Privacy Policy — alur4d Data Protection

1. Introduction

alur4d is committed to protecting the privacy and personal data of every Player who uses our platform. We recognize that our users — primarily players based in Indonesia — place significant trust in us when they share their personal information, and we take that responsibility seriously.

This Policy applies to all personal data collected through the alur4d website, mobile-optimized interface, and any related customer support or communication channels (including live chat, WhatsApp, and email). It should be read alongside our Terms & Conditions, which govern the overall agreement between alur4d and its Players.

We operate in accordance with internationally recognized data-protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

2. Data Controller

For the purposes of this Policy, alur4d acts as the data controller in respect of personal data collected from Players through the Site. This means we determine the purposes and means by which personal data is processed. Our contact details for data-related enquiries are set out in Clause 16 of this Policy.

Where we engage third-party service providers to process data on our behalf (such as payment processors or KYC verification services), those parties act as data processors and are bound by data processing agreements that impose obligations consistent with this Policy.

3. Data We Collect

We collect the following categories of personal data in connection with your use of the alur4d platform:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is inherent in identity document images submitted for KYC purposes.

4. How We Collect Data

alur4d collects personal data through the following means:

• Directly from you: When you register an Account, complete KYC, make a deposit or withdrawal request, contact our support team, or participate in a promotional offer;
• Automatically: When you access the Site, our systems automatically collect Technical Data and Usage Data via cookies, server logs, and similar tracking technologies (see Clause 11);
• From third parties: We may receive data from payment providers (confirming deposit or withdrawal status), identity verification service providers (confirming KYC outcomes), and fraud prevention databases.

5. Use of Personal Data

We use your personal data for the following purposes:

• To create, maintain, and manage your Account on the alur4d platform;
• To process deposits and withdrawals through your chosen Indonesian payment methods (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja);
• To verify your identity and age (ensuring compliance with our 21+ age restriction), and to conduct ongoing KYC and anti-money laundering (AML) checks;
• To communicate with you about your Account, transactions, bonuses, and service updates via email, WhatsApp, or in-platform notifications;
• To monitor responsible gaming indicators and to enforce deposit limits, self-exclusion requests, and cooling-off periods where applicable;
• To detect, investigate, and prevent fraud, collusion, match-fixing, bonus abuse, and other prohibited conduct described in our Terms & Conditions;
• To comply with applicable legal and regulatory obligations, including record-keeping requirements and responding to lawful requests from authorities;
• To improve our Services through analysis of Usage Data, identifying popular games, optimizing platform performance, and fixing technical issues;
• To personalize your experience on the Site, including displaying relevant promotions and game recommendations;
• To enforce our Terms & Conditions and to resolve disputes or investigate complaints.

6. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and alur4d (i.e., the Terms & Conditions), including Account creation, transaction processing, and service delivery;
• Legal Obligation: Processing is required to comply with applicable legal or regulatory obligations, such as KYC/AML requirements, financial record-keeping, and responding to lawful authority requests;
• Legitimate Interests: Processing is necessary for our legitimate business interests — including fraud prevention, platform security, service improvement, and marketing — provided such interests are not overridden by your fundamental rights and freedoms;
• Consent: In specific cases, such as the use of optional cookies for analytics or sending promotional communications, we rely on your explicit consent, which you may withdraw at any time.

7. Data Sharing & Disclosure

7.1 Sharing with Service Providers. We share your personal data with trusted third-party service providers who assist us in operating the platform. These include:

• Payment processors: Indonesian banks and e-wallet providers that process your deposits and withdrawals;
• KYC and verification vendors: Services that verify identity documents and check Players against fraud databases;
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, and Spribe that deliver casino and slot content on our platform;
• Cloud hosting and infrastructure providers: Services that host our servers and databases;
• Customer support tools: Platforms that enable live chat, WhatsApp Business integration, and email ticketing.

All service providers are bound by data processing agreements that require them to process data only on our instructions, to maintain appropriate security measures, and to delete or return data upon termination of the service relationship.

7.2 Legal Disclosures. We may disclose your personal data where required by law, including:

• In response to a valid court order, subpoena, or lawful request from a regulatory authority or law enforcement agency;
• To comply with anti-money laundering (AML) or counter-terrorist financing (CTF) obligations;
• To protect the rights, property, or safety of alur4d, our Players, or the public.

7.3 No Third-Party Marketing. We do not sell, rent, or trade your personal data to third-party marketers or advertisers. Your data is used solely for the purposes described in this Policy.

