Privacy Policy

In this Privacy Policy, the following terms carry the meanings described below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person — including name, email address, mobile number, date of birth, payment account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, cfc4d as operator of the Platform at cfc4d.lat.
• "Data Processor" means any third party that processes Personal Data on behalf of cfc4d under a data processing agreement — for example, payment processors and identity verification providers.
• "Player" or "you" means any individual who has registered an Account on the cfc4d Platform or who visits cfc4d.lat.
• "Platform" means the cfc4d website at cfc4d.lat, including all pages, betting interfaces, casino lobbies, and associated mobile-optimised experiences.
• "KYC" (Know Your Customer) means the identity verification process required before a Player's first withdrawal, involving submission of government-issued photo identification and proof of address.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, remember your preferences, and support analytics.

cfc4d operates as the Data Controller for all Personal Data collected through the Platform. cfc4d is an internationally operated online betting and gaming platform serving the Indonesian market. As Data Controller, cfc4d determines the purposes for which your Personal Data is collected and the manner in which it is processed.

All data protection enquiries, access requests, and complaints may be directed to cfc4d's Support team using the contact details set out in Clause 15 of this Policy. cfc4d aims to respond to all data-related enquiries within 30 calendar days of receipt.

cfc4d collects Personal Data through several channels: directly from you during registration and Account use, automatically through the Platform's technical systems, and from regulated third-party service providers where permitted. The categories of Personal Data we collect are set out in the table below.

cfc4d does not collect special categories of sensitive Personal Data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless strictly required by law or with your explicit prior consent.

cfc4d processes your Personal Data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons it was originally collected. The primary purposes for which we use your data are as follows:

• Account management: To create, maintain, and administer your cfc4d Account, including authentication at cfc4d Login and enforcement of the one-account-per-player policy.
• Transaction processing: To process deposits and withdrawals in Indonesian Rupiah (IDR) via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, and ShopeePay, and to maintain accurate financial records for your Account.
• Identity verification (KYC): To verify your identity and age (21+) prior to processing withdrawal requests and to comply with applicable anti-money laundering obligations.
• Service delivery: To provide access to the full range of cfc4d products including the Sportsbook, Slots, live casino, Capsa Susun, and Bandar Ceme, and to personalise your experience based on your in-platform activity.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, bonus abuse, and other prohibited conduct as defined in the cfc4d Terms & Conditions.
• Customer support: To respond to your enquiries, resolve complaints, and maintain a record of support interactions for quality and training purposes.
• Responsible gaming: To monitor betting and gaming patterns that may indicate problem gambling behaviour, and to administer self-exclusion, deposit limit, and cooling-off requests in accordance with our Responsible Gaming policy.
• Marketing communications: To send you promotional emails, SMS notifications, and in-platform messages about relevant cfc4d offers, seasonal promotions (e.g., Idul Fitri bonuses, BRI Liga 1 season specials), and new product launches — but only where you have provided consent or where cfc4d has a legitimate interest to do so, and subject always to your right to opt out.
• Legal and regulatory compliance: To retain transaction and identity records as required under applicable anti-money laundering principles and to respond to lawful requests from competent authorities.
• Platform improvement: To analyse aggregated and anonymised usage data to improve Platform performance, user experience, game selection, and technical infrastructure.

cfc4d processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

1. Contractual necessity: Processing required to perform the contract between you and cfc4d — including operating your Account, processing bets and financial transactions, and delivering gaming services.
2. Legitimate interests: Processing necessary for cfc4d's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, security monitoring, responsible gaming oversight, and Platform analytics.
3. Legal obligation: Processing required to comply with applicable laws and regulatory obligations — including KYC identity verification, financial record-keeping, and co-operation with competent authorities on anti-money laundering matters.
4. Consent: Processing carried out on the basis of your explicit consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting [email protected] or by using the unsubscribe function in any marketing email. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

cfc4d may share your Personal Data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors and financial institutions: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and their respective acquiring banks — to process your deposit and withdrawal transactions in IDR.
• Identity verification providers: Licensed KYC and anti-money laundering screening services that process your identity documents and cross-reference your details against international watchlists and sanctions databases.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to the minimum extent required to authenticate your session and record game outcomes. These providers do not receive your full identity profile.
• IT and infrastructure providers: Cloud hosting, content delivery network (CDN), and cybersecurity service providers that maintain the technical infrastructure underpinning the Platform. All such providers operate under strict data processing agreements.
• Professional advisers: Legal counsel, auditors, and compliance consultants, where necessary to obtain professional advice or to defend cfc4d's legal rights.
• Competent authorities: Law enforcement agencies, financial intelligence units, or other regulatory bodies where cfc4d is required by law to disclose information or where disclosure is necessary to prevent, detect, or prosecute fraud or money laundering.

