kyt4d Privacy Policy

Introduction & Scope

kyt4d operates as an international entertainment platform offering online sports betting, live casino, slot games, and related services. This Policy governs the processing of personal data in connection with the operation of kyt4d.club and applies to all users regardless of their geographic location, though its primary context is the Indonesian player community served by kyt4d across Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, and all other Indonesian cities where kyt4d is accessed.

kyt4d takes data protection obligations seriously. We process personal data only to the extent necessary to deliver a safe, functional, and compliant gaming service. Where we rely on your consent to process certain categories of data — such as for marketing communications — that consent is freely given, specific, informed, and revocable at any time.

This Policy should be read alongside kyt4d's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to the handling of your account and personal information.

Definitions

The following terms are used throughout this Policy with the meanings assigned below:

Data We Collect

kyt4d collects personal data across several categories, each collected for specific, identified purposes. The full breakdown is set out in the table below.

kyt4d does not collect data beyond what is necessary for the purposes stated above. We do not collect racial or ethnic origin data, political opinions, religious beliefs, trade union membership, health data, or sexual orientation data.

How We Collect Data

kyt4d collects personal data through the following channels:

• Direct submission. Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a promotion.
• Automated technologies. Data collected automatically when you access or use the kyt4d platform — including cookies, server logs, IP address records, device fingerprints, and session analytics. See Section 10 for full details on cookie use.
• Third-party verification services. Identity and document verification data returned by KYC service providers engaged by kyt4d to process document checks on our behalf.
• Payment processors. Transaction confirmation data returned by Indonesian bank transfer systems and e-wallet platforms (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) when you make a deposit or withdrawal.
• Fraud prevention partners. Risk signals and fraud indicators supplied by third-party fraud detection services integrated into kyt4d's platform to protect players and the platform from malicious activity.

Lawful Basis for Processing

kyt4d processes personal data only where a recognised lawful basis applies. The following bases are relied upon:

1. Contractual necessity. Processing required to perform the contract between kyt4d and the player — including account operation, payment processing, game delivery, KYC verification, and withdrawal processing. Without this processing, kyt4d cannot provide its services.
2. Legal obligation. Processing required to comply with applicable legal requirements — including anti-money laundering (AML) obligations, know-your-customer (KYC) regulations, and data retention requirements imposed by financial regulators and law enforcement authorities.
3. Legitimate interests. Processing that kyt4d reasonably requires to operate a safe and efficient platform — including fraud detection, platform security, responsible gaming monitoring, and platform analytics — where those interests are not overridden by the player's privacy rights.
4. Consent. Processing for purposes beyond core service delivery, particularly marketing communications, where kyt4d relies on your explicit, revocable consent. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

How We Use Your Data

The personal data kyt4d holds is used for the following specific purposes:

• Creating and managing your kyt4d Account, including authentication and account security;
• Processing deposits and withdrawals via your registered Indonesian bank account or e-wallet;
• Conducting KYC verification to confirm your identity and age (21+) before activating withdrawal privileges;
• Monitoring transactions and account activity for fraud, money laundering, and bonus abuse;
• Delivering responsible gaming features — including deposit limit enforcement, cooling-off periods, self-exclusion, and session time alerts — and monitoring wagering patterns for early indicators of problem gambling;
• Providing customer support, resolving disputes, and maintaining quality assurance records;
• Personalising your platform experience, including surfacing game recommendations and relevant promotional offers;
• Sending account-related communications — transaction confirmations, security alerts, policy updates — via email or SMS;
• Sending marketing communications about kyt4d promotions, new games, and seasonal offers, where you have provided explicit consent;
• Conducting platform analytics to identify and fix usability issues, optimise game loading performance, and improve the overall user experience;
• Complying with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities.

