Privacy Policy
pbd4d Data Commitment

Throughout this Privacy Policy, the following terms carry the meanings set out below unless the context clearly requires otherwise.

pbd4d acts as the data controller for all Personal Data collected through the pbd4d platform. As data controller, pbd4d determines the purposes and means by which your Personal Data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

For any questions, requests, or concerns relating to your Personal Data, you may contact the pbd4d Data Protection team directly:

pbd4d collects the minimum Personal Data necessary to operate a safe, compliant, and enjoyable betting platform for players in Indonesia. The categories of data we collect are set out below.

3.1 Registration Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (to verify that you are at least 21 years of age, consistent with our eligibility requirements).
• Valid Indonesian mobile number or email address used as your login identifier.
• Username and hashed password.
• City or region of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Medan).

3.2 KYC and Identity Verification Data

• Scan or photograph of a valid Indonesian National Identity Card (KTP), passport, or driver's licence (SIM).
• Selfie or facial photograph for document-matching purposes.
• Proof of payment method (screenshot or photograph of bank account or e-wallet registered in your name) from providers such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja.

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references (bank account numbers or e-wallet identifiers).
• Transaction history, including betting activity, game results, bonus usage, and balance movements.
• We do not store full bank account numbers or complete card numbers on pbd4d servers; tokenised references provided by our payment processors are used instead.

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser version, and screen resolution.
• Session identifiers, cookies, and similar tracking technologies (see Section 9).
• Log data, including pages visited, time spent, clicks, and error reports, used for platform diagnostics and fraud prevention.

3.5 Communication Data

• Records of your communications with pbd4d support, including live chat transcripts, email correspondence, and any complaint or feedback submitted through the platform.
• Responses to any optional surveys or promotions you choose to participate in.

pbd4d collects Personal Data through the following channels:

1. Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or interact with any feature of the pbd4d platform.
2. Automatically: Through cookies, server logs, and analytics tools as you browse or use the platform (see Section 9 for full details).
3. From Third-Party Processors: Identity verification results from KYC partners, fraud-risk scores from fraud prevention services, and payment confirmation data from bank and e-wallet processors.
4. From publicly available sources: In limited circumstances, pbd4d may verify information you have provided against publicly available records for fraud prevention or compliance purposes.

pbd4d processes your Personal Data only where a lawful basis exists. The table below maps each processing purpose to its legal basis and the categories of data involved.

Where processing is based on consent (e.g., marketing emails or SMS promotions), you may withdraw that consent at any time by contacting support or updating your communication preferences within your Account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

pbd4d does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share Personal Data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Essential Service Providers (Third-Party Processors)

• Payment processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to execute deposit and withdrawal instructions.
• KYC / identity verification providers: Receive identity document images and facial photographs solely for the purpose of verifying your identity and age.
• Fraud prevention and AML services: Receive anonymised or pseudonymised transaction patterns and device fingerprints to detect suspicious activity.
• Cloud infrastructure and hosting providers: Store encrypted platform data in secure data centres on behalf of pbd4d. All such providers are contractually required to maintain data security standards equivalent to or higher than those applied by pbd4d.
• Customer support tools: Live chat and ticketing platform providers may process Communication Data to facilitate support interactions.

6.2 Legal and Regulatory Disclosures

pbd4d may disclose your Personal Data to governmental bodies, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or a lawful request from a competent authority. We will notify you of any such disclosure to the extent permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of pbd4d's business or assets, your Personal Data may be transferred to the acquiring entity. We will provide you with reasonable advance notice of any such transfer and will ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.

pbd4d retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately technically feasible (e.g., data held in encrypted backup archives), the data will be isolated from active processing and deleted at the next scheduled purge cycle.

pbd4d implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our primary security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pbd4d servers.
• AES-256 encryption at rest for sensitive data stored in our databases, including KYC documents and financial records.
• Password hashing using a strong one-way algorithm (bcrypt with salt). pbd4d never stores passwords in plain text and our staff cannot retrieve your password — only reset it.
• Two-factor authentication (2FA) available for Player Accounts and enforced for all staff with access to personal data systems.
• Role-based access controls ensuring that staff members can only access Personal Data to the extent necessary for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems and real-time anomaly monitoring to identify and respond to potential data incidents within minutes.

In the event of a data security breach that is likely to result in a risk to your rights and freedoms, pbd4d will notify affected Players without undue delay and, in any case, within 72 hours of becoming aware of the breach, to the extent technically and operationally feasible.

pbd4d uses cookies and similar technologies (local storage, session tokens) to operate the platform, maintain your login session, detect fraud, and understand how players interact with our services. We do not use advertising cookies or cross-site tracking pixels.

You may manage non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality, including the ability to stay logged in or access personalised features.

pbd4d respects your rights over your own Personal Data. Depending on applicable law and the specific circumstances, you may be entitled to exercise the following rights:

1. Right of Access: You may request a copy of the Personal Data pbd4d holds about you, along with information on how it is processed.
2. Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Some corrections (e.g., name changes) require supporting documentation consistent with KYC standards.
3. Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain data (see Section 7).
4. Right to Restriction of Processing: You may request that pbd4d restrict the active processing of your Personal Data in certain circumstances — for example, while a dispute is being investigated.
5. Right to Data Portability: You may request a copy of your Personal Data in a structured, commonly used, machine-readable format (e.g., CSV) for transfer to another service provider.
6. Right to Object: You may object to processing carried out on the basis of legitimate interest, including direct marketing. Upon receipt of a valid objection to marketing, we will stop sending promotional communications immediately.
7. Right to Withdraw Consent: Where processing is based on consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request". We will respond within 30 calendar days. In some cases we may need to verify your identity before processing your request.

pbd4d operates a strict 21+ only policy. The platform is not intended for, and does not knowingly collect Personal Data from, individuals under the age of 21. Age verification is a mandatory step in our registration and KYC process.

If pbd4d discovers or has reason to believe that Personal Data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and permanently close the associated Account. Any balance held in such an Account will be frozen pending further investigation.

If you are a parent or guardian and believe that your child under 21 may have registered on pbd4d, please contact us immediately at [email protected]. We treat all such reports as high priority.

pbd4d's primary data infrastructure is hosted within data centres serving the Asia-Pacific region. In some cases, Personal Data may be transferred to or processed by Third-Party Processors located outside Indonesia — for example, where a KYC provider or fraud detection service operates data centres in other jurisdictions.

Whenever Personal Data is transferred outside Indonesia, pbd4d ensures that adequate safeguards are in place to protect your data, including:

• Data processing agreements (DPAs) with all Third-Party Processors incorporating standard contractual clauses and data security obligations equivalent to those applied within Indonesia.
• Transfers only to countries or organisations that provide an adequate level of data protection as determined by applicable international data protection standards.
• Encryption of all Personal Data in transit and at rest, regardless of where it is stored or processed.

You may request details of the specific safeguards applied to any cross-border transfer of your Personal Data by contacting our Data Protection team at [email protected].

pbd4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered Players by displaying a prominent notice on the platform and, where possible, by sending a notification to the email address or mobile number registered on your Account.

The date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the pbd4d platform following publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the revised Privacy Policy, you must discontinue use of the platform and contact support to request Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pbd4d handles your Personal Data, please reach out to our Data Protection team using the contact details below. All enquiries are handled in strict confidence.

For Responsible Gaming concerns, deposit limit requests, self-exclusion, or Account closure, please visit our Responsible Gaming page or contact support directly.