esa4d Privacy Policy

This Privacy Policy describes how esa4d ("we", "us", "our", "the Platform") collects, uses, stores, and protects personal data relating to individuals ("you", "Player", "User") who access or use the esa4d online betting and gaming platform at esa4d.vip and all associated sub-domains and services.

esa4d is an internationally licensed online betting and gaming operator serving English-preference Indonesian players. We offer sports betting — including BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, UEFA Champions League, and Timnas Indonesia fixtures — live casino, slots, and the traditional numbers game togel (Indonesia's traditional numbers lottery). In operating these services, we necessarily collect and process certain personal information, and we take that responsibility seriously.

By registering an account on esa4d, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions.

We may update this Privacy Policy from time to time. The most recent version is always published at esa4d.vip/privacy-policy, with the effective date displayed at the top of this page. Material changes will be communicated to registered players by email prior to taking effect.

For the purposes of this Privacy Policy:

• Personal Data means any information that identifies or can identify a living individual, including name, date of birth, contact details, payment information, and device identifiers.
• Processing means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• Data Controller means esa4d, which determines the purposes and means of processing personal data collected through the platform.
• Data Processor means any third party that processes personal data on behalf of esa4d under a data processing agreement (e.g., payment processors, game studios, fraud-detection vendors).
• KYC (Know Your Customer) means the identity and document verification process required before withdrawal processing or as otherwise required by esa4d's compliance obligations.
• Cookie means a small text file placed on your device by the esa4d platform when you visit, used to remember preferences and enable certain functions.

esa4d collects the following categories of personal data, depending on how you interact with the platform:

esa4d collects personal data through the following channels:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automated technologies: When you visit esa4d.vip, we automatically collect technical and behavioural data through cookies, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Third-party verification providers: When you submit KYC documents, esa4d may use third-party identity verification services to authenticate the documents you provide. These providers share only the verification result (pass/fail and matched data fields) with esa4d.
• Payment processors: When you complete a deposit or withdrawal, our payment partners share the minimum necessary transaction metadata required to reconcile your Account balance.
• Fraud and risk management systems: Automated risk scoring systems may process technical data (IP address, device fingerprint, transaction patterns) to identify unusual activity and protect the integrity of the platform.

esa4d processes personal data only for specified, legitimate purposes. The primary purposes are:

• Account management: Creating, maintaining, and securing your player account, including authentication, password management, and session control.
• Service delivery: Enabling you to place bets, participate in games, access live casino tables, and use all features available on the esa4d platform.
• Payment processing: Processing deposits and withdrawals via Indonesian local banks and e-wallets, verifying that payment accounts are held in your name, and maintaining transaction records.
• KYC and compliance: Verifying your identity and age (21+ requirement), complying with our licensing conditions, and fulfilling anti-money laundering (AML) obligations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised access, multi-accounting, bonus abuse, and other prohibited conduct as defined in the esa4d Terms & Conditions.
• Responsible gaming: Monitoring betting patterns to identify players who may be exhibiting signs of problem gambling, and administering deposit limits, cool-off periods, and self-exclusion requests.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions.
• Marketing (opt-in only): Sending promotional offers, bonus notifications, and news about esa4d to players who have explicitly opted in to receive such communications.
• Platform improvement: Analysing aggregated and anonymised behavioural data to improve platform performance, user experience, and game selection.
• Legal obligations: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.

esa4d processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to deliver the services you have requested by registering on esa4d — including account creation, game access, and payment processing.
• Legitimate interests: Processing necessary for esa4d's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable law, including KYC requirements, AML obligations, and responses to lawful regulatory or law-enforcement requests.
• Consent: Processing based on your explicit consent, including marketing communications and, where applicable, the placement of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

esa4d does not sell your personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary for the purpose described:

• Payment processors and banking partners: Indonesian local banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum payment data necessary to process your transactions.
• Game content providers: Licensed studios including Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, and Microgaming receive session data (player ID, bet amounts, game outcomes) required to deliver game results and calculate payouts. These providers do not receive your full identity data.
• Identity verification providers: Third-party KYC verification services receive copies of your identity documents solely to authenticate your identity. These providers operate under strict confidentiality agreements with esa4d.
• Fraud and risk management vendors: Automated risk-scoring systems process technical data (IP address, device fingerprint, transaction patterns) to identify suspicious activity. These vendors are engaged as data processors and may not use your data for any other purpose.
• Legal and regulatory authorities: esa4d will disclose personal data to regulators, law enforcement agencies, or courts when required to do so by applicable law, court order, or regulatory direction.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of esa4d's business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is handled.

esa4d uses cookies and similar tracking technologies on the esa4d.vip platform. Cookies are small text files placed on your device when you visit the site. They help us keep you logged in, remember your preferences, and understand how players use the platform so we can improve it.

