Privacy Policy
of dhx4d

1. Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "dhx4d", "we", "us", "our" — the legal entity operating the dhx4d platform at https://dhx4d.cam under international licensing.
• "Platform" — the dhx4d website, mobile interface, and all associated services accessible at https://dhx4d.cam.
• "User", "you", "your" — any natural person who registers, browses, or interacts with the Platform.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, contact details, payment information, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Controller" — the entity that determines the purposes and means of Processing Personal Data; dhx4d acts as Controller for all data collected via the Platform.
• "Processor" — a third party that processes Personal Data on dhx4d's behalf and under its documented instructions.
• "Consent" — freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "KYC" — Know Your Customer; the identity and age verification process required before withdrawals are permitted.
• "IDR" — Indonesian Rupiah (Rp); the primary transaction currency on the Platform.

2. Scope & Application

This Privacy Policy applies to all Personal Data collected by dhx4d in connection with the Platform, regardless of the device or method used to access it. It applies to:

• Registered members of the dhx4d Platform;
• Visitors who browse the Platform without completing registration;
• Individuals who contact dhx4d via email or live chat support.

This Policy does not apply to third-party websites or services that may be referenced on the Platform. dhx4d is not responsible for the privacy practices of any external service provider beyond those acting as our Processors under a formal data-processing agreement.

The Platform primarily serves English-preference users across Indonesia, with particular concentration in major cities including Jakarta, Surabaya, Medan, Bandung, Yogyakarta, Bali, Makassar, and Semarang. Indonesian residents' data is processed and stored in accordance with the principles set out in this Policy.

3. Data We Collect

3.1 Registration Data

When you create a dhx4d account, we collect the following information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth;
• Email address;
• Mobile phone number;
• Residential address (city, province, postal code, Indonesia);
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) and age verification obligations, we collect:

• Copy of government-issued photo ID (Indonesian KTP, passport, or SIM);
• Selfie photograph holding the ID document;
• Proof of residential address (utility bill or bank statement dated within 90 days);
• Source of funds declaration where required for high-volume accounts.

3.3 Financial Data

For deposit and withdrawal processing, we collect:

• Bank account details (bank name, account number, account holder name) — for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, and other supported institutions;
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja;
• Transaction history (deposit amounts, withdrawal amounts, dates, reference numbers);
• Wagering history (bets placed, markets, outcomes, amounts in IDR).

dhx4d does not store full card numbers or CVV codes for any card-based payment method. Card processing is handled entirely by our certified PCI-DSS-compliant payment processors.

3.4 Technical & Usage Data

When you access the Platform, our servers automatically log:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, time on site, and click-path data;
• Session start and end times;
• Error and crash reports.

3.5 Communications Data

When you contact dhx4d's support team, we retain records of:

• Live chat transcripts;
• Email correspondence;
• Support ticket content and resolution notes.

4. How We Collect Data

dhx4d collects Personal Data through the following channels:

• Directly from you: via the registration form, KYC document upload, payment method submission, and any voluntary communications you initiate with our support team;
• Automatically: via server logs, session tracking, and cookies placed on your device during Platform use (see Clause 11 for details);
• From third parties: identity verification service providers may return data signals confirming or flagging the authenticity of submitted KYC documents; payment processors confirm transaction status; fraud-prevention services flag IP addresses associated with known abusive behaviour.

5. Legal Basis for Processing

dhx4d processes your Personal Data on the following legal bases:

Processing Activity	Legal Basis
Account registration and management	Contractual necessity — required to provide the service you have requested
Age and identity verification (KYC)	Legal obligation — required for AML and age-gate compliance
Payment processing and withdrawal verification	Contractual necessity — required to execute financial transactions
Fraud detection and platform security	Legitimate interest — protecting the platform and its users from harm
Responsible gaming monitoring	Legitimate interest / Legal obligation — detecting and responding to problem gambling signals
Marketing and promotional communications	Consent — you may opt in or out at any time (see Clause 14)
Analytics and platform improvement	Legitimate interest — improving service quality for all users
Compliance with legal requests	Legal obligation — responding to lawful authority requests

6. Purposes of Processing

dhx4d uses Personal Data for the following purposes:

• Creating, maintaining, and managing your dhx4d account;
• Verifying your identity and age as part of the KYC process;
• Processing deposits and withdrawals in IDR via your registered payment methods;
• Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited activities;
• Monitoring gambling behaviour to fulfil our responsible gaming obligations and intervene where problem gambling signals are detected;
• Providing customer support and resolving disputes;
• Sending transactional communications (account confirmation, password reset, withdrawal confirmation, KYC status updates);
• Sending promotional communications where you have given explicit consent;
• Analysing Platform usage in aggregate to improve product quality and user experience;
• Complying with applicable legal obligations and responding to lawful requests from competent authorities.

7. Data Sharing & Disclosure

7.1 Authorised Processors

dhx4d shares Personal Data with the following categories of third-party Processors, each of which is bound by a formal data-processing agreement requiring them to process data only on our documented instructions:

• Payment processors: to facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported channels;
• KYC and identity verification services: to validate government-issued ID documents and confirm age eligibility;
• Fraud prevention and AML screening services: to flag suspicious transactions and account behaviour;
• Cloud hosting and infrastructure providers: for secure data storage and Platform operation;
• Customer support platform providers: to manage live chat and email support interactions.

7.2 Legal Disclosures

dhx4d may disclose Personal Data to competent legal authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. We will, where legally permissible, notify affected Users of such disclosures.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of dhx4d's assets, Personal Data held at the time of the transaction may be transferred to the acquiring entity. Registered members will be notified by email in advance of any such transfer.

