Privacy & Data Protection

ahh4d Privacy Policy

At ahh4d, protecting your personal data is not an afterthought — it is built into how we operate. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have as a player based in Indonesia or accessing the Platform internationally.

Last Updated: 1 January 2026

Six Principles That Guide Every Decision

Everything ahh4d does with your data is governed by these core principles, applied consistently across our platform.

Purpose Limitation

We collect personal data only for the specific, legitimate purposes described in this policy — account management, payment processing, KYC compliance, and customer support. Your data is never used beyond those stated purposes without your explicit consent.

Data Minimisation

ahh4d collects only the minimum personal data required to deliver our services securely and in compliance with applicable regulations. We do not ask for information we do not need, and we do not retain data longer than necessary.

Security by Design

All data transmitted between your device and the ahh4d platform is protected by industry-standard TLS/SSL encryption. Stored personal data is protected using AES-256 encryption at rest, with access restricted to authorised personnel only.

Your Rights, Respected

You have the right to access, correct, and request deletion of your personal data. You may also object to certain forms of processing and withdraw marketing consent at any time. We provide a clear, simple process for exercising each of these rights.

No Data Selling

ahh4d does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Ever. Third-party service providers who access your data on our behalf (payment processors, KYC verification partners) are bound by strict contractual data-processing agreements.

Transparency First

We believe you should always know what data we hold about you and why. This policy is written in plain English, not impenetrable legal jargon, so you can make informed decisions about your data and your relationship with ahh4d.

Section 1

Scope & Data Controller

This Privacy Policy applies to all personal data collected and processed by ahh4d in connection with the operation of the online betting and casino platform accessible at https://ahh4d.onl (the "Platform"), including all sub-pages, mobile-optimised views, and associated customer support channels.

This policy governs data collected from:

  • Players who register an Account on the Platform.
  • Visitors who browse the Platform without registering.
  • Individuals who contact ahh4d through any support or communication channel.
  • Individuals who participate in promotions, surveys, or other marketing activities conducted by ahh4d.

ahh4d acts as the data controller for all personal data collected via the Platform. This means ahh4d determines the purposes and means of processing your personal data. Where ahh4d engages third-party processors (such as payment providers or KYC verification services), those parties act as data processors under contract and may only process your data in accordance with ahh4d's documented instructions.

This policy is incorporated by reference into ahh4d's Terms & Conditions. By registering an Account or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing described herein.
Section 2

Personal Data We Collect

ahh4d collects personal data through several distinct channels: information you provide directly, data generated automatically by your use of the Platform, and data received from trusted third-party verification services. The categories of data we collect are set out below.

2.1 — Data You Provide Directly

  • Registration data: Full name, date of birth, email address, phone number, and preferred username.
  • Identity verification (KYC) data: Government-issued photo ID (KTP, SIM, or passport), proof of address, and selfie verification images submitted during identity checks.
  • Payment data: Bank account name, bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI), account number, and e-wallet details (OVO, DANA, GoPay, ShopeePay, LinkAja). Note: ahh4d does not store full bank account credentials — payment data is retained only to the extent required to process and verify transactions.
  • Communications data: Messages, emails, and chat transcripts exchanged between you and our support team.
  • Preferences and consent records: Your marketing opt-in status, responsible gaming settings (deposit limits, self-exclusion requests), and language preferences.

2.2 — Data Generated Automatically

  • Technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
  • Usage data: Pages visited, time spent on each page, links clicked, game sessions initiated, bet history, deposit and withdrawal transaction logs, and session timestamps.
  • Cookie and tracking data: Data collected via cookies, pixel tags, and similar technologies as described in Section 6 of this policy.
  • Geolocation data: Approximate location derived from your IP address, used to enforce geographic access restrictions and deliver a localised experience.

2.3 — Data Received from Third Parties

  • KYC and AML screening results: Identity verification outcomes and watchlist screening results received from our third-party compliance partners.
  • Payment gateway data: Transaction confirmation references and fraud-screening signals received from our payment processing partners.
  • Responsible gaming data: Self-exclusion or restriction information received from recognised third-party responsible gaming registries, where applicable.
Section 3

How We Use Your Personal Data

ahh4d uses the personal data it collects for the following specific purposes. Each purpose is tied to a legal basis described in Section 4.

