Important: This Privacy Policy applies to all personal data collected and processed by susu4d ("the Platform", "we", "us", "our") in connection with your use of the website at https://susu4d.cam. By registering an account or using any of our services, you acknowledge that you have read this policy and consent to the data practices described herein. This policy should be read alongside our Terms & Conditions.
Introduction
susu4d is an online gaming and sports-betting platform primarily serving adult players in Indonesia — including those in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, and other cities across the archipelago. We understand that the trust of our players is foundational to everything we do, and we take our obligations as a data custodian extremely seriously.
This Privacy Policy describes how susu4d collects, uses, stores, shares, and protects personal data. It also explains the rights that players have in relation to their data and the channels through which those rights can be exercised. We have written this policy in plain, accessible English to ensure you can make fully informed decisions about your personal information.
If you have any questions about this policy or your data rights, please contact us at the address set out in Section 15. We are committed to responding to all data-related inquiries within a reasonable timeframe.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
- "Personal Data" means any information that relates to an identified or identifiable natural person, including name, email address, phone number, bank account details, IP address, and device identifiers.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, transfer, or deletion.
- "Data Controller" means susu4d, the entity that determines the purposes and means of processing your Personal Data.
- "Data Processor" means any third-party service provider that processes Personal Data on behalf of susu4d under a written data processing agreement.
- "Player" / "User" / "You" means any individual who accesses, registers on, or uses the susu4d Platform.
- "KYC" (Know Your Customer) means the identity and age verification process required before a Player may withdraw funds from their Account.
- "Cookies" means small text files placed on your device by the Platform to facilitate session management, preference storage, and analytics.
- "Sensitive Data" means a subset of Personal Data that receives enhanced protection, including data relating to financial accounts, identification documents, and health information submitted in connection with responsible gaming requests.
Data We Collect
susu4d collects personal data across three broad categories. The specific data collected depends on how you interact with the Platform:
| Category | Data Types | When Collected |
|---|---|---|
| Registration Data | Full name, date of birth, email address, phone number, city/province of residence (e.g., Jakarta, Surabaya, Bali) | At account creation |
| Identity Verification (KYC) | Government-issued ID (KTP or passport), selfie photograph, proof of address, source-of-funds documentation | Before first withdrawal or upon request |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history in IDR | At deposit or withdrawal |
| Technical Data | IP address, device type and OS, browser type and version, session timestamps, login history | Automatically during Platform use |
| Gameplay Data | Bet history, game preferences, wagering patterns, win/loss records | Automatically during gameplay |
| Communication Data | Support chat transcripts, email correspondence, dispute records | When you contact support |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, time-out preferences, any health context voluntarily provided | When tools are activated |
We do not collect data beyond what is necessary for the purposes described in this policy. Players are not required to provide Sensitive Data such as health information unless they are seeking access to specific responsible gaming support features.
How We Collect Data
susu4d collects personal data through the following channels:
- Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact customer support, or update your account settings.
- Automatically through the Platform — via server logs, session tracking, and cookies that record your IP address, device identifiers, browser information, and interaction patterns each time you visit or use the Platform.
- From payment providers — Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet services (OVO, DANA, GoPay) may share transaction confirmation data with susu4d to reconcile deposits and withdrawals against your Account.
- From identity verification partners — susu4d may engage third-party KYC providers to assist with document authentication and fraud screening. These providers return a verification result to susu4d; raw document scans are handled in accordance with our data processing agreements.
- From publicly available sources — in limited circumstances related to fraud prevention or anti-money-laundering (AML) compliance, susu4d may consult publicly available information or sanctions screening databases.
Purposes of Processing
susu4d processes your personal data for the following specific purposes. We do not process data for any purpose not listed here without first obtaining your explicit consent:
- Account Management: Creating, maintaining, and securing your player Account, including password resets and session authentication.
- Identity Verification (KYC): Confirming that you are at least 21 years of age, that you are who you claim to be, and that your funding sources are legitimate.
- Transaction Processing: Facilitating deposits and withdrawals in IDR via local Indonesian banking channels and e-wallets.
- Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorized access.
