fat4d Privacy Policy — Your Data, Our Responsibility

The following definitions apply throughout this Privacy Policy:

fat4d acts as the data controller for all Personal Data collected through the fat4d platform. As data controller, fat4d determines the purposes and means by which your Personal Data is processed, and bears responsibility for ensuring that processing activities comply with applicable data protection principles.

If you have any questions about how fat4d handles your Personal Data, wish to exercise any of the rights described in Clause 10 of this Policy, or wish to lodge a complaint, you may contact fat4d's designated Privacy contact at:

fat4d collects Personal Data through several channels: data you provide directly when registering or using the platform, data generated automatically through your interaction with fat4d services, and data obtained from Third-Party Providers as part of our verification and fraud-prevention processes. The categories of Personal Data we collect are as follows:

3.1 Registration Data

When you create a fat4d Account, we collect the information you enter at registration, including your full legal name, date of birth, email address, mobile phone number, chosen username, and your residential address (city/province level, used to confirm you are based in Indonesia).

3.2 Identity Verification (KYC) Data

Prior to your first withdrawal — and at other points during your membership where fat4d's compliance obligations require it — we collect copies of government-issued identity documents (Indonesian National Identity Card / KTP, or current passport), proof of address documents, and proof of payment method ownership. These documents contain your photograph, ID number, and other government-recorded personal details.

3.3 Financial Data

We collect records of all deposits and withdrawals processed through your fat4d Account, including transaction amounts in Indonesian Rupiah (IDR / Rp), timestamps, and the payment channel used (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, or LinkAja). fat4d does not store full bank account numbers or card numbers on its own servers; these are tokenised and held by our certified payment processing partners.

3.4 Gaming & Wagering Activity Data

We maintain a complete record of all gaming sessions conducted through your Account, including game titles played, wager amounts, outcomes, session duration, bonus funds claimed and wagered, and any responsible gaming tools you have activated. This data is essential for dispute resolution, responsible gaming monitoring, and regulatory compliance.

3.5 Technical & Device Data

When you access the fat4d platform, our systems automatically record certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, time zone setting, language preferences, and referring URL. This data is used for security, fraud detection, and platform optimisation purposes.

3.6 Communications Data

If you contact fat4d's support team via email, live chat, or any other channel, we retain a record of that communication — including the content of your messages, timestamps, and any attachments you send. This allows us to track and resolve support cases effectively and to maintain an accurate history of your account interactions.

3.7 Marketing Preference Data

We record your stated preferences regarding promotional communications, including whether you have opted in to or out of email newsletters, SMS promotions, and bonus notifications. These preferences are stored and honoured in all outbound marketing from fat4d.

fat4d uses the Personal Data it collects only for defined, legitimate purposes. The table below maps each data category to the purposes for which it is used:

fat4d will not use your Personal Data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or being required to do so by law.

fat4d processes your Personal Data on one or more of the following legal bases:

1. Contractual Necessity: Processing that is necessary to perform the contract between you and fat4d — specifically, to operate your Account, process your transactions, and deliver the gaming services you have requested.
2. Legal Obligation: Processing required by applicable law, including anti-money laundering (AML) obligations, age verification requirements, and fraud reporting duties.
3. Legitimate Interests: Processing that serves fat4d's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights and freedoms.
4. Consent: Processing based on your freely given, specific, and informed consent — principally, the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

fat4d does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your Personal Data only in the following defined circumstances:

• Payment Processors: Your financial transaction data is shared with the relevant Indonesian bank or e-wallet operator (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja) to the extent necessary to execute your deposit or withdrawal instruction.
• Identity Verification Partners: KYC documents may be shared with certified third-party identity verification service providers engaged by fat4d to perform document authentication and liveness checks on our behalf. These partners are bound by strict data processing agreements.
• Gaming Studio Providers: Game session data (wager amounts, game round IDs, outcomes) is exchanged with third-party game studios (including Evolution Gaming, Pragmatic Play, PG Soft, Habanero, NetEnt, Microgaming, and Spribe) to the extent required to deliver, record, and audit game rounds.
• Fraud Prevention & Security Services: Technical and device data may be shared with specialist fraud detection platforms to identify suspicious patterns, detect duplicate accounts, and protect the integrity of the fat4d platform.
• Legal and Regulatory Authorities: fat4d will disclose Personal Data to competent authorities, regulators, courts, or law enforcement agencies where required by law, court order, or in connection with a legal proceeding in which fat4d is a party.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of fat4d's business, Personal Data held by fat4d may be transferred to the acquiring entity, subject to equivalent data protection commitments being maintained.

fat4d retains your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your membership with fat4d.
• Closed Account Data: Retained for a minimum of five (5) years from the date of Account closure, in compliance with anti-money laundering record-keeping obligations and to support the resolution of any late-arising disputes.
• KYC Documents: Retained for a minimum of five (5) years from the date of last transaction, consistent with AML compliance requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for three (3) years from the date of the last communication in a given case.
• Technical & Device Logs: Retained for thirteen (13) months from the date of collection, after which they are aggregated and anonymised.
• Marketing Preference Records: Retained for the duration of your membership and for two (2) years following Account closure, to maintain an accurate opt-out history.

