Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

• "proj4" / "we" / "us" / "our" — the online gaming platform operated at https://proj4.net and all associated sub-domains.
• "Member" / "you" / "your" — any individual who has registered an account on proj4 or who visits and uses the platform without registration (a "Visitor").
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, including name, date of birth, national identity number, email address, IP address, device identifiers, and financial account details.
• "Sensitive Personal Data" — a subset of Personal Data that warrants heightened protection, including government-issued identity documents, financial data, and health-related information disclosed in the context of responsible gaming.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Third Party" — any entity other than proj4 and the Member, including payment processors, KYC verification providers, game studios, and analytics platforms.
• "KYC" — Know Your Customer; the identity and age verification process required under proj4's anti-money-laundering (AML) and responsible gaming obligations.

This Privacy Policy applies to all Personal Data collected by proj4 in connection with the operation of its gaming platform, including data collected through:

• account registration and the KYC process;
• deposits, withdrawals, and other financial transactions processed in Indonesian Rupiah (IDR);
• participation in any game, including slots, live casino tables, sportsbook markets, and sabung ayam (live cockfighting) events;
• interactions with our customer support team via live chat or email;
• visits to the proj4 website by Visitors who have not registered an account.

This Policy does not apply to third-party websites or services that may be referenced within the proj4 platform. proj4 is not responsible for the privacy practices of any third party.

proj4 collects Personal Data in the following categories. We collect only what is necessary for the stated purpose.

proj4 collects Personal Data through the following channels:

4.1 Directly from You

The majority of Personal Data proj4 holds is provided directly by Members during account registration, KYC document submission, deposit and withdrawal requests, support interactions, and when you voluntarily configure responsible gaming tools.

4.2 Automatically

When you access the proj4 platform, our servers and analytics systems automatically collect Technical Data and Gaming Data. This includes your IP address, device fingerprint, browser configuration, session duration, and in-game activity. This data is collected using cookies, server logs, and similar tracking technologies (see Section 7 for full details).

4.3 From Third Parties

proj4 may receive Personal Data from the following categories of third party:

• KYC verification providers — third-party identity verification services that cross-reference the documents you submit against public and private identity databases to confirm your identity and age.
• Payment processors — our banking and e-wallet partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) may provide transaction confirmation data to proj4 for reconciliation purposes.
• Fraud and AML screening services — proj4 uses third-party services to screen accounts and transactions against sanctions lists, politically exposed persons (PEP) databases, and known fraud registers.
• Analytics providers — aggregated and anonymised behavioural data from analytics platforms to help proj4 improve platform performance and user experience.

proj4 processes your Personal Data only where a valid legal basis exists. The primary purposes and their corresponding bases are:

proj4 does not sell, rent, or trade your Personal Data. We share data with third parties only in the following limited circumstances:

• Payment and banking partners: your financial identifiers are shared with the relevant bank (e.g., BCA, BRI, BNI, Mandiri) or e-wallet provider (e.g., OVO, DANA, GoPay) solely to process your transaction. proj4 does not retain your full bank account number; only a masked version is stored for reconciliation.
• KYC verification providers: identity documents you submit are transmitted to our third-party verification partner for validation against identity databases. These providers are contractually bound to process your data only for the purpose of identity verification and to apply security standards equivalent to proj4's own.
• Game studios: technical session data (e.g., player ID, stake, outcome) is shared with our certified game studio partners — Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, Spribe — solely to operate the game and resolve disputes. Game studios receive no personally identifiable information beyond a pseudonymous player ID.
• Fraud and AML screening services: Personal Data may be disclosed to licensed fraud prevention and AML screening services as required by our compliance obligations. This includes sanctions screening and politically exposed persons (PEP) checks.
• Regulatory and law enforcement authorities: proj4 will disclose Personal Data to competent authorities where required to do so by law, court order, or lawful regulatory request. proj4 will, where legally permissible, notify the affected Member of such disclosure.
• Professional advisors: our legal counsel, auditors, and accountants may access Personal Data on a strictly need-to-know basis, subject to professional confidentiality obligations.

proj4 uses cookies and similar client-side tracking technologies to operate the platform, maintain your session, prevent fraud, and gather anonymised usage analytics. The following types of cookies are in use:

