soya4d is committed to safeguarding the privacy of every member. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you hold as a data subject. Please read it carefully alongside our Terms & Conditions.
Six principles that underpin how soya4d handles your personal information every day.
soya4d collects only the personal data strictly necessary to operate your account, process transactions, and comply with KYC obligations. We do not gather data speculatively or for purposes beyond those disclosed in this policy.
All data transmitted between your device and the soya4d platform is protected by 256-bit SSL/TLS encryption. Sensitive fields — including passwords and payment details — are additionally hashed and stored in encrypted form at rest.
soya4d does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or any other commercial entity. Your data is used exclusively to deliver and improve the services you have signed up for.
Personal data collected for one purpose — such as identity verification — is not repurposed for unrelated activities such as marketing profiling or third-party analytics without your explicit prior consent, except where required by law.
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy or to comply with legal retention obligations. Account data is deleted or anonymised within 90 days of a verified account closure request.
As a soya4d member, you have clear rights to access, correct, delete, and restrict the processing of your personal data. We respond to all verified data subject requests within 30 days, without charge for standard requests.
soya4d operates as a premium online sports betting and casino platform serving English-preference players across Indonesia. In the course of delivering these services, we necessarily collect and process certain personal information about our members, prospective members, and visitors to our website.
This Privacy Policy sets out in plain, transparent terms exactly what personal data soya4d holds, why we hold it, how long we keep it, and the rights you can exercise at any time. We are committed to handling your information with the same level of care and professionalism that we apply to every other aspect of the soya4d platform.
By registering an account on soya4d, depositing funds, or otherwise using the platform, you confirm that you have read and understood this Privacy Policy. This document is incorporated by reference into our Terms & Conditions. In the event of a conflict between this policy and the Terms, this Privacy Policy governs with respect to data protection matters.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, email address, date of birth, Indonesian national ID number, bank account details, IP address, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction — whether automated or manual. |
| "Data Controller" | soya4d, the entity that determines the purposes and means of processing personal data collected via the platform. |
| "Data Processor" | A third party that processes personal data on behalf of soya4d under a data processing agreement, such as a KYC verification provider or payment gateway. |
| "Member" | A natural person who has registered an account on the soya4d platform and whose personal data is therefore processed by soya4d as Data Controller. |
| "Cookies" | Small text files placed on your device by the soya4d platform to recognise returning visitors, preserve session state, and collect anonymised analytics data. |
soya4d collects the following categories of personal data, depending on your interaction with the platform:
soya4d collects personal data through the following channels:
| Collection Method | Examples |
|---|---|
| Directly from you | Registration form, KYC document upload, deposit/withdrawal requests, live chat messages, email enquiries, and any feedback or survey responses you submit voluntarily. |
| Automatically via the platform | IP address logging, browser and device fingerprinting, session cookies, clickstream analytics, and betting activity records generated each time you use the platform. |
| From payment processors | Transaction confirmation data returned by BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja after a deposit or withdrawal is processed. |
| From KYC verification partners | Identity match scores, document authenticity results, and watchlist screening outcomes returned by our third-party KYC provider after you submit verification documents. |
| From fraud prevention services | Device reputation scores, IP risk ratings, and pattern-of-behaviour signals provided by our fraud detection partners to protect the integrity of the platform. |
soya4d processes your personal data for the following specific and documented purposes:
Each processing activity carried out by soya4d rests on one or more of the following legal bases:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contract Performance | Account creation, deposit and withdrawal processing, bet settlement, and all activities necessary to deliver the services you have contracted for under the Terms & Conditions. |
| Legal Obligation | KYC identity verification, anti-money-laundering record-keeping, responses to lawful court orders or regulatory directions, and age verification. |
| Legitimate Interests | Fraud detection and prevention, platform security, responsible gaming monitoring, internal analytics for service improvement, and customer support quality assurance — where these interests are not overridden by your data protection rights. |
| Consent | Marketing emails and promotional communications. You may withdraw consent at any time; withdrawal does not affect the lawfulness of prior processing based on consent. |
soya4d does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:
To process your deposits and withdrawals, soya4d shares the minimum necessary transaction data with the relevant Indonesian payment provider — BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja. These providers act as independent data controllers for their own payment infrastructure and are governed by their own privacy policies.
Your identity documents and biometric data (where applicable) are shared with our contracted KYC verification partner solely for the purpose of verifying your identity and age. KYC partners process this data under a binding data processing agreement with soya4d and are prohibited from using your data for any purpose beyond identity verification.
