Privacy Policy

1. Introduction

Welcome to the esa4d Privacy Policy. This document explains how esa4d ("we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you use our online gaming platform at https://esa4d.cam (the "Website") and all associated services.

At esa4d, we are committed to protecting your privacy and handling your personal data with transparency, integrity, and in compliance with applicable data protection laws. This Privacy Policy applies to all Indonesian residents aged 21 and above who register for and use our services.

By creating an account or using esa4d services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, please do not use our services.

2. Data Controller

esa4d is the data controller responsible for your personal information collected through our platform. We determine the purposes and means of processing your personal data in accordance with this Privacy Policy and applicable data protection regulations.

For all privacy-related inquiries, data subject requests, or concerns about how your information is handled, you may contact our Data Protection Officer at:

• Email: [email protected]
• Subject Line: Privacy Inquiry / Data Subject Request
• Response Time: Within 30 days of receipt

3. Information We Collect

We collect several categories of personal information to provide, maintain, and improve our services. The information we collect includes:

3.1 Information You Provide Directly

• Account Registration Data: Full legal name (as shown on your KTP / Indonesian ID card), date of birth, gender, residential address, email address, mobile phone number, chosen username, and secure password.
• Identity Verification Documents: Copies of your KTP (Indonesian national ID card), selfie photographs holding your ID card, and in some cases proof of address (utility bill or bank statement) and proof of source of funds for large transactions.
• Payment Information: Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and others; e-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja; transaction history including deposits, withdrawals, and payment method preferences.
• Communication Records: Customer support inquiries via live chat, email, or WhatsApp; feedback and survey responses; correspondence regarding disputes, complaints, or account issues.
• Marketing Preferences: Your consent to receive promotional emails, SMS messages, or push notifications; preferences regarding bonus offers and special promotions.

3.2 Information Collected Automatically

• Gaming Activity Data: Bets placed, games played, stakes, wins, losses, wagering patterns, game preferences, session duration, and frequency of play.
• Device & Technical Information: IP address, device type (smartphone, tablet, computer), operating system (Android, iOS, Windows), browser type and version, screen resolution, language settings, time zone (WIB, WITA, WIT).
• Usage Analytics: Pages visited, features used, time spent on platform, click patterns, navigation paths, error logs, and performance data.
• Location Data: General geographic location derived from IP address to ensure compliance with regional restrictions and personalize content relevant to Indonesian users (Jakarta, Surabaya, Medan, Bali, etc.).
• Cookies & Tracking Technologies: Session cookies, preference cookies, analytics cookies, and marketing cookies (see Section 10 for detailed information).

3.3 Information from Third-Party Sources

• Payment Processors: Transaction confirmation, payment success/failure status, and fraud detection signals from banking partners and e-wallet providers.
• Identity Verification Services: Validation of ID documents and anti-fraud checks performed by third-party KYC verification providers.
• Affiliate & Marketing Partners: Referral source information if you registered through a marketing affiliate or promotional campaign.

4. How We Use Your Information

esa4d uses your personal information for the following purposes:

4.1 Service Delivery & Account Management

• Create, maintain, and secure your esa4d account
• Process deposits, withdrawals, and manage your account balance in Indonesian Rupiah (IDR)
• Enable access to casino games, live dealer experiences, sports betting (including BRI Liga 1, EPL, Champions League), and lottery products (including togel Singapore, Hongkong, Sydney, and Macau markets)
• Record gaming transactions and maintain accurate account history
• Provide customer support via live chat, email, and WhatsApp

4.2 Legal & Regulatory Compliance

• Verify your identity, age (21+ requirement), and residency status
• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detect and prevent fraud, money laundering, underage gambling, and other illegal activities
• Respond to legal requests from regulatory authorities or law enforcement
• Maintain records required by gaming licenses and Indonesian financial regulations

4.3 Platform Improvement & Analytics

• Analyze usage patterns to improve website performance, speed, and mobile optimization for Indonesian networks
• Develop new features, games, and payment methods based on user preferences
• Conduct research on responsible gaming behaviors and player protection
• Test new technologies, A/B test features, and optimize user experience

4.4 Marketing & Personalization

• Send promotional offers, bonus notifications, and personalized recommendations (with your consent)
• Deliver targeted content relevant to Indonesian players (promotions for Indonesian Independence Day, Idul Fitri, Chinese New Year, etc.)
• Notify you of new games from providers like Pragmatic Play, Evolution Gaming, Spribe, and others
• Communicate updates to terms, policies, or service changes

4.5 Responsible Gaming & Player Protection

• Monitor gaming behavior for signs of problem gambling
• Enforce deposit limits, loss limits, and self-exclusion requests
• Provide tools for responsible gaming including session reminders and reality checks
• Contact players proactively if we detect concerning patterns (excessive play, rapid losses)

5. Legal Basis for Processing

Under applicable data protection laws, we process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms and Conditions) and deliver the services you requested.
• Legal Obligation: Processing is required to comply with legal obligations including KYC/AML verification, age verification, tax reporting, and regulatory record-keeping.
• Legitimate Interest: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, service improvement, and internal analytics, provided these interests do not override your fundamental rights.
• Consent: For marketing communications, certain cookies, and optional data processing, we obtain your explicit consent, which you may withdraw at any time.

