Privacy Policy

This Privacy Policy ("Policy") is issued by oyo4d ("oyo4d", "we", "us", or "our") and governs the collection, processing, storage, and transfer of personal data provided by or collected from individuals ("you", "User", "Player") who register for and use the online betting and gaming platform accessible at oyo4d.asia ("Platform"). This Policy forms an integral part of the oyo4d Terms & Conditions, available at oyo4d.asia/terms-conditions, and should be read alongside those Terms.

oyo4d operates as an English-language platform targeting Indonesian players across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, Palembang, and all other Indonesian cities and provinces. We are committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework and Indonesian data governance best practices.

The following terms carry the meanings set out below throughout this Policy:

oyo4d collects Personal Data through several distinct channels. The categories below describe what we collect, the source, and whether provision is mandatory or voluntary.

oyo4d processes your Personal Data only for specific, documented purposes. We do not use your data in ways incompatible with the purpose for which it was originally collected. Our primary processing purposes are:

• Account Management: To create, maintain, verify, and close your registered Account; to authenticate your identity at login; to enforce the one-account-per-player policy; and to manage Account settings including deposit limits and notification preferences.
• Transaction Processing: To process IDR deposits and withdrawals through your chosen local bank (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja); to reconcile account balances; and to investigate and resolve disputed transactions.
• Identity & Age Verification (KYC): To confirm that you are at least 21 years of age, that you are who you claim to be, and that you are not subject to any self-exclusion or platform-imposed restriction before processing withdrawals or granting full Platform access.
• Legal & Regulatory Compliance: To fulfil anti-money-laundering (AML) obligations, counter-terrorist financing (CTF) requirements, responsible gaming mandates, and any applicable data retention obligations imposed by relevant international regulatory frameworks.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, collusion, money laundering, and any other activity prohibited by the Terms & Conditions; to protect the integrity of the Platform and the interests of all registered players.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the Platform's performance, reliability, game selection, and user experience for Indonesian players across all devices and connection speeds.
• Personalisation: To display relevant game recommendations, promotional offers, and sports betting markets (such as BRI Liga 1 fixtures, Champions League matches, or Timnas Indonesia qualifying games) based on your recorded activity and stated preferences.
• Marketing Communications: To send you promotional emails, bonus notifications, and seasonal campaign messages (for example, Idul Fitri special offers, Indonesian Independence Day promotions, or Champions League bonus events) where you have given explicit consent. You may withdraw consent at any time via your Account settings or by emailing [email protected].
• Responsible Gaming: To honour and enforce deposit limits, session time reminders, self-exclusion periods, and cooling-off requests; to monitor for behavioural indicators of problem gambling and, where appropriate, proactively contact affected Users in English or Bahasa Indonesia with support resources.
• Customer Support: To respond to your enquiries, complaints, and formal written requests; to maintain records of support interactions for quality assurance; and to resolve disputes in a documented, auditable manner.

Every processing activity described in Section 3 rests on one or more of the following internationally recognised legal bases:

oyo4d does not sell, rent, or trade your Personal Data to any third party for their own commercial gain. We share your data only in the following limited, controlled circumstances:

• Payment Service Providers: We share financial data (account name, bank code, transaction reference, IDR amount) with our payment gateway and banking partners — including intermediaries supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely to process your deposits and withdrawals. These providers are contractually bound to handle your data securely and only for payment processing purposes.
• KYC / Identity Verification Vendors: Document images submitted during KYC (KTP, passport, driving licence, utility bills) are processed by accredited third-party identity verification specialists operating under strict data processing agreements with oyo4d. They verify authenticity and age compliance on our behalf and do not retain your documents beyond the verification window.
• Game Content Studios: Technical session tokens and pseudonymised player identifiers may be shared with our game content partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to authenticate your game session and enable real-money wagering within their certified game engines. No directly identifiable personal data (name, bank details, KTP) is passed to game studios.
• Cloud Infrastructure & Hosting: Platform data is stored on encrypted servers provided by enterprise-grade cloud infrastructure partners. These partners act as Processors under our instructions and may not access or use your data for any purpose other than providing the contracted hosting services.
• Fraud & AML Intelligence Networks: Aggregated, pseudonymised risk signals (IP reputation scores, device fingerprints, transaction velocity patterns) may be shared with fraud prevention consortiums and AML screening databases to protect the wider online gaming ecosystem from financial crime. No readable personal identifiers are included in such exchanges.
• Legal Authorities: oyo4d will disclose Personal Data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by a valid legal order, warrant, or regulatory demand. We will, where legally permissible, notify you of such a disclosure.
• Business Transfers: In the event of a merger, acquisition, asset sale, or restructuring of the oyo4d business, your Personal Data may be transferred to the acquiring or successor entity. We will notify registered Users via email or Platform notice prior to any such transfer, and the receiving entity will be bound by privacy obligations at least as protective as those in this Policy.

oyo4d.asia uses cookies and similar tracking technologies (web beacons, pixel tags, local storage objects) to operate core Platform functionality, measure performance, and personalise your experience. The table below describes the categories of cookies we use.

