lim4d Privacy Policy

lim4d is Indonesia's premier online gaming destination, providing slots, live casino, sportsbook, togel (Indonesia's traditional numbers lottery), and Domino QQ to Indonesian players. In operating this platform, we necessarily collect and process personal data about our Members and visitors.

lim4d is committed to processing personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We collect only the data that is genuinely necessary to deliver a high-quality, secure, and compliant gaming experience. We do not sell your personal data to third parties for their own marketing purposes under any circumstances.

This Privacy Policy is intended to be read alongside lim4d's Terms & Conditions and Responsible Gaming page, both of which contain additional context relevant to how your account data is used.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, lim4d.
• "Data Processor" means a third-party entity that processes personal data on behalf of the Data Controller under a contractual agreement and under the Data Controller's instruction.
• "Member" means any individual who has registered a lim4d account.
• "Visitor" means any individual who accesses the lim4d platform without registering an account.
• "KYC" means Know Your Customer — the identity verification process required under anti-money-laundering obligations.
• "Cookies" means small text files stored on a user's device by a web browser at the instruction of the platform to enable core functionality, analytics, and personalisation.

The personal data lim4d collects can be grouped into the following categories:

lim4d collects personal data through the following channels:

• Directly from You: When you register an account, complete the KYC process, make a deposit or withdrawal, contact customer support, respond to a promotional survey, or update your account settings, you voluntarily provide personal data to lim4d.
• Automatically via the Platform: When you access lim4d — whether as a registered Member or an unregistered Visitor — our platform automatically collects Technical Data through server logs, cookies, and similar tracking technologies. This includes your IP address, device fingerprint, and browsing behaviour on the platform.
• From Payment Providers: When you deposit or withdraw funds, your bank (e.g., BCA, BRI, BNI, Mandiri) or e-wallet provider (e.g., OVO, DANA, GoPay, ShopeePay) shares transaction confirmation data with lim4d to reconcile your account balance.
• From Identity Verification Partners: When you submit KYC documentation, our third-party identity verification provider may share a verification status (pass/fail/pending) and, where required, a risk signal back to lim4d. lim4d does not store raw biometric data beyond the original document images you submit.
• From Fraud Detection Services: lim4d uses automated fraud detection tools that may process Technical Data and Gaming Activity Data to identify patterns consistent with bonus abuse, multi-accounting, money laundering, or use of prohibited software.

lim4d processes your personal data for the following purposes, each tied to a legitimate operational, legal, or contractual need:

lim4d processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between lim4d and a Member — including account registration, payment processing, game delivery, and customer support — is carried out on the basis of contractual necessity. Without this processing, lim4d cannot provide its services.
• Legal Obligation: Certain processing activities are required by applicable law, including anti-money-laundering (AML) obligations, KYC verification, transaction record retention, and age verification. lim4d has no discretion to limit this processing — it is mandated.
• Legitimate Interests: lim4d processes Technical Data and Gaming Activity Data for fraud detection, platform security, responsible gaming monitoring, and product analytics on the basis of its legitimate interest in operating a safe, fair, and commercially viable platform. Where legitimate interest is the basis, lim4d has conducted a balancing test and determined that its interests do not override your fundamental privacy rights.
• Consent: Where lim4d sends you marketing communications or personalises promotional offers based on your gaming history, it does so on the basis of your explicit opt-in consent. You may withdraw consent for marketing at any time by updating your account preferences or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

lim4d does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only with the categories of recipients listed below, strictly for the purposes described in Section 5, and only under appropriate data processing agreements or legal obligations:

