Table of Contents
- 1. Introduction
- 2. Data Controller
- 3. Information We Collect
- 4. How We Use Your Information
- 5. Data Sharing and Disclosure
- 6. Data Security Measures
- 7. Data Retention
- 8. Your Privacy Rights
- 9. Cookies and Tracking Technologies
- 10. International Data Transfers
- 11. Children's Privacy
- 12. Changes to This Policy
- 13. Contact Information
1. Introduction
Welcome to the bri4 Privacy Policy. At bri4, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at bri4.cam, use our mobile applications, or engage with our online casino and sports betting services (collectively, the "Service").
We understand that you are trusting us with your personal data, and we take this responsibility seriously. This Privacy Policy describes our practices regarding the collection, use, and disclosure of your information through the Service. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please discontinue use of the Service immediately.
Key Principle: bri4 operates on a privacy-by-design principle. We collect only the information necessary to provide our services, and we implement appropriate technical and organizational measures to protect your data throughout its lifecycle.
2. Data Controller
For the purposes of data protection law, bri4 is the data controller responsible for your personal information. As the data controller, we determine the purposes and means of processing your personal data in connection with the provision of our online gaming services.
Our commitment extends to compliance with applicable international data protection regulations, including principles derived from the EU General Data Protection Regulation (GDPR) and regional privacy frameworks. While bri4 operates under international licensing, we recognize the importance of protecting Indonesian users' personal data in accordance with best practices and emerging Indonesian data protection standards.
3. Information We Collect
3.1 Personal Information You Provide
When you register for a bri4 account, we collect the following personal information directly from you:
- Identity Data: Full legal name, date of birth, gender, nationality, government-issued identification number (KTP number), passport number or driver's license number
- Contact Data: Email address, residential address within Indonesia (street, city, province, postal code), mobile phone number
- Financial Data: Bank account details (bank name, account holder name, account number), e-wallet information (OVO, DANA, GoPay account identifiers), payment card details (processed securely through third-party payment processors)
- Account Credentials: Username, password (stored in encrypted form), security questions and answers
- Verification Documents: Copies of government-issued photo ID (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs for facial verification, proof of payment method ownership
3.2 Information Automatically Collected
When you access and use the bri4 Service, we automatically collect certain technical information:
- Device Information: Device type, operating system and version, browser type and version, device identifiers (IMEI, advertising ID), screen resolution, language settings
- Usage Data: Pages visited, features used, time spent on pages, clickstream data, navigation paths, games played, bets placed, deposit and withdrawal history
- Location Data: IP address, geolocation data (country, region, city level based on IP), time zone setting
- Communication Data: Records of your communications with our customer support team, including live chat transcripts, email correspondence, and phone call recordings (with notification)
3.3 Information from Third Parties
We may receive additional information about you from third-party sources:
- Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers
- Identity Verification Services: Age verification results, identity authentication confirmations, fraud detection signals
- Marketing Partners: Referral source information, campaign performance data (aggregated and anonymized)
Data Minimization: bri4 adheres to a data minimization principle. We collect only the personal data that is necessary to fulfill the purposes outlined in this Privacy Policy. We do not collect excessive or irrelevant information.
4. How We Use Your Information
bri4 uses your personal information for the following purposes:
4.1 Service Provision and Account Management
- To create and maintain your bri4 account
- To verify your identity and age (21+ requirement enforcement)
- To process your deposits and withdrawals through Indonesian payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay)
- To provide access to casino games, sports betting markets (including BRI Liga 1, international leagues), togel draws, and other gaming products
- To track your betting activity, gaming history, and account balance
- To award bonuses, process promotions, and manage your VIP tier status
4.2 Security and Fraud Prevention
- To detect and prevent fraudulent transactions, money laundering, and other illegal activities
- To monitor for unusual betting patterns, bonus abuse, or account irregularities
- To verify the legitimacy of payment methods and prevent unauthorized access
- To enforce our Terms & Conditions and protect the integrity of our gaming platform
- To comply with anti-money laundering (AML) and know-your-customer (KYC) regulatory requirements
4.3 Customer Support and Communication
- To respond to your inquiries, questions, and support requests via live chat, email, or phone
- To send transactional communications (deposit confirmations, withdrawal notifications, account alerts)
- To provide updates on bonus eligibility, VIP program changes, and account status
- To notify you of changes to our services, policies, or terms
4.4 Service Improvement and Personalization
- To analyze usage patterns and improve the functionality and user experience of the bri4 platform
- To personalize game recommendations based on your play history (slots, live casino, sports betting preferences)
- To optimize platform performance, including load times and mobile responsiveness
- To conduct market research and gather feedback to enhance our service offerings
4.5 Marketing and Promotions (With Consent)
- To send you promotional offers, bonus announcements, and special event notifications (only if you have opted in)
- To inform you about new games, tournaments, and platform features
- To deliver targeted marketing communications based on your gaming preferences
Note: You may opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in emails.