Data Sharing & Disclosure

kyt4d does not sell personal data. Data is shared with third parties only in the following circumstances, each governed by contractual data processing agreements that bind the recipient to equivalent data protection standards:

1. Payment processors. Financial data — bank account details, transaction amounts, and payer identity — is shared with Indonesian bank transfer intermediaries and e-wallet platforms (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) strictly to process deposits and withdrawals.
2. KYC and identity verification providers. Identity Data and document images are transmitted to third-party KYC service providers engaged by kyt4d to conduct document authenticity checks and age verification. These providers process data only on kyt4d's instruction and do not retain it beyond the verification period.
3. Fraud prevention and AML services. Technical Data and transaction data may be shared with specialist fraud and anti-money laundering detection services to assess risk signals. These services operate under strict data confidentiality agreements.
4. Game studio providers. Usage data relating to game sessions — bet amounts, game round IDs, and outcomes — is transmitted to certified game studio providers (including Evolution Gaming, Pragmatic Play, PG Soft, Microgaming) for the purposes of game delivery, RNG audit, and jackpot administration. Personal identity data is not shared with game studios.
5. Legal and regulatory authorities. kyt4d will disclose personal data to competent authorities where required by a valid legal order, court order, or regulatory demand. kyt4d will, where legally permissible, notify the affected player of any such disclosure request prior to compliance.
6. Business transfers. In the event of a merger, acquisition, or sale of the kyt4d business or its assets, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections continuing to apply.

International Data Transfers

kyt4d operates infrastructure across multiple jurisdictions to ensure platform resilience and low-latency access for Indonesian players. Personal data processed by kyt4d may therefore be stored or accessed from servers located outside Indonesia, including in jurisdictions within Southeast Asia, Europe, or other regions where kyt4d's infrastructure and service partners operate.

Where personal data is transferred outside Indonesia, kyt4d ensures that appropriate safeguards are in place to protect the data, including:

• Contractual clauses requiring the recipient to maintain equivalent data protection standards;
• Technical safeguards, including encryption in transit and at rest, regardless of the storage jurisdiction;
• Access controls limiting personnel access to personal data on a strict need-to-know basis.

By registering a kyt4d Account, you acknowledge that your personal data may be processed outside Indonesia under the safeguards described in this section.

Data Retention

kyt4d retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any legal retention obligations that require longer retention. The following general retention periods apply:

When personal data is no longer required and no legal retention obligation applies, kyt4d securely deletes or anonymises the data such that it can no longer be attributed to an identified individual.

Cookies & Tracking Technologies

kyt4d uses cookies and similar technologies (local storage, session tokens, device fingerprinting) on kyt4d.club to support platform functionality. The categories of cookies deployed are as follows:

• Strictly necessary cookies. Essential to platform operation — these maintain your login session, route requests to the correct server, and preserve your account preferences. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies. Used to remember your language and display preferences, remember your last-used payment method in the Cashier, and personalise your home screen game layout.
• Analytics cookies. Used to collect anonymised aggregate data on how players navigate the platform — which pages are visited most, where users drop off in the registration flow, and how game lobby performance compares across devices. This data is used internally to improve the platform; it is not shared with advertising networks.
• Security cookies. Used to detect suspicious login attempts, flag session anomalies consistent with account takeover attempts, and assist fraud detection systems.

kyt4d does not deploy third-party advertising cookies, retargeting pixels, social media tracking pixels, or any tracking technology designed to follow you across websites outside kyt4d.club.

You can manage or disable cookies via your browser's cookie settings. Disabling strictly necessary cookies will prevent you from logging in or using the kyt4d platform. Disabling analytics or functional cookies will not prevent access to core features but may affect personalisation.

Marketing Communications

kyt4d may send you promotional communications — including offers, bonus announcements, seasonal promotions tied to Indonesian cultural events such as Idul Fitri, Lebaran, Imlek, and Ramadhan, and information about new platform features — only where you have provided explicit opt-in consent during registration or subsequently through your Account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Adjusting your notification preferences in the Account settings dashboard;
• Clicking the "Unsubscribe" link present in every kyt4d marketing email; or
• Contacting kyt4d support and requesting removal from all marketing lists.

Withdrawal of marketing consent does not affect your ability to use the platform and does not constitute account closure. kyt4d will continue to send you transactional and account-related communications (deposit confirmations, withdrawal notifications, security alerts, policy updates) regardless of your marketing preferences — these are not marketing and are necessary for account operation.

Your Data Rights

As a kyt4d player, you hold the following rights in relation to your personal data. These rights may be exercised by contacting the kyt4d support team. We will respond to all data rights requests within 30 calendar days of receipt.

