pos4f Privacy Policy

This Privacy Policy governs the collection, use, storage, sharing, and protection of personal data by pos4f in connection with the operation of the pos4f Platform at pos4f.net, including all associated products — pos4f Casino, live casino, sportsbook, and slots.

pos4f operates as a Trusted and Secure international online gaming platform, Licensed and Regulated Internationally. The Platform is designed to serve members located in Indonesia, and as such our data practices reflect the expectations and needs of Indonesian users, including sensitivity around the use of local payment channels such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.

References to "pos4f", "we", "us", or "our" mean the operator of the pos4f Platform. References to "you", "your", or "Member" mean any individual who has registered an account on the pos4f Platform or who otherwise interacts with the Platform as a visitor.

pos4f collects the following categories of personal data, depending on how you interact with the Platform:

pos4f does not collect sensitive personal data — such as health data, religious beliefs, or political opinions — in connection with the provision of its gaming services. Where identity documents submitted for KYC purposes happen to contain such information incidentally, that information is not recorded or used beyond confirming the identity fields required for verification.

pos4f collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technical collection: Data collected automatically when you access and use the Platform, including IP address, device identifiers, browser fingerprint, session timestamps, and navigation paths — collected via server logs, cookies, and similar tracking technologies.
• Third-party verification providers: Identity and age verification services may return confirmation of your identity status to pos4f following a KYC check. pos4f receives only the outcome of the verification (confirmed / not confirmed) and the specific fields verified; it does not receive raw data held by the verification provider beyond what you originally submitted.
• Payment processors: When you deposit or withdraw via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment processor may share transaction confirmation data with pos4f to reconcile your Wallet balance.

pos4f uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your pos4f account, including processing your login credentials, enabling two-factor authentication, and notifying you of account activity.
• Identity and age verification: Confirming that you meet the 21+ age requirement and that your identity matches the payment methods registered to your account, in accordance with our KYC obligations.
• Payment processing: Facilitating deposits and withdrawals in Indonesian Rupiah (IDR) via your chosen bank or e-wallet channel, and maintaining accurate transaction records.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account sharing, money laundering, and other prohibited conduct, using automated and manual review processes.
• Responsible gaming: Monitoring usage patterns to identify members who may be showing indicators of problem gambling, and enabling the self-management tools described in the Responsible Gaming page.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Product improvement: Analysing aggregated, anonymised usage data to understand how members interact with the Platform and to prioritise improvements to pos4f Casino, sportsbook, slots, and the deposit/withdrawal experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and updates about new games or features — only where you have not opted out of such communications. You may unsubscribe at any time by contacting support at [email protected].

pos4f processes personal data under the following legal bases, consistent with internationally recognised data protection principles:

• Contract performance: Processing necessary to deliver the services you have requested — including account operation, payment processing, and game access — under the contract formed when you accept the Terms & Conditions.
• Legal obligation: Processing necessary to comply with KYC, anti-money-laundering, age verification, and financial record-keeping obligations imposed by applicable international regulations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and product improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where your consent has been obtained at registration or subsequently. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pos4f does not sell or rent your personal data to third parties. We share data only in the following limited circumstances:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja receive only the transaction data necessary to process your deposit or withdrawal request. These providers operate under their own privacy policies and are not acting as data processors on pos4f's behalf for any purpose beyond the transaction.
• Identity verification providers: Third-party KYC providers receive the identity documents and data you submit for verification. They are contractually bound to use this data solely for verification purposes and not to retain or repurpose it.
• Game studio providers: Live casino and slot providers — including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Pocket Games Soft — receive a pseudonymous player identifier and session token to facilitate gameplay. They do not receive your full name, financial data, or Indonesian mobile number.
• Regulatory and law enforcement authorities: Where required by applicable law or a valid legal order, pos4f may disclose personal data to regulatory bodies or law enforcement agencies. pos4f will notify the affected member of such a disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of pos4f's assets, personal data held by pos4f may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Members will be notified of any such transfer.

pos4f uses cookies and similar tracking technologies to operate the Platform, maintain your session, personalise your experience, and analyse usage patterns. The categories of cookies in use are:

Most browsers allow you to manage, block, or delete cookies through their settings. Note that disabling strictly necessary or fraud prevention cookies may impair your ability to log in to or use the pos4f Platform.

