Privacy Policy

opo4d ("we", "us", "our", or "the Platform") is committed to protecting the personal information of every individual who interacts with our services. This Privacy Policy sets out the basis on which any personal data you provide to us — or that we collect about you — will be processed by opo4d in connection with your use of the opo4d.vip platform.

We recognize that privacy is a fundamental right. Our data practices are designed to be transparent, proportionate, and respectful of the trust you place in us when you share your information. This policy is written in plain English so that it is accessible to all of our members across Indonesia — whether you are based in Jakarta, Surabaya, Bali, Bandung, Medan, or elsewhere in the archipelago.

Throughout this document, "Personal Data" refers to any information that identifies or could reasonably be used to identify you as an individual. "Processing" means any operation performed on Personal Data — including collection, storage, use, disclosure, or deletion. "Member" or "You" refers to any registered account holder or visitor to the opo4d platform.

If you have questions about this policy or wish to exercise any of your data rights, please contact us using the details provided in Section 13.

opo4d collects Personal Data in several categories depending on your relationship with the platform. The categories and specific data points are described below.

We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government-issued identity document submitted for KYC purposes incidentally contains such information (e.g., religion field on an Indonesian KTP). Where this occurs, that information is not extracted, stored separately, or used for any purpose beyond verifying document authenticity.

3.1 Directly from You. The majority of Personal Data we hold is provided directly by you during the account registration process, when completing identity verification (KYC), when making deposits or requesting withdrawals, when contacting our support team, or when responding to surveys and promotional campaigns.

3.2 Automatically. When you visit opo4d.vip or use our platform, we automatically collect Technical Data and Usage Data through server logs, cookies, and similar tracking technologies. This collection occurs as a standard function of web and mobile platform operation. See Section 7 for our full Cookies policy.

3.3 From Third Parties. We may receive data about you from third-party service providers engaged to support our operations, including:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) who confirm transaction status and ownership of payment accounts;
• Identity verification service providers who assist in validating KTP, passport, and other identity documents;
• Fraud prevention and anti-money-laundering (AML) screening services that cross-reference your details against watchlists and risk databases;
• Game studios (such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft) whose platforms process game session data on our behalf.

We do not purchase or rent marketing lists or obtain Personal Data from data brokers for unsolicited marketing purposes.

opo4d uses your Personal Data only for clearly defined, legitimate purposes. The primary purposes are set out below.

4.1 Account Management. To create, maintain, and secure your opo4d account; to authenticate your identity at login; to process deposits and withdrawals via your chosen Indonesian payment method; and to communicate with you about your account status, balances, and transactions.

4.2 Identity Verification & Compliance. To perform know-your-customer (KYC) checks and confirm that you meet the eligibility requirements for using the platform, including the 21+ age requirement and the requirement that all registered Members are verified individuals rather than anonymous users or legal entities. KYC compliance is a core component of our anti-money-laundering (AML) obligations.

4.3 Platform Operations & Security. To detect, investigate, and prevent fraud, bonus abuse, account takeover attempts, collusion between Members, and any other activity that violates our Terms & Conditions or constitutes criminal conduct. This includes automated monitoring of betting patterns, login locations, and payment activity.

4.4 Responsible Gaming. To monitor engagement patterns that may indicate problem gambling behavior; to enforce deposit limits, session restrictions, and self-exclusion requests that you have activated; and to proactively reach out to Members whose activity triggers our responsible gaming protocols.

4.5 Personalization & Marketing. To tailor promotional offers, bonus campaigns, and game recommendations to your preferences and activity history — for example, informing a Member who frequently plays slots about new Pragmatic Play or NetEnt releases, or notifying a sports bettor about promotions tied to BRI Liga 1 fixtures or Champions League matches. You may opt out of marketing communications at any time by contacting our support team.

4.6 Customer Support. To respond to your support queries, resolve disputes, process complaints, and improve the quality of our service based on feedback and support interaction records.

4.7 Legal & Regulatory Obligations. To comply with any applicable legal obligation, court order, or request from a competent regulatory or law enforcement authority, including the retention of transaction records for the periods required by applicable AML regulations.

For each processing purpose described in Section 4, opo4d relies on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and opo4d — including operating your account, processing transactions, and delivering gaming services — is carried out on the basis that it is necessary for the performance of our agreement with you.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, AML transaction monitoring, and record-keeping — are carried out because they are required by applicable law or regulation.
• Legitimate Interests: Where we process data for fraud prevention, platform security, responsible gaming monitoring, or internal analytics, we do so on the basis of our legitimate interests in operating a safe and sustainable platform — provided that those interests are not overridden by your privacy rights.
• Consent: Where we send you marketing communications or deploy non-essential cookies, we rely on your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

opo4d does not sell your Personal Data to third parties. We share your data only in the following controlled circumstances:

6.1 Service Providers. We engage trusted third-party vendors to help us deliver the platform. These include payment gateways, KYC verification providers, cloud hosting services, fraud detection engines, game studios, and customer support software providers. All such vendors are bound by data processing agreements that restrict their use of your data to the specific service they provide on our behalf.

