Last Updated: January 1, 2026  |  Effective Date: January 1, 2026

About This Policy

This Privacy Policy applies to all personal data collected by vava4d through our website at vava4d.cam, our mobile-optimized platform, live chat, email communications, and any other services or channels through which we interact with you. By registering an account or using any vava4d service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein.

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

  • "vava4d", "we", "us", "our" — the online gaming platform operating under the domain vava4d.cam and all affiliated services.
  • "User", "you", "your", "Member", "Data Subject" — any individual who registers an account or otherwise interacts with vava4d services.
  • "Personal Data" — any information that relates to, or can be used to identify, a natural person, either directly or indirectly. This includes, but is not limited to, names, email addresses, identity document numbers, IP addresses, and financial information.
  • "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
  • "Data Controller" — the entity that determines the purposes and means of processing Personal Data. vava4d acts as the Data Controller for all Personal Data collected through its platform.
  • "Data Processor" — a third party that processes Personal Data on behalf of vava4d, subject to contractual obligations and data processing agreements.
  • "Consent" — a freely given, specific, informed, and unambiguous indication of agreement by the Data Subject to the processing of their Personal Data.
  • "Cookies" — small text files stored on a user's device by a web browser at the request of a website, used to retain session information and user preferences.

2. Data Controller

vava4d acts as the Data Controller with respect to all Personal Data collected from Members and visitors to vava4d.cam. As Data Controller, vava4d is responsible for establishing the purposes for which your Personal Data is collected and processed, determining the technical and organizational measures used to protect that data, and ensuring that third-party processors who handle data on our behalf are bound by appropriate contractual safeguards.

If you have any questions regarding vava4d's role as Data Controller or wish to exercise your privacy rights, please contact our Data Protection team using the contact details provided in Section 15 of this policy.

3. Data We Collect

3.1 Identity and Contact Information

When you register a vava4d account, we collect the following identity and contact data:

  • Full legal name (as it appears on a valid government-issued Indonesian identity document)
  • Date of birth
  • Gender
  • Indonesian residential address
  • Email address
  • Mobile phone number (registered in Indonesia)
  • Copies of identity documents submitted for KYC verification (Indonesian KTP, passport, or driver's license)
  • Proof of residency documents (utility bills, bank statements)

3.2 Financial Data

To facilitate deposits and withdrawals in Indonesian Rupiah (IDR), we collect and retain the following financial information:

  • Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata)
  • E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers)
  • Transaction history, including deposit amounts, withdrawal amounts, dates, and reference numbers
  • Betting and wagering history
  • Balance and account statement records

3.3 Technical and Usage Data

When you access and use the vava4d Platform, we automatically collect certain technical data:

  • IP address and geolocation data (country, city)
  • Device type, model, and operating system
  • Browser type and version
  • Session duration and login timestamps
  • Pages visited, features used, and in-platform navigation paths
  • Clickstream data and interaction logs
  • Error logs and crash reports

3.4 Communication Data

When you contact vava4d customer support, we collect and retain records of:

  • Live chat transcripts
  • Email correspondence
  • WhatsApp message logs
  • Support ticket records and resolution notes

4. How Data Is Collected

vava4d collects your Personal Data through the following channels:

  • Direct Submission: Information you provide during account registration, KYC verification, deposit or withdrawal requests, or when completing any form on the vava4d Platform.
  • Automated Collection: Technical data collected automatically through cookies, web beacons, tracking pixels, and server logs as you interact with the Platform.
  • Third-Party Sources: Data received from payment processors, identity verification service providers, fraud prevention agencies, and sports data providers. All third-party data sharing is governed by data processing agreements.
  • Customer Support Interactions: Data provided voluntarily during live chat, email exchanges, or phone calls with our support team.

5. Purpose of Data Processing

vava4d processes your Personal Data for the following defined purposes:

Purpose Data Used Retention Period
Account Registration Identity, contact, and authentication data Duration of account + 5 years post-closure
Identity Verification (KYC) Government ID, proof of residency, selfie 7 years from submission
Payment Processing Bank details, e-wallet IDs, transaction history 7 years (tax and AML compliance)
Customer Support Communication logs, account data 3 years from last interaction
Fraud Detection & AML IP address, device data, transaction patterns 7 years minimum
Platform Improvement Usage data, session logs, error reports 2 years, then anonymized
Marketing Communications Email, mobile number (with consent) Until opt-out or account closure
Responsible Gaming Monitoring Betting history, session durations, limit settings Duration of account + 5 years post-closure

vava4d processes your Personal Data on the following legal bases, in accordance with applicable data protection principles:

