Contents
Our Privacy Commitments
1 Introduction
koso4d ("we", "us", "our", "the Platform") takes its obligations as a custodian of personal data seriously. We understand that the players who choose koso4d as their gaming platform — particularly those based across Indonesia, from Jakarta to Surabaya, Bandung to Bali — are placing trust in us not only with their entertainment time and wagers but also with sensitive personal and financial information.
This Privacy Policy has been written to be clear, transparent, and consistent with internationally recognized data protection frameworks, including principles drawn from the General Data Protection Regulation (GDPR). While Indonesian law does not currently impose a directly equivalent omnibus data protection statute, koso4d voluntarily adheres to GDPR-aligned standards as a baseline for the responsible handling of player data.
This policy governs all personal data processed by koso4d, regardless of the channel through which you interact with us — the website, live chat support, email correspondence, or payment processing integrations with Indonesian banking providers such as BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja.
2 Data Controller
For the purposes of applicable data protection law, koso4d acts as the Data Controller in respect of all personal data collected directly through the Platform. This means koso4d determines the purposes for which your personal data is used and the means by which it is processed.
Where koso4d engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification partners, or game software providers such as Pragmatic Play, Evolution Gaming, or Spribe — those parties act as Data Processors and are contractually bound to process your data only in accordance with koso4d's instructions and this Privacy Policy.
For all data-related inquiries, including Subject Access Requests and erasure requests, the designated contact is:
- Data Protection Contact: [email protected]
- Response Commitment: Within 30 calendar days of receipt of a verifiable request
3 Data We Collect
koso4d collects the following categories of personal data from players. We collect only the minimum data necessary for the purposes described in Section 5.
3.1 Identity & Contact Data
| Data Category | Specific Data Points | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number (KTP / passport / SIM), selfie photograph | Registration & KYC verification |
| Contact Data | Email address, Indonesian mobile number, residential address (province, city, postal code) | Registration |
| Account Data | Username, hashed password, account preferences, communication preferences, responsible gaming limit settings | Registration & ongoing use |
3.2 Financial & Transaction Data
| Data Category | Specific Data Points | Collected At |
|---|---|---|
| Payment Method Data | Bank account number (masked), bank name (BCA / BRI / BNI / Mandiri etc.), e-wallet account identifier (OVO / DANA / GoPay etc.) | First deposit & KYC |
| Transaction History | Deposit amounts, withdrawal amounts, timestamps, transaction reference numbers, currency (IDR) | Each transaction |
| Gaming Activity | Wager amounts, game types played (sports betting, togel lottery, slots, live casino), session duration, win/loss records | Ongoing platform use |
3.3 Technical & Usage Data
| Data Category | Specific Data Points |
|---|---|
| Device & Network Data | IP address, browser type and version, operating system, device type (mobile / desktop / tablet), screen resolution |
| Behavioral Data | Pages visited, time on page, navigation paths, click events, session start and end times (all in WIB, UTC+7) |
| Communications Data | Live chat transcripts, email correspondence, support ticket content |
4 How We Collect Data
koso4d collects personal data through the following means:
- Directly from yo u: When you complete the account registration form, submit KYC documents, initiate deposits or withdrawals, place wagers, contact support, or adjust account settings.
- Automatically via cookies and tracking technologies: Session cookies, persistent cookies, local storage, and analytics tools (Google Analytics) capture device, browser, and usage data. See Section 10 for full details on cookies.
- From third parties: Payment processors (banks and e-wallet providers) confirm transaction success and account holder name matching. Identity verification partners validate the authenticity of submitted KYC documents. Game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) report gaming session data and Random Number Generator (RNG) outcomes.
- From public sources: In rare cases, koso4d may reference publicly available sanction lists, politically exposed person (PEP) databases, or adverse media screening results as part of enhanced due diligence for high-value accounts.
5 Purpose & Legal Basis for Processing
koso4d processes your personal data only for specific, legitimate purposes and relies on recognized legal bases for each category of processing activity. The table below maps data uses to their legal justification.
