Privacy Policy

ahh4d, operating at https://ahh4d.cam, is the data controller responsible for the personal data you provide to us. The term "data controller" means the entity that determines the purposes and means of processing personal data. In this role, ahh4d decides what information to collect, how to use it, and how long to keep it.

ahh4d is operated by an internationally licensed entity. For the purposes of this Privacy Policy, "we," "us," and "our" refer to the ahh4d platform and its operating entity. "You" and "Player" refer to any individual who accesses or uses the ahh4d platform, whether or not they have registered an account.

This Privacy Policy applies exclusively to personal data collected through the ahh4d platform. It does not apply to third-party websites, services, or applications that may be linked from our platform, even if those links are provided for convenience. We encourage you to review the privacy policies of any third-party services before providing them with your information.

ahh4d collects several categories of personal data in order to provide betting and gaming services, verify your identity, process payments, comply with regulatory obligations, and improve the user experience. The data we collect falls into the following categories:

2.1 Registration Data

When you register an account on ahh4d, you provide the following information:

• Full legal name: As it appears on your government-issued identification document (typically your Indonesian KTP / Kartu Tanda Penduduk).
• Date of birth: Used to verify that you are at least 21 years of age, as required by our licensing conditions and responsible gaming commitments.
• Email address: Your primary communication channel for account notifications, security alerts, promotional offers (if you opt in), and support correspondence.
• Mobile phone number: Optionally provided for two-factor authentication (2FA) and account recovery purposes.
• Username and password: Your chosen credentials for accessing your ahh4d account. Passwords are stored in hashed form and are never stored or transmitted in plain text.
• Residential address: City and province of residence, used for compliance and fraud-prevention purposes.

2.2 KYC Verification Data

Before processing any withdrawal, ahh4d requires identity verification (KYC / Know Your Customer). During this process, you upload:

• Government-issued photo ID: Typically your Indonesian KTP (both sides), or an equivalent passport or national ID card if you are not an Indonesian resident.
• Proof of address: A utility bill, bank statement (from BCA, BRI, BNI, Mandiri, or another recognised bank), or official government correspondence dated within the last 90 days, showing your full name and residential address.
• Selfie verification: A photograph of you holding your primary ID document next to your face, used to confirm that the ID belongs to you and to prevent identity fraud.
• Payment method verification: Where required, a screenshot or photograph of the registered payment account (e.g., your e-wallet profile showing your name and registered mobile number) to confirm ownership.

2.3 Payment Data

When you deposit or withdraw funds, we collect:

• Payment method details: Your bank account number (for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon transfers), or your registered e-wallet mobile number (for OVO, DANA, GoPay, ShopeePay, LinkAja transactions). Card details are not collected because ahh4d does not accept credit or debit card payments.
• Transaction history: Records of all deposits, withdrawals, and internal account adjustments, including timestamps, amounts in IDR, and transaction reference numbers.
• Source of funds documentation: In cases where the source of funds requires verification (particularly for large or unusual transactions), we may request bank statements or other proof of legitimate funds.

2.4 Betting and Gaming Activity

We automatically log your activity on the platform, including:

• Betting history: All wagers placed, including sport/event, market type, stake amount, odds, and settlement outcome.
• Game play history: For casino games, slots, togel (traditional lottery), and sabung ayam (cockfighting markets), we log game type, session duration, bet amounts, and results.
• Account balance changes: A complete audit trail of deposits, withdrawals, wins, losses, bonus credits, and bonus forfeitures.

2.5 Technical Data

When you access the ahh4d platform, our servers automatically collect certain technical information:

• IP address: Used for fraud detection, geolocation verification (to confirm you are accessing from an eligible jurisdiction), and security monitoring.
• Device information: Device type (mobile/desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution.
• Session data: Login timestamps, session duration, pages visited, and navigation patterns within the platform.
• Cookies and local storage: Small data files stored on your device to maintain your login session, remember preferences, and enable certain platform features. See Section 9 for full details on cookies.