  • Contractual Necessity: Processing required to enter into and fulfill our contract with you — including account creation, payment processing, and dispute resolution.
  • Legal Obligation: Processing required to comply with applicable Indonesian laws and international standards, including anti-money laundering (AML) regulations, KYC requirements, and tax reporting obligations.
  • Legitimate Interests: Processing for purposes that serve vava4d's legitimate business interests, provided that such interests do not override your fundamental rights. This includes fraud prevention, platform security, responsible gaming monitoring, and platform analytics.
  • Consent: Processing for purposes where you have given explicit, informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

7.1 Third-Party Service Providers

vava4d may share your Personal Data with carefully selected third-party service providers who assist in operating our Platform. All such providers are contractually bound to process your data only in accordance with vava4d's instructions and applicable data protection laws. Categories of processors include:

  • Payment processors and banking partners (for IDR deposit and withdrawal processing)
  • Identity verification and KYC service providers
  • Fraud detection and AML compliance agencies
  • Game content providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft)
  • IT infrastructure, cloud hosting, and cybersecurity providers
  • Customer support platform providers
  • Sports data and odds feed providers

7.2 Legal and Regulatory Disclosures

vava4d may be required to disclose your Personal Data to government authorities, regulatory bodies, or law enforcement agencies in response to lawful requests, court orders, or to comply with mandatory legal reporting obligations. vava4d will notify you of such disclosures where legally permissible.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of vava4d's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified prior to such transfer via a notice on the vava4d website.

7.4 No Sale of Personal Data

vava4d does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. Your data is shared only in the limited circumstances described in this section.

8. Data Retention

vava4d retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Generally:

  • Active account data is retained for the duration of your membership.
  • Financial records, KYC documentation, and AML-related data are retained for a minimum of 7 years following account closure, in compliance with Indonesian financial regulations.
  • Communication and support records are retained for 3 years from the date of the last interaction.
  • Technical and usage data is retained for 2 years, after which it is anonymized or deleted.
  • Marketing consent records are retained until you withdraw consent or close your account.

Upon the expiry of the relevant retention period, vava4d will securely delete or anonymize your Personal Data in accordance with our internal data disposal procedures.

9. Data Security

vava4d employs a comprehensive set of technical and organizational security measures to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and vava4d servers is encrypted using industry-standard SSL/TLS protocols — the same standard used by major Indonesian banks such as BCA, BRI, and Mandiri.
  • Data Encryption at Rest: Sensitive data stored in our databases — including identity documents, financial records, and passwords — is encrypted using AES-256 encryption.
  • Access Controls: Personal Data is accessible only to authorized vava4d personnel on a strict need-to-know basis. All staff with access to sensitive data undergo background checks and annual data protection training.
  • Multi-Factor Authentication (MFA): Administrative access to vava4d systems requires multi-factor authentication. We also offer MFA as an optional security feature for Member accounts.
  • Penetration Testing: vava4d conducts regular third-party penetration tests and vulnerability assessments to identify and remediate potential security weaknesses.
  • Incident Response: vava4d maintains a documented data breach response procedure. In the event of a confirmed data breach affecting your Personal Data, vava4d will notify affected Members within 72 hours of becoming aware of the breach, in accordance with applicable data protection regulations.

While vava4d takes every reasonable precaution to protect your Personal Data, no method of electronic transmission or storage is 100% secure. You are also responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account credentials.

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device by your web browser when you visit a website. They allow the website to recognize your device across pages and sessions, enabling features like persistent login, preferences storage, and behavioral analytics.

10.2 Types of Cookies We Use

Cookie Type Purpose Duration
Strictly Necessary Required for core platform functionality — session management, authentication, security tokens Session
Functional Remembers your language preferences, display settings, and last-visited game categories Up to 12 months
Analytical Tracks page visits, session durations, and navigation patterns to improve Platform performance Up to 24 months
Marketing Delivers relevant promotional content based on your on-platform behavior (only with your explicit consent) Up to 12 months

10.3 Managing Cookie Preferences

You may control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, or to alert you when a cookie is being set. Please note that disabling strictly necessary cookies will impair core Platform functionality, including the ability to log in and maintain an active session. Disabling analytical or marketing cookies will not affect your ability to use the Platform but may result in less personalized content.

