Privacy Policy — bni4d

In this Privacy Policy, the following terms have the meanings assigned to them below:

2.1 bni4d acts as the data controller for all Personal Data collected through the Platform. As data controller, bni4d determines the purposes and means by which your Personal Data is processed.

2.2 For all data-related enquiries, requests to exercise your privacy rights, or complaints regarding data handling, please contact our Data Protection team at:

• Email: [email protected] (subject line: "Data Privacy Request")
• Response Time: We acknowledge all privacy requests within 24 hours and resolve them within ten (10) business days (WIB).

3.1 bni4d collects the following categories of Personal Data during the course of operating the Platform:

3.2 bni4d does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is inherent in KTP document verification.

4.1 Directly from You. The majority of your Personal Data is collected directly from you when you: register a bni4d account; complete KYC verification; make a deposit or request a withdrawal; contact customer support; or set responsible gaming preferences.

4.2 Automatically from Your Device. When you visit the Platform, our servers automatically collect Technical Data and Usage Data via server logs, cookies, and analytics scripts. This data is collected regardless of whether you are logged into your account.

4.3 From Third Parties. bni4d may receive limited Personal Data from third parties in the following circumstances:

• Payment processors (e.g., bank transfer gateways, OVO, DANA, GoPay) confirm transaction status and the registered account name associated with a payment.
• Fraud detection vendors provide risk scores and device fingerprint data to help identify suspicious activity.
• Identity verification services may cross-reference KTP data against Indonesian government databases to confirm authenticity.

5.1 bni4d processes your Personal Data on the following legal bases:

• Contract Performance: Processing necessary to register your account, accept bets, process deposits and withdrawals, and provide customer support — without which bni4d cannot provide the service you have contracted for.
• Legal Obligation: Processing required to comply with anti-money-laundering (AML) regulations, KYC obligations, and lawful requests from regulatory authorities — including retention of financial records for the periods prescribed by applicable law.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and analytics to improve the Platform — where bni4d's interests do not override your fundamental privacy rights.
• Consent: Processing for optional marketing communications (where you have explicitly opted in) and for non-essential analytics cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6.1 bni4d uses your Personal Data for the following purposes:

• To create, maintain, and administer your bni4d member account.
• To process deposits and withdrawals in IDR via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other supported payment channels.
• To verify your identity and age (21+) during KYC and ongoing compliance checks.
• To settle bets, credit winnings, and apply bonus awards accurately.
• To provide customer support via live chat and email in both English and Bahasa Indonesia.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To monitor and enforce responsible gaming commitments, including applying self-exclusion flags and deposit limits.
• To send transactional notifications — deposit confirmations, withdrawal status updates, and security alerts — to your registered email address or phone number.
• To send promotional communications about bni4d bonuses, BRI Liga 1 promotions, and seasonal offers — only where you have provided explicit consent.
• To analyse Platform usage patterns and improve site performance, game selection, and user experience.
• To comply with legal and regulatory obligations applicable to bni4d's international operating licence.

6.2 bni4d does not use your Personal Data for automated individual decision-making that produces legal or similarly significant effects without human review, except for real-time fraud-scoring systems — where a human compliance officer reviews any flag before taking action on an account.

7.1 bni4d does not sell, rent, or trade your Personal Data to any third party for commercial gain. We share your data only in the following limited circumstances:

• Payment Service Providers: Bank transfer gateways and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data necessary to complete your deposit or withdrawal. They are bound by their own privacy policies and applicable financial regulations.
• Game Software Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Pocket Games Soft receive a anonymised session token to deliver game content. They do not receive your name, KTP number, or bank details.
• Identity Verification Services: Third-party KYC vendors receive your KTP or passport data solely for the purpose of identity verification. They are contractually prohibited from using this data for any other purpose.
• Fraud Detection & Security Vendors: Technical identifiers (IP address, device fingerprint) are shared with security partners for risk scoring.
• Legal and Regulatory Authorities: bni4d will disclose Personal Data in response to a lawful court order, government subpoena, or regulatory demand. We will notify affected members of such disclosure where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving bni4d, member data may be transferred to the acquiring entity subject to the same privacy protections described in this policy. Members will be notified in advance of any such transfer.

8.1 bni4d uses cookies and similar tracking technologies to operate the Platform. The cookies we use fall into the following categories:

8.2 bni4d does not use third-party advertising cookies or tracking pixels that follow you across the web. The analytics cookies we use are operated under data processing agreements that prohibit the analytics provider from using your data for any other purpose.

8.3 You may disable non-essential cookies via your browser's cookie management settings. Note that disabling strictly necessary cookies will impair Platform functionality, including the ability to log in.

