At diana4, your privacy is a foundational commitment — not an afterthought. This Policy explains precisely what personal data we collect from Indonesian players, why we collect it, how it is stored and protected, and the rights you hold over your own information. Please read it carefully alongside our Terms & Conditions.
All data in transit protected by 256-bit TLS encryption
We never sell your personal information to third parties
Access, correct, or delete your data at any time
Privacy requests acknowledged within 24 hours (WIB)
Scope of This Policy: This Privacy Policy applies to all personal data processed by diana4 in connection with the online gaming platform accessible at https://diana4.cam. It covers data collected via the website, live chat, email communications, and any related services. By registering an Account or continuing to use the Platform, you confirm that you have read and understood this Policy.
1.1 diana4 ("we", "us", "our") is the data controller responsible for the personal information of all registered players and site visitors. We operate the Platform at https://diana4.cam and are committed to handling your data lawfully, fairly, and transparently.
1.2 This Policy applies to all individuals who interact with the diana4 Platform, including registered Account holders, prospective players who browse the site without registering, and individuals who contact our support team. It applies regardless of whether you access the Platform from Jakarta, Surabaya, Bandung, Bali, Medan, or any other location within Indonesia.
1.3 This Privacy Policy should be read in conjunction with diana4's Terms & Conditions and Responsible Gaming Policy. In the event of any conflict between this Policy and those documents on a privacy matter, this Policy takes precedence.
1.4 We align our data-protection practices with internationally recognized privacy principles, including those reflected in the General Data Protection Regulation (GDPR) framework, as a global best-practice standard for the online gaming industry.
The personal data we collect falls into the following categories:
What We Do Not Collect: diana4 does not collect or store full payment card numbers, CVV codes, or internet banking passwords. We do not collect biometric data beyond KYC selfie photos. We do not access the contents of your device outside of the information you voluntarily submit through our Platform.
3.1.1 Most data is collected directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or update your Account settings.
3.2.1 Some technical data is collected automatically when you access the Platform — including your IP address, device identifiers, browser fingerprint, and session activity logs. This data is collected for security, fraud prevention, and platform performance purposes.
3.3.1 We may receive supplementary identity verification data from third-party KYC service providers who cross-reference your submitted documents against identity databases. We may also receive fraud-alert signals from payment processors (BCA, BRI, BNI, and e-wallet providers) when processing transactions.
The following table summarizes the primary purposes for which diana4 processes your personal data:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, contact data | Contractual necessity |
| KYC identity verification | KYC documents, selfie | Legal obligation |
| Processing deposits & withdrawals | Financial, identity data | Contractual necessity |
| Fraud detection & prevention | Technical, financial, gaming data | Legitimate interest |
| Responsible gaming monitoring | Gaming activity, limits data | Legal obligation |
| Customer support & complaints | Communication, account data | Contractual necessity |
| Bonus & promotion management | Gaming activity, financial data | Contractual necessity |
| Platform security & integrity | Technical, device data | Legitimate interest |
| Personalized communications | Contact, gaming activity data | Consent |
| Legal & regulatory compliance | All relevant categories | Legal obligation |
4.1 We do not use your personal data to make fully automated decisions that produce significant legal effects without human review. Where automated fraud-detection systems flag an Account for review, the final decision to suspend or close that Account is made by a qualified member of our compliance team.
5.1 diana4 processes your personal data on the following legal grounds:
6.1.1 diana4 shares personal data only with trusted third-party processors who assist us in delivering Platform services. These include KYC verification providers, payment processors (including Indonesian bank partners such as BCA, BRI, BNI, and Mandiri), game content providers (such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft), and cloud infrastructure providers. All processors are bound by strict data-processing agreements that prohibit them from using your data for any purpose other than the specific service they provide.
6.2.1 We may disclose personal data to law enforcement agencies, regulatory bodies, or judicial authorities when required to do so by applicable law, court order, or in response to a lawful and properly documented government request. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.
