slc4d Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that directly identifies, or could reasonably be used to identify, a natural person — including name, email address, mobile number, date of birth, national identity number, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, slc4d.
• "Data Processor" means any third party that processes Personal Data on behalf of slc4d under a binding contractual arrangement.
• "Member" means any individual who holds a registered account on the slc4d Platform.
• "Cookies" means small text files placed on a Member's device by the Platform for the purposes of session management, analytics, and personalisation.
• "KYC" means Know Your Customer — the identity and age verification process required prior to the first withdrawal and at other points determined by slc4d's risk management policies.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including government-issued identity document numbers and financial account details.

The Data Controller responsible for Personal Data collected through the slc4d Platform is slc4d, operating the website accessible at slc4d.lat. slc4d is an internationally licensed online gaming platform serving Members primarily located in Indonesia.

All data protection enquiries, subject access requests, and complaints should be directed to slc4d's designated data protection contact. Contact details are provided in Section 14 of this Policy.

slc4d collects Personal Data through several channels: directly from Members during account registration and use, automatically through the Platform's technical infrastructure, and from trusted third-party service providers where necessary to deliver our services.

The categories of Personal Data we collect are detailed in the table below:

slc4d uses Member Personal Data strictly for the purposes set out below. We do not use Personal Data for purposes incompatible with those for which it was originally collected without first obtaining the Member's explicit consent or establishing a separate legal basis.

• Account Management: To create, maintain, and secure Member accounts; to authenticate login attempts; to process password resets; and to communicate account-status updates.
• Service Delivery: To process deposits and withdrawals in IDR via local Indonesian banks and e-wallets; to settle bets and game rounds; to credit bonus funds; and to provide access to all Platform features including Sportsbook, Slots, Sic Bo, Poker Tournaments, and Live Casino.
• KYC & Fraud Prevention: To verify Member identity and age (21+ requirement); to detect and prevent fraudulent transactions, money laundering, multi-accounting, and bonus abuse; and to comply with the Platform's anti-financial-crime obligations.
• Responsible Gaming: To monitor for indicators of problem gambling behaviour; to apply Member-requested deposit limits, loss limits, and self-exclusion periods; and to contact Members proactively where responsible gaming concerns arise.
• Customer Support: To investigate and resolve Member complaints, disputes, and technical issues; to maintain records of support interactions for quality assurance and regulatory audit purposes.
• Platform Improvement: To analyse aggregate usage patterns; to personalise the Member's experience (such as surfacing relevant promotions or game recommendations); and to improve Platform performance, security, and feature design.
• Marketing Communications: To send promotional offers, bonus notifications, and event updates to Members who have opted in to receive such communications. Members may withdraw consent at any time via their account settings or by contacting support.
• Legal Compliance: To fulfil obligations under applicable international gaming regulations, anti-money-laundering requirements, and any lawful order from a competent authority.

slc4d processes Personal Data only where a lawful basis exists for doing so. The legal bases we rely upon are as follows:

1. Contract Performance: Processing is necessary to perform the contract between slc4d and the Member — specifically, to deliver the gaming and betting services described in the Terms & Conditions.
2. Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC identity verification, anti-money-laundering checks, and audit record-keeping.
3. Legitimate Interests: Processing is necessary for slc4d's legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by the Member's fundamental privacy rights.
4. Consent: For marketing communications and certain non-essential cookies, processing is based on the Member's freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

slc4d does not sell, rent, or trade Member Personal Data to third parties for their own marketing purposes. Data is shared with external parties only in the following circumstances and only to the extent necessary:

• Payment Processors: Indonesian bank transfer facilitators and e-wallet operators (including integrations with BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) receive transaction data necessary to process deposits and withdrawals. These processors are bound by their own data security obligations.
• KYC Verification Providers: Third-party identity verification services receive copies of identity documents and liveness-check data solely for the purpose of completing Member verification. Providers are contractually bound to process this data exclusively for verification purposes and to delete it once verification is complete.
• Game Studio Providers: Software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive minimal session data (such as a session token and bet amounts) necessary to operate game rounds. They do not receive full Member identity data.
• Fraud Detection & Security Services: Specialist third-party fraud analytics platforms receive Technical Data and Usage Data to assist in identifying unusual betting patterns, multi-account behaviour, and potential financial crime indicators.
• Customer Support Platform: Our live chat and ticketing system provider processes Communications Data on our behalf. All support data is hosted in secure, access-controlled environments.
• Legal & Regulatory Authorities: Where required by a lawful order, court order, or regulatory authority request, slc4d may disclose Personal Data to the relevant body. slc4d will, where legally permitted, notify the affected Member of such a disclosure.

All third-party Data Processors engaged by slc4d are required to sign a Data Processing Agreement that obligates them to process Member data only on slc4d's documented instructions, to maintain appropriate security standards, and to delete or return data when the processing relationship ends.

