Privacy Policy

1. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or factors specific to the physical, economic, or social identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, pos4wd.
• "Data Processor" means a third party that processes Personal Data on behalf of pos4wd under a written data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process required to operate a regulated gaming account.
• "Cookies" means small text files placed on your device by the pos4wd platform to enable functionality, analytics, and personalisation.
• "Platform" means the pos4wd website at https://pos4wd.cam and any associated mobile applications or services.

2. Data Controller Identity

2.1 pos4wd operates as the Data Controller for all personal data collected through the Platform. As Data Controller, pos4wd is responsible for determining the purposes for which your personal data is processed and for ensuring that such processing is carried out lawfully, fairly, and transparently.

2.2 pos4wd is an internationally licensed online gaming operator. Our primary operational infrastructure is hosted in a jurisdiction with robust data protection frameworks consistent with international standards.

2.3 For all data protection enquiries, requests, and complaints, please contact our Data Protection team at:

3. Categories of Personal Data We Collect

3.1 pos4wd collects personal data across several categories, depending on how you interact with the Platform:

3.1 Identity & Registration Data

• Full legal name (as it appears on your KTP — Indonesian National Identity Card)
• Date of birth and age verification information
• Residential address in Indonesia (province, city, postal code)
• Email address and mobile phone number
• Username and encrypted password
• KTP number (for KYC verification purposes)
• Selfie photograph submitted alongside KTP for identity verification

3.2 Financial & Transaction Data

• Bank account numbers and registered account holder names (BCA, BRI, BNI, Mandiri)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit amounts, dates, and transaction reference numbers
• Withdrawal requests, amounts, and processing confirmations
• Bonus credits, wagering history, and promotional redemptions

3.3 Usage & Behavioural Data

• IP address and approximate geolocation (city / region level)
• Device type, operating system, browser type and version
• Pages visited, time spent, navigation paths, and click data
• Betting and gaming activity including game types played, stakes, and outcomes
• Session start/end times and frequency of play

3.4 Communications Data

• Live chat transcripts between you and our support agents
• Email correspondence with our team
• Feedback and complaints submitted through any channel

4. How We Collect Your Data

4.1 pos4wd collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, or contacting our support team.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser data, and session activity via cookies and server logs.
• Third-party sources: Identity verification data returned by our KYC service providers when cross-referencing your submitted documents against authoritative databases. Payment confirmation data received from your bank or e-wallet provider upon transaction completion.
• Responsible gaming monitoring: Behavioural pattern data generated through your gaming activity, used by our responsible gaming systems to identify signs of problem gambling and trigger appropriate interventions.

4.2 We do not purchase personal data lists from third-party data brokers, and we do not collect data from your social media profiles without your explicit consent.

5. Purposes of Processing

5.1 pos4wd processes your personal data for the following clearly defined purposes:

• Account management: Creating, maintaining, and administering your player account, including authentication and password management.
• Identity verification (KYC): Confirming that you are at least 21 years of age and the legitimate holder of the payment methods registered to your account, as required by our international gaming licence conditions.
• Payment processing: Facilitating deposits and withdrawals through your chosen Indonesian banking or e-wallet channel, including fraud screening on all financial transactions.
• Gaming and betting operations: Recording your bets, settling markets, crediting winnings, applying bonus terms, and maintaining a complete and auditable transaction history.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of communications for quality assurance and training purposes.
• Fraud prevention and security: Detecting and preventing unauthorised account access, multi-accounting, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Responsible gaming: Monitoring your gameplay patterns to identify potential problem gambling behaviour and delivering self-exclusion, deposit limit, and session limit tools as described on our Responsible Gaming page.
• Legal and regulatory compliance: Meeting our obligations under the laws of our licensing jurisdiction, including record-keeping, reporting, and audit requirements.
• Marketing communications (opt-in only): Sending you promotional offers, bonus alerts, and product news where you have explicitly opted in to receive such communications.
• Platform improvement: Using aggregated, anonymised usage data to improve the Platform's performance, user experience, and product offering.

6. Legal Basis for Processing

6.1 pos4wd relies on the following legal bases for processing your personal data:

• Contractual necessity: The majority of our processing — account management, payment processing, KYC, game settlement — is necessary for the performance of the contract between you and pos4wd (your account agreement and these Terms & Conditions).
• Legitimate interests: Fraud prevention, security monitoring, responsible gaming surveillance, and platform improvement are carried out on the basis of our legitimate interests in operating a safe, fair, and sustainable gaming business, balanced against your rights and freedoms.
• Legal obligation: Certain data retention and reporting activities are required by our licensing conditions and applicable anti-money-laundering laws.
• Consent: Marketing communications are processed solely on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing & Third-Party Processors

7.1 pos4wd does not sell, rent, or commercially transfer your personal data to third parties. We share personal data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage regulated third-party service providers to perform specific functions on our behalf. Each provider is contractually bound by a Data Processing Agreement that prohibits them from using your data for any purpose other than the service they provide to us:

• KYC and identity verification providers: Receive your submitted identity documents and photographs to perform age and identity checks.
• Payment gateway operators: Process deposit and withdrawal transactions through Indonesian banking networks (BCA, BRI, BNI, Mandiri) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Game software providers: Receive anonymised session data necessary to operate games and verify fair-play outcomes. Providers such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft operate under strict data minimisation requirements.
• Cloud infrastructure providers: Host the Platform and database infrastructure under enterprise data security agreements.
• Fraud detection and cybersecurity providers: Analyse transaction and behavioural patterns to detect and prevent financial crime and account compromise.

