Your privacy is fundamental to our service. This Privacy Policy explains how meda4d collects, uses, stores, and protects your personal data when you access our platform. We are committed to transparency and compliance with international data protection standards.
The foundational principles that guide our data protection practices and ensure your personal information remains secure.
We collect only the personal data necessary to provide our services, verify your identity for KYC compliance, and meet our legal obligations. We do not request unnecessary information.
Your data is used strictly for the purposes disclosed at the time of collection: account operation, payment processing, fraud prevention, regulatory compliance, and service improvement.
All personal data is stored on encrypted servers in ISO 27001-certified data centers. KYC documents are encrypted at rest using AES-256 encryption and are accessible only to authorized compliance personnel.
meda4d does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information is never shared with data brokers or advertising networks outside our platform.
You have the right to access, correct, delete, or restrict the processing of your personal data. You may also object to certain processing activities and request data portability in machine-readable format.
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. KYC records are retained for 7 years after account closure per AML regulations.
Quick Summary: This Privacy Policy governs how meda4d handles your personal information. We collect data necessary for account operation, KYC verification, and regulatory compliance. Your data is encrypted, never sold to third parties, and retained only as long as legally required. You have rights to access, correct, and delete your data.
1.1 This Privacy Policy applies to all personal data collected by meda4d (referred to as "we", "us", "our", or "the Company") through the meda4d platform accessible at meda4d.cam, including the website, any associated mobile applications, and related services.
1.2 This Privacy Policy should be read in conjunction with our Terms & Conditions. By registering an account or using the meda4d platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.
1.3 If you do not agree with any provision of this Privacy Policy, you must not access or use the platform.
1.4 This Privacy Policy was last updated on the effective date shown above. We reserve the right to amend this Privacy Policy at any time. Material changes will be communicated to registered users via email.
2.1 For the purposes of applicable data protection law, the data controller responsible for your personal data is meda4d, operating under a Curacao eGaming license.
2.2 The Company is committed to complying with the EU General Data Protection Regulation (GDPR) principles and other internationally recognized data protection standards, even though the Company is not established in the EU.
2.3 For privacy-related inquiries, data subject access requests, or to exercise your privacy rights, please contact our Data Protection Officer at:
3.1 We collect the following categories of personal data:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, KTP (Indonesian National Identity Card) number, photograph on ID document | Account registration, age verification (21+ requirement), KYC compliance, fraud prevention |
| Contact Data | Email address, Indonesian mobile phone number, residential address, postal code, city (e.g., Jakarta, Surabaya, Medan) | Account communication, transaction notifications, promotional offers (opt-in), customer support |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri account numbers), e-wallet IDs (OVO, DANA, GoPay), transaction history, deposit/withdrawal records | Payment processing, withdrawal verification, AML compliance, financial reporting |
| Transaction Data | Deposit amounts, withdrawal requests, wagers placed, game history, togel numbers selected, sports bets, bonus usage, win/loss records | Service provision, game fairness auditing, dispute resolution, responsible gaming monitoring |
| Technical Data | IP address, device type, browser type, operating system, login timestamps, session duration, referral source | Security monitoring, fraud detection, platform optimization, analytics |
| Usage Data | Pages visited, games played, feature interactions, search queries, click patterns, time spent per session | User experience improvement, personalization, product development |
| Marketing Data | Communication preferences, promotional opt-ins/opt-outs, bonus claim history, campaign response data | Personalized marketing (with consent), promotional eligibility determination |
3.2 Special Categories of Data: We do not intentionally collect sensitive personal data such as religious beliefs, political opinions, or health information. If such data is inadvertently disclosed to us (e.g., in free-text support messages), we will handle it with heightened confidentiality and delete it as soon as practically possible unless legally required to retain it.
4.1 Direct Collection: Most personal data is collected directly from you when you:
4.2 Automated Collection: We automatically collect technical and usage data through:
4.3 Third-Party Sources: In limited circumstances, we may receive data from:
5.1 We process your personal data for the following purposes:
(a) Account Management & Service Provision
(b) Legal & Regulatory Compliance
(c) Customer Support
(d) Marketing & Communication (with your consent)
Marketing Opt-Out: You may unsubscribe from promotional communications at any time by clicking the "Unsubscribe" link in any marketing email or by contacting our support team. Transactional emails (withdrawal confirmations, KYC requests) are not affected by marketing opt-outs and will continue as necessary for account operation.
(e) Platform Improvement & Security
(f) Responsible Gaming
6.1 Under GDPR principles, we process your personal data based on the following legal grounds:
7.1 meda4d does not sell your personal data. We share data with third parties only in the following limited circumstances:
(a) Payment Processors
To process deposits and withdrawals, we share necessary financial data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay). These processors receive only the information required to complete the transaction (account holder name, account number, transaction amount) and are contractually obligated to protect this data.
(b) Game Providers
When you play games supplied by third-party studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft), your gameplay data (game rounds, bet amounts, outcomes) is shared with those providers for the purpose of operating the game. These providers are data processors acting on our instructions and are bound by confidentiality obligations.
