Privacy Policy

cici4d retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your Account plus a minimum of 5 years following account closure, in compliance with AML and financial record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by applicable financial regulations.
• Gaming Activity Data: Retained for 3 years from the date of each session or wager, used for responsible gaming monitoring, dispute resolution, and analytics.
• Communications and Support Records: Retained for 2 years from the date of the last interaction, used for quality assurance and dispute handling.
• Technical and Cookie Data: Session cookies are deleted at the end of your browser session. Persistent analytics data is retained for up to 13 months.
• Marketing Preferences: Retained until you withdraw consent or close your Account, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures. Anonymized data may be retained indefinitely for statistical and research purposes, as it no longer constitutes personal data.

cici4d implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Encrypted Data Storage: Sensitive personal data and financial records are stored using AES-256 encryption at rest within ISO 27001-certified data centers.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with data access undergo background screening and mandatory data protection training.
• Two-Factor Authentication (2FA): Available to all members and mandatory for all internal administrative systems.
• Penetration Testing: Our infrastructure undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach likely to result in a high risk to your rights and freedoms, we will notify affected users without undue delay.

cici4d uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The following categories of cookies are used:

Strictly necessary cookies cannot be disabled as they are essential to Platform operation. You may disable functional, analytics, and marketing cookies through your browser settings; however, doing so may impair certain Platform features. Most modern browsers allow you to view, manage, and delete cookies through the browser's privacy or settings menu.

We do not use cookies to build third-party advertising profiles or share tracking data with external advertising networks.

As a data subject, you hold the following rights with respect to your personal data held by cici4d. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we limit processing of your data in certain circumstances, such as while a dispute is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

We will respond to all valid rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

cici4d operates globally and some of our Data Processors — including game studio providers and cloud infrastructure partners — may process personal data outside of Indonesia. Where personal data is transferred internationally, cici4d ensures that adequate safeguards are in place, including:

• Standard contractual clauses approved by recognized data protection authorities.
• Data processing agreements imposing equivalent data protection standards on the receiving entity.
• Transfer only to jurisdictions with recognized adequacy decisions or equivalent data protection frameworks.

Game data transmitted to studios such as Evolution Gaming, Pragmatic Play, and Pocket Games Soft for the purpose of game delivery is limited to technical session identifiers and game outcome data. No full personal profiles are transferred to game studios for their own independent use.

The cici4d Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered an Account or submitted personal data to us, please contact our support team immediately at [email protected].

Upon receiving a credible report of underage registration, cici4d will promptly investigate, suspend the Account, delete all associated personal data to the extent legally permissible, and void any transactions made from that Account.

Parents and guardians are encouraged to make use of parental control software to restrict access to online gaming platforms. cici4d also employs automated age-screening tools as part of the registration process to help prevent underage access.

cici4d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will notify you by displaying a prominent notice on the Platform or by sending a notification to your registered email address prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the publication of an updated policy constitutes your acknowledgment of the changes.

If you do not agree with any changes to this Privacy Policy, you should cease using the Platform and may request Account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the Platform
• WhatsApp: +62 812-3456-7890 (08:00–22:00 WIB)

All privacy-related inquiries are handled by our dedicated Data Protection Officer. We aim to respond to all requests within 72 hours during business hours (08:00–22:00 WIB, Monday through Sunday).

For concerns related to responsible gaming, data-linked self-exclusion, or account closure, please also refer to our Responsible Gaming page or our FAQ for further guidance.