cika4 Privacy Policy — Your Data, Protected

In this Privacy Policy, the following terms carry the meanings defined below:

This Privacy Policy applies to all Personal Data collected by cika4 in connection with:

• The registration, verification, and ongoing management of member accounts on cika4.bet.
• The use of any gaming, betting, or payment service offered through the Platform.
• Communications between cika4 and members or prospective members, including support interactions, promotional communications, and responsible gaming notifications.
• Visits to the cika4.bet website by individuals who have not registered an account.

This Policy does not apply to third-party websites or services that may be referenced on the Platform. cika4 is not responsible for the privacy practices of any third party whose services you access independently of the cika4 Platform.

This Policy is written in English and is the governing version. cika4 primarily serves members located in Indonesia, including in cities such as Jakarta, Surabaya, Bandung, Bali, Semarang, Medan, Makassar, Yogyakarta, and Palembang, and the data practices described herein reflect both international standards and the operational realities of serving the Indonesian market.

cika4 collects the following categories of Personal Data from members and visitors:

3.1 Registration & Identity Data

• Full legal name (as it appears on your Indonesian National Identity Card, KTP, or passport).
• Date of birth (used to verify the 21+ age requirement).
• Residential address in Indonesia.
• Email address and mobile phone number.
• Username and encrypted password.

3.2 KYC Verification Data

• Copies or photographs of government-issued identity documents (KTP, passport).
• Proof of address documents (utility bills, bank statements issued in Indonesia).
• Proof of ownership of payment methods (bank account screenshots, e-wallet account details for OVO, DANA, GoPay, ShopeePay, or LinkAja).

3.3 Financial Transaction Data

• Deposit and withdrawal records, including amounts in IDR (Rp), timestamps, payment method used, and processing status.
• Bank account details or e-wallet identifiers associated with your transactions.
• Bonus allocation and wagering activity records.

3.4 Gaming & Betting Activity Data

• Records of all wagers placed, including game type, stake, odds, outcome, and timestamp.
• Session logs, game history, and balance movement records.
• Responsible gaming tool settings (deposit limits, session alerts, self-exclusion status).

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type, and version.
• Session duration, pages visited, and clickstream data on the Platform.
• Cookie identifiers and device fingerprint data used for fraud prevention.

3.6 Communications Data

• Records of support interactions via live chat and email, including the content of those communications.
• Marketing communication preferences and records of promotional messages sent and received.

cika4 collects Personal Data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, use the cashier to deposit or withdraw funds, contact support, or update your account preferences.
• Automatically through Platform use: Session data, IP address, device information, and cookie data are collected automatically when you access the Platform, regardless of whether you are logged in to an account.
• From payment service providers: When you make a deposit via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, or LinkAja, those providers may share transaction confirmation data with cika4 to facilitate deposit crediting and withdrawal processing.
• From fraud and identity verification services: cika4 may receive data from third-party identity verification or fraud detection services engaged as part of the KYC process or ongoing account monitoring.

cika4 uses the Personal Data we collect for the following purposes:

1. Account Management: Creating, verifying, and maintaining your cika4 account, including authentication, password reset, and communication of account-related notifications.
2. Identity & Age Verification: Confirming that you are at least 21 years of age and a resident of Indonesia, and verifying that your payment methods are registered in your name, as required by our Terms & Conditions and responsible gaming obligations.
3. Payment Processing: Processing deposits and withdrawals in IDR via your selected local payment method, reconciling transactions, and resolving payment disputes.
4. Gaming Services Delivery: Enabling access to sportsbook markets, live casino games, slots, video poker, Andar Bahar, and other Platform features; maintaining your bet history and game records; calculating and settling wager outcomes.
5. Responsible Gaming: Monitoring account activity for indicators of problem gambling behaviour; applying and enforcing deposit limits, loss limits, session alerts, cooling-off periods, and self-exclusion requests; conducting welfare checks where required.
6. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorised account access; maintaining the security and integrity of the Platform.
7. Customer Support: Responding to your support enquiries via live chat and email; maintaining records of support interactions for quality and compliance purposes.
8. Marketing & Promotions: Sending promotional offers, reload bonuses, seasonal campaign communications, and platform updates to members who have opted in to marketing communications. Marketing communications are always sent in English and may reference Indonesian cultural events such as Idul Fitri, Ramadhan, or Indonesian Independence Day where contextually relevant.
9. Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game offerings.
10. Legal & Compliance: Complying with applicable legal obligations, responding to lawful requests from regulatory or law-enforcement authorities, and maintaining records as required by anti-money laundering standards.

cika4 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the cika4 Terms & Conditions — including account registration, payment processing, game delivery, and KYC verification.
• Legitimate Interests: Processing conducted to pursue cika4's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering record-keeping and lawful requests from competent authorities.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw this consent at any time by updating your marketing preferences in Account Settings or by contacting support.

cika4 does not sell, rent, or trade your Personal Data. We share data only in the following limited circumstances:

1. Third-Party Service Providers: cika4 engages trusted service providers to support Platform operations, including payment processors (for transactions via BCA, BRI, OVO, DANA, GoPay and other local methods), game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft), IT infrastructure providers, fraud detection services, and KYC verification platforms. Each provider is bound by a data processing agreement that limits their use of your data to the specific service they provide to cika4.
2. Legal & Regulatory Requirements: cika4 may disclose your Personal Data to Indonesian or international law enforcement, regulatory, or government authorities where required by a valid legal process, court order, or applicable law. cika4 will notify the affected member of such disclosure where permitted to do so by law.
3. Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of cika4's assets, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
4. With Your Explicit Consent: cika4 will share your data with any additional third party only where you have given explicit, informed consent for that specific disclosure.

cika4 uses cookies and similar tracking technologies on the Platform for the purposes described below. Cookies are small data files stored on your browser or device when you visit the Platform.

