Privacy Policy — wind4d

This Privacy Policy applies to all personal data processed by wind4d in connection with your use of the platform available at https://wind4d.cam, including the website, any associated progressive web application, and all customer support interactions conducted through live chat, email, or WhatsApp.

For the purposes of applicable data protection law, wind4d acts as the data controller with respect to the personal data of its Members and prospective Members. References to "we", "us", and "our" throughout this Policy refer to wind4d.

This Policy is to be read alongside wind4d's Terms & Conditions. In the event of any conflict between the two documents on a data-privacy matter, this Privacy Policy shall take precedence.

wind4d collects the following categories of personal data, depending on the nature of your interaction with the platform:

wind4d does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless you voluntarily disclose such information through a support interaction, in which case it is used solely to address your enquiry and is not retained beyond that purpose.

wind4d collects personal data through the following means:

• Direct interactions: Data you provide when completing the registration form, submitting KYC documents, making deposit or withdrawal requests, contacting our support team, or updating your account profile;
• Automated technologies: Technical data collected automatically as you navigate the platform, including cookies, server logs, and session-tracking tools — see Section 9 for full details;
• Payment processors: Transaction confirmation data received from third-party payment gateways and Indonesian bank transfer systems when you deposit or withdraw funds;
• Identity verification partners: Where wind4d uses a third-party KYC service provider to assist with document verification, that provider may return a verification status and risk score to us;
• Fraud prevention services: Data points such as IP addresses and device fingerprints may be cross-referenced with third-party fraud-detection databases to protect the integrity of the platform.

wind4d processes your personal data for the following purposes. Each purpose is supported by a corresponding legal basis:

wind4d does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data with carefully selected third-party processors and partners strictly to the extent necessary for the following purposes:

• Payment service providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data required to process your deposit or withdrawal;
• KYC and identity verification providers: Third-party verification platforms that process your identity documents on wind4d's behalf under data processing agreements that impose equivalent privacy obligations;
• Fraud prevention and risk management services: Providers that cross-reference technical data to identify suspicious activity, bot usage, and multi-accounting patterns;
• IT infrastructure and hosting providers: Cloud server operators that host wind4d's platform infrastructure under strict data security obligations;
• Customer communication platforms: Providers of live chat software, email delivery infrastructure, and WhatsApp Business API services used to deliver support communications;
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive anonymized session data for game performance and fairness auditing purposes only — they do not receive your identity or financial data;
• Regulatory and law enforcement authorities: Where wind4d is required by applicable law, court order, or competent authority to disclose your data, we will do so after taking reasonable steps to verify the legitimacy of the request.

All third-party data processors engaged by wind4d are bound by contractual data processing agreements that require them to process your data only on wind4d's documented instructions and to implement appropriate technical and organizational security measures.

wind4d's primary server infrastructure is located outside of Indonesia. As a result, when you use the platform, your personal data may be transferred to and processed in countries other than Indonesia. These countries may have data protection laws that differ from those applicable in your home jurisdiction.

Where such transfers occur, wind4d implements the following safeguards to ensure your data continues to receive an adequate level of protection:

• Contractual clauses that require receiving parties to provide protection equivalent to internationally recognized data protection standards;
• Technical safeguards including end-to-end encryption of data in transit and at rest;
• Access controls that restrict data access to authorized personnel only, regardless of location;
• Periodic security audits of all international processing arrangements.

By creating an account on wind4d and accepting these policies, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described above.

wind4d retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply as a general guide:

Upon the expiry of the applicable retention period, wind4d will securely delete or anonymize your personal data in accordance with industry-standard data destruction procedures. Anonymized and aggregated data that can no longer identify you individually may be retained indefinitely for statistical and business analysis purposes.

wind4d implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers;
• AES-256 encryption at rest for all sensitive data stored in wind4d's databases, including identity documents and financial records;
• Role-based access controls (RBAC) ensuring that wind4d employees can only access personal data that is strictly necessary for their job function;
• Two-factor authentication (2FA) required for all wind4d staff who access production systems containing personal data;
• Regular penetration testing conducted by independent security professionals to identify and remediate vulnerabilities in the platform;
• 24/7 intrusion detection monitoring with automated alerts and incident response protocols;
• Data breach response plan — in the event of a confirmed data breach that poses a high risk to your rights, wind4d will notify affected Members within 72 hours of becoming aware of the incident, to the extent practicable.

wind4d uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit the platform. The following categories of cookies are in use:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling functional or analytics cookies will not affect your ability to place bets but may degrade certain platform features.

As a Member of wind4d, you hold the following rights with respect to your personal data. These rights may be exercised at any time by contacting our Data Protection team using the details in Section 14:

wind4d will respond to all data rights requests within 30 calendar days of receipt. For complex requests, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window. Requests are processed free of charge unless they are manifestly unfounded or excessive.

If wind4d becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has created an account on wind4d, please contact our support team immediately at [email protected] with the subject line "Minor Account Report".

With your explicit consent, wind4d may send you promotional communications including bonus offers, seasonal campaign notifications (such as Idul Fitri cashback promotions or AFF Cup free bet offers), and platform updates via email, WhatsApp, or SMS. You will only receive such communications if you have opted in during registration or subsequently through your Account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any promotional email;
• Replying "STOP" to any promotional SMS or WhatsApp message;
• Updating your communication preferences directly in your Account settings panel;
• Contacting wind4d's support team and requesting removal from all marketing lists.

Opting out of marketing communications will not affect your ability to receive service-related notifications, which are essential to the operation of your Account (such as deposit confirmation messages, withdrawal status updates, and security alerts).

wind4d reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or platform features. The "Last Updated" date at the top of this page will be revised accordingly whenever material changes are made.

Where changes are material — that is, where they significantly affect the way we process your personal data or your rights in connection with it — wind4d will provide at least fourteen (14) days' prior notice by publishing a prominent notice on the platform and, where practicable, sending a notification to your registered email address.

Your continued use of the wind4d platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, please cease using the platform and contact support to close your Account.

For all data privacy enquiries, rights requests, or complaints regarding wind4d's handling of your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — please use the subject line "Data Privacy Request" to ensure your message is routed to the correct team;
• Live Chat: Available 24 hours a day, 7 days a week, directly on the wind4d platform — ask to speak with a Data Protection specialist;
• WhatsApp: +62 812 3456 7890 — available during business hours (09:00–21:00 WIB, Monday to Sunday).

wind4d is committed to resolving all privacy complaints promptly and fairly. If you raise a complaint with us and are not satisfied with our response, you may escalate the matter to the relevant data protection authority in your jurisdiction. For Members based in Indonesia, the relevant authority for personal data protection matters is the Ministry of Communication and Information Technology (Kominfo) or any successor regulatory body.