Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

taq4d collects Personal Data in the following categories:

We do not intentionally collect Special Category Personal Data (such as health, racial origin, or religious belief data) unless you voluntarily disclose such information in the context of a responsible gaming self-exclusion request or a support communication. Any such data is handled with heightened confidentiality and is used solely for the purpose for which it was disclosed.

taq4d collects Personal Data through the following channels:

• Direct submission: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or respond to a promotional survey, you provide Personal Data directly to us.
• Automated technical collection: When you browse or interact with the Platform, our servers automatically record Technical Data including your IP address, device identifiers, browser attributes, and session activity. This collection occurs through server logs, cookies, and similar technologies described in Clause 9.
• Third-party sources: We may receive Identity Data and verification outcomes from KYC and anti-fraud service providers when they process documents you have submitted. We may also receive limited Technical Data from payment processors confirming the status of deposit or withdrawal transactions.
• Publicly available sources: In exceptional fraud-investigation circumstances, taq4d may cross-reference Personal Data against publicly available records or sanctions lists maintained by international regulatory bodies.

taq4d processes your Personal Data only for the specific, documented purposes listed below. We do not use your data for purposes incompatible with those originally stated without first obtaining your separate consent or establishing a new lawful basis.

taq4d relies on the following legal bases to process your Personal Data, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform our contract with you — including registering your account, processing transactions in Indonesian Rupiah (IDR/Rp), and delivering gaming services — is lawful on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal obligation: We process Identity Data and Financial Data to meet KYC, anti-money-laundering, and licensing requirements imposed by our international gaming regulator and applicable financial regulations.
• Legitimate interests: We process Technical Data and Gaming Data to protect Platform security, prevent fraud, detect bonus abuse, and improve service quality. These interests are balanced against your privacy rights and do not override them.
• Consent: Where we send you marketing communications about taq4d promotions, seasonal bonus offers (such as those tied to Idul Fitri or Indonesian Independence Day), or new game launches, we do so only where you have given explicit, informed consent. You may withdraw consent at any time by contacting support or updating your Account communication preferences.

taq4d may share Personal Data with the following categories of third party:

• Payment processors and Indonesian banks: To process deposit and withdrawal transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja. These processors receive only the minimum data necessary to execute the specific transaction.
• KYC and identity verification providers: Specialist third-party providers process the identity documents you submit (KTP, passport, SIM) to verify your age and identity on taq4d's behalf. These providers are contractually bound to handle your documents in accordance with strict confidentiality and security standards.
• Game content suppliers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised session tokens and bet identifiers necessary to deliver game content and settle game outcomes. These suppliers do not receive your full identity or financial details.
• Anti-fraud and security partners: taq4d employs third-party fraud detection services that analyse Technical Data (IP address, device fingerprint, behavioural patterns) to identify suspicious activity. These partners process data solely on taq4d's instructions and may not use it for their own purposes.
• Regulatory authorities and law enforcement: We will disclose Personal Data to governmental, regulatory, or law enforcement bodies when required to do so by a valid court order, regulatory direction, or applicable law. taq4d will notify affected Members of such disclosures where legally permitted to do so.
• Corporate successors: In the event of a merger, acquisition, or sale of all or substantially all of taq4d's business assets, Personal Data held on Members may be transferred to the successor entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

All Third-Party Processors engaged by taq4d are subject to written data processing agreements that require them to maintain appropriate technical and organisational security measures and to process Personal Data only on documented instructions from taq4d.

taq4d retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international licensing conditions. The following retention schedule applies:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and business intelligence purposes.

taq4d employs the following technical and organisational measures to protect your Personal Data:

• Transport security: All communication between your device and taq4d's servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit AES encryption. HTTP connections are automatically redirected to HTTPS.
• Password storage: Account passwords are never stored in plain text. They are hashed using the bcrypt algorithm with a per-user salt before storage. taq4d staff cannot retrieve your password; a reset flow is required if it is forgotten.
• Payment data handling: taq4d does not store Indonesian bank account numbers, e-wallet credentials, or any equivalent financial credentials on its own servers beyond the minimum reference required for transaction matching. Full financial account details are tokenised and held exclusively by our PCI-DSS-compliant payment processors.
• Access controls: Internal access to Member Personal Data is restricted to staff with a documented operational need. Access rights are governed by a role-based access control policy and are reviewed quarterly. All staff with data access undergo mandatory data-protection training.
• Infrastructure security: taq4d's servers are hosted in ISO 27001-certified data centres with physical access controls, redundant power, and 24/7 monitoring. Penetration testing is conducted at least annually by an independent qualified assessor.
• Incident response: In the event of a Personal Data breach that is likely to result in risk to your rights or freedoms, taq4d will notify affected Members without undue delay and will report the breach to the relevant supervisory authority in accordance with our licensing obligations.

