jon4d Privacy Policy

The following defined terms are used throughout this Privacy Policy. Where a term is also defined in jon4d's Terms & Conditions, it carries the same meaning here unless the context otherwise requires.

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, national identity number, email address, phone number, IP address, device identifiers, and payment account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means jon4d, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third party that Processes Personal Data on behalf of jon4d, including payment processors, KYC verification providers, and cloud hosting services.
• "Member" means any individual who has registered an Account on the jon4d Platform.
• "KYC" means Know Your Customer — the identity and age verification procedure jon4d conducts to confirm a Member's identity, residency, and payment method ownership.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by a Member to the Processing of their Personal Data for a stated purpose.
• "Data Breach" means a security incident that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data.

jon4d operates the Platform at https://jon4d.bio and acts as the Data Controller in respect of all Personal Data collected from Members and visitors to the Platform. jon4d is an internationally licensed online gaming platform serving users primarily in Indonesia, with players across Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, Palembang, and other regions throughout the archipelago.

For all data protection inquiries, please contact:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the jon4d Platform
• WhatsApp: Available 08:00–24:00 WIB (Western Indonesia Time, UTC+7)

jon4d collects the following categories of Personal Data from Members and Platform visitors. We apply the principle of data minimization — we collect only what is necessary for the purposes described in Section 5.

jon4d collects Personal Data through the following channels and methods:

• Direct submission: Information you provide when registering an Account, completing the KYC process, making deposits or withdrawal requests, contacting customer support, or participating in promotions and surveys.
• Automated technical collection: When you access the Platform, our servers automatically record Technical Data including your IP address, browser fingerprint, and device identifiers. This collection is necessary for Platform security, fraud prevention, and session management.
• Cookies and tracking technologies: jon4d uses first-party cookies and similar tracking technologies to maintain session state, remember your preferences, and analyze Platform usage. See Section 11 for the full cookies policy.
• Third-party KYC and payment providers: When you submit identity documents for KYC verification or initiate a payment transaction, our verification partners (such as identity document verification services) and payment processors (BCA, BRI virtual account operators, OVO, GoPay, DANA, ShopeePay, and LinkAja API partners) may return confirmation data to jon4d confirming the outcome of the verification or transaction.
• Fraud detection and risk management systems: Automated systems analyze usage patterns, IP geolocation, device fingerprinting, and behavioral data to identify potentially fraudulent or suspicious activity. This processing is conducted in jon4d's legitimate interest in protecting the integrity of the Platform.

jon4d processes your Personal Data for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed here without first obtaining your explicit consent or as otherwise required by law.

• Account creation and management: To register your Account, verify your identity and age (21+), maintain your account profile, and authenticate your login sessions.
• Payment processing: To process IDR deposits and withdrawals via your chosen payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported channels), to reconcile transaction records, and to return funds upon Account closure.
• KYC and regulatory compliance: To verify your identity, age, and payment method ownership as required by our international gaming license and applicable anti-money laundering (AML) obligations.
• Fraud prevention and platform security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, unauthorized Account access, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through live chat, email, and WhatsApp.
• Service improvement and analytics: To analyze usage patterns on the Platform (anonymized where possible) to improve game offerings, user interface design, payment flows, and overall Member experience.
• Responsible gaming: To monitor gaming behavior patterns that may indicate problem gambling, to administer self-exclusion requests, deposit limits, and cooling-off periods, and to provide proactive responsible gaming interventions where warranted.
• Marketing and promotions (with consent): To send you information about promotions, bonuses, seasonal offers (including Ramadhan specials, Idul Fitri campaigns, and Indonesian Independence Day promotions), new game releases, and other Platform updates — only where you have opted in to receive marketing communications. You may withdraw your marketing consent at any time via your Account settings.
• Legal and dispute resolution: To comply with applicable legal obligations, respond to regulatory inquiries, enforce our Terms & Conditions, and defend or pursue legal claims where necessary.

