Privacy Policy

Introduction

navi4d ("we", "us", "our") operates the online betting and gaming platform accessible at https://navi4d.cam (the "Platform"). We are committed to protecting the personal data of every individual who interacts with our Platform, whether as a registered Member, a visitor, or a prospective user.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It applies to all personal data collected through the Platform, our customer support channels, promotional communications, and any other interaction you have with navi4d.

This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the legal framework governing your relationship with navi4d. Where this Privacy Policy references obligations or rights under applicable law, those references are to data protection legislation as applicable to our operating jurisdiction and to the laws of Indonesia insofar as they apply to our Members located there.

If you have any questions about this policy or how we handle your personal data, please contact our Data Protection team using the details provided in Section 16 of this document.

Definitions

Throughout this Privacy Policy, the following terms carry the meanings assigned to them below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including names, identification numbers, location data, online identifiers, and factors specific to physical, economic, or social identity.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means navi4d, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on our behalf under a written data processing agreement.
• "Member" means any individual who has completed registration and holds an active account on the Platform.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and usage analytics.
• "KYC" means Know Your Customer — the identity and age verification process applied to all Members prior to withdrawal processing.
• "Sensitive Data" means a special category of personal data that warrants heightened protection, including data revealing racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information.

Data We Collect

We collect and process the following categories of personal data in connection with your use of the Platform:

How We Collect Your Data

navi4d collects personal data through the following means:

• Direct Submission: Data you provide when completing the registration form, uploading KYC documents, making deposits or withdrawal requests, contacting our support team, or participating in promotions.
• Automated Technologies: Data collected automatically when you access the Platform, including via cookies, web beacons, pixel tags, server logs, and similar tracking technologies. This includes your IP address, browser fingerprint, and session behaviour.
• Third-Party Sources: Data received from payment processors (e.g., BCA, BRI, OVO, DANA), identity verification providers, fraud detection services, and analytics partners, used to supplement and verify information you have provided directly.
• Publicly Available Sources: In limited circumstances, we may reference publicly available data (such as sanction lists or public records) as part of our anti-money laundering (AML) compliance obligations.

We will always inform you at the point of collection which data fields are mandatory and which are optional. Failure to provide mandatory data may prevent you from completing registration, passing KYC verification, or accessing certain Platform features.

Purpose of Processing

We process your personal data for the following specific purposes:

1. Account Management: To create, maintain, and administer your Member account, including authentication, password recovery, and preference management.
2. Identity Verification (KYC): To verify your identity, age (21+), and residential status in compliance with our regulatory obligations and to prevent fraud and underage gambling.
3. Payment Processing: To facilitate deposits and withdrawals via Indonesian banking and e-wallet channels, and to maintain accurate financial records of all transactions.
4. Service Delivery: To provide access to our full suite of betting and gaming products, including sportsbook (BRI Liga 1, EPL, Champions League, Timnas Indonesia), live casino, slots, and togel (Indonesia's traditional numbers lottery).
5. Customer Support: To respond to your inquiries, resolve disputes, and provide assistance via live chat, email, and WhatsApp.
6. Fraud Prevention & Security: To monitor for suspicious activity, prevent unauthorised account access, detect multi-accounting, and protect the integrity of the Platform.
7. Legal Compliance: To fulfil our obligations under applicable AML, counter-terrorism financing (CTF), and data protection regulations, including responding to lawful requests from regulatory authorities.
8. Marketing & Promotions: To send you relevant bonus offers, seasonal promotions (e.g., Idul Fitri and Ramadhan specials), and platform updates — but only where you have provided consent or where we have a legitimate interest to do so.
9. Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the overall performance, design, and functionality of the Platform.
10. Responsible Gaming: To monitor betting patterns and identify Members who may be at risk, and to enforce self-exclusion, deposit limit, and session limit settings.

Legal Basis for Processing

We rely on the following legal bases to process your personal data, depending on the specific purpose:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and CTF obligations.
• Legitimate Interests: Processing carried out for purposes that serve our legitimate business interests and that do not override your fundamental rights and freedoms, including fraud detection, platform security, and service improvement.
• Consent: Processing activities where we have obtained your explicit, informed, and freely given consent — primarily for direct marketing communications and non-essential cookies. You may withdraw your consent at any time by contacting our support team or updating your account preferences.

Data Sharing & Disclosure

navi4d does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances:

• Payment Processors: We share financial data with payment service providers (including banks such as BCA, BRI, BNI, and Mandiri, and e-wallets such as OVO, DANA, GoPay, ShopeePay, and LinkAja) to process your deposits and withdrawals securely.
• Identity Verification Providers: We share identity documents and biometric data with accredited KYC and AML service providers to verify your identity and prevent fraud.
• Analytics & Technology Partners: We share anonymised or pseudonymised usage data with analytics and technology providers to improve Platform performance. These providers are contractually prohibited from using the data for any purpose other than providing services to navi4d.
• Gaming Studio Partners: Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session data necessary to deliver their games to you. These providers operate under strict data protection agreements.
• Regulatory and Legal Authorities: We may disclose your personal data to regulators, law enforcement agencies, courts, or other government bodies where required by law, court order, or to protect the rights and safety of navi4d and its Members.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer in advance.

