Privacy Policy

1. Introduction

Welcome to the pand4 Privacy Policy. This document explains how pand4 ("we," "us," or "our") collects, uses, discloses, and protects the personal information of users ("you" or "your") who access or use our online gaming platform located at https://pand4.cam. We are committed to protecting your privacy and handling your personal data with transparency, security, and respect for your rights.

By creating an account with pand4, accessing our website, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you should not use pand4 and must immediately cease accessing our platform.

This Privacy Policy applies to all personal information collected through our website, mobile applications (if applicable), customer support channels, and any other digital touchpoints where you interact with pand4. It should be read in conjunction with our Terms & Conditions and Responsible Gaming policies, which together govern your use of our services.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a pand4 account, we collect the following personal information directly from you:

• Identity Information: Full legal name as it appears on your Indonesian National Identity Card (KTP Nasional), date of birth, place of birth, and gender. This information is required to verify your age (you must be 21 or older) and comply with Know Your Customer (KYC) regulations.
• Contact Information: Email address, mobile phone number, and residential address (street, city, province, postal code). We use this information to communicate with you about your account, send transaction notifications, and provide customer support.
• Financial Information: Bank account details (bank name, account number, account holder name) for Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, and BSI, as well as e-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja. We collect this information to process deposits and withdrawals in Indonesian Rupiah (IDR).
• Verification Documents: Copies of your KTP Nasional or passport, proof of address documents (utility bills, bank statements), and selfie photographs holding your ID card. These documents are required for identity verification and anti-money laundering compliance.
• Account Credentials: Username, password, and security questions/answers that you create to secure your pand4 account. Passwords are stored in encrypted form and are not accessible to pand4 staff.

2.2 Information Collected Automatically

When you access and use pand4, we automatically collect certain technical and usage information:

• Device Information: IP address, device type (desktop, mobile, tablet), operating system (Windows, macOS, iOS, Android), browser type and version, screen resolution, and device identifiers (IMEI, advertising ID).
• Log Data: Date and time of access, pages viewed, features used, clickstream data, referring website URLs, search queries entered on our site, and error messages or crashes encountered.
• Location Data: Approximate geographic location derived from your IP address. This helps us ensure you are accessing pand4 from within Indonesia and comply with regional restrictions.
• Gaming Activity: Records of all bets placed, games played, deposits made, withdrawals requested, bonuses claimed, and transaction history. This data is essential for providing our services, processing payouts, and detecting fraudulent activity.

2.3 Cookies and Tracking Technologies

pand4 uses cookies, web beacons, and similar tracking technologies to enhance your user experience, remember your preferences, analyze site traffic, and deliver targeted communications. Cookies are small text files stored on your device that allow us to recognize you on return visits. You can control cookie preferences through your browser settings, but disabling cookies may limit your ability to use certain features of pand4. For more details on our cookie practices, please refer to our Cookie Policy (available upon request).

3. How We Use Your Information

pand4 uses the personal information we collect for the following purposes:

• Account Management: To create and maintain your pand4 account, verify your identity, authenticate your login credentials, and manage your user profile settings.
• Transaction Processing: To process deposits to your account, execute withdrawal requests to your verified bank account or e-wallet, record all financial transactions, and maintain accurate balance records.
• Service Delivery: To enable you to place bets on sports events (including BRI Liga 1, EPL, Champions League), play live casino games (baccarat, roulette, blackjack, sabung ayam), access slot games, participate in togel draws, and use any other gaming services offered by pand4.
• Customer Support: To respond to your inquiries, resolve technical issues, provide assistance with account problems, and deliver personalized support via live chat, email, and phone channels operating 24/7 in Western Indonesia Time (WIB).
• Compliance and Security: To comply with legal obligations under Indonesian and international law, prevent fraud and money laundering, detect suspicious betting patterns or account activity, verify your age (21+ requirement), and protect pand4 and our users from illegal or harmful activities.
• Marketing and Communications: To send you promotional offers, bonus announcements, VIP program updates, newsletters about new game releases, and notifications about relevant events (Indonesian Independence Day promotions, Idul Fitri specials, Chinese New Year bonuses). You can opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting support.
• Analytics and Improvement: To analyze user behavior patterns, measure the effectiveness of our marketing campaigns, identify popular games and features, optimize website performance, and develop new products and services tailored to Indonesian player preferences.
• Responsible Gaming: To monitor for signs of problem gambling behavior, enforce deposit limits and self-exclusion requests, track session durations, and provide access to responsible gaming tools and resources.

4. Legal Basis for Processing

pand4 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions you agreed to) and provide the gaming services you requested.
• Legal Compliance: Processing is required to comply with our legal obligations, including anti-money laundering regulations, age verification requirements, tax reporting duties, and licensing conditions.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, service improvement, and marketing (balanced against your privacy rights).
• Consent: For certain processing activities (such as sending marketing communications or using non-essential cookies), we rely on your explicit consent, which you can withdraw at any time.

