Privacy Policy

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "atta4d", "we", "us", or "our" refers to the operator of the atta4d platform accessible at https://atta4d.cam and all affiliated entities responsible for data processing.
• "Platform" refers to the atta4d website, all associated mobile-optimized pages, game interfaces, and ancillary digital services.
• "User", "you", or "your" refers to any individual who accesses, browses, registers on, or uses the Platform in any capacity.
• "Personal Data" refers to any information that identifies or could reasonably be used to identify a natural person, either directly or in combination with other data held by atta4d.
• "Processing" refers to any operation performed on Personal Data, including collection, recording, storage, organization, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" refers to atta4d in its capacity as the entity that determines the purposes and means of Processing your Personal Data.
• "Cookies" refers to small text files placed on your device by the Platform to recognize your browser, store session information, and improve your experience.
• "KYC" (Know Your Customer) refers to the identity verification process through which atta4d confirms a User's identity, age, and eligibility.
• "Third-Party Service Provider" refers to any external entity that processes Personal Data on behalf of atta4d under a contractual data processing agreement.

2. Data We Collect

atta4d collects the following categories of Personal Data in the course of providing its services:

2.1 Registration Data

When you create an account, we collect your full legal name, date of birth, residential address in Indonesia, email address, mobile telephone number, and your chosen account username. This data is required to establish and manage your account.

2.2 Identity Verification (KYC) Data

To comply with our age verification and anti-fraud obligations, we collect a clear copy of your KTP (Kartu Tanda Penduduk) — Indonesia's national identity card — and, where required, a selfie photograph holding your KTP. This data is used exclusively for identity verification and fraud prevention purposes.

2.3 Financial Data

To process deposits and withdrawals, we collect the name of your bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, or your registered e-wallet provider such as OVO, DANA, GoPay, ShopeePay, or LinkAja), your account name as registered with that bank, and your account number. We do not store complete card numbers or online banking passwords.

2.4 Transaction Data

We maintain a full record of all financial transactions associated with your account, including deposits, withdrawals, bonus credits, wager placements, game outcomes, and account balance history. This data is retained for regulatory compliance and dispute resolution purposes.

2.5 Technical and Usage Data

We automatically collect certain technical data when you access the Platform, including your IP address, device type and operating system, browser type and version, referring URL, pages visited, time spent on each page, and clickstream data. This data is used to maintain platform security, optimize performance, and detect fraudulent access patterns.

2.6 Communications Data

We retain records of all communications between you and atta4d's support team, including live chat transcripts, email correspondence, and any documents or screenshots submitted in connection with a support request or complaint.

2.7 Responsible Gaming Data

If you use atta4d's responsible gaming tools — such as deposit limits, loss limits, session time controls, or self-exclusion — we record the settings you have applied and the dates on which changes were made. This data is used to enforce your chosen restrictions and to monitor for signs of problematic gambling behavior in line with our duty of care.

3. How We Collect Data

atta4d collects Personal Data through the following channels:

• Directly from you when you register an account, complete KYC verification, make a deposit or withdrawal request, contact support, or participate in a promotion.
• Automatically through cookies, web analytics tools, server logs, and device fingerprinting technologies as you interact with the Platform.
• From third-party service providers such as payment processors, fraud detection services, and identity verification agencies, who may share data with us to facilitate transactions or fulfill compliance obligations.
• From public sources such as publicly available government registers or sanctions screening databases, where atta4d has a legal obligation to check for prohibited persons or entities.

4. Purpose of Processing

atta4d processes your Personal Data for the following defined purposes:

Purpose	Data Categories Used
Account creation and management	Registration data, technical data
Age and identity verification (KYC)	KYC data, registration data
Processing deposits and withdrawals	Financial data, transaction data, KYC data
Fraud prevention and platform security	Technical data, transaction data, KYC data
Providing customer support	Registration data, communications data, transaction data
Responsible gaming compliance	Responsible gaming data, transaction data
Marketing and promotional communications	Registration data, transaction data (with your consent)
Platform improvement and analytics	Technical data, usage data (anonymized where possible)
Legal and regulatory compliance	All categories, as required by applicable law

5. Legal Basis for Processing

atta4d processes your Personal Data on one or more of the following legal grounds:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration (e.g., account management, payment processing).
• Legitimate interests: Processing that is necessary for atta4d's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements and age verification mandates.
• Your consent: Where you have given explicit permission for processing, such as opting in to receive marketing communications or agreeing to share data with a specific third party.

6. Data Sharing & Disclosure

atta4d does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your data with the following categories of third parties under strict contractual safeguards:

6.1 Payment Service Providers

To process deposits and withdrawals, we share necessary financial data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These entities process data solely to execute the transaction and are bound by their own privacy policies and Indonesian banking regulations.

6.2 Identity Verification Services

KYC data may be shared with specialized identity verification and fraud detection service providers who verify the authenticity of your submitted documents and check against sanctions lists and fraud databases.

6.3 Game Providers

Your username, game selections, wager history, and session data may be shared with third-party game studio partners (e.g., Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) to deliver live casino games, slots, and other content. These providers process data under data processing agreements and cannot use your data for independent purposes.

