Last Updated
January 15, 2026

1. Introduction and Scope

This Privacy Policy explains how arah4d ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects the personal information of users ("you", "your", "User") who access or use our online gambling platform available at https://arah4d.cam and any associated mobile applications or services (collectively, "the Platform", "our Services").

Your privacy and the security of your personal data are of paramount importance to arah4d. We are committed to protecting your information and handling it responsibly in accordance with the European Union General Data Protection Regulation (GDPR), Indonesian data protection laws, and international privacy best practices. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of our Services.

By creating an account, accessing our Platform, or using any of our Services, you acknowledge that you have read, understood, and agree to the data collection, use, and disclosure practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must immediately discontinue use of arah4d and refrain from creating an account.

Important: This Privacy Policy applies exclusively to information collected by arah4d through our Platform. It does not apply to information collected by third-party websites, applications, or services that you may access through links on our Platform. We are not responsible for the privacy practices of external sites or services.

2. Information We Collect

arah4d collects various types of personal information to provide, maintain, improve, and secure our gambling services. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register for an arah4d account, you voluntarily provide us with personal information including but not limited to:

  • Identity information: Full legal name, date of birth, gender, nationality, government-issued identification number (Indonesian KTP number or passport number)
  • Contact information: Email address, phone number, residential address, city, postal code
  • Financial information: Bank account number, bank name, bank account holder name, e-wallet account details (OVO, DANA, GoPay, ShopeePay, LinkAja), payment transaction history
  • Verification documents: Copies of government-issued photo ID (Indonesian national identity card, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs for identity verification
  • Account credentials: Username, password (stored in encrypted format), security questions and answers
  • Communication data: Content of emails, live chat messages, phone call recordings, feedback forms, and other communications you send to our customer support team

2.2 Information Collected Automatically

When you access or use arah4d, we automatically collect certain technical and behavioral information through cookies, web beacons, and similar tracking technologies:

  • Device information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, UDID, MAC address), mobile network information
  • Usage data: Pages visited, time spent on pages, click patterns, navigation paths, referring/exit pages, date and time stamps, search queries within the Platform
  • Location data: IP address, geolocation data (with your consent on mobile devices), time zone settings
  • Gambling activity data: Betting history, game play records, deposit and withdrawal transactions, bonus claims, wagering progress, account balance changes, favorite games, betting patterns
  • Technical logs: Server logs, error reports, crash data, performance metrics, API calls

2.3 Information from Third-Party Sources

In certain circumstances, we may receive information about you from external sources, including:

  • Payment processors: Transaction confirmation, payment method verification, fraud detection data from our banking partners and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay)
  • Identity verification services: Age verification data, identity authentication results, credit checks (where applicable), fraud screening reports from specialized KYC/AML service providers
  • Marketing partners: Referral source information, affiliate tracking data, advertising campaign performance metrics
  • Publicly available sources: Information from public databases, social media profiles (only if you choose to connect your social media accounts), business registries

3. How We Use Your Information

arah4d uses the personal information we collect for the following legitimate business purposes:

3.1 Account Management and Service Provision

  • Creating, maintaining, and managing your gambling account
  • Processing your deposits, bets, winnings, and withdrawal requests
  • Verifying your identity and age to comply with legal obligations (KYC/AML requirements)
  • Authenticating your login credentials and securing your account access
  • Providing customer support and responding to your inquiries
  • Administering bonuses, promotions, loyalty programs, and tournaments
  • Generating account statements, transaction histories, and tax documentation (where required)

3.2 Legal Compliance and Fraud Prevention

  • Complying with legal obligations under Curacao gaming regulations, Indonesian laws, and international standards
  • Detecting, investigating, and preventing fraudulent transactions, money laundering, bonus abuse, multi-accounting, collusion, and other prohibited activities
  • Monitoring betting patterns and gameplay for signs of problem gambling or potential gaming irregularities
  • Cooperating with law enforcement, regulatory authorities, and legal proceedings when required by law
  • Enforcing our Terms and Conditions and protecting our legal rights
  • Conducting internal audits and compliance reviews

3.3 Platform Improvement and Analytics

  • Analyzing user behavior and preferences to improve our Services, develop new features, and enhance user experience
  • Conducting market research, data analytics, and statistical analysis
  • Testing, troubleshooting, and optimizing Platform performance, speed, and reliability
  • Developing machine learning models for personalized game recommendations and responsible gambling interventions
  • Monitoring and analyzing security threats and vulnerabilities

