lol4d Privacy Policy

lol4d ("we", "us", "our") operates the online betting and casino platform accessible at https://lol4d.bio (the "Platform"). We serve players across Indonesia, including in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, and beyond. In the course of providing our services — which include sports betting, live casino, togel (Indonesia's traditional numbers lottery), slots, and in-play wagering — we necessarily collect and process personal data relating to our registered players and website visitors.

This Privacy Policy explains in clear, plain English what personal data lol4d collects, the purposes for which it is collected, how it is stored and protected, with whom it may be shared, how long it is retained, and the rights you have in relation to your personal data. This policy applies to all users of the Platform, regardless of how they access it — desktop browser, mobile browser, or any future native application.

By creating an account on lol4d or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, please stop using the Platform and contact our support team to request account closure.

lol4d is the data controller responsible for your personal data collected through the Platform. As data controller, lol4d determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all privacy-related enquiries, data subject rights requests, or complaints regarding the handling of your personal data, please contact our designated data privacy contact using the details provided in Section 15 of this policy.

lol4d collects the categories of personal data described below. We collect only what is necessary for the specific purposes described in Section 5 and do not collect sensitive categories of personal data (such as racial or ethnic origin, religious beliefs, or health data) unless strictly required by applicable law or regulation.

3.1 Registration Data

When you create an account, we collect your full legal name, date of birth, gender (optional), residential address in Indonesia, email address, and mobile phone number. This information forms the foundation of your player profile and is used for account management, KYC verification, and compliance purposes.

3.2 Identity Verification (KYC) Data

Before your first withdrawal, you are required to complete our Know Your Customer (KYC) process. This involves submitting copies of government-issued identity documents — such as your Indonesian National Identity Card (KTP), passport, or driving licence — as well as proof of address and proof of ownership of your payment method (e.g., a bank statement from BCA, BRI, BNI, Mandiri, CIMB Niaga, or an e-wallet screenshot from OVO, DANA, GoPay, ShopeePay, or LinkAja). KYC documents are handled with enhanced security controls and are retained only for as long as required by applicable regulations.

3.3 Financial Data

We record details of all deposits, withdrawals, and in-account transactions denominated in Indonesian Rupiah (IDR / Rp). We do not store full bank account numbers or full card numbers on our servers; only masked payment references and the last four digits of an account number where relevant are retained. All financial processing is handled via secure, PCI-DSS-compliant payment intermediaries.

3.4 Gaming and Betting Activity Data

We record all bets placed, game sessions initiated, outcomes, bonus claims, and wagering history on the Platform. This data is used for account management, dispute resolution, fraud detection, responsible gaming monitoring, and for delivering personalised promotional offers to players who have opted in to marketing communications.

3.5 Technical and Device Data

We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, device type and operating system, screen resolution, referring URL, pages visited, session duration, and click-path data. This data is collected via server logs and, where applicable, cookies and similar tracking technologies (see Section 10).

3.6 Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain a record of the correspondence. This includes the content of your messages, the channel used, timestamps, and the resolution outcome. Communications data is used to manage your support case, train our support staff, and improve our service quality.

3.7 Marketing Preferences

Where you have opted in to receive promotional communications, we record your consent, the date it was given, and the specific channels (email, SMS, WhatsApp) for which consent was provided. We also record any subsequent opt-out requests.

lol4d collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC, make a deposit or withdrawal, place a bet, claim a bonus, contact support, or update your account profile.
• Automatically — through server logs, session tracking, cookies, and similar technologies when you browse or interact with the Platform.
• From third-party payment processors — when your bank or e-wallet provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) confirms a transaction, limited transactional metadata is shared with lol4d to update your account balance.
• From identity verification partners — lol4d may use third-party KYC verification services to cross-check the identity documents you submit against official databases, as permitted by applicable law.
• From fraud prevention services — we may receive risk scores or flags from fraud detection partners based on technical signals associated with your device or network.