2.6 Marketing Preferences

If you opt in to receive promotional communications, we collect and store your marketing preferences, including:

• Whether you wish to receive promotional emails about bonuses, new game releases, and special events.
• Preferred communication channels (email, in-platform notifications).
• You may opt out of marketing communications at any time through your account settings or by clicking the unsubscribe link in any promotional email.

ahh4d uses the personal data we collect for the following purposes. Each use is tied to a specific legitimate purpose or legal obligation:

Under international data protection principles, we must have a valid legal basis for processing your personal data. ahh4d processes your data under the following legal grounds:

• Performance of a contract: Processing registration, payment, and betting activity data is necessary to perform the contract between you and ahh4d — that is, to provide the betting and gaming services you have registered for.
• Legal obligation: Processing KYC data, transaction records, and certain technical data is required to comply with the licensing, AML, and responsible gaming obligations imposed on the Operator by our international gambling licence.
• Legitimate interests: Processing technical data for fraud prevention, security monitoring, and platform improvement serves the legitimate interests of both ahh4d and its players in maintaining a secure, fair, and well-functioning platform. These interests are not overridden by your privacy rights.
• Consent: Processing your data for marketing purposes is based on your explicit consent, obtained at registration or through your account settings. You may withdraw consent at any time without affecting other processing activities.

ahh4d does not sell, rent, or trade your personal data to third parties for marketing purposes. We only share your data with third parties where necessary to provide our services, comply with legal obligations, or protect the platform and its users. The specific categories of third parties we share data with are:

5.1 Payment Processors

When you deposit or withdraw funds, we share the minimum necessary payment data (your bank account number or e-wallet mobile number, transaction amount, and transaction reference) with payment gateway providers and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate the transaction. These processors are contractually bound to use your data only for payment processing and to maintain appropriate security standards.

5.2 Game Studios

When you play live casino games or slots, your username and bet data are transmitted to the game studio (Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, Spribe) to enable game play. Game studios receive only the data necessary to deliver the game session and do not receive your KYC documents or payment details.

5.3 Identity Verification Providers

ahh4d uses third-party identity verification services to automate parts of the KYC process, including document authentication and facial recognition matching. These providers process your uploaded ID documents and selfie under strict data processing agreements and do not retain your data beyond the verification session.

5.4 Cloud Hosting & Infrastructure

The ahh4d platform is hosted on secure cloud infrastructure. Our hosting providers have access to the underlying database and file storage but are contractually prohibited from accessing or using player data for any purpose other than maintaining the infrastructure.

5.5 Legal & Regulatory Authorities

We may disclose personal data to law enforcement, regulatory bodies, or courts where required by law, court order, subpoena, or regulatory audit. We may also disclose data where necessary to prevent fraud, enforce our Terms & Conditions, or protect the safety of our users or the public.

5.6 No Sale to Marketers

ahh4d does not, and will never, sell your personal data to advertisers, data brokers, or third-party marketing companies. Any marketing communications you receive will come directly from ahh4d and only if you have opted in.

ahh4d takes data security seriously and implements multiple layers of protection to safeguard your personal information:

• Encryption in transit: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Indonesian banks including BCA and BRI. This prevents interception or eavesdropping during transmission.
• Encryption at rest: Sensitive data fields (passwords, payment details, KYC documents) are encrypted while stored in our database, using industry-standard encryption algorithms.
• Password hashing: Your password is never stored in plain text. We use one-way cryptographic hashing with salt, meaning that even ahh4d staff cannot retrieve your original password.
• Access controls: Access to personal data is restricted to authorised personnel only, on a need-to-know basis. All access is logged and audited.
• Regular security audits: The ahh4d platform undergoes regular security assessments, penetration testing, and vulnerability scanning to identify and remediate potential weaknesses.
• Secure data centres: Our cloud infrastructure is hosted in ISO 27001-certified data centres with physical security, redundant systems, and 24/7 monitoring.
• Incident response: In the unlikely event of a data breach affecting your personal information, we will notify you via email within 72 hours and provide guidance on any steps you should take to protect your account.

While we implement robust security measures, no system is entirely impervious to attack. You play a critical role in protecting your account by choosing a strong password, enabling two-factor authentication, and never sharing your login credentials with anyone.

ahh4d retains your personal data only as long as necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations. Specific retention periods are:

• Active accounts: Data is retained for the entire duration your account remains active and for seven years following account closure. This seven-year retention period is mandated by our international gambling licence and is standard across regulated gambling operators.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of seven years, as required by anti-money-laundering (AML) regulations.
• KYC documents: Identity verification documents (KTP, proof of address, selfie verification) are retained for seven years following the last account activity or account closure.
• Marketing data: If you opt out of marketing communications, we retain your email address on a suppression list to ensure we do not contact you again. This data is retained indefinitely unless you request its deletion.
• Technical logs: Session logs, IP addresses, and device information are typically retained for 12 months for security and fraud-prevention purposes, then deleted.

