hiu4d Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — i.e., information that can be used, alone or in combination with other data, to directly or indirectly identify you.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. hiu4d is the Data Controller in respect of all Member Personal Data collected via the Platform.
• "Data Processor" means a third-party entity that processes Personal Data on behalf of hiu4d pursuant to a data processing agreement, acting on hiu4d's documented instructions.
• "KYC" means Know Your Customer — the identity verification process through which hiu4d verifies a Member's identity, age, and, where applicable, source of funds.
• "Cookies" means small text files placed on your device by the hiu4d Platform for purposes of session management, analytics, and personalisation.
• "IDR" means Indonesian Rupiah — the sole transaction currency of the Platform.

2 Data Controller

hiu4d operates the Platform at hiu4d.ws as an internationally licensed online gaming operator. hiu4d is the sole Data Controller for all Personal Data collected through Member registration, account activity, customer support interactions, and use of the Platform's features and services.

All data rights requests, complaints, or enquiries relating to data privacy should be directed to hiu4d's data protection contact, details of which are provided in Clause 14 (Contact) of this Policy.

3 Data We Collect

hiu4d collects the following categories of Personal Data from Members and visitors to the Platform:

Data Category	Examples	Purpose
Identity Data	Full legal name, date of birth, gender, KTP / Paspor number, photograph	Account registration, KYC verification, age verification (21+)
Contact Data	Email address, mobile phone number, residential address (city, province)	Account communications, transaction notifications, customer support
Financial Data	Bank account number (BCA, BRI, BNI, Mandiri, etc.), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, IDR amounts	Deposit and withdrawal processing, fraud prevention, AML compliance
Account & Gaming Data	Username, login timestamps, bet history, game session duration, win/loss records, bonus redemptions	Service delivery, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, operating system, browser type, screen resolution, session tokens	Security, fraud detection, platform optimisation, geo-compliance
Usage Data	Pages visited, navigation paths, click patterns, feature usage frequency, referral source	Platform analytics, UX improvement, personalised game recommendations
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support, quality assurance, complaint resolution

4 How We Collect Data

hiu4d collects Personal Data through the following channels:

• Direct Submission: Information you provide when completing the registration form, submitting KYC documents, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, and session activity, via server logs and analytics tools.
• Cookies and Similar Technologies: Session cookies, persistent cookies, and pixel tags placed on your device as described in Clause 8 of this Policy.
• Third-Party Identity Verification Providers: During KYC review, hiu4d may cross-reference identity data against authorised identity verification services and, where applicable, government identity databases, in compliance with applicable regulations.
• Payment Processors: Transaction confirmation data received from Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) in connection with deposit and withdrawal processing.
• Fraud Prevention and AML Partners: Data shared with and received from authorised anti-money laundering (AML) screening services to fulfil hiu4d's regulatory compliance obligations.

5 Legal Basis for Processing

hiu4d processes Personal Data on the following legal bases:

1. Contractual Necessity: Processing required to fulfil hiu4d's obligations under the Member agreement — including account creation, KYC verification, transaction processing, and delivery of gaming services.
2. Legitimate Interests: Processing carried out in pursuit of hiu4d's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by the Member's fundamental rights and freedoms.
3. Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, record-keeping mandates, and responses to lawful requests from competent authorities.
4. Consent: Processing for purposes beyond the above categories — such as direct marketing communications and non-essential cookies — is conducted only on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

Personal Data collected by hiu4d is used exclusively for the following purposes:

• Account Management: Creating, maintaining, and securing your hiu4d Member account, including authentication and password recovery.
• Identity & Age Verification: Confirming that you are at least 21 years of age and that your identity matches the details provided at registration, in compliance with responsible gaming and anti-fraud standards.
• Transaction Processing: Facilitating IDR deposits via local Indonesian banks and e-wallets, and processing withdrawal requests to your nominated payment account.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and providing assistance through live chat and email communications.
• Responsible Gaming: Monitoring gaming patterns to identify potential signs of problem gambling, administering self-exclusion and deposit limit requests, and contacting Members where responsible gaming concerns are identified.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorised account access, and other security threats. IP addresses and device data are specifically used for geo-compliance verification and suspicious activity monitoring.
• Legal & Regulatory Compliance: Meeting hiu4d's obligations under applicable licensing conditions, AML regulations, and any lawful requests from authorised government or regulatory bodies.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform design, game selection, and user experience. No individual Member is identifiable in this analytical data.
• Promotional Communications: Sending bonus offers, seasonal promotions (such as Idul Fitri or Ramadhan special events), and platform news to Members who have opted in to marketing communications. You may opt out at any time.

7 Third-Party Disclosure

hiu4d does not sell, rent, or otherwise commercially transfer your Personal Data to third parties. We may share your data with the following limited categories of recipients, solely on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Authorised Data Processors

• Payment Service Providers: Indonesian banking partners and e-wallet operators (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data strictly required to process deposits and withdrawals.
• KYC & Identity Verification Services: Authorised third-party identity verification providers who assist in confirming Member identities and age as part of hiu4d's KYC programme.
• Game Software Providers: Studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymised session data necessary to deliver and support their games. These providers do not receive personally identifiable Member information beyond what is technically required for game session integrity.
• IT Infrastructure & Security Providers: Cloud hosting, content delivery, DDoS protection, and cybersecurity service providers who process technical data on hiu4d's behalf under strict contractual data processing agreements.
• AML Screening Services: Authorised anti-money laundering compliance partners who assist hiu4d in meeting its regulatory screening obligations.

