Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "Platform" — the bri4d website at bri4d.cam, together with any associated mobile interface, in-browser application, or downloadable client operated by bri4d.
• "bri4d", "we", "us", "our" — the operator of the bri4d Platform and all affiliated entities responsible for the collection and processing of personal data described in this policy.
• "Member", "you", "your" — any individual who has registered a bri4d account or who accesses the Platform as a visitor.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, national identity number, contact details, payment account references, device identifiers, and IP addresses.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — bri4d, acting as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on bri4d's behalf under a written data processing agreement.
• "KYC" — Know Your Customer; the identity verification process applied to Member accounts as described in the bri4d Terms & Conditions.
• "Cookies" — small text files placed on your device by the Platform to enable functionality, remember preferences, and support analytics.
• "IDR / Rp" — Indonesian Rupiah, the currency of the Platform.
• "WIB" — Waktu Indonesia Barat, Western Indonesia Time (UTC+7), the default time zone for all Platform operations.

bri4d collects the following categories of Personal Data in connection with your use of the Platform:

3.1 Directly from You. The majority of Personal Data bri4d holds is provided directly by you through:

• Completing the account registration form on the Platform.
• Submitting KYC documents in response to a verification request.
• Making deposits or withdrawal requests, which require you to input payment account details.
• Contacting bri4d customer support via live chat, email, or in-app messaging.
• Participating in promotions, surveys, or feedback requests.

3.2 Automatically. When you access the Platform, certain technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, the pages you visit, the duration of your session, and the device and browser you use. See Section 7 (Cookies & Tracking) for full details.

3.3 From Third Parties. In limited circumstances, bri4d may receive Personal Data from third parties, including:

• Identity Verification Providers: Third-party KYC services may cross-reference the documents you submit against public or licensed identity databases to confirm authenticity.
• Payment Processors: Transaction confirmation data (amount, timestamp, reference number) is passed to bri4d by the relevant bank or e-wallet provider when a deposit or withdrawal is processed.
• Fraud Prevention Services: bri4d may consult third-party fraud detection databases to verify that an account or payment method has not been flagged for prior fraudulent activity.
• Game Studios: Providers such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, and Spribe may pass session-level data (game ID, stake, result) to bri4d's systems for account crediting purposes.

bri4d processes your Personal Data on the following lawful bases:

• Contractual Necessity: Processing required to create and operate your bri4d account, process deposits and withdrawals, credit winnings, apply bonuses, and deliver the services you have signed up for. Without this processing, bri4d cannot fulfil its obligations to you as a Member.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering regulations, identity verification obligations, and any orders issued by a competent legal authority. This includes retaining transaction records and KYC documentation for the required statutory periods.
• Legitimate Interests: Processing carried out for purposes where bri4d has a legitimate business interest that is not overridden by your rights — including fraud detection, platform security, responsible gaming monitoring, and service improvement analytics. Where bri4d relies on legitimate interests, a balancing assessment is conducted to confirm that the processing is proportionate and does not unduly impact Member privacy.
• Consent: Processing for optional purposes where your consent has been explicitly obtained — including sending promotional communications by email or SMS. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support at [email protected].

bri4d uses the Personal Data we hold about you for the following purposes:

5.1 Account Management

To create, maintain, and administer your bri4d member account; to authenticate you when you log in; to enforce the single-account policy; and to communicate with you about account-related matters such as password resets, security alerts, and deposit confirmations.

5.2 Payment Processing

To process deposits from your Indonesian bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja); to validate that the payment method belongs to you; and to process withdrawal requests to your verified payment account.

5.3 KYC & Compliance

To verify your identity, confirm that you meet the 21+ age requirement, and satisfy our obligations under applicable anti-money-laundering and fraud prevention requirements. KYC data is processed by bri4d's dedicated compliance team and is not used for any commercial purpose.

5.4 Responsible Gaming

To monitor betting patterns for indicators of problem gambling behaviour; to apply deposit limits, loss limits, session time limits, and self-exclusion requests you have activated; and to identify accounts that may benefit from a proactive responsible gaming intervention. See our Responsible Gaming page for details of the tools available to you.

5.5 Fraud Prevention & Platform Security

To detect and prevent fraudulent account creation, bonus abuse, collusion, use of prohibited software, and unauthorised account access. Technical and device data is used to identify suspicious login patterns, VPN usage, or multiple accounts originating from the same device or network.

5.6 Personalisation & Promotions

To personalise your Platform experience based on your game preferences and betting history (e.g., surfacing relevant BRI Liga 1 markets or slot gacor game recommendations); and, where you have consented, to send you information about promotions, bonuses, and seasonal offers relevant to your interests.

5.7 Analytics & Service Improvement

To analyse aggregated usage data, identify platform performance issues, and improve the overall member experience. Where analytics involve Personal Data, appropriate pseudonymisation or aggregation measures are applied so that individual members cannot be identified from the resulting analysis.

5.8 Legal & Regulatory Compliance

To respond to lawful requests from competent authorities, comply with court orders, and maintain the records required by applicable law for the periods specified in Section 8 of this policy.

6.1 We Do Not Sell Your Data. bri4d does not sell, rent, or trade your Personal Data to third-party marketers, data brokers, or advertising networks. Your personal information is not a commercial asset.