You can manage or delete cookies at any time through your browser's privacy settings. Please be aware that disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling functional cookies will result in a reduced, less personalised experience. Full instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Samsung Internet — all commonly used by Indonesian players) are available in each browser's official Help documentation.

oyo4d retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected and to meet applicable legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised using industry-standard data sanitisation techniques. Where anonymisation is applied, the resulting data set cannot be re-linked to you and is no longer considered Personal Data under this Policy.

oyo4d implements a multi-layered security framework designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Our core security controls include:

• Transport Encryption: All data transmitted between your browser or mobile device and the oyo4d.asia servers is encrypted using 256-bit TLS/SSL protocols. The Platform enforces HTTPS-only connections; unencrypted HTTP requests are automatically redirected.
• Encryption at Rest: Personal Data stored on Platform servers — including KYC documents, financial records, and betting history — is encrypted at rest using AES-256 or equivalent cryptographic standards. Encryption keys are managed through a dedicated, access-controlled key management system.
• Access Controls: Access to Personal Data within oyo4d's internal systems is restricted on a strict need-to-know basis. All staff members with data access are subject to role-based access controls, and access logs are reviewed regularly by our security team.
• Multi-Factor Authentication: oyo4d's internal administrative systems require multi-factor authentication (MFA) for all staff accessing data repositories. We strongly encourage all registered Players to enable two-factor authentication on their Accounts via their Account security settings.
• Penetration Testing & Vulnerability Management: The Platform undergoes regular third-party penetration testing and continuous automated vulnerability scanning. Critical findings are remediated within defined SLA windows before exploitation risk materialises.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, oyo4d will notify affected Users without undue delay — and no later than 72 hours after becoming aware of the breach — providing details of what data was involved, the likely consequences, and the steps we have taken to mitigate the impact.

As a registered oyo4d Player, you hold the following rights in relation to your Personal Data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your Account. We will respond within 30 calendar days and will not charge a fee for reasonable requests.

oyo4d is an adult-only platform. Registration is strictly limited to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain Personal Data from anyone under the age of 21, in line with both our licensing conditions and responsible gaming best practices applicable to the Indonesian market.

• Age Verification at Registration: All new Accounts are subject to date-of-birth verification during registration. Full KYC checks — including submission of a government-issued ID such as an Indonesian KTP — are required before any withdrawal is processed, providing a secondary age confirmation layer.
• Discovery of Underage Accounts: If oyo4d discovers or has reasonable grounds to believe that a registered User is under 21 years of age, we will immediately suspend the Account, freeze any balance pending investigation, and initiate our underage Account closure procedure in accordance with our licensing obligations. Any winnings generated by an underage Account will be forfeited.
• Data Deletion: Any Personal Data collected in connection with an underage Account will be permanently deleted from our systems upon confirmation of underage status, subject only to the minimum retention required to document the investigation and closure for regulatory audit purposes.
• Parental Controls: Parents and guardians who believe a minor in their household may have accessed oyo4d without authorisation should contact [email protected] immediately. We will treat such reports as high-priority and respond within 24 hours (WIB). We also recommend that households with minors install internet filtering software and enable device-level parental controls on any device that may be used to access gambling platforms.

oyo4d operates as an international platform serving Indonesian players. As a result, your Personal Data may be transferred to, stored in, or processed in countries outside Indonesia — including the locations of our cloud infrastructure providers, KYC partners, and game content studios. Such countries may have data protection laws that differ from those of Indonesia.

• Transfer Safeguards: Where Personal Data is transferred to a country that does not provide an equivalent level of data protection, oyo4d implements appropriate safeguards — including contractual clauses based on internationally recognised model contract terms, binding corporate rules where applicable, and vendor due diligence assessments — to ensure that your data receives adequate protection regardless of where it is processed.
• Processor Obligations: All third-party Processors who receive Personal Data from oyo4d are required to sign a Data Processing Agreement (DPA) that mandates compliance with the data protection standards set out in this Policy, restricts sub-processing without oyo4d's prior written consent, and requires prompt notification of any security incident involving oyo4d data.
• Data Localisation: Where technically and commercially feasible, oyo4d prefers to use data centre infrastructure with points of presence in Southeast Asia to minimise cross-border data flows and reduce latency for Indonesian users. Specific infrastructure locations are subject to change; contact [email protected] for the most current information.

oyo4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform functionality. All amendments are governed by the following notification and acceptance process:

• Notification of Changes: Where we make a material change to this Policy — one that meaningfully affects how we collect, use, or share your Personal Data — we will notify all registered Users via their registered email address at least 14 calendar days before the change takes effect. Non-material clarifications (correcting typos, reorganising sections for readability) may be published without advance notice.
• Effective Date: The "Effective Date" displayed at the top of this Policy always reflects the date the current version came into force. Prior versions are archived and available upon request by emailing [email protected].
• Continued Use as Acceptance: Your continued use of the Platform after the notified effective date of a material amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended terms, you must cease using the Platform and may request Account closure by contacting [email protected] before the effective date.
• Translations: This Policy is published in English. If a Bahasa Indonesia translation is made available as a courtesy, the English version shall prevail in the event of any conflict or discrepancy between the two versions.

For any questions, concerns, or formal complaints regarding this Privacy Policy or the way oyo4d processes your Personal Data, please contact our dedicated support team using the details below. All privacy-related communications are handled by staff with specific data protection responsibilities.