Privacy Policy

1 Introduction

opus4d ("we", "us", "our", "the Company") operates the online gaming platform accessible at https://opus4d.cam (the "Platform"). In the course of providing our sports betting, live casino, slot, and togel (Indonesia's traditional numbers lottery) services to Users located in Indonesia and other permitted jurisdictions, we process certain categories of personal data.

This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by opus4d. We are committed to processing your data lawfully, fairly, and transparently, in accordance with internationally recognized data protection principles.

By registering an Account on the Platform or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein. If you do not agree with any part of this policy, you should not use the Platform.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly. Defined terms used in this policy carry the same meanings as in the Terms & Conditions unless otherwise stated.

2 Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is opus4d, operating the Platform at https://opus4d.cam. The data controller determines the purposes and means by which your personal data is processed.

All data protection inquiries, subject access requests, and complaints should be directed to our dedicated privacy contact point:

3 Data We Collect

opus4d collects personal data across several categories, depending on how you interact with the Platform. The following table summarizes the types of data we hold:

4 How We Collect Data

opus4d collects personal data through the following channels:

4.1 Data You Provide Directly

• Registration form: name, date of birth, email, mobile number, and residential address;
• KYC document upload: identity card, passport, or address verification documents;
• Banking details entered when making deposits or requesting withdrawals;
• Communications submitted through our support channels.

4.2 Data Collected Automatically

• Technical data collected via server logs each time you access the Platform;
• Cookies and similar tracking technologies (see Section 9 for full details);
• Behavioral data generated through your gaming activity on the Platform.

4.3 Data Received from Third Parties

• Identity verification results from third-party KYC service providers;
• Transaction confirmation data from payment processors and banking partners;
• Fraud risk scores from anti-fraud data service providers;
• Publicly available data used to verify account information where necessary.

5 Purposes & Legal Basis

opus4d processes your personal data only where we have a lawful basis to do so. The table below maps each processing purpose to its corresponding legal basis:

Where we rely on legitimate interests as our legal basis, we have conducted a balancing assessment confirming that our interests do not override your fundamental privacy rights. You may request a summary of that assessment by contacting our privacy team.

6 Data Sharing

opus4d does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. We share your data only in the following limited circumstances:

6.1 Service Providers

We engage carefully vetted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include:

• KYC and identity verification providers: to confirm your identity documents and age;
• Payment processors and banking partners: to facilitate deposits and withdrawals through local channels including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja;
• Anti-fraud and risk analytics providers: to detect suspicious transactions and protect the Platform's integrity;
• Game studio technology providers: such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft, who receive the minimum data necessary to deliver their games securely;
• Cloud infrastructure providers: who host Platform data on secured servers under confidentiality obligations;
• Customer support platform providers: who operate the live chat and ticketing infrastructure used by our support team.

6.2 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so — for example, in response to a court order, subpoena, or a lawful request from a competent authority investigating suspected financial crime or fraud. We will notify you of any such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving opus4d, your personal data may be transferred to the successor entity as part of that transaction. You will be notified in advance of any such transfer and of any material change to the data controller's identity.

7 International Transfers

opus4d operates as an international platform, and some of our service providers are located outside Indonesia. When we transfer your personal data to processors or sub-processors in other countries, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Indonesia.

Safeguards used for international transfers include:

• Standard contractual clauses that impose data protection obligations on the receiving party;
• Transfers only to countries or organizations that maintain data protection standards recognized as adequate by reference to internationally accepted frameworks;
• Technical controls including encryption in transit and at rest, regardless of the jurisdiction in which data is held.

You may request information about the specific safeguards applied to any particular international transfer by contacting our privacy team at the address in Section 15.

8 Data Retention

opus4d retains personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, your data will be securely deleted or anonymized so that it can no longer be attributed to you. Anonymized, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and platform improvement purposes.

9 Cookies & Tracking Technologies

opus4d uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and understand how Users interact with our services. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be switched off. They include session authentication tokens, security cookies that prevent cross-site request forgery (CSRF), and load-balancing cookies that ensure stable performance during peak traffic. No personal data is shared with third parties via these cookies.