The security measures in place at pos4f include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pos4f servers.
• Encryption at rest for sensitive data fields including passwords (hashed using industry-standard algorithms), financial data, and identity document references.
• Role-based access controls limiting staff access to personal data to those with a documented need, subject to regular access reviews.
• Multi-factor authentication for pos4f administrative systems.
• Regular independent penetration testing and security audits of the pos4f Platform infrastructure.
• Automated intrusion detection and rate-limiting systems to identify and block credential-stuffing, brute-force, and DDoS attacks in real time.
• An incident response plan with defined timelines for identifying, containing, and notifying affected members of any personal data breach.

While pos4f takes all reasonable technical and organisational measures to protect your data, no system is entirely impenetrable. In the event of a material data breach that poses a risk to your rights, pos4f will notify affected members within the timeframe required by applicable data protection standards.

pos4f retains personal data for the period necessary to fulfil the purpose for which it was collected, taking into account applicable legal, financial, and regulatory retention requirements:

• Active accounts: Personal data is retained for the duration of your pos4f membership. Account data is accessible to you at any time through your account dashboard.
• Closed accounts: Following account closure, transaction records and identity verification documents are retained for a minimum of five (5) years to meet standard financial record-keeping and anti-money-laundering compliance requirements. After this period, data is securely deleted or fully anonymised.
• Support records: Live chat transcripts and support emails are retained for up to two (2) years to support dispute resolution and quality assurance, after which they are anonymised.
• Analytics data: Aggregated, anonymised usage data derived from individual usage records may be retained indefinitely, as it no longer constitutes personal data following anonymisation.

As a pos4f member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the pos4f support team at [email protected]:

• Right of access: You may request a copy of the personal data pos4f holds about you, including a summary of how it is being used.
• Right to rectification: If any personal data held by pos4f is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields — such as your registered name — correction may require identity documentation.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to pos4f's legal retention obligations described in Section 9.
• Right to restrict processing: In certain circumstances, you may request that pos4f limits the processing of your personal data — for example, while a dispute about accuracy is being resolved.
• Right to data portability: Where technically feasible, you may request that pos4f provides your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, subject to pos4f's assessment of the competing interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

pos4f will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, of which you will be notified. We will not charge a fee for routine requests.

Age verification is a mandatory step in the pos4f registration process. If pos4f discovers that an account has been registered by or on behalf of an individual under 21 years of age, that account will be permanently closed immediately, all personal data associated with it will be deleted or quarantined for regulatory compliance purposes, and any remaining Wallet balance will be returned to the depositing payment method following applicable review procedures.

If you have reason to believe that a minor has registered a pos4f account, please contact the support team at [email protected] immediately so that appropriate action can be taken without delay.

pos4f operates as an international platform and its infrastructure — including servers, support systems, and third-party service providers — may be located in jurisdictions outside Indonesia. Where personal data is transferred internationally, pos4f applies appropriate safeguards consistent with internationally recognised data protection standards, including:

• Contractual data processing agreements with all third-party service providers that include binding data protection obligations.
• Limiting data transfers to providers operating in jurisdictions with data protection frameworks recognised as providing an adequate level of protection.
• Applying technical security measures — including encryption in transit and at rest — to all data regardless of its geographic location.

Members in Indonesia should be aware that their personal data may be processed outside Indonesia. By registering a pos4f account, you acknowledge this and consent to such transfers subject to the safeguards described above.

pos4f may update this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or the services we offer. Where changes are material — particularly where they affect your rights or how your data is used — pos4f will notify you via the email address registered to your account and/or by displaying a prominent notice on the Platform before the changes take effect.

• The current version of this Privacy Policy is always accessible at pos4f.net/privacy-policy and is identified by the "Last updated" date shown at the top of this document.
• Continued use of the pos4f Platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised Policy.
• If you do not agree with any material change to this Privacy Policy, you should cease using the Platform and close your account. Pending withdrawal requests will be processed under the Privacy Policy in force at the time of the request.

If you have any questions about this Privacy Policy, wish to exercise a data right, or wish to raise a complaint about how pos4f has handled your personal data, please contact the pos4f Privacy team through any of the following channels:

• Email: [email protected] — please include "Privacy Request" or "Privacy Complaint" in the subject line. Responses are provided within 4 hours during standard WIB (Western Indonesia Time, UTC+7) business hours and within 24 hours outside those hours.
• Live Chat: Available 24 hours a day, 7 days a week, staffed by native Indonesian-speaking agents who can assist in English or Indonesian. For complex privacy matters, we recommend email to ensure a full written record.

pos4f is committed to resolving all privacy concerns fairly and promptly. Where a complaint cannot be resolved to your satisfaction through direct contact with the pos4f support team, you may escalate the matter to the relevant regulatory authority in accordance with the dispute resolution provisions of the Terms & Conditions.