• Payment Processors: Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay) receive the minimum transaction data necessary to process your deposit or withdrawal — typically your account reference, transaction amount in IDR, and bank account or wallet details you have provided.
• Identity Verification Providers: Our KYC partners receive the identity documents you submit (e.g., Indonesian KTP or passport) and return a verification status to lim4d. These partners are contractually prohibited from using your documents for any purpose beyond the verification task.
• Gaming Software Providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive the minimum session data required to launch and settle a game — typically a session token and wallet balance confirmation. They do not receive your full personal profile.
• Fraud Detection and Security Services: Automated fraud monitoring tools process Technical Data and Gaming Activity Data to flag suspicious patterns. These services act as Data Processors under lim4d's instruction and are contractually prohibited from using data for their own purposes.
• Customer Support Infrastructure: If lim4d uses a third-party helpdesk or live chat platform to manage support tickets, that provider may process Communication Data on lim4d's behalf. Access is restricted to the data required to manage the support interaction.
• Legal and Regulatory Authorities: lim4d will disclose personal data to law enforcement agencies, regulatory authorities, courts, or other governmental bodies where required to do so by law, court order, or in connection with an investigation into fraud, money laundering, or other serious crime. lim4d will notify affected Members of such disclosures to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of lim4d's assets, personal data held by lim4d may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections described in this policy. lim4d will notify Members of any such transfer before it takes effect.

lim4d retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any legal obligations that require longer retention periods. Our standard retention schedule is as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints (e.g., backup storage cycles), it is isolated from active processing until deletion is completed.

lim4d employs a comprehensive, layered security architecture to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational security measures include:

• SSL/TLS Encryption in Transit: All data transmitted between your device and lim4d's servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms that your connection is secured before any data is exchanged.
• Encryption at Rest: Sensitive data fields — including financial account details, KYC document images, and authentication credentials — are encrypted at rest using AES-256 encryption in our database infrastructure.
• Password Security: Member passwords are never stored in plaintext. Passwords are hashed using an industry-standard adaptive hashing algorithm (bcrypt or equivalent) with a unique per-account salt.
• Access Controls: Access to personal data within lim4d's internal systems is restricted on a strict need-to-know basis. Staff are granted the minimum level of access required for their role, and all access is logged and audited.
• Two-Factor Authentication (2FA): lim4d supports two-factor authentication for Member accounts. We strongly recommend enabling 2FA in your account settings to add an additional layer of protection beyond your password.
• Intrusion Detection and Monitoring: lim4d's infrastructure is monitored 24/7 for unusual access patterns, brute-force attempts, and other indicators of compromise. Automated alerts trigger incident response protocols when anomalies are detected.
• Regular Security Audits: lim4d undergoes periodic security assessments, including penetration testing and vulnerability scanning, conducted by qualified independent security professionals.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to Members' rights and freedoms, lim4d will notify affected Members without undue delay and will take immediate steps to contain and remediate the breach.

lim4d uses cookies and similar tracking technologies to make the platform function correctly, to understand how Members and Visitors use the site, and to deliver a personalised experience. The cookies lim4d uses fall into four categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, preserve your account settings between pages, and enable the shopping-cart-equivalent functionality that tracks your active bets. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how Members and Visitors interact with lim4d — which pages are visited most, how long sessions last, and where users navigate from. This data is used exclusively to improve the platform's structure, performance, and content. The data is aggregated and does not identify individual users.
• Functionality Cookies: These cookies remember preferences you have set — such as your preferred payment method, display settings, or responsible gaming tools you have configured — so you do not have to re-enter them on every visit.
• Targeting & Personalisation Cookies (Consent-Based): Where you have opted in to personalised promotions, lim4d may use cookies to record your gameplay preferences and tailor bonus offers accordingly. These cookies are only set following your explicit consent, which you may withdraw at any time through your account settings.

Most web browsers allow you to manage your cookie preferences through the browser's settings menu. You may block or delete cookies at any time; however, disabling strictly necessary cookies will impair or prevent access to the lim4d platform. lim4d does not currently respond to browser Do Not Track (DNT) signals, as no universally accepted DNT standard has been adopted.