11. Your Privacy Rights

As a vava4d Member and Data Subject, you are entitled to the following rights with respect to your Personal Data. To exercise any of these rights, please contact our Data Protection team at the address provided in Section 15.

How to Submit a Privacy Request

To exercise any of the rights listed below, email our Data Protection team at [email protected] with the subject line "Privacy Rights Request" and include your full name, account username, and a description of the right you wish to exercise. We will acknowledge your request within 5 business days and respond fully within 30 calendar days.

  • Right of Access: You have the right to request a copy of all Personal Data that vava4d holds about you, along with information about how it is processed and with whom it has been shared.
  • Right to Rectification: If any Personal Data we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct it without undue delay.
  • Right to Erasure ("Right to be Forgotten"): You may request that vava4d delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations — for example, vava4d is required to retain financial and KYC records for a minimum of 7 years and cannot erase these during that period.
  • Right to Restriction of Processing: You may request that vava4d restrict the processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed.
  • Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.
  • Right to Object: You have the right to object to the processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to vava4d demonstrating compelling grounds that override your interests.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

12. Protection of Minors

vava4d's services are intended exclusively for adults aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account, access the Platform, or submit any Personal Data to vava4d.

If vava4d becomes aware — through KYC verification, self-disclosure, or third-party reports — that a Member is under 21 years of age, we will immediately suspend the account, delete all associated Personal Data (except where retention is required by law), and refund any deposits made. If you believe that a minor may have registered a vava4d account, please contact us immediately at [email protected].

13. International Data Transfers

vava4d primarily processes Personal Data within facilities located in Southeast Asia. However, certain third-party service providers — including cloud infrastructure partners and game content providers — may process data in other jurisdictions. Where Personal Data is transferred outside Indonesia, vava4d ensures that appropriate safeguards are in place, including:

  • Data Processing Agreements (DPAs) incorporating standard contractual clauses that require the recipient to provide an equivalent level of data protection.
  • Technical and organizational security measures appropriate to the sensitivity of the data transferred.
  • Transfer-impact assessments for high-risk cross-border data flows.

By using vava4d services and submitting your Personal Data, you acknowledge and consent to the transfer of your data as described in this section.

14. Changes to This Privacy Policy

vava4d reserves the right to update, amend, or revise this Privacy Policy at any time. When material changes are made, we will notify active Members by posting a prominent notice on the vava4d Platform and, where required by law, by sending an email notification to your registered address. The "Last Updated" date at the top of this policy will be revised to reflect the date of the most recent changes.

Your continued use of vava4d services following the posting of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must cease using vava4d and may request account closure by contacting our support team.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact vava4d's Data Protection team through any of the following channels:

  • Email: [email protected] (subject line: "Privacy Policy Inquiry")
  • Live Chat: Available 24/7 on the vava4d Platform — request to speak with a Data Protection specialist
  • Response Time: Acknowledgment within 5 business days; full response within 30 calendar days

vava4d is committed to resolving all privacy-related inquiries promptly, fairly, and in full compliance with applicable data protection principles. If you are not satisfied with our response, you have the right to escalate your complaint to the appropriate data protection authority in your jurisdiction.

How vava4d Protects Your Privacy

256-Bit SSL Encryption

Every page, transaction, and data transfer on vava4d is secured by industry-standard SSL/TLS encryption — the same level of protection used by Indonesia's top banks.

Strict KYC Verification

Mandatory identity verification prevents account fraud, protects your balance from unauthorized access, and ensures all Members meet the 21+ age requirement.

No Data Selling

vava4d never sells, rents, or trades your personal information to third-party advertisers. Your data is used solely to operate and improve your gaming experience.

Full Data Control

Access, correct, export, or request deletion of your personal data at any time. Your privacy rights are clearly defined and honored without unnecessary delay.

Transparent Cookie Use

We clearly distinguish between essential and non-essential cookies. Marketing cookies are only deployed with your explicit consent, and you can adjust preferences at any time.

Regular Security Audits

Third-party penetration testing and vulnerability assessments are conducted on a regular basis to keep vava4d's infrastructure ahead of emerging security threats.

Want to Know More About vava4d?

Review our full Terms & Conditions for detailed information on account rules, bonus terms, and withdrawal policies. Or visit our FAQ for quick answers to the most common questions from Indonesian players.

Read Terms & Conditions Visit Our FAQ