Privacy Policy
for giok4d

1. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below. Capitalized terms not defined here carry the meanings given to them in the giok4d Terms & Conditions.

2. Data Controller

The Data Controller for all Personal Data collected through the giok4d Platform is the internationally licensed legal entity operating the platform under the brand name giok4d. giok4d's Services are principally directed at players resident in Indonesia, and we take our data protection responsibilities toward Indonesian users seriously.

All data protection enquiries, access requests, and formal complaints should be directed to our Data Protection contact at: support@giok4d.cam

3. Data We Collect

giok4d collects only the Personal Data necessary for the legitimate purposes described in Section 5 of this policy. The categories of data we collect are as follows:

We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required and lawfully permitted for identity verification purposes under applicable regulations.

4. How We Collect Data

giok4d collects Personal Data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the Platform, including session cookies, server logs, and browser fingerprinting used for security and fraud-detection purposes.
• Third-party sources: Data received from payment processors, identity verification partners, and fraud-screening services in connection with account verification and transaction monitoring. We ensure all such third parties have obtained your data lawfully and are authorized to share it with us.
• Public sources: In limited circumstances related to AML screening, we may cross-reference your details against publicly available sanctions lists or politically exposed persons (PEP) databases.

5. Purpose & Legal Basis for Processing

giok4d processes your Personal Data only when a lawful basis exists for doing so. The table below sets out our primary processing purposes and the corresponding legal basis for each:

6. Data Sharing & Disclosure

giok4d does not sell or rent your Personal Data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment service providers: Banks and e-wallet operators — including those facilitating BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions — receive the minimum data necessary to process your financial transactions securely.
• KYC and identity verification vendors: Specialized third-party providers assist with document verification and age-confirmation checks. These processors are bound by strict data processing agreements and may not use your data for any purpose other than verification.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe may receive anonymized session data for the purpose of game delivery, fairness auditing, and technical support. No directly identifiable personal data is shared with game studios.
• Fraud and AML screening services: We use reputable third-party tools to screen transactions and accounts against global sanctions lists, PEP databases, and known fraud networks.
• Legal and regulatory authorities: We will disclose Personal Data to competent law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by applicable law, court order, or our licensing obligations — without prior notice to you where legally required.
• Group companies: Where giok4d operates as part of a corporate group, data may be shared with affiliate entities solely for the purposes of platform operation, consolidated compliance reporting, and internal fraud prevention.

7. Data Retention

giok4d retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:

• Account data and KYC documents: Retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction to meet financial record-keeping and audit trail obligations.
• Customer support communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service improvement analysis.
• Marketing preferences and consent records: Retained for as long as your account is active and for two (2) years following account closure or the withdrawal of consent, whichever is the later.
• Technical and security logs: Retained for twelve (12) months on a rolling basis for fraud detection, incident response, and platform security monitoring.

Where Personal Data is no longer required for any lawful purpose, it is securely deleted or irreversibly anonymized. Anonymized, aggregated data may be retained indefinitely for statistical and research purposes without any risk to your privacy.

8. Security Measures

giok4d employs a layered, defense-in-depth approach to data security. The following technical and organizational measures are maintained to protect your Personal Data against unauthorized access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption at rest for all stored sensitive personal and financial data.
• Role-based access controls ensuring that only authorized personnel with a legitimate operational need can access specific categories of player data.
• Multi-factor authentication (MFA) required for all internal staff accessing player data systems.
• Regular security audits and penetration testing conducted by independent third-party cybersecurity specialists.
• 24/7 intrusion detection and monitoring systems that alert our security team to anomalous access patterns in real time.
• Formal incident response plan ensuring that in the event of a data breach, affected players are notified promptly and remedial steps are taken without undue delay.

9. Cookies & Tracking Technologies

giok4d uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without preventing the Platform from operating correctly.
• Functional Cookies: Remember your preferences — such as language settings, preferred deposit method (e.g., BCA or OVO), and your responsible gaming limit selections — so you do not need to re-enter them on each visit.
• Analytical Cookies: Help us understand how players use the Platform — for example, which pages are visited most frequently and where users encounter technical difficulties. We use anonymized and aggregated analytics data only. We do not share individual analytical data with third parties for their own use.
• Security Cookies: Support our fraud detection systems by helping to identify suspicious patterns of access that may indicate account takeover attempts or automated bot activity.

giok4d does not use third-party advertising cookies or behavioral tracking cookies that build profiles of your browsing activity across external websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

10. Your Rights

As a player on the giok4d Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us at support@giok4d.cam with a clear description of your request. We will respond within 30 calendar days.

• Right of Access: You may request a copy of all Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected promptly.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations (see Section 7).
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your data while a dispute about its accuracy or our grounds for processing is resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your data to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, and to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that some rights are subject to exceptions. For example, we cannot erase data that we are legally required to retain under our AML compliance obligations. We will always explain clearly if a limitation applies to your specific request.

11. Minors & Age Verification

Age verification is a mandatory step in our KYC process. All players are required to provide a valid government-issued identity document confirming their date of birth before any withdrawal is processed. giok4d reserves the right to suspend an account and request identity documentation at any point during the account lifecycle where there is reasonable doubt about the player's age.

If you are a parent or guardian and believe that a minor has registered an account on giok4d without your knowledge, please contact us immediately at support@giok4d.cam and we will take immediate remedial action.

12. Amendments to This Privacy Policy

giok4d reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, our operational practices, or the structure of our data processing activities. When we make material changes, we will notify active account holders by email to their registered address and post a prominent notice on the Platform's homepage for a minimum of 14 days prior to the changes taking effect.

The "Effective Date" shown at the top of this document reflects the date on which the current version came into force. We recommend reviewing this policy periodically to stay informed of how we protect your data. Your continued use of the Platform after the effective date of an updated policy constitutes acceptance of the revised terms.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please reach out to our Data Protection team using the contact details below. We are committed to addressing all data-related enquiries promptly and transparently.

If you are not satisfied with our response to your data protection enquiry, you have the right to escalate your complaint to the relevant data protection supervisory authority in the applicable jurisdiction. We will provide guidance on the appropriate authority upon request.