Privacy Policy

1. Introduction

Welcome to the mira4d Privacy Policy. This document explains how mira4d ("we," "us," "our") collects, uses, shares, and protects your personal information when you use our online gaming platform and services. We are committed to protecting your privacy and ensuring the security of your personal data in accordance with international data protection standards and Indonesian privacy laws.

By creating an account and using mira4d services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, please do not use our services.

This Privacy Policy applies to all users of mira4d, including visitors to our website, registered account holders, and anyone who interacts with our customer support or marketing communications.

2. Data Controller Information

mira4d is the data controller responsible for your personal information. We are registered under international gaming regulations and operate in compliance with applicable data protection laws. For data protection inquiries, you can contact us at:

• Email: [email protected]
• Data Protection Officer: [email protected]
• Physical Address: Available upon request for regulatory or legal purposes

3. What Information We Collect

3.1 Personal Identification Information

When you register an account with mira4d, we collect the following personal information:

• Full Legal Name: As it appears on your government-issued ID
• Date of Birth: To verify you meet the minimum age requirement (21 years)
• Email Address: For account communications and verification
• Mobile Phone Number: For account security and two-factor authentication
• Residential Address: To comply with anti-money laundering (AML) regulations
• Government-Issued ID: KTP (Indonesian National ID), passport, or driver's license for identity verification (KYC)
• Proof of Address: Utility bills or bank statements (when required for enhanced due diligence)
• Selfie/Photo Verification: To confirm you are the legitimate account holder

3.2 Financial Information

To process deposits and withdrawals, we collect:

• Bank Account Details: Account number, account holder name, bank name (BCA, BRI, BNI, Mandiri, etc.)
• E-Wallet Information: OVO, DANA, GoPay, ShopeePay, LinkAja account details
• Transaction History: Deposit amounts, withdrawal amounts, dates, and payment methods used

Important: We do not store full credit card numbers or CVV codes. Payment processing is handled through secure, PCI-DSS compliant payment gateways.

3.3 Gaming Activity Data

To provide gaming services and comply with regulatory requirements, we collect:

• Games played and betting history (casino games, sports bets, togel selections)
• Bet amounts, stakes, winnings, and losses
• Bonuses claimed and wagering progress
• Session duration and frequency
• Responsible gaming tool usage (deposit limits, self-exclusion periods)

3.4 Technical Information

When you access mira4d, we automatically collect:

• IP Address: To verify your location and prevent unauthorized access
• Device Information: Device type, operating system, browser type and version
• Login History: Dates, times, and locations of account access
• Cookies: Small data files stored on your device (see Section 8 for details)
• Usage Analytics: Pages visited, features used, time spent on platform

3.5 Communication Records

For customer support quality assurance and dispute resolution, we retain:

• Live chat transcripts
• Email correspondence
• WhatsApp and Telegram message history with our support team
• Customer feedback and complaints

4. How We Collect Information

We collect information through the following methods:

• Direct Provision: When you register, update your profile, or submit documents for KYC verification
• Automated Collection: Through cookies, log files, and analytics tools when you use our platform
• Third-Party Sources: From payment processors (to verify transactions) and identity verification services (to confirm your identity)
• Customer Interactions: When you contact support, participate in surveys, or provide feedback

5. How We Use Your Information

5.1 Legal Bases for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity: To provide gaming services under our Terms & Conditions
• Legal Obligation: To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulations
• Legitimate Interest: To prevent fraud, improve services, and ensure platform security
• Consent: For marketing communications (you can withdraw consent at any time)

5.2 Specific Purposes

6. When We Share Your Information

We do not sell your personal information. However, we may share your data with the following third parties for specific purposes:

6.1 Service Providers

• Payment Processors: To process deposits and withdrawals via Indonesian banks and e-wallets
• Identity Verification Services: To confirm your identity and prevent fraud
• Cloud Hosting Providers: To securely store data on encrypted servers
• Customer Support Software: To manage support tickets and live chat
• Analytics Providers: To understand platform usage and improve user experience

All service providers are contractually bound to protect your data and use it only for the purposes specified by mira4d.