6. Data Sharing & Third Parties

esa4d does not sell, rent, or trade your personal information to third parties for their marketing purposes. We only share your data with the following categories of recipients when necessary:

6.1 Service Providers

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC providers to verify your identity documents and perform fraud checks.
• Cloud Hosting & Storage: Secure server providers to host our platform and store encrypted data backups.
• Customer Support Tools: Live chat software providers and email service platforms to deliver support services.
• Analytics & Performance Monitoring: Services like Google Analytics (anonymized) to measure website performance and user behavior.

6.2 Game Providers

Gaming content providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive limited technical data (session ID, bet amounts) to deliver game functionality, but do not receive your identity or contact information.

6.3 Legal & Regulatory Authorities

We may disclose your information to regulatory bodies, law enforcement, tax authorities, or courts when required by law or to comply with legal processes, prevent fraud, protect our rights, or ensure public safety.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

7. Data Security Measures

esa4d implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected with 256-bit SSL (Secure Socket Layer) encryption, the same standard used by banks worldwide.
• Secure Storage: Personal data is stored on encrypted servers in secure data centers with 24/7 physical security, access controls, and environmental monitoring.
• Access Controls: Only authorized personnel with legitimate business needs can access personal data, subject to strict access logging and regular audits.
• Firewall Protection: Advanced firewalls and intrusion detection systems protect our infrastructure from unauthorized access attempts.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments quarterly.
• Employee Training: All staff members receive regular data protection and security training to ensure responsible data handling.
• Incident Response Plan: We maintain a detailed security incident response plan and will notify affected users within 72 hours of discovering a data breach.

While we implement industry-leading security measures, no method of internet transmission or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should use a strong, unique password.

8. Data Retention

esa4d retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:

Data Category	Retention Period	Reason
Account Registration Data	Duration of active account + 7 years	Legal & regulatory requirements
Transaction History	7 years from transaction date	Financial record-keeping, tax compliance
Identity Verification Documents	7 years from account closure	KYC/AML compliance
Gaming Activity Logs	7 years from activity date	Dispute resolution, regulatory audits
Marketing Communications	Until consent withdrawn + 90 days	Marketing compliance
Support Inquiries	3 years from resolution	Service improvement, dispute evidence
Technical Logs (IP, device)	1 year	Security monitoring, fraud prevention

After the applicable retention period expires, we securely delete or anonymize your personal data. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical analysis and research purposes.

9. Your Privacy Rights

As an esa4d user, you have the following rights regarding your personal data:

9.1 Right to Access

You may request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days.

9.2 Right to Rectification

You may update or correct inaccurate personal information through your account settings or by contacting support. We will update our records within 7 business days.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in certain circumstances, subject to legal record-keeping obligations. Data required for compliance (financial records, KYC documents) must be retained for the legally mandated period.

9.4 Right to Restrict Processing

You may request that we temporarily restrict processing of your personal data while we investigate a data accuracy dispute or assess your objection to processing.

9.5 Right to Data Portability

You may request a copy of your data in a portable format (CSV, JSON) to transfer to another service provider.

9.6 Right to Object

You may object to processing based on legitimate interests (such as marketing analytics). We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on consent (marketing emails, optional cookies), you may withdraw consent at any time via account settings, unsubscribe links, or by contacting support.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your request and account verification details. We will respond within 30 days.

10. Cookies & Tracking Technologies

esa4d uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device when you visit our website.

10.1 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality including account login, session management, and security. These cannot be disabled.
• Performance Cookies: Collect anonymous usage data (pages visited, time on site, error messages) to improve platform performance.
• Functional Cookies: Remember your preferences (language, currency format, game favorites) to personalize your experience.
• Marketing Cookies: Track your interaction with promotional content to measure campaign effectiveness and deliver relevant offers (requires consent).

10.2 Third-Party Cookies

We use third-party analytics services (Google Analytics with IP anonymization) to understand user behavior. These services may set their own cookies subject to their privacy policies.

10.3 Managing Cookie Preferences

You can control cookie preferences through your browser settings. Note that disabling certain cookies may impact website functionality. Most browsers allow you to: block all cookies, accept only first-party cookies, delete cookies after closing the browser, or review stored cookies.

11. International Data Transfers

esa4d primarily serves Indonesian residents and stores data on servers located in secure, internationally certified data centers. Some service providers (cloud hosting, payment processors, game providers) may process data in jurisdictions outside Indonesia.

When data is transferred internationally, we ensure adequate protection through: data processing agreements incorporating standard contractual clauses approved by data protection authorities, ensuring recipient countries have adequate data protection laws, or obtaining your explicit consent for specific transfers.

12. Children's Privacy

esa4d services are strictly restricted to adults aged 21 and above. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that a user is underage, we will immediately close the account, delete all associated personal data, and forfeit any account balance.

Parents and guardians are responsible for monitoring minors' internet usage. If you believe a minor has created an account on esa4d, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Policy

esa4d reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or service offerings. Material changes will be communicated via:

• Email notification to your registered email address
• Prominent banner notification on the website
• Update to the "Last Updated" date at the top of this policy

Your continued use of esa4d services after notification constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• 24/7 Live Chat: Available on every page
• WhatsApp: +62 812-3456-7890 (08:00 - 02:00 WIB)

We aim to respond to all privacy inquiries within 30 days. For urgent security concerns (suspected account breach, unauthorized access), contact us immediately via live chat for priority assistance.