(c) KYC & Identity Verification Services
We use specialized third-party services to verify the authenticity of Indonesian KTP documents and detect forged identity cards. These services receive copies of your ID documents and photographs solely for verification purposes and delete them after processing, typically within 30 days.
(d) Fraud Detection & Security Tools
We employ fraud detection platforms that analyze login patterns, device fingerprints, and IP addresses to identify collusion, bonus abuse, and account takeover attempts. These platforms process technical data but do not receive identity data unless a fraud case requires manual review.
(e) Cloud Infrastructure Providers
Our platform is hosted on cloud servers provided by ISO 27001-certified data centers. These infrastructure providers have access to encrypted data at rest but are contractually prohibited from accessing, using, or disclosing it except as necessary to provide hosting services.
(f) Legal & Regulatory Authorities
We may disclose personal data when required by law, including to:
7.2 No Marketing Data Sales: We do not share your data with advertising networks, data brokers, or third-party marketers. Promotional emails are sent exclusively by meda4d using our internal mailing system.
8.1 As an internationally licensed platform serving Indonesian players, your personal data may be transferred to and processed in jurisdictions outside Indonesia, including Curacao (where the Company is licensed) and the locations of our cloud hosting providers.
8.2 When transferring data internationally, we implement appropriate safeguards to ensure your data receives an equivalent level of protection, including:
8.3 By using the meda4d platform, you acknowledge and consent to the international transfer of your data as described in this section.
9.1 We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure:
9.2 Despite these measures, no data transmission over the internet is entirely secure. You are responsible for maintaining the confidentiality of your login credentials and must notify us immediately if you suspect unauthorized account access.
10.1 We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods are as follows:
10.2 After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with you.
11.1 Under applicable data protection law (including GDPR principles), you have the following rights regarding your personal data:
(a) Right of Access
You may request a copy of the personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format (typically PDF or CSV) within 30 days of your request.
(b) Right to Rectification
If your personal data is inaccurate or incomplete, you may request that we correct or update it. Note that certain data (e.g., name, date of birth) cannot be changed after KYC verification is completed without re-verification.
(c) Right to Erasure ("Right to be Forgotten")
You may request deletion of your personal data in the following circumstances:
Erasure requests are subject to our legal retention obligations (e.g., KYC records must be retained for 7 years). We will anonymize rather than delete data where full deletion would violate legal requirements.
(d) Right to Restriction of Processing
You may request that we suspend processing of your data in certain circumstances, such as while we verify the accuracy of disputed data or assess whether our legitimate interests override your objection to processing.
(e) Right to Object
You may object to processing based on legitimate interests (e.g., direct marketing). We will cease processing unless we demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to direct marketing at any time.
(f) Right to Data Portability
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your data to you or transmit it to another service provider in a portable format.
(g) Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
(h) Right to Lodge a Complaint
If you believe we have violated your data protection rights, you may lodge a complaint with the Curacao Data Protection Authority or the supervisory authority in your country of residence.
11.2 How to Exercise Your Rights: To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days. We may request additional identity verification to prevent unauthorized access to your data.
12.1 The meda4d platform uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and provide personalized content.
12.2 What Are Cookies? Cookies are small text files stored on your device by your web browser. They allow the website to recognize your device on subsequent visits and remember your preferences.
12.3 Types of Cookies We Use:
12.4 Managing Cookies: You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from using certain platform features. Most browsers accept cookies by default; consult your browser's help documentation to learn how to adjust cookie settings.
12.5 Third-Party Cookies: Game providers (Pragmatic Play, Evolution Gaming) may set cookies to deliver their games. These are governed by the respective provider's privacy policy.
13.1 The meda4d platform is intended exclusively for individuals aged 21 years or older. We do not knowingly collect personal data from persons under 21.
13.2 If we discover that we have inadvertently collected data from a minor, we will immediately delete that data and close the associated account. No refunds of deposits will be provided if an account is closed due to underage use.
13.3 Parents or guardians who believe their child has provided personal data to meda4d should contact us immediately at [email protected] with the subject line "Underage Account Report".
14.1 We reserve the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features.
14.2 Material changes will be communicated to registered users via email at least 14 days before the new policy takes effect. The current version of this Privacy Policy, with its effective date, is always accessible on the platform.
14.3 Continued use of the platform after the effective date of a revised Privacy Policy constitutes acceptance of the changes. If you do not accept the revised policy, you must cease using the platform and may request account closure.
15.1 For privacy-related questions, data subject access requests, or to exercise your rights under this Privacy Policy, please contact:
15.2 We will acknowledge your request within 48 hours and provide a substantive response within 30 days. Complex requests may require an additional 60 days; we will notify you if an extension is necessary.
Identity Verification: To protect your privacy, we may request additional identity verification before processing data access or deletion requests. This typically involves confirming your registered email address and providing your account username or the last four digits of your registered bank account.
Our team is here to help you understand how your data is protected. You can also review our Terms & Conditions for additional legal information, or visit our FAQ for quick answers to common questions.