mik4d Privacy Policy

1.1 This Privacy Policy ("Policy") describes how mik4d, accessible at https://mik4d.cam ("mik4d", "we", "us", "our"), collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who visit the Platform, register an account, or interact with mik4d's services in any capacity ("you", "your").

1.2 mik4d operates as an online betting and casino platform primarily serving English-preference players in Indonesia. In doing so, we process personal data in accordance with applicable international data protection principles and, to the extent relevant, Indonesian data protection requirements including those arising under Law No. 27 of 2022 on Personal Data Protection (UU PDP) and related regulations.

1.3 By registering an account with mik4d, by depositing funds, or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read, understood, and accepted the data practices described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact our support team to request account closure.

1.4 This Policy applies to all mik4d services — the website at mik4d.cam, any associated mobile-optimized interfaces, and all customer support channels including live chat and email. It does not extend to third-party websites or services that may be referenced on the Platform; those are governed by their own privacy policies.

2.1 For the purposes of this Policy, mik4d — the operator of the Platform — acts as the data controller in respect of personal data processed through the Platform and its support channels. As data controller, mik4d determines the purposes and means of processing your personal data.

2.2 Where mik4d engages third-party service providers (such as payment processors, identity verification providers, or game studios) to process personal data on mik4d's behalf, those providers act as data processors and are bound by contractual obligations that require them to process data only on mik4d's documented instructions and to maintain appropriate security standards.

2.3 Contact details for the mik4d data controller are set out in Clause 15 of this Policy. If you have any questions about how your personal data is handled, or if you wish to exercise any of your data rights, please use those contact details in the first instance.

mik4d collects personal data across several categories, depending on how you interact with the Platform. The table below summarises the principal categories of data we process:

3.1 Sensitive Data. mik4d does not intentionally collect special categories of sensitive personal data — such as health information, racial or ethnic origin, religious beliefs, or political opinions — unless you voluntarily provide such information in the context of a responsible gaming support request. Where you do provide sensitive data in that context, it is processed solely for the purpose of delivering appropriate support and is subject to enhanced access controls.

mik4d collects personal data through the following channels:

• Direct provision by you: Information you submit at account registration, during KYC verification, when completing deposit or withdrawal requests, or when contacting our support team.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, session logs, and server-side analytics (see Clause 12).
• Third-party identity verification providers: Where mik4d uses an external KYC service to verify your identity documents, that provider may return a verification decision and associated data points to mik4d.
• Payment service providers: Financial institutions and e-wallet operators (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) may share transaction confirmation data with mik4d as part of the payment processing flow.
• Fraud and risk intelligence providers: mik4d may receive data from third-party fraud detection services, including device fingerprinting scores and IP reputation signals, to support account security.

mik4d processes personal data only where a valid lawful basis exists. The primary bases we rely on are set out below:

• Contract performance: Processing that is necessary to fulfil our obligations under the Terms & Conditions you accepted when registering — including account creation, processing deposits and withdrawals, and settling bets.
• Legal obligation: Processing required by applicable law, including KYC identity verification, anti-money laundering (AML) monitoring, age verification, and the maintenance of transaction records for audit purposes.
• Legitimate interests: Processing carried out for mik4d's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes where we have obtained your explicit agreement in advance, principally direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

mik4d uses your personal data for the following specific purposes:

6.1 Account Management & Service Delivery

To register and maintain your account, authenticate your identity at login, process deposits and withdrawals in Indonesian Rupiah (IDR), settle sports bets and casino game outcomes, administer bonuses and promotional credits, and deliver customer support through live chat, email, and WhatsApp.

6.2 Identity Verification & Compliance

To fulfil our KYC obligations — verifying that all players are at least 21 years of age, are not subject to active self-exclusion orders, and are not on applicable sanctions or politically exposed persons (PEP) lists. mik4d is required to retain KYC documentation for a minimum period prescribed by applicable regulations.

6.3 Fraud Prevention & Platform Security

To detect and prevent fraudulent activity, multi-account operation, bonus abuse, collusion, money laundering, and other conduct prohibited under our Terms & Conditions. This includes automated transaction monitoring, device fingerprinting, and IP geolocation checks.

6.4 Responsible Gaming

To monitor account activity for patterns consistent with problem gambling, to enforce deposit limits, loss limits, and session time caps set by you, and to manage self-exclusion requests. Responsible gaming monitoring is conducted in your interest and is a legal and ethical obligation for mik4d.

6.5 Marketing Communications

Where you have opted in, to send you promotional offers, bonus notifications, and platform updates by email, SMS, or in-app push notification. You may opt out of marketing communications at any time by contacting support or updating your notification preferences within your Account settings.

6.6 Platform Improvement & Analytics

To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, game selection, user interface design, and support quality. Where analytics are based on identifiable data, they are subject to the same protections as all other personal data described in this Policy.

7.1 mik4d does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data with third parties only in the circumstances described below:

• Payment processors and banks: BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the financial data necessary to process your deposit and withdrawal instructions. These entities operate under their own privacy policies and are independently regulated.
• Identity verification providers: Third-party KYC service providers receive copies of identity documents submitted by Players for the purpose of automated or assisted verification. These providers are contractually bound to process data only for that stated purpose.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe may receive anonymised session identifiers to facilitate game delivery and certify RNG fairness. These providers do not receive personally identifiable information beyond what is technically required for game operation.
• Fraud and AML services: Risk intelligence providers receive technical and transactional data for the purpose of fraud scoring and AML screening. Personal data shared with these providers is subject to strict contractual protections.
• Legal and regulatory authorities: mik4d will disclose personal data to law enforcement agencies, regulatory bodies, or courts where legally required to do so — for example, pursuant to a valid court order, a regulatory audit, or a statutory obligation to report suspected money laundering or terrorist financing. mik4d is not required to notify you when such a disclosure is made if doing so would compromise an ongoing investigation.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of mik4d's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms before it takes effect.

