Privacy Policy

obc4d ("the Company", "we", "us", "our") operates an internationally licensed online betting platform accessible at obc4d.cam. We are the data controller responsible for the personal information of all registered members and visitors to our platform. This Privacy Policy describes our practices with respect to the collection, use, storage, sharing, and protection of your personal data.

This Policy applies to:

• All visitors to obc4d.cam and any associated sub-domains, regardless of whether they hold a registered account;
• All registered members of the obc4d platform, including those who have completed KYC verification;
• All individuals who contact obc4d through any support channel, including email, live chat, and WhatsApp.

This Policy does not apply to third-party websites, payment processors, or game studios that may be accessible through links or integrations on our platform. We encourage you to review the privacy policies of those third parties separately.

obc4d primarily serves English-preference players located across Indonesia, including major cities such as Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, and Yogyakarta. We handle personal data in accordance with the principles set out in our international gaming licence and the globally recognised data protection standards that licence requires us to uphold.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

obc4d collects personal data from you through several channels: directly when you register or interact with the platform, automatically as you browse and use our services, and from third parties where permitted by this Policy.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

When you access obc4d, our servers and analytics tools automatically collect the following technical and behavioural data:

• IP address and approximate geographic location (city/region level, not GPS coordinates);
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, and navigation paths;
• Session start and end times, including time zone (WIB / UTC+7 default);
• Betting and gaming activity: markets accessed, bets placed, game titles launched, win/loss data;
• Login timestamps and failed login attempts (retained for security purposes).

3.3 Data from Thi rd Parties

obc4d may receive limited personal data about you from the following third-party sources:

• Payment processors — transaction confirmation data (amount, timestamp, masked account reference) to reconcile deposits and withdrawals;
• Identity verification partners — document authenticity scores returned during the KYC review process;
• Game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) — game session results and round histories, which are stored on both the studio's servers and our own for dispute resolution purposes;
• Fraud detection services — device fingerprint risk scores and IP reputation signals used to protect members from account takeover attempts.

obc4d uses personal data only for clearly defined, legitimate purposes. The table below maps each processing purpose to the data categories involved:

4.1 Promotional Communications. obc4d may send you promotional emails or SMS messages about new games, bonus offers, and seasonal promotions relevant to the Indonesian market. You may opt out of promotional communications at any time by replying "UNSUBSCRIBE" to any promotional message or by contacting support at [email protected]. Opting out does not affect transactional messages necessary to operate your account.

4.2 Automated Decision-Making. obc4d uses automated systems to screen accounts for fraud indicators and to enforce responsible gaming restrictions. Where an automated decision has a significant effect on your account (such as a withdrawal hold or account suspension), you have the right to request human review of that decision by contacting our support team.

obc4d processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are:

• Contract performance — processing that is necessary to create your account, process transactions, and provide the services you have requested under our Terms & Conditions;
• Legal obligation — processing required to comply with our international gaming licence conditions, including KYC verification, anti-money-laundering checks, and record-keeping requirements;
• Legitimate interests — processing for fraud prevention, platform security, and improving our services, provided those interests are not overridden by your rights and freedoms;
• Consent — where we rely on consent (for example, sending promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

6.1 Categories of Recipients. obc4d shares personal data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose:

• Payment processors and local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely for processing your deposits and withdrawals;
• Identity verification service providers — to validate KYC documents as required by our licence;
• Game content studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) — limited session data to operate game rounds and resolve disputes;
• IT infrastructure and cloud hosting providers — who store platform data under binding data processing agreements and strict security standards;
• Fraud detection and cybersecurity vendors — who receive device and session signals to protect member accounts;
• Legal and regulatory authorities — where disclosure is required by our licensing authority, a court order, or applicable law.

6.2 No Sale of Personal Data. obc4d does not sell, rent, licence, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. This commitment is absolute and applies regardless of the value of the data in question.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of obc4d's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer by posting a prominent notice on the platform and, where feasible, by email at least thirty (30) days in advance.

6.4 Aggregate and Anonymised Data. obc4d may share aggregate, anonymised, or de-identified data — which cannot reasonably be used to identify any individual — with analytics partners, industry research bodies, or for public reporting purposes. Such data is not personal data and falls outside the scope of this Policy.

7.1 What We Use. obc4d uses a limited set of cookies and similar technologies to operate the platform effectively. We do not use third-party advertising cookies or cross-site tracking pixels.

7.2 Managing Cookies. You can control or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling functional cookies may affect your experience by resetting display preferences on each visit.

7.3 No Advertising Cookies. obc4d does not deploy advertising networks, retargeting pixels, or social media tracking scripts on any page of the platform. We do not track your activity across other websites for advertising purposes.

obc4d employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• TLS 1.3 encryption for all data in transit between your device and our servers;
• AES-256 encryption at rest for all sensitive personal and financial data stored in our databases;
• Hashed and salted passwords — your account password is never stored in plain text and cannot be retrieved by our support team;
• Two-factor authentication (2FA) available to all members via authenticator app or SMS OTP for an additional layer of account security;
• Role-based access controls — internal staff access to member data is restricted to the minimum necessary for their role and is logged and audited;
• Regular penetration testing conducted by independent security firms to identify and remediate vulnerabilities before they can be exploited;
• Automated anomaly detection that flags unusual login patterns, rapid IP switching, and bulk withdrawal requests for manual review.

8.1 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, obc4d will notify affected members without undue delay and, in any case, within seventy-two (72) hours of becoming aware of the breach. Notifications will be sent to your registered email address and will include a description of the breach, the likely consequences, and the steps we are taking to address it.

8.2 Your Role in Security. While obc4d maintains robust technical safeguards, the security of your account also depends on you. We recommend using a strong, unique password for your obc4d account, enabling 2FA, and never sharing your login credentials with any third party. If you suspect your account has been compromised, contact support at [email protected] immediately.

obc4d retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by our international gaming licence and applicable law. Our standard retention periods are as follows:

Where personal data is no longer required and no legal obligation requires its retention, obc4d securely deletes or anonymises the data in accordance with our internal data disposal procedures.

As a member of obc4d, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our Data Privacy team at [email protected] with the subject line "Data Rights Request — [Your Right]". We will respond within thirty (30) calendar days of receiving a valid request.

10.1 Right to Access. You may request a copy of all personal data obc4d holds about you, along with information about how that data is processed.

10.2 Right to Rectification. If any personal data we hold is inaccurate or incomplete, you may request that we correct it. Minor updates (such as email address changes) can be made directly from your account settings.

10.3 Right to Erasure. You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and no overriding legitimate interest exists. Please note that some data must be retained to meet our legal and licence obligations even after an erasure request.

10.4 Right to Data Portability. You may request a structured, machine-readable export of the personal data you have provided to obc4d, which you can then transfer to another service provider.

10.5 Right to Object to Automated Decisions. Where obc4d has made a decision about your account (such as a fraud flag or withdrawal hold) through automated means, you may request human review of that decision. We will review and respond within five (5) business days for decisions with significant account impact.

obc4d is strictly a platform for adults aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in our KYC process, and we use automated age-estimation tools at registration as an additional screen prior to full KYC review.

If obc4d discovers or is informed that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete all personal data associated with it, and return any deposited funds to the originating payment method. If you believe a minor has registered an account on obc4d, please report this to [email protected] immediately.

Parents and guardians in Indonesia are encouraged to use parental control software to restrict access to online gambling platforms. Resources and guidance are available on our Responsible Gaming page.

The obc4d platform integrates with third-party game studios and payment processors to deliver its core services. While obc4d selects these partners carefully and requires them to maintain data security standards consistent with our own, each third party operates under its own privacy policy. obc4d is not responsible for the privacy practices of third-party studios or payment providers once data is transferred to them for processing.

Third-party partners currently integrated into the obc4d platform include, but are not limited to:

• Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft — these studios receive limited session data to operate game rounds;
• Payment infrastructure: Local Indonesian bank transfer networks and e-wallet platforms including OVO, DANA, GoPay, ShopeePay, and LinkAja — these receive only the financial data necessary to process your specific transaction;
• Cloud and hosting infrastructure: Servers used to host obc4d are operated under binding data processing agreements that restrict use to platform delivery only.

We do not integrate social media login buttons, external advertising networks, or third-party analytics SDKs that would allow those parties to independently track your behaviour on our platform.

As an internationally operated platform, obc4d may process and store personal data on servers located outside Indonesia. Where personal data is transferred to a country that may not provide the same level of data protection as your home jurisdiction, obc4d implements appropriate safeguards to ensure your data remains protected to the standard described in this Policy.

These safeguards include:

• Binding data processing agreements with all third-party processors that contain standard contractual clauses requiring them to protect data to an equivalent standard;
• Technical security measures (encryption in transit and at rest) that apply regardless of where data is stored;
• Restrictions on onward transfers by third-party processors without obc4d's prior written consent.

By using the obc4d platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia for the purposes described in this Policy.

14.1 Right to Amend. obc4d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. All amendments will be published on this page with an updated "Last Updated" date displayed prominently at the top of the document.

14.2 Notification of Material Changes. For any change that materially affects how we collect, use, or share your personal data, obc4d will provide advance notice by email to your registered address at least fourteen (14) days before the change takes effect. For non-material changes (such as minor clarifications of existing practices), we will update the Policy without separate notice.

14.3 Continued Use. Your continued use of the obc4d platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you may close your account by contacting support at [email protected] before the change takes effect.

14.4 Version Archive. obc4d maintains an internal archive of previous versions of this Privacy Policy. If you wish to review a prior version, please submit a written request to [email protected] and we will provide it within ten (10) business days.

obc4d is the data controller for all personal data collected through the platform. If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Privacy team using the details below. All privacy communications should be submitted in English for the fastest possible response.

This Privacy Policy was last reviewed and updated on 1 January 2026. The current version supersedes all previously published versions.