Privacy Policy

1.1  noah4d is committed to protecting the privacy and security of all personal information entrusted to us by our Users. We recognize that responsible data handling is fundamental to maintaining trust in an online betting environment where financial transactions and sensitive personal details are exchanged daily.

1.2  This Privacy Policy applies to all Users who access the Platform, regardless of whether they have completed registration or placed a wager. It covers all personal data we collect through the website, mobile-optimised interface, customer service channels, and any other touchpoint between you and noah4d.

1.3  This Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming guidelines, which together form the complete legal framework governing your use of the Platform.

2.1  For the purposes of applicable data protection laws, noah4d is the data controller responsible for the processing of your personal information collected through the Platform.

2.2  If you have any questions about how we handle your personal data, or if you wish to exercise any of your privacy rights, you may contact our Data Protection Officer at:

3.1  Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact customer support, you provide us with personal information including but not limited to:

• Identity Information: Full legal name as it appears on your National Identity Card (KTP), date of birth, nationality, gender.
• Contact Information: Email address, mobile telephone number, residential address, postal code.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers), transaction history, deposit and withdrawal records.
• Identity Verification Documents: Digital copies of your KTP, proof of address documents (utility bills, bank statements), selfie photographs submitted during the KYC verification process.
• Communication Records: Chat transcripts with customer service, email correspondence, support tickets, feedback submissions.

3.2  Information Collected Automatically

When you access the Platform, we automatically collect certain technical and usage data:

• Device Information: Device type (smartphone, tablet, desktop), operating system, browser type and version, screen resolution, device identifiers.
• Connection Data: IP address, Internet Service Provider (ISP), approximate geolocation derived from IP address, time zone setting.
• Usage Data: Pages visited, time spent on each page, clickstream data, referring and exit pages, search queries entered on the Platform, games played, wagers placed, timestamps of all interactions.
• Performance Data: Page load times, server response times, error messages, crash reports.

3.3  Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources, including:

• Payment Processors: Confirmation of deposit and withdrawal transactions from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Age verification, identity authentication, and fraud detection data from third-party KYC service providers.
• Publicly Available Sources: Information reasonably available in the public domain that may be used to verify the accuracy of information you have provided to us.

4.1  noah4d processes your personal data for the following purposes, each of which is grounded in a legitimate legal basis under applicable data protection law:

4.2  We will not process your personal data for purposes incompatible with those disclosed in this Policy without first obtaining your explicit consent, unless required to do so by law.

5.1  noah4d does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may, however, share your data with the following categories of recipients where necessary to operate the Platform and fulfill our legal obligations:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These providers receive only the minimum information necessary to complete transactions.
• Identity Verification Services: Third-party KYC and age verification providers who help us confirm your identity, age, and address. These providers are contractually bound to process your data solely for verification purposes and to maintain strict confidentiality.
• Game Providers: Software studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others receive pseudonymized gameplay data to deliver game content and settle wagers, but do not receive your full personal profile.
• Customer Support Tools: Live chat and ticketing systems used by our support team. Access is restricted to authorized support personnel only.
• Security & Fraud Prevention Services: Third-party fraud detection, bot prevention, and cybersecurity tools that analyze behavioral patterns to protect the Platform from malicious activity.
• Legal & Regulatory Authorities: Where required by law, we may disclose your information to licensing authorities, tax authorities, law enforcement agencies, or courts in response to valid legal requests.
• Professional Advisors: Lawyers, auditors, accountants, and consultants who provide professional services to noah4d under strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

5.2  All third-party service providers with whom we share data are required to implement appropriate technical and organizational measures to protect your information and to process it only in accordance with our instructions.

