Privacy Policy ahha4d

To deliver optimal service and meet our operational and regulatory obligations, ahha4d collects certain categories of data from users. We only collect what is strictly necessary — nothing more.

1.1 Identity Data

Includes full name, date of birth, official ID number (National ID/Driver's License/Passport), identity photo, and other identity information required during the KYC (Know Your Customer) verification process.

1.2 Contact Data

Includes active email address, mobile phone number, and residential address. Contact data is used for account communications, two-factor verification, and delivery of important service information.

1.3 Financial Data

Includes registered bank account number, account holder name, and bank name. ahha4d does not directly store credit or debit card details — all card transactions are processed by PCI DSS-certified payment gateways.

1.4 Platform Activity Data

Includes betting history, transaction history, games played, session duration, and content preferences. This data is used to improve the user experience and detect suspicious activity.

1.5 Technical Data

Includes IP address, device type, operating system, browser used, and access log data. Technical data helps us maintain account security and diagnose technical issues.

Ahha4d collects data through several different channels, depending on the type of data and the context in which it is used:

• Directly from You — when you register an account, complete a verification form, make a transaction, or contact our support team.
• Automatically — when you use the platform, our systems automatically record technical data such as IP address, device type, and navigation patterns using cookie and server log technologies.
• From Verified Third Parties — for identity verification and fraud prevention purposes, ahha4d works with audited KYC and anti-fraud service providers that meet stringent data security standards.
• From Gaming Activity — transaction data and gameplay history are collected automatically as part of platform operations for audit, security, and service improvement purposes.

Every piece of data we collect has a specific, documented purpose. ahha4d does not use data for purposes outside the scope described in this document without your explicit consent.

Ahha4d does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in the course of operating the platform, there are occasions when data must be shared with specific partners within a very limited and controlled scope:

• Payment Service Provider — financial data required to process deposits and withdrawals is shared with PCI-certified payment gateways operating under strict security standards.
• KYC Service Provider — identity documents are shared with trusted identity verification partners solely for the purpose of confirming member identity authenticity.
• Game Providers — minimal gameplay session data required for game operations is shared with official game providers partnered with ahha4d.
• Legal Authority — ahha4d will disclose the necessary data to the relevant authorities when required by a court order, anti-money laundering regulations, or other legal obligations.

All third-party partners who receive data from ahha4d are bound by a Data Processing Agreement that prohibits them from using that data for any purpose other than what has been agreed upon.

Protecting member data is a responsibility we take seriously. ahha4d implements multiple layers of technical and organizational security to keep your data safe:

• Data Encryption in Transit uses TLS 1.3 for all communications between your device and ahha4d servers.
• Data Encryption at Rest — sensitive data stored in our databases is encrypted with AES-256, making it unreadable even in the event of a physical storage media breach.
• Role-based access control (RBAC) — only employees who require access to specific data to perform their duties are permitted to access that data.
• Full Audit Logs — every access to sensitive data is automatically logged and can be audited at any time.
• Regular penetration testing — internal security teams and external auditors regularly test our systems to identify and close potential security vulnerabilities.

Ahha4d uses cookies and similar technologies to enhance platform functionality and user experience. The following types of cookies are used:

• Essential Cookies — required for core platform functions such as keeping your login session active. These cookies cannot be disabled as the platform will not function properly without them.
• Functional Cookies — stores your preferences such as interface language, display settings, and game configuration to deliver a more personalized experience.
• Analytics Cookies — helps us understand how users interact with the platform so we can continuously improve service quality. Data collected is anonymous and aggregated.
• Security Cookies — used to detect suspicious login attempts, bots, and other fraudulent activity to protect your account.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies may significantly affect platform functionality.

Ahha4d retains your personal data for as long as your account remains active and for as long as necessary to fulfil the purposes described in this policy. After account closure, we retain certain data to meet our legal and regulatory obligations.

• Identity & KYC Data — retained for a minimum of 5 years after account closure in accordance with applicable anti-money laundering regulatory requirements.
• Financial Transaction History — retained for a minimum of 7 years in accordance with applicable accounting and tax standards.
• Technical Log Data — retained for 12 months for security investigation and system audit purposes.
• Preferences & Marketing Data — deleted within 30 days of a deletion request or account closure, whichever comes first.

Once the defined retention period ends, data is permanently deleted using secure deletion methods that ensure the data cannot be recovered.

As an ahha4d member, you hold a set of rights we fully respect regarding your personal data:

As a platform operating internationally, your data may be processed on servers located outside Indonesia — for example, for backup storage, transaction processing via international gateways, or use of cloud infrastructure services.

Every cross-border data transfer carried out by ahha4d meets strict data protection requirements. We ensure that the destination country or receiving partner maintains data protection standards equivalent to or higher than those applicable in Indonesia — or we apply Standard Contractual Clauses to guarantee your data remains protected.

Ahha4d services are strictly prohibited for individuals under 18 years of age. ahha4d does not knowingly collect personal data from minors. If we discover that data from anyone under 18 has been collected without valid consent, that data will be immediately deleted and the associated account will be closed.

Ahha4d may update this Privacy Policy from time to time to reflect changes in data management practices, technological developments, or applicable regulatory requirements. Any material updates will be communicated to you via:

• Notifications displayed when you log in to the ahha4d platform.
• An email will be sent to the address registered on your account at least 14 days before any changes take effect.
• Announcements on the platform homepage for significant changes.

The "Last Updated" date at the top of this document always reflects the latest applicable version. We encourage you to review this page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the ahha4d privacy team is here to help. We are committed to responding to all privacy-related requests within 3 business days.

You can reach our privacy team via live chat available 24 hours on the ahha4d platform, or via help center on the page FAQ. Please include sufficient information to help us verify your identity and process your request accurately and securely.