How pan4d Protects Your Personal Data
256-Bit SSL Encryption
Every data transmission between your device and the pan4d platform is protected by industry-standard 256-bit SSL encryption — the same technology used by major international banks.
No Data Sales
pan4d does not sell, rent, or trade your personal data to third-party marketing companies under any circumstances. Your information belongs to you.
Purpose-Limited Collection
We collect only the data that is strictly necessary to operate your account, process payments, verify your identity, and keep the platform secure and fair.
Your Rights, Respected
You have the right to access, correct, port, and request deletion of your personal data. Requests are handled within 30 calendar days of receipt.
Transparent Cookie Use
We use cookies solely to maintain session security, remember your preferences, and improve platform performance. No cross-site tracking cookies are deployed.
Secure Payment Data
Bank details and e-wallet information (BCA, BRI, OVO, DANA) are tokenised and never stored as plain-text values. Payment processing is handled by PCI-compliant partners.
Introduction and Scope
This Privacy Policy applies to all personal data collected by pan4d through the pan4d website at https://pan4d.pro (the "Platform"), its mobile-optimised interface, customer support channels, and any other service or communication channel operated under the pan4d brand.
By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to close your account.
This Policy should be read alongside the pan4d Terms & Conditions, which govern the overall terms of your use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.
Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, including name, national identity number, email address, IP address, and payment details. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion. |
| "Data Subject" | The individual to whom the personal data relates — in most cases, this is you, the registered Member. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — pan4d in the context of this Policy. |
| "Data Processor" | A third party that processes personal data on behalf of pan4d under contractual obligations and subject to pan4d's instructions. |
| "KYC" | Know Your Customer — the identity and age verification process required before certain account actions (e.g., withdrawals) can be processed. |
| "Cookies" | Small text files placed on your device by the Platform to maintain session state, remember preferences, and support analytics. |
Personal Data We Collect
pan4d collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and — in limited circumstances — from verified third-party sources for KYC and fraud-prevention purposes.
The categories of personal data we collect are summarised in the table below:
| Category | Specific Data Points | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, national identity card number (KTP), passport number, gender | Registration form; KYC document upload |
| Contact Data | Email address, mobile phone number, residential address (city, province, postal code) | Registration form; account settings |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction history | Payment setup; transaction processing |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Automatically via Platform logs and cookies |
| Usage Data | Pages visited, games played, bet history, bonus redemptions, session duration, click-path data | Automatically via Platform analytics |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Customer support interactions |
| KYC Documents | Scanned copies or photographs of government-issued identity documents, proof-of-address documents, and payment method screenshots | KYC document upload portal |
How and Why We Use Your Data
pan4d processes your personal data only where there is a clear, legitimate purpose and a valid legal basis for doing so. The table below maps each processing activity to its purpose and legal basis:
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account creation and management | To register your account, verify your identity, and maintain your Member profile | Contract performance |
| Payment processing | To facilitate deposits and withdrawals via local Indonesian banks and e-wallets | Contract performance |
| KYC and age verification | To confirm that you are aged 21 or above and are who you claim to be | Legal obligation; legitimate interest |
| Fraud detection and security | To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised access | Legitimate interest; legal obligation |
| Customer support | To respond to your enquiries, resolve disputes, and maintain support records | Contract performance; legitimate interest |
| Responsible gaming monitoring | To identify problematic gambling patterns and apply account limits or restrictions where required | Legitimate interest; legal obligation |
| Platform improvement | To analyse usage patterns and improve the design, functionality, and game offering of the Platform | Legitimate interest |
| Marketing communications | To send you promotional emails and bonus offers that may interest you | Consent (opt-in only; withdrawable at any time) |
We do not use your personal data for automated decision-making processes that produce legal or similarly significant effects on you without human oversight. Where algorithmic tools are used (e.g., for fraud scoring), a human compliance officer reviews any outcome before action is taken against your account.
Data Sharing and Third Parties
pan4d does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle it securely and in accordance with our instructions:
- Payment Processors: We share the financial data necessary to execute your deposit and withdrawal transactions with our partnered payment processing institutions, including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
- Identity Verification Providers: We work with third-party KYC service providers who assist in verifying the authenticity of identity documents submitted during the verification process.
- Game Content Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe may receive a session token and limited account data (e.g., player ID, currency, balance) necessary to deliver their games within the Platform. They do not receive your full identity or payment details.
- Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to help us understand Platform performance and user behaviour. No personally identifiable information is included in these data sets.
- Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable Indonesian law or by a valid legal order from a competent authority.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of pan4d's business, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.
Cookies and Tracking Technologies
The pan4d Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to gather anonymised data that helps us improve the user experience. By continuing to use the Platform after being informed of our cookie use, you consent to cookies being placed on your device.
The cookies deployed on the Platform fall into the following categories:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Maintain your login session, prevent cross-site request forgery (CSRF), and ensure basic Platform security. Cannot be disabled without breaking core functionality. | Session / up to 24 hours | |
| Remember your language preferences, display settings, and recent game history so you do not have to reconfigure the Platform on each visit. | 30 days | |
| Collect anonymised data about pages visited, time spent on each section, and navigation paths. This data is aggregated and never linked to your personal identity. | 90 days |
pan4d does not use advertising cookies, retargeting cookies, or any cross-site tracking technology that follows your activity on websites other than pan4d.pro. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair your ability to log in or use core Platform features.
