Your privacy is a core commitment at xo4d. This Privacy Policy explains in plain terms what personal data we collect from members across Indonesia, how that data is used, how we keep it secure, and the rights you hold over your own information. We encourage you to read this document fully before registering an account.
We built xo4d's data practices around three principles: collect only what is necessary, use data only for the purposes stated in this policy, and protect it with the same level of security that Indonesia's top banking institutions apply to their customers' financial information.
xo4d collects only the personal data that is strictly necessary to operate your account, verify your identity, process transactions in Indonesian Rupiah, and comply with anti-money-laundering obligations. We do not collect data for the purpose of selling it to third parties.
All data transmitted between your device and the xo4d platform is encrypted using TLS 1.3. Sensitive data at rest — including payment details and identity documents — is stored using AES-256 encryption, the same standard used by BCA and other major Indonesian financial institutions.
You have the right to access, correct, and request deletion of your personal data at any time. xo4d provides clear, straightforward mechanisms for exercising these rights without unnecessary bureaucracy. Contact our support team to submit a data request.
xo4d does not sell, rent, or trade your personal information to any third party for marketing purposes. Where we engage service providers — such as payment processors for BCA, BRI, or GoPay transactions — those providers are contractually bound to use your data only for the stated purpose.
We retain your personal data only for as long as is necessary to fulfill the purposes described in this policy. Account data is retained for a minimum of 5 years after account closure to satisfy anti-money-laundering compliance obligations; all other data is deleted sooner where retention is no longer justified.
In the unlikely event of a data security incident that affects your personal information, xo4d will notify affected members promptly via their registered email address, describe the nature of the incident, and outline the steps we are taking to contain and remediate the situation.
For the purposes of this Privacy Policy, the following definitions apply:
xo4d collects the following categories of Personal Data from Members and site visitors:
| Category | Specific Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP, passport), and photograph submitted during KYC verification. |
| Contact Data | Email address, mobile phone number, and residential address (city, province, and postal code within Indonesia). |
| Financial Data | Bank account name, bank account number, bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records, and account balance history — all denominated in Indonesian Rupiah (IDR). |
| Account Data | Username, hashed password, account registration date, login timestamps, responsible gaming preferences (deposit limits, session limits, self-exclusion status), and bonus history. |
| Usage Data | Betting and gaming history (markets placed, stakes, outcomes), session duration, game preferences, and interaction logs within the platform. |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, and referring URL. Collected automatically when you access the platform. |
| Communications Data | Records of interactions with xo4d's customer support team, including live chat transcripts and email correspondence. |
xo4d does not intentionally collect any special category data (such as health, racial or ethnic origin, religious beliefs, or political opinions) unless it is voluntarily disclosed by a Member in the context of a responsible gaming support request, in which case it is handled with heightened confidentiality.
xo4d collects Personal Data through the following means:
xo4d processes your Personal Data for the following clearly defined purposes:
xo4d processes your Personal Data under one or more of the following legal bases, depending on the specific purpose of each processing activity:
xo4d does not sell, rent, or trade your Personal Data to any third party for their independent commercial use. We share data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:
xo4d operates internationally, and some of the service providers we engage — particularly game content studios and cloud infrastructure providers — may process your data in jurisdictions outside of Indonesia. Where such transfers occur, xo4d takes appropriate steps to ensure your data receives an adequate level of protection, including:
By registering an account with xo4d, you acknowledge that your Personal Data may be transferred to and processed in countries other than Indonesia, under the safeguards described above.
xo4d retains your Personal Data for the periods set out below, after which data is securely deleted or anonymized unless a longer retention period is required by applicable law:
| Data Category | Retention Period |
|---|---|
| Identity and KYC Data | 5 years after account closure, to satisfy anti-money-laundering compliance requirements. |
| Financial Transaction Records | 5 years after the date of each transaction, in accordance with financial record-keeping obligations. |
| Account and Login Data | Duration of account activity plus 2 years after voluntary closure, or 5 years after mandatory closure due to Prohibited Activity. |
| Customer Support Correspondence | 3 years from the date of the last communication, to facilitate dispute resolution. |
| Marketing Consent Records | Retained for the duration of your consent and for 1 year following withdrawal, as evidence of your consent status. |
| Technical and Usage Data | 13 months from the date of collection, after which it is aggregated and anonymized. |
| Self-Exclusion Records | Retained indefinitely to prevent re-registration during an active exclusion period, and for at least 5 years after expiry of a time-limited exclusion. |
xo4d maintains a comprehensive security program designed to protect your Personal Data against unauthorized access, accidental loss, destruction, and disclosure. Our security measures include:
xo4d uses first-party cookies and similar technologies on the platform. We do not use third-party advertising cookies or behavioral tracking for cross-site advertising purposes. The cookies we use fall into the following categories:
You may manage cookie preferences through your browser settings. Note that blocking strictly necessary cookies will prevent you from logging in to your xo4d account. xo4d does not use fingerprinting techniques or supercookies.
As a Member of xo4d, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving your request.
You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed. We will provide this in a clear, structured format.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Some data (such as your registered name) may require re-submission of KYC documents to update.
You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. Note that this right is subject to our legal retention obligations — data we are required by law to retain cannot be deleted on request.
You may request that we restrict processing of your Personal Data in certain circumstances — for example, while you contest the accuracy of the data, or while we assess whether our legitimate interests override your rights.
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format (such as CSV or JSON).
You have the right to object to processing based on legitimate interests, including any profiling carried out on that basis. You also have an absolute right to object to processing for direct marketing purposes, which we will honor without requiring justification.
xo4d is strictly an adult platform. We do not knowingly collect Personal Data from any individual under the age of 21. Our KYC verification process is designed to detect and reject registration attempts by underage individuals.
If xo4d becomes aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete all associated Personal Data, and void any transactions made through that account. If you believe that a minor has registered an account on xo4d, please contact us at [email protected] immediately.
Parents and guardians are encouraged to use parental control software and to monitor minors' online activity to prevent access to gambling platforms. xo4d supports the use of third-party parental control tools as a complementary safeguard alongside our own age verification measures.
xo4d reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. Where changes are material — meaning they significantly affect how we use your Personal Data or the rights available to you — we will notify registered Members via a platform notification and to the registered email address on file, at least 14 calendar days before the changes take effect.
Non-material changes (such as clarifications of existing language that do not alter the substance of the policy) may be made without advance notice. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the xo4d platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.
We recommend reviewing this page periodically, particularly before making significant transactions or providing updated personal information, to ensure you remain comfortable with our practices.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how xo4d has handled your Personal Data, please contact our Data Protection team using the details below:
If you are not satisfied with our response to a data protection complaint, you have the right to escalate your complaint to a relevant supervisory authority or data protection regulator in your jurisdiction.
Review our full Terms & Conditions for the complete rules governing your account and betting activity, visit our Responsible Gaming page to learn about the player protection tools available to you, or head to our FAQ for quick answers to common questions.