6.1  noah4d retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

6.2  Specific retention periods:

• Active Account Data: Retained for the duration of your account's active status and for six (6) months following account closure to allow for dispute resolution and regulatory audit.
• Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction to comply with anti-money-laundering regulations and tax reporting requirements.
• Identity Verification Documents: Retained for seven (7) years following account closure to comply with KYC record-keeping obligations.
• Marketing Consent Records: Retained for three (3) years from the date consent was withdrawn to demonstrate compliance with opt-out requests.
• Customer Service Communications: Retained for three (3) years from the date of the last interaction to support quality assurance and dispute resolution.
• Security & Fraud Logs: Retained for five (5) years to support ongoing fraud prevention efforts and security investigations.

6.3  At the end of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be linked back to an identifiable individual.

7.1  noah4d employs industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption: All personal and financial data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3 protocol. Payment card data, where applicable, is tokenized and never stored in plain text.
• Access Controls: Access to personal data is restricted on a need-to-know basis. All employees and contractors with data access undergo background checks and are bound by confidentiality agreements.
• Two-Factor Authentication: Account access is protected by optional two-factor authentication (2FA) for Users. Administrative access to internal systems requires mandatory 2FA.
• Firewall & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for suspicious activity 24/7.
• Regular Security Audits: noah4d undergoes annual third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response Plan: We maintain a documented incident response plan to ensure rapid containment, investigation, and notification in the event of a data breach.

7.2  While we implement robust security measures, no online platform can guarantee absolute security. You play an important role in protecting your account by maintaining the confidentiality of your password, enabling two-factor authentication, and promptly notifying us of any suspected unauthorized access.

8.1  noah4d uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content.

8.2  Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable core features such as account login, session management, and secure transaction processing. They cannot be disabled.
• Performance Cookies: Collect anonymous information about how you use the Platform, such as which pages you visit most often and whether you encounter error messages. This data helps us optimize performance.
• Functional Cookies: Remember your preferences (e.g., language selection, display settings) to provide a more personalized experience on repeat visits.
• Targeting/Advertising Cookies: Track your browsing activity to deliver relevant promotional content. These cookies are only set with your explicit consent and can be disabled at any time through your browser settings.

8.3  You can control cookie settings through your browser preferences. Note that disabling certain cookies may limit your ability to use some features of the Platform. For detailed instructions on managing cookies, consult your browser's help documentation.

9.1  Under applicable data protection laws, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to legal retention obligations (e.g., transaction records must be retained for seven years for regulatory compliance).
• Right to Restriction of Processing: You may request that we limit how we use your data in certain circumstances, such as while a dispute over accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests by providing specific reasons related to your particular situation.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

9.2  To exercise any of these rights, please contact our Data Protection Officer at [email protected] with a clear description of your request. We may ask you to verify your identity before fulfilling the request to ensure data is released only to the rightful account holder.

10.1  The noah4d Platform is intended exclusively for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under the age of 21.

10.2  If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that information from our systems and terminate the associated account. All wagers placed by underage users will be void and stakes refunded to the funding source.

10.3  If you have reason to believe that a minor has registered an account or provided personal information to noah4d, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11.1  noah4d operates internationally and may transfer your personal data to servers located outside Indonesia to deliver our services. Where data is transferred to countries that do not provide an equivalent level of data protection as Indonesia, we implement appropriate safeguards to ensure your data remains protected.

11.2  These safeguards include:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities.
• Data Processing Agreements (DPAs) with all third-party service providers who process data on our behalf.
• Binding Corporate Rules (BCRs) where data is transferred within the noah4d corporate group.
• Certification under recognized data protection frameworks where applicable.

11.3  For more information about the specific safeguards applied to international transfers of your data, please contact our Data Protection Officer at [email protected].

12.1  noah4d reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any changes will be effective immediately upon posting of the revised Policy on the Platform, with the "Last Updated" date revised accordingly.

12.2  Material changes that significantly affect how we process your personal data will be communicated to all active Users via email to the registered email address on file at least 14 days prior to the effective date, where operationally feasible.

12.3  Your continued use of the Platform following the posting of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated terms, you must cease using the Platform and may request deletion of your personal data, subject to applicable legal retention obligations.

12.4  We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

For questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact:

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.