Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned to them below:

• "fo8r" / "we" / "us" / "our" — the operator of the fo8r online gaming platform accessible at https://fo8r.cam.
• "User" / "you" / "your" — any individual who accesses, registers on, or interacts with the fo8r platform.
• "Personal Data" — any information that identifies or could identify a natural person, either directly or in combination with other available data. Examples include your name, email address, date of birth, national identity number, IP address, and payment account details.
• "Special Category Data" — personal data that warrants enhanced protection under applicable law, such as health-related information that may be collected in the context of our Responsible Gaming programme.
• "Processing" — any operation or set of operations performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, and destruction.
• "Controller" — the entity that determines the purposes and means of processing personal data; for this platform, the Controller is fo8r.
• "Processor" — a third party that processes personal data on behalf of fo8r under a data processing agreement (e.g., payment processors, KYC verification providers).
• "Consent" — a freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose.

2 Data We Collect

fo8r collects the following categories of personal data, depending on your interaction with the platform:

2.1 Account & Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification — you must be 21 or older)
• Indonesian residential address
• Email address and mobile phone number
• Username and encrypted password
• Indonesian National Identity Card (KTP) number or passport number, provided during KYC
• Selfie or live photo used for identity verification

2.2 Financial Data

• Bank account numbers and account holder name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction histories including deposit amounts, withdrawal amounts, dates, and statuses
• Source of funds documentation where requested for large transactions

2.3 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps, login history, and session duration
• Pages visited, features used, and clickstream data within the platform
• Game play history, wagering records, and bonus utilization data

2.4 Communication Data

• Records of live chat conversations with our customer support team
• Email and WhatsApp correspondence
• Survey responses, feedback submissions, and complaint records

2.5 Responsible Gaming Data

• Self-imposed limit settings (deposit limits, loss limits, session time limits)
• Self-exclusion requests and their duration
• Self-assessment quiz responses, where voluntarily completed
• Any health or vulnerability information disclosed voluntarily when seeking responsible gaming support

3 How We Collect Data

We collect personal data through the following channels and mechanisms:

Collection Method	Description	Data Types Involved
Account Registration	Information you provide when creating your fo8r account	Identity, contact, login credentials
KYC Verification	Documents and images submitted to verify your identity and age	Identity, KTP/passport, selfie
Transactions	Data generated when you deposit or withdraw funds	Financial, payment method details
Platform Interaction	Automated data collected as you browse and play on fo8r	Technical, usage, game records
Customer Support	Information you share when contacting our support team	Communication, account-related
Cookies & Tracking	Automated tracking technologies as detailed in Section 7	Technical, behavioral
Third-Party Sources	Data from payment processors, fraud prevention services, and KYC partners	Financial, identity verification

4 Purposes of Processing

fo8r processes your personal data only for specified, explicit, and legitimate purposes. We do not process personal data in any manner that is incompatible with those purposes. The primary purposes for which we use your data are as follows:

1. Account Administration: Creating, managing, and maintaining your fo8r account; providing access to all platform features; sending account-related notifications.
2. Identity & Age Verification (KYC): Confirming that you are at least 21 years of age, that you are a resident of Indonesia, and that your identity matches the documents provided. This is a regulatory requirement.
3. Transaction Processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other supported payment channels; processing withdrawal requests; maintaining accurate financial records.
4. Fraud Prevention & Security: Detecting, investigating, and preventing unauthorized account access, money laundering, bonus abuse, identity fraud, and other prohibited activities.
5. Legal & Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML) regulations, data protection law, and international gaming standards, including document retention requirements.
6. Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and maintaining support records.
7. Responsible Gaming: Monitoring play patterns for signs of problem gambling; enforcing self-exclusion requests and limit settings; providing interventions where appropriate.
8. Platform Improvement: Analyzing anonymized usage data to improve game performance, payment processing speed, user interface design, and overall platform quality.
9. Marketing & Promotions: Sending promotional offers, bonus notifications, and relevant gaming news, where you have provided consent or where we have a legitimate interest, subject to your right to opt out at any time.

