the Platform. We use privacy-respecting analytics tools and do not share this data with advertising networks.
• Security cookies: support our fraud detection systems by recording technical signals such as device fingerprints and login anomalies. These are active on all sessions and cannot be disabled.

You may control non-essential cookies through your browser settings. Note that disabling functional cookies may affect your experience on the Platform. We do not currently use third-party advertising or retargeting cookies.

8 Data Retention

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. The following retention periods apply:

• Active account data (registration details, transaction history, KYC documents): retained for the duration of your account plus five years following account closure, to meet anti-money laundering record-keeping requirements.
• Support communications (chat transcripts, emails): retained for two years from the date of the last interaction in that support thread.
• Technical and log data (IP addresses, session logs): retained for 90 days for security monitoring, after which logs are deleted or anonymised.
• Marketing preference records: retained until you withdraw consent plus one additional year for audit purposes.
• Self-excluded Players: if you exercise the self-exclusion tool, we retain your name and email address indefinitely on a suppression list to prevent re-registration during your exclusion period, in keeping with our responsible gaming obligations.

When data reaches the end of its retention period, it is securely deleted using industry-standard deletion methods or anonymised such that it can no longer be linked to any individual.

9 Security Measures

tag4d implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• AES-256 encryption at rest for all sensitive data stored in our databases, including KYC documents and financial records.
• Multi-factor authentication (MFA) available for Player accounts, and mandatory for all internal staff accessing production systems.
• Role-based access control (RBAC) ensuring that staff can only access the Personal Data categories required for their specific function. Support agents, for example, can view account status but cannot view full KYC document images without a secondary authorisation step.
• Intrusion detection and monitoring: our infrastructure is monitored 24/7 by automated security systems and a dedicated security team. Anomalous behaviour triggers immediate alerts.
• Regular penetration testing: we engage independent security firms to conduct penetration tests of our Platform at least twice per year. Critical findings are remediated within 72 hours.
• Staff training: all tag4d employees handling Personal Data are required to complete data protection and security awareness training annually.

10 Your Rights

As a Player whose Personal Data is processed by tag4d, you hold the following rights. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [Your Account Username]".

• Right of Access: you may request a copy of all Personal Data we hold about you. We will respond within 30 calendar days.
• Right to Rectification: if any of your Personal Data is inaccurate or incomplete, you have the right to request correction. Name changes require updated KYC documentation.
• Right to Erasure ("Right to be Forgotten"): you may request deletion of your Personal Data. We will action this request promptly where no legal or contractual obligation requires us to retain the data. Note that AML regulations require us to retain certain financial records for five years even after account closure.
• Right to Restriction: you may request that we restrict processing of your data while a dispute or rectification request is being resolved.
• Right to Data Portability: you may request that we provide your Personal Data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider.
• Right to Object: you may object to processing based on our legitimate interests or for direct marketing purposes. We will honour all objections to marketing immediately.
• Right to Withdraw Consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

We will not charge a fee for exercising any of these rights unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline the request, explaining our reasons in writing.

11 Minors & Age Verification

tag4d strictly prohibits use of the Platform by anyone under the age of 21. The Platform is not directed at minors and we do not knowingly collect Personal Data from individuals under 21 years of age. During registration, all Players are required to confirm their date of birth, and Players requesting withdrawals are required to submit identity documentation confirming they are at least 21 years old.

If we become aware that Personal Data has been collected from a Player who is under 21, we will immediately suspend that account, void any associated wagers, return any deposits to the originating payment method, and delete the underage Player's Personal Data in accordance with our data retention policy. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected].

12 International Data Transfers

tag4d's primary data infrastructure is hosted in secure data centres within the Asia-Pacific region. However, some of our third-party service providers — including game software studios such as Pragmatic Play, Evolution Gaming, and NetEnt — may process technical session data on servers located outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place, including data processing agreements that impose data protection standards equivalent to those applied domestically.

Financial transaction data processed via Indonesian payment channels (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) is processed within Indonesia by locally licensed payment gateway partners. KYC documentation is processed by identity verification providers bound by strict data localisation requirements under our service agreements.

13 Third-Party Links

The tag4d Platform does not contain links to external third-party websites. All navigation within the Platform leads to pages hosted at https://tag4d.bio. Accordingly, this Privacy Policy applies in full to all pages and services accessible under the tag4d domain. We are not responsible for the privacy practices of any external website that you may navigate to independently of the Platform.

14 Policy Amendments

tag4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, service offerings, or applicable legal requirements. When material changes are made, we will notify registered Players via the email address associated with their account at least 14 calendar days before the changes take effect. The revised policy will also be published on this page with an updated effective date at the top.

Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept the changes, you must cease using the Platform and contact us to close your account and exercise your right to data erasure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tag4d handles your Personal Data, please contact our Data Protection team through the following channels:

• Live Chat: available 24/7 directly on the Platform — the fastest channel for general queries.
• Email: [email protected] — please use the subject line "Privacy Enquiry" for data-related requests. We aim to respond within 4 hours.
• Indonesian-speaking agents are available via live chat 08:00–24:00 WIB daily for Players who prefer to communicate in Bahasa Indonesia.

For formal data rights requests (access, erasure, portability), use the subject line "Data Rights Request — [Your Account Username]" and include a copy of your KTP or other identity document so we can verify your identity before processing the request.