Privacy Policy

This Privacy Policy applies to all personal data processed by key4ad in connection with the Platform, including data collected through the website at https://key4ad.cam, any mobile-optimized interfaces, customer support channels, and promotional communications. It covers all registered players, visitors, and any other individuals whose personal data key4ad processes in connection with the operation of the Platform.

For the purposes of this Policy, "key4ad", "we", "us", and "our" refer to the internationally licensed operator of the Platform, which acts as the data controller responsible for determining the purposes and means of processing personal data collected through the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the Platform. Defined terms used but not defined in this Policy have the meanings given in the Terms & Conditions.

key4ad collects the following categories of personal data, limited to what is necessary for the operational and regulatory purposes described in this Policy:

We do not intentionally collect sensitive personal data (such as health information, political opinions, or biometric data) beyond what is strictly required for identity verification and responsible gaming compliance.

key4ad collects personal data through the following channels:

• Direct submission: Information you provide when completing account registration, KYC verification, payment forms, or customer support interactions.
• Automated collection: Technical data collected automatically when you access the Platform, including device identifiers, IP address, and browser session data via server logs and first-party cookies.
• Third-party verification providers: Identity and document verification data returned by KYC/AML service providers used to validate the authenticity of documents you submit.
• Payment processors: Transaction confirmation data returned by Indonesian bank partners and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate deposits or withdrawals.
• Fraud and risk screening services: Risk scores and flagging data generated by third-party fraud prevention tools that analyze transaction patterns and device fingerprints.

key4ad processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to create and maintain your account, process deposits and withdrawals in IDR, and fulfill our obligations under the Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) regulations, know-your-customer (KYC) requirements, and other applicable legal or regulatory obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as marketing communications, where your freely given, specific, and informed consent has been obtained. You may withdraw consent at any time by contacting our support team.

key4ad uses the personal data we collect for the following purposes:

• Creating, maintaining, and securing your player account on the Platform.
• Verifying your identity and age (21+ requirement) through the KYC process.
• Processing deposits via supported Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallets, and processing withdrawal requests to your verified payment method.
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct defined in our Terms & Conditions.
• Providing responsive customer support in English and via Indonesian-speaking agents available 24/7.
• Enforcing responsible gaming limits, self-exclusion requests, and cool-off periods you configure on your account.
• Sending transactional communications (account alerts, deposit confirmations, withdrawal notifications, security warnings) to your registered email address or phone number.
• Sending promotional communications about bonuses, seasonal offers (including Idul Fitri, Ramadhan, and Indonesian Independence Day promotions), and new product launches — only where you have provided explicit consent or where permitted by applicable law.
• Conducting internal analytics to improve platform performance, user experience, and product offerings across sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) verticals.
• Complying with applicable legal, regulatory, and audit requirements.

key4ad does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• KYC and identity verification providers: Third-party services that assist us in validating identity documents and confirming that you meet the 21+ age requirement and residency eligibility criteria.
• Payment processors and banking partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) that facilitate the processing of your deposits and withdrawals in IDR.
• Fraud prevention and risk management services: Specialist providers that help us detect and prevent fraudulent account activity, bonus abuse, and money laundering.
• Game content and technology providers: Licensed software studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) that provide the games hosted on the Platform. These providers may receive limited technical data necessary for game delivery and fairness certification.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, courts, or other public authorities where disclosure is required by law, court order, or regulatory directive, including in connection with anti-money-laundering investigations.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by key4ad, subject to strict confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of key4ad's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections and prior notification to you.

key4ad uses first-party cookies and similar tracking technologies to operate and improve the Platform. We do not deploy third-party advertising cookies or behavioral tracking pixels that share your data with external ad networks.

Strictly necessary cookies cannot be disabled as they are essential for Platform operation. You may manage functional and analytics cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality, including the persistence of your responsible gaming configurations.

key4ad retains your personal data only for as long as is necessary to fulfill the purposes outlined in this Policy, or as required by applicable law. The following indicative retention periods apply:

• Account and identity data: Retained for the lifetime of your active account plus a minimum of five years following account closure, in line with standard AML and KYC record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, as required for financial compliance and dispute resolution purposes.
• Customer support communications: Retained for three years from the date of the final communication in each support case, or longer where the communication relates to an ongoing investigation or legal proceeding.
• Technical and session logs: Retained for up to twelve months under standard operations, or longer where logs form part of a security investigation.
• Marketing consent records: Retained for the duration of the consent plus three years following withdrawal, to demonstrate compliance in the event of a regulatory inquiry.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard data destruction procedures. Anonymized or aggregated data that cannot reasonably be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

key4ad implements a multi-layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and the Platform's servers.
• Encryption at rest for all personally identifiable information and financial data stored in our databases.
• Role-based access controls ensuring that only personnel with a verified operational need can access specific categories of personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Real-time anomaly detection systems that flag unusual login patterns, transaction velocities, or device changes for immediate security review.
• Two-factor authentication (2FA) available for all player accounts as an additional layer of login security.
• Incident response procedures that specify notification timelines and containment steps in the event of a confirmed data security incident.

While key4ad takes all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. In the event of a material data security incident affecting your personal data, key4ad will notify affected players within a reasonable timeframe and take all appropriate remediation steps.

As a player on the key4ad platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at the details provided in Section 14 of this Policy.

key4ad will respond to all verified rights requests within thirty calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty days, with prior notification. We may be unable to fulfill requests where doing so would conflict with a legal obligation, an ongoing investigation, or the rights of a third party.

key4ad enforces a strict 21+ age policy across all products and user touchpoints. The Platform is not intended for, and must not be used by, any individual under the age of 21. We employ the following measures to prevent underage access:

• Mandatory date-of-birth declaration at account registration, with automated rejection of registrations that indicate an age below 21.
• KYC document verification that confirms both identity and age before full account functionality — including deposits, withdrawals, and real-money wagering — is enabled.
• Ongoing monitoring of account activity for behavioral signals that may suggest underage use, including responsible gaming flag patterns associated with younger user profiles.

If key4ad becomes aware or has reasonable grounds to believe that a player is under 21, the account will be immediately suspended, all pending transactions will be halted, and any deposited funds will be returned to the verified payment source following a security review. We will not process any winnings accrued during a period of suspected underage use.

If you are a parent or guardian and believe that a minor has created an account on the Platform using false information, please contact our support team immediately at the details provided in Section 14.

key4ad operates as an internationally licensed platform. In the course of providing our services, your personal data may be transferred to, stored in, and processed in countries outside Indonesia. These countries may have data protection laws that differ from those in force in Indonesia.

Where such international transfers occur, key4ad implements appropriate safeguards to ensure that your personal data continues to receive a standard of protection consistent with this Privacy Policy and internationally recognized data protection principles. These safeguards include contractual data protection clauses with all recipient entities and a preference for service providers operating in jurisdictions with established data protection frameworks.

By registering an account and using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Indonesia as described in this Policy.

key4ad reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. When we make material changes to this Policy, we will notify registered players via a prominent notice on the Platform and, where appropriate, via email to the address registered on your account, no fewer than seven days before the changes take effect.

The "Last Updated" date at the top of this Policy will be revised whenever an update is published. We encourage you to review this Policy periodically to stay informed about how key4ad collects, uses, and protects your personal data. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

The most current version of this Privacy Policy is always available at https://key4ad.cam/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or would like to raise a concern about how key4ad handles your personal data, please contact our Data Protection team through the following channel:

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. key4ad will cooperate fully with any such regulatory investigation.

For matters relating to responsible gaming or account self-exclusion, please visit our dedicated Responsible Gaming page, which provides additional tools and guidance specific to player welfare.