6.4 Legal and Regulatory Authorities

We may disclose your Personal Data to law enforcement agencies, courts, regulatory bodies, or government authorities where required by law, court order, or legal process, or where disclosure is necessary to protect atta4d's legal rights or prevent illegal activity.

6.5 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections set out in this Privacy Policy. You will be notified of any such transfer.

7. Data Retention

atta4d retains your Personal Data for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations:

• Active account data: Retained for the duration of your account's active status and for a period of 7 years following account closure to comply with financial record-keeping obligations and to resolve any disputes that may arise post-closure.
• KYC documents: Retained for 7 years following account closure in line with anti-money laundering regulations.
• Transaction records: Retained for 7 years following the transaction date, as required by Indonesian financial regulations.
• Communications data: Support chat and email correspondence retained for 3 years to address follow-up queries and improve service quality.
• Marketing consent records: Retained for the duration of your consent and for 2 years thereafter to demonstrate compliance with consent requirements.
• Technical logs: IP address logs and access records retained for 90 days for security monitoring; anonymized thereafter for statistical purposes.

Data that is no longer required is securely deleted or anonymized in accordance with our data retention schedule.

8. Data Security

atta4d employs industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Stored data is encrypted at rest using AES-256 encryption.
• Access controls: Personal Data is accessible only to authorized atta4d staff and third-party processors who require access to perform their duties. All access is logged and monitored.
• Secure servers: Data is stored on access-controlled servers located in secure data centers with physical security measures including biometric access, 24/7 surveillance, and fire suppression systems.
• Regular audits: Our security infrastructure undergoes periodic penetration testing and vulnerability assessments conducted by independent third-party security firms.
• Incident response: atta4d maintains a documented data breach response protocol. In the event of a breach that poses a risk to your rights, we will notify you and relevant authorities within 72 hours of detection.

While we take every reasonable precaution to protect your data, no internet-based system is entirely impervious to attack. You are responsible for maintaining the security of your account credentials and for promptly notifying us of any suspected unauthorized access.

9. Cookies & Tracking Technologies

atta4d uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that enable us to recognize your browser and remember your preferences.

Types of Cookies We Use:

• Essential cookies: Required for the Platform to function properly. These enable core features such as login sessions, account access, and secure transactions. These cookies cannot be disabled without severely impairing functionality.
• Performance cookies: Collect anonymous data about how you use the Platform, including pages visited, time on site, and navigation paths. This data helps us optimize performance and user experience.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits. These cookies enhance usability but are not strictly necessary.
• Analytics cookies: Used by third-party analytics services (e.g., Google Analytics) to generate aggregated reports on Platform traffic and user behavior. Data is anonymized and cannot identify you personally.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from using certain features of the Platform. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation.

10. International Data Transfers

atta4d's primary data processing operations are conducted within secure data centers. However, some third-party service providers (such as global payment processors, game studios, and cloud infrastructure providers) may store or process your Personal Data in jurisdictions outside Indonesia. Where data is transferred internationally, atta4d ensures that:

• The receiving jurisdiction provides an adequate level of data protection as determined by internationally recognized standards, or
• The transfer is governed by Standard Contractual Clauses or equivalent contractual safeguards that impose data protection obligations on the receiving party equivalent to those under this Privacy Policy.

You have the right to request information about the safeguards in place for any international transfers of your Personal Data by contacting our support team.

11. Protection of Minors

atta4d strictly prohibits access by persons under the age of 21 years. We do not knowingly collect or process Personal Data from minors. Our registration process requires date of birth verification, and we enforce mandatory KYC to confirm age eligibility.

If we become aware that an individual under 21 has registered an account, we will immediately suspend the account, void all transactions, and delete the associated Personal Data. Parents or guardians who believe their child has accessed atta4d should contact our support team immediately at the email address listed in Section 15 of this Privacy Policy.

12. Your Privacy Rights

Under applicable data protection principles, you have the following rights with respect to your Personal Data:

To exercise any of these rights, contact our Data Protection team at the email address provided in Section 15. We will respond to verified requests within 30 days. In certain circumstances, we may be legally required to refuse a request (e.g., where data must be retained to comply with financial regulations or to defend legal claims).

13. Third-Party Services

The Platform may contain links to third-party websites, payment platforms, or social media channels that are not controlled by atta4d. This Privacy Policy applies solely to data collected by atta4d. We are not responsible for the privacy practices of third-party sites. When you click a link to a third-party service, you leave the atta4d Platform and become subject to that third party's privacy policy. We encourage you to review the privacy policies of any third-party services you access.

14. Policy Amendments

atta4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. Material changes will be notified to registered Users via email at least 14 days before the new policy takes effect. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of the Platform after the effective date of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the amended policy, you must cease using the Platform and may request account closure and data deletion subject to our legal retention obligations.

15. Contact & Complaints

For questions, concerns, or complaints regarding this Privacy Policy, the processing of your Personal Data, or to exercise any of your privacy rights, please contact atta4d's Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Inquiry" or "Data Protection Request" to ensure your message is routed to the appropriate team.
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days and to complete data subject rights requests within 30 days of receipt of a verified request.

If your complaint is not resolved to your satisfaction through our internal process, you have the right to lodge a complaint with a recognized data protection supervisory authority in your jurisdiction.