Privacy Policy

The following capitalised terms carry the meanings set out below throughout this Privacy Policy:

• "Platform" means the ambo4d website accessible at https://ambo4d.app, including all sub-pages, features, and services offered thereon.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, mobile number, national identity number, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Controller" means the entity that determines the purposes and means of Processing Personal Data — for this Platform, that entity is ambo4d.
• "Processor" means any third party that Processes Personal Data on behalf of ambo4d under a contractual arrangement (e.g., KYC verification providers, payment processors).
• "Player" or "you" means any natural person who accesses the Platform, whether as a registered account holder or a guest visitor.
• "KYC" means Know Your Customer — the identity verification process requiring documentary evidence of identity before withdrawals are processed.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation.
• "AML" means Anti-Money Laundering — the set of legal and procedural obligations that require ambo4d to monitor, record, and in some cases report certain financial transactions.

ambo4d is an internationally licensed online sports betting and casino platform operating at https://ambo4d.app. We serve Players primarily in the Indonesia market, offering a comprehensive suite of products including sports betting on BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, and the FIFA World Cup; live casino tables; slot gacor (high-frequency-payout slot) titles from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe; as well as togel (Indonesia's traditional numbers lottery) and bola tangkas (Indonesia's classic card-poker machine game).

ambo4d acts as the data Controller with respect to Personal Data collected through the Platform. All accounts are denominated in Indonesian Rupiah (IDR / Rp). Our customer support team includes native Indonesian-speaking agents available 24/7, including during Ramadhan, Idul Fitri, and other Indonesian national holidays.

For all privacy-related enquiries, the primary contact channel is:

ambo4d collects Personal Data in the following categories. The table below summarises each category, specific data points, and whether collection is mandatory or optional:

ambo4d collects Personal Data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal request, placing a bet, contacting support, or filling in any form on the Platform.
• Automated technologies: Cookies, web beacons, pixel tags, and server logs automatically record Technical Data and Usage Data when you visit or interact with the Platform. See Section 7 for full details on cookies.
• Third-party verification providers: When you submit KYC documents, our identity verification partners may return enriched data (e.g., verified name, document expiry status) which is added to your account record.
• Payment processors: When you initiate a deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment provider may share transaction confirmation data with us.
• Fraud and AML screening tools: Third-party risk-management tools may return risk scores or flags associated with your device fingerprint or transaction patterns.

ambo4d processes your Personal Data only where a lawful basis exists. The table below maps each processing purpose to its legal basis:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact our support team or update your preferences in the account settings panel.

ambo4d does not sell your Personal Data to third parties. We may share your data with the following categories of recipients strictly on a need-to-know basis and under appropriate data-protection agreements:

• KYC and identity verification partners: Third-party providers that verify government-issued documents and perform liveness checks to confirm your identity during account opening and during periodic re-verification.
• Payment processors and banking partners: The financial institutions and e-wallet operators through which you deposit and withdraw funds — BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja. These parties receive only the transaction data necessary to process your request.
• Fraud detection and AML screening services: Automated risk-intelligence providers that screen transactions against global watchlists and assess device and behavioural signals for fraud indicators.
• IT infrastructure and hosting providers: Secure cloud hosting and content delivery providers that store Platform data under strict data-processing agreements.
• Game studios and RNG certification bodies: Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, Spribe) receive only the session and transaction data necessary to run the game and settle the round outcome.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or a legitimate request from a competent governmental authority, ambo4d may disclose Personal Data. We will notify you of such requests to the extent permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of ambo4d's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent data-protection obligations.

ambo4d uses cookies and similar technologies to operate the Platform, maintain your session, personalise your experience, and gather analytics data to improve our products. The following categories of cookies are in use:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For detailed guidance on managing cookies in your specific browser, refer to the browser's own help documentation.