9.1 bni4d retains your Personal Data for only as long as is necessary for the purpose for which it was collected, subject to any applicable legal retention requirements. The following schedule applies:

• Active Account Data (identity, contact, financial): Retained for the duration of your active membership.
• Account Data Post-Closure: Retained for five (5) years following account closure for audit and dispute resolution purposes.
• KYC Documents (KTP scans, passport images, selfies): Retained for seven (7) years post-account closure to satisfy anti-money-laundering record-keeping obligations.
• Transaction Records (deposit and withdrawal history, bet records): Retained for seven (7) years from the date of each transaction.
• Support Communications (live chat logs, email transcripts): Retained for three (3) years from the date of the interaction.
• Technical and Usage Data (server logs, session data): Retained for thirteen (13) months.
• Marketing Consent Records: Retained for the duration of consent plus three (3) years following withdrawal of consent.

9.2 At the end of each applicable retention period, Personal Data is either securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

10.1 bni4d implements a multi-layered technical and organisational security framework to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and bni4d's servers uses 256-bit TLS/SSL encryption.
• Encryption at Rest: Sensitive fields — including bank account numbers, KTP numbers, and passwords — are stored using AES-256 encryption or equivalent one-way hashing (for passwords).
• Access Controls: Personal Data is accessible only to bni4d personnel with a legitimate operational need. Access is controlled by role-based permissions and logged for audit purposes.
• Two-Factor Authentication: Internal systems accessing member data require 2FA. Members are encouraged to enable 2FA on their own accounts via the security settings page.
• Penetration Testing: bni4d's infrastructure is subject to regular independent security assessments.
• Incident Response: In the event of a confirmed data breach affecting your Personal Data, bni4d will notify affected members within 72 hours of discovery, as described in Section 10.2.

10.2 Breach Notification. If bni4d experiences a security breach that is likely to result in a high risk to your rights and freedoms, we will notify you by email (to your registered address) within 72 hours of the breach being confirmed. The notification will describe the nature of the breach, the categories of data affected, and the steps we have taken or plan to take to address it.

10.3 While bni4d takes all reasonable measures to protect your data, no system is completely immune to security risks. You are responsible for keeping your login credentials confidential and for logging out of your account on shared devices.

11.1 As a bni4d member, you hold the following rights with respect to your Personal Data. To exercise any of these rights, email [email protected] with the subject line "Data Privacy Request — [Right You Wish to Exercise]":

11.2 bni4d will respond to all privacy rights requests within ten (10) business days. Where a request is complex or numerous, this period may be extended by up to a further thirty (30) days, and you will be informed of the extension and reason within the initial ten-day window.

11.3 Exercising your privacy rights is free of charge. Where requests are manifestly unfounded or excessive (particularly if repetitive), bni4d reserves the right to charge a reasonable administrative fee or decline to action the request, with written justification provided.

12.1 The bni4d Platform is strictly intended for adults aged 21 years and over. bni4d does not knowingly collect Personal Data from any person under the age of 21.

12.2 If bni4d becomes aware that Personal Data has been collected from a person under 21 — whether through misrepresentation during registration or any other means — the Account will be suspended immediately, all Personal Data associated with the underage user will be deleted without delay, and any deposits will be returned to the originating payment method.

12.3 Parents or guardians who believe a minor may have registered on bni4d should contact [email protected] immediately. Such reports are treated as a priority and investigated within one (1) business day.

13.1 bni4d operates on infrastructure hosted across multiple regions globally, which means your Personal Data may be transferred to and processed in countries outside Indonesia. These countries may have data protection laws that differ from those in Indonesia.

13.2 Where such international transfers are necessary, bni4d implements appropriate safeguards to ensure your data receives an equivalent level of protection, including:

• Standard contractual clauses (SCCs) with international data processors that establish binding data protection obligations.
• Transfers only to processors that maintain ISO 27001 certification or equivalent information security standards.
• Data minimisation — only the minimum necessary data is transferred to any third party outside Indonesia.

13.3 You may request details of the specific safeguards in place for any particular international transfer by contacting [email protected].

14.1 bni4d reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to your registered email address summarising the key changes.
• Post a prominent notice on the Platform home page for a period of not less than fourteen (14) days following the update.

14.2 Your continued use of the bni4d Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should stop using the Platform and request account closure before the effective date.

14.3 We recommend bookmarking this page and reviewing it periodically, particularly before making a large deposit or submitting KYC documents for the first time.

15.1 For all privacy-related enquiries, rights requests, or concerns about how bni4d handles your Personal Data, please reach out through the following channels:

• Email: [email protected] — use the subject line "Data Privacy Request" for priority routing to our Data Protection team.
• Live Chat: Available 24/7 on the Platform. Request to speak with the Data Protection team directly.
• Response Commitment: Privacy requests acknowledged within 24 hours; resolved within ten (10) business days (WIB).

15.2 For questions about your account, deposits, withdrawals, or general support, our standard support team is available 24/7 with Indonesian-speaking agents on WIB shifts (08:00–24:00 WIB).

15.3 For information on how your personal data is used in connection with our responsible gaming tools, please review our dedicated Responsible Gaming page. For the full terms governing your use of the Platform, please read our Terms & Conditions.