Privacy Policy

1 Scope & Application

This Privacy Policy ("Policy") applies to all personal data collected, stored, processed, and transmitted by son4d ("we", "us", "our") in connection with the operation of the son4d online gaming platform accessible at https://son4d.bio (the "Platform"). It governs all interactions you have with the Platform, including account registration, gameplay, deposits and withdrawals, customer support communications, and marketing communications.

This Policy applies to all Players who access the Platform regardless of the device used — desktop, mobile browser, or mobile web application. It applies to prospective Players (individuals who have visited the Platform without completing registration), registered Players with active accounts, and former Players whose accounts have been closed but whose data is retained under applicable legal obligations.

This Policy should be read alongside son4d's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By creating an account or continuing to use the Platform after any update to this Policy, you acknowledge that you have read, understood, and agreed to the data practices described herein.

2 Definitions

The following terms have specific meanings throughout this Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, either alone or in combination with other data. This includes name, date of birth, email address, IP address, device identifiers, payment account numbers, and behavioral data associated with a named account.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, alteration, and deletion.
• "Data Controller" — son4d, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of son4d, under contractual obligation and in accordance with son4d's instructions. Examples include payment processors and fraud-detection services.
• "Player" — any individual who accesses, registers on, or uses the son4d Platform.
• "KYC" — Know Your Customer. The identity verification process required before processing withdrawals or as part of routine compliance reviews.
• "Cookies" — small text files or similar tracking technologies stored on your device by your browser when you visit the Platform, used to maintain session state, preferences, and analytics data.
• "Sensitive Personal Data" — a subset of Personal Data that receives heightened protection, including identity document information, biometric data (where collected), and financial account details.

3 Data We Collect

son4d collects Personal Data across several categories, depending on how you interact with the Platform. The table below summarizes the principal categories of data collected:

3.1 Data You Provide Voluntarily

Registration data, KYC documents, payment details, and support communications are provided directly by you. son4d does not collect more information than is reasonably necessary for the stated purpose at each collection point. You are not required to provide optional profile information (such as a profile display name or avatar), but certain features may be unavailable if required fields are left incomplete.

3.2 Data Collected Automatically

Device and technical data, usage data, and certain behavioral data are collected automatically whenever you interact with the Platform. This automatic collection is necessary for the secure delivery of our Services, fraud detection, and Platform performance monitoring. You cannot opt out of the collection of data that is technically necessary for the Platform to function; however, you may manage analytics-related cookies through your browser settings.

4 How We Collect Data

son4d collects Personal Data through the following channels and mechanisms:

• Direct submission: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or respond to a promotional survey.
• Automated Platform systems: Our servers automatically log IP addresses, device identifiers, and session data whenever the Platform is accessed. This data is generated as a technical byproduct of standard web communication protocols.
• Cookie and tracking technologies: The Platform uses session cookies, persistent cookies, and similar technologies to maintain your logged-in state, remember preferences, and collect aggregate analytics data. See Section 11 for full details.
• Payment processors: When you transact via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment processor confirms transaction status and associated account identifiers to son4d. son4d does not receive or store your full bank account credentials or e-wallet passwords.
• Game providers: Licensed game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft transmit game round results, wager amounts, and win/loss data to son4d's systems in real time for settlement, balance management, and responsible gaming monitoring purposes.
• Fraud and compliance services: son4d uses third-party fraud detection and identity verification services that may cross-reference data you provide against commercially available and regulatory databases to verify your identity and detect suspicious activity patterns.

5 Purposes of Processing

son4d processes your Personal Data only for the purposes listed below. We do not use your data for any purpose incompatible with the original reason it was collected without seeking your explicit consent.

5.1 Service Delivery

The primary purpose of data processing on son4d is to deliver our gaming Services — creating and managing your account, processing deposits and withdrawals in IDR, settling bets and game rounds, and enabling access to our sportsbook, live casino, slots, and specialty game categories including togel (Indonesia's traditional numbers lottery) and live dealer products.

5.2 Identity Verification and Fraud Prevention

son4d processes identity documents and behavioral data to verify that you are who you claim to be, that you meet the 21+ age requirement, and that your account activity is consistent with legitimate personal use. Fraud prevention processing includes detection of duplicate accounts, bonus abuse patterns, money laundering indicators, and suspicious transaction sequences.

5.3 Legal and Regulatory Compliance

son4d processes and retains certain Personal Data to comply with obligations under its international operating license, anti-money laundering (AML) regulations, and any applicable data retention laws. This processing is mandatory — son4d cannot accommodate requests to delete data that is subject to a legal retention obligation, but will clearly communicate the applicable retention period when such a request is received.

5.4 Responsible Gaming

son4d uses gaming activity data — including session duration, wagering frequency, deposit patterns, and self-exclusion status — to monitor player welfare, enforce responsible gaming limits set by the Player, and identify indicators of problem gambling. This processing is carried out in the interests of player safety and may result in proactive outreach from our support team if concerning patterns are detected.