Technical data such as IP addresses, device identifiers, and session metadata may be shared with fraud prevention service providers to assess risk and protect the platform. This data is processed pseudonymously where technically feasible.
soya4d will disclose personal data to courts, law enforcement agencies, regulators, or other public authorities where required by a binding legal order, or where disclosure is necessary to protect the safety of persons or to defend against legal claims.
In the event of a merger, acquisition, or sale of all or a material part of soya4d's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to the data controller's identity via a prominent notice on the platform and, where practicable, by email.
soya4d retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, or to comply with applicable legal retention obligations. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years after closure | Anti-money-laundering record-keeping obligations |
| KYC Documents | Duration of account plus 5 years after closure | Regulatory compliance and fraud investigation purposes |
| Transaction & Wagering Records | 7 years from the date of the transaction | Financial record-keeping and dispute resolution |
| Support Communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Cookie & Analytics Data | Up to 13 months from placement | Platform improvement and session management |
| Marketing Consent Records | Until consent is withdrawn plus 3 years | Evidence of lawful basis for marketing communications |
Upon expiry of the applicable retention period, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be attributed to any individual member.
soya4d implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:
soya4d uses cookies and similar tracking technologies to operate the platform, remember your preferences, and collect anonymised analytics data. The following cookie categories are used:
These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. No personal data beyond what is strictly necessary for platform operation is held in these cookies.
Functional cookies remember your preferences — such as your preferred language setting and the last betting market you viewed — so you do not have to reconfigure these on each visit. These cookies are set for a duration of up to 12 months.
soya4d uses anonymised, aggregated analytics data to understand how members interact with the platform — which pages are most visited, where users encounter friction, and how betting patterns evolve over time. This data is processed in a form that cannot be used to identify individual members. Analytics cookies are retained for up to 13 months.
You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent the platform from functioning correctly. Disabling functional or analytics cookies will not prevent you from using the platform's core services.
As a member whose personal data is processed by soya4d, you hold the following rights. To exercise any of these rights, contact us at [email protected] with the subject line "Data Subject Request" and include your registered email address and a description of your request. We will verify your identity before processing the request and respond within 30 days.
Request a copy of all personal data soya4d holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your account — for example, a misspelled name or outdated address.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that we limit the processing of your data — for instance, while you contest its accuracy or pending the outcome of an objection.
Request your personal data in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.
Object to processing based on legitimate interests — including responsible gaming monitoring and internal analytics — where your interests override ours.
Withdraw marketing consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to your withdrawal of consent.
If you are dissatisfied with soya4d's handling of your personal data, you have the right to lodge a complaint with the supervisory authority in the Governing Jurisdiction.
soya4d strictly prohibits persons under the age of 21 from registering an account, depositing funds, or placing any wager on the platform. We do not knowingly collect personal data from individuals under the age of 21.
Age verification is a mandatory step in our KYC process. Where soya4d has reasonable grounds to believe that a member may be under 21 years of age, the account will be suspended pending verification. If verification confirms the member is under 21, the account will be permanently closed, all deposits returned to the original payment source, and all winnings forfeited.
soya4d's primary servers are located in the Governing Jurisdiction. In delivering our services, certain personal data may be transferred to, stored in, or processed in countries other than Indonesia — including the server locations of our KYC partners, fraud prevention providers, and cloud infrastructure providers.
Where personal data is transferred outside Indonesia, soya4d ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that required in the Governing Jurisdiction. These safeguards include:
The soya4d platform integrates with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to deliver casino and slot game content. When you launch a game from one of these providers, certain technical data (such as your session token and game preferences) may be passed to that provider's servers in order to render the game. soya4d does not share your name, bank details, or identity documents with game studios.
This Privacy Policy does not govern the data practices of third-party payment providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) or game studios. We recommend reviewing the privacy policies of any third-party service you interact with directly.
soya4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Material changes — defined as changes that substantively affect how your personal data is collected, used, or shared — will be communicated to you by email and via a prominent notice on the platform at least 14 days before they take effect.
Non-material changes (such as formatting corrections, clarifications, or updates to contact details) may be made without advance notice. The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision. Continued use of the soya4d platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or soya4d's data processing practices, please contact our support team using the details below. All data subject requests must be submitted in writing to the email address provided, with sufficient information to verify your identity.
Our support team is available around the clock to address any privacy concern or data subject request. You can also review our full Terms & Conditions or visit the FAQ for quick answers about account security and data handling.