Privacy Policy
kopi4 Online Gaming Platform

The following terms carry the meanings set out below wherever they appear in this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Platform" — the kopi4 website at https://kopi4.app, including all subpages, services, games, and tools accessible therein.
• "Player" / "you" — any individual who creates an Account on the Platform or who browses the Platform without registration.
• "Account" — the registered personal gaming account held by a Player on the Platform.
• "KYC" — Know Your Customer identity and address verification procedures required before processing withdrawals and high-value deposits.
• "Cookie" — a small data file stored on your device by your browser when you visit the Platform, used to recognize returning visitors and maintain session state.
• "Third-Party Service Providers" — companies engaged by kopi4 to deliver specific operational functions, including payment processors, game studios, customer support software vendors, and fraud-detection services.
• "IDR" — Indonesian Rupiah, the exclusive transactional currency of the Platform.

This Policy applies to all Personal Data collected by kopi4 in connection with the operation of its online gaming platform, including data collected when you register an Account, make a deposit or withdrawal in IDR, play any game, contact our customer support team, or simply browse the Platform without registering.

kopi4 primarily serves Players who are residents of Indonesia. Our platform is designed for adults aged 21 years and above. If you are under 21, you are not permitted to register an Account or provide any Personal Data to kopi4.

This Policy should be read in conjunction with kopi4's Terms & Conditions and Responsible Gaming policy, both of which form part of the same contractual framework governing your use of the Platform.

kopi4 collects Personal Data through several distinct channels. The categories of data collected and the circumstances in which they arise are detailed below:

3.1 Registration Data

• Full legal name as it appears on your Indonesian National Identity Card (KTP) or passport
• Date of birth (used to verify the 21+ age requirement)
• Indonesian residential address (province, city, postal code)
• Valid email address
• Indonesian mobile phone number
• Preferred username and encrypted password

3.2 KYC & Identity Verification Data

• Photograph or scan of a government-issued identity document (KTP, passport, or SIM — Indonesian driver's license)
• Proof of address document (utility bill, bank statement, or official correspondence dated within three months)
• Bank account details or e-wallet registration details confirming ownership (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja)
• A selfie photograph for liveness-check purposes, where required by our verification provider

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records, including amounts in IDR, timestamps, and payment channel used
• Bank account numbers or e-wallet identifiers associated with deposits and withdrawals
• Transaction reference numbers issued by the Player's bank or e-wallet provider

3.4 Gaming Activity Data

• Game session logs including game title, studio, stake amount, outcome, and duration
• Sports wager records including event, market, odds, stake, and settlement outcome
• Bonus and promotional credit usage history
• Responsible Gaming tool usage (deposit limit settings, cooling-off periods, self-exclusion requests)

3.5 Technical & Device Data

• IP address and approximate geolocation (city / region level)
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Cookie data and similar tracking technologies as described in Section 7

3.6 Customer Support Data

• Contents of live chat conversations, emails sent to [email protected], and any screenshots or files you attach
• Support ticket reference numbers and resolution history
• Call recordings where voice support is offered and consent is obtained

kopi4 uses the Personal Data collected for clearly defined, legitimate purposes. We do not process your data for any purpose incompatible with those stated below:

kopi4 processes Personal Data on one or more of the following legal grounds, consistent with internationally recognized data-protection principles:

• Contractual Necessity: Processing required to fulfill our obligations to you under the Terms & Conditions — including account management, game delivery, and payment processing — is necessary for the performance of the contract between kopi4 and each registered Player.
• Legal Obligation: Certain Processing activities — including KYC identity verification, anti-money-laundering record-keeping, and regulatory reporting — are required by the international gaming licence under which kopi4 operates and by applicable financial crime prevention frameworks.
• Legitimate Interests: kopi4 processes Technical and Device Data to maintain platform security, detect fraudulent activity, prevent multi-account abuse, and improve the quality of our gaming services. These interests do not override your fundamental privacy rights.
• Consent: Where we process data for optional purposes — such as sending you promotional offers about new slot releases from Pragmatic Play or Evolution Gaming live tables — we do so only on the basis of your freely given, specific, and withdrawable consent.

kopi4 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. We share Personal Data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment Processors: Your bank account details and transaction amounts are shared with Indonesian payment networks (including BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and digital wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit and withdrawal instructions.
• KYC & Identity Verification Providers: Identity documents and selfie photographs are transmitted to our contracted KYC verification partner under a data-processing agreement that prohibits secondary use of your data.
• Game Studio Technology Providers: Session tokens and anonymized Player identifiers are shared with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe to deliver their game content and maintain provably fair RNG certification. These providers do not receive your full name, financial data, or contact details.
• Fraud Detection & Security Services: IP address, device fingerprint, and behavioral signals may be processed by our fraud-prevention partner to detect multi-accounting, credential stuffing, and suspicious wagering patterns.
• Customer Support Platform: Support conversation data is processed by our live-chat software vendor under a strict data-processing agreement consistent with this Policy.
• Legal & Regulatory Authorities: kopi4 will disclose Personal Data to competent authorities, courts, or regulators where required to do so by a lawful order, subpoena, or applicable regulatory obligation. We will notify affected Players where legally permissible to do so.

kopi4 uses cookies and similar client-side technologies to operate essential platform functions, improve user experience, and analyze aggregate traffic patterns. We do not use third-party advertising cookies or behavioral profiling cookies for cross-site ad targeting.

