chas4d Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

• "chas4d" / "We" / "Us" / "Our" — the operator of the online gaming platform accessible at https://chas4d.cam and all associated subdomains and mobile interfaces.
• "Member" / "You" / "Your" — any individual who registers an account on, accesses, or otherwise interacts with the chas4d Platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, date of birth, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, sharing, erasure, and every step in between.
• "Platform" — the chas4d website, mobile site, associated APIs, and all software used to deliver gaming services.
• "Third Party" — any entity other than chas4d and the Member, including payment processors, game studios, and regulatory bodies.
• "KYC" — Know Your Customer identity verification, including the collection and review of identity and address documents.
• "Cookies" — small data files placed on a Member's device by the Platform to enable functionality, analytics, and session management.

chas4d collects only the Personal Data necessary to operate a safe, compliant, and high-quality gaming platform. The categories of data we collect are set out below:

chas4d collects Personal Data through the following channels:

3.1 Direct Collection

The majority of your Personal Data is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile. You are always informed at the point of collection what data is required and for what purpose.

3.2 Automated Technical Collection

When you access the Platform, our servers automatically record Technical Data including your IP address, device identifiers, browser type, and session activity. This data is collected passively through standard web server logs and browser cookie mechanisms. It is used primarily for security monitoring, fraud detection, and Platform performance optimisation.

3.3 Third-Party Sources

In limited circumstances, chas4d may receive Personal Data about you from trusted third-party sources, including:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) — to confirm the status of financial transactions;
• Identity verification service providers — to cross-reference KYC documents against authoritative data sources;
• Fraud prevention agencies — to screen accounts against known fraud indicators and sanctions databases.

Data received from third-party sources is handled with the same level of care and subject to the same protections as data collected directly from Members.

chas4d processes Personal Data on the following legal grounds, each of which applies to one or more of the processing activities described in this Policy:

• Contractual Necessity: Processing required to fulfil the Member Agreement — including account creation, payment processing, game service delivery, and withdrawal execution — is carried out because it is necessary to perform the contract between chas4d and the Member.
• Legal Obligation: Certain processing activities — including KYC verification, anti-money laundering screening, and the retention of financial transaction records — are required by applicable law and regulatory obligations.
• Legitimate Interests: chas4d processes Technical Data and Account Activity Data for fraud prevention, platform security, and service improvement on the basis of our legitimate interest in maintaining a safe and functional gaming environment, provided those interests are not overridden by Members' fundamental rights.
• Consent: Where we send promotional communications or use non-essential cookies, we do so only on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

chas4d uses the Personal Data we collect for the following specific purposes:

5.1 Account Management

We use Identity Data and Contact Data to create and maintain your Member account, authenticate your identity at login, reset passwords, and deliver account-related notifications such as deposit confirmations and withdrawal updates.

5.2 Payment Processing

Financial Data is used to process deposits and withdrawals through your chosen payment method — whether bank transfer via BCA, BRI, BNI, or Mandiri, or e-wallet via OVO, DANA, GoPay, ShopeePay, or LinkAja. We retain transaction records as required by applicable financial regulations.

5.3 KYC and Compliance

KYC Verification Data is used to confirm your identity, verify your age (21+), screen against sanctions and politically exposed person (PEP) databases, and comply with anti-money laundering obligations. This processing is a mandatory prerequisite for withdrawal eligibility.

5.4 Security and Fraud Prevention

Technical Data and Account Activity Data are analysed continuously to detect and prevent fraudulent behaviour, detect multiple-account violations, identify suspicious wagering patterns, and protect the integrity of the chas4d Platform for all Members.

5.5 Customer Support

Communications Data is used to respond to your support enquiries, resolve account disputes, and maintain a record of interactions to ensure consistent service quality across all contacts.

5.6 Platform Improvement

Aggregated and anonymised Account Activity Data and Technical Data are used to analyse Platform usage patterns, identify performance bottlenecks, and improve the overall gaming experience. This analysis does not involve decisions made about individual Members on an automated basis.

5.7 Responsible Gaming

We use Account Activity Data to monitor for behavioural indicators of problem gambling — such as rapidly escalating deposit volumes, extended continuous sessions, or repeated failed withdrawal reversals — and to trigger responsible gaming interventions where appropriate. This processing serves Members' fundamental wellbeing and is conducted in accordance with our Responsible Gaming policy.

5.8 Marketing Communications

Where you have provided consent, we may use your Contact Data to send promotional emails or in-Platform notifications about bonuses, seasonal campaigns (such as Idul Fitri promotions or BRI Liga 1 special odds), and new game launches. You may opt out of marketing communications at any time without affecting your account access.

chas4d does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We share Personal Data only in the circumstances described below, and only to the extent necessary for each purpose:

6.1 Payment Service Providers

We share Financial Data with payment processors and banking partners — including the networks supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — strictly to execute deposit and withdrawal transactions initiated by you.