9.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymized information about how visitors use the Platform — such as which pages are visited most frequently and where errors occur — to help us improve the user experience. Data collected by these cookies does not identify individual users.

9.3 Functional Cookies

These cookies remember your preferences and settings — such as your chosen display language, preferred time zone (e.g., WIB / UTC+7 for users in Jakarta, Surabaya, Bandung, and Medan), and responsible gaming notification settings — so that you do not need to re-enter them on each visit.

9.4 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all or certain categories of cookies, or to alert you when websites attempt to set cookies. Please be aware that disabling strictly necessary cookies will impair the functionality of the Platform, including account login and transaction processing.

10 Your Rights

You hold the following rights in relation to the personal data opus4d holds about you. To exercise any of these rights, contact our privacy team at [email protected] with the subject line "Data Rights Request — [Right Type]".

We will respond to all verifiable rights requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.

We may need to verify your identity before processing a rights request to ensure we do not disclose personal data to unauthorized parties. Identity verification for rights requests is typically completed by confirming information already associated with your registered Account.

11 Security Measures

opus4d implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Platform is encrypted using current-generation TLS protocols, preventing interception in transit;
• Encryption at Rest: Sensitive data stored on our servers — including KYC documents, financial records, and account credentials — is encrypted using AES-256 or equivalent standards;
• Access Controls: Access to personal data within opus4d is strictly limited to authorized personnel on a need-to-know basis. All internal access is logged and regularly audited;
• Two-Factor Authentication (2FA): Internal systems require multi-factor authentication for all staff accessing personal data or administrative functions;
• Continuous Monitoring: Our security operations team monitors the Platform around the clock for intrusion attempts, anomalous behavior, and data exfiltration indicators;
• Regular Penetration Testing: The Platform undergoes periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited;
• Data Breach Response Plan: We maintain a documented incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframe required by applicable law.

12 Minors & Age Restriction

The opus4d Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect or process personal data belonging to persons under 21. Age verification is a mandatory step in the account registration and KYC process.

If we become aware that personal data has been collected from a person under 21 — whether through misrepresentation during registration or any other means — we will immediately:

• Suspend and permanently close the relevant Account;
• Delete all personal data associated with that Account to the extent not required for record-keeping under our legal obligations;
• Reverse any deposits and refund any remaining balance to the payment source where this is technically feasible.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account on the Platform, please contact us immediately at [email protected] so that we can take prompt action.

13 Third-Party Services

The Platform integrates certain third-party services to deliver the full gaming experience. While we carefully vet all third-party providers, each third party operates under its own privacy policy for data it collects directly from you in the course of providing its service.

Third-party services embedded in the Platform include:

• Game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft): game software delivered via secure iframe; studio-level data collection is limited to session and gameplay data necessary for game function and fairness certification;
• Payment infrastructure providers: processing partners that facilitate transfers to and from Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) — these providers handle payment data under their own regulatory obligations;
• Fraud prevention and analytics services: receive pseudonymized behavioral signals to generate risk scores; they do not receive your name, bank account details, or KYC documents.

opus4d is not responsible for the privacy practices of third-party providers operating independently of our instructions. We recommend reviewing the privacy policies of any third-party services you interact with directly.

14 Policy Amendments

opus4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The revised policy will be published on this page with an updated "Last Updated" date.

Where changes are material — for example, where we introduce a new category of data collection, a new purpose for processing, or a new category of third-party recipient — we will notify registered Users by email and via in-platform notification at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

We encourage you to review this page periodically to stay informed about how opus4d protects your data. The version history of this policy is available upon request from our privacy team.

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact our privacy team through the following channel:

We take all privacy complaints seriously. Upon receipt of a complaint, we will:

• Acknowledge receipt within 2 business days;
• Investigate the complaint thoroughly and in good faith;
• Provide a substantive written response within 30 calendar days;
• Where a complaint is upheld, take prompt remedial action and notify you of the steps taken.

If you are not satisfied with our response to your complaint, you retain the right to escalate the matter to the relevant data protection or supervisory authority in your jurisdiction.