Privacy Policy

1. Introduction

Welcome to the gaya4 Privacy Policy. This document describes how gaya4 ("we", "us", "our", "Platform") collects, uses, stores, shares, and protects personal information from users ("you", "your", "Player") accessing our online gaming platform at https://gaya4.cam and through our mobile applications. We are committed to safeguarding your privacy and maintaining the confidentiality of your personal data in accordance with international data protection standards and best practices applicable to online gaming operations serving Indonesian players.

By creating an account with gaya4, accessing our website, using our mobile applications, or engaging with any of our gaming services including live casino, sports betting, slot games, togel lottery, and other entertainment products, you acknowledge that you have read, understood, and consent to the data collection, processing, and usage practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you must immediately cease using our services and may not register an account with gaya4.

2. Information We Collect

gaya4 collects various types of information necessary to provide secure gaming services, comply with legal and regulatory requirements, prevent fraud, and enhance your user experience. The categories of information we collect include:

2.1 Account Registration Information

When you create a gaya4 account, we collect the following mandatory information:

• Personal Identification: Full legal name (as it appears on your Indonesian identity card / KTP), date of birth, gender, and nationality
• Contact Information: Email address, mobile phone number, and residential address (street address, city, province, postal code)
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals, e-wallet identifiers (OVO, DANA, GoPay account information)

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and responsible gaming requirements, we collect identity verification documents including:

• Scanned copy or photograph of your valid Indonesian identity card (Kartu Tanda Penduduk / KTP) showing your full name, date of birth, photograph, and ID number
• Proof of address documents such as utility bills, bank statements, or government correspondence dated within the last 3 months
• Bank account verification documents including bank statements or account verification letters to confirm ownership of withdrawal accounts
• Additional documentation requested for enhanced due diligence, such as proof of funds source for large deposits or transactions

2.3 Transaction and Gaming Data

We automatically collect and record information about your gaming activity and financial transactions, including:

• Deposit and withdrawal records (amount, date, time, payment method, transaction status)
• Betting history and wagering activity (game type, bet amount, win/loss outcomes, timestamps)
• Bonus claims and promotional activity (bonus type, wagering progress, expiration dates)
• Account balance changes and transaction ledger entries
• Customer support interactions (chat transcripts, email correspondence, issue resolution history)

2.4 Technical and Usage Data

When you access gaya4 services, our systems automatically collect technical information to ensure platform security and improve user experience:

• Device Information: Device type (smartphone, tablet, desktop), operating system (iOS, Android, Windows, macOS), browser type and version, screen resolution, device identifiers
• Connection Data: IP address, geographic location (country, city), internet service provider, network type (WiFi, cellular)
• Usage Analytics: Pages visited, features accessed, time spent on platform, navigation patterns, button clicks, search queries
• Cookies and Tracking: Session cookies, authentication tokens, preference cookies, analytics cookies (see Section 8 for detailed cookie policy)

3. How We Use Your Information

gaya4 uses the collected information for the following legitimate business purposes necessary to operate a secure, compliant online gaming platform:

3.1 Service Delivery and Account Management

• Creating and maintaining your gaming account
• Processing deposits, withdrawals, and internal fund transfers
• Enabling access to games, sports betting markets, and platform features
• Recording game outcomes, calculating winnings, and updating account balances
• Providing customer support and responding to inquiries
• Sending important account notifications (transaction confirmations, balance updates, security alerts)

3.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement) through KYC procedures
• Preventing underage gambling and ensuring eligibility to use gaming services
• Detecting and preventing fraud, money laundering, and other criminal activities
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Maintaining transaction records as required by financial regulations
• Responding to legal requests from law enforcement or regulatory authorities

3.3 Security and Fraud Prevention

• Monitoring for suspicious activity, unauthorized access attempts, and account takeover
• Detecting bonus abuse, collusion, cheating, and terms violations
• Analyzing betting patterns to identify potential match-fixing or insider trading
• Implementing security measures like two-factor authentication and device fingerprinting
• Protecting against DDoS attacks, hacking attempts, and platform vulnerabilities

3.4 Platform Improvement and Analytics

• Analyzing user behavior to optimize interface design and user experience
• Identifying popular games, features, and betting markets to inform content strategy
• Conducting A/B testing to improve conversion rates and platform performance
• Generating aggregated statistical reports and business intelligence
• Developing new products, features, and services based on user preferences

3.5 Marketing and Communications

With your consent, we may use your contact information to send promotional communications including:

• Bonus offers, free spins, and cashback promotions tailored to your gaming activity
• Newsletters about new games, platform updates, and feature launches
• Special event promotions tied to major sporting events (FIFA World Cup, Champions League, BRI Liga 1 finals)
• VIP program benefits and exclusive offers for high-tier loyalty members

You may opt out of marketing communications at any time through account settings or by contacting customer support. Note that opting out does not affect transactional or service-related messages necessary for account operation.

4. Data Sharing and Disclosure

gaya4 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with trusted service providers and in certain circumstances as described below:

4.1 Service Providers and Business Partners

We share information with third-party service providers who assist in operating our platform, subject to strict confidentiality agreements:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) for processing deposits and withdrawals
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other software suppliers who provide gaming content
• Identity Verification Services: KYC verification vendors who authenticate identity documents and perform age verification checks
• Customer Support Tools: Live chat software, email service providers, and ticketing systems used to deliver support services
• Analytics Platforms: Web analytics services that help us understand user behavior and platform performance
• Security Services: Fraud detection systems, DDoS protection providers, and cybersecurity consultants

4.2 Legal Obligations and Enforcement

We may disclose your information when required by law or to protect legitimate interests:

• In response to valid legal requests from law enforcement agencies, courts, or government authorities
• To comply with regulatory requirements imposed by gaming licensing authorities
• To investigate suspected fraud, money laundering, or other criminal activity
• To enforce our Terms and Conditions and protect the rights, property, or safety of gaya4, our users, or the public
• In connection with business transactions such as mergers, acquisitions, or asset sales (with notification to affected users)

4.3 Consent-Based Sharing

We may share your information with additional parties if you provide explicit consent, such as participating in third-party sponsored promotions or requesting services from partners.

