Privacy Policy

The following definitions apply throughout this Privacy Policy. Where a term is capitalised but not defined here, it carries the meaning assigned in hud4d's Terms & Conditions.

hud4d operates as the Data Controller for all Personal Data collected through the Platform. As Controller, hud4d is responsible for ensuring that Personal Data is Processed lawfully, fairly, and transparently in accordance with applicable international data protection standards and the privacy expectations of our Indonesian Member base.

If you have any questions about how your Personal Data is handled, or if you wish to exercise any of the rights described in Section 10 of this Policy, please contact our dedicated Data Protection team using the contact details in Section 15.

hud4d collects the following categories of Personal Data, limited strictly to what is necessary for the purposes described in Section 5:

hud4d does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond the identity photograph required for KYC verification.

hud4d collects Personal Data through the following methods:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting Support via live chat or email, or responding to a promotional survey.
• Automated collection: Technical Data and Usage Data are collected automatically via server logs, session tracking, and first-party analytics tools when you browse or interact with the Platform. This collection begins when you first visit https://hud4d.bio, whether or not you are logged in.
• Cookies and local storage: The Platform uses Cookies and similar technologies as described in Section 8 to manage sessions, remember preferences, and analyse usage patterns. You can manage Cookie preferences through your browser settings.
• Third-party processors: When you initiate a payment through a local Indonesian bank or e-wallet, the relevant Processor (e.g., BCA, OVO, GoPay) may share transaction confirmation data with hud4d to reconcile your deposit or withdrawal. hud4d does not receive your full bank account password or e-wallet PIN through this process.
• KYC verification providers: Where hud4d uses a third-party identity verification service to assist with KYC checks, that service processes your identity document and photograph on hud4d's behalf under a data-processing agreement and does not retain your data beyond the verification lifecycle.

hud4d Processes Personal Data only for specified, explicit, and legitimate purposes. The table below maps each Processing activity to its purpose and the legal basis on which hud4d relies:

hud4d does not sell or rent Personal Data to any third party. We share Personal Data only in the following limited and controlled circumstances:

• Payment processors: Financial Data is shared with the relevant local Indonesian bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) to the minimum extent necessary to process a specific deposit or withdrawal transaction.
• KYC verification providers: Identity Data — including KTP document images and selfie photographs — is shared with hud4d's contracted KYC verification Processor solely for the purpose of completing identity and age verification. These Processors operate under binding data-processing agreements and may not use the data for any other purpose.
• Game studios: Where a Member plays a live casino game hosted by a third-party studio (such as Evolution Gaming or Pragmatic Play Live), the studio's platform receives the minimum session data necessary to operate the game stream. Game studios do not receive your full identity profile.
• Analytics providers: Anonymised and aggregated Usage Data and Technical Data may be shared with analytics service providers to support Platform performance monitoring. No personally identifiable information is included in these data sets.
• Legal authorities: hud4d may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by a valid legal order, warrant, or regulatory directive. hud4d will notify the affected Member of such disclosure to the extent permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of hud4d's assets, Member Personal Data may be transferred to the acquiring entity, subject to that entity assuming the same obligations set out in this Privacy Policy. Members will be notified of any such transfer before it takes effect.

hud4d retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory obligations. The following retention periods apply:

Once the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymised using industry-standard data sanitisation procedures. Anonymised data may be retained indefinitely for statistical and research purposes, as it no longer constitutes Personal Data.

The hud4d Platform uses the following categories of Cookies and similar local-storage technologies:

• Strictly necessary Cookies: These are essential for the Platform to function correctly. They manage your login session, maintain your game state, protect against cross-site request forgery (CSRF), and ensure secure navigation between pages. These Cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics Cookies: These Cookies collect anonymised data about how Members interact with the Platform — which pages are visited most frequently, where errors occur, and how long sessions last. The data is used solely to improve Platform performance. No personally identifiable information is included.
• Functionality Cookies: These Cookies remember your preferences — such as your preferred game lobby filter or language setting — to personalise your experience. Disabling these Cookies may result in a less personalised browsing experience but will not prevent you from using the Platform.
• Security Cookies: Short-lived Cookies used to detect and mitigate fraudulent activity, including abnormal login patterns, rapid IP switching, and automated bot behaviour.

hud4d does not use third-party advertising Cookies or cross-site tracking Cookies. The Platform does not serve behavioural advertising based on your browsing activity outside of hud4d.

You can manage Cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete Cookies, restrict third-party Cookies, and receive notifications when a Cookie is set. Please note that blocking strictly necessary Cookies will prevent you from logging in to your Account.

hud4d implements a comprehensive, layered approach to data security. The following technical and organisational measures are in place to protect your Personal Data against unauthorised access, loss, alteration, or disclosure:

• Encryption in transit: All data exchanged between your browser or device and the hud4d Platform is encrypted using TLS 1.3 with a 256-bit SSL certificate. The Platform enforces HTTPS on every page; plain HTTP requests are automatically redirected.
• Encryption at rest: Sensitive data fields — including passwords (stored as bcrypt hashes), financial identifiers, and KYC document metadata — are encrypted at rest using AES-256 encryption on hud4d's database infrastructure.
• Access controls: Access to Member Personal Data within hud4d's internal systems is restricted on a strict need-to-know basis. All staff who handle Personal Data are subject to confidentiality obligations and receive regular data protection training.
• Payment data isolation: hud4d does not store full bank account numbers, e-wallet PINs, or payment card data directly on its servers. Financial transactions are routed through PCI-DSS-compliant payment processors. Only tokenised payment references are stored on the hud4d Platform.
• Intrusion detection: hud4d operates continuous automated monitoring for anomalous network activity, brute-force login attempts, and SQL injection patterns. Security alerts are reviewed by a dedicated operations team 24 hours a day.
• Data breach response: In the event of a confirmed Personal Data breach that poses a risk to Members, hud4d will notify affected Members by email within 72 hours of becoming aware of the breach, describing the nature of the breach, the categories of data affected, and the remediation steps taken.
• Penetration testing: The Platform undergoes independent penetration testing on at least an annual basis, and any high or critical severity findings are remediated within 14 days of the test report being issued.