For each Processing purpose described in Section 5, jon4d relies on one or more of the following legal bases:

jon4d retains Personal Data for no longer than is necessary to fulfill the purpose for which it was collected, subject to any overriding legal, regulatory, or contractual retention obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymized. Anonymized data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

As a Member of jon4d, you have the following rights in respect of your Personal Data. jon4d commits to responding to all verified data subject requests within 30 calendar days of receipt. In cases of complexity or volume, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

jon4d does not sell your Personal Data. We share Personal Data only with the categories of third parties described below, and only to the extent necessary for the stated purpose. All third-party Data Processors engaged by jon4d are bound by data processing agreements requiring them to process your data only on our instructions and in accordance with applicable data protection standards.

• Payment processors and banking partners: When you make a deposit or withdrawal, your financial data is shared with the relevant payment network operator (e.g., BCA virtual account systems, BRI transfer processing, OVO, GoPay, DANA, ShopeePay, LinkAja API partners) to the extent required to execute and confirm the transaction in IDR.
• KYC and identity verification providers: Identity documents submitted during the KYC process are processed by third-party identity verification services operating under jon4d's instruction. These providers confirm the authenticity and validity of your identity document and return a pass/fail result to jon4d. They do not retain your identity documents beyond the period required to complete verification.
• Cloud hosting and infrastructure providers: jon4d's Platform and data are hosted on secure cloud infrastructure. Hosting providers operate as Data Processors under strict contractual obligations and are not permitted to access or use your Personal Data for any purpose beyond providing the underlying hosting service.
• Game content providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, NetEnt, and Microgaming) may receive pseudonymized session data (e.g., a session token, bet amounts, game outcomes) necessary to operate their games within the jon4d Platform. These providers do not receive your full identity data unless required by their own regulatory obligations.
• Fraud detection and risk management services: Anonymized or pseudonymized usage data may be shared with third-party fraud detection providers to identify patterns associated with bonus abuse, multi-accounting, or financial crime.
• Legal and regulatory authorities: jon4d may disclose Personal Data to law enforcement agencies, gaming regulators, financial intelligence units, or courts where required by applicable law, a valid legal order, or where disclosure is necessary to prevent serious harm or criminal activity.
• Professional advisors: jon4d's lawyers, auditors, and insurance advisors may access Personal Data on a strictly need-to-know basis in connection with their professional services, subject to professional confidentiality obligations.

jon4d operates as an internationally licensed platform. This means that some of the third-party Data Processors described in Section 9 may be located outside Indonesia. Where Personal Data is transferred to a country that does not provide an equivalent level of data protection, jon4d ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by a recognized data protection authority, requiring the recipient to process your data in accordance with standards equivalent to those in this Privacy Policy.
• Binding corporate rules, where applicable.
• The recipient country having been recognized as providing an adequate level of data protection by a competent international authority.

You may request information about the specific safeguards jon4d has in place for any particular international transfer by contacting our Data Protection Officer at [email protected].

jon4d uses cookies and similar tracking technologies (collectively, "cookies") on the Platform. Cookies are small text files placed on your device that allow the Platform to recognize your browser across sessions, maintain your login state, remember your preferences, and collect usage data for analytics purposes.

jon4d uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They enable core functionality such as session management, authentication, security token validation, and bet-slip state. The Platform cannot operate without these cookies; they cannot be disabled.
• Functional cookies: These cookies remember your preferences and settings (such as your preferred language display, notification settings, and last-visited game category) to provide a more personalized experience. Disabling functional cookies may reduce the convenience of your Platform experience but will not prevent you from using core services.
• Analytics cookies: jon4d uses first-party analytics cookies to collect aggregated, anonymized information about how Members use the Platform — which games are most popular, how navigation flows are used, and where members drop off in registration funnels. This data is used solely to improve the Platform and is not used to identify individual users.
• Fraud prevention and security cookies: These cookies support jon4d's fraud detection systems by recording device and session fingerprint data to identify anomalous behavior patterns indicative of fraudulent activity.

jon4d's Platform is strictly intended for adults aged 21 years or older. jon4d does not knowingly collect Personal Data from individuals under 21 years of age. Age verification is conducted as part of the Account registration and KYC process to enforce this restriction.