As a Member or Visitor whose personal data lim4d processes, you have the following rights in relation to that data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You have the right to request a copy of the personal data lim4d holds about you, along with information about how it is being used. lim4d will respond to access requests within 30 days.
• Right to Rectification: If any personal data lim4d holds about you is inaccurate or incomplete, you have the right to request correction. Some data fields (such as your registered name and date of birth) may require KYC re-verification before correction can be applied.
• Right to Erasure ("Right to Be Forgotten"): You may request that lim4d delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been processed unlawfully. This right is subject to lim4d's legal obligations to retain certain records — particularly transaction history and KYC documents — under anti-money-laundering law. Where erasure cannot be completed in full, lim4d will explain the specific legal basis for retention.
• Right to Restriction of Processing: In certain circumstances (for example, while a rectification request is being assessed), you may request that lim4d restrict its processing of your personal data to storage only, pausing other processing activities.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) and to transmit it to another service provider.
• Right to Object: Where lim4d processes your personal data on the basis of legitimate interests, you have the right to object. lim4d will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect processing carried out before the withdrawal.

lim4d's platform is strictly intended for individuals aged 21 years and older. lim4d does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the registration and KYC process, and lim4d reserves the right to request documentary proof of age from any Member at any time.

If lim4d discovers or is notified that personal data has been collected from an individual under the age of 21, the affected account will be immediately suspended, all personal data associated with the account will be deleted as promptly as is technically feasible, and any deposited funds will be returned via the original payment method subject to applicable AML procedures.

If you are a parent or guardian and believe that a person in your care has registered a lim4d account without your knowledge, please contact our support team immediately at [email protected] with the subject line "Minor Account Report". lim4d will treat such reports as high priority and will respond within 24 hours.

lim4d's platform integrates with a number of third-party services to deliver its full product offering. While lim4d selects these partners carefully and requires them to process personal data in accordance with this Privacy Policy, each third party also maintains its own privacy policy that governs its own data practices. lim4d is not responsible for the privacy practices of any third-party service beyond the scope of the data processing agreement it holds with that party.

Key third-party integrations on lim4d include:

• Game Providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Pocket Games Soft, and Hacksaw Gaming. These providers power the live casino, slot, and crash game experiences on lim4d.
• Payment Infrastructure: Integration with Indonesian banking rails (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet networks (OVO, DANA, GoPay, ShopeePay, LinkAja) for IDR deposits and withdrawals.
• KYC and Identity Verification: A certified identity verification partner that processes your KTP, passport, or other government-issued ID documents for age and identity confirmation.
• Platform Analytics: Anonymised analytics tooling used to understand user journeys and platform performance. No personally identifiable information is transmitted to analytics providers.

lim4d does not embed social media tracking pixels (Facebook Pixel, TikTok Pixel, etc.) that transmit Member data to social media networks without explicit consent.

lim4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in the services we offer, or changes in applicable legal requirements. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

For material changes — those that significantly affect the rights of Members or the categories of data we collect — lim4d will notify registered Members via email to their registered address and via an in-platform notification at least 7 days before the change takes effect. Non-material changes (such as clarifications, typographical corrections, or minor structural revisions that do not alter the substance of the policy) may take effect immediately without advance notice.

Your continued use of lim4d following the effective date of any Privacy Policy update constitutes your acknowledgment of and agreement to the revised policy. If you do not accept the revised policy, you must cease using the platform and may request account closure by contacting support at [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how lim4d handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week in both English and Bahasa Indonesia.

Email: [email protected]

Subject Line for Data Rights Requests: "Data Rights Request — [Your Username]"

Subject Line for Minor Account Reports: "Minor Account Report"

Operating Hours: 24/7 — WIB (UTC+7). Also covering WITA (UTC+8) and WIT (UTC+9) time zones across the Indonesian archipelago.

lim4d will acknowledge all privacy-related enquiries within 5 business days. Formal data rights requests will receive a substantive response within 30 calendar days as described in Section 11.