5 Legal Basis for Processing

fo8r processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, payment processing, game delivery, and KYC verification — is carried out on the basis that it is necessary to fulfil our agreement.
• Legal Obligation: Certain processing activities are required by applicable law, including anti-money laundering (AML) checks, age verification, and financial record retention. We have no discretion to waive these requirements.
• Legitimate Interests: Where we have a genuine business interest in processing your data that is not overridden by your privacy rights — for example, fraud detection, platform security monitoring, and improving our services through anonymized analytics.
• Consent: For optional processing activities such as marketing communications and the use of non-essential cookies, we rely on your freely given consent. You may withdraw consent at any time by contacting our support team or adjusting your account notification settings.
• Vital Interests: In rare circumstances, we may need to process personal data — including Special Category Data disclosed in a responsible gaming context — where it is necessary to protect your vital interests or the vital interests of another person.

6 Data Sharing & Disclosure

fo8r does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Payment Service Providers

We share the minimum necessary financial and identity data with our banking and e-wallet partners — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — in order to process your deposit and withdrawal transactions securely.

6.2 Identity Verification & KYC Partners

We engage licensed third-party KYC and identity verification providers to validate your identity documents, screen against sanctions and politically exposed persons (PEP) lists, and conduct source-of-funds checks where required. These processors act strictly under our instruction and are bound by confidentiality and data protection agreements.

6.3 Fraud Prevention & Security Services

Aggregated risk signals and, where necessary, specific account data may be shared with fraud detection platforms to identify and prevent fraudulent activity, account takeovers, and financial crime across our platform.

6.4 Game Technology Providers

Certain technical data — such as session tokens and bet records — is exchanged with our game studio partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) to deliver game content and record outcomes correctly. These providers do not receive your identity or financial data beyond what is technically necessary.

6.5 Legal & Regulatory Authorities

We may disclose personal data to law enforcement, regulatory bodies, or courts where we are legally required to do so, where we believe disclosure is necessary to protect the rights or safety of fo8r or its users, or where we are responding to a valid legal process such as a court order or subpoena.

6.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of fo8r's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

6.7 Professional Advisors

We may share data with our legal counsel, auditors, and insurance providers on a strictly confidential basis, where necessary to obtain professional advice or to manage risk and compliance obligations.

7 Cookies & Tracking Technologies

fo8r uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyze how you interact with our services. The following categories of cookies may be active on fo8r:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Required for core platform functionality — login sessions, security tokens, payment flow management	No — essential to platform operation
Functional	Remember your language preferences, game settings, and interface customizations	Yes — optional, but disabling may reduce functionality
Analytical	Collect anonymized data on page visits, session durations, and feature usage to improve the platform	Yes — opt out via account settings
Marketing	Track promotional campaign effectiveness and serve relevant bonus offers where you have consented	Yes — withdraw consent via account settings

Most web browsers allow you to manage cookie preferences through their settings. However, blocking strictly necessary cookies may prevent you from accessing certain features or areas of fo8r. Clearing cookies will log you out of your active session. We do not use third-party advertising networks or cross-site tracking cookies that share your browsing data outside of fo8r's own services.

8 Data Retention

fo8r retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your account's active life, plus a minimum of 5 years following account closure — in line with standard AML and financial record-keeping requirements.
• Transaction Records: Maintained for a minimum of 7 years from the date of each transaction to satisfy financial regulatory obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years after the end of the business relationship, or longer if required by applicable law or an ongoing regulatory investigation.
• Customer Support Records: Retained for 3 years from the date of the last interaction, unless the record relates to an unresolved dispute, in which case it is retained until the matter is fully resolved.
• Marketing Consent Records: Retained for the duration of your consent, plus 2 years following withdrawal, to demonstrate compliance with consent-based marketing obligations.
• Anonymized Analytics Data: Retained indefinitely in anonymized, aggregated form that cannot be linked back to any individual user.

When data is no longer required, we delete or permanently anonymize it in a secure manner. Physical documents containing personal data are shredded; digital records are securely overwritten or deleted from all active and backup systems.

