Privacy Policy — neon4

neon4 ("we", "our", "us", or "the Company") operates the online gaming platform accessible at https://neon4.vip (the "Platform"). This Privacy Policy describes how neon4 collects, uses, stores, discloses, and protects the personal data of individuals who access or use the Platform, including registered members and visitors who have not yet created an account.

This Policy applies to all personal data processed in connection with your use of the Platform, whether you access neon4 from Jakarta, Surabaya, Medan, Bandung, Bali, or any other location in Indonesia. By registering an account or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the data practices described herein.

This Privacy Policy should be read alongside the neon4 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Capitalised terms not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

neon4 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your device and browsing behaviour, and occasionally from trusted third-party sources for the purposes of identity verification and fraud prevention. The categories of personal data we collect are set out in the table below.

neon4 processes your personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with the reasons for which it was collected. The primary purposes for which we use personal data are as follows:

1. Account Management: To create, maintain, and administer your member account, including processing your registration, authenticating your identity at login, and managing your account preferences and responsible gaming settings.
2. Transaction Processing: To process deposits made via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported payment methods, and to process withdrawal requests to your verified bank account or e-wallet in Indonesian Rupiah (IDR).
3. Identity Verification (KYC): To verify your identity and age (you must be at least 21 years of age) in compliance with our international licensing obligations and applicable anti-money-laundering (AML) requirements.
4. Gaming Services Delivery: To provide access to sports betting (including BRI Liga 1, EPL, Champions League, and other competitions), live casino, slot games, and all other products available on the Platform.
5. Responsible Gaming: To monitor gaming patterns and detect indicators of problem gambling, to enforce deposit limits and self-exclusion orders you have set, and to comply with responsible gaming obligations under our licensing terms.
6. Customer Support: To respond to your support queries, resolve disputes, and provide assistance via live chat, email, or other communication channels in both English and Indonesian.
7. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
8. Legal Compliance: To fulfil our obligations under applicable international gaming law, AML regulations, and any lawful request from a regulatory or law enforcement authority.
9. Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and news about seasonal campaigns (such as Idul Fitri or Ramadhan promotions). You may withdraw this consent at any time by contacting support.
10. Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the performance, design, and product range of the Platform, using aggregated and anonymised data wherever possible.

neon4 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing is required to perform the contract between you and neon4 — that is, to provide you with the gaming services you have registered for, to process your deposits and withdrawals, and to manage your account.
• Legal Obligation: Processing is required to comply with our legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and regulatory reporting to our international licensing authority.
• Legitimate Interests: Processing is necessary for the legitimate interests of neon4, including fraud prevention, security monitoring, responsible gaming enforcement, and general platform improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not covered by the grounds above — in particular, for direct marketing communications and for the use of non-essential cookies — we rely on your freely given, informed, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

neon4 does not sell, rent, or commercially share your personal data with third parties for their own marketing purposes. Personal data may be shared only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

5.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• KYC and identity verification vendors who process identity document images and facial verification data;
• Payment processing partners who facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja);
• Cloud hosting and infrastructure providers who store Platform data in secure, audited data centres;
• Customer support software providers who host our live chat and ticketing systems;
• Analytics providers who supply anonymised, aggregated usage insights.

All service providers are contractually bound to process data only as instructed by neon4 and to maintain security standards that are at least equivalent to our own.

5.2 Regulatory & Law Enforcement Authorities

neon4 may disclose personal data to our international gaming regulator, financial intelligence units, or law enforcement agencies when required to do so by law, court order, or binding regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so.

5.3 Business Transfers

In the event that neon4 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via the email address registered to your account prior to your data being transferred and becoming subject to a different privacy policy.

5.4 Legal Protection

We may disclose personal data where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of neon4, our members, or the public — for example, to investigate and respond to allegations of fraud, money laundering, or other illegal activity on the Platform.

neon4 uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to operate and improve the Platform. The categories of cookies we use are described below.

6.1 Strictly Necessary Cookies

These cookies are essential to the functioning of the Platform. They enable core features such as user authentication, session management, and security monitoring. Without these cookies, services like your member login session and deposit processing cannot function. These cookies cannot be disabled.

6.2 Analytical / Performance Cookies

These cookies allow us to measure and analyse how visitors use the Platform — for example, which pages are visited most frequently, how long sessions last, and where users navigate from. The data is used exclusively for internal improvement purposes and is aggregated and anonymised wherever possible. These cookies are set only with your consent.