5.5 Customer Support

Support communications are recorded and retained to ensure quality of service, resolve disputes, and provide agents with the context needed to assist you effectively. All support agents at son4d are bound by confidentiality obligations.

5.6 Marketing Communications

With your consent, son4d may send you promotional communications about bonuses, seasonal offers (such as Idul Fitri / Lebaran reload bonuses, Ramadhan cashback campaigns, and Indonesian Independence Day special events), new game releases, and loyalty program updates. You may withdraw this consent at any time via your account notification settings, and we will process the opt-out within 48 hours.

5.7 Platform Improvement

Aggregated and anonymized usage data is analyzed to improve Platform performance, identify user experience issues, prioritize new features, and optimize the layout and responsiveness of the Platform for Indonesian users across Jakarta, Surabaya, Bandung, Bali, Medan, and other cities.

6 Legal Basis for Processing

son4d relies on the following legal bases for processing your Personal Data, consistent with internationally recognized data protection principles:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, transaction processing, and KYC verification — is carried out because it is necessary for the contract between son4d and the Player.
• Legal obligation: Processing required to comply with AML regulations, data retention mandates under son4d's operating license, and lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing for fraud detection, security monitoring, Platform improvement, and responsible gaming analytics, where son4d's legitimate interests in operating a safe and compliant platform are balanced against and do not override your data protection interests.
• Consent: Processing for marketing communications and non-essential analytics cookies, which is carried out only where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing

son4d does not sell your Personal Data. We share Personal Data only in the following limited and controlled circumstances:

7.1 Licensed Game Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive your account identifier, balance data, and game round information as technically necessary to deliver games and settle outcomes. These providers operate under their own data protection obligations as part of their regulatory licensing conditions.

7.2 Payment Processors

Indonesian payment processors and banking partners — including those facilitating transfers via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — receive the transaction data necessary to execute deposits and withdrawals. son4d shares only the minimum data required for each transaction.

7.3 Identity Verification and Fraud Prevention Services

son4d engages third-party identity verification and fraud detection services to support KYC processes and ongoing account monitoring. These services act as Data Processors under binding data processing agreements and are prohibited from using your data for their own commercial purposes.

7.4 Legal and Regulatory Authorities

son4d will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by a valid legal order, warrant, or regulatory directive. son4d will, where legally permitted, notify affected Players of such disclosures.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of son4d's business, Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the processing of your data that results from it, prior to the transfer taking effect.

8 Data Retention

son4d retains your Personal Data only for as long as is necessary for the purpose for which it was collected, subject to applicable legal retention obligations. The following retention periods apply as a general guide:

At the end of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any individual. Anonymized aggregate data may be retained indefinitely for statistical analysis.

9 Security Measures

son4d implements a multi-layered security architecture to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Our security measures include:

• Transport security: All data transmitted between your device and son4d's servers is encrypted using TLS 1.2 or higher (256-bit encryption). The Platform enforces HTTPS on all pages.
• At-rest encryption: Personal Data stored in son4d's databases — including passwords (stored as salted hashes), financial data, and KYC documents — is encrypted at rest using AES-256.
• Access controls: Internal access to Personal Data is restricted on a need-to-know basis. Staff access to player data is role-based, logged, and subject to periodic review. KYC documents are accessible only to authorized compliance personnel.
• Infrastructure security: son4d's Platform is hosted on enterprise-grade cloud infrastructure with DDoS protection, intrusion detection systems, and regular vulnerability scanning and penetration testing.
• Password policy: Passwords are stored as one-way cryptographic hashes using a current best-practice hashing algorithm. son4d staff cannot view your password in plain text and will never ask for it.
• Two-factor authentication (2FA): son4d offers optional two-factor authentication for Player accounts. We strongly recommend enabling 2FA to add a second layer of protection to your son4d login credentials.
• Incident response: son4d maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, affected Players will be notified without undue delay, and the incident will be reported to the relevant regulatory authority in accordance with applicable requirements.

10 Your Rights

As a Player on son4d, you hold the following rights with respect to your Personal Data. These rights may be exercised at any time by contacting our support team via live chat or by emailing support@son4d.bio from your registered email address.

10.1 Right of Access

You have the right to request a copy of the Personal Data son4d holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 days of a verified request. A single access request per 12-month period is provided free of charge; subsequent requests within the same period may be subject to a reasonable administrative fee.

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as correcting a misspelled city name) can be made directly through your account profile settings. Corrections to core identity information (name, date of birth) require KYC document support.

10.3 Right to Erasure

You have the right to request deletion of your Personal Data where: (a) the data is no longer necessary for its original collection purpose; (b) you withdraw consent and no other legal basis for processing exists; or (c) the data has been unlawfully processed. son4d will fulfill erasure requests to the maximum extent possible, but will inform you of any data that must be retained under a legal obligation and the applicable retention period.