6.2 Regulatory Authorities & Law Enforcement

We may disclose your information when legally required to:

• Gaming regulatory bodies and licensing authorities
• Financial intelligence units (FIU) for AML/CTF compliance
• Law enforcement agencies investigating criminal activity
• Tax authorities (when required by Indonesian tax law)
• Courts and legal proceedings (in response to subpoenas or court orders)

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change via email and platform notification.

7. How We Protect Your Data

7.1 Technical Security Measures

• 256-bit AES Encryption: All data is encrypted both in transit (via SSL/TLS) and at rest on our servers
• Firewall Protection: Multi-layer firewalls protect against unauthorized access
• DDoS Mitigation: Advanced systems to prevent distributed denial-of-service attacks
• Intrusion Detection Systems: Real-time monitoring for suspicious activity
• Regular Security Audits: Third-party penetration testing and vulnerability assessments
• Secure Data Centers: Physical security with 24/7 monitoring, biometric access controls

7.2 Organizational Security Measures

• Access Controls: Role-based access ensures only authorized personnel can view your data
• Employee Training: All staff undergo data protection and security awareness training
• Confidentiality Agreements: All employees sign strict non-disclosure agreements
• Incident Response Plan: Procedures to quickly detect, contain, and respond to data breaches

7.3 Account Security (Your Responsibility)

While we implement robust security measures, you must also protect your account:

• Use a strong, unique password (minimum 8 characters, mix of letters, numbers, symbols)
• Enable two-factor authentication (2FA) for an extra layer of security
• Never share your login credentials with anyone
• Log out after each session, especially on shared devices
• Immediately report suspicious activity to customer support

8. Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit mira4d. They help us recognize your device, remember your preferences, and improve your experience.

8.2 Types of Cookies We Use

• Essential Cookies: Required for platform functionality (login, session management, security). Cannot be disabled.
• Performance Cookies: Track how you use our platform to improve performance and fix bugs.
• Functional Cookies: Remember your preferences (language, currency display, game favorites).
• Analytics Cookies: Provide insights into user behavior (Google Analytics, internal analytics).
• Marketing Cookies: Track your interactions with promotional content (only with your consent).

8.3 Managing Cookies

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from using certain platform features. To opt out of analytics cookies, use browser extensions like uBlock Origin or Privacy Badger.

9. Your Privacy Rights

Under international data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure (Right to be Forgotten): Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a machine-readable format to transfer to another service
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent for marketing communications or optional data processing

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within 30 days.

10. Data Retention

We retain your personal data for as long as necessary to provide services and comply with legal obligations:

• Active Accounts: Data retained for the duration of your account plus 7 years after closure (to comply with AML/CTF regulations)
• Closed Accounts: Most data deleted within 30 days of closure, except records required by law
• Financial Records: Transaction history retained for 7 years (regulatory requirement)
• KYC Documents: Retained for 7 years after account closure
• Marketing Data: Deleted immediately upon unsubscribe or within 2 years of inactivity
• Technical Logs: IP addresses and session logs retained for 90 days

11. Children's Privacy

mira4d services are strictly for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected data from a minor, we will immediately:

• Permanently close the account
• Delete all associated personal data
• Return any remaining balance to the source of deposit
• Report the incident to relevant authorities if required

If you believe a minor has created an account, please contact us immediately at [email protected].

12. International Data Transfers

Your personal data may be transferred to and processed in countries outside Indonesia, including data centers in jurisdictions where mira4d operates or where our service providers are located. When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for transfers within our corporate group
• Your explicit consent when required by law

All international transfers comply with applicable data protection regulations to ensure your information remains secure regardless of where it is processed.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Send an email notification to your registered email address
• Display a prominent notice on the platform homepage
• For significant changes, request your explicit consent before the changes take effect

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of mira4d after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• General Privacy Inquiries: [email protected]
• Data Protection Officer: [email protected]
• Data Subject Rights Requests: [email protected] (include "Data Request" in subject line)
• Security Concerns: [email protected]
• Live Chat: Available 24/7 through the platform

We aim to respond to all privacy inquiries within 48 hours and data subject rights requests within 30 days.