6.3 Functional Cookies

These cookies remember your preferences — such as your chosen language (English), your preferred deposit method, and your responsible gaming display settings — to personalise your experience on the Platform. These cookies are set only with your consent.

6.4 Managing Cookies

You may adjust your browser settings to refuse or delete cookies at any time. Note that disabling non-essential cookies will not affect your ability to use the core gaming and account features of the Platform, but it may affect the personalisation features described above. For detailed guidance on managing cookies in popular browsers, visit the browser provider's official help documentation.

neon4 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international gaming licence obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the lifetime of your account and for a minimum of five (5) years after account closure, in accordance with AML record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years following the date of each transaction, as required by financial regulations applicable to our licensed operations.
• KYC Verification Documents: Retained for a minimum of five (5) years following the completion of verification, or longer if required by a specific regulatory directive.
• Gaming Activity Data: Retained for three (3) years following account closure, used for responsible gaming monitoring, dispute resolution, and regulatory reporting purposes.
• Communications Data: Support chat logs and email correspondence are retained for two (2) years from the date of the most recent interaction, unless retention is required for an active dispute or regulatory matter.
• Analytical and Usage Data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be attributed to any individual member.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with neon4's internal data destruction policy.

As a member of neon4, you hold a set of rights over your personal data. neon4 is committed to honouring these rights promptly and transparently. Your rights are described below.

neon4 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the neon4 Platform is encrypted using industry-standard TLS 1.3 protocols, preventing interception in transit.
• AES-256 Encryption at Rest: Sensitive data stored on neon4's servers — including identity documents, financial data, and account credentials — is encrypted using AES-256 at rest.
• Hashed Password Storage: Member passwords are stored exclusively as salted cryptographic hashes using bcrypt. Passwords are never stored in plain text and are not accessible to neon4 staff.
• Two-Factor Authentication (2FA): 2FA is available to all members and is strongly recommended. When enabled, a one-time code is sent to your registered Indonesian mobile number upon each new login.
• Access Controls: Access to personal data is restricted to neon4 staff members who have a legitimate operational need to process it. All staff with data access undergo regular security training and are bound by strict confidentiality obligations.
• Intrusion Detection & Monitoring: Our infrastructure is monitored around the clock by automated intrusion detection systems and a dedicated security team. Anomalous activity triggers immediate investigation.
• Regular Security Audits: neon4 engages independent third-party security firms to conduct penetration testing and security audits at regular intervals. Findings are addressed as a matter of priority.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, neon4 will notify affected members and the relevant regulatory authority within the timeframes required by applicable law.

The neon4 Platform does not contain links to external third-party websites for general navigation or content purposes. All navigation links on the Platform point exclusively to internal neon4 pages within the https://neon4.vip domain. Where neon4 embeds third-party software components (such as game engines provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), those components are served within the neon4 Platform environment and are subject to the security standards described in Section 9.

neon4 bears no responsibility for the privacy practices or content of any third-party service that you independently navigate to outside of the neon4 Platform. We encourage you to review the privacy policies of any third-party services you use in connection with your gaming activity.

The neon4 Platform is strictly an adult service. We do not knowingly collect personal data from any individual under the age of 21. Registration on the Platform requires users to confirm that they are at least 21 years of age, and this representation is verified through our KYC identity verification process.

If neon4 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will immediately close the associated account, erase all personal data collected from that individual, and return any deposited funds to the verified source payment method, in accordance with our responsible gaming obligations.

neon4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made, we will publish the revised Policy on this page with an updated "Last Updated" date at the top of the document and, where practicable, send a notification to your registered email address.

We encourage you to review this Privacy Policy periodically to stay informed about how neon4 protects your personal data. Your continued use of the Platform after an updated Policy has been published constitutes your acceptance of the revised terms, to the extent permitted by applicable law. If you do not accept the changes, you must discontinue use of the Platform and may contact us to request account closure and data deletion as described in Section 8.

For any questions, concerns, or requests relating to this Privacy Policy or neon4's data practices, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

For responsible gaming enquiries, including self-exclusion requests and deposit limit adjustments, please visit our Responsible Gaming page or email us at support@neon4.vip with the subject line "Responsible Gaming — Urgent".