Privacy Policy

The following defined terms are used throughout this Privacy Policy. They carry the same meanings as defined in the emp4d Terms & Conditions unless the context otherwise requires.

emp4d, operating the Platform at emp4d.vip, is the data controller responsible for the Personal Data collected and processed in connection with your use of the Platform. As data controller, emp4d determines the purposes and means of processing your Personal Data as described in this Policy.

emp4d operates as an internationally licensed online gaming operator. The Platform is not licensed under Indonesian domestic law. However, emp4d processes Personal Data in a manner consistent with internationally recognised data protection principles, including the principles of data minimisation, purpose limitation, storage limitation, and data subject rights.

emp4d collects the following categories of Personal Data from members and Platform visitors:

emp4d does not collect or store full payment card numbers. emp4d does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and responsible gaming compliance.

emp4d collects Personal Data through the following means:

• Direct collection: Information you provide voluntarily when registering an account, completing KYC, submitting deposit or withdrawal requests, contacting the support team, or responding to promotions;
• Automated technical collection: Data gathered automatically when you access the Platform, including IP address, device identifiers, browser characteristics, and session activity logs, via server logs and analytics tools;
• Cookies and similar technologies: Session cookies, persistent cookies, and tracking pixels used to maintain your login session, personalise your experience, and measure Platform performance — as described in Clause 10;
• Third-party sources: Identity verification data returned by KYC service providers; transaction confirmation data from payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja); fraud and risk scoring data from licensed security service providers.

emp4d processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to fulfil emp4d's obligations under the account agreement with you — including registering your account, processing deposits and withdrawals, settling bets and game results, and providing customer support;
• Legitimate interests: Processing necessary for emp4d's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement — provided those interests are not overridden by your privacy rights;
• Legal obligation: Processing required to comply with applicable anti-money laundering requirements, KYC obligations, and any applicable data retention mandates imposed by emp4d's licensing authority;
• Consent: Processing for marketing communications and non-essential cookies, where emp4d relies on your freely given, specific, informed, and revocable consent. You may withdraw consent at any time by contacting support or updating your account notification preferences.

emp4d uses the Personal Data it collects for the following specific purposes:

• Account management: Creating and maintaining your account, authenticating your login sessions, and processing account closure requests;
• Transaction processing: Accepting IDR deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja; processing withdrawal requests to your registered payment method; maintaining transaction records;
• Identity and age verification (KYC): Confirming that you are a real individual aged 21 or above and that your payment accounts are registered in your own name, as required prior to your first withdrawal;
• Bet and game settlement: Recording and settling sportsbook bets, live casino wagers, slot spins, Sakong and Sic Bo game outcomes, and all associated bonus calculations;
• Fraud prevention and security: Monitoring account activity for indicators of fraudulent behaviour, money laundering, duplicate accounts, underage gambling, and terms violations; taking action where such indicators are detected;
• Responsible gaming: Tracking your deposit, loss, and session activity to enable the proper operation of deposit limits, loss limits, session timers, and self-exclusion tools you have activated; identifying patterns that may indicate problematic gambling behaviour;
• Customer support: Responding to your queries, complaints, and support requests; maintaining records of support interactions for quality assurance and dispute resolution;
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaign communications to members who have opted in to receive such messages. You may opt out at any time;
• Platform improvement: Analysing usage patterns and technical performance data to improve the Platform's features, stability, and user experience;
• Legal and compliance: Retaining records as required by emp4d's licensing authority and applicable anti-money laundering regulations; responding to lawful data access requests from competent authorities.

emp4d does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. Personal Data is shared with third parties only in the following circumstances and under appropriate data processing safeguards:

• Payment processors: Financial Data is shared with the relevant payment provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) to the extent necessary to process your deposit or withdrawal transaction;
• KYC verification providers: Identity Data and KYC Document Data are shared with emp4d's licensed identity verification service partners for the purpose of confirming your identity and age;
• Game studios: Limited Technical and Usage Data (e.g., session token, game RNG seed) is shared with game providers including Pragmatic Play, Evolution Gaming, Pocket Games Soft, Spribe, NetEnt, and Microgaming to facilitate game delivery and fair-play auditing;
• Fraud and security providers: Technical Data and Transaction Data may be shared with fraud detection and cybersecurity service providers for the purpose of protecting the Platform and its members;
• Regulators and law enforcement: emp4d will disclose Personal Data to competent regulatory authorities, licensing bodies, or law enforcement agencies where required to do so by a lawful order, legal obligation, or licensing condition;
• Corporate transfers: In the event of a merger, acquisition, or sale of substantially all emp4d's assets, Personal Data held by emp4d may be transferred to the successor entity, subject to equivalent data protection commitments.