ambo4d implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport security: All data in transit is protected by TLS 1.2 or higher with 256-bit encryption.
• Storage encryption: Sensitive data fields — including identity document images, financial account numbers, and passwords — are encrypted at rest using AES-256.
• Password hashing: Account passwords are stored as one-way cryptographic hashes using a modern salted hashing algorithm. ambo4d staff cannot retrieve or read your password in plain text.
• Access controls: Internal access to Personal Data is restricted on a role-based, need-to-know basis. Staff with access to sensitive data undergo regular security training and background screening.
• Penetration testing: The Platform undergoes periodic independent security assessments to identify and remediate vulnerabilities.
• Incident response: ambo4d maintains a documented data breach response plan. In the event of a breach that poses a significant risk to your rights, affected Players will be notified promptly with details of the incident and recommended protective actions.

ambo4d retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised data derived from your usage may be retained indefinitely for statistical and analytical purposes.

Subject to applicable law and certain legal exceptions, you have the following rights regarding your Personal Data held by ambo4d:

• Right of Access: You may request a copy of all Personal Data we hold about you, along with information about how it is processed. We will respond within 30 days of a verified request.
• Right to Rectification: If any of your Personal Data is inaccurate or incomplete, you have the right to request correction. For minor corrections (e.g., updating a phone number), you may do this directly via account settings. For corrections to identity data, contact support with supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note: we are unable to erase data that we are legally required to retain (e.g., AML records).
• Right to Restrict Processing: In certain circumstances — for example, while a rectification request is being assessed — you may request that we restrict the processing of your data to storage only.
• Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you may request a copy of your Personal Data in a structured, machine-readable format (e.g., JSON or CSV).
• Right to Object: You may object at any time to processing based on our legitimate interests, including profiling for personalised game recommendations. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact our support team at [email protected] with the subject line Data Rights Request and include sufficient information to verify your identity. We will acknowledge your request within 5 business days (WIB) and aim to fulfil it within 30 calendar days.

The Platform is strictly intended for adults aged 21 years and older. ambo4d does not knowingly collect Personal Data from any person under 21 years of age. If you are under 21, you must not register an account, access the Platform, or submit any Personal Data.

If ambo4d becomes aware that Personal Data has been collected from a person under 21, that account will be immediately suspended, all associated Personal Data will be deleted as promptly as legally permissible, and any winnings generated on the underage account will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the Platform, please contact our support team immediately at [email protected] so that we can take swift action.

ambo4d's primary Player base is located in Indonesia. However, the technical infrastructure supporting the Platform — including cloud hosting, KYC verification, and fraud-detection systems — may involve the transfer of Personal Data to servers or service providers located outside of Indonesia.

Where such transfers occur, ambo4d ensures that appropriate safeguards are in place to protect your Personal Data at an equivalent level to the protections described in this policy. Safeguards may include:

• Standard contractual clauses incorporated into data-processing agreements with Processors.
• Transfers only to jurisdictions that provide an adequate level of data protection as assessed by our legal team.
• Binding corporate rules where applicable within our group of companies.

You may request further details about the specific safeguards in place for any given international transfer by contacting our support team.

ambo4d reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

For material changes — those that significantly affect how we collect, use, or share your Personal Data — we will notify registered Players via email to the address on file and/or via a prominent notice on the Platform at least seven (7) calendar days before the revised policy takes effect.

Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you must stop using the Platform and contact support to request account closure before the effective date.

If you have any questions, concerns, or complaints about this Privacy Policy or the way ambo4d handles your Personal Data, please contact us through the following channel:

Our support team includes native Indonesian-speaking agents available around the clock, including during Ramadhan, Idul Fitri, and other Indonesian public holidays.

We take all privacy complaints seriously. Upon receiving a complaint, we will:

• Acknowledge receipt of your complaint within 5 business days.
• Investigate the matter thoroughly and in good faith.
• Provide a written response with our findings and any remedial action taken within 30 calendar days.
• Escalate to senior management if the matter cannot be resolved at first-contact level.

If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to seek redress through applicable legal channels.