To exercise any of these rights, contact kyt4d support via live chat or by email. Requests must include sufficient information to verify your identity before kyt4d will act on the request. kyt4d does not charge a fee for data rights requests unless they are manifestly unfounded, repetitive, or excessive.

Children & Minors

kyt4d's services are strictly intended for adults aged 21 and over. kyt4d does not knowingly collect, store, or process personal data belonging to individuals under 21 years of age. Age verification is conducted as part of the KYC process for all accounts, and accounts found to belong to individuals under 21 are suspended immediately.

If you are a parent or guardian and believe that a minor in your care has registered a kyt4d account using false age information, please contact kyt4d support immediately. kyt4d will promptly investigate, close the account, void all transactions, and return any deposited funds to the originating payment source.

Security Measures

kyt4d implements a multi-layered security architecture to protect personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• Encryption in transit. All data exchanged between your device and kyt4d's servers is encrypted using 256-bit SSL/TLS. HTTP connections are automatically redirected to HTTPS.
• Encryption at rest. Sensitive personal data fields — including passwords (stored as salted hashes), identity document images, and financial account details — are encrypted at the database level.
• Access controls. Internal access to personal data is restricted to authorised kyt4d personnel on a strict need-to-know basis. All access is logged and periodically audited.
• Two-factor authentication. kyt4d offers optional two-factor authentication (2FA) for all registered accounts. Players are encouraged to enable 2FA via the Account Security settings.
• Intrusion detection. kyt4d's infrastructure is monitored by automated intrusion detection systems that flag anomalous access patterns in real time.
• Penetration testing. kyt4d engages independent security specialists to conduct periodic penetration tests and vulnerability assessments of the platform. Findings are remediated according to a defined severity-based triage process.

Despite these measures, no internet-based system can guarantee absolute security. Players are responsible for maintaining the confidentiality of their kyt4d login credentials and should not share their password with any third party. kyt4d staff will never ask for your password.

Data Breach Procedure

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, kyt4d will:

1. Contain the breach and assess its scope within 24 hours of discovery;
2. Notify affected players by email within 72 hours of confirming that a breach has occurred, setting out the categories of data affected, the likely consequences, and the measures kyt4d is taking in response;
3. Cooperate fully with any applicable regulatory authority's investigation;
4. Conduct a post-incident review and implement remediation measures to prevent recurrence.

Players who suspect that their kyt4d account has been compromised — or who notice unauthorised transactions or login activity — should contact kyt4d support immediately via live chat. The support team is available 24/7 and can place an immediate hold on the Account pending security review.

Third-Party Links

The kyt4d platform does not contain links to third-party websites. All navigation within kyt4d.club remains on the kyt4d domain. This Policy applies exclusively to data processed by kyt4d in connection with kyt4d.club and its associated services. kyt4d bears no responsibility for the privacy practices of any third-party service providers (such as payment processors or KYC verification services) beyond the data processing agreement obligations described in Section 7.

Changes to This Policy

kyt4d may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or platform features. When material changes are made, kyt4d will:

• Post the updated Policy at kyt4d.club/privacy-policy with a revised "Last Updated" date and version number;
• Display a notification on the kyt4d platform homepage for a minimum of 14 days following the update; and
• Where practicable, send a summary of material changes to registered players by email.

Continued use of the kyt4d platform after the effective date of a Policy update constitutes acceptance of the revised Policy. If you do not accept the updated Policy, you should contact kyt4d support to discuss account closure and data deletion options before the update takes effect.

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kyt4d, please contact the data protection team via the channels below. All privacy-related requests are handled by designated personnel separate from the general customer support queue.

Email: [email protected] — mark your message "PRIVACY REQUEST" in the subject line to ensure prompt routing to the data team.

Live Chat: Available 24/7 on every page of kyt4d.club. Tell the support agent that you have a privacy-related request; they will escalate it to the data team within one business hour.

kyt4d will acknowledge all privacy requests within 48 hours and resolve them within 30 calendar days. For complex requests — such as full data access exports or cross-system erasure requests — kyt4d may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason before the initial 30-day period expires.

If you are not satisfied with kyt4d's response to a privacy complaint, you have the right to escalate to a competent data protection supervisory authority in your jurisdiction.