Privacy Policy — kode4

kode4 ("we", "us", "our", "the Platform") operates the online betting and gaming website located at https://kode4.net. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, including registered Players and visitors who browse without creating an account.

This Privacy Policy has been drafted in accordance with internationally recognised data protection principles and is designed to give you a clear, comprehensive understanding of how your personal information is handled from the moment you first visit kode4 to the point at which your account is closed and your data is purged from our systems.

Throughout this document, "personal data" means any information that identifies you or could reasonably be used to identify you — for example, your name, email address, phone number, device identifiers, and financial details associated with your Indonesian Rupiah (IDR) transactions.

If you have questions about this Policy at any time, please contact our Data Protection team at [email protected]. We are available 24 hours a day, 7 days a week, including Indonesian public holidays.

kode4 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through technical systems as you browse and play, and in limited cases from trusted third-party verification partners. The categories of data we collect are set out in the table below.

kode4 processes your personal data for the following specific purposes. In each case, the purpose is tied directly to a legitimate operational, legal, or contractual need:

• Account Management: To create, maintain, and manage your kode4 account, verify your identity, and enable you to access all platform features including sportsbook, live casino, slots, crash games, and in-play betting.
• Transaction Processing: To facilitate deposits and withdrawals in IDR through your nominated Indonesian bank or e-wallet, reconcile your account balance, and issue correct payments to your verified account.
• KYC & Fraud Prevention: To verify that you meet the eligibility requirements (resident of Indonesia, 21 years of age or older), detect and prevent fraudulent activity, money laundering, and multi-accounting, and comply with our international licensing obligations.
• Responsible Gaming Compliance: To apply and enforce any responsible gaming tools you have activated — including deposit limits, loss limits, session reminders, and self-exclusion periods — and to monitor betting patterns that may indicate problem gambling behaviour.
• Customer Support: To respond to your queries, complaints, and requests submitted through live chat or email, and to maintain a record of those interactions for quality assurance and training purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email, where you have given your explicit consent to receive such communications. You may withdraw this consent at any time by contacting us at [email protected].
• Platform Improvement: To analyse aggregated and anonymised usage data in order to improve the performance, stability, and user experience of the kode4 platform.
• Legal Compliance: To meet our obligations under applicable international gaming regulations, respond to lawful requests from regulatory and law enforcement authorities, and enforce our Terms & Conditions.

For each category of processing activity described in Section 3, kode4 relies on one or more of the following legal bases:

kode4 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances, and only with recipients who are bound by appropriate data protection obligations:

• Payment Processors: Your financial data is shared with the relevant Indonesian bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process the deposit or withdrawal you have initiated.
• KYC Verification Partners: Identity documents submitted during account verification are shared with our accredited third-party KYC service provider for the sole purpose of verifying your identity and age. These providers operate under strict data processing agreements.
• Game Studio Partners: Technical session data (such as player ID and game session token) is shared with licensed game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to the minimum extent necessary to run the games you play. These studios do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to competent authorities where required by law, court order, or the regulatory requirements of our international gaming licence. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and compliance consultants who require access to personal data in order to provide professional services to kode4, subject to professional secrecy obligations.

kode4 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session and preferences, and to analyse how Players interact with the site. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They enable core functions such as secure login session management, account balance display, and navigation between platform sections. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These remember your preferences — such as your selected language, preferred display settings, and responsible gaming limits — so that you do not need to re-enter them on every visit.
• Analytical Cookies: These collect anonymised information about how Players use the platform — which pages are visited most frequently, how long sessions last, and where navigation errors occur. This data is used exclusively to improve platform performance.
• Security Cookies: These detect and prevent fraudulent activity by identifying unusual login patterns, multiple simultaneous sessions, or access from anomalous IP addresses.

Most modern browsers allow you to control cookie settings through their privacy or settings menu. Disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling other cookie categories will not affect your ability to access your account but may result in a reduced user experience.

kode4 implements a comprehensive, layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• TLS/SSL Encryption: All data transmitted between your browser or mobile device and our servers is encrypted using Transport Layer Security (TLS 1.2 or higher). The padlock icon displayed in your browser confirms this connection is secure.
• Encryption at Rest: Sensitive data fields — including password hashes, KYC document references, and financial account identifiers — are encrypted in our databases using AES-256 encryption.
• Access Controls: Access to personal data within kode4's internal systems is restricted on a strict need-to-know basis. Staff are granted only the minimum level of access required to perform their specific role, and all access is logged and audited.
• Penetration Testing: The kode4 platform undergoes regular penetration testing and vulnerability assessments conducted by independent security specialists to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: kode4 maintains a documented data breach response plan. In the event of a confirmed breach that is likely to result in risk to affected individuals, we will notify impacted Players and, where required, the relevant regulatory authority, within the timeframes specified by applicable law.

kode4 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction methods or irreversibly anonymised so that it can no longer be associated with any individual.

As a user of the kode4 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of Access: You may request a copy of all personal data kode4 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no overriding legitimate interest or legal obligation requiring its retention. Note that certain data may be retained after an erasure request to the extent required by law — for example, financial transaction records subject to anti-money-laundering retention requirements.
• Right to Restriction: In certain circumstances, you may request that we restrict the processing of your data — for example, while a rectification request is being investigated.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your personal data where kode4 relies on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — for example, receipt of marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

The kode4 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or store personal data relating to anyone under the age of 21. Age verification is a mandatory step in the KYC process, and any account found to belong to a person under 21 will be closed immediately, with all associated data deleted in accordance with our retention policy.

If you are a parent or guardian and you believe that a minor has registered an account on kode4 without your knowledge, please contact us immediately at [email protected]. We will investigate and close the account promptly.

kode4 operates under an international gaming licence, and as a result some of the personal data we collect may be transferred to, stored, or processed in countries outside Indonesia. This may occur, for example, when data is processed by game studio partners such as Pragmatic Play or Evolution Gaming, whose infrastructure may be hosted in jurisdictions including Malta, Gibraltar, or Isle of Man.

Where such transfers take place, kode4 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within the Platform. These safeguards include:

• Data processing agreements incorporating standard contractual clauses or equivalent data protection provisions with all international recipients.
• Transfer only to jurisdictions that provide an adequate level of data protection under recognised international standards, or to recipients who have implemented binding corporate rules approved by competent supervisory authorities.
• Regular reviews of international data transfer arrangements to ensure continued adequacy of protections as regulatory frameworks evolve.

kode4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our platform's features and services. When we make a material change to this Policy, we will notify registered Players by email and/or by displaying a prominent notice on the platform prior to the change taking effect.

The current version of this Privacy Policy is always available at https://kode4.net/privacy-policy and is identified by the "Last Updated" date shown at the top of this page. Continued use of the kode4 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must discontinue use of the platform and contact us to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kode4 handles your personal data, please reach out to our Data Protection team using the contact details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

For questions about responsible gaming data, including how your self-exclusion settings and deposit limit records are stored, please also visit our Responsible Gaming page. For a full overview of your rights and obligations as a kode4 user, please refer to our Terms & Conditions.