8.1 mik4d operates internationally and some of the third-party service providers referenced in Clause 7 are located outside Indonesia. Where your personal data is transferred to a country that does not provide an equivalent level of data protection to that applicable in Indonesia, mik4d takes steps to ensure that appropriate safeguards are in place — including contractual clauses that require the recipient to protect your data in accordance with standards equivalent to those described in this Policy.

8.2 By using the mik4d Platform, you acknowledge that your personal data may be processed in jurisdictions outside Indonesia, subject to the safeguards described above. If you have concerns about a specific cross-border transfer, please contact us using the details in Clause 15.

9.1 Active Accounts. For as long as your account remains active, mik4d retains all personal data necessary to deliver the Platform's services, maintain account security, and fulfil our legal obligations.

9.2 Closed Accounts. Following account closure, mik4d retains certain categories of personal data for a minimum of five (5) years, or such longer period as may be required by applicable AML regulations, gaming licensing conditions, or applicable law. This retention is necessary to: (a) respond to regulatory inquiries; (b) resolve any disputes arising after account closure; (c) detect and prevent re-registration by self-excluded players; and (d) maintain transaction records for audit purposes.

9.3 Marketing Data. Where you have opted in to marketing communications, we retain your marketing preferences until you opt out. Upon receipt of an opt-out request, your marketing data will be suppressed within a reasonable period (typically within 48 hours) and will not be used for new communications thereafter.

9.4 Deletion. Personal data that is no longer required for any of the purposes described in this Policy and for which no legal retention obligation exists will be securely deleted or anonymised. Anonymised data (data from which all identifying attributes have been removed) is not subject to this Policy and may be retained indefinitely for analytical purposes.

Subject to applicable law and the limitations inherent in operating a regulated gaming platform, you hold the following rights in respect of your personal data held by mik4d:

10.1 How to Exercise Your Rights. To exercise any of the rights listed above, please contact mik4d using the details in Clause 15. We will respond to all valid requests within 30 days of receipt. In some cases — where a request is complex or where multiple requests have been submitted — we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

10.2 Identity Verification for Rights Requests. To protect your privacy, mik4d will verify your identity before processing any rights request. You may be asked to confirm account details or provide a copy of your identity document. We will not process a rights request that we cannot verify.

11.1 mik4d implements technical and organizational security measures appropriate to the nature of the personal data we process and the risks posed by unauthorized access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption on all connections between your browser or device and the mik4d Platform, protecting data in transit.
• Encrypted storage of sensitive data fields at rest, including identity document images and financial account identifiers.
• Password hashing using industry-standard one-way cryptographic algorithms — mik4d staff cannot view your password in plain text.
• Access controls limiting staff access to personal data to those with a legitimate operational need, enforced through role-based permissions and audit logging.
• Regular security assessments including penetration testing and vulnerability scanning of Platform infrastructure.
• Two-factor authentication available to all Players at the account level as an additional layer of login security.

11.2 Notwithstanding these measures, no internet-based service can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mik4d will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

12.1 mik4d uses cookies and similar tracking technologies — including session tokens, local storage objects, and server-side logs — to operate and improve the Platform. The categories of cookies we use are described below:

12.2 Strictly necessary cookies cannot be disabled as they are required for the Platform to function. You may manage functional and analytics cookies through your browser settings; however, disabling certain cookies may affect Platform functionality. Most modern browsers allow you to view, delete, and block cookies on a per-site or global basis — refer to your browser's help documentation for instructions.

13.1 mik4d is strictly an adults-only platform. We do not knowingly collect or process personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and any account found to be operated by a person under 21 will be closed immediately, with deposited funds returned to the originating payment method.

13.2 If you believe that mik4d has inadvertently collected personal data from a minor, please contact us immediately using the details in Clause 15. We will investigate promptly and, where confirmed, will delete the data in question without undue delay.

14.1 mik4d may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Material changes — meaning those that significantly affect your rights or the way we use your data — will be communicated to registered Players by email at least seven (7) days before they take effect.

14.2 Non-material changes, such as clarifications, corrections, or administrative updates, will take effect immediately upon publication and the "Last updated" date at the top of this page will be revised accordingly. We recommend reviewing this Policy periodically to stay informed of how mik4d handles your personal data.

14.3 Continued use of the Platform following notification of a material change constitutes acceptance of the revised Policy. If you do not agree with a change, you should stop using the Platform and contact our support team to arrange account closure.

15.1 Data Inquiries. For any questions about this Policy, to exercise your data rights under Clause 10, or to raise a concern about how your personal data has been handled, please contact mik4d using the details below. All privacy-related inquiries are handled by our compliance team and will receive a substantive response within 30 days.

15.2 Complaints. If you are dissatisfied with mik4d's response to a data rights request or with the way your personal data has been handled, you have the right to escalate your complaint to the relevant data protection authority. For players in Indonesia, this is the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital) or the body designated under applicable data protection regulations.

15.3 Further Information. For general platform questions, our FAQ page covers many common topics. For platform rules governing your account, please review our Terms & Conditions. For responsible gaming guidance, visit our Responsible Gaming page.