sbc4d Privacy Policy

The following terms, when used in this Privacy Policy, carry the meanings defined below:

The Data Controller responsible for your Personal Data under this Privacy Policy is the internationally incorporated entity operating the sbc4d platform at https://sbc4d.vu. For all privacy-related inquiries, correction requests, or complaints, please contact us using the details in Section 14 of this policy.

Where sbc4d engages third-party Data Processors — for example, payment gateway providers processing Rupiah transfers via BCA, BRI, or OVO; identity verification services conducting KYC checks; or live game studio operators such as Evolution Gaming — those processors are contractually bound to handle your data only as directed by sbc4d and in accordance with applicable data protection standards. sbc4d remains responsible to you for ensuring those processors meet the obligations set out in this policy.

sbc4d collects Personal Data across several categories depending on how you interact with the platform. The table below summarizes the primary categories of data collected:

sbc4d does not collect sensitive categories of Personal Data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless expressly required for mandatory KYC verification, in which case such data is handled with heightened security measures and retained only for the minimum period required by applicable compliance obligations.

sbc4d collects Personal Data through the following channels:

• Direct Submission. Data you provide when registering an account, completing a KYC verification request, contacting customer support, or submitting a deposit or withdrawal instruction.
• Automated Technical Collection. Data collected automatically when you access the sbc4d platform, including IP address, device fingerprint, browser attributes, and session activity logs. This collection occurs via server logs, cookies, and similar technologies described in Section 8.
• Third-Party Sources. Where permitted, sbc4d may receive supplementary identity or fraud-risk information from accredited KYC verification providers, payment processors, and publicly available government records to assist in verifying your identity or detecting fraudulent activity. Any such data is processed in accordance with this policy.
• Customer Support Interactions. Records of your communications with sbc4d via live chat or email, which may contain Personal Data you choose to include in your messages.

sbc4d processes your Personal Data only where a valid lawful basis exists. The lawful bases we rely upon are:

• Contractual Necessity. Processing that is necessary to perform our agreement with you — including operating your account, processing deposits and withdrawals, delivering games, and providing customer support.
• Legal Obligation. Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age and identity verification mandates, and record-keeping requirements imposed by our licensing framework.
• Legitimate Interests. Processing that is necessary for sbc4d's legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your privacy rights.
• Consent. Where we rely on your consent as the lawful basis (for example, sending promotional email communications), you have the right to withdraw that consent at any time by updating your marketing preferences from your account settings or by contacting support.

sbc4d uses the Personal Data we collect for the following purposes:

• Creating and maintaining your sbc4d account, including username assignment and balance management.
• Processing Rupiah deposits via Indonesian local bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and processing withdrawal requests to the same methods.
• Verifying your identity and age (21+) through KYC procedures prior to withdrawal processing or upon reasonable request.
• Delivering the games and services you access on the platform, including sportsbook, live casino, slots, blackjack, and Sakong.
• Communicating with you regarding your account status, transaction confirmations, security alerts, and updates to our policies.
• Sending promotional offers and bonus notifications where you have opted in to receive them; suppressing such communications where you have opted out.
• Monitoring gaming patterns to fulfil our responsible gaming obligations — including identifying players who may be exhibiting signs of problem gambling and offering appropriate support tools.
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multi-accounting, money laundering, and any other prohibited conduct described in our Terms & Conditions.
• Improving platform performance, optimizing the user experience across mobile and desktop browsers on Indonesian networks, and informing product development decisions.
• Complying with any applicable legal, regulatory, or licensing obligation.

sbc4d shares your Personal Data with third parties only in the circumstances set out below:

• Payment Processors. Your financial data (bank account details, e-wallet identifiers, transaction amounts in IDR) is shared with the relevant payment service provider — such as the operator of the BCA, BRI, OVO, or DANA payment integration — solely to process your deposit or withdrawal instruction. These providers operate under their own privacy policies and regulatory obligations.
• KYC & Identity Verification Providers. Where required to complete identity verification, sbc4d shares your Identity Data and supporting documents with accredited third-party KYC service providers operating under a data processing agreement with sbc4d.
• Game Studio Operators. When you play a live dealer game hosted by a third-party studio (such as Evolution Gaming), your username and relevant session data are shared with that studio to enable gameplay. Game studios are contractually prohibited from using this data for any purpose other than delivering the game session.
• Legal and Regulatory Authorities. sbc4d will disclose Personal Data to competent authorities, courts, or regulators where required to do so by law, court order, or as part of a lawful investigation. sbc4d will take reasonable steps to notify affected players of such disclosure where legally permitted to do so.
• Fraud Prevention & Security Services. Anonymized or pseudonymized data may be shared with industry fraud prevention networks to protect sbc4d and other operators from coordinated fraud, bonus abuse, and money laundering schemes.
• Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of sbc4d's assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Affected players will be notified in advance via their registered email address.