| Processing Purpose | Legal Basis |
|---|---|
| Account registration, login authentication, and platform access | Contractual necessity — we cannot provide gaming services without verifying your identity and maintaining your account |
| KYC verification and age confirmation (21+ requirement) | Legal obligation — compliance with anti-money laundering (AML) standards and underage gambling prevention mandates |
| Processing deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay) | Contractual necessity — essential to fulfill your instructions to deposit and withdraw funds |
| Recording wagers, maintaining game history, and calculating win/loss statements for bandar bola (football betting), togel lottery, slots, and live casino | Contractual necessity and legitimate interest in maintaining accurate financial records and dispute resolution capability |
| Enforcing Terms & Conditions, detecting fraud, preventing bonus abuse, and identifying collusion | Legitimate interest in protecting the integrity of the platform and ensuring fairness for all players |
| Providing customer support via live chat (24/7 in English and Indonesian) and email | Contractual necessity and legitimate interest in maintaining service quality |
| Applying responsible gaming controls (deposit limits, self-exclusion, session time-outs) | Legal obligation and legitimate interest in player welfare and harm minimization |
| Sending transactional emails (deposit confirmations, withdrawal notifications, KYC status updates) | Contractual necessity — keeping you informed about critical account activity |
| Sending promotional communications about bonuses, tournaments, and special offers (opt-in required) | Consent — you may withdraw consent at any time via account settings or by contacting support |
| Analyzing platform performance, improving user experience, and detecting technical errors | Legitimate interest in optimizing service delivery and fixing bugs |
6 Data Sharing & Disclosure
koso4d does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:
6.1 Service Providers (Data Processors)
- Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction instructions and account holder names to execute deposits and withdrawals.
- KYC verification partners: Third-party identity verification services receive copies of your government ID and selfie photograph to confirm document authenticity and prevent identity fraud.
- Game providers: Software studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, Habanero, Play'n GO) receive your player ID and session tokens to deliver live casino feeds, slot games, and togel lottery results.
- Cloud hosting providers: Our platform infrastructure is hosted on secure servers managed by internationally certified data center operators who process technical data as part of hosting services.
- Customer support software: Live chat transcripts and support tickets are stored in third-party CRM systems under strict data processing agreements.
6.2 Legal & Regulatory Authorities
koso4d may disclose personal data to law enforcement, regulatory bodies, or financial intelligence units where required to comply with a legal obligation, court order, or valid governmental request. This includes but is not limited to suspected money laundering, fraud, underage gambling, or other criminal activity.
6.3 Business Transfers
In the event that koso4d undergoes a merger, acquisition, sale of assets, or corporate restructuring, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified via email if such a transfer affects your data rights.
6.4 What We Do NOT Do
7 International Data Transfers
While koso4d primarily serves players based in Indonesia, some of our service providers — particularly game studios and cloud infrastructure operators — may process data in jurisdictions outside Indonesia. Where personal data is transferred internationally, koso4d ensures that appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by recognized data protection authorities;
- Transfers to jurisdictions with adequacy decisions under GDPR;
- Binding Corporate Rules where service providers are part of multinational groups;
- Explicit consent where required for transfers to jurisdictions without adequate protection.
All international data transfers are documented and reviewed annually to ensure continued compliance with evolving data protection standards.
8 Data Retention
koso4d retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable legal obligations. The specific retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data (name, email, date of birth) | Duration of account + 5 years after closure | AML / financial audit requirements |
| KYC documents (ID scans, selfies) | Duration of account + 5 years after closure | Regulatory compliance and fraud prevention |
| Transaction history (deposits, withdrawals) | Duration of account + 7 years after closure | Financial record-keeping and tax obligations |
| Gaming activity logs (bet history, win/loss) | Duration of account + 5 years after closure | Dispute resolution and game integrity audits |
| Live chat transcripts and email correspondence | 3 years from date of communication | Customer service quality review and dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent and regulatory compliance |
| IP address and session logs | 12 months from session end | Security monitoring and fraud detection |
After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with an individual player. Anonymized data may be retained indefinitely for statistical and research purposes.
9 Your Data Protection Rights
koso4d recognizes and respects the following data protection rights. You may exercise these rights at any time by contacting our support team at [email protected].
Right of Access
Request a copy of all personal data koso4d holds about you, including account details, transaction history, and communications.
Right to Rectification
Correct any inaccurate or incomplete personal data in your account profile or KYC records.
Right to Erasure
Request deletion of your personal data where we no longer have a legal basis to retain it (subject to legal retention requirements).
Right to Restriction
Request that we temporarily restrict processing of your data while a dispute or accuracy concern is resolved.
Right to Portability
Receive your personal data in a structured, machine-readable format (CSV or JSON) to transfer to another service.
Right to Object
Object to processing based on legitimate interests, including profiling and direct marketing communications.
koso4d will respond to all verified data rights requests within 30 calendar days of receipt. If your request is particularly complex or we receive multiple requests from you, we may extend the response period by a further 30 days with prior notice. There is no fee for exercising your data rights, unless your request is manifestly unfounded or excessive.
10 Cookies & Tracking Technologies
koso4d uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform performance, and deliver personalized content. A cookie is a small text file stored on your device by your web browser when you visit our site.