Purpose Data Used Legal Basis
Account creation & management Registration data, email, phone number Contract performance
Payment processing Payment data, transaction history Contract performance
Identity verification (KYC) KYC documents, selfie, proof of address Legal obligation
Fraud prevention & AML Technical data, usage data, payment data Legitimate interests / Legal obligation
Customer support Communications data, Account data Contract performance
Marketing communications Email, phone number, preferences Consent
Platform improvement & analytics Usage data, cookie data, technical data Legitimate interests
Responsible gaming monitoring Usage data, session data, bet history Legal obligation / Legitimate interests
Legal & regulatory compliance All categories as required Legal obligation

We do not use your personal data for automated decision-making that produces significant legal or similarly significant effects without human review, except where such processing is required by applicable law or expressly consented to by you.

Section 5

Data Sharing & Disclosure

ahh4d does not sell, rent, or share your personal data with third parties for their own independent marketing or commercial purposes. We may share your personal data with third parties only in the specific circumstances described below.

5.1 — Authorised Service Providers

We engage carefully selected third-party service providers to support the operation of the Platform. These providers act as data processors and are contractually bound to process your data only as directed by ahh4d and in accordance with this policy. Categories of authorised service providers include:

  • Payment processors: Partners who facilitate IDR deposits and withdrawals via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
  • KYC and identity verification services: Third-party compliance partners who process identity documents and perform watchlist screening on our behalf.
  • Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, Spribe, NetEnt, and Microgaming who deliver game content via their platforms. These providers receive anonymised session data necessary to run the games and do not receive your full personal profile.
  • Cloud infrastructure providers: Hosting and data storage providers who maintain the servers on which Platform data is stored, under strict data processing agreements.
  • Customer support tools: Software providers that power our live chat and email ticketing systems.

5.2 — Legal & Regulatory Disclosure

ahh4d may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised authorities where required to do so by applicable law, court order, or valid legal process. In such cases, ahh4d will disclose only the minimum information required to satisfy the legal obligation and, where permitted by law, will notify the affected player of the disclosure.

5.3 — Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of ahh4d's assets, personal data held by ahh4d may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity assuming the data protection obligations set out in this policy. Affected players will be notified of any such transfer and the identity of the new data controller prior to the transfer taking effect.

We never sell your data. Under no circumstances does ahh4d sell, auction, or broker player personal data to data brokers, advertising networks, or any other third party for commercial gain. This commitment applies regardless of any changes to ahh4d's business structure.
Section 6

Cookies & Tracking Technologies

ahh4d uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, detect fraud, and improve the user experience. A cookie is a small text file placed on your device by your browser when you visit the Platform. The cookies we use fall into the following categories:

Cookie Type Purpose Duration
Strictly Necessary Maintain your login session, load balancing, security token validation, fraud detection signals Session / up to 24 hours
Functional Remember your language preference, game display settings, and notification preferences Up to 12 months
Analytics Aggregate page-view and interaction data used to identify performance issues and improve the Platform (no personally identifiable cross-site tracking) Up to 13 months
Marketing / Retargeting Track conversion events to measure the effectiveness of ahh4d's own promotional campaigns (only placed with your consent) Up to 90 days

Strictly necessary cookies cannot be disabled, as they are essential to the functioning of the Platform. You may manage your preferences for functional, analytics, and marketing cookies via your browser settings or by contacting our support team. Please note that disabling functional cookies may affect your experience on the Platform.

ahh4d does not permit third-party advertising networks to place cookies on the Platform for the purpose of building cross-site behavioural profiles of our players.

Section 7

Data Retention

ahh4d retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The key retention periods applied by ahh4d are as follows:

  • Account data (active accounts): Retained for the lifetime of your Account and for a period of 5 years following permanent Account closure, to fulfil AML record-keeping obligations.
  • KYC documents: Retained for a minimum of 5 years from the date of submission, in line with standard anti-money laundering record-keeping requirements.
  • Transaction records: Retained for 5 years from the date of each transaction to support financial audit trails and regulatory compliance.
  • Customer support communications: Retained for 2 years from the date of the last communication in a support thread.
  • Marketing consent records: Retained for the duration of your opt-in and for 1 year following any withdrawal of consent, as evidence of compliance.
  • Cookie and analytics data: Retained for the periods stated in Section 6, after which data is automatically purged or anonymised.
  • Responsible gaming records (self-exclusion, limit settings): Retained for the duration of any active restriction and for 5 years following its expiry, to prevent circumvention of self-exclusion agreements.

Where data is no longer required for its original purpose and no legal obligation requires its continued retention, ahh4d will securely delete or irreversibly anonymise the data. Anonymised data — which cannot reasonably be used to identify you — may be retained indefinitely for statistical and analytical purposes.

Section 8

Security Measures

ahh4d implements a comprehensive, layered approach to data security designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

  • TLS/SSL encryption: All data transmitted between your device and the Platform is encrypted in transit using TLS 1.2 or higher. Our SSL certificate status is publicly verifiable.
  • AES-256 encryption at rest: Sensitive personal data, including identity verification documents and payment account details, is encrypted at rest using AES-256.
  • Access controls: Access to personal data is restricted to authorised personnel who require it to perform their job functions. Access is controlled via role-based permissions and multi-factor authentication (MFA) for all administrative systems.
  • Network security: The Platform infrastructure is protected by firewalls, intrusion detection systems (IDS), and regular vulnerability scanning.
  • Penetration testing: ahh4d engages independent security professionals to conduct periodic penetration tests of the Platform and its underlying infrastructure.
  • Incident response: ahh4d maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay and, where required by applicable law, report the breach to the relevant supervisory authority.
While ahh4d takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials. If you suspect unauthorised access to your Account, contact us immediately at support@ahh4d.onl.
Section 9

Your Rights as a Data Subject

As a player whose personal data is processed by ahh4d, you have the following rights with respect to that data. To exercise any of these rights, contact our support team at support@ahh4d.onl with a clear description of your request. We will respond within 30 calendar days.

9.1 — Right of Access

You have the right to request a copy of the personal data ahh4d holds about you, together with information about how that data is being used. We will provide this information free of charge in a structured, machine-readable format where technically feasible.

9.2 — Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Where a correction affects data used for KYC or payment purposes, we may request supporting documentation to verify the change.

9.3 — Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been processed unlawfully. Note that this right is subject to overriding legal obligations — for example, ahh4d is required to retain certain transaction and KYC records for a minimum of 5 years under applicable AML regulations, and cannot delete such records on request during that period.

9.4 — Right to Restriction of Processing

You have the right to request that ahh4d restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is contested, or while you have raised an objection to processing based on legitimate interests and that objection is being assessed.

9.5 — Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider.

9.6 — Right to Object

You have the right to object to processing of your personal data where that processing is based on ahh4d's legitimate interests. Where you raise an objection, ahh4d will cease processing unless it can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for the establishment, exercise, or defence of legal claims. You may always object to direct marketing processing without needing to provide a reason.

9.7 — Right to Withdraw Consent

Where processing is based on your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Section 10

Minors & Age Verification

21+ Only. The ahh4d Platform is strictly for adults aged 21 and over. We do not knowingly collect or process personal data from individuals under the age of 21.

Age verification is a core component of the ahh4d registration and KYC process. During registration, all players are required to confirm that they are at least 21 years of age. Age declarations are subject to verification via our KYC process, which requires submission of a government-issued photo ID confirming date of birth.

Where ahh4d discovers — through KYC review, fraud monitoring, or any other means — that a player is under 21 years of age, we will immediately:

  • Suspend the Account and cease all processing of that player's personal data for service-delivery purposes.
  • Void all pending bets and game results associated with the Account.
  • Initiate a responsible return of any deposited Real Money Funds to the payment method used for deposit, in accordance with our responsible gaming obligations.
  • Retain the minimum data necessary to prevent re-registration by the same individual, in accordance with our responsible gaming and legal obligations.

If you believe a minor has accessed the Platform using falsified credentials, please contact us immediately at support@ahh4d.onl so we can investigate and act promptly. For guidance on parental controls and tools to prevent underage gambling, please visit our Responsible Gaming page.

Section 11

Marketing Communications

ahh4d may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal promotions (including offers tied to Idul Fitri, Ramadhan, and other Indonesian cultural events), and other marketing content. We will only send you marketing communications where you have provided explicit opt-in consent during registration or at a later point via your Account dashboard.