The cookies deployed on the Platform fall into the following categories:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without preventing you from using the Platform.
• Functional Cookies: Remember your preferences such as language settings, last-visited game category, and Responsible Gaming reminder configurations. Disabling these cookies may reduce Platform convenience but will not prevent access.
• Analytics Cookies: Collect anonymized, aggregated data about how Players navigate the Platform — pages visited, session duration, game categories explored — to help kopi4 improve site performance and content relevance. No individual Player is identified in analytics reports.
• Security Cookies: Used to detect and prevent fraudulent logins, automated scripts, and suspicious session behavior by correlating device fingerprints with registered Account profiles.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the Platform. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to clear cookies, block third-party cookies, or receive notification before a cookie is stored.

kopi4 retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any individual Player. Anonymized, aggregated data may be retained indefinitely for statistical and product-improvement purposes.

kopi4 implements a layered security architecture designed to protect Personal Data against unauthorized access, accidental loss, destruction, or alteration. Key measures include:

• Transport Encryption: All data in transit between your device and kopi4 servers is encrypted using TLS 1.3 with Perfect Forward Secrecy (PFS), ensuring that captured traffic cannot be decrypted retroactively.
• Data-at-Rest Encryption: Sensitive fields in our databases — including identity document file paths, bank account details, and password hashes — are encrypted using AES-256 at the storage layer.
• Password Security: Player passwords are never stored in plaintext. We apply a salted cryptographic hashing algorithm (bcrypt) to all passwords before storage.
• Access Controls: Internal access to Personal Data is restricted to kopi4 personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA) for all administrative systems.
• Penetration Testing: The Platform undergoes periodic third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: kopi4 maintains a documented data-breach response procedure. In the event of a confirmed breach affecting Player Personal Data, affected Players will be notified promptly with details of the nature of the breach and recommended protective actions.

As a Player on the kopi4 Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team at support@kopi4.app with the subject line "Data Rights Request".

kopi4 will respond to all verified rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by up to an additional 60 days, in which case we will notify you of the extension within the initial 30-day window.

kopi4 operates exclusively as an adult entertainment platform. Registration is strictly prohibited for any individual under the age of 21 years. We do not knowingly collect Personal Data from minors.

If kopi4 becomes aware — through our age-verification procedures, KYC review, or any other means — that Personal Data has been collected from a Player who is under 21, we will immediately suspend the Account, delete the associated Personal Data, and return any deposited funds to the source payment method without deduction.

Parents and guardians who believe that a minor in their care has registered an Account on kopi4 are encouraged to contact us immediately at support@kopi4.app. We will prioritize the review and resolution of all such reports.

kopi4's primary server infrastructure is hosted in data centers located within the Asia-Pacific region. Some of our Third-Party Service Providers — particularly KYC verification partners, game studios, and fraud-detection vendors — may process Personal Data on servers located outside Indonesia.

Where Personal Data is transferred internationally, kopi4 ensures that appropriate safeguards are in place. These include contractual obligations (data-processing agreements incorporating standard contractual clauses), technical security requirements, and, where applicable, adequacy assessments of the recipient jurisdiction's data-protection standards.

By registering an Account and using the Platform, you acknowledge and consent to the transfer of your Personal Data to processing locations outside Indonesia where such transfer is necessary to deliver the services you have requested.

The kopi4 Platform does not contain outbound links to third-party websites. All navigation within kopi4.app remains within the kopi4 domain. Accordingly, kopi4 does not assume responsibility for the privacy practices of any external website that you may navigate to independently of the Platform.

If you arrived at kopi4 via a referral link or an affiliate partner's site, please note that your interaction with that partner site prior to arriving at kopi4 is governed by the partner's own privacy policy. kopi4 is not responsible for any data collected by the referring site before you land on the Platform.

kopi4 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, new regulatory requirements, or improvements to our platform. When material changes are made, we will notify registered Players via the email address on file and/or via a prominent in-Platform notification, providing a minimum of seven (7) calendar days' notice before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy will be revised with each update. We encourage you to review this Policy periodically to stay informed about how we protect your Personal Data. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you object to any change in this Policy, you may close your Account at any time by contacting our support team. Any verified real-money Balance will be returned to the source payment method on record within five (5) business days of Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way kopi4 handles your Personal Data, please reach out to our dedicated Privacy team through the following channel:

Our customer support team is staffed by Indonesian-speaking agents available around the clock (24/7 WIB) to assist with general Account queries. Privacy and data-rights requests are handled by our dedicated Privacy team during standard business hours (09:00–18:00 WIB, Monday to Friday, excluding Indonesian public holidays such as Idul Fitri, Idul Adha, and Independence Day on 17 August).

kopi4 is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.