10.4 Right to Restriction

You may request that son4d restricts processing of your Personal Data — for example, while the accuracy of data is being contested, or while an objection to processing is being evaluated — rather than deleting it. During a restriction, your data will be stored but not actively used for any processing purpose other than storage.

10.5 Right to Data Portability

You have the right to receive Personal Data you have provided to son4d in a structured, commonly used, machine-readable format (such as JSON or CSV), and to transmit that data to another service provider where technically feasible. This right applies to data processed on the basis of your consent or for the performance of a contract, and where the processing is carried out by automated means.

10.6 Right to Object

You have the right to object to processing of your Personal Data carried out on the basis of son4d's legitimate interests, including profiling for responsible gaming monitoring and direct marketing. Where you object to direct marketing, son4d will cease that processing immediately. Where you object to other legitimate-interest processing, son4d will assess the objection and respond within 30 days, either ceasing the processing or providing compelling legitimate grounds that override your interests.

10.7 Rights Related to Automated Decision-Making

son4d may use automated systems to make certain decisions that affect your account — for example, automated fraud detection flags that temporarily restrict account activity pending a manual review. You have the right to request human review of any automated decision that has a significant effect on you, to express your point of view, and to contest the decision. Contact our support team to initiate a human review request.

10.8 Exercising Your Rights

To exercise any of the rights listed above, submit a data subject request via live chat from your account dashboard or by email to support@son4d.bio. We will verify your identity before processing the request and will respond within 30 calendar days. Where a request is complex or involves a high volume of data, we may extend this period by a further 30 days, with prior notice.

11 Cookies & Tracking Technologies

son4d uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and collect aggregate analytics data to improve Platform performance. The following categories of cookies are used:

son4d does not use third-party advertising cookies or participate in cross-site behavioral advertising networks. Analytics cookies, where used, are configured to anonymize IP addresses and are governed by data processing agreements with the analytics service providers.

You may control cookie behavior through your browser's privacy and cookie settings. Please note that disabling strictly necessary or fraud-detection cookies will impair your ability to use the Platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

12 Minors

son4d's Services are strictly for adults aged 21 and above. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If son4d becomes aware that Personal Data has been collected from an individual under 21 — whether through a falsified date of birth at registration or any other means — son4d will immediately suspend the relevant account, forfeit all associated balances in line with the Terms & Conditions, and permanently delete the Personal Data of the underage individual, subject only to any legal retention obligation that may apply to transaction records for AML purposes.

13 International Data Transfers

son4d operates as an internationally licensed platform. Your Personal Data may be transferred to and processed in countries other than Indonesia, including the jurisdiction in which son4d holds its primary operating license and the data center regions used by son4d's cloud infrastructure and third-party service providers.

Where Personal Data is transferred internationally, son4d ensures that appropriate safeguards are in place to protect the data to a standard equivalent to the protections described in this Policy. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses recognized by applicable data protection authorities.
• Transfer to jurisdictions that maintain an adequate level of data protection as assessed by relevant international standards.
• Binding corporate rules or equivalent intra-group data transfer agreements where applicable.

By creating an account and using the son4d Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this Section, subject to the safeguards outlined above.

14 Changes to This Policy

son4d reviews this Privacy Policy at regular intervals and updates it when required — whether due to changes in our data practices, changes in applicable law, the introduction of new Platform features that involve new categories of data processing, or feedback from Players and regulators.

When material changes are made to this Policy, son4d will notify active Players via their registered email address and display a prominent notice on the Platform for a minimum of seven (7) days before the changes take effect. The "Last Updated" date at the top of this document will be revised with each update. The version number is also updated to help you track revisions.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change, you have the right to close your account and request deletion of your Personal Data prior to the change taking effect, subject to legal retention obligations.

Minor updates — such as corrections of typographical errors, rewording of existing clauses for clarity without substantive change, or updates to contact information — may be made without advance notice and take effect upon publication.

15 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or son4d's data practices, or if you wish to exercise any of your data subject rights described in Section 10, please contact our support team through the following channels. All privacy-related inquiries are handled with strict confidentiality.

• Live Chat: Available 24/7 directly from your son4d account dashboard. For urgent data concerns — such as suspected unauthorized access to your account or a suspected data breach — live chat is the fastest channel, with an average first response under 2 minutes.
• Email: support@son4d.bio — for formal data subject requests (access, rectification, erasure, portability), data breach notifications from Players, and written privacy complaints. Average response time 2–6 hours; formal data subject requests responded to within 30 calendar days.

When contacting us regarding a data subject request, please include your registered username and the email address associated with your son4d account so that we can verify your identity and locate the correct data records efficiently. Do not include sensitive document scans or bank account details in your initial contact message — our support team will guide you through a secure submission process for any documents required.