The slc4d Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Store Member preferences such as language, display settings, and last-visited game sections to personalise the experience on return visits.
• Analytics Cookies: Collect aggregate, anonymised data on how Members navigate and use the Platform, enabling slc4d to identify performance bottlenecks and improve user experience. No individual Member is identified in analytics reports.
• Marketing Cookies: Used only where the Member has provided explicit consent. These cookies allow slc4d to measure the effectiveness of promotional campaigns and, where applicable, to serve relevant promotional content within the Platform.

Members may manage their cookie preferences through their browser settings. Disabling certain cookie categories may affect the functionality of specific Platform features. slc4d does not use cross-site tracking cookies to follow Members' browsing activity outside of the slc4d.lat domain.

slc4d retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The standard retention periods applied are:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data may be retained indefinitely for statistical and business analytics purposes.

slc4d implements a layered set of technical and organisational security measures to protect Member Personal Data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Encryption in Transit: All data transmitted between Members' browsers and the slc4d Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Members can verify a valid security certificate by checking their browser's address bar.
• Encryption at Rest: Sensitive data stored in slc4d's databases — including identity document data, financial account details, and KYC records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within slc4d's internal systems is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations, background screening, and role-based access controls.
• Infrastructure Security: slc4d's servers are hosted in secure, access-controlled data centres with physical security controls, redundant power systems, and continuous intrusion detection monitoring.
• Password Security: Member passwords are stored using a salted cryptographic hashing algorithm. slc4d staff cannot view Member passwords in plain text. Members are strongly encouraged to use a unique, complex password and to enable two-factor authentication where offered.
• Penetration Testing: slc4d conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities in its infrastructure and application layer.

As a Member of the slc4d Platform, you hold the following rights in respect of your Personal Data. slc4d is committed to honouring these rights promptly and without unnecessary barriers:

• Right of Access: You may request a copy of the Personal Data slc4d holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 calendar days of a verified request.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected. For basic account details (email address, contact number, residential address), updates can be made directly through your Account Settings panel.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to legal retention obligations — for example, slc4d is required to retain KYC and transaction records for a minimum of five years.
• Right to Restriction of Processing: You may request that slc4d restrict the processing of your Personal Data in certain circumstances, such as while a dispute about accuracy is under review.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request that your Personal Data be transmitted directly to another service provider in a structured, machine-readable format, where technically feasible.
• Right to Object: You may object to processing based on slc4d's legitimate interests at any time. You also have an unconditional right to object to processing for direct marketing purposes, which will be honoured immediately upon receipt of your request.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the rights listed above, please contact slc4d's data protection team using the contact details in Section 14. We may need to verify your identity before processing a request. We will respond to all verified rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

The slc4d Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you are not permitted to register an account or use the Platform in any capacity.

If slc4d becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and void any winnings accrued during the period of underage use. If you have reason to believe that a minor has registered on the Platform using falsified age information, please contact our support team at once so that appropriate protective measures can be taken.

Parents and guardians are encouraged to make use of parental control software and internet filtering tools to prevent minors from accessing online gambling platforms. slc4d cooperates fully with child protection initiatives and age-verification best practices applicable to online gaming platforms.

slc4d's primary infrastructure is hosted in secure data centres outside of Indonesia. As a result, Personal Data collected from Indonesian Members may be transferred to, stored in, and processed in jurisdictions other than Indonesia. These jurisdictions may have data protection laws that differ from those in Indonesia.

Where Personal Data is transferred internationally, slc4d ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within slc4d's own systems. Safeguards include:

• Transfers only to Data Processors located in jurisdictions with recognised adequate levels of data protection, or where equivalent contractual protections are in place via Data Processing Agreements.
• Contractual clauses requiring overseas processors to apply security and confidentiality standards at least equivalent to those described in this Privacy Policy.
• Regular review of third-party processor security certifications and compliance status.

By using the slc4d Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section.

slc4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When material changes are made, we will notify Members by displaying a prominent notice on the Platform upon login and, where we hold a valid email address, by sending a notification to that address.

The updated Policy will be published on this page with a revised Effective Date. We encourage Members to review this page periodically. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a material change, you have the right to close your account and request deletion of your data subject to the retention obligations described in Section 8.

For any questions about this Privacy Policy, to exercise a data subject right, or to raise a data protection complaint, please contact the slc4d data protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Request" or "Data Protection Complaint" to ensure prompt routing to the correct team.
• Response Time: All privacy-related enquiries will receive an acknowledgement within 48 hours (WIB business hours) and a substantive response within 30 calendar days.
• Support Availability: Our support team operates 24 hours a day, 7 days a week, with native Indonesian-speaking agents available during WIB hours (08:00–22:00 WIB, UTC+7).

If you are unsatisfied with slc4d's response to a data protection complaint, you have the right to escalate your complaint to the relevant data protection authority or the dispute resolution body designated by slc4d's licensing authority. Details of the appropriate escalation body will be provided in slc4d's response to your initial complaint.

For questions about your account, payments, or general platform use, please visit the FAQ page or the Responsible Gaming page for dedicated guidance.