Privacy Policy

This Privacy Policy ("Policy") describes how brio4 ("Platform", "we", "us", "our"), operating the website at https://brio4.cam, collects, processes, stores, and protects the personal data of individuals ("User", "Member", "you") who register for or otherwise interact with our online gaming services. This Policy is incorporated into and must be read together with brio4's Terms & Conditions.

brio4 takes the privacy of its Members seriously. Our platform is designed primarily for adult users located in Indonesia, and we handle personal data with a level of care consistent with internationally recognized data protection principles, including purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

By registering an account with brio4 or otherwise accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please do not create an account or continue using the Platform.

1. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject") — that is, any information that can directly or indirectly identify you, such as your name, identification number, location data, online identifier, or factors specific to your physical, economic, or social identity.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means brio4, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of brio4 under a data processing agreement.
• "Sensitive Data" means Personal Data that warrants heightened protection due to its nature, including national identification numbers, financial account details, and biometric data collected for KYC verification.
• "Cookies" means small text files placed on your device by the brio4 website to enable functionality, analytics, and session management.

2. Data We Collect

brio4 collects the following categories of Personal Data in connection with the provision of its services:

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Residential address in Indonesia (street, city, province, postal code)
• Email address and mobile phone number
• Username and encrypted password

2.2 KYC Verification Data

• Copy of government-issued photo identification (Indonesian National ID / KTP, Passport, or SIM driving license)
• Proof of address documentation (utility bill, bank statement)
• Proof of payment method (bank account screenshot confirming name match)
• Selfie photograph for facial-match verification where required

2.3 Financial & Transaction Data

• Bank account numbers and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) used for deposits and withdrawals
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit history, withdrawal history, and Wallet Balance records
• Transaction timestamps, amounts (in IDR / Rp), and reference numbers

2.4 Gaming & Behavioral Data

• Betting history, game play logs, wager amounts, and outcomes
• Bonus claims, wagering progress, and promotional participation records
• Session duration, login and logout timestamps
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status)

2.5 Technical & Device Data

• IP address and derived geolocation data
• Device type, operating system, browser type, and version
• Unique device identifiers and mobile advertising IDs
• HTTP referrer data and page navigation logs

2.6 Communications Data

• Records of your communications with brio4's support team via live chat, email, or ticket systems
• Feedback, survey responses, and complaint records

3. How We Collect Data

brio4 collects Personal Data through the following channels:

• Directly from you — at account registration, during KYC submission, when you contact our support team, or when you update your account profile.
• Automatically during Platform use — through server logs, session tracking technologies, and analytics tools that record your interactions with the brio4 website and mobile interface.
• From payment providers — when you initiate a deposit or withdrawal, our payment integration partners (bank transfer gateways and e-wallet APIs) relay transaction confirmation data to brio4 for reconciliation.
• From identity verification providers — during KYC review, brio4 may engage third-party identity verification services that cross-reference the documents you submit against official databases.
• From fraud detection and AML screening services — automated screening tools may process your name, date of birth, and identification number against international sanctions and politically exposed persons (PEP) watchlists.

4. Lawful Basis for Processing

brio4 processes your Personal Data on one or more of the following lawful bases, depending on the specific processing activity:

Processing Purpose	Lawful Basis
Account registration and service delivery	Performance of a contract (Terms & Conditions)
KYC identity verification and AML compliance	Legal obligation
Processing deposits and withdrawals	Performance of a contract
Fraud prevention and platform security	Legitimate interests
Responsible gaming monitoring and self-exclusion enforcement	Legal obligation / Legitimate interests
Sending transactional notifications (deposit confirmations, withdrawal updates)	Performance of a contract
Sending promotional communications and bonus offers	Consent (withdrawable at any time)
Platform analytics and service improvement	Legitimate interests
Compliance with legal holds or regulator requests	Legal obligation

5. How We Use Your Data

brio4 uses the Personal Data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your brio4 account, including identity authentication and password recovery.
• Service delivery: Processing your bets, game plays, deposits, and withdrawals, and crediting Bonus Funds under applicable promotions.
• KYC and compliance: Verifying your identity and age (21+), screening against sanctions and PEP lists, and fulfilling anti-money-laundering (AML) obligations.
• Fraud and risk management: Detecting, investigating, and preventing fraudulent transactions, collusion, bonus abuse, unauthorized account access, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior, enforcing deposit limits and self-exclusion requests, and delivering responsible gaming notifications.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of your interactions with our support team for quality assurance purposes.
• Marketing communications: Where you have given explicit consent, sending you information about promotions, seasonal offers (such as those tied to Ramadhan, Idul Fitri, or Indonesian Independence Day), and new features on the Platform.
• Platform improvement: Analyzing aggregated and anonymized usage data to improve our website, mobile interface, game offering, and payment experience for all Members.
• Legal compliance: Retaining records as required by applicable law and responding to lawful requests from regulatory authorities or law enforcement agencies.

6. Data Sharing & Disclosure

brio4 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share Personal Data only in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process Personal Data on our behalf and under our documented instructions. These include payment gateway operators, identity verification providers, fraud screening services, cloud infrastructure providers, and customer support platform vendors. All Data Processors are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than delivering the specified service to brio4.

6.2 Game Content Providers

Third-party game studios and live casino operators — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, and Spribe — may receive pseudonymized session data (a non-reversible player token, bet amount, and game outcome) as part of the technical integration