Privacy Policy — hut4d

hut4d ("we", "us", "the Platform") is committed to protecting the privacy and security of the personal data of all registered players, visitors, and prospective users (collectively, "you", "Data Subject"). This Policy sets out the basis on which personal data we collect from you, or that you provide to us, will be processed.

This Policy covers data collected through all touchpoints associated with the hut4d Platform, including but not limited to:

• The hut4d website at hut4d.cam and any mobile-optimised version thereof;
• Account registration, KYC verification, and ongoing account management processes;
• Deposit, withdrawal, and payment processing activities;
• Customer support interactions conducted via live chat, email, or any other channel;
• Marketing communications where you have opted in to receive them;
• Responsible gaming tools, self-exclusion requests, and related welfare processes.

This Policy does not apply to third-party websites, payment processors, or identity verification providers who operate under their own independent privacy policies. Where hut4d shares data with such third parties, we require contractual assurances that those parties maintain standards consistent with this Policy.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, mobile number, date of birth, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Controller" means hut4d, as the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means any third party that processes Personal Data on behalf of hut4d under a binding data processing agreement.
• "KYC Data" means identity and verification documents submitted by a Player during the Know Your Customer process, including government-issued ID and proof of address.
• "Technical Data" means data automatically collected through your use of the Platform, including IP address, browser type, device model, operating system, session duration, and pages visited.
• "Sensitive Data" means categories of Personal Data that warrant heightened protection, including financial account details and government-issued identification numbers.

hut4d collects personal data through the following categories and collection methods:

hut4d does not collect or process special category data as defined under applicable data protection frameworks (e.g., racial or ethnic origin, political opinions, religious beliefs, health data) unless specifically required by law or responsible gaming obligations (e.g., vulnerability assessments).

hut4d processes your Personal Data on one or more of the following lawful grounds:

• Contractual Necessity: Processing required to fulfil the contract between you and hut4d — including account creation, payment processing, game result calculation, and withdrawal execution.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML), counter-terrorist financing (CTF), age verification, and responsible gaming regulations.
• Legitimate Interests: Processing necessary for hut4d's legitimate interests, including fraud detection, security monitoring, platform performance analytics, and responsible gaming monitoring, where those interests are not overridden by your rights.
• Consent: Where you have provided specific, freely given, informed consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting our support team or updating your account settings.

hut4d uses your Personal Data for the following purposes:

1. Account Management: To create, maintain, and administer your Player Account, including authentication, password recovery, and settings management.
2. Identity Verification (KYC): To verify your identity, age, and eligibility to use the Platform in compliance with AML and responsible gaming obligations.
3. Payment Processing: To process deposits and withdrawals via your selected payment method (BCA, BRI, BNI, Mandiri, DANA, OVO, GoPay, etc.) and to maintain transaction records.
4. Game Delivery & Integrity: To provide, monitor, and audit game sessions — including togel (numbers lottery) draws, sports betting markets, and live casino rounds — and to resolve disputes.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and security breaches.
6. Responsible Gaming: To monitor your gambling patterns for indicators of problem gambling and to apply self-imposed limits, cooling-off periods, and self-exclusions.
7. Customer Support: To respond to your support requests, complaints, and feedback, and to maintain records of communications for training and quality purposes.
8. Legal Compliance: To fulfil reporting obligations to competent authorities and to exercise or defend legal claims.
9. Marketing (where consented): To send you personalised promotional offers, bonus notifications, and Platform news via your preferred communication channel. You may opt out at any time.
10. Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, user experience, and game offerings.

hut4d may share Personal Data with the following categories of third parties, strictly on a need-to-know basis and subject to binding contractual data protection obligations:

• Identity Verification Providers: Third-party KYC service providers engaged to verify government-issued identity documents against official databases.
• Payment Processors: Banks and e-wallet operators (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay) that process deposit and withdrawal transactions on your behalf.
• Game Providers: Licensed game studios (including Evolution Gaming and Pragmatic Play) that require player session data to deliver their live casino and slot products.
• Fraud Prevention Services: Third-party risk and fraud management platforms that assist hut4d in identifying and preventing fraudulent activity.
• IT Infrastructure & Cloud Providers: Hosting, database, and content delivery providers whose infrastructure supports the hut4d Platform, bound by stringent data processing agreements.
• Legal & Regulatory Authorities: Government bodies, law enforcement agencies, or courts where disclosure is required by applicable law, court order, or regulatory direction.
• Responsible Gaming Organisations: Where a Player requests connection to an independent gambling support service, limited contact information may be shared with the relevant organisation with the Player's explicit consent.