7.2 Legal and Regulatory Disclosures

pos4wd may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by a valid legal order, court ruling, or regulatory direction. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and will notify the affected Player where legally permitted to do so.

8. International Data Transfers

8.1 As an internationally operated platform serving Indonesian players, some personal data processed by pos4wd may be transferred to, stored in, or accessed from countries outside Indonesia. This may occur when our cloud infrastructure, KYC providers, or game software partners operate data centres in other jurisdictions.

8.2 Whenever personal data is transferred internationally, pos4wd implements appropriate safeguards to ensure that your data receives an equivalent level of protection to that afforded within Indonesia, including:

• Contractual data protection clauses with all Data Processors that impose obligations consistent with internationally recognised data protection standards.
• Technical safeguards including end-to-end encryption for all data in transit across international networks.
• Restricting access to personal data to only those personnel and systems that require it for the specific processing purpose.

8.3 By using the pos4wd Platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia and consent to such transfers where they are carried out in accordance with the safeguards described in this clause.

9. Data Retention

9.1 pos4wd retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following retention periods apply:

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible. Backups are purged on a rolling schedule consistent with these retention periods.

10. Cookies & Tracking Technologies

10.1 pos4wd uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and collect usage analytics. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These enable secure login sessions, shopping-cart functionality (where applicable), and fraud prevention. They cannot be disabled without impairing the Platform's operation.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display options. Disabling these may reduce the personalised experience but will not prevent basic use of the Platform.
• Analytics cookies: Collect anonymised, aggregated data about how Players navigate the Platform, which pages they visit most, and where they encounter errors. This data is used solely to improve the Platform and is not shared with advertising networks.
• Session security cookies: Maintain the integrity and continuity of your login session and protect against cross-site request forgery (CSRF) attacks.

10.2 pos4wd does not use third-party advertising cookies or cross-site tracking pixels. We do not participate in behavioural advertising networks.

10.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your account.

11. Your Data Rights

11.1 Subject to applicable law and the conditions described below, you have the following rights in relation to your personal data held by pos4wd:

• Right of Access: You may request a copy of all personal data pos4wd holds about you, together with information about how and why it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For data that you can update directly through your account settings, please do so in the first instance.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based. This right is subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including for responsible gaming monitoring purposes, subject to our overriding legal obligations.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 calendar days. Complex or multiple requests may take up to 60 days, in which case we will notify you of the extended timeline.

12. Security Measures

12.1 pos4wd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption for all sensitive data stored at rest, including KYC documents and financial records.
• Multi-factor authentication (MFA) available for all player accounts and mandatory for all internal staff systems.
• Role-based access controls ensuring that staff members can only access the personal data necessary to perform their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent security firms on a quarterly basis.
• 24/7 intrusion detection and monitoring with automated alerting for anomalous access patterns.
• Data breach response plan — in the event of a confirmed data breach affecting your personal data, we will notify you and the relevant regulatory authority within 72 hours of becoming aware of the breach, as required by applicable law.

12.2 While pos4wd takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect any unauthorised access.

13. Children's Privacy

13.1 The pos4wd Platform is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes mandatory age verification steps, and KYC procedures are applied to confirm the age of all players before full account privileges are granted.

13.2 If pos4wd discovers or is notified that it has inadvertently collected personal data from a person under 21, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds to the source payment method.

13.3 Parents and legal guardians are encouraged to use appropriate parental control software to prevent minors from accessing gambling websites. If you believe a minor has accessed the Platform using your details or a false identity, please contact us immediately at [email protected].

14. Changes to This Privacy Policy

14.1 pos4wd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When we make material changes to this Policy, we will:

• Update the "Effective Date" at the top of this page.
• Post a prominent notice on the Platform homepage for a minimum of 14 days following the update.
• Send a notification email to all registered players with a verified email address, summarising the key changes.

14.2 Your continued use of the Platform after the updated Policy's effective date constitutes acceptance of the revised terms. If you do not agree with the changes, you must stop using the Platform and submit a data deletion request as described in Section 11.

14.3 We recommend reviewing this Policy periodically. The current version is always the authoritative version and is published at https://pos4wd.cam/privacy-policy.

15. Contact & Complaints

15.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the pos4wd Data Protection team through the following channels:

• Email: [email protected] — Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 through the in-app chat widget. Indonesian-speaking agents are on duty around the clock and can assist with privacy questions in Bahasa Indonesia.
• Response time: We aim to acknowledge all privacy-related correspondence within 3 business days and to resolve substantive requests within 30 calendar days.

15.2 If you are dissatisfied with our response to a data protection complaint, you have the right to escalate the matter to the relevant supervisory authority in the jurisdiction where pos4wd holds its gaming licence, or to seek resolution through the arbitration process described in our Terms & Conditions.