As a Member of hud4d, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact our Data Protection team as described in Section 15. All requests are free of charge and will be responded to within 30 calendar days:

• Right of access: You have the right to request a copy of all Personal Data hud4d holds about you, along with information about how it is Processed, where it is stored, and with whom it has been shared.
• Right to rectification: If any Personal Data held by hud4d is inaccurate or incomplete, you have the right to request that it be corrected. Identity Data corrections may require re-submission of KYC documents to verify the updated information.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully Processed. This right is subject to overriding legal retention obligations — for example, financial transaction records required for AML compliance cannot be deleted within the mandatory retention period.
• Right to restriction of Processing: You have the right to request that hud4d restrict the Processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is being contested, or where you object to Processing based on legitimate interest pending verification of whether hud4d's grounds override yours.
• Right to data portability: Where Processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format (JSON or CSV) and to transmit that data to another controller.
• Right to object: You have the right to object at any time to Processing of your Personal Data where hud4d relies on legitimate interest as its legal basis. You may also object to processing for direct marketing purposes at any time, without needing to provide a reason.
• Right to withdraw consent: Where Processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing carried out before withdrawal.

The hud4d Platform is strictly intended for adults aged 21 and above. hud4d does not knowingly collect Personal Data from any individual under the age of 21. Age verification is a mandatory step in the Account registration and KYC processes.

If hud4d becomes aware — through KYC verification, Support contact, or any other means — that Personal Data has been collected from a person under 21 years of age, the following actions will be taken immediately:

• The Account will be suspended pending investigation.
• All Personal Data associated with the Account will be permanently deleted from hud4d's active systems within 5 business days of confirmation.
• Any balance remaining in the Account will be returned to the payment method from which the deposit originated, after deducting any bonus amounts that were not eligible for withdrawal.
• A record of the incident will be retained in hud4d's compliance logs for audit purposes, using only the minimum data necessary to document the case.

If you believe that a person under 21 has registered an Account on the hud4d Platform, please contact Support immediately via live chat so that the Account can be investigated and closed without delay.

The hud4d Platform integrates with a number of third-party service providers to deliver its full range of features. Each of these providers operates under its own privacy policy and data-processing terms. hud4d selects Processors that meet rigorous data-protection standards and binds them contractually to protect Member data. Key third-party service categories include:

• Game content studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe supply the game software and, in the case of live casino products, host the game streams. These studios receive session data necessary to operate the game but do not have access to your full hud4d Member profile.
• Payment infrastructure: Local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process financial transactions on behalf of hud4d Members. These entities are subject to their own regulatory obligations under Indonesian banking law.
• Identity verification: hud4d's KYC partner processes identity documents and facial-recognition data solely for the purpose of age and identity verification. No biometric templates are retained after the verification decision is reached.
• Infrastructure and hosting: hud4d's Platform is hosted on enterprise-grade cloud infrastructure with ISO 27001-certified data centres. The hosting provider does not have access to Member application data.

The hud4d Platform does not embed social media plugins, third-party chat widgets, or external advertising scripts that would enable third parties to collect Personal Data from Members without their knowledge.

hud4d is an internationally licensed platform and, as a result, some of your Personal Data may be transferred to and stored on servers located outside of Indonesia. When such transfers occur, hud4d ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that described in this Privacy Policy:

• Transfers to countries with an internationally recognised adequate level of data protection are made on the basis of that adequacy determination.
• Transfers to countries without such a determination are made subject to binding standard contractual clauses (SCCs) or equivalent data transfer mechanisms that impose equivalent data protection obligations on the recipient.
• hud4d does not transfer KYC identity documents to jurisdictions where the applicable legal environment would prevent Members from effectively exercising the data rights described in Section 10.

hud4d reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or Platform features. When material changes are made, hud4d will:

• Post a prominently dated revised version of this Privacy Policy on the Platform, clearly indicating the new effective date at the top of the page.
• Send an email notification to the registered email address on file for all active Members, summarising the nature of the changes in plain English.
• Where a change involves a new use of Personal Data that requires fresh consent, request that consent explicitly before implementing the new Processing activity.

Continued use of the Platform after the effective date of an amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the amended Policy, you must cease using the Platform and request Account closure before the amendment's effective date. Closing your Account does not affect hud4d's right to retain data for the periods required by legal obligation as described in Section 7.

For non-material changes — such as clarifications of existing language, typographical corrections, or updates to contact details — hud4d may update the Policy without sending individual email notifications, but the updated effective date will always be clearly displayed at the top of the Policy page.

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 10, or wish to lodge a complaint about hud4d's data-handling practices, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Platform at https://hud4d.bio. Live chat is the fastest channel for data rights requests — responses are typically provided within 90 seconds, with requests formally acknowledged within 3 business days.
• Email: [email protected] (plain text — not a clickable link). For data rights requests sent by email, please include "Data Rights Request" in the subject line and provide your registered Account username to help us locate your records promptly.

When submitting a data rights request, please provide your full name as registered on your hud4d Account, your registered email address, and a description of the right you wish to exercise. This information allows hud4d to verify your identity before disclosing, modifying, or deleting any Personal Data — a necessary step to prevent unauthorised access to your data by third parties.

hud4d's support agents are native Indonesian speakers and are fully equipped to handle privacy and data protection inquiries in a professional, empathetic, and tim ely manner, even as our Platform content is presented in English.