The sbc4d platform uses cookies and similar tracking technologies to provide core functionality, maintain session state, and gather anonymized analytics data. The following cookie categories are in use:

You may manage non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or transacting on the sbc4d platform. Detailed browser cookie management instructions are available from your browser provider's help documentation.

sbc4d retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention principles apply:

• Active Accounts. Personal Data associated with active sbc4d accounts is retained for the lifetime of the account plus a minimum of five (5) years following account closure, in line with standard anti-money laundering record-keeping requirements.
• KYC Documents. Identity documents submitted for verification purposes are retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
• Transaction Records. Records of all Rupiah deposits and withdrawals are retained for a minimum of five (5) years from the date of each transaction.
• Support Communications. Chat logs and email correspondence are retained for a minimum of two (2) years from the date of the last interaction.
• Marketing Data. Where you have opted in to marketing communications, your email address and marketing preferences are retained until you withdraw consent. Upon opt-out, your address is moved to a suppression list to ensure no further marketing is sent.
• Technical & Analytics Data. Anonymized analytics data may be retained indefinitely as it contains no personally identifiable information. Raw server logs containing IP addresses are retained for a maximum of ninety (90) days.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized such that it can no longer be associated with an identified individual.

sbc4d employs a multi-layered technical and organizational security framework to protect your Personal Data against unauthorized access, loss, alteration, or disclosure. Key security measures include:

• 256-bit TLS Encryption. All data in transit between your device and sbc4d servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This applies to all platform pages, login processes, and payment flows.
• Password Hashing. Account passwords are never stored in plaintext. They are stored as salted cryptographic hashes using industry-standard algorithms. sbc4d staff cannot read your password; only you know it.
• Access Controls. Access to Personal Data within sbc4d's systems is restricted to personnel who require it to perform their job functions, under a strict principle of least privilege. All internal access is logged and audited.
• Regular Security Audits. The sbc4d platform undergoes independent security assessments on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response. In the event of a Personal Data breach that presents a material risk to affected players, sbc4d will notify affected individuals without undue delay, providing details of the breach, the data affected, and the steps being taken to mitigate harm.

While sbc4d employs robust security controls, no digital system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying sbc4d immediately if you suspect unauthorized access to your account.

As a player on the sbc4d platform, you hold the following rights in respect of your Personal Data. These rights may be exercised at any time by contacting sbc4d support through the channels listed in Section 14:

sbc4d will respond to all valid rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further sixty (60) days, with written notice provided to you within the initial thirty-day period explaining the reason for the extension.

Please note that certain rights are subject to limitations where sbc4d is required to retain or process data to fulfil a legal obligation or to defend against a legal claim. In such cases, sbc4d will explain the specific limitation that applies to your request.

The sbc4d platform is strictly for adults aged 21 and above. sbc4d does not knowingly collect Personal Data from persons under the age of 21. Age verification is a mandatory step in the sbc4d account lifecycle: players may be required to submit documentary evidence of age at registration or at any subsequent point during account operation.

If sbc4d becomes aware that Personal Data has been collected from a person under the age of 21, the relevant account will be suspended immediately and all associated data will be deleted from our active systems without delay, subject only to any mandatory legal retention obligations that apply to the relevant transaction records.

If you are a parent or guardian and believe that your child under 21 has registered an account on sbc4d, please contact us immediately at [email protected] (plain text — not a clickable link). We will investigate and close the account promptly.

sbc4d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, sbc4d will notify registered players via the email address on file and/or by displaying a prominent notice on the platform for a period of not less than seven (7) days prior to the revised policy taking effect.

The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed about how sbc4d handles your Personal Data. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

For all privacy-related inquiries, data rights requests, or complaints regarding sbc4d's handling of your Personal Data, please contact our support team through the following channels:

• Live Chat: Available 24/7 through the sbc4d platform after logging in to your account. Indonesian-speaking agents are available at all hours (WIB, UTC+7) and can escalate privacy requests to the appropriate internal team.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line and provide your registered username and a clear description of your request or complaint.

sbc4d aims to acknowledge all privacy-related communications within 24 hours (WIB) and to provide a substantive response within thirty (30) calendar days. Where your complaint concerns our use of data for direct marketing, we will process opt-out requests immediately upon receipt.

If you are not satisfied with sbc4d's response to a privacy complaint, you retain the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction.