pos4g Privacy Policy

pos4g ("we", "us", "our") is committed to protecting the privacy and personal data of every player who registers an account or otherwise interacts with the pos4g platform at pos4g.app. This Privacy Policy sets out a comprehensive account of our data-handling practices in accordance with internationally recognised privacy standards and the expectations of our Indonesian player base.

We understand that trust is fundamental to the relationship between a gaming platform and its players. The personal data you share with us — whether during account registration, KYC verification, deposit transactions, or everyday gameplay — is handled with the strictest confidentiality and used only for the purposes described in this document. We do not sell your personal data to third parties, and we never will.

This policy applies to all personal data collected through the pos4g website, mobile browser interface, any associated applications, and all communications between pos4g and its account holders. It applies equally to players located in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and every other city across the Indonesian archipelago.

For the purposes of this Privacy Policy, pos4g operates as the data controller responsible for your personal data. The data controller determines the purposes for which and the means by which personal data is processed. All data-related enquiries, access requests, and deletion requests should be directed to pos4g using the contact details provided in Section 15 of this policy.

Where pos4g engages third-party service providers to process data on its behalf — such as payment processors, identity verification agencies, or fraud-prevention services — those parties act as data processors operating under binding contractual obligations that restrict their use of your data to the purposes specified by pos4g.

pos4g collects several categories of personal data, as detailed in the table below. We collect only the data that is necessary and proportionate for the purposes described in Section 5.

pos4g collects your personal data through the following means:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or using any interactive feature of the Platform.
• Automated Technical Collection: Data collected automatically through cookies, web beacons, server logs, and similar tracking technologies as you navigate and use the Platform. This includes your IP address, device identifiers, and session data. See Section 8 for full cookie details.
• Third-Party Sources: Identity and fraud-check data received from KYC verification agencies and fraud-prevention services that pos4g engages to verify the accuracy of information you have provided. Financial transaction data received from payment processors such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja to confirm deposit and withdrawal status.
• Inferred Data: Data derived from analysis of your usage patterns, such as your preferred game categories (slots, live casino, togel (Indonesia's traditional numbers lottery), crash games), your typical deposit frequency, and your session timing preferences — used solely to improve your on-platform experience and for responsible gaming monitoring.

pos4g processes your personal data for the following specific, explicit, and legitimate purposes:

• Account Management: To create, maintain, and administer your pos4g account, including authentication, password recovery, and account settings management.
• KYC & Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with our responsible gaming obligations. All Indonesian players are required to meet the minimum age of 21 before making a deposit or placing a wager.
• Payment Processing: To process deposits and withdrawals via supported Indonesian banking and e-wallet channels, including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. All transactions are conducted in Indonesian Rupiah (IDR).
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, bonus abuse, and any other conduct that threatens the integrity of the Platform or the safety of our players.
• Legal & Regulatory Compliance: To comply with applicable international gaming regulations, anti-money laundering (AML) obligations, and lawful requests from competent authorities.
• Responsible Gaming: To monitor gameplay patterns and proactively identify signs of problem gambling. This includes administering self-exclusion requests, deposit limits, session time reminders, and cooling-off periods.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance through our 24/7 support team.
• Platform Improvement: To analyse aggregate usage data, conduct A/B testing, and improve the functionality, performance, and user experience of the pos4g platform.
• Marketing & Promotions: To send you personalised promotional offers, bonus notifications, and news about new games or features — only where you have provided explicit consent or where a legitimate interest applies and you have not opted out.

pos4g relies on the following legal bases to process your personal data, as recognised under applicable international data protection frameworks:

• Contractual Necessity: Processing required to perform the contract between you and pos4g — including account registration, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing necessary to comply with applicable laws — including AML obligations, KYC requirements, and lawful regulatory requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is carried out on the basis of our legitimate interests, balanced against your rights and freedoms.
• Consent: Processing for direct marketing communications and the use of non-essential cookies is carried out solely on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pos4g does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Data is shared only in the following specific, controlled circumstances:

• Payment Processors: We share necessary financial and identity data with our Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely for the purpose of processing your transactions.
• Identity Verification Agencies: We share your identity documents and personal details with accredited KYC and AML screening providers to fulfil our verification obligations.
• Game Studios & Content Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive session-level technical data necessary to deliver their games to your device. These providers do not receive your identity or financial data.
• Fraud & Security Services: We share technical data (IP address, device fingerprint, session metadata) with fraud-detection services to identify and prevent unauthorised account activity.
• Legal Authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by law, valid legal process, or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

pos4g uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytics data. The categories of cookies we use are as follows:

You may manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Platform. Withdrawing consent for analytics or marketing cookies will not affect your ability to play.

pos4g retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration your account remains open and active on the Platform.
• KYC & Identity Documents: Retained for a minimum of 5 years following account closure, in line with international AML and financial record-keeping standards.
• Transaction Records: Retained for a minimum of 5 years following the date of each transaction, in compliance with applicable financial regulations.
• Customer Support Records: Retained for 3 years from the date of each interaction, to support dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent and for 1 year after withdrawal, as evidence of consent management.
• Technical & Log Data: Retained for up to 12 months for security monitoring and fraud detection purposes, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

pos4g implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the pos4g platform is encrypted using industry-standard 256-bit SSL/TLS protocols, the same standard applied by major global financial institutions.
• Two-Factor Authentication (2FA): 2FA is available to all account holders and is strongly recommended. Enabling 2FA adds a second layer of protection to your login process.
• Data Encryption at Rest: Sensitive data stored on pos4g servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within pos4g's internal systems is strictly role-based and limited to personnel who require it to perform their authorised job functions. All access is logged and audited.
• Regular Security Audits: pos4g undergoes regular third-party penetration testing and security audits to identify and remediate vulnerabilities.
• Incident Response Plan: In the event of a confirmed data breach that poses a risk to your rights and freedoms, pos4g will notify affected account holders and relevant authorities within the timeframes required by applicable law.

As a pos4g account holder, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verified requests within 30 calendar days.

pos4g strictly prohibits the use of its platform by any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step in our KYC process, and all accounts are subject to ongoing age-confirmation checks.

If pos4g discovers or is made aware that personal data has been collected from a person under the age of 21, the account in question will be immediately suspended, all associated data will be deleted (or retained only to the minimum extent required by law to document the age-verification failure), and all funds — including deposits and any associated winnings — may be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under 21 has registered an account on pos4g, please contact us immediately at [email protected] so that we can take swift and appropriate action.

pos4g operates on an internationally hosted infrastructure. As a result, your personal data may be processed and stored on servers located outside of Indonesia. Where such transfers occur, pos4g ensures that adequate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles. These safeguards may include:

• Standard contractual clauses approved by recognised data protection authorities, incorporated into contracts with our international hosting and service providers.
• Binding corporate rules governing intra-group data transfers within our organisation.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by applicable regulatory bodies.

By using the pos4g platform and accepting this Privacy Policy, you consent to the transfer of your personal data to servers and third-party processors that may be located outside of Indonesia, subject to the safeguards described above.

pos4g reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-handling practices, new regulatory requirements, or enhancements to the Platform. When material changes are made, pos4g will post a prominent notice on the Platform and update the "Last updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Your continued use of the pos4g platform following the posting of any changes constitutes your acceptance of the revised policy. If you do not agree with any material change, you should cease using the Platform and contact our support team to arrange account closure.

For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data pos4g holds about you, please contact our dedicated privacy support team. Our Indonesian-speaking agents are available around the clock, 24 hours a day, 7 days a week.

For responsible gaming support — including self-exclusion requests, deposit limit adjustments, or session time controls — please visit our dedicated Responsible Gaming page or our FAQ page.