1.1 Information You Provide to Us
When you register for a tora4d Account, we collect personal information that you voluntarily provide, including:
- Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP, SIM, or passport number)
- Contact Information: Email address, mobile phone number, and residential address (street address, city, postal code, province)
- Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery
- Financial Information: Bank account details (account number, account holder name, bank name, branch), e-wallet account identifiers (OVO, DANA, GoPay phone numbers), and transaction history
- Verification Documents: Copies of government-issued ID cards, proof of address documents (utility bills, bank statements), and payment method verification documents (bank statements, screenshots)
- Communication Data: Information you provide when contacting customer support, including chat transcripts, email correspondence, and WhatsApp messages
1.2 Information Collected Automatically
When you access and use the tora4d platform, we automatically collect certain technical and usage information:
- Device Information: Device type, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information
- Connection Data: IP address, internet service provider (ISP), connection timestamps, geographic location (country, region, city derived from IP address)
- Usage Data: Pages visited, features accessed, time spent on pages, navigation paths, games played, bets placed, deposit and withdrawal activity, click patterns, and session duration
- Performance Data: Page load times, error reports, crashes, and technical issues encountered
1.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Payment Providers: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay)
- Identity Verification Services: Results from third-party KYC and age verification checks
- Fraud Prevention Services: Risk assessment data and fraud detection alerts from security partners
- Game Providers: Gameplay data, bet history, and game outcomes from third-party software providers (Pragmatic Play, Evolution Gaming, etc.)
2. How We Use Your Information
2.1 Service Provision and Account Management
tora4d uses your personal information to provide, maintain, and improve our betting platform services:
- Create and manage your user Account
- Process your identity verification (KYC) to comply with regulatory requirements and prevent underage gambling
- Authenticate your login and maintain account security
- Process deposits, withdrawals, and internal fund transfers
- Record and settle bets, calculate winnings, and update account balances
- Provide customer support and respond to your inquiries
- Enable participation in promotions, bonuses, and loyalty programs
- Send transactional notifications (deposit confirmations, withdrawal approvals, bet settlements, bonus credits)
2.2 Security and Fraud Prevention
We process your data to maintain platform security and protect against fraudulent activity:
- Detect and prevent fraud, money laundering, identity theft, and unauthorized account access
- Monitor for suspicious betting patterns, collusion, and bonus abuse
- Enforce our Terms and Conditions and prevent prohibited activities
- Conduct security audits and risk assessments
- Comply with anti-money laundering (AML) regulations and maintain transaction records
- Investigate disputes, claims, and potential policy violations
2.3 Legal Compliance and Regulatory Obligations
tora4d may process your personal data to fulfill legal and regulatory requirements:
- Verify your age (21+ requirement) and identity to prevent underage gambling
- Maintain records required by gaming regulators and licensing authorities
- Respond to legal requests from law enforcement, government agencies, or courts
- Enforce our legal rights and defend against claims or litigation
- Comply with tax reporting obligations and financial regulations
2.4 Service Improvement and Analytics
We analyze usage data to enhance user experience and optimize platform performance:
- Understand how users interact with our platform and identify popular features
- Diagnose technical issues and improve system stability
- Conduct A/B testing to evaluate new features and interface changes
- Generate aggregated statistical reports and business intelligence (all personally identifiable information is removed from analytics data)
2.5 Marketing and Communications (With Your Consent)
With your explicit consent, we may use your contact information for marketing purposes:
- Send promotional offers, bonus announcements, and exclusive deals via email or SMS
- Notify you about new games, features, and platform updates
- Invite you to participate in tournaments, competitions, and special events
- Provide personalized recommendations based on your betting preferences
You can opt out of marketing communications at any time by updating your preferences in Account settings or clicking the unsubscribe link in promotional emails. Opting out will not affect transactional notifications, which are necessary for service provision.
3. Data Sharing and Disclosure
3.1 Service Providers and Business Partners
tora4d shares your personal information with trusted third-party service providers who assist in operating our platform:
- Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process deposits and withdrawals on our behalf
- Game Providers: Software developers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) receive necessary data to deliver game content and record gameplay
- KYC Verification Services: Third-party identity verification vendors process your documents to confirm your age and identity
- Cloud Hosting Providers: Infrastructure partners host our servers and store encrypted data securely
- Customer Support Tools: Live chat and helpdesk software providers facilitate support communications
- Security and Fraud Prevention: Anti-fraud services analyze transaction patterns to detect suspicious activity
All service providers are contractually bound to protect your data, use it only for specified purposes, and comply with applicable data protection laws. We do not allow service providers to use your personal information for their own marketing purposes.