- Responsible Gaming: Monitoring gameplay patterns for signs of problem gambling and administering self-exclusion, deposit limits, and time-out features at your request.
- Customer Support: Responding to your inquiries, resolving disputes, and improving the quality of our support services.
- Platform Improvement: Analyzing aggregated usage data to enhance game performance, user interface design, and the overall player experience.
- Legal & Regulatory Compliance: Meeting obligations imposed by applicable law, court orders, and regulatory authorities, including AML and counter-terrorism financing requirements.
- Marketing Communications: Sending you promotional offers, bonus notifications, and news about susu4d — only where you have provided separate, specific consent and have not subsequently opted out.
Marketing Opt-Out: You may withdraw consent for marketing communications at any time by contacting support or updating your notification preferences within your Account settings. Opting out of marketing does not affect the lawfulness of processing carried out prior to withdrawal of consent.
Legal Basis for Processing
susu4d processes personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing required to perform the agreement between susu4d and the Player — including account registration, transaction processing, and customer support.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations and responses to lawful requests from law enforcement agencies.
- Legitimate Interests: Processing carried out to pursue susu4d's legitimate business interests — such as fraud detection, platform security, and analytics — provided those interests are not overridden by your rights and interests.
- Consent: Processing based on your freely given, specific, informed consent — particularly for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Data Sharing & Third Parties
7.1 susu4d does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. Data sharing is limited to the categories described below, and in all cases is subject to appropriate contractual safeguards.
7.2 We may share your personal data with the following categories of recipients:
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum transaction data necessary to process deposits and withdrawals.
- KYC / Identity Verification Providers: Third-party services engaged to authenticate identity documents and screen against sanctions lists. These providers act as Data Processors under binding agreements.
- Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session identifiers to facilitate game delivery. They do not receive your name, banking details, or contact information.
- IT & Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity vendors that support the technical operation of the Platform. All such vendors are bound by data processing agreements requiring them to process data only on susu4d's instructions.
- Legal & Regulatory Authorities: Law enforcement agencies, courts, tax authorities, or financial regulators where disclosure is required by law, court order, or regulatory directive. susu4d will notify you of any such disclosure to the extent permitted by law.
- Professional Advisors: Lawyers, auditors, and accountants acting in their professional capacity, who are bound by confidentiality obligations.
7.3 In the event that susu4d undergoes a merger, acquisition, or sale of substantially all of its assets, player data may be transferred to the successor entity. Players will be notified of any such transfer and the successor entity's privacy terms before the transfer takes effect.
Data Retention
8.1 susu4d retains personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Contractual and legal obligations |
| KYC / identity documents | 5 years after account closure | AML regulatory requirements |
| Financial transaction records | 5 years after transaction date | Financial record-keeping obligations |
| Gameplay and betting history | 3 years after account closure | Dispute resolution and audit trail |
| Support communications | 3 years after resolution | Quality assurance and dispute evidence |
| Technical / server log data | 12 months from collection | Security monitoring and fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent accountability |
8.2 When personal data is no longer required for any lawful purpose, susu4d will securely delete or anonymize it. Anonymized data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
Data Security
9.1 susu4d implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
- AES-256 encryption at rest for all sensitive data stored in our databases, including KYC documents and financial records.
- Multi-factor authentication (MFA) for all administrative access to systems holding personal data.
- Role-based access control (RBAC) ensuring that staff members can only access the personal data necessary for their specific job function.
- Regular security audits and penetration testing conducted by independent third-party cybersecurity firms.
- Intrusion detection systems (IDS) and 24/7 security monitoring to identify and respond to threats in real time.
- Staff data protection training conducted at onboarding and annually thereafter for all personnel with access to personal data.
9.2 While susu4d takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely secure. Players are also responsible for maintaining the security of their own login credentials and for notifying susu4d immediately if they suspect unauthorized access to their Account.
9.3 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, susu4d will notify those players without undue delay and will take immediate remedial action to contain the breach and prevent recurrence.
