Privacy Policy

tag4d acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, tag4d is responsible for ensuring that Personal Data is processed lawfully, fairly, and in a transparent manner consistent with this Privacy Policy and applicable data protection regulations.

All data protection enquiries, access requests, and complaints should be directed to the tag4d privacy team at the contact details provided in Section 14 of this Policy. tag4d will respond to all verified requests within thirty (30) calendar days of receipt.

tag4d collects Personal Data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party service providers where required for legal compliance or service delivery. The categories of data we collect include:

We do not collect special categories of sensitive Personal Data (such as racial origin, religious beliefs, or health information) unless you voluntarily disclose such information in the context of a responsible gaming self-assessment or support interaction, in which case it is handled under strict confidentiality protocols.

tag4d processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfil our obligations under the agreement you enter into when registering an Account — including account management, transaction processing, KYC verification, and dispute resolution.
• Legal Obligation: Certain processing activities are mandated by applicable anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulatory requirements, including the retention of transaction records and identity documents for defined statutory periods.
• Legitimate Interests: We process certain Technical Data and Gaming Activity Data on the basis of our legitimate interest in detecting fraud, ensuring platform security, improving service quality, and conducting responsible gaming risk assessments — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we send you marketing communications or non-essential promotional emails, we do so on the basis of your explicit consent, which you may withdraw at any time by contacting our support team.

tag4d uses your Personal Data solely for the purposes described in this Policy. Specifically, your data is used to:

• Create and manage your Account, including processing your registration details and maintaining your profile and Wallet balance;
• Process deposits and withdrawals through your nominated Indonesian bank account or e-wallet, and to reconcile transactions against your Wallet history;
• Conduct KYC verification to confirm your identity, age (21+), and source of funds, in accordance with our regulatory obligations;
• Detect and prevent fraud, money laundering, multiple-account abuse, bonus exploitation, and other prohibited conduct as defined in the Terms & Conditions;
• Personalise your platform experience, including displaying relevant game recommendations, promotion eligibility, and loyalty tier status;
• Provide customer support via live chat and email, and to maintain records of your support interactions for quality assurance and audit purposes;
• Administer promotions and bonuses, including verifying eligibility and tracking wagering requirement progress;
• Conduct responsible gaming risk assessments, including identifying patterns of play that may indicate problem gambling and triggering appropriate outreach or intervention tools;
• Comply with legal and regulatory obligations, including responding to lawful requests from competent authorities; and
• Improve our Platform through aggregated, anonymised analytics on user behaviour, platform performance, and game popularity.

tag4d shares your Personal Data only with the categories of recipients listed below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors & Financial Institutions: Your financial data is shared with the relevant Indonesian bank (BCA, BRI, BNI, Bank Mandiri, CIMB Niaga) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute your requested deposit or withdrawal transaction.
• KYC & Identity Verification Providers: We engage accredited third-party KYC providers to assist with document authentication and identity screening. These providers act as Data Processors under binding contractual agreements and may not use your data for any purpose other than identity verification on our behalf.
• Game Studio Providers: Where you participate in games hosted by third-party studios such as Pragmatic Play, Evolution Gaming, or Spribe, limited session and wagering data is shared with those studios for game administration and fairness auditing purposes.
• Fraud Prevention & AML Screening Services: We may share identity and transaction data with industry-standard fraud prevention and anti-money laundering screening platforms to fulfil our legal compliance obligations.
• Legal and Regulatory Authorities: We will disclose Personal Data to law enforcement agencies, gaming regulators, tax authorities, or other competent bodies where we are required to do so by applicable law, court order, or regulatory instruction. We will notify you of such disclosure where we are legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of tag4d's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. We will notify affected Members via registered email in advance of any such transfer.