When Personal Data is no longer required, it is securely deleted or anonymised in a manner that prevents re-identification.

fat4d employs a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and the fat4d platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols. The padlock icon displayed in your browser confirms that your connection is protected.
• Encryption at Rest: Sensitive Personal Data stored on fat4d's servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within fat4d's systems is restricted on a strict need-to-know basis. Staff with access to member data undergo mandatory data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication: fat4d offers two-factor authentication (2FA) as an additional layer of Account security. Members are strongly encouraged to enable 2FA from within their Account settings.
• Penetration Testing: fat4d's platform undergoes periodic independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: fat4d maintains a documented security incident response plan. In the event of a data breach that poses a risk to member rights and freedoms, affected members will be notified without undue delay and in accordance with applicable notification requirements.

fat4d uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and collect analytics data that helps us improve our services. The categories of cookies we use are:

• Strictly Necessary Cookies: These are essential for the fat4d platform to function. They maintain your login session, preserve your security token, and ensure that your Account balance and game state are displayed correctly. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: These remember your preferences such as your chosen language, display settings, and responsible gaming tool configurations, so that you do not need to re-enter them on each visit.
• Analytics Cookies: These collect aggregated, anonymised data about how members navigate the fat4d platform — which pages are visited most, how long sessions last, and where members encounter difficulties. This data is used solely to improve the platform experience.
• Marketing & Retargeting Cookies: With your consent, fat4d may place cookies that help us measure the effectiveness of our promotional campaigns and deliver contextually relevant offers to you. You may withdraw consent for marketing cookies at any time via your Account preferences.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the fat4d platform. A full cookie inventory — listing each cookie name, provider, purpose, and expiry — is available on request by contacting fat4d support.

As a member of fat4d, you hold the following rights with respect to your Personal Data. These rights may be exercised by contacting fat4d at the address specified in Clause 15:

1. Right of Access: You have the right to request a copy of the Personal Data fat4d holds about you, together with information about how it is being processed.
2. Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
3. Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to fat4d's legal retention obligations — data that must be kept for AML or regulatory compliance purposes cannot be deleted on request.
4. Right to Restriction: You may request that fat4d restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
5. Right to Data Portability: You have the right to receive Personal Data you have provided to fat4d in a structured, commonly used, machine-readable format, and to have that data transmitted to another service provider where technically feasible.
6. Right to Object: You may object to fat4d processing your Personal Data on the basis of legitimate interests. fat4d will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

fat4d will respond to all rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, with notification to you. fat4d will not charge a fee for processing rights requests unless they are manifestly unfounded or excessive.

fat4d operates a strict 21+ age policy across all products and services. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes a mandatory age declaration, and our KYC process independently verifies age prior to processing any withdrawal.

If fat4d becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated Account, and return any deposited funds to the originating payment method. Parents or guardians who believe their child has registered an Account with fat4d should contact us immediately at [email protected].

fat4d is a platform that operates internationally and engages Third-Party Providers whose infrastructure may be located outside of Indonesia. As a result, your Personal Data may be transferred to, and processed in, countries other than Indonesia. In particular, game round data may be processed on servers operated by our gaming studio partners in their respective jurisdictions.

Where Personal Data is transferred outside of Indonesia, fat4d ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applicable in Indonesia. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, or reliance on a Third-Party Provider's participation in a recognised cross-border data transfer framework.

You may request information about the specific safeguards in place for any given international data transfer by contacting fat4d at the address in Clause 15.

The fat4d platform integrates services provided by third-party vendors including game studios, payment processors, and security providers. These Third-Party Providers operate under their own privacy policies, which govern how they process any Personal Data that fat4d shares with them in the course of delivering services.

fat4d carefully vets all Third-Party Providers before engagement and requires them to contractually commit to processing Personal Data only for the purposes specified by fat4d, implementing appropriate security measures, and cooperating with fat4d's audit and compliance requirements. fat4d does not permit Third-Party Providers to use member Personal Data for their own independent marketing or commercial purposes.

While fat4d takes reasonable care in selecting and contracting its Third-Party Providers, fat4d is not responsible for the privacy practices of those providers beyond the scope of the contractual obligations they have accepted. Members who have concerns about a specific Third-Party Provider's data handling practices are encouraged to review that provider's own privacy documentation.

fat4d reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, fat4d will notify registered members via the email address associated with their Account at least five (5) days before the revised Policy takes effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. The version number is also updated with each substantive change. We encourage you to review this Privacy Policy periodically to stay informed about how fat4d protects your data. Your continued use of the fat4d platform following any update constitutes your acknowledgement of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about fat4d's data practices, please contact us using the details below:

• Email: [email protected] — Subject line: "Privacy Request" or "Data Rights Request"
• Live Chat: Available 24/7 via the chat widget within your logged-in fat4d Account.
• Response Commitment: fat4d aims to acknowledge all privacy-related communications within 48 hours (WIB business hours) and to resolve substantive requests within 30 days of receipt of all necessary information.

If you are not satisfied with fat4d's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.