5. How We Share Your Information

pand4 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) that process your deposits and withdrawals. These parties have access to your financial information only as necessary to perform their services.
• Gaming Suppliers: Licensed game developers and live casino providers who deliver the slots, table games, and sports betting platforms integrated into pand4. They may collect gameplay data but are contractually bound to protect your privacy.
• KYC Verification Services: Identity verification specialists who authenticate your documents and perform background checks to comply with anti-fraud and anti-money laundering regulations.
• Customer Support Tools: Live chat software providers and customer relationship management (CRM) platforms that help us deliver efficient 24/7 support to Indonesian players.
• Analytics Providers: Web analytics services that help us understand how users interact with pand4, identify technical issues, and improve user experience.

All third-party service providers are carefully vetted and required to sign data processing agreements committing them to protect your personal information in accordance with applicable privacy laws.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, regulatory bodies, or courts if required by law or if we believe in good faith that such disclosure is necessary to: (1) comply with legal obligations or court orders, (2) enforce our Terms & Conditions, (3) protect the rights, property, or safety of pand4, our users, or the public, (4) investigate fraud, money laundering, or other illegal activities, or (5) respond to lawful requests from authorities.

5.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving pand4, your personal information may be transferred to the acquiring or successor entity. We will notify you via email and/or a prominent notice on our website of any such change in ownership or control of your personal data.

6. Data Security Measures

pand4 takes the security of your personal information seriously and implements industry-standard technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and pand4 servers is protected using SSL/TLS encryption (minimum 256-bit). Sensitive information such as passwords and financial data is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized pand4 employees and contractors who require it to perform their job functions. All personnel with access to customer data are bound by strict confidentiality agreements.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security controls, redundant power supplies, fire suppression systems, and 24/7 monitoring. Regular security audits and penetration testing are conducted to identify and remediate vulnerabilities.
• Account Security: We enforce strong password requirements, offer two-factor authentication (2FA) as an optional security enhancement, and monitor accounts for suspicious login attempts or unauthorized access.
• Data Minimization: We collect and retain only the personal information necessary to provide our services and comply with legal obligations. Data is deleted or anonymized when no longer needed.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should not share your password with anyone. If you suspect unauthorized access to your account, please contact customer support immediately.

7. Data Retention

pand4 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account and for six years after account closure to comply with Indonesian tax and financial record-keeping requirements.
• Transaction Records: Retained for a minimum of seven years from the date of transaction to comply with anti-money laundering and financial reporting regulations.
• KYC Documents: Retained for five years after the last transaction or account closure, as required by identity verification and fraud prevention regulations.
• Marketing Preferences: Retained until you withdraw consent or request deletion, after which your data is removed from marketing lists within 30 days.
• Support Communications: Retained for three years to maintain service quality records and resolve any disputes that may arise.

After the applicable retention period expires, personal information is securely deleted or anonymized so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

8. Your Privacy Rights

As a pand4 user, you have certain rights regarding your personal information. Depending on your jurisdiction, these may include:

• Right of Access: You can request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.
• Right to Rectification: If you believe any personal information we hold about you is inaccurate or incomplete, you can request that we correct or update it. You can also update most information directly through your account settings.
• Right to Erasure: You can request deletion of your personal information under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or if you withdraw consent. Note that we may be required to retain certain information for legal compliance.
• Right to Restrict Processing: You can request that we limit how we use your personal information in certain situations, such as while we verify its accuracy or assess whether we have legitimate grounds to process it.
• Right to Data Portability: You can request a copy of your personal information in a portable format that can be transferred to another service provider.
• Right to Object: You can object to our processing of your personal information for direct marketing purposes at any time. You can also object to processing based on legitimate interests by providing specific reasons related to your situation.
• Right to Withdraw Consent: If we process your personal information based on your consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with "Privacy Request" in the subject line. We will respond to your request within 30 days. For security purposes, we may need to verify your identity before processing your request.

9. Children's Privacy

pand4 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If you are under 21, you must not access or use pand4. If we become aware that we have inadvertently collected personal information from someone under 21, we will take immediate steps to delete that information and close the associated account. Parents and guardians should monitor their children's internet usage and use parental control software to prevent access to online gambling sites.

10. International Data Transfers

pand4 primarily serves users located in Indonesia, and your personal information is stored on servers located within secure data centers. However, some of our service providers and business partners may be located outside Indonesia, which means your personal information may be transferred to, stored in, or processed in countries with different data protection laws than Indonesia. When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities or reliance on adequacy decisions. By using pand4, you consent to the transfer of your information to countries outside Indonesia for the purposes described in this Privacy Policy.

11. Changes to This Privacy Policy

pand4 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on our website, updating the "Last Updated" date at the top of this page, and sending an email notification to your registered email address. Your continued use of pand4 after such changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact us:

• Email: [email protected] (please include "Privacy Inquiry" in the subject line)
• Live Chat: Available 24/7 through the pand4 website
• Data Protection Officer: For specific data protection questions, write to our DPO at [email protected] with "Attn: Data Protection Officer" in the subject line

We are committed to resolving any privacy concerns you may have in a timely and transparent manner. We will respond to all inquiries within 30 days.