emp4d retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by emp4d's licensing and compliance obligations:

• Account data and transaction records: Retained for a minimum of 5 years from the date of account closure or the last transaction, whichever is later — in compliance with standard anti-money laundering record-keeping requirements;
• KYC documents: Retained for a minimum of 5 years from the date of verification completion or account closure, whichever is later;
• Support communications: Retained for a minimum of 2 years from the date of the final communication in each support thread;
• Technical and usage logs: Typically retained for 12 months from collection, unless a longer period is required for an ongoing security investigation or dispute resolution;
• Marketing consent records: Retained for the duration of your account plus 2 years following account closure, to demonstrate compliance with consent obligations.

When the applicable retention period expires, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual.

emp4d implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the emp4d Platform;
• Encrypted data storage for sensitive data at rest, including KYC documents and financial account details;
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. emp4d staff are granted only the minimum level of data access required for their specific role;
• Two-factor authentication (2FA) available to all members and mandatory for all emp4d internal administrative accounts;
• Intrusion detection and anomaly monitoring systems that alert emp4d's security team to suspicious account activity in real time;
• Regular security assessments and penetration testing conducted by independent third-party cybersecurity professionals;
• Staff training: All emp4d personnel with access to Personal Data undergo mandatory data protection training on appointment and at regular intervals thereafter.

While emp4d maintains robust security practices, no online platform can guarantee absolute security against all possible threats. You are responsible for keeping your account credentials confidential and for notifying emp4d immediately if you suspect that your account has been accessed without your authorisation.

emp4d uses cookies and similar tracking technologies on the Platform for the following purposes:

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly.

You hold the following rights with respect to the Personal Data emp4d holds about you. To exercise any of these rights, contact emp4d's support team via live chat or at [email protected]. emp4d will respond to verified requests within 30 days.

The emp4d Platform is strictly restricted to adults aged 21 and above. emp4d does not knowingly collect Personal Data from individuals under 21 years of age. Age verification is a mandatory step in the KYC process conducted prior to a Member's first withdrawal.

If emp4d discovers or has reasonable grounds to believe that a registered member is under 21, the account will be immediately suspended, any winnings will be withheld pending investigation, and the deposited funds (net of any bonus credits) will be returned to the payment source. The personal data associated with the underage account will be retained only for the period necessary to complete the investigation and regulatory reporting, after which it will be securely deleted.

If you are a parent or guardian and believe that a person under 21 has registered or used the emp4d Platform, please contact support at [email protected] immediately.

emp4d operates as an internationally licensed platform. Your Personal Data may be transferred to and processed in countries outside of Indonesia where emp4d's servers, service providers, or game studio partners are located. These countries may not have data protection laws equivalent to those applicable in Indonesia.

Where emp4d transfers Personal Data internationally, it takes appropriate steps to ensure that such transfers are subject to adequate data protection safeguards, including:

• Contractual data processing agreements with all third-party processors and sub-processors that receive Personal Data;
• Standard contractual clauses or equivalent contractual protections where applicable;
• Selecting service providers that maintain internationally recognised data security certifications.

The emp4d Platform may contain links to or integrations with third-party services — including game studios, payment gateways, and affiliate partners. This Privacy Policy applies solely to Personal Data collected and processed by emp4d directly. emp4d is not responsible for the privacy practices of third-party services accessed through or in connection with the Platform.

emp4d encourages you to review the privacy policies of any third-party service you interact with in connection with your emp4d account, including the privacy notices published by your bank or e-wallet provider in relation to their processing of your financial transaction data.

emp4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. Where a material change is made, emp4d will notify registered Members via email to their registered address and/or via a prominent notice on the Platform at least 7 days before the amended Policy takes effect.

The "Last updated" date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform after that date constitutes your acknowledgement of the updated Privacy Policy. We encourage you to review this page periodically to remain informed of how emp4d handles your Personal Data.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how emp4d has handled your Personal Data, please contact the emp4d data protection team through the following channels:

• Live Chat: Available 24/7 from the emp4d Platform — the fastest way to raise an urgent data protection query;
• Email: [email protected] — for formal data subject requests, include your full registered name and account username in the subject line. Responses are provided within 30 days of receipt of a verified request.

If you are not satisfied with emp4d's response to your data protection query or complaint, you have the right to escalate the matter to the data protection supervisory authority in the relevant jurisdiction.