Data Retention
pan4d retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years after closure | Legal and regulatory compliance; dispute resolution |
| Financial Transaction Data | 7 years from transaction date | Anti-money laundering obligations; tax record requirements |
| KYC Documents | Duration of account + 5 years after closure | Regulatory compliance; potential re-verification requirements |
| Communications and Support Records | 3 years from last interaction | Dispute resolution; service quality improvement |
| Technical and Usage Data (logs) | 13 months from collection | Security monitoring; fraud detection |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Evidence of lawful marketing basis |
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.
Your Data Rights
As a Data Subject, you hold the following rights with respect to your personal data held by pan4d. To exercise any of these rights, please contact our support team using the email address provided in the Contact section of this Policy.
- Right of Access: You may request a copy of all personal data pan4d holds about you, along with information on how it is processed. We will provide this within 30 calendar days of a valid request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., phone number updates) can be made directly from your account settings.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that we may be required to retain certain data for legal or regulatory reasons even where an erasure request is made.
- Right to Restriction of Processing: You may ask pan4d to restrict how it uses your data in certain circumstances — for example, while a rectification request is being assessed.
- Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that your personal data be provided to you in a structured, machine-readable format (e.g., CSV or JSON).
- Right to Object: You have the right to object to processing carried out on the basis of legitimate interest — including for direct marketing purposes. Where you object to marketing, we will cease all marketing communications immediately.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
Data Security
pan4d implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:
- Encryption in Transit: All data transmitted between your browser and the pan4d Platform is encrypted using TLS 1.2 or higher (256-bit SSL). This ensures that intercepted traffic cannot be read by third parties.
- Encryption at Rest: Sensitive data fields — including financial account details and KYC document files — are encrypted at the storage layer using AES-256 encryption.
- Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted only the minimum access permissions required to perform their role. All internal access is logged and audited.
- Penetration Testing: The Platform undergoes regular independent security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: pan4d maintains a documented data breach response procedure. In the event of a confirmed breach that poses a risk to your rights and freedoms, we will notify affected Members within 72 hours of becoming aware of the incident, in accordance with applicable notification obligations.
- Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts for an additional layer of login security, available from account settings at no cost.
While pan4d takes all reasonable precautions to protect your data, no online system is entirely immune to security risks. You are responsible for keeping your account credentials confidential and for using a strong, unique password. If you suspect your account has been compromised, contact our support team immediately.
Children and Minors
The pan4d Platform is strictly restricted to individuals aged 21 and above. pan4d does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory component of the registration process, and additional documentary verification may be requested at any time.
International Data Transfers
pan4d's primary infrastructure and the majority of its data processing operations are conducted in jurisdictions that maintain adequate data protection standards. In limited cases — for example, when a third-party game studio or analytics provider is based in a different jurisdiction — your data may be processed outside Indonesia.
Whenever personal data is transferred internationally, pan4d ensures that appropriate safeguards are in place, which may include:
- Standard contractual clauses (SCCs) or equivalent data transfer agreements with the receiving entity.
- Processing only with third parties in jurisdictions that maintain a level of data protection broadly equivalent to international standards.
- Ensuring that any third-party data processor is contractually obligated to apply security measures consistent with pan4d's own standards.
You may request further details about the specific safeguards applied to any international transfer of your personal data by contacting us at the email address in the Contact section.
Marketing and Communications
pan4d will only send you promotional communications — including bonus offers, event notifications, and seasonal promotions related to Indonesian cultural events such as Idul Fitri, Ramadhan, and Indonesian Independence Day — where you have explicitly opted in to receive such communications during registration or through your account settings.
You may withdraw your marketing consent at any time by:
- Clicking the "Unsubscribe" link included at the bottom of every promotional email.
- Updating your communication preferences from your account settings dashboard.
- Contacting our support team and requesting removal from all marketing lists.
Withdrawal of marketing consent does not affect transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, security alerts, and account activity notifications — which are necessary for the operation of your account and will continue regardless of your marketing preferences.
Changes to This Privacy Policy
pan4d reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, operational practices, or Platform features. The revised Policy will be published on this page with an updated "Last Updated" date. Where changes are material — for example, a new category of data being collected or a new third-party sharing arrangement — pan4d will make reasonable efforts to notify registered Members via email or an in-platform notification prior to the change taking effect.
Your continued use of the Platform after any such amendment constitutes your acceptance of the updated Privacy Policy. We recommend bookmarking this page and reviewing it periodically to stay informed of how pan4d handles your personal data.
Contact and Data Rights Requests
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact pan4d using the details below. All contact information is displayed as plain text and is not a clickable link.
📋 Subject Line: Please include "Privacy Request — [Your Request Type]" in the subject line of your email (e.g., "Privacy Request — Data Access", "Privacy Request — Data Deletion").
🕐 Response Time: Acknowledgement within 2 business days; substantive response within 30 calendar days of a valid, verified request.
💬 Live Chat: Available 24/7 on every page of the Platform for general privacy questions and triage — our team will escalate formal data rights requests to the appropriate team.
🌏 Languages: Support is available in English and with native Indonesian-speaking agents.
For matters relating to the Terms & Conditions governing your account, please visit our Terms & Conditions page. For information on responsible gaming tools and self-exclusion, please visit our Responsible Gaming page.