6.3.1 In the event of a merger, acquisition, or sale of all or part of diana4's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified by email at least 14 days in advance of any such transfer, and you will have the option to request Account closure and data deletion before the transfer takes effect.
6.4.1 diana4 does not sell, rent, lease, or otherwise commercialize your personal data to any third party for that party's own marketing or commercial purposes. This prohibition applies unconditionally and without exception.
7.1 As an internationally operated platform serving Indonesian players, some of your personal data may be processed on servers located outside Indonesia. When such transfers occur, diana4 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, or transfers to jurisdictions with recognized adequacy standards — to protect your data to a level equivalent to that provided within Indonesia.
7.2 Players based in Jakarta, Surabaya, Bandung, Bali, and across the Indonesian archipelago can be assured that regardless of where data is physically processed, the privacy protections described in this Policy apply consistently.
8.1 We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following standard retention periods apply:
8.2 When the applicable retention period expires, your data is securely deleted or irreversibly anonymized so that it can no longer be linked to your identity.
9.1 diana4 employs a multi-layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational measures include:
Security Incident Response: In the unlikely event of a data breach that materially affects your privacy rights, diana4 will notify affected players within 72 hours of becoming aware of the incident, providing details of the nature of the breach, the data categories affected, and the steps we are taking to address it.
10.1.1 diana4 uses the following categories of cookies and similar technologies on the Platform:
10.2.1 You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or security settings menu. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and processing transactions.
10.2.2 diana4 does not use third-party advertising or retargeting cookies. We do not participate in cross-site behavioral advertising networks.
As a player on the diana4 Platform, you hold the following rights with respect to your personal data. Submit any request to [email protected] with the subject line "Privacy Rights Request".
12.1 The diana4 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.
12.2 If we become aware that an Account has been registered by or on behalf of a person under 21, that Account will be immediately closed, all balances forfeited, and all associated personal data deleted — except where retention is required by applicable law for AML or fraud investigation purposes.
12.3 If you have reason to believe that a minor has registered an Account on diana4, please notify us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act on all credible reports within 24 hours.
13.1 diana4 reviews this Privacy Policy periodically and may update it to reflect changes in our data-processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered players by email at least 7 days before the revised Policy takes effect.
13.2 The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continuing to use the Platform after the effective date of any amendment constitutes acceptance of the updated Policy.
13.3 The current version of this Policy is always accessible at https://diana4.cam/privacy-policy. We encourage you to review this page periodically to stay informed of how we protect your data.
14.1 For any questions about this Privacy Policy, to exercise any of your privacy rights, or to report a suspected data-protection concern, please contact the diana4 privacy team through the following channels:
Effective Date: This Privacy Policy is effective as of January 2026 and supersedes all prior versions. By using the diana4 Platform on or after this date, you confirm your understanding and acceptance of this Policy.
Six core principles that guide how diana4 handles the personal data of every Indonesian player on our platform.
Every byte of data exchanged between your device and the diana4 Platform travels over a 256-bit TLS-encrypted connection. Sensitive records at rest are protected with AES-256 storage encryption.
Your personal information is never sold, rented, or traded to any third party for commercial gain. Data is shared only with authorized service providers who are contractually bound to strict processing rules.
You can access, correct, export, or request deletion of your personal data at any time. Exercise your rights by emailing our privacy team — we acknowledge all requests within 24 hours (WIB).
We collect only the data that is genuinely necessary to deliver Platform services, comply with legal obligations, and protect player safety. We do not gather data speculatively or for undefined future use.
Although Indonesia-focused, diana4 aligns its data-protection practices with GDPR principles as an international best-practice framework — giving Indonesian players the same high standard of privacy protection as players in Europe.
We define specific retention periods for every data category. When data is no longer needed — and no longer required by law — it is securely deleted or irreversibly anonymized. No indefinite data hoarding.
Our support team is available 24/7 to help you exercise your data rights, understand how your information is used, or raise any privacy concern. You can also explore our FAQ for quick answers.