In all cases where hut4d engages a Processor, a binding data processing agreement is in place that requires the Processor to process Personal Data only on hut4d's documented instructions, to implement appropriate technical and organisational security measures, and to delete or return data upon termination of the engagement.

hut4d retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with hut4d's data destruction policy.

hut4d implements a layered security framework to protect Personal Data against unauthorised access, loss, destruction, or alteration. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the hut4d Platform is protected by 256-bit TLS (Transport Layer Security) encryption.
• Encryption at Rest: Sensitive Personal Data fields — including KYC documents and financial account identifiers — are encrypted at rest in hut4d's database infrastructure.
• Access Controls: Access to Personal Data within hut4d's systems is restricted on a strictly need-to-know basis. Staff access is governed by role-based permissions, and all access events are logged and audited.
• Multi-Factor Authentication: Administrative access to systems containing Personal Data requires multi-factor authentication (MFA) at all times.
• Regular Security Audits: hut4d conducts periodic vulnerability assessments and penetration tests of its Platform infrastructure, with remediation timelines enforced for identified findings.
• Incident Response: hut4d maintains a documented data breach response procedure. In the event of a confirmed breach affecting your Personal Data, you will be notified by email within 72 hours of detection.

Despite these measures, no internet-based system is entirely immune from security risks. You are responsible for keeping your own Account credentials confidential and for using strong, unique passwords. hut4d will never ask for your password via any communication channel.

As a Data Subject, you hold the following rights in relation to your Personal Data held by hut4d. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". hut4d will respond within 30 calendar days.

If you are not satisfied with hut4d's response to a Data Rights Request, you may escalate your complaint to the competent supervisory authority in the relevant jurisdiction.

hut4d uses cookies and similar tracking technologies on the Platform to support essential functionality, improve user experience, and conduct security monitoring. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session management, authentication tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve Platform performance.
• Security Cookies: Used to detect fraudulent behaviour, multi-account activity, and suspicious login patterns based on device fingerprinting and IP analysis.
• Preference Cookies: Used to remember your language, display, and notification preferences between sessions.

hut4d does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings, though disabling certain cookies may affect Platform functionality.

hut4d operates under international licensing and its infrastructure may involve data storage or processing in jurisdictions outside Indonesia. Where Personal Data is transferred to countries that do not provide a level of data protection equivalent to the standards applicable to hut4d, such transfers are conducted under appropriate safeguards, which may include:

• Standard contractual clauses (SCCs) or equivalent data transfer agreements that require the recipient to protect Personal Data to a standard consistent with this Policy;
• Binding corporate rules where transfers occur within a group of companies subject to a common data protection governance framework;
• Technical and organisational measures including encryption-in-transit and at-rest, access controls, and audit logging.

You may request information about the specific safeguards in place for any international transfer of your Personal Data by contacting hut4d at [email protected].

The hut4d Platform is strictly restricted to individuals aged 21 years and above. hut4d does not knowingly collect or process Personal Data from individuals under the age of 21. Age is verified as part of the mandatory KYC process applicable to all registered Players.

If hut4d discovers that Personal Data has been collected from a person under 21, the relevant Player Account will be immediately closed, all balances will be frozen pending investigation, and the associated Personal Data will be deleted from active systems (subject to any legal retention obligations that may apply under AML regulations).

If you are a parent or guardian and you believe your child has provided Personal Data to hut4d, please contact us immediately at [email protected] so that we can take appropriate action.

hut4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or Platform functionality. Material changes — those that significantly affect your rights or how your data is used — will be communicated to registered Players via email to their registered address at least fourteen (14) days before the change takes effect.

Non-material clarifications and corrections may be made without advance notice. The "Last Updated" date at the top of this page will reflect the most recent revision in all cases. We encourage you to review this Policy periodically.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you should cease using the Platform and may request deletion of your data in accordance with Section 9.

For any privacy-related queries, Data Rights Requests, or concerns about how hut4d handles your Personal Data, please contact our Data Protection team using the following details:

• Platform: hut4d.cam
• Data Protection Email (plain text — not a link): [email protected]
• Subject Line for Data Requests: "Data Rights Request — [Your Registered Email]"
• Response Time: hut4d aims to acknowledge all Data Rights Requests within 5 business days and to respond substantively within 30 calendar days.
• Support Hours: 24/7, with Indonesian-speaking agents available during peak WIB hours (07:00 – 23:00 WIB)