6.2 Payment Partners. When you initiate a deposit or withdrawal, relevant transaction details are shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate the payment. These partners process your financial data under their own privacy frameworks as independent data controllers.

6.3 Legal & Regulatory Disclosure. We may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, where disclosure is necessary to protect the rights, property, or safety of opo4d, our Members, or the public, or where disclosure is required to comply with a binding court order or lawful authority request.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of opo4d's business operations, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms via an update to this policy.

7.1 What Cookies Are. Cookies are small text files stored on your device by your web browser when you visit a website. opo4d uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, remember your preferences, and analyze how the site is used.

7.2 Types of Cookies We Use.

7.3 Managing Cookies. You can control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling functional or analytics cookies may affect your experience but will not prevent you from using core services.

8.1 Active Accounts. We retain your Personal Data for as long as your opo4d account remains active and for a reasonable period thereafter to support any outstanding queries, disputes, or regulatory obligations that arise from your account activity.

8.2 Closed Accounts. Following account closure — whether initiated by you or by opo4d — we retain Personal Data for a minimum of five (5) years to comply with our anti-money-laundering record-keeping obligations and to defend against any legal claims that may arise within the applicable statute of limitations period.

8.3 KYC Documents. Identity verification documents (copies of KTP, passport, or SIM) are retained for the same five-year minimum period following account closure, in compliance with standard financial services KYC record-keeping requirements.

8.4 Marketing Data. If you have consented to marketing communications, we will retain your contact information for marketing purposes until you withdraw consent. Upon withdrawal of consent, your details are removed from active marketing lists within a reasonable administrative period (typically 5 business days).

8.5 Anonymized Analytics. Aggregated and anonymized usage data, from which no individual can reasonably be identified, may be retained indefinitely for internal reporting and platform improvement purposes.

opo4d applies industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or alteration. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and opo4d.vip is encrypted in transit using 256-bit SSL/TLS protocols. The padlock icon in your browser's address bar confirms an active encrypted connection.
• Encrypted Data at Rest: Sensitive Personal Data — including KYC documents, financial account details, and authentication credentials — is encrypted at rest in our secure data infrastructure.
• Password Hashing: Account passwords are never stored in plain text. We use industry-standard one-way cryptographic hashing algorithms, ensuring that even our own staff cannot retrieve your password.
• Access Controls: Access to Personal Data within opo4d's operational systems is granted on a strict need-to-know basis. Staff access is governed by role-based permissions and is logged for audit purposes.
• Fraud & Intrusion Monitoring: Our infrastructure is continuously monitored for anomalous access patterns, brute-force login attempts, and suspicious activity. Automated alerts trigger immediate incident response procedures.
• Third-Party Security Assessments: Key infrastructure partners and payment processors are required to demonstrate compliance with recognized security standards as a condition of their engagement with opo4d.

You have the following rights in respect of the Personal Data opo4d holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will respond within 30 days of receiving a valid request.

Please note that some rights are subject to limitations. For example, the right to erasure does not apply where retention is required to comply with a legal obligation (such as AML record-keeping) or to establish, exercise, or defend legal claims.

11.1 Strict 21+ Policy. opo4d's services are exclusively for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware — through KYC verification, behavioral signals, or any other means — that a Member is under 21, we will immediately suspend the account, initiate an investigation, and close the account permanently if the age-restriction breach is confirmed. Any funds associated with an underage account will be withheld and handled in accordance with our Terms & Conditions.

11.2 Parental Awareness. If you believe that a minor in your household has accessed or registered on the opo4d platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take all necessary steps to close the account and prevent further access. We also encourage parents and guardians to use device-level parental controls and content filtering tools to prevent minors from accessing online gambling platforms.

11.3 No Targeted Data Collection from Minors. opo4d does not direct any marketing communications, promotional campaigns, or personalization activities toward individuals who are or appear to be under 21 years of age.

12.1 Right to Update. opo4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. The "Last updated" date at the top of this page will be revised whenever a material change is made.

12.2 Notification of Material Changes. Where a change materially affects how we use your Personal Data or reduces your rights under this policy, we will notify you via the registered email address on your account or via a prominent in-platform notice prior to the change taking effect. For minor clarifications or non-material updates, updating the "Last updated" date constitutes sufficient notice.

12.3 Continued Use. Your continued use of the opo4d platform following publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with any update, you should cease using the platform and request account closure as described in our Terms & Conditions.

13.1 Data Inquiries. For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the opo4d data team at:

Email: [email protected] (plain text — not a clickable link)

Please include your registered username and a clear description of your inquiry or request. We aim to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 days.

13.2 Complaints. If you are dissatisfied with our response to a data rights request or believe that we have handled your Personal Data in a manner inconsistent with this policy, you are entitled to lodge a formal complaint. Please send formal complaints to the same email address above with the subject line "Formal Privacy Complaint — [Your Username]". We will escalate the matter to our compliance team and respond within 5 business days.

13.3 Support Availability. Our support team is available 24 hours a day, 7 days a week. Indonesian-speaking agents are available to assist Members across all Indonesian time zones — WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9).