If jon4d becomes aware that Personal Data has been collected from a person under the age of 21, the Account will be immediately suspended, all deposits will be returned to the original payment method, all winnings will be voided, and all Personal Data associated with the Account will be deleted from our active systems as soon as practically possible, subject only to any mandatory legal retention obligations.

If you are a parent or guardian and believe that your child (under 21) has registered an Account on jon4d, please contact us immediately at [email protected] or via live chat. We will investigate and take appropriate action without delay.

jon4d implements a multi-layered approach to data security to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the jon4d Platform is encrypted using TLS 1.3, the current industry standard. Our SSL certificate is renewed continuously, and all connections default to HTTPS.
• Data encryption at rest: Sensitive Personal Data stored on jon4d's systems (including identity documents, payment account details, and password hashes) is encrypted at rest using AES-256 encryption.
• Access controls: Access to Personal Data within jon4d's systems is restricted on a strict need-to-know basis using role-based access controls. All staff access to production data systems is individually authenticated, logged, and audited.
• Two-factor authentication (2FA): jon4d strongly recommends enabling SMS OTP 2FA on your Account. 2FA is also enforced for all jon4d staff accessing internal data systems.
• Penetration testing and vulnerability assessments: jon4d's Platform undergoes regular security audits and penetration testing by independent security professionals to identify and remediate vulnerabilities.
• Data Breach response: In the event of a confirmed Data Breach that is likely to result in a risk to your rights and freedoms, jon4d will notify affected Members without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

The jon4d Platform does not contain links to third-party websites for commercial or advertising purposes. All navigation within the Platform uses internal URLs under the jon4d domain. Where jon4d references third-party services (such as payment processors or game studios) in its support documentation, those references are informational only and do not constitute endorsement of the third party's data practices.

jon4d is not responsible for the privacy practices or content of any third-party platforms, services, or applications that may be referenced in the context of payment processing, game software, or customer support tooling. We encourage you to review the privacy policies of any third-party service you interact with independently of the jon4d Platform.

jon4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, changes to the services we offer, or changes to the third-party processors we engage. The most current version of this Privacy Policy is always available at https://jon4d.bio/privacy-policy, and the "Last Updated" date at the top of this document will be revised accordingly.

Where an amendment is material — meaning it significantly changes how we collect, use, or share your Personal Data — jon4d will notify active Members via one or more of the following methods:

• A prominent notice displayed on the Platform dashboard upon your next login.
• An email notification to the address registered on your Account.
• A WhatsApp notification to your registered phone number, where WhatsApp notifications are enabled on your Account.

Your continued use of the Platform following a material amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should discontinue use of the Platform and may request Account closure by contacting our support team. Your data will be handled in accordance with the retention schedules in Section 7 following Account closure.

If you have any questions, concerns, or complaints relating to this Privacy Policy or to jon4d's handling of your Personal Data, please contact us using the details below. We take all privacy-related communications seriously and commit to responding within the timeframes stated.

• Email: [email protected] — responses within 3 business days for general inquiries; within 30 days for formal data subject requests.
• Live Chat: Available 24/7 on the jon4d Platform. Live chat agents can escalate privacy-specific queries to our Data Protection Officer.
• WhatsApp: Available 08:00–24:00 WIB (Western Indonesia Time, UTC+7).

If you are not satisfied with jon4d's response to your complaint or data subject request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. For Indonesian residents, this may include the relevant government body responsible for data protection under applicable Indonesian law, including Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Perlindungan Data Pribadi).