10.1 Types of Cookies We Use
- Essential Cookies: Required for core platform functionality including login authentication, session management, and secure payment processing. These cannot be disabled without breaking the platform.
- Performance Cookies: Collect anonymous data about how visitors use the site (pages visited, time on site, bounce rate) via Google Analytics. Help us improve site speed and navigation.
- Functional Cookies: Remember your preferences (language selection, display settings, responsible gaming limits) so you don't have to re-enter them on each visit.
- Targeting Cookies: Track your browsing activity to deliver relevant bonus offers and promotional content. You can opt out of these in your account settings.
10.2 Managing Cookies
Most web browsers accept cookies by default, but you can configure your browser to refuse cookies or alert you when a cookie is being set. Instructions for managing cookies are available in your browser's help documentation. Blocking essential cookies will prevent you from using certain parts of the koso4d platform, including the ability to log in and place wagers.
11 Data Security Measures
koso4d employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, loss, misuse, or alteration. These measures include:
- 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using the same banking-grade security used by financial institutions worldwide.
- Secure server infrastructure: Personal data is stored on servers located in certified data centers with physical access controls, 24/7 monitoring, and redundant backup systems.
- Password hashing: Player passwords are never stored in plain text. We use bcrypt hashing with salts to ensure that even in the unlikely event of a database breach, passwords remain unreadable.
- Access controls: Only authorized koso4d employees with a legitimate business need can access personal data, and all access is logged and audited regularly.
- Regular security audits: Third-party penetration testing and vulnerability scans are conducted quarterly to identify and patch security weaknesses.
- Employee training: All koso4d staff receive annual data protection and cybersecurity awareness training.
12 Minors & Age Verification
koso4d strictly prohibits use of the platform by individuals under the age of 21 years (21+). We do not knowingly collect personal data from minors. If you become aware that a person under 21 has registered an account, please report it immediately to our support team.
All players are required to complete age verification as part of the KYC process before withdrawals are permitted. Where we discover that an account has been opened by a minor, the account will be closed immediately, all funds forfeited, and the matter reported to the appropriate authorities if required.
Parents and guardians are encouraged to use parental control software and monitor device usage to prevent underage individuals from accessing online gambling platforms.
13 Third-Party Websites & Services
The koso4d platform may contain links to third-party websites or services, including game provider websites, payment processor portals, or responsible gaming resources. This Privacy Policy applies only to personal data collected directly by koso4d. We are not responsible for the privacy practices of third-party sites, and we encourage you to review their privacy policies before providing any personal information.
14 Policy Amendments
koso4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. Material changes will be communicated to registered players via email at least 14 days before the changes take effect. The "Last Updated" date at the top of this policy indicates when it was most recently revised.
Continued use of the platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you must cease using the platform and request account closure before the effective date.
15 Contact & Data Protection Complaints
If you have any questions, concerns, or complaints about this Privacy Policy, our data handling practices, or wish to exercise any of your data protection rights, please contact us using the details below:
- Email: [email protected]
- Subject Line: "Data Protection Request" or "Privacy Inquiry"
- Response Time: Within 30 calendar days of receipt
If you believe koso4d has not adequately addressed your data protection concern, you have the right to lodge a complaint with your local data protection supervisory authority.
How koso4d Protects Your Data
Trust is the foundation of our relationship with every player. These are the concrete measures we take every day to safeguard your personal and financial information.
Bank-Grade Encryption
Every page on koso4d uses 256-bit SSL/TLS encryption — the same security standard trusted by major Indonesian banks like BCA, BRI, BNI, and Mandiri for online banking.
Strict KYC Verification
Identity verification protects both you and the platform. Verified accounts prevent fraud, ensure age compliance (21+), and enable fast withdrawals with full confidence.
No Data Selling
koso4d never sells your personal data to marketing firms, data brokers, or third-party advertisers. Your information stays within our secure systems and authorized partners only.
Secure Data Storage
All personal data is stored on certified servers in secure data centers with physical access controls, 24/7 monitoring, and redundant backup systems to prevent data loss.
Minimal Data Collection
We collect only what we need to operate the platform, process transactions, and comply with legal requirements. No unnecessary tracking, no invasive profiling.
Your Rights Honored
Access your data, request corrections, download your records, or delete your account anytime. We respond to all verified data rights requests within 30 days.
Have Privacy Questions?
Our support team is available 24/7 to answer questions about this Privacy Policy, explain how your data is used, or help you exercise your data protection rights. You can also review our FAQ for quick answers or return to the homepage to explore the platform.