Privacy Policy

1. Introduction

This Privacy Policy describes how atta4 ("we", "us", "our", or the "Company") collects, uses, stores, shares, and protects personal information obtained from users ("you", "your", or "User") of our online gaming platform accessible at https://atta4.cam (the "Platform" or "Website").

By accessing, registering for, or using the atta4 Platform, you acknowledge that you have read, understood, and agree to the data processing practices described in this Privacy Policy. If you do not agree with our privacy practices, you should not use our services.

This policy applies to all users of the atta4 Platform, including visitors who browse without registering, registered account holders, and former customers whose accounts have been closed.

2. Data Controller Information

For the purposes of applicable data protection legislation, atta4 is the data controller responsible for your personal information. As data controller, we determine the purposes for which and the manner in which your personal data is processed.

Contact Details:

Email: [email protected]

If you have questions, concerns, or complaints about how we handle your personal data, or if you wish to exercise your privacy rights, please contact us using the details provided above. We are committed to working with you to obtain a fair resolution of any privacy concerns.

3. Information We Collect

atta4 collects various categories of personal information necessary to provide gaming services, comply with legal obligations, and improve user experience. The information we collect includes:

3.1 Information You Provide Directly

When you register for an account or use our services, you voluntarily provide:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification number (KTP number or passport number)
• Contact Information: Email address, phone number, residential address, postal code
• Account Credentials: Username, password, security questions and answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account details), transaction history
• Verification Documents: Copies of government-issued ID cards (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs with identification documents
• Communication Data: Contents of your communications with customer support, including live chat transcripts, email correspondence, and complaint submissions

3.2 Information Collected Automatically

When you access the atta4 Platform, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers
• Usage Data: Pages visited, features accessed, time spent on pages, navigation paths, referring website URLs, search queries within the site
• Gaming Activity: Games played, bets placed, bet amounts, wins and losses, bonus claims, wagering patterns, session duration
• Location Data: Approximate geographic location derived from IP address to verify compliance with geographic restrictions
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixel tags, and similar technologies (see Section 10 for details)

3.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment method verification from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay)
• Identity Verification Services: Age verification, identity authentication, fraud detection data from third-party KYC providers
• Game Providers: Gaming statistics, RNG verification data, gameplay records from third-party game studios
• Marketing Partners: Referral information if you were referred by an affiliate or promotional partner

4. How We Use Your Data

atta4 processes your personal information for the following purposes:

4.1 Service Provision and Account Management

• Creating and managing your atta4 account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to gaming products including sports betting, casino games, slots, and togel lottery
• Maintaining accurate records of your gaming activity, bets, and account balance
• Processing bonus claims and tracking wagering requirements
• Providing customer support and responding to your inquiries

4.2 Legal and Regulatory Compliance

• Verifying your identity and age to prevent underage gambling (21+ requirement)
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detecting and preventing fraud, money laundering, and other illegal activities
• Maintaining records required by gaming regulators and licensing authorities
• Responding to legal requests from law enforcement or government authorities
• Enforcing our Terms & Conditions and protecting our legal rights

4.3 Security and Fraud Prevention

• Monitoring account activity for suspicious patterns or unauthorized access
• Implementing security measures to protect against cyber attacks and data breaches
• Investigating suspected bonus abuse, collusion, or terms violations
• Verifying payment method ownership to prevent third-party fraud
• Maintaining system integrity and preventing technical exploitation

4.4 Marketing and Communications

• Sending promotional offers, bonus notifications, and personalized marketing materials (with your consent)
• Communicating important account updates, service changes, and policy modifications
• Conducting customer satisfaction surveys and feedback requests
• Informing you about new games, features, and platform improvements

4.5 Platform Improvement and Analytics

• Analyzing user behavior to improve website functionality and user experience
• Testing new features and optimizing platform performance
• Conducting statistical analysis of gaming trends and user preferences
• Identifying and fixing technical issues or bugs
• Generating aggregated, anonymized reports for business intelligence

4.6 Responsible Gaming Support

• Implementing deposit limits, betting limits, and self-exclusion requests
• Monitoring gambling patterns for signs of problem gambling
• Providing access to responsible gaming tools and support resources
• Enforcing cooling-off periods and voluntary exclusion periods

5. Legal Basis for Data Processing

Under applicable data protection laws, we must have a valid legal basis to process your personal information. atta4 relies on the following legal grounds:

5.1 Contractual Necessity

Processing is necessary to perform our contract with you (the Terms & Conditions you agreed to upon registration). This includes account management, transaction processing, game provision, and customer support.

5.2 Legal Obligation

Processing is required to comply with legal obligations, including identity verification, age verification, anti-money laundering compliance, tax reporting, and responding to lawful requests from authorities.

5.3 Legitimate Interests

Processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights. Legitimate interests include fraud prevention, security monitoring, platform improvement, business analytics, and direct marketing to existing customers.

