How petik4d Handles Your Account Data
This is the petik4d privacy policy. We wrote it so you can see, in plain language, what we collect when you open an account, why we keep it...
Scope, Lawful Basis and Your Rights
This policy applies to your petik4d account and any device you use to reach our lobby, where local law permits. We process your identifiers, contact details, payment references and session logs on the lawful basis of contract performance — you asked us to host your account, so we hold the data needed to run it. We also keep limited records for fraud
prevention and regulatory checks across supported regions. You may request access, correction, export or deletion of your data; we reply within thirty days. Marketing consent is separate and you can withdraw it from your account panel without losing lobby access.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
How We Review This Policy
Quarterly Legal Review
Our legal team revisits this document every quarter against Indonesia data-protection developments. Any change to scope, retention or third-party processors is logged with a date stamp at the foot of the page.
Named Policy Owner
A single privacy lead signs off every revision, so there is one accountable person rather than a faceless committee. You can reach that desk through the contact channels we list above.
Versioned Changelog
We keep an internal changelog of every clause edit, including who approved it and when. On request we share the summary so you can verify what shifted between two policy versions.
Processor Register
Each vendor that touches your account data — payment routing for DANA, OVO, GoPay, QRIS — is listed in our internal register with purpose, region and retention noted against the contract.
Security Controls
Account credentials are hashed, session traffic is encrypted, and access to identity data is role-gated. Internal audits run twice a year against our written control set, not a marketing checklist.
Breach Notification
If a confirmed incident affects your account record, we notify you and the relevant Indonesia authority within seventy-two hours, with a description of impact and the steps we have already taken.
Consistency Across Our Policy Pages
| Terms of Service | The Terms document governs the contract; this privacy policy explains the data side of that contract. Definitions for account, lobby and session match word-for-word across both pages. |
|---|---|
| Cookie Notice | Cookie categories listed here mirror the granular toggles on the cookie notice. If a tracker is named in one place it appears in the other with the same retention window. |
| AML Statement | Identity checks referenced in our AML statement use the same data fields described in this policy. Nothing extra is collected for compliance beyond what we already disclose. |
| Account Closure Page | Deletion timelines quoted on the closure page match the retention table inside this policy. Residual records held for legal obligation are flagged identically in both documents. |
| Marketing Consent | Opt-in language on our promo board is the same language stored in our consent log. Withdraw consent in one place and the change propagates across every petik4d surface. |
| Sportsbook Rules | Bet history retention referenced in sportsbook rules aligns with the session-log retention written here. One source of truth for how long your wager data sits with us. |
| Complaints Procedure | Privacy escalations follow the same complaint ladder published on our disputes page, with the same response windows for acknowledgement, investigation and final reply across supported regions. |