3.2 Legal and Regulatory Disclosure
tora4d may disclose your personal information when required by law or to protect our legal rights:
- In response to valid legal requests from law enforcement, government authorities, or courts
- To comply with gaming regulations, licensing requirements, or tax obligations
- To enforce our Terms and Conditions or investigate policy violations
- To protect the rights, property, or safety of tora4d, our users, or the public
- In connection with a corporate transaction (merger, acquisition, asset sale), subject to the acquirer's agreement to honor this Privacy Policy
3.3 What We Do Not Do
tora4d commits to the following data protection practices:
- We do not sell your personal information to third parties for monetary compensation
- We do not rent or lease customer lists to external marketing companies
- We do not share your data with social media platforms for cross-platform advertising without your explicit consent
- We do not use your information for purposes incompatible with those disclosed in this policy
4. Data Security Measures
4.1 Technical Security Controls
tora4d implements industry-standard technical safeguards to protect your personal information:
- 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology, the same standard used by banks and financial institutions
- Encrypted Data Storage: Sensitive information (passwords, financial data, ID documents) is stored in encrypted form using AES-256 encryption
- Secure Server Infrastructure: Our servers are located in secure data centers with physical access controls, fire suppression systems, and 24/7 monitoring
- Firewall Protection: Network firewalls filter incoming traffic and block unauthorized access attempts
- Intrusion Detection Systems: Automated monitoring detects and alerts us to potential security breaches in real-time
- Regular Security Audits: Independent security firms conduct periodic vulnerability assessments and penetration testing
4.2 Organizational Security Practices
In addition to technical controls, we maintain organizational policies to protect your data:
- Access to personal data is restricted to authorized employees and contractors on a need-to-know basis
- All staff with data access undergo background checks and sign confidentiality agreements
- Employee training programs cover data protection principles and security best practices
- Multi-factor authentication is required for administrative access to sensitive systems
- Data breach response procedures are documented and regularly tested
4.3 Your Role in Security
While we implement robust security measures, protecting your Account also requires your cooperation:
- Choose a strong, unique password that combines letters, numbers, and symbols
- Never share your password, even with customer support agents (legitimate tora4d staff will never ask for your password)
- Log out after each session, especially on shared or public devices
- Keep your email account secure, as it can be used for password recovery
- Be cautious of phishing emails or messages claiming to be from tora4d—verify authenticity before clicking links
- Contact support immediately if you notice unauthorized activity on your Account
4.4 Data Breach Notification
In the unlikely event of a data breach that compromises your personal information, tora4d will:
- Investigate the breach promptly and take immediate steps to contain and mitigate impact
- Notify affected users via email within 72 hours of discovering the breach
- Provide details about what information was compromised and what steps we are taking
- Offer guidance on protective measures you can take (password reset, fraud monitoring)
- Report the breach to relevant data protection authorities as required by law
5. Data Retention and Storage
5.1 Retention Periods
tora4d retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations:
- Active Accounts: While your Account remains active, we retain all associated data to provide continuous service
- Closed Accounts: After account closure, we retain core data (identity verification, transaction history) for 6 years to comply with financial regulations, anti-money laundering laws, and potential dispute resolution
- Marketing Data: If you opt out of marketing communications, we retain minimal data (email address, opt-out status) to honor your preference and prevent future contact
- Legal Holds: If your data is subject to legal proceedings, investigations, or regulatory requests, we will retain it until the matter is resolved, even if this exceeds standard retention periods
5.2 Data Deletion
After retention periods expire, we securely delete or anonymize your personal information:
- Deletion processes use industry-standard methods to ensure data cannot be recovered
- Aggregated, anonymized data (with all personally identifiable information removed) may be retained indefinitely for statistical analysis and business intelligence
- Backup copies in disaster recovery systems are deleted according to backup rotation schedules (typically within 90 days after primary deletion)
5.3 Data Storage Locations
Your personal data is stored on secure servers located in jurisdictions with strong data protection laws. Data may be transferred internationally to service providers in countries with adequate data protection standards. All international transfers are protected by appropriate safeguards (contractual clauses, encryption) to ensure your data remains secure.