All third-party Data Processors engaged by tag4d are bound by contractual data protection obligations that prohibit secondary use of your data and require appropriate technical and organisational security measures commensurate with the sensitivity of the data processed.

tag4d retains your Personal Data for as long as your Account remains active and for a defined period thereafter, as required by applicable legal, regulatory, and audit obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, to satisfy AML and gaming regulatory record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC Documents: Retained for five (5) years from Account closure or from the date of the most recent KYC update, whichever is later.
• Support Correspondence: Retained for three (3) years from the date of the most recent interaction in a given support thread.
• Technical and Session Logs: Retained for twelve (12) months on active systems and archived for a further twenty-four (24) months for fraud investigation and audit purposes.
• Marketing Consent Records: Retained for the duration of the consent period plus three (3) years to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified individual.

tag4d employs a layered security architecture to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. Our current technical and organisational security measures include:

• Transport Encryption: All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher. Our SSL certificate is verified and renewed continuously.
• Data-at-Rest Encryption: Sensitive stored data, including KYC documents and financial account details, is encrypted using AES-256 encryption in our database layer.
• Access Controls: Access to Personal Data within our systems is restricted on a strict need-to-know basis using role-based access controls. All staff access to production data is logged and audited.
• Two-Factor Authentication: Internal system access requires two-factor authentication for all team members with data access privileges.
• Penetration Testing: The Platform undergoes regular security assessments, including automated vulnerability scanning and periodic third-party penetration testing.
• Incident Response: tag4d maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify you promptly and provide guidance on any protective steps you should take.

While we apply industry-standard safeguards, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately if you suspect any unauthorised account activity.

tag4d uses cookies and similar tracking technologies to operate the Platform effectively, recognise returning Members, maintain session state, and collect aggregated analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for core Platform functionality, including session management, authentication state, and security token validation. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings, display options, and last-visited game categories, to improve your experience on return visits.
• Analytics Cookies: Anonymised usage data collected to understand how Members navigate the Platform, which pages receive the most visits, and where users encounter difficulty — used exclusively to improve platform design and performance.
• Fraud Prevention Cookies: Device fingerprinting and session integrity cookies used to detect suspicious access patterns, multi-account behaviour, and automated bot activity.

tag4d does not deploy third-party advertising or retargeting cookies. You may manage or delete cookies through your browser settings; however, disabling strictly necessary cookies will affect your ability to log in and use the Platform.

Subject to applicable law and our legitimate operational and legal obligations, you have the following rights with respect to your Personal Data held by tag4d. To exercise any of these rights, contact our support team as described in Section 14.

We will respond to verified rights requests within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by a further thirty (30) days and will notify you accordingly. We reserve the right to verify your identity before processing any rights request.

tag4d is strictly an adults-only platform. The minimum age to register an Account is 21 years old. We do not knowingly collect Personal Data from any person under the age of 21.

Where we discover or have reasonable cause to believe that Personal Data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated Account, delete the data in question, and report the matter to our compliance team for further review. If you are a parent or guardian and believe that a minor under your care has registered an Account on the Platform, please contact us immediately at the details provided in Section 14.

As an internationally operated platform, tag4d may transfer your Personal Data to service providers and infrastructure partners located outside of Indonesia — for example, to cloud hosting facilities, KYC verification providers, or game studio audit partners located in other jurisdictions.

Wherever Personal Data is transferred internationally, tag4d ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under our operating jurisdiction. These safeguards may include:

• Contractual clauses between tag4d and the receiving third party that impose data protection obligations equivalent to those in this Policy;
• Transfer to recipients located in jurisdictions that have been assessed as providing an adequate level of data protection; or
• Technical measures such as end-to-end encryption that render the data unintelligible to the receiving infrastructure provider.

You may request further information about the specific safeguards in place for international transfers by contacting our privacy team at the details in Section 14.

tag4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes significantly affect your rights or our obligations, notify active Members by email to the address registered on their Account.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically. If you do not agree with any amendment, you may close your Account and request deletion of your Personal Data in accordance with Section 10.

For all data protection enquiries, rights requests, or privacy-related complaints, please contact the tag4d privacy team using the details below. We handle all correspondence in English and Indonesian (Bahasa Indonesia).

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter by clearly marking a follow-up email "Formal Privacy Complaint — Escalation Request". Our compliance team will conduct an independent review and respond within a further fourteen (14) calendar days.

tag4d is committed to resolving all privacy concerns promptly and fairly. We treat every data protection enquiry as a priority and maintain a dedicated log of all rights requests for audit and accountability purposes.