Privacy Policy

For the purposes of this Privacy Policy, the following definitions apply:

• "krim4d" / "we" / "us" / "our" — the krim4d online betting and gaming platform, accessible at krim4d.cam, including its operators, affiliated entities, and authorized data processors.
• "Personal Data" — any information that directly or indirectly identifies a natural person, including but not limited to name, date of birth, identity card number, email address, phone number, IP address, device identifier, and financial account details.
• "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, storage, retrieval, use, disclosure, erasure, and destruction.
• "Member" / "Player" / "you" — any natural person who has registered an account on the krim4d platform or who accesses the platform's publicly available content.
• "KYC Data" — identity and address verification documentation collected as part of the mandatory Know Your Customer process, including copies of government-issued identification (KTP), proof of address, and selfie photographs.
• "Cookies" — small text files placed on your device by the krim4d platform or its authorized analytics and functional service providers for the purposes described in Section 10 of this policy.
• "Data Processor" — a third party that processes Personal Data on behalf of krim4d under a written data-processing agreement, solely in accordance with krim4d's documented instructions.

krim4d acts as the data controller in respect of the Personal Data collected through its platform. As data controller, krim4d determines the purposes for which Personal Data is processed and the means by which that processing is carried out.

krim4d's primary target market is Indonesia. We serve members located across major Indonesian cities including Jakarta, Surabaya, Bandung, Medan, Semarang, Makassar, Palembang, and Bali, as well as Indonesian residents in other provinces and regions. Our data practices are designed to align with internationally recognized data protection standards applicable to online gaming operators serving Indonesian players.

For all data-related enquiries, requests, and formal complaints, please contact our Data Protection team at the address set out in Section 15 of this policy.

krim4d collects Personal Data in the following categories. The specific data points collected depend on your level of interaction with the platform:

krim4d collects Personal Data through the following channels and mechanisms:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account settings.
• Automatically through platform interaction: When you access the krim4d platform, our servers and analytics tools automatically log technical and device data including your IP address, session duration, pages visited, games played, and browser characteristics.
• Via Cookies and Similar Technologies: The krim4d platform uses cookies, web beacons, pixel tags, and local storage to maintain session integrity, remember preferences, measure platform performance, and support fraud detection. Full details are set out in Section 10.
• From third-party payment processors: When you initiate a deposit or withdrawal via a bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) or e-wallet service, the payment processor may share transaction confirmation details, account holder name verification, and transaction reference numbers with krim4d to facilitate settlement and fraud prevention.
• From game providers: Certified game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe may share session-level data (bet amounts, game outcomes, RTP records) with krim4d's back-office system for account management and bonus calculation purposes.
• From identity verification partners: krim4d may use third-party KYC verification service providers to cross-reference identity documents and detect fraudulent submissions. These providers process KYC data solely on krim4d's behalf under contractual data-processing obligations.

krim4d processes Personal Data for the following specific and documented purposes:

• Account creation and management: To register your account, authenticate your identity at login, and maintain accurate account records throughout your membership.
• KYC and age verification: To confirm that you are at least 21 years of age and to verify your identity as required by our platform's responsible gaming obligations and anti-money laundering compliance programme.
• Payment processing: To facilitate deposits and withdrawals in Indonesian Rupiah (IDR / Rp) via your nominated bank account or e-wallet, to detect and prevent fraudulent transactions, and to maintain accurate financial records.
• Service delivery: To provide access to all krim4d gaming and betting products, to calculate and award bonuses and loyalty rewards, and to deliver personalized promotions based on your activity profile.
• Responsible gaming: To implement deposit limits, loss limits, session timers, reality-check notifications, cooling-off periods, and self-exclusion measures at your request or where krim4d identifies signs of problematic gambling behavior.
• Customer support: To respond to your enquiries, resolve complaints, and maintain records of communications for quality assurance and dispute resolution purposes.
• Security and fraud prevention: To detect unauthorized account access, bonus abuse, multi-accounting, money laundering activity, and other conduct prohibited under krim4d's Terms & Conditions.
• Platform improvement and analytics: To analyze aggregated, anonymized usage data for the purpose of improving platform performance, game selection, user experience, and technical infrastructure.
• Legal and regulatory compliance: To satisfy any legal obligation, court order, regulatory request, or anti-money laundering reporting requirement applicable to krim4d as an international online gaming operator.

krim4d processes Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform our obligations under the agreement formed when you register a krim4d account and accept the Terms & Conditions. This includes account management, payment processing, game access, and customer support .
• Legal obligation: Processing is necessary to comply with applicable legal requirements, including anti-money laundering (AML) obligations, age verification mandates, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing is carried out for krim4d's legitimate business interests, including fraud detection, platform security, abuse prevention, and aggregated analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where krim4d relies on your consent as the legal basis for processing (for example, for optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent withdrawal requests may be submitted to [email protected].

krim4d does not sell, rent, or trade your Personal Data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to binding data-protection obligations:

• Payment processors and banking partners: Indonesian bank transfer networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data necessary to process your deposits and withdrawals. These partners operate under their own published privacy policies and regulatory frameworks.
• KYC and identity verification providers: Third-party verification service providers process KYC documentation solely on krim4d's behalf, under contractual terms that prohibit any secondary use or independent storage of your identity documents beyond what is required for verification purposes.
• Game studio providers: Certified game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, Spribe) receive session-level data sufficient to operate their games and return results to krim4d's platform. These providers do not receive your full identity profile.
• Fraud prevention and security services: Specialist third-party fraud detection platforms may receive technical and behavioral data (IP address, device fingerprint, session patterns) for the purpose of identifying suspicious activity, bot usage, and multi-account behavior.
• Legal and regulatory authorities: krim4d may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal obligation, court order, or lawful regulatory request. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisors: Lawyers, auditors, and compliance consultants acting under professional confidentiality obligations may access limited Personal Data as necessary to provide professional services to krim4d.
• Business successors: In the event of a merger, acquisition, or transfer of all or part of krim4d's business, Personal Data held at the time of the transaction may be transferred to the successor entity, subject to equivalent data protection obligations. Members will be notified of any such transfer in advance.

krim4d retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymized so that it can no longer be associated with any identifiable individual. Anonymized, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

krim4d implements a multi-layered technical and organizational security programme to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the krim4d platform is encrypted using industry-standard TLS 1.2 or higher. Look for the padlock icon and "https" in your browser address bar when accessing krim4d.cam.
• At-rest encryption: Personal Data stored in krim4d's databases — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Password security: Account passwords are stored exclusively as irreversible one-way cryptographic hashes (bcrypt). krim4d staff cannot view or recover your password in plain text under any circumstances.
• Two-Factor Authentication (2FA): krim4d offers optional two-factor authentication for all member accounts. We strongly encourage all members to enable 2FA via their account security settings to significantly reduce the risk of unauthorized account access.
• Access controls: Access to Personal Data within krim4d's systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their specific role. All internal data access is logged and subject to periodic audit.
• Vulnerability management: krim4d's platform undergoes regular security assessments, penetration testing, and code reviews by qualified security professionals. Critical vulnerabilities are remediated according to a defined severity-based patching schedule.
• Data breach response: krim4d maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected members within a commercially reasonable time and take all necessary steps to contain and remediate the breach.

The krim4d platform uses cookies and similar tracking technologies to deliver a functional, personalized, and secure experience. The following categories of cookies are in use:

You may manage non-essential cookies through your browser's privacy settings. Please note that disabling strictly necessary cookies will prevent you from accessing authenticated areas of the krim4d platform. Disabling functional cookies may result in loss of saved preferences and reduced platform usability.

krim4d does not use cookies for third-party behavioral advertising or retargeting campaigns. No cookie data is shared with advertising networks.

As a krim4d member, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request — [Your Account Username]":

• Right of Access: You may request a copy of the Personal Data krim4d holds about you, together with information on how it is being processed. We will respond to access requests within thirty (30) days of receipt.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. For name or date-of-birth corrections, updated KYC documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data in circumstances where it is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires us to retain it. Note that AML retention obligations (see Section 8) may prevent immediate erasure of certain data categories.
• Right to Restriction of Processing: You may request that krim4d restrict the processing of your Personal Data — for example, while the accuracy of the data is being contested or while a complaint is under review.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your Personal Data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. krim4d will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing conducted prior to withdrawal.

krim4d will acknowledge all data rights requests within forty-eight (48) hours and provide a substantive response within thirty (30) calendar days. In complex cases, this period may be extended by up to a further thirty (30) days, with prior notification to you.

The krim4d platform is strictly for adults aged 21 years and above. krim4d does not knowingly collect Personal Data from individuals under the age of 21. Age verification is enforced as a mandatory step during the KYC process, and accounts found to belong to individuals under 21 are permanently suspended.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account on krim4d, please contact us immediately at [email protected]. Upon confirmation, we will close the account, delete all associated Personal Data to the extent not required for compliance purposes, and ensure no financial loss is attributed to the minor.

krim4d also recommends that parents and guardians in Indonesia use parental control software to restrict access to online gambling platforms on shared devices. If you are concerned about a young person's exposure to gambling content, please visit our Responsible Gaming page for guidance and support resources.

krim4d's primary operations are directed at Indonesian players. However, as an internationally operated platform, some of the third-party service providers and data processors used by krim4d (including cloud infrastructure providers, KYC verification services, and game studio back-end systems) may process Personal Data outside of Indonesia.

Where Personal Data is transferred to countries that may not provide a level of data protection equivalent to international standards, krim4d takes the following safeguards to ensure your data remains protected:

• Binding contractual data-processing agreements with all third-party processors, incorporating internationally recognized standard data protection clauses.
• Technical security measures (encryption in transit and at rest) applied consistently regardless of the geographic location of data processing.
• Strict contractual prohibitions on sub-processing, onward transfer, and secondary use of Personal Data by our service providers.
• Regular due diligence reviews of data processor security practices and compliance posture.

By registering an account on krim4d and accepting our Terms & Conditions, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia, subject to the safeguards described in this section.

krim4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform functionality. The date of the most recent revision is displayed prominently at the top of this page.

When material changes are made to this policy, krim4d will notify registered members via email and/or an in-platform notification displayed upon next login, providing reasonable advance notice of the changes before they take effect.

Your continued use of the krim4d platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the revised policy, you may request account closure by contacting our support team prior to the effective date of the change.

We recommend bookmarking this page and reviewing it periodically — particularly following any notification of changes — to remain informed of how krim4d handles your Personal Data.

For all privacy-related enquiries, data rights requests, or formal complaints regarding krim4d's handling of your Personal Data, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request — [Your Account Username]"
• Subject line for privacy complaints: "Privacy Complaint — [Your Account Username]"
• Response time: Acknowledgment within 48 hours; substantive response within 30 calendar days.
• Support availability: 24/7 via live chat and email. Indonesian-speaking agents are available during WIB business hours (08:00–22:00 WIB).