6. Your Privacy Rights
6.1 Access and Portability
You have the right to access your personal data held by tora4d. To request a copy of your data:
- Log in to your Account and navigate to Account Settings > Privacy to download your account data
- Contact customer support to request a comprehensive data report (we will verify your identity and provide the report within 30 days)
- You may request data in portable format (CSV, JSON) to transfer to another service
6.2 Correction and Update
If your personal information is inaccurate or outdated, you can:
- Update your contact information, address, and communication preferences directly in Account Settings
- Contact support to correct identity information, financial details, or documents (verification may be required)
6.3 Deletion and Erasure
You may request deletion of your personal data under certain circumstances:
- Your data is no longer necessary for the purposes for which it was collected
- You withdraw consent for data processing (where consent is the legal basis)
- You object to processing and there are no overriding legitimate grounds for continued processing
Please note that we may be unable to delete data if retention is required by law (e.g., financial records, AML compliance) or necessary to defend legal claims. Deletion requests are processed within 30 days.
6.4 Objection and Restriction
You have the right to:
- Object to processing of your personal data for marketing purposes (opt out at any time)
- Request restriction of processing while we investigate a dispute about data accuracy or lawfulness
- Object to automated decision-making or profiling that produces legal effects (we will provide human review upon request)
6.5 Exercising Your Rights
To exercise any of these rights, contact us at:
- Email: [email protected] (Response time: 6-12 hours)
- Live Chat: Available 24/7 through the website
We will verify your identity before processing requests to protect against unauthorized access. Verification may require submission of ID documents or answering security questions.
7. Cookies and Tracking Technologies
7.1 What Are Cookies
Cookies are small text files stored on your device when you visit websites. tora4d uses cookies and similar technologies (web beacons, pixels, local storage) to enhance user experience, analyze site usage, and remember your preferences.
7.2 Types of Cookies We Use
- Essential Cookies: Required for basic platform functionality (login authentication, session management, security). These cannot be disabled without affecting service availability.
- Performance Cookies: Collect anonymous data about how users interact with the platform (page views, click paths, load times) to improve performance and identify issues.
- Functionality Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience.
- Targeting/Advertising Cookies: Track your activity across sites to deliver relevant promotional content (only used with your consent).
7.3 Managing Cookie Preferences
You can control cookie settings through your browser or our Cookie Consent Manager:
- Most browsers allow you to block or delete cookies through privacy settings
- Our Cookie Consent Manager (accessible in Account Settings > Privacy) lets you accept or reject non-essential cookies
- Blocking essential cookies may limit platform functionality
8. Third-Party Services
8.1 Game Provider Privacy Policies
When you play games on tora4d, you interact with third-party software providers (Pragmatic Play, Evolution Gaming, NetEnt, etc.). Each provider has its own privacy policy governing data collected during gameplay. We encourage you to review their policies. tora4d is not responsible for third-party data practices.
8.2 Payment Provider Privacy
When you deposit or withdraw funds, you interact directly with your bank or e-wallet provider. These transactions are subject to the provider's privacy policy and security measures. tora4d receives only confirmation data necessary to credit your Account or process payouts.
8.3 External Links
Our platform may contain links to external websites (game provider sites, responsible gaming resources). tora4d is not responsible for the privacy practices or content of these external sites. We recommend reviewing their privacy policies before providing personal information.
9. Children's Privacy
tora4d is intended solely for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. Our KYC verification process is designed to prevent underage registration.
If we discover that we have inadvertently collected data from a person under 21, we will:
- Delete the Account immediately
- Erase all associated personal data from our systems
- Refund any deposited funds to the payment method used (subject to verification of parental consent)
Parents or guardians who believe their child has registered on tora4d should contact us immediately at [email protected]. For more information on preventing underage gambling, visit our Responsible Gaming page.
10. Changes to This Privacy Policy
tora4d reserves the right to update this Privacy Policy to reflect changes in our data practices, legal requirements, or platform features. When we make material changes:
- We will update the "Last Updated" date at the top of this document
- We will notify registered users via email to their registered address
- We will display a prominent notice on the website homepage for 30 days
- For significant changes affecting your rights, we may require explicit consent before the changes take effect
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the tora4d Service after policy changes constitutes acceptance of the updated terms.
If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Live Chat: Available 24/7 through the website (click the chat icon in the bottom right corner)
- WhatsApp: Available 08:00-24:00 WIB (number provided in Account dashboard after login)
We commit to responding to all privacy inquiries within 48 hours and resolving complaints within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the data protection authority in your jurisdiction.