Cookies & Tracking Technologies
10.1 susu4d uses cookies and similar technologies (including web beacons and local storage objects) to operate and improve the Platform. The following categories of cookies are used:
- Strictly Necessary Cookies: Required for the Platform to function. They enable session management, login authentication, and security features. These cookies cannot be disabled without affecting Platform functionality.
- Performance & Analytics Cookies: Collect anonymized data about how players interact with the Platform — such as pages visited, time spent, and error messages encountered — to help us improve user experience. No personally identifiable information is collected via these cookies.
- Functional Cookies: Remember your preferences such as language settings, display options, and recently played games to personalize your experience on return visits.
- Marketing Cookies: Used only where you have explicitly consented to receive personalized promotions. These cookies track your interests based on your activity on the Platform to deliver relevant bonus offers and game recommendations.
10.2 You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling other cookie categories will not prevent you from accessing the Platform but may reduce personalization features.
10.3 susu4d does not use cookies to build advertising profiles for use by unaffiliated third-party advertisers, and we do not participate in cross-site behavioral advertising networks.
Your Rights
As a player on susu4d, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at the address in Section 15. We will respond within 30 days of receiving your request.
Right of Access
Request a copy of all personal data we hold about you, along with information about how it is used and with whom it is shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data. You may also update certain details directly through your Account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent — subject to legal retention obligations.
Right to Restrict Processing
Request that we limit processing of your data — for example, while a correction request is being investigated — without requiring full deletion of your records.
Right to Portability
Request a structured, machine-readable copy of your personal data that you provided to us, to transfer to another service provider.
Right to Object
Object to processing based on legitimate interests, including profiling for marketing purposes. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
Note: Certain rights may be limited where susu4d is required to retain or process data to comply with a legal obligation, to establish or defend a legal claim, or to protect the rights of other individuals. We will inform you of any such limitation when responding to your request.
Children & Minors
12.1 susu4d's services are strictly for adults aged 21 years and older. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and withdrawal process.
12.2 If susu4d discovers or is notified that personal data has been collected from a person under 21, we will immediately suspend the associated Account, void any balance, and permanently delete the minor's personal data from our systems. If you believe a person under 21 has registered on susu4d, please notify us immediately at [email protected] so we can act without delay.
12.3 Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. susu4d fully supports these measures and will cooperate with any reasonable request from a guardian to investigate and close an Account registered by a minor.
International Data Transfers
13.1 susu4d's primary player base is in Indonesia. However, certain Data Processors (such as cloud infrastructure providers and game studios) may be located in other countries. Where personal data is transferred outside Indonesia, susu4d ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to the protections described in this policy.
13.2 Safeguards for international transfers include contractual clauses requiring the recipient to process data only in accordance with susu4d's instructions and to maintain security measures consistent with those described in Section 9 of this policy.
13.3 By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries other than your country of residence. In all cases, such transfers are made solely for the purposes described in Section 5 and are governed by the protections described in this section.
Policy Amendments
14.1 susu4d may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes — those that significantly affect your rights or how we use your data — we will notify you by email to your registered address and by a prominent notice on the Platform at least 7 days before the changes take effect.
14.2 Non-material amendments (such as clarifications, typographical corrections, or additions of new Data Processors under equivalent terms) may take effect immediately. The "Effective Date" shown at the top of this policy will always reflect the date of the most recent revision.
14.3 Continued use of the Platform after the effective date of any amended policy constitutes your acceptance of the revised terms. If you do not agree to the revised Privacy Policy, you must cease using the Platform and may request closure of your Account.
Contact & Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the susu4d Data Privacy team through the following channel:
susu4d — Data Privacy Team
Contact Email (plain text — not a clickable link):
[email protected]
Response Time: We aim to acknowledge all data-related requests within 5 business days and to resolve them fully within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Support Hours: 24 hours a day, 7 days a week (WIB, UTC+7)
Languages: English and Bahasa Indonesia
If you are dissatisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority or supervisory body applicable to your jurisdiction. susu4d will cooperate fully with any such authority in the investigation of complaints.
For questions about our responsible gaming practices, please visit our Responsible Gaming page. For general platform questions, our FAQ page covers the most common topics in detail.