You may manage cookie preferences via your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and may prevent you from accessing your account. Analytics and functional cookies can be disabled without affecting core Platform access.

cika4 implements and maintains a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption in Transit: All data transmitted between your browser and cika4's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Encryption at Rest: Sensitive data fields — including passwords, KYC document storage, and payment method identifiers — are encrypted at rest in cika4's database infrastructure.
• Access Controls: Access to systems holding Personal Data is restricted to authorised cika4 personnel and service providers on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication for administrative access.
• Regular Security Reviews: cika4's infrastructure and application security is reviewed on a regular basis, including penetration testing and vulnerability assessments conducted by qualified security professionals.
• Incident Response: cika4 maintains documented data breach response procedures. In the event of a confirmed breach posing material risk to members' data, affected members will be notified without undue delay.

While cika4 takes all reasonable measures to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the security of your account credentials and for notifying cika4 immediately if you suspect any unauthorised access to your account.

cika4 retains Personal Data for the following periods, after which data is securely deleted or anonymised:

• Account & Identity Data: Retained for the duration of your active account membership, and for a minimum of 5 years following account closure to comply with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming Activity Records: Retained for a minimum of 3 years from the date of the relevant gaming session.
• Support Communications: Retained for 2 years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until the matter is resolved.
• Marketing Preferences & Consent Records: Retained for the duration of your account membership and for 2 years following account closure as evidence of consent status.
• Technical & Cookie Data: Session cookies expire at the end of your browser session. Persistent analytics cookies expire within 12 months of placement.

As a cika4 member, you have the following rights in relation to the Personal Data we hold about you:

1. Right of Access: You may request a copy of the Personal Data cika4 holds about you. We will respond to verified access requests within 14 days.
2. Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account information directly via Account Settings; for data not available for self-service correction, contact cika4 support.
3. Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where you object to processing based on legitimate interests. Deletion requests are subject to applicable legal retention obligations.
4. Right to Restriction of Processing: You may request that cika4 restrict the processing of your Personal Data in specific circumstances, such as where you contest its accuracy or where you have objected to processing pending a determination of whether cika4's legitimate interests override yours.
5. Right to Object: You may object at any time to the processing of your Personal Data for marketing purposes. You may also object to processing based on cika4's legitimate interests, and we will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights.
6. Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.

To exercise any of the above rights, contact the cika4 support team at the email address provided in Section 16 of this Policy. We will verify your identity before processing any data rights request and will respond within 14 days of receipt of a verified request.

cika4 sends promotional communications — including bonus offers, seasonal campaigns, and platform updates — to members who have opted in to marketing communications during registration or at any subsequent point via Account Settings.

Marketing communications from cika4 are delivered in English and may include promotions aligned with the Indonesian cultural calendar, such as Ramadhan reload offers, Idul Fitri cashback campaigns, and 17 August Independence Day tournaments, as well as sportsbook promotions tied to BRI Liga 1, EPL, and Champions League fixtures.

You may opt out of marketing communications at any time by:

• Updating your marketing preferences in Account Settings on the cika4 Platform.
• Contacting cika4 support and requesting removal from marketing communications.

Opting out of marketing communications does not affect the delivery of service-critical account communications such as deposit confirmations, withdrawal notifications, KYC verification requests, and security alerts. These transactional communications are not subject to marketing opt-out preferences.

The cika4 Platform is strictly intended for adults aged 21 and above. cika4 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory part of the registration process and is reinforced through KYC document verification prior to withdrawal processing.

If cika4 becomes aware that Personal Data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the data where legally permissible, and return any real-money balance (net of bonuses) to the payment method of origin following identity verification.

As an internationally operating platform, cika4 may process or store Personal Data on servers and infrastructure located outside Indonesia. Specifically, game studios and certain IT service providers engaged by cika4 may process data in jurisdictions other than Indonesia as part of their service delivery.

Where Personal Data is transferred outside Indonesia, cika4 takes steps to ensure that an adequate level of protection is maintained, including:

• Engaging only service providers who commit to data protection standards equivalent to those described in this Policy through binding data processing agreements.
• Applying contractual safeguards, including standard data protection clauses, where transfers are made to service providers in jurisdictions without equivalent data protection frameworks.

By registering an account and using the cika4 Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia in accordance with the safeguards described above.

cika4 reserves the right to amend this Privacy Policy at any time. Material changes — those that substantively affect how we collect, use, or share your Personal Data — will be communicated to members via a notification on the Platform upon next login and/or by email to the registered address, with a minimum of 7 days' notice before the revised Policy takes effect, except where an immediate change is required by law or a security imperative.

The "Last Updated" date at the top of this page reflects the effective date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how cika4 has handled your Personal Data, please contact us through the following channel:

• Privacy Enquiries Email: [email protected] — please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line of your message for fastest routing. (Plain text only — not a clickable link; copy and paste into your email client.)
• Live Chat: Available 24/7 on the cika4 Platform for real-time support from our Indonesian-speaking team.
• Response Commitment: cika4 will acknowledge receipt of privacy-related enquiries within 2 business days and will provide a substantive response within 14 days of receipt, or sooner where reasonably practicable.

If you are not satisfied with cika4's response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection authority or seek independent dispute resolution, depending on the laws applicable in your jurisdiction.

This Privacy Policy was last reviewed and updated in January 2026. © 2026 cika4. All Rights Reserved.