11.1 — Opting Out

You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link included in every marketing email, or by contacting our support team with a request to be removed from our marketing list. Opt-out requests for email marketing are processed within 5 business days. Note that opting out of marketing communications does not affect transactional communications — we will continue to send you account-related notifications (e.g., deposit confirmations, withdrawal processing updates, and security alerts) regardless of your marketing preference.

11.2 — No Third-Party Marketing

ahh4d does not share your contact details with third parties for their own direct marketing purposes. All marketing communications you receive in connection with ahh4d will originate from ahh4d directly, using our registered domain ahh4d.onl. If you receive a communication claiming to be from ahh4d that originates from a different domain, treat it as fraudulent and report it to support@ahh4d.onl.

Section 12

International Data Transfers

ahh4d's Platform serves players primarily in Indonesia and processes the majority of its data within data centres located in the Asia-Pacific region. However, some of our third-party service providers — including certain game content studios, cloud infrastructure providers, and KYC verification partners — may process personal data in jurisdictions outside Indonesia.

Where personal data is transferred outside Indonesia to a jurisdiction that does not provide an equivalent standard of data protection, ahh4d ensures that appropriate safeguards are in place before making such a transfer. Safeguards may include:

  • Standard contractual clauses (SCCs) incorporated into data processing agreements with the relevant third-party processor.
  • Adequacy assessments confirming that the destination jurisdiction provides a standard of protection substantially equivalent to that applicable in Indonesia.
  • Binding corporate rules (BCRs) where the receiving entity is part of a corporate group with approved BCRs in place.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Indonesia, subject to the safeguards described above. If you wish to obtain more information about the specific safeguards applicable to a particular transfer, contact us at support@ahh4d.onl.

Section 13

Changes to This Privacy Policy

ahh4d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect the way we process your personal data or reduce your rights as a data subject — we will provide advance notice by displaying a prominent notification on the Platform and, where we hold a valid email address for you, by sending a direct notification to that address at least 7 days before the revised policy takes effect.

Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with any change, you should cease using the Platform and may request Account closure before the revised policy takes effect, in accordance with the procedure described in our Terms & Conditions.

We recommend bookmarking this page and reviewing it periodically to stay informed of how ahh4d handles your personal data. A full archive of previous versions of this policy is available upon request by contacting our support team.

Section 14

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way ahh4d has handled your personal data, please contact us using the details below:

  • Email: support@ahh4d.onl
  • Response time: We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days of receipt.
  • Subject line: Please include "Privacy Request" or "Data Rights" in your subject line so your message is routed to the correct team member without delay.

When submitting a data rights request, please include your registered email address and, where applicable, your Account username so we can locate your records efficiently. We may need to verify your identity before processing certain requests — for example, access and erasure requests — to ensure that personal data is not disclosed to or deleted at the request of an unauthorised third party.

14.1 — Responsible Gaming & Privacy Overlap

Certain privacy rights interact with ahh4d's responsible gaming obligations. For example, a request to erase all personal data cannot be fulfilled during an active self-exclusion period, as we are required to retain sufficient data to enforce the exclusion. Similarly, KYC records must be retained for the minimum statutory period regardless of an erasure request. In all such cases, ahh4d will explain clearly which data can be deleted immediately and which must be retained, and for how long, so you understand exactly what action we are taking on your request.

14.2 — Complaints

If you are not satisfied with ahh4d's response to a privacy concern or data rights request, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. ahh4d is committed to cooperating with supervisory authorities and to resolving legitimate privacy complaints promptly and in good faith. We strongly encourage players to contact us directly in the first instance, as the majority of concerns can be resolved quickly through direct communication with our support team.

Our customer support team includes dedicated Indonesian-speaking agents available around the clock to assist with privacy enquiries, account questions, and responsible gaming support. Reach us any time at support@ahh4d.onl — we are here to help.

Ready to Play on a Platform You Can Trust?

Now that you know exactly how ahh4d handles your data, create your account with confidence. Full IDR banking, SSL encryption, and a team committed to your privacy — available 24/7. 21+ only. Play responsibly.

Create Your Account Explore Sportsbook Browse Slots Read the FAQ