9 Data Security

fo8r takes the security of your personal data extremely seriously. We have implemented a comprehensive set of technical and organizational measures designed to protect your data against unauthorized access, accidental loss, alteration, or disclosure. Our security infrastructure includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and fo8r's servers is encrypted using industry-standard Transport Layer Security (TLS 1.2+), ensuring that your login credentials, financial data, and personal information are protected in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents, payment details, and passwords — is encrypted at rest using AES-256 encryption on our secure, access-controlled servers.
• Two-Factor Authentication (2FA): We offer and strongly encourage 2FA for all user accounts, adding a second layer of protection beyond your password.
• Access Controls: Access to personal data within fo8r is strictly limited to authorized personnel who need it to perform their legitimate job functions. All internal data access is logged and periodically audited.
• Intrusion Detection & Monitoring: Our platform employs continuous automated monitoring for suspicious login attempts, unusual transaction patterns, and other indicators of potential security incidents.
• Penetration Testing: fo8r engages independent security professionals to conduct regular penetration testing of our platform infrastructure and identify vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, we will notify affected Users without undue delay in accordance with applicable data protection law.

While we employ robust security measures, no digital platform can guarantee absolute immunity from all possible security threats. You also play a role in keeping your account secure — please use a strong, unique password, enable 2FA, and contact us immediately at [email protected] if you suspect unauthorized access to your account.

10 Your Rights

As a User of fo8r, you are entitled to the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to our support team at [email protected]. We will respond within 30 days of receiving a valid request.

Please note that certain rights may be limited where fo8r has a compelling legitimate interest, a legal obligation to retain the data, or where exercising the right would adversely affect the rights of other individuals. We will always explain any limitations clearly when responding to your request.

11 International Data Transfers

fo8r's primary operational infrastructure is located within data centers that maintain internationally recognized security certifications. However, some of our third-party service providers — particularly game studio partners and KYC verification platforms — may process data in jurisdictions outside Indonesia. In all cases where personal data is transferred internationally, we ensure that appropriate safeguards are in place, which may include:

• Standard contractual clauses (SCCs) approved by relevant data protection authorities, incorporated into our agreements with each data processor
• Data processing agreements that bind processors to confidentiality, security, and data minimization obligations equivalent to those we apply internally
• Transfers only to jurisdictions that provide an adequate level of data protection as recognized by applicable international standards

By using fo8r, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia. We take all reasonable steps to ensure that such transfers are lawful and that your data receives a level of protection consistent with this Privacy Policy.

12 Protection of Minors

fo8r is strictly intended for adults aged 21 and over. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes mandatory age verification, and we conduct KYC checks to confirm that users meet this requirement.

If you are a parent or guardian and believe that a minor under your care has provided personal data to fo8r without your knowledge or consent, please contact us immediately at [email protected]. Upon verification of the claim, we will promptly close the relevant account, delete all associated personal data, and reverse any transactions where technically possible.

We also recommend that parents and guardians use parental control software to prevent minors from accessing online gaming platforms. fo8r supports efforts to raise awareness of responsible gaming and age-gating technology in the Indonesian market.

13 Amendments to This Policy

fo8r may update this Privacy Policy periodically to reflect changes in our data practices, new service offerings, evolving legal requirements, or feedback from Users. When we make material changes, we will notify you via email or a prominent notice within the platform at least 7 days before the revised policy takes effect.

The "Last Updated" date displayed at the top of this page indicates when the current version came into force. We encourage you to review this page regularly to stay informed about how we protect your personal data. Your continued use of fo8r after the effective date of any revision constitutes your acceptance of the updated policy.

If a proposed amendment materially reduces your privacy rights and you do not wish to accept it, you are entitled to close your account and withdraw your remaining balance before the revision takes effect. Please contact our support team if you wish to proceed with account closure.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how fo8r handles your personal information, please reach out to our Data Protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Rights Request" for faster routing
• Live Chat: Available 24/7 on the fo8r platform — Indonesian-speaking agents are on hand around the clock
• WhatsApp: +62 812 3456 7890 (available 08:00–02:00 WIB)
• Response Time: We aim to acknowledge all privacy requests within 24 hours and provide a full response within 30 calendar days

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. Indonesian residents may contact the relevant government ministry responsible for data protection matters.

We take every privacy concern seriously and are committed to resolving all complaints fairly, transparently, and in a timely manner.