After the applicable retention period expires, personal data is securely deleted or anonymised such that it can no longer be linked to you as an individual.

You have the following rights regarding your personal data held by ahh4d. To exercise any of these rights, contact our support team using the details in Section 12.

8.1 Right of Access

You have the right to request a copy of all personal data we hold about you. This is commonly known as a Data Subject Access Request (DSAR). We will provide the data in a structured, machine-readable format (typically JSON or CSV) within 30 days of your request.

8.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it. You can update most information directly through your account settings. For data that cannot be self-edited (such as your registered name), contact support.

8.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data under certain circumstances. However, this right is not absolute. We cannot delete data if retention is required by law (e.g., the seven-year AML retention period), or if we have a legitimate interest in retaining it (e.g., to defend against a legal claim). Where we cannot fully delete your data, we will anonymise it such that it no longer identifies you personally.

8.4 Right to Restrict Processing

You have the right to request that we temporarily restrict the processing of your personal data in specific circumstances — for example, if you contest the accuracy of your data and we are verifying it, or if you have objected to processing and we are assessing whether our legitimate interests override your rights.

8.5 Right to Data Portability

Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider.

8.6 Right to Object

You have the right to object to processing of your personal data where that processing is based on legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

8.7 Right to Withdraw Consent

Where processing is based on your consent (specifically, marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

8.8 Exercising Your Rights

To exercise any of the rights described above, send an email to the support address listed in Section 12 with the subject line "Data Rights Request" and specify which right you wish to exercise. We may ask you to verify your identity before processing your request. There is no fee for making a request, and we will respond within 30 days.

ahh4d uses cookies and similar tracking technologies to maintain your login session, remember your preferences, and analyse platform usage. A cookie is a small text file stored on your device by your web browser. Cookies do not contain executable code and cannot access other files on your device.

9.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These cookies maintain your login session, remember items in your bet slip, and store essential security tokens. The platform cannot function without these cookies.
• Functional cookies: Remember your preferences (e.g., language preference, odds format, time zone display) to provide a personalised experience.
• Analytics cookies: Collect aggregated, anonymised data on how users interact with the platform — which pages are visited most, where users drop off, and how long sessions last. This helps us improve the platform. We use first-party analytics only; no data is shared with third-party analytics services like Google Analytics.

9.2 Managing Cookies

You can control or delete cookies through your browser settings. Most browsers allow you to refuse cookies entirely, delete existing cookies, or set preferences on a site-by-site basis. However, disabling essential cookies will prevent you from logging in or placing bets on the ahh4d platform.

9.3 Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Because there is no industry consensus on how to interpret DNT signals, ahh4d does not currently respond to DNT signals. We do not track you across third-party websites.

ahh4d is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. Our Terms & Conditions strictly prohibit anyone under 21 from registering an account or using the platform. Age is verified during KYC.

If we become aware that we have inadvertently collected personal data from an individual under 21, we will immediately close the account, delete all associated personal data (except where retention is required for regulatory or legal purposes), and return any deposited funds to the source payment method.

If you believe that an individual under 21 has registered an account on ahh4d, please contact us immediately using the contact details in Section 12.

ahh4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via email to the address on file and by a prominent notice on the platform homepage, no less than 14 days before the updated policy takes effect.

The "Effective Date" and "Last Reviewed" dates at the top of this document indicate when the current version was published and when it was last reviewed for accuracy. We encourage you to review this Privacy Policy periodically, particularly after we notify you of changes.

Continued use of the ahh4d platform after the updated Privacy Policy takes effect constitutes your acceptance of the changes. If you do not agree with the updated policy, you must close your account and withdraw any remaining balance before the effective date.

For questions about this Privacy Policy, to exercise your data rights, or to raise a privacy concern, please contact the ahh4d support team:

The Operator's registered address for formal legal correspondence and the contact details for our Data Protection Officer are available upon written request submitted via the support email address above.