3.4 Marketing and Communications

  • Sending you promotional emails, SMS messages, and push notifications about bonuses, new games, tournaments, and special offers (with your consent, where required by law)
  • Personalizing marketing content based on your gaming preferences and activity history
  • Measuring the effectiveness of our advertising campaigns
  • Sending transactional communications (deposit confirmations, withdrawal notifications, account alerts, password resets)
  • Providing important service announcements, policy updates, and security alerts

Marketing Opt-Out: You may opt out of receiving promotional communications at any time by clicking the "unsubscribe" link in any marketing email, adjusting your communication preferences in your account settings, or contacting our customer support team. Please note that even if you opt out of marketing emails, we will still send you essential transactional and account-related communications.

4. Legal Basis for Processing (GDPR Compliance)

Under the European Union General Data Protection Regulation (GDPR), which informs our global data protection standards, we process your personal information based on the following legal grounds:

Legal Basis Processing Activities
Contractual necessity Account creation, deposit processing, bet placement, withdrawal processing, customer support, bonus administration — necessary to perform our contract with you as outlined in our Terms and Conditions
Legal obligation KYC identity verification, age verification, AML screening, fraud detection, regulatory reporting, tax compliance, cooperation with law enforcement — required by Curacao gaming laws, Indonesian regulations, and international standards
Legitimate interests Platform security, fraud prevention, analytics, product improvement, network security, business intelligence, internal administration — pursuing legitimate business interests that do not override your privacy rights
Consent Marketing communications (where consent is required by law), location tracking on mobile devices, cookies and similar technologies (subject to cookie consent), social media integration

You have the right to withdraw your consent at any time for processing activities based on consent, without affecting the lawfulness of processing based on consent before its withdrawal.

5. How We Share Your Information

arah4d does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers and Business Partners

  • Payment processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment gateways to process your deposits and withdrawals
  • KYC/AML verification services: Specialized third-party providers who perform identity verification, age verification, document authentication, and fraud screening on our behalf
  • Game providers: Casino game studios and software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming) to deliver gaming content and track game play
  • Cloud hosting services: Secure data centers and cloud infrastructure providers who store our databases and host our Platform
  • Customer support tools: Live chat software providers, email service providers, CRM platforms, and ticketing systems that help us manage customer communications
  • Analytics and marketing services: Third-party analytics platforms, advertising networks, email marketing tools, and affiliate tracking systems

All service providers are contractually obligated to use your personal information only for the specific purposes we authorize, to implement appropriate security measures, and to comply with applicable data protection laws.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, government authorities, courts, or other third parties when:

  • Required by law, legal process, court order, subpoena, or government request
  • Necessary to comply with Curacao gaming regulations, Indonesian legal requirements, or international treaties
  • Needed to investigate, prevent, or take action regarding suspected illegal activities, fraud, security threats, or violations of our Terms and Conditions
  • Required to protect the rights, property, or safety of arah4d, our users, or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our Platform before your information is transferred and becomes subject to a different privacy policy.

6. Data Security and Protection

arah4d implements comprehensive technical, organizational, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

  • Encryption: All data transmission between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks. Sensitive data at rest (passwords, payment information, identification documents) is encrypted using AES-256 encryption
  • Access controls: Personal data is accessible only to authorized employees, contractors, and service providers who require access to perform their job functions. All personnel with data access are bound by strict confidentiality obligations
  • Network security: Firewalls, intrusion detection systems, DDoS protection, vulnerability scanning, and regular penetration testing protect our infrastructure from cyber attacks
  • Secure data centers: Our servers are housed in ISO 27001-certified data centers with 24/7 physical security, biometric access controls, video surveillance, and environmental monitoring
  • Regular audits: Independent security audits, compliance assessments, and third-party certifications validate our security practices
  • Incident response: We maintain a comprehensive data breach response plan to detect, contain, and mitigate any security incidents promptly

While we implement industry-leading security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. If you suspect unauthorized access to your account, you must notify us immediately at [email protected].