6.2 Categories of Recipients. bri4d shares Personal Data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the transaction data necessary to process your deposits and withdrawals.
• Identity Verification Services: Third-party KYC providers receive your identity document images and biographical data solely for the purpose of verifying your identity and confirming age eligibility.
• Game Studios: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe receive a pseudonymous member identifier and stake/result data to enable game sessions and return results to your account. They do not receive your full name, contact details, or financial data.
• Fraud & Security Services: Specialist fraud prevention providers may receive device fingerprinting and IP data to cross-reference against known fraud indicators.
• Cloud Infrastructure Providers: bri4d's Platform is hosted on internationally recognised cloud infrastructure. The hosting provider has access to encrypted server data solely in its capacity as a technical service provider and is contractually prohibited from accessing or using Personal Data for its own purposes.
• Legal and Regulatory Authorities: bri4d will disclose Personal Data to competent legal authorities where required to do so by applicable law, court order, or lawful government request. Where legally permissible, bri4d will notify the affected Member of such a request before complying.

6.3 Data Processing Agreements. All third parties that process Personal Data on bri4d's behalf are required to enter into a written data processing agreement that mandates compliance with applicable data protection standards, restricts secondary use of the data, and requires the implementation of appropriate technical and organisational security measures.

7.1 What Are Cookies. Cookies are small text files stored on your device when you visit a website. bri4d uses cookies and similar technologies (such as local storage and session storage) to keep the Platform functional, remember your preferences, and support performance analytics.

7.2 Types of Cookies We Use.

7.3 Managing Cookies. You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in to the Platform. Disabling analytics or functional cookies may reduce the quality of your Platform experience but will not prevent you from placing wagers or making withdrawals.

7.4 Do Not Track. The bri4d Platform does not currently respond to browser "Do Not Track" signals, as there is no universally accepted standard for how such signals should be interpreted. We will review this position as industry standards evolve.

bri4d retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, and in any event for no longer than required by applicable law. The key retention periods are:

Upon expiry of the applicable retention period, Personal Data is securely deleted or permanently anonymised so that it can no longer be attributed to any individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.

9.1 Technical Safeguards. bri4d implements the following technical security measures to protect your Personal Data:

• TLS 1.3 encryption for all data in transit between your device and bri4d servers.
• AES-256 encryption for Personal Data and payment information stored at rest.
• Multi-factor authentication (MFA) for all administrative access to systems that process Member Personal Data.
• Automated intrusion detection and real-time alerting for anomalous system access patterns.
• Regular penetration testing and vulnerability scanning by independent third-party security specialists.
• Strict network segmentation between public-facing Platform components and internal data processing systems.

9.2 Organisational Safeguards. Access to Member Personal Data is granted on a strict need-to-know basis. All bri4d staff with access to Personal Data undergo data protection training upon onboarding and annually thereafter. Data handling procedures are reviewed and updated at least once every 12 months.

9.3 Your Responsibilities. The security of your account also depends on you. You are responsible for keeping your login credentials confidential, enabling two-factor authentication where available, logging out of the Platform when using a shared device, and promptly reporting any suspected unauthorised access to your account by contacting [email protected].

9.4 Incident Response. In the event of a confirmed data breach that materially affects your Personal Data, bri4d will notify affected Members within 72 hours of discovery and provide clear guidance on the steps you should take to protect yourself.

As a bri4d member, you have the following rights in relation to the Personal Data we hold about you. To exercise any of these rights, please contact us at [email protected] with your registered account username and a clear description of your request. We will respond within 30 days.

The bri4d Platform is strictly for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If bri4d discovers that an account has been registered by a person under 21, that account will be suspended immediately, all pending wagers will be voided, deposited funds will be returned to the originating payment method, and all Personal Data associated with the account will be deleted from our systems within 30 days, subject to any legal retention obligations.

12.1 Cross-Border Processing. Some of the third parties described in Section 6 — including cloud infrastructure providers, game studios, and fraud prevention services — operate globally and may process your Personal Data on servers located outside Indonesia. When Personal Data is transferred internationally, bri4d takes steps to ensure that the same level of protection is applied to your data regardless of where it is processed.

12.2 Safeguards. For transfers to third parties in jurisdictions that do not have data protection laws equivalent to those applicable in Indonesia, bri4d relies on one or more of the following safeguards:

• Standard contractual clauses requiring the recipient to process Personal Data to the same standards as bri4d.
• Binding corporate rules where the recipient is part of a corporate group with group-wide data protection standards.
• The recipient's adherence to an internationally recognised data protection certification or code of conduct.

12.3 Game Studio Transfers. When you play a game provided by a studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, or Spribe, a pseudonymous session token — not your full personal profile — is transmitted to that studio's servers for the duration of the game session. These studios are contractually prohibited from using that session token to identify you or to process your data for any purpose other than delivering the game result.

13.1 Right to Update. bri4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, Platform functionality, or our data processing practices. The date of the most recent revision is displayed at the top of this page.

13.2 Notification of Material Changes. Where a proposed amendment materially affects the way we process your Personal Data — for example, introducing a new category of data collection or a new third-party recipient — bri4d will notify active Members via their registered email address at least 14 days before the change takes effect. Continued use of the Platform after the effective date of an amendment constitutes acceptance of the revised policy.

13.3 Historical Versions. Prior versions of this Privacy Policy are available on request by contacting [email protected]. Please include "Privacy Policy — Historical Version Request" in the subject line of your email.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how your Personal Data has been handled, please contact the bri4d Data Protection team using the details below:

• Email: [email protected] — include "Privacy Policy Enquiry" in the subject line.
• Live Chat: Available 24/7 through the in-app support channel. Our Indonesian-speaking agents can assist with data rights requests in both English and Bahasa Indonesia.
• Response Time: Data rights requests are acknowledged within 5 business days (WIB) and resolved within 30 calendar days. Complex requests may take up to 60 days; you will be informed if an extension is required.