The table below summarises the primary purposes for which lol4d processes your personal data and the categories of data involved in each purpose.

lol4d processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing that is necessary to perform our contract with you — i.e., to provide you with a player account and deliver the betting and gaming services you have requested. This covers account registration, deposits, withdrawals, bet processing, and customer support.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including KYC/AML obligations, data retention requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing that is necessary for lol4d's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics for product improvement.
• Consent: Where we rely on your consent as the legal basis — specifically, for sending personalised marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, update your preferences in account settings or contact our support team.

lol4d does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data with third parties only in the following circumstances, and only to the extent necessary for each purpose:

• Payment processors: To facilitate deposits and withdrawals, we share limited financial data with our payment processing partners. These partners are bound by contractual data protection obligations and are not permitted to use your data for any purpose beyond processing your transactions.
• KYC and identity verification providers: To verify your identity documents, we may share your KYC data with licensed identity verification service providers. These providers process data strictly under our instructions and on our behalf.
• Game providers: When you play a game hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, or Spribe — your player ID and session data are shared with that provider to enable gameplay. Game providers act as data processors under our supervision and are contractually prohibited from using this data for their own purposes.
• Fraud detection services: We share technical and behavioural signals with third-party fraud prevention vendors who help us identify suspicious activity, multi-accounting, and money laundering patterns.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a court order, or a valid regulatory demand. We will notify you of such a disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of lol4d's business, player data may be transferred to the acquiring entity, provided the acquiring entity agrees to uphold the privacy standards described in this policy.

lol4d's servers and primary data infrastructure are operated in jurisdictions that maintain internationally recognised data protection standards. Some of our third-party service providers — including game studios and KYC verification partners — may be located outside Indonesia and may process your personal data in their respective countries of operation.

Where personal data is transferred internationally, lol4d ensures that adequate safeguards are in place, including: contractual data protection clauses with all third-party processors; selection of service providers operating in jurisdictions with equivalent data protection standards; and technical security controls (encryption in transit and at rest) applicable to all international data flows.

lol4d retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve disputes or enforce our agreements. The following general retention schedules apply:

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data derived from player activity may be retained indefinitely for statistical analysis and product development, as it can no longer identify any individual.

lol4d uses cookies and similar browser-based tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit a website. The following categories of cookies are used on the Platform:

• Strictly necessary cookies: These are required for the Platform to function. They include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional cookies: These remember your preferences — such as your preferred language, display settings, and notification preferences — to personalise your experience on the Platform.
• Analytics cookies: We use first-party analytics cookies to understand how players navigate the Platform, which features are most used, and where users encounter difficulties. This data is aggregated and anonymised wherever possible.
• Security cookies: These help us detect and prevent fraudulent activity, including device fingerprinting cookies that support our multi-account detection systems.

lol4d does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent you from accessing some or all Platform features.

As a player on lol4d, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to all verified rights requests within 30 days, and in complex cases we will notify you if an extension is required.

The lol4d Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Registration requires you to confirm that you are at least 21 years of age, and our KYC process is designed to verify this declaration.

If lol4d becomes aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data, close the associated account, and return any funds in accordance with our Terms & Conditions. If you believe that a minor has registered on the Platform or that personal data of a minor is being processed, please notify us immediately using the contact details in Section 15.

lol4d implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and our servers, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encryption at rest for sensitive data categories including KYC documents, passwords (stored as salted hashes, never in plain text), and financial records.
• Access controls based on the principle of least privilege — only staff whose role requires access to specific data categories are granted that access, and all access is logged and audited.
• Two-factor authentication (2FA) available and encouraged for all player accounts to prevent unauthorised login.
• Regular security assessments including vulnerability scanning and penetration testing conducted by qualified security professionals.
• Incident response procedures to detect, contain, and remediate security incidents promptly, with player notification protocols in the event of a breach affecting personal data.
• Staff training on data protection best practices, social engineering awareness, and secure data handling procedures.

lol4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When material changes are made — such as a new data use purpose, a change in data sharing arrangements, or a significant change to retention periods — we will notify registered players by email or via a prominent in-Platform notification at least 7 days before the change takes effect.

Non-material amendments, such as corrections of typographical errors or clarifications that do not affect the substance of the policy, may be made without prior notice and will take effect upon publication. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how lol4d protects your personal data. Your continued use of the Platform after any amendment constitutes your acceptance of the updated policy. If you do not accept a material change, you should stop using the Platform and contact us to close your account.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a privacy-related complaint, please contact the lol4d data privacy team through any of the following channels. All privacy enquiries are handled by our dedicated compliance team, and we aim to acknowledge all requests within 48 hours.