7.4 No Sale of Personal Data

dhx4d does not sell, rent, or trade your Personal Data to third-party advertisers, data aggregators, or commercial list providers under any circumstances.

8. International Transfers

As an internationally operated platform, dhx4d may transfer Personal Data to servers and service providers located outside Indonesia. Where such transfers occur, dhx4d ensures that adequate data-protection safeguards are in place, including contractual data-processing agreements that reflect internationally recognised standard contractual clauses.

If you are an Indonesian resident and have concerns about how your data is handled upon international transfer, you may contact us using the details in Clause 17.

9. Data Retention

dhx4d retains Personal Data for the following periods:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML legal obligation
KYC documents	Duration of account + 5 years after closure	Regulatory compliance
Financial transaction records	Duration of account + 7 years after closure	AML / financial records law
Betting and gaming history	Duration of account + 3 years after closure	Dispute resolution; responsible gaming
Support communications	3 years from last interaction	Dispute resolution
Technical / server logs	12 months	Security and fraud monitoring
Marketing consent records	Until consent is withdrawn + 3 years	Proof of lawful marketing basis

After the applicable retention period expires, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

10. Security Measures

dhx4d implements the following technical and organisational measures to protect Personal Data against unauthorised access, loss, destruction, or alteration:

• SSL-256 encryption on all data in transit between your device and our servers;
• AES-256 encryption for sensitive data fields stored at rest, including identity documents and payment details;
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis;
• Multi-factor authentication required for all internal staff with access to production data systems;
• Quarterly penetration testing conducted by independent third-party security specialists;
• Automated anomaly detection to identify and respond to unusual data access patterns in real time;
• Physical security controls at all data centre facilities used by dhx4d's hosting providers.

11. Cookies & Tracking Technologies

11.1 What Cookies We Use

dhx4d uses the following categories of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies: required for core Platform functionality including session management, authentication, and security. These cannot be disabled without breaking the Platform;
• Functional Cookies: remember your preferences such as language setting, odds format, and last-visited section to improve your experience;
• Analytics Cookies: collect anonymised data about how Users navigate the Platform to help us identify areas for improvement. No personally identifiable data is shared externally through these cookies;
• Fraud Prevention Cookies: help identify and block automated bot traffic, account takeover attempts, and other abusive behaviour patterns.

11.2 Managing Cookies

You may control non-essential cookies through your browser's settings. Disabling functional or analytics cookies will not prevent you from using the Platform, but may reduce the quality of your experience. Strictly necessary cookies cannot be disabled via browser settings as they are required for Platform operation.

dhx4d does not use third-party advertising cookies or behavioural profiling cookies for targeted advertising purposes.

12. Protection of Minors

dhx4d enforces a strict 21+ age policy across all markets. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under the age of 21. If dhx4d discovers that Personal Data has been collected from a person under 21 — whether through a falsified registration or otherwise — the Account will be immediately closed, all data will be deleted as soon as legally permissible, and the incident will be recorded for compliance purposes.

Parents and guardians who believe a minor may have registered on the Platform are encouraged to contact us immediately at [email protected] so we can investigate and act without delay.

13. Your Data Rights

As a dhx4d Platform user, you hold the following rights with respect to your Personal Data. You may exercise any of these rights by submitting a written request to [email protected]. We will respond within 30 days of receiving a valid, verifiable request.

14. Marketing Preferences

dhx4d sends promotional communications — including bonus offers, tournament announcements, seasonal promotions tied to events such as Idul Fitri, Ramadhan, or Indonesian Independence Day (17 August), and product updates — only to Users who have explicitly opted in to receive them during registration or through their Account settings.

You may withdraw your marketing consent at any time by:

• Updating your notification preferences in the Account dashboard;
• Clicking the unsubscribe link at the bottom of any marketing email;
• Contacting our support team at [email protected].

Withdrawal of marketing consent does not affect your receipt of transactional communications (such as deposit confirmations, withdrawal notifications, and KYC status updates), which are sent regardless of marketing preference as they are operationally necessary.

15. Data Breach Response

In the event of a data security breach that is likely to result in a high risk to the rights and freedoms of affected individuals, dhx4d will:

• Contain the breach and assess its scope within 24 hours of discovery;
• Notify the relevant supervisory authority within 72 hours where required by applicable law;
• Notify affected Users by email within 72 hours of confirming that a breach has occurred, describing what data was affected, what risks may result, and what steps dhx4d is taking in response;
• Conduct a post-incident review and implement corrective measures to prevent recurrence;
• Maintain an internal breach register documenting the incident, its cause, and the remedial actions taken.

16. Policy Amendments

dhx4d reviews this Privacy Policy at least once per calendar year and following any material change to our data processing activities. When changes are made:

• The updated Policy will be published on this page with a revised effective date and version number;
• Registered members will be notified by email at least 14 days before the revised Policy takes effect;
• Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

If you do not agree to the revised Privacy Policy, you may request account closure by contacting our support team before the effective date of the changes.

17. Contact & Complaints

For any questions, concerns, or formal complaints relating to this Privacy Policy or the way dhx4d handles your Personal Data, please contact our Data Protection team:

• Email: [email protected] — Subject: "Privacy Inquiry" or "Data Rights Request"
• Response time: Standard inquiries are acknowledged within 2 business days and resolved within 30 days
• Formal complaints: Must be submitted in writing with subject line "Formal Data Privacy Complaint — [Username]"

If you are not satisfied with dhx4d's response to a formal data privacy complaint, you may have the right to lodge a complaint with the supervisory authority in the jurisdiction where you reside. Users based in Indonesia may contact the relevant national data protection authority established under applicable Indonesian information and electronic transaction law.