6.2 Game Content Providers

Game studios and software providers — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and Pocket Games Soft — may receive limited Account Activity Data (such as player session identifiers and wager records) to operate their games, enforce game-specific rules, and calculate RTP statistics. These providers operate under strict data processing agreements with chas4d.

6.3 Identity Verification Partners

KYC Verification Data is shared with our identity verification service providers to authenticate the accuracy of submitted documents and comply with age-verification and anti-money laundering obligations. These providers are contractually prohibited from using your data for any purpose other than verification.

6.4 Legal and Regulatory Disclosure

chas4d may disclose Personal Data to regulatory bodies, law enforcement agencies, courts, or other governmental authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of chas4d's assets, Member Personal Data may be transferred as part of that transaction. You will be notified via your registered email address before any such transfer takes effect, and the acquiring entity will be bound by privacy obligations no less protective than those set out in this Policy.

The chas4d Platform uses cookies and similar tracking technologies to deliver functionality, maintain session security, and improve the Member experience. The categories of cookies we use are described below:

You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Withdrawing consent for analytics or marketing cookies will not affect your account access or gameplay.

chas4d retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and operational requirements. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of active account membership and for a period of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC Verification Documents: Retained for five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Account Activity and Game Logs: Retained for two (2) years from the date of each session or transaction, after which they are anonymised for aggregate statistical analysis.
• Communications Data (support tickets, chat logs): Retained for two (2) years from the date of each interaction.
• Marketing consent records: Retained for the duration of consent and for one (1) year following withdrawal, to demonstrate compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is technically impracticable due to backup system constraints, the data is isolated from active processing until it can be permanently removed.

chas4d implements a layered security architecture designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the chas4d Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher), ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encryption at Rest: Sensitive Personal Data stored on chas4d servers — including identity documents and financial records — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data within chas4d's systems is restricted on a strict need-to-know basis. Staff members are granted data access only to the extent required by their specific job function, and all access is logged and auditable.
• Regular Security Audits: Our Platform and data infrastructure are subject to periodic penetration testing and security reviews by qualified third-party security specialists.
• Incident Response: chas4d maintains a documented data breach response procedure. In the event of a breach that poses a risk to Member rights, affected Members and relevant authorities will be notified without undue delay.

As a Member of chas4d, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team at [email protected]. We will respond within a reasonable timeframe and at no cost to you unless a request is manifestly unfounded or excessive.

• Right of Access: You may request a copy of all Personal Data chas4d holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held in your account.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your data while a dispute about its accuracy or the legitimacy of our processing is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a copy of your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

The chas4d Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in our registration and KYC processes, and we employ both self-declaration controls and document-based verification to enforce this requirement.

If chas4d becomes aware that Personal Data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and permanently close the associated account. Any funds deposited by an underage Member will be returned to the originating payment account after deducting any fraudulently claimed bonuses.

If you are a parent or guardian and believe your child has accessed or registered on the chas4d Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

The chas4d Platform integrates with a number of third-party services to deliver its full range of features. While chas4d takes reasonable steps to ensure that all third-party partners maintain appropriate data protection standards, we are not responsible for the privacy practices of external parties once data leaves our direct control.

Third-party service categories used by chas4d include:

• Game Software Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, Pocket Games Soft — each operating under their own data processing frameworks and bound by data processing agreements with chas4d.
• Payment Gateways: Technology providers facilitating bank transfer and e-wallet payment routing through the Indonesian local payment network.
• Analytics Platforms: Aggregated, anonymised usage analytics tools used to improve Platform performance — no individual Member data is shared with analytics providers in identifiable form.
• Customer Support Infrastructure: Live chat and ticketing software providers used to operate our 24/7 support function. Communications transmitted through these tools are subject to both chas4d's and the provider's applicable data protection measures.

We encourage Members to review the privacy policies of any third-party service they interact with independently of the chas4d Platform.

chas4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory guidance. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify active Members via their registered email address.

Your continued use of the chas4d Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you disagree with any changes to this Policy, you should cease using the Platform and contact our support team to arrange account closure.

We recommend reviewing this Privacy Policy periodically — particularly before making significant financial transactions — to ensure you remain informed of how your Personal Data is handled.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about the way your Personal Data has been handled, please contact our support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly through the chas4d Platform interface
• Response Time: Privacy-related enquiries are typically addressed within 5 business days; urgent data breach notifications are handled within 24 hours

We are committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to a complaint, you retain the right to escalate your concern to the relevant data protection authority in your jurisdiction.

For responsible gaming concerns or self-exclusion requests, please visit our dedicated Responsible Gaming page for comprehensive guidance and support resources.