5. Data Security Measures

gaya4 implements comprehensive technical, administrative, and physical security controls to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

Security Layer	Protection Measures
Encryption	256-bit SSL/TLS encryption for all data transmission; AES-256 encryption for stored sensitive data including passwords and financial information
Access Controls	Role-based access restrictions; multi-factor authentication for staff; regular access audits; immediate deactivation of terminated employee accounts
Infrastructure	Firewalls, intrusion detection systems, DDoS mitigation; secure data centers with 24/7 monitoring; regular vulnerability scanning and penetration testing
Data Segregation	Player funds held in segregated bank accounts; database partitioning; separate production and development environments
Monitoring	Real-time security monitoring; automated fraud detection; login anomaly alerts; suspicious transaction flagging

Despite our robust security measures, no electronic transmission or storage system is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and should immediately notify us of any unauthorized account access.

6. Data Retention

gaya4 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Account information, transaction history, and gaming records are retained for the duration of your active membership plus 5 years after account closure to comply with financial record-keeping regulations
• KYC Documents: Identity verification documents are retained for 7 years after account closure as required by anti-money laundering regulations
• Communication Records: Customer support chat transcripts and email correspondence are retained for 3 years for quality assurance and dispute resolution
• Marketing Consent: Marketing preferences are retained until you withdraw consent or close your account
• Technical Logs: Server logs, IP addresses, and technical data are typically retained for 90 days unless required longer for security investigations

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices.

7. Your Privacy Rights

As a gaya4 user, you have the following rights regarding your personal information:

• Access: You may request a copy of all personal information we hold about you. Log in to your account dashboard to view account details, transaction history, and gaming records, or contact support for a comprehensive data export.
• Correction: You have the right to update or correct inaccurate personal information. Update basic details like email address and phone number through account settings. Contact support to update name, address, or banking information (verification may be required).
• Deletion: You may request deletion of your personal information, subject to our legal retention obligations. Account closure requests can be submitted through customer support. Note that we must retain certain records for regulatory compliance even after account closure.
• Restriction: You may request that we limit how we process your data in certain circumstances, such as contesting data accuracy or objecting to processing.
• Portability: You may request a machine-readable copy of your personal data to transfer to another service provider.
• Objection: You may object to processing based on legitimate interests or withdraw consent for marketing communications.
• Automated Decisions: You have the right to request human review of automated decisions that significantly affect you, such as fraud detection systems.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your account details and specific request. We will respond within 30 days and may require identity verification before processing certain requests.

8. Cookies and Tracking Technologies

gaya4 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyze platform usage. A cookie is a small text file stored on your device that allows our website to recognize you on subsequent visits. We use the following types of cookies:

• Essential Cookies: Required for basic platform functionality including account login, session management, security, and transaction processing. These cookies cannot be disabled without severely impacting your ability to use our services.
• Performance Cookies: Collect anonymous usage data to help us understand how users interact with our platform, identify popular features, and detect technical issues. Examples include page load times, error tracking, and navigation patterns.
• Functional Cookies: Remember your preferences and settings such as language selection, currency display format, game filters, and interface customization.
• Analytics Cookies: Used by third-party analytics services like Google Analytics to generate aggregated reports about platform traffic, user demographics, and behavior patterns.

You can manage cookie preferences through your browser settings. However, blocking essential cookies may prevent you from accessing certain platform features or logging into your account. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

9. Third-Party Links and Services

Our platform may contain links to third-party websites, social media platforms, or external services that are not operated by gaya4. We are not responsible for the privacy practices or content of these external sites. When you click on a third-party link or engage with external services, you leave our platform and are subject to the privacy policies of those third parties. We encourage you to review the privacy policies of any website you visit or service you use outside of gaya4.

10. Children's Privacy

gaya4 services are strictly for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process includes age verification, and we require submission of government-issued identification during KYC verification to confirm age eligibility. If we discover that we have inadvertently collected personal information from someone under 21, we will immediately delete that information and terminate the associated account. Parents or guardians who believe their child may have provided personal information to gaya4 should contact us immediately at [email protected].

11. International Data Transfers

Your personal information may be transferred to and processed in countries outside Indonesia where our servers, service providers, or business partners are located. These countries may have different data protection laws than Indonesia. When we transfer your data internationally, we ensure adequate safeguards are in place through contractual agreements, standard data protection clauses, and compliance with international data transfer frameworks to protect your privacy rights.

12. Updates to This Privacy Policy

gaya4 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Material changes will be communicated to users via email notification, prominent website banner, or in-app announcement. The "Last Updated" date at the top of this document indicates when the policy was most recently revised. Your continued use of gaya4 services after policy changes take effect constitutes acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, or if you wish to exercise your privacy rights, please contact our Data Protection Team:

• Email: [email protected] (Data Protection inquiries will be prioritized and responded to within 48 hours)
• Live Chat: Available 24/7 through our platform - select "Privacy & Data Protection" as your inquiry category
• WhatsApp: +62 812 3456 7890 (10 AM - 10 PM WIB for urgent privacy matters)
• Mailing Address: gaya4 Data Protection Officer, Jakarta, Indonesia (full address provided upon request for formal legal correspondence)

We take all privacy concerns seriously and are committed to resolving issues promptly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with relevant data protection authorities in your jurisdiction.