You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the platform, but some personalisation features may not operate correctly. Disabling strictly necessary or fraud-prevention cookies may impair your ability to log in or use certain features.

proj4 retains Personal Data for the period necessary to fulfil the purpose for which it was collected, or as required by applicable law, whichever is longer. Our standard retention schedules are as follows:

• Account and Identity Data: retained for the duration of your account plus a minimum of 5 years after account closure, in compliance with AML and financial record-keeping obligations.
• Financial Transaction Data: retained for a minimum of 5 years from the date of the transaction.
• KYC Documents (KTP copies, proof of address): retained for a minimum of 5 years from the date of submission, as required under AML regulations.
• Gaming History: retained for a minimum of 3 years from the date of the relevant game session.
• Support Communications: retained for a minimum of 2 years from the date of the interaction.
• Marketing Preference Data: retained until you withdraw consent or close your account, plus 6 months to process opt-out requests fully.
• Technical / Log Data: retained for up to 12 months in standard server logs; anonymised aggregate analytics data may be retained for up to 24 months.

Following the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised.

proj4 implements technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, and destruction. These measures include:

• Encryption in transit: all connections between your browser or device and proj4's servers use TLS 1.3 with 256-bit encryption.
• Encryption at rest: Sensitive Personal Data and financial data stored on proj4's servers are encrypted using AES-256.
• Access controls: access to Personal Data by proj4 staff is governed by role-based access control (RBAC). Only staff whose role requires access to a given category of data are granted that access, and all access is logged.
• Multi-factor authentication (MFA): available to Members for their proj4 account login and recommended for all Members as an additional security layer.
• Regular security audits: proj4 commissions independent penetration testing and security audits at least annually. Critical findings are remediated within 30 days.
• Breach notification: in the event of a data breach that is likely to result in a risk to Members' rights and freedoms, proj4 will notify affected Members and the relevant supervisory authority within 72 hours of becoming aware of the breach, to the extent practicable.

As a Member of proj4, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team at [email protected], stating clearly which right you wish to exercise and providing sufficient information for us to verify your identity.

proj4 will respond to all verified data subject requests within 30 calendar days. Where a request is complex or numerous, proj4 may extend this period by a further 60 days, with notice to you within the initial 30-day window. Where proj4 is unable to fulfil a request — for example, because fulfilling it would conflict with a legal obligation — we will explain the reason in writing.

proj4 is strictly an adults-only platform. The Services are not directed at, and are not intended to be used by, any person under the age of 21 years. proj4 does not knowingly collect Personal Data from individuals under this age threshold.

If proj4 becomes aware that it has collected Personal Data from a person under 21 years of age, it will immediately close that account, delete all associated Personal Data, and withhold any associated balance in accordance with our Terms & Conditions pending further legal review.

If you are a parent or guardian and believe that a minor has registered an account on proj4, please contact [email protected] immediately. We take such reports seriously and will act promptly.

proj4 operates from an international jurisdiction under its gaming licence. As a consequence, your Personal Data may be transferred to and processed in countries outside Indonesia. These may include countries where data protection law provides a different level of protection from that afforded within Indonesia.

Where proj4 transfers Personal Data internationally, it applies contractual safeguards — including standard contractual clauses equivalent to those used under international data protection frameworks — to ensure that your data receives a level of protection consistent with the principles set out in this Privacy Policy. All third-party processors handling your data are required to agree to data processing agreements that incorporate appropriate security and confidentiality obligations.

proj4 may update this Privacy Policy from time to time to reflect changes in our data practices, the Services we offer, or applicable law. When material changes are made, proj4 will notify registered Members by email to the address on file and/or via a prominent notice on the platform at least 7 days before the changes take effect.

The "Effective Date" at the top of this Policy indicates when the current version came into force. Your continued use of the Services after the effective date of an amendment constitutes your acknowledgment of the revised Policy. We recommend that you review this page periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way proj4 processes your Personal Data, please contact our Data Support team using the details below. Our Indonesian-speaking support team is available 24 hours a day, 7 days a week (WIB, UTC+7).

For questions specifically about responsible gaming data — including data held in connection with a self-exclusion or deposit limit — please state this clearly in your message. These requests are handled by a dedicated team with a priority response commitment.