Any third party receiving Personal Data from cfc4d is required to process that data only for the specified purpose and in accordance with applicable data protection principles. cfc4d does not permit third-party Data Processors to use your data for their own independent marketing or commercial purposes.

cfc4d retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required to comply with legal and regulatory obligations. The general retention periods applicable to each data category are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with cfc4d's internal data lifecycle policy. Anonymised and aggregated data (from which individual Players cannot be identified) may be retained indefinitely for statistical and analytical purposes.

cfc4d implements a multi-layered approach to data security designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and cfc4d's servers, ensuring that your login credentials, payment details, and session data are protected in transit.
• Encrypted storage of sensitive data at rest, including KYC documents and financial account details, using industry-standard encryption algorithms.
• Access controls limiting internal access to Personal Data on a strict need-to-know basis, with multi-factor authentication required for all administrative system access.
• Automated fraud detection systems that monitor account activity in real time for indicators of unauthorised access, account takeover, and financial fraud.
• Regular security audits and penetration testing conducted by independent cybersecurity specialists to identify and remediate vulnerabilities in the Platform's infrastructure.
• Incident response procedures that enable cfc4d to detect, contain, and notify affected Players of any data security incident that poses a material risk to their rights and interests.

While cfc4d takes all reasonable technical and organisational measures to protect your data, no transmission over the internet is entirely risk-free. You play an important role in keeping your Account secure: use a strong, unique password for your cfc4d Account, do not share your credentials with anyone, and notify [email protected] immediately if you suspect unauthorised access.

cfc4d uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience on the Platform. The types of cookies we use are described below:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in to your cfc4d Account across page navigation, and security cookies that support fraud prevention. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as your preferred language, last-visited game lobby, and display settings, so you do not need to reconfigure them on each visit.
• Analytics cookies: Collect anonymised data about how Players navigate the Platform — which pages are visited most frequently, how long sessions last, and where players encounter errors. This data is used exclusively to improve Platform design and performance. cfc4d uses privacy-respecting analytics tools and does not share raw analytics data with third-party advertising networks.
• Marketing cookies: Used to deliver relevant promotional content about cfc4d offers, including seasonal promotions during Ramadhan, Idul Fitri, and major football tournaments. Marketing cookies are only deployed with your consent.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to use core Platform features including cfc4d Login and the Sportsbook interface.

As a Player whose Personal Data is processed by cfc4d, you have the following rights with respect to your data. To exercise any of these rights, please contact cfc4d at [email protected] with a clear description of your request. We will respond within 30 calendar days.

1. Right of access: You have the right to request a copy of the Personal Data that cfc4d holds about you, along with information about how it is being processed.
2. Right to rectification: You have the right to request correction of any Personal Data that is inaccurate or incomplete. For minor updates (e.g., contact number), you may update these directly through your Account settings following cfc4d Login.
3. Right to erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that cfc4d may be required to retain certain data for the statutory periods set out in Clause 7, and erasure requests cannot override these obligations.
4. Right to restrict processing: You have the right to request that cfc4d restricts processing of your Personal Data in specific circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is under review.
5. Right to data portability: Where processing is based on your consent or on contract and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
6. Right to object: You have the right to object to cfc4d's processing of your Personal Data on grounds of legitimate interest, including any profiling carried out for direct marketing purposes. Where you object to direct marketing, cfc4d will cease that processing immediately.
7. Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The cfc4d Platform is strictly intended for adults aged 21 years and above. cfc4d does not knowingly collect, process, or store Personal Data from individuals under the age of 21. Age verification is a mandatory step during the KYC process, and any Account found to belong to a minor will be immediately closed and its Balance forfeited in accordance with the cfc4d Terms & Conditions.

If you believe that a minor has registered an Account on the cfc4d Platform or that Personal Data of a minor has been inadvertently collected, please notify us immediately at [email protected]. cfc4d will investigate and take prompt corrective action, including deletion of any data collected from the minor and permanent closure of the Account.

cfc4d operates as an internationally hosted platform. Your Personal Data may be transferred to, and processed in, countries outside Indonesia in order to deliver the services described in this Policy — for example, to cloud hosting providers, KYC verification services, and game content providers whose infrastructure is located in other jurisdictions.

Where Personal Data is transferred internationally, cfc4d ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards may include contractual data protection clauses with the receiving party, certification under recognised data security frameworks, or other legally recognised transfer mechanisms.

By registering an Account on cfc4d and accepting the Terms & Conditions, you acknowledge and consent to the transfer of your Personal Data to cfc4d's international infrastructure providers under the safeguards described above.

The cfc4d Platform does not contain links to external third-party websites for commercial or advertising purposes. All navigation within cfc4d.lat remains within the Platform. However, if you independently navigate from cfc4d to any external website — for example, by manually entering a URL — please be aware that cfc4d has no control over the content or privacy practices of those external sites. This Privacy Policy applies solely to data collected through the cfc4d Platform at cfc4d.lat.

cfc4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational procedures. When material changes are made, cfc4d will notify registered Players by email to their registered address and/or by a prominent notice on the Platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the cfc4d Platform after any amendment has been communicated constitutes your acceptance of the revised Privacy Policy. If you disagree with any material change, you may request Account closure by contacting [email protected] before the effective date of the change.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how cfc4d handles your Personal Data, please contact our Support team using the details below:

cfc4d is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response to a data rights request or complaint, you may escalate your concern through applicable international data protection channels.