medali4d Platform Privacy Notice
Indonesia's e-wallet market has grown to over many active users across DANA, e-wallet, mobile banking, and similar platforms, reflecting the region's shift toward digital payments. We at medali4d handle your account data using the same encryption and compliance standards expected by these payment networks. This notice describes what we collect when you use medali4d, how we protect it, who we share it with, and what rights you have.
We collect your data only to operate our platform, verify your identity, process your deposits and withdrawals, and comply with applicable law. We encrypt all sensitive information in transit using SSL and at rest on our servers. We do not sell your data to advertisers or marketing networks. We do not share your contact information without your consent, except where law requires it or where payment processors need it to complete transactions.
Our medali4d privacy policy applies whenever you use our platform — Android APK, iOS mobile site, or desktop browser. We speak in first person (we / our) because we are accountable for these practices. If you have questions about how we handle your data, contact our support team via in-app help or email.
What Data We Collect on medali4d
We collect data in three categories: account creation, identity verification, and activity logging.
Account creation: When you sign up for medali4d, we request your email address and a password. We also ask for your phone number to send account alerts (optional; you can opt out later). We hash your password cryptographically before storing it — we never store plaintext passwords. Your email address is used to send verification links, password-reset requests, and important account notifications.
Identity verification: Before your first withdrawal, we require you to upload a photo of your national ID or passport. We also ask for your full name and date of birth, which we cross-check against your ID photograph. We store these documents encrypted on our servers and do not share them with third parties outside our compliance team. Once verification is complete, we retain your documents for regulatory purposes and to prevent duplicate accounts.
Activity logging: We log every deposit, wager, game session, and withdrawal request. We record your IP address, device type, browser version, and approximate geolocation (based on IP). We use this data to detect fraud, investigate disputes, and comply with anti-money-laundering regulations. Activity logs are encrypted and retained for a minimum of five years after an account closes.
We collect cookies when you browse medali4d. These cookies track your login session, remember your language preference, and log your browsing path for performance monitoring. We use session cookies (cleared when you log out) and persistent cookies (valid for 30 days). You can disable cookies in your browser settings, but this may limit medali4d functionality.
How We Use Your Data on medali4d
We use your data for five core purposes: account operation, payment processing, compliance, fraud prevention, and platform improvement.
- Account operation: We use your email, password, and phone to authenticate you and deliver your account balance, betting history, and withdrawal requests.
- Payment processing: We share your name and ID with payment providers (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) to confirm deposits and process withdrawals. These providers are data controllers and handle your payment information according to their own privacy policies.
- Compliance: We verify your identity to comply with Know Your Customer (KYC) regulations. We retain your ID documents to satisfy anti-money-laundering (AML) and sanctions-screening requirements.
- Fraud prevention: We analyse your account activity, device fingerprints, and geographic patterns to detect fraudulent transactions and account takeovers. We use automated tools and our compliance team to flag suspicious behaviour.
- Platform improvement: We analyse anonymised usage data (which markets are popular, how long users stay on the app, which payment methods fail most often) to improve medali4d's performance and user experience.
We encrypt your password, ID documents, and transaction history. Your account session expires after subject to verification of inactivity on medali4d to prevent unauthorised access from shared devices.
Your Rights on medali4d and Our Data Commitments
You have the right to access, correct, and request deletion of your medali4d data. To access a copy of your data, contact our support team with a written request. We will provide your email, phone, full name, account creation date, deposit and withdrawal history, and wager records within standard business hours (typically 3–5 business days). We may decline deletion requests if we are required by law to retain your data (for example, AML regulations require us to keep transaction records for five years).
Our medali4d servers are located outside Indonesia, which means your data may be processed in jurisdictions with different privacy laws. We encrypt data before transmission and use secure channels (SSL/TLS) for all transfers. If you are uncomfortable with cross-border data processing, you should not use medali4d.
We retain your account data as long as your account is active. Once you close your account, we delete non-essential data (login history, device information) within 30 days. We retain transaction records, ID documents, and deposit/withdrawal history for five years to comply with financial regulations. After five years, we securely delete all remaining data.
We use third-party analytics platforms to understand medali4d usage trends. These platforms do not receive your personal information — only anonymised data like page views, time on site, and browser type. We do not use your data for targeted advertising.
During high-volume periods around Liga 1, Piala Indonesia, and Piala AFF football tournaments, or around Idul Fitri and Idul Adha holidays, our servers may process increased amounts of data. Our encryption and retention policies remain the same regardless of volume.
Our medali4d platform is available only in jurisdictions where online wagering is legal. If we discover that your account is being accessed from a restricted jurisdiction, we may suspend your account and help you withdraw your balance. We do not knowingly collect data from users under the age of 18.
We update this privacy notice periodically to reflect changes in our platform or legal requirements. Material changes are announced via email to all active account holders. Your continued use of medali4d after an update constitutes acceptance of the new notice.
For questions about this notice or to request access to your data, contact us via in-app help, email, or our support portal. We will respond to all data requests within standard business hours.