8. International Transfers

alur4d operates primarily for the Indonesian market, and we strive to process your data within Indonesia or in jurisdictions with equivalent data-protection standards. However, some of our service providers (such as cloud hosting platforms and game content providers) may be located outside Indonesia.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, such as:

• Standard contractual clauses approved for international data transfers;
• Verification that the recipient jurisdiction has been determined to offer adequate data protection;
• Binding corporate rules or certification schemes (such as ISO 27001) maintained by the data recipient.

You may contact us for further information regarding the safeguards applied to specific international data transfers.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal or regulatory obligations.

Specific retention periods include:

• Account data: Retained for the duration of your Account and for six (6) years following Account closure, to comply with financial record-keeping obligations and to resolve any disputes that may arise;
• Transaction records: Retained for seven (7) years following the transaction date, in accordance with AML and tax record-keeping requirements;
• KYC documents: Retained for five (5) years following Account closure or the date of the most recent verification check, whichever is later;
• Communications records: Retained for three (3) years to support dispute resolution and service quality assurance;
• Technical and usage logs: Retained for twelve (12) months for security and analytics purposes, after which they are aggregated or deleted.

Once the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be attributed to you.

10. Security Measures

alur4d employs industry-standard technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 protocol. Sensitive stored data (such as passwords and financial details) is encrypted at rest using AES-256 encryption;
• Access controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis, and subject to strict confidentiality obligations;
• Network security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning;
• Secure development practices: Our software undergoes regular security testing and code reviews to identify and remediate vulnerabilities;
• Incident response: We maintain an incident-response plan to promptly detect, investigate, and respond to data breaches or security incidents.

Despite these measures, no method of transmission over the internet or electronic storage is entirely secure. You are responsible for safeguarding your Account login credentials and for promptly notifying us of any suspected unauthorized access to your Account.

11. Cookies & Tracking Technologies

11.1 What Are Cookies? Cookies are small text files placed on your device by websites you visit. They allow the site to recognize your browser on subsequent visits and to store information about your preferences.

11.2 How We Use Cookies. alur4d uses cookies for the following purposes:

• Essential cookies: Necessary for core platform functionality, including session management, Account login, and security. These cookies cannot be disabled without preventing use of the Site;
• Performance cookies: Collect aggregated Usage Data to help us understand how Players interact with the Site, which pages are most popular, and where errors occur;
• Functionality cookies: Remember your preferences (such as language or display settings) to provide a personalized experience.

We do not use advertising or behavioral-profiling cookies on the alur4d platform. We do not share cookie data with third-party advertisers.

11.3 Managing Cookies. Most browsers allow you to control cookies through their settings. However, disabling essential cookies will prevent you from accessing or using key features of the Site. Consult your browser's help documentation for instructions on managing cookies.

12. Your Rights

You have the following rights in relation to your personal data held by alur4d:

To exercise any of these rights, please submit a request to our support team at [email protected] with the subject line "Data Subject Request". We will respond within thirty (30) calendar days of receipt. We may require verification of your identity before processing the request.

Where we cannot fully comply with your request (for example, because we are required to retain certain data for legal purposes), we will explain the reasons in our response.

You also have the right to lodge a complaint with a data protection supervisory authority if you believe we have processed your personal data unlawfully.

13. Minors

alur4d's Services are intended exclusively for individuals aged twenty-one (21) years or older. We do not knowingly collect personal data from individuals under this age. If you are under 21, you must not attempt to register an Account or use the Services.

If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and to close the associated Account. If you believe a minor has provided us with personal data, please contact us at [email protected] immediately.

14. Third-Party Links

The alur4d website may contain links to third-party websites or services (such as game provider sites or payment-method information pages). This Privacy Policy applies only to data collected by alur4d. We are not responsible for the privacy practices of third-party sites.

When you navigate away from the alur4d platform, we encourage you to read the privacy policy of the external site before providing any personal information.

15. Policy Amendments

alur4d reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or operational needs. Material changes will be communicated via a prominent notice on the Site and, where possible, by email to the address registered on your Account.

The date at which this Policy was last updated is displayed at the top of this document and in the sidebar. Your continued use of the Site following the effective date of any amendment constitutes your acceptance of the revised Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer using the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the Site
• WhatsApp: Available 24/7 — contact details displayed after login

We aim to acknowledge all privacy-related enquiries within forty-eight (48) hours and to provide a substantive response within thirty (30) calendar days.