The types of cookies we use:

• Essential cookies: Required for the platform to function. These include session authentication tokens, language preferences, and security cookies. The platform cannot be used without these cookies, and they do not require consent.
• Analytical cookies: Collect anonymised or pseudonymised data about how players navigate the platform — including pages visited, time spent, and error events. This data is used solely to improve platform performance and user experience.
• Functional cookies: Remember your display preferences, game history, and other personalisation settings to improve your experience across sessions.
• Marketing cookies (opt-in): Used only where you have explicitly consented. These cookies track your interactions with promotional content and help us deliver relevant bonus offers. You may opt out via your account notification settings.

esa4d retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your active account relationship with esa4d, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction and betting records: Retained for a minimum of five (5) years following each transaction, in compliance with applicable financial record-keeping requirements.
• KYC documents: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure.
• Customer support records: Retained for three (3) years following the resolution of each support interaction, for quality assurance and dispute resolution purposes.
• Marketing data: Retained until you withdraw consent. Upon withdrawal of consent, marketing communications will cease promptly and associated marketing preferences data will be deleted within 30 days.
• Technical and log data: Retained for up to twelve (12) months for fraud detection, security analysis, and platform debugging purposes.

When data is no longer required and there is no legal obligation to retain it, esa4d deletes or irreversibly anonymises it in accordance with its data destruction procedures.

esa4d employs a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and esa4d's servers.
• At-rest encryption for sensitive data fields including identity documents, payment details, and authentication credentials stored in esa4d's databases.
• Access controls: Personal data is accessible only to esa4d employees and contractors who require it to perform their specific job functions, under strict role-based access control policies.
• Regular security audits: esa4d conducts regular internal and third-party security audits, penetration tests, and vulnerability assessments to identify and remediate potential weaknesses.
• Incident response: esa4d maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify you and, where required, the relevant regulatory authority within the timeframes prescribed by applicable law.
• Staff training: All esa4d employees with access to personal data receive mandatory data protection and security training as part of their onboarding and annual refresher training programmes.

Depending on your jurisdiction, you may hold some or all of the following rights with respect to your personal data held by esa4d. To exercise any of these rights, contact us via live chat or at [email protected] — we will respond within 30 days.

esa4d strictly enforces a minimum age requirement of 21 years for all registered players. We do not knowingly collect personal data from individuals under the age of 21.

If esa4d discovers or is informed that a registered account holder is under 21 years of age, the account will be closed immediately, all funds will be frozen pending investigation, and any data collected will be handled in accordance with applicable law — which may include prompt deletion of data not required to be retained for legal purposes.

If you are a parent or guardian and believe that your child has registered on esa4d, please contact us immediately at [email protected]. Include as much detail as possible and we will investigate and respond within two business days.

The esa4d platform may contain references to third-party game studios, payment providers, and sports data services. While esa4d selects these partners carefully, we do not control their websites, applications, or privacy practices, and this Privacy Policy does not apply to any third-party services you access outside of the esa4d platform.

We encourage you to review the privacy policies of any third-party services you use in connection with your gaming activity. esa4d is not responsible for the privacy practices, data handling, or content of any external service, even where that service is accessible via a link or integration within the esa4d platform.

If you have a concern about how a third-party partner is handling your data, please contact that provider directly. If you believe a third-party integration on the esa4d platform is creating a privacy risk, please notify us at [email protected] and we will investigate promptly.

esa4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. All amendments take effect on the date specified at the top of the revised policy.

Where changes are material — for example, a new category of data being collected, a new third-party sharing arrangement, or a change to your rights — we will notify registered players by email at least seven (7) days before the changes take effect, giving you the opportunity to review the updated policy and, if necessary, close your account before the changes apply to you.

Non-material changes, such as clarifications of existing language or corrections of typographical errors, may be made without advance notice. The effective date at the top of this page will always reflect the date of the most recent update, whether material or otherwise. We recommend bookmarking this page and reviewing it periodically.

Your continued use of the esa4d platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with any change, you must stop using the platform and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way esa4d handles your personal data, please get in touch with us through the following channels:

• Live Chat: Available 24/7 directly within the esa4d platform. Our support agents are available in both English and Indonesian and can handle data subject requests, privacy concerns, and general enquiries. Typical response time is under two minutes.
• Email: [email protected] — for formal data subject requests (access, rectification, erasure, portability), privacy complaints, or any matter requiring a written response. We aim to acknowledge all emails within one business day and resolve data subject requests within 30 days.
• Subject Line Guidance: When submitting a formal data subject request by email, please include a clear subject line such as "Data Access Request", "Data Erasure Request", or "Privacy Complaint" to ensure your message is routed to the correct team without delay.
• Identity Verification for Requests: To protect your privacy, esa4d may require you to verify your identity before we can action a data subject request. This is to ensure that personal data is not disclosed to or altered by unauthorised third parties.