5.4 Consent

Where required by law, we obtain your explicit consent before processing certain data, such as sending promotional communications via email or SMS, placing non-essential cookies, or sharing data with third-party marketing partners. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Data Sharing and Disclosure

atta4 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for legitimate purposes:

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under strict confidentiality obligations:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals
• Identity Verification Providers: KYC and AML compliance services that verify identity documents and screen for fraud
• Game Providers: Third-party game studios that provide casino games, slots, and live dealer tables
• Cloud Hosting Providers: Secure data center operators that host our platform infrastructure
• Customer Support Tools: Live chat platforms and ticketing systems used by our support team
• Marketing and Analytics Services: Email marketing platforms, analytics tools, and advertising networks (only with your consent)

6.2 Legal and Regulatory Authorities

We may disclose your information to legal and regulatory authorities when required by law or to:

• Comply with legal obligations, court orders, or regulatory requests
• Cooperate with law enforcement investigations
• Report suspicious transactions to financial intelligence units (anti-money laundering)
• Respond to lawful requests from government agencies

6.3 Business Transfers

If atta4 undergoes a business transaction such as merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you of any such change in ownership or control of your personal data.

6.4 Fraud Prevention Networks

We may share limited information with industry fraud prevention networks to protect against fraudulent transactions, collusion, and multi-accounting across multiple gaming platforms.

7. Data Security Measures

atta4 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by financial institutions
• Secure Data Storage: Personal data is stored in encrypted databases with restricted access controls
• Firewall Protection: Multi-layer firewall systems protect our infrastructure from external attacks
• Intrusion Detection: Real-time monitoring systems detect and alert us to suspicious activity
• Secure Authentication: Password hashing using industry-standard cryptographic algorithms
• Regular Security Audits: Independent third-party penetration testing and vulnerability assessments

7.2 Organizational Security Measures

• Access Controls: Personal data access limited to authorized employees on a need-to-know basis
• Staff Training: Regular security awareness training for all employees handling personal data
• Confidentiality Agreements: All staff and contractors sign strict confidentiality agreements
• Data Minimization: We collect only the personal data necessary for specified purposes
• Incident Response Plan: Documented procedures for detecting, responding to, and reporting data breaches

7.3 Your Security Responsibilities

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if available
• Log out after each session, especially on shared devices
• Keep your email address and phone number secure (used for account recovery)
• Report suspected unauthorized access immediately
• Avoid using public Wi-Fi networks when accessing your account

8. Data Retention Periods

atta4 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law:

Data Category	Retention Period	Legal Basis
Account Information	Duration of account + 5 years after closure	Regulatory compliance, legal defense
Transaction Records	7 years from transaction date	Tax, AML, and financial regulations
Identity Documents	5 years after account closure	KYC and AML regulatory requirements
Gaming Activity Logs	5 years from activity date	Gaming license requirements, dispute resolution
Marketing Consent	Until consent withdrawn + 1 year	Proof of consent for regulatory compliance
Customer Support Records	3 years from last communication	Quality assurance, dispute resolution
Self-Exclusion Records	Minimum 5 years, often permanent	Responsible gaming obligations

After the retention period expires, we securely delete or anonymize your personal data in accordance with industry best practices. Anonymized data that cannot identify you may be retained indefinitely for statistical and analytical purposes.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of your personal data in a commonly used electronic format.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update most account information directly through your account dashboard.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for the purposes collected or when you withdraw consent. However, we may retain data where required by law or for legal defense purposes.

9.4 Right to Restrict Processing

You may request temporary restriction of data processing in specific situations, such as while disputing data accuracy or contesting the lawfulness of processing.

9.5 Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, machine-readable format and transmit it to another data controller.

9.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

9.8 Exercising Your Rights

To exercise any privacy rights, please contact us at [email protected] with your request. We will respond within 30 days and may require identity verification before processing your request to protect against fraudulent data access.

10. Cookies and Tracking Technologies

atta4 uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They allow the website to recognize your device and remember certain information about your preferences or past actions.

10.2 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality such as account login, session management, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymous usage statistics to help us understand how users interact with the platform and identify areas for improvement.
• Functionality Cookies: Remember your preferences such as language settings, display options, and favorite games.
• Marketing Cookies: Track your browsing across websites to deliver personalized advertisements. These require your consent.

10.3 Managing Cookie Preferences

You can control cookie settings through your browser preferences. However, disabling essential cookies may impair platform functionality. Most browsers allow you to refuse cookies, delete existing cookies, or receive warnings before cookies are placed.

11. International Data Transfers

atta4 primarily serves users in Indonesia. However, some of our service providers and data processing infrastructure may be located outside Indonesia, resulting in international data transfers.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with strict security requirements
• Transfers only to countries with adequate data protection standards
• Encryption of data during transfer and storage

12. Changes to This Privacy Policy

atta4 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you via email and prominent notice on the platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this policy indicates when it was last revised. We encourage you to review this policy regularly to stay informed about how we protect your personal information.

Continued use of the atta4 Platform after policy changes become effective constitutes your acceptance of the modified policy.

13. Contact Information and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:

Email: [email protected]

Our customer support team is available 24/7 via live chat, email, and WhatsApp. Indonesian-speaking representatives can assist you in your preferred language.

If you believe we have not adequately addressed your privacy concern, you have the right to lodge a complaint with your local data protection authority or supervisory body.