While taq4d applies rigorous security controls, no system connected to the internet can be guaranteed to be completely immune to attack. You are responsible for maintaining the security of your Account credentials and for notifying taq4d immediately at [email protected] if you suspect unauthorised access to your Account.

taq4d uses cookies and similar client-side storage mechanisms to enable essential Platform functions and to gather aggregate usage analytics. We do not use advertising cookies or share cookie data with ad networks.

You may control non-essential cookies through your browser settings. Disabling preference or analytics cookies will not prevent you from using the Platform, though some personalised features may be unavailable. Disabling essential or security cookies will impair Platform functionality and is not recommended.

As a taq4d Member, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our Data Protection contact at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within two business days and respond substantively within 14 calendar days.

• Right of access: You may request a copy of the Personal Data taq4d holds about you, along with information about how it is processed, stored, and shared.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct or supplement it. You may also update certain details directly within your Account profile.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where you believe we have processed it unlawfully. Erasure requests are subject to our legal retention obligations; we will inform you if a retention obligation prevents full erasure.
• Right to restrict processing: You may request that we limit our use of your Personal Data to storage only, pending resolution of a dispute about its accuracy or the lawfulness of our processing.
• Right to data portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format (JSON or CSV) so that you can transfer it to another service provider.
• Right to object: You may object to our processing of your Personal Data where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

taq4d applies age verification checks at the point of registration and enforces KYC procedures to confirm that Members meet the 21-year minimum age requirement. If taq4d becomes aware that Personal Data has been submitted by or on behalf of an individual under the age of 21, the associated Account will be suspended immediately, all transactions will be voided, and all Personal Data collected will be securely deleted as quickly as our legal obligations permit.

If you are a parent or guardian and believe that your child has registered on the taq4d Platform, please contact us immediately at [email protected]. We will investigate and take appropriate remedial action without delay. For additional tools to protect minors from accessing online gaming content, we recommend exploring parental control software solutions available for Indonesian devices and ISPs.

The taq4d Platform may contain links to third-party websites or embedded content from third-party game providers. This Privacy Policy applies solely to Personal Data collected and processed by taq4d. It does not cover the privacy practices of any third party whose website or content you access through the Platform.

When you launch a game supplied by Evolution Gaming, Pragmatic Play, Spribe, or any other third-party studio, the game session may be delivered through that studio's own technology infrastructure. taq4d contractually requires these studios to handle any session data in accordance with standards consistent with this Policy; however, their independent privacy notices also apply to that data.

taq4d is not responsible for the content, privacy policies, or data-handling practices of any third-party websites or service providers. We recommend reviewing the privacy policies of any third-party service you access through links on the Platform.

taq4d is an internationally operated platform. To deliver our services to Members across Indonesia — from Jakarta and Surabaya to Bali, Makassar, and Palembang — your Personal Data may be transferred to, stored in, or processed in countries other than Indonesia, including the jurisdiction in which taq4d holds its primary gaming licence.

Whenever Personal Data is transferred outside Indonesia, taq4d ensures that appropriate safeguards are in place. These safeguards include:

• Data processing agreements incorporating standard contractual clauses aligned with internationally recognised data protection frameworks.
• Transfers to jurisdictions that maintain an adequate level of data protection as assessed by taq4d's legal counsel and consistent with our licensing conditions.
• Technical security measures (encryption in transit and at rest) that apply regardless of the geographic location of processing infrastructure.

By creating a taq4d Account and using the Platform, you acknowledge and consent to the transfer of your Personal Data as described in this clause, subject to the safeguards set out above.

taq4d reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our licensing obligations, or our data-handling practices. When we make a material change — one that significantly affects how we collect, use, or share your Personal Data — we will notify registered Members by email to the address on file at least 14 days before the change takes effect.

Non-material clarifications (such as corrections to typographical errors, improved explanations that do not alter substance, or updated contact details) may be published without advance notice. The "Effective Date" at the top of this page will always reflect the date on which the current version became operative.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with a revised version, you should cease using the Platform and contact us at [email protected] to request Account closure prior to the effective date.

If you have any questions, concerns, or complaints about this Privacy Policy or about how taq4d processes your Personal Data, please contact us through the following channels:

When submitting a data rights request (see Clause 10), please include "Data Rights Request" in the subject line of your email, along with your registered Account email address and a brief description of your request. We will acknowledge your request within two business days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the supervisory authority in the jurisdiction governing taq4d's international gaming licence. taq4d will cooperate fully with any such authority in the investigation of a complaint.