4.6 Legal and Regulatory Compliance
- To comply with legal obligations under Indonesian law and international gaming regulations
- To respond to lawful requests from government authorities, law enforcement, or regulatory bodies
- To enforce our legal rights and defend against legal claims
- To maintain records required by licensing authorities and financial regulations
4.7 Responsible Gaming
- To monitor for signs of problem gambling behavior and implement protective measures
- To enforce deposit limits, session timers, and self-exclusion requests
- To provide resources and support for users experiencing gambling-related difficulties
5. Data Sharing and Disclosure
bri4 does not sell your personal information to third parties. However, we may share your information with the following categories of recipients in specific circumstances:
5.1 Service Providers and Business Partners
We share personal data with trusted third-party service providers who assist us in operating the bri4 platform:
- Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process your deposits and withdrawals
- Game Providers: Licensed casino game studios and live dealer operators (data shared is limited to gameplay activity)
- Identity Verification Services: Third-party KYC and age verification providers who confirm your identity and eligibility
- IT and Security Providers: Cloud hosting services, cybersecurity firms, and technical support vendors
- Customer Support Tools: Live chat software providers, helpdesk platforms, and communication service providers
- Analytics Providers: Services that help us understand user behavior and improve platform performance (data is aggregated and anonymized where possible)
All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.
5.2 Legal and Regulatory Authorities
We may disclose your personal information to government authorities, law enforcement agencies, or regulatory bodies when:
- Required by law, regulation, or legal process (such as a court order or subpoena)
- Necessary to comply with anti-money laundering (AML) or counter-terrorism financing (CTF) obligations
- Requested by gaming regulators or licensing authorities as part of compliance audits
- Necessary to protect the rights, property, or safety of bri4, our users, or the public
- Required to investigate fraud, abuse, or violations of our Terms & Conditions
5.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.
5.4 With Your Consent
We may share your information with other third parties when you have provided explicit consent to do so, such as when participating in co-branded promotions or third-party tournaments.
6. Data Security Measures
bri4 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:
6.1 Technical Security Measures
- Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL (Secure Socket Layer) encryption—the same standard used by financial institutions
- Secure Data Storage: Personal data is stored on secure servers with restricted access controls, firewalls, and intrusion detection systems
- Password Protection: User passwords are hashed and salted using industry-standard cryptographic algorithms (bcrypt) and are never stored in plain text
- Payment Security: Financial transactions are processed through PCI-DSS compliant payment gateways; bri4 does not store full credit card numbers or CVV codes
- DDoS Protection: Distributed Denial of Service attack mitigation systems protect platform availability
- Regular Security Audits: Third-party cybersecurity experts conduct penetration testing and vulnerability assessments
6.2 Organizational Security Measures
- Access Controls: Personal data is accessible only to authorized bri4 employees and contractors who require access to perform their job functions
- Confidentiality Agreements: All employees and contractors sign non-disclosure agreements and receive data protection training
- Data Breach Response Plan: We maintain an incident response protocol to detect, contain, and remediate security breaches promptly
- Account Security Features: Two-factor authentication (2FA) available for user accounts, login alerts for unusual activity, session timeout after inactivity
6.3 Your Role in Security
While we implement robust security measures, you also play a crucial role in protecting your account:
- Choose a strong, unique password and do not share it with anyone
- Enable two-factor authentication for enhanced account security
- Do not access your account from public or shared computers
- Log out of your account when finished playing
- Report any suspicious activity or unauthorized access immediately
Data Breach Notification: In the unlikely event of a data breach that compromises your personal information, bri4 will notify you within 72 hours via email and provide guidance on protective measures you should take.
7. Data Retention
bri4 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention Periods by Data Type
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account registration data (name, email, address) | Duration of account + 5 years | Regulatory compliance, dispute resolution |
| Financial transaction records | 7 years from transaction date | AML regulations, tax law, accounting standards |
| Betting and gaming activity logs | 5 years from activity date | Gaming license requirements, dispute resolution |
| Identity verification documents (KYC) | Duration of account + 5 years | AML/CTF compliance, regulatory audits |
| Customer support communications | 3 years from last interaction | Quality assurance, dispute resolution |
| Marketing consent records | Duration of consent + 2 years | Proof of consent for regulatory compliance |
| Website usage data and analytics | 26 months | Service improvement, performance optimization |
Account Closure and Data Deletion
When you close your bri4 account, we will:
- Deactivate your account and prevent further logins
- Stop processing transactions and gaming activity
- Retain personal data for the periods specified above to fulfill legal and regulatory obligations
- Anonymize or delete personal data once retention periods expire, unless ongoing legal proceedings require retention
You may request expedited data deletion by contacting our Data Protection Officer, subject to legal and regulatory constraints.