7. Data Retention

arah4d retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

  • Active accounts: Personal data is retained for the duration of your active account relationship with arah4d
  • Closed accounts: After you close your account, we retain your personal data for a minimum of seven years to comply with Curacao gaming regulations, Indonesian tax laws, and international AML requirements
  • Transaction records: Financial transaction data (deposits, withdrawals, bets, winnings) is retained for seven years for accounting, tax, and regulatory purposes
  • KYC documents: Identity verification documents are retained for seven years after account closure to comply with AML regulations
  • Marketing data: If you opt out of marketing communications, your email address is retained in our suppression list indefinitely to ensure we do not contact you again
  • Legal holds: Data related to ongoing legal disputes, investigations, or audits is retained until the matter is resolved and any appeal periods have expired

After the applicable retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Right of access: You may request a copy of all personal data we hold about you
  • Right to rectification: You may request correction of inaccurate or incomplete personal data
  • Right to erasure ("right to be forgotten"): You may request deletion of your personal data, subject to legal retention requirements
  • Right to restriction: You may request that we limit the processing of your personal data in certain circumstances
  • Right to data portability: You may request a machine-readable copy of your personal data to transfer to another service provider
  • Right to object: You may object to processing based on legitimate interests or for direct marketing purposes
  • Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time
  • Right to lodge a complaint: You may file a complaint with a data protection authority if you believe we have violated your privacy rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days, though complex requests may require up to 90 days. We may request additional information to verify your identity before processing certain requests.

9. Cookies and Tracking Technologies

arah4d uses cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you across sessions.

Types of cookies we use:

  • Essential cookies: Required for basic Platform functionality, account authentication, security, and fraud prevention. These cookies cannot be disabled
  • Performance cookies: Collect anonymous usage data to help us understand how users interact with our Platform and identify areas for improvement
  • Functionality cookies: Remember your preferences (language, currency, timezone) to provide a personalized experience
  • Marketing cookies: Track your browsing activity across websites to deliver targeted advertising and measure campaign effectiveness

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, disabling certain cookies may impair your ability to use some Platform features. For more information about managing cookies, visit your browser's help documentation.

10. International Data Transfers

arah4d is based in Curacao and our data processing infrastructure may be located in various countries around the world. If you access our Platform from outside Curacao, your personal information may be transferred to, stored in, and processed in jurisdictions that may not have the same data protection laws as your country of residence.

When we transfer personal data internationally, we implement appropriate safeguards to ensure your data receives adequate protection, including:

  • Standard contractual clauses approved by the European Commission
  • Data processing agreements with binding corporate rules
  • Privacy Shield certification (where applicable)
  • Adequacy decisions recognizing equivalent data protection standards

By using arah4d, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.

11. Children's Privacy

arah4d does not knowingly collect, use, or solicit personal information from individuals under the age of 21. Our Platform and Services are intended solely for adults who are at least 21 years old and legally permitted to participate in online gambling activities. If we discover that we have inadvertently collected personal information from someone under 21, we will delete that information immediately and terminate the associated account.

Parents or guardians who believe their child has provided personal information to arah4d should contact us immediately at [email protected] so we can take appropriate action.

12. Changes to This Privacy Policy

arah4d reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any changes will become effective immediately upon publication on this page, with the "Last Updated" date at the top of this document reflecting the most recent revision.

We will notify you of material changes through email to your registered address and/or through prominent notice on our Platform. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of arah4d after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

13. Contact Information

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our data practices, please contact us through the following channels:

Data Protection Officer
Email: [email protected]
Response time: Within 48 hours

Customer Support
Email: [email protected]
Live Chat: Available 24/7 through our website
WhatsApp: +62-812-3456-7890 (06:00-02:00 WIB daily)

We are committed to resolving any privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Your Privacy Protection at arah4d

Bank-Grade Encryption

All data transmission uses 256-bit SSL encryption and sensitive stored data is protected with AES-256 encryption — the same security standards used by financial institutions worldwide.

GDPR Compliance

Our data practices comply with the European Union General Data Protection Regulation (GDPR), giving you comprehensive rights over your personal information including access, correction, deletion, and portability.

No Data Selling

We never sell, rent, or trade your personal information to third parties for marketing purposes. Your data is used exclusively to provide our gambling services and comply with legal obligations.

Secure Data Centers

Your personal data is stored in ISO 27001-certified data centers with 24/7 physical security, biometric access controls, redundant backups, and disaster recovery systems.

Regular Security Audits

Independent third-party security firms conduct regular penetration testing, vulnerability assessments, and compliance audits to validate our data protection measures.

Strict Access Controls

Personal data is accessible only to authorized personnel who require it for their job functions. All staff with data access are bound by confidentiality agreements and receive regular privacy training.

Questions About Your Privacy?

Our Data Protection Officer is available to address any concerns about how we collect, use, or protect your personal information.

View Frequently Asked Questions Return to Homepage