7.2 Legal and Regulatory Disclosure

hiu4d may disclose Personal Data to competent government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or binding regulatory directive. hiu4d will notify affected Members of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of hiu4d's assets, Member Personal Data may be transferred to the acquiring entity, subject to that entity honouring the terms of this Privacy Policy or providing Members with advance notice and the opportunity to exercise their data rights.

8 Cookies & Tracking Technologies

hiu4d uses cookies and similar tracking technologies to maintain secure sessions, measure platform performance, and personalise your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, load-balancing cookies, and security cookies. These cannot be disabled without rendering the Platform non-functional.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how Members use the Platform — including pages visited, time on page, and navigation paths. This data is used solely to improve the Platform's performance and UX.
• Functional Cookies: Store your preferences such as preferred language display, last-visited game category, and notification settings to deliver a more personalised experience on return visits.
• Marketing Cookies: Used only where you have given explicit consent, to track the effectiveness of hiu4d's promotional campaigns. These cookies do not share your data with third-party advertisers.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair or prevent access to the Platform. All other cookie categories may be declined without affecting core functionality.

9 Data Retention

hiu4d retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the lifetime of the Member's account plus a minimum of 5 years following account closure, to meet AML record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of verification, or such longer period as may be required by applicable regulation.
• Transaction Records: Retained for a minimum of 5 years from the transaction date.
• Customer Support Communications: Retained for 2 years from the date of the last communication in a support thread, unless the matter is subject to ongoing dispute or legal proceedings.
• Technical & Usage Data (Logs): Retained for up to 12 months for security analysis and platform diagnostics, then deleted or anonymised.
• Marketing Consent Records: Retained until you withdraw consent, plus 2 years thereafter to evidence your prior consent in the event of a regulatory enquiry.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify any individual.

10 Security Measures

hiu4d implements a comprehensive set of technical and organisational security measures to protect Member Personal Data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption: All data in transit between your device and hiu4d's servers is encrypted using industry-standard TLS 1.2 or higher.
• Data Encryption at Rest: Sensitive data fields — including financial data and identity documents — are encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to Member Personal Data is restricted on a strict need-to-know basis, enforced by role-based access controls and multi-factor authentication for all administrative personnel.
• Penetration Testing: hiu4d's infrastructure undergoes regular penetration testing and security audits conducted by independent third-party cybersecurity specialists.
• DDoS Protection: Enterprise-grade distributed denial-of-service (DDoS) mitigation services protect Platform availability and integrity.
• Incident Response: hiu4d maintains a documented data breach response plan. In the event of a breach affecting Member Personal Data, affected Members will be notified within the timeframe required by applicable regulations.

11 Your Data Rights

As a Member of hiu4d, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact hiu4d's data protection team using the details in Clause 14. hiu4d will respond to all valid data rights requests within 30 calendar days.

1. Right of Access: You may request a copy of all Personal Data held about you by hiu4d, together with information about how it is being processed.
2. Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected. For identity-critical fields, correction may require re-submission of KYC documentation.
3. Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to hiu4d's legal retention obligations — data required for AML compliance, fraud investigation, or regulatory purposes cannot be deleted until the applicable retention period expires.
4. Right to Restriction of Processing: You may request that hiu4d restricts processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction to deletion.
5. Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
6. Right to Object: You may object to processing of your Personal Data based on legitimate interests, including profiling for direct marketing purposes. hiu4d will cease such processing unless compelling legitimate grounds can be demonstrated that override your interests.
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

12 Minors

The hiu4d Platform is strictly for adults aged 21 years and older. hiu4d does not knowingly collect Personal Data from individuals under the age of 21. If hiu4d becomes aware that a Member is under 21, the account will be immediately suspended, all balances will be frozen pending investigation, and the data will be handled in accordance with applicable child protection obligations.

If you are a parent or guardian and believe that a minor has registered a hiu4d account, please contact our support team immediately at the details provided in Clause 14. We will investigate and take appropriate action, including account closure and notification to relevant authorities where required.

13 Changes to This Privacy Policy

hiu4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable regulatory requirements. Where material changes are made, we will notify registered Members by email and by displaying a prominent notice on the Platform at least 14 days before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please contact us to request account closure before the effective date.

14 Contact

For any privacy-related enquiries, data rights requests, or concerns regarding hiu4d's handling of your Personal Data, please contact our data protection team through the following channel:

• Email: [email protected]
• Live Chat: Available 24/7 via the hiu4d Platform — Indonesian-speaking agents are on hand around the clock to assist with all data privacy enquiries.

hiu4d aims to acknowledge all formal data rights requests within 5 business days and to resolve them in full within 30 calendar days (Monday–Friday, 09:00–17:00 WIB). For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.