8. Your Privacy Rights
Under applicable data protection laws, you have the following rights regarding your personal information:
8.1 Right of Access
You have the right to request a copy of the personal data we hold about you. You can download your account data through your bri4 account settings, or contact us to request a comprehensive data export.
8.2 Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data. You can update most information (email, address, phone number) directly through your account settings.
8.3 Right to Erasure ("Right to be Forgotten")
You have the right to request deletion of your personal data under certain circumstances. Please note that we may be required to retain certain information for legal, regulatory, or legitimate business purposes (fraud prevention, dispute resolution).
8.4 Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
8.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another service provider.
8.6 Right to Object
You have the right to object to processing of your personal data for direct marketing purposes (opt-out of promotional emails), and to object to processing based on legitimate interests grounds.
8.7 Right to Withdraw Consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing conducted prior to withdrawal.
8.8 Right to Lodge a Complaint
If you believe we have violated your privacy rights, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. For Indonesian residents, complaints may be directed to relevant data protection authorities as they become established.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected] with "Privacy Rights Request" in the subject line. We will respond to your request within 30 days and may request identity verification to protect your data from unauthorized access.
9. Cookies and Tracking Technologies
bri4 uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content.
What Are Cookies?
Cookies are small text files placed on your device by websites you visit. They enable websites to remember your preferences, login status, and browsing activity.
Types of Cookies We Use
- Essential Cookies: Required for basic platform functionality (login, account access, transaction processing). These cannot be disabled.
- Performance Cookies: Collect anonymous usage data to help us improve platform performance and user experience.
- Functional Cookies: Remember your preferences (language, currency display, game favorites).
- Targeting Cookies: Track your browsing activity to deliver personalized game recommendations and promotional offers (only with your consent).
Managing Cookies
You can control cookie settings through your browser preferences. Note that disabling certain cookies may limit platform functionality. Most browsers allow you to:
- View and delete cookies currently stored
- Block third-party cookies
- Block all cookies (may prevent login and transactions)
- Clear cookies when closing the browser
10. International Data Transfers
bri4 operates internationally and may transfer your personal data to countries outside Indonesia for processing and storage. This includes transfers to jurisdictions where our servers, service providers, or business partners are located.
When we transfer your data internationally, we implement appropriate safeguards to ensure your data receives an adequate level of protection:
- Data Processing Agreements with standard contractual clauses approved by data protection authorities
- Transfers to countries recognized as providing adequate data protection
- Compliance with international data transfer frameworks (where applicable)
- Technical measures such as encryption during transfer and storage
By using the bri4 Service, you acknowledge and consent to the transfer of your personal data outside Indonesia for the purposes described in this Privacy Policy.
11. Children's Privacy
The bri4 Service is strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from individuals under 21 years of age.
If we discover that we have inadvertently collected personal data from a minor, we will:
- Immediately suspend the account
- Delete all personal information associated with the account
- Refund any deposits (minus withdrawals already processed)
- Implement additional verification measures to prevent recurrence
If you believe a minor has created an account or accessed our services, please contact us immediately at [email protected] so we can take appropriate action.
12. Changes to This Privacy Policy
bri4 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations.
When we make material changes to this Privacy Policy, we will:
- Update the "Last Updated" date at the top of this page
- Notify you via email to the address associated with your account
- Display a prominent notice on the bri4 website and mobile app
- Request your acknowledgment of the updated policy upon your next login (for significant changes)
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.
13. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: [email protected] (general inquiries)
- Privacy Requests: Include "Privacy Rights Request" in subject line
- Live Chat: Available 24/7 through the bri4 website
- Response Time: We aim to respond to all privacy inquiries within 48 hours
For specific privacy rights requests (access, deletion, rectification), please provide:
- Your full name and bri4 username
- Email address associated with your account
- Detailed description of your request
- Proof of identity (for security purposes)
Bank-Grade Encryption
256-bit SSL encryption protects all data transmitted between your device and our servers.
No Data Selling
We never sell your personal information to third parties. Your data is yours alone.
Full Control
Access, update, or delete your data anytime through your account settings or by contacting us.
Regulatory Compliance
Our data practices align with international privacy standards and emerging Indonesian regulations.
Questions About Your Privacy?
Our team is here to address your privacy concerns and explain how we protect your personal information.