All third parties with whom we share your data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond the specific service they provide to navi4d.

International Data Transfers

As an internationally operated platform serving Members primarily located in Indonesia, some of your personal data may be transferred to, stored in, or processed in countries outside of Indonesia. This may include jurisdictions where our servers, analytics partners, or third-party service providers are located.

Wherever such transfers occur, navi4d ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards include:

• Contractual clauses requiring the recipient to apply equivalent data protection standards
• Transfer to jurisdictions recognised as providing an adequate level of data protection
• Use of certified, industry-standard encryption during all cross-border data transmissions

If you would like further information about the specific safeguards applied to international data transfers affecting your personal data, please contact our Data Protection team at the address provided in Section 16.

Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is either securely deleted, anonymised, or pseudonymised so that it can no longer be attributed to an identifiable individual. Backup copies are purged within 90 days of the primary deletion.

Cookies & Tracking Technologies

navi4d uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and analyse usage patterns. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load balancing cookies. They cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised information about how visitors use the Platform, such as which pages are visited most frequently and how users navigate between sections. This data is used solely to improve Platform performance.
• Functionality Cookies: Allow the Platform to remember your preferences, such as language settings, preferred currency display (IDR), and game lobby filters, to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, multi-accounting, and unauthorised access attempts.

We do not use third-party advertising cookies or cross-site tracking technologies. You may control cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

Your Data Rights

As a Member of navi4d, you have the following rights with respect to your personal data. These rights are subject to applicable legal limitations, including our regulatory obligations to retain certain data.

To exercise any of these rights, submit a written request to our Data Protection team at support at navi4d.cam. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days. We may request proof of identity before processing your request to ensure that personal data is not disclosed to an unauthorised party.

Where we are unable to fulfil your request due to a legal obligation or overriding legitimate interest, we will explain the reason in writing.

Children's Privacy

The Platform is strictly for adults aged 21 and over. navi4d does not knowingly collect personal data from any person under the age of 21. If you are under 21, you are not permitted to register, use, or access the Platform in any capacity.

If we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a person under 21 has registered on the Platform, please notify us immediately at support at navi4d.cam.

Security Measures

navi4d employs a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our key security measures include:

• TLS/SSL Encryption: All data in transit between your device and our servers is protected using 256-bit TLS encryption. Our SSL certificate is maintained and renewed on a scheduled basis.
• Encryption at Rest: Sensitive data stored on our servers, including identity documents and financial records, is encrypted using AES-256 encryption.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA on their accounts. Staff access to Member data systems requires mandatory 2FA.
• Access Controls: Personal data is accessible only to employees and contractors who have a genuine need to access it for the performance of their duties. Access privileges are reviewed regularly and revoked upon role change or departure.
• Penetration Testing: Our Platform and underlying infrastructure are subject to regular independent security audits and penetration testing to identify and remediate vulnerabilities.
• Fraud Detection Systems: We employ real-time monitoring tools to detect and block suspicious activity, including login anomalies, IP spoofing, and unusual transaction patterns.
• Incident Response Plan: In the event of a data breach, we have a documented incident response procedure. Affected Members and relevant authorities will be notified within the timeframe required by applicable law.

While we implement industry-best-practice security measures, no system is entirely immune to risk. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that your device is protected by up-to-date security software.

Third-Party Links & Services

The Platform may contain references to third-party game studios, payment processors, and service providers whose own privacy practices govern the handling of any data you share directly with them. navi4d does not control the privacy practices of these third parties and is not responsible for their data handling.

We recommend that you review the privacy policies of any third-party service provider — including your bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) — before transmitting personal data through their platforms. Your use of third-party services is governed entirely by those providers' own terms and policies.

Policy Updates

navi4d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or the scope of our services. Any changes will take effect from the date the revised policy is published on the Platform.

Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — we will provide advance notice by email to the address registered on your account and/or through a prominent notice on the Platform's homepage.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. The "Last Updated" date at the top of this document will reflect the most recent revision. Continued use of the Platform following publication of any changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way navi4d handles your personal data, please do not hesitate to reach out to our Data Protection team through any of the following channels:

• Email: support at navi4d.cam — please use the subject line "Privacy Inquiry" for fastest routing. We aim to respond within 5 business days.
• Live Chat: Available 24 hours a day, 7 days a week, directly from the Platform. Our Indonesian-speaking support agents can assist you at all times.
• WhatsApp: +62 811-NAVI-4D, available 08:00–24:00 WIB (Western Indonesia Time, UTC+7).

When submitting a privacy-related inquiry, please include your registered account username, the nature of your request, and any relevant details that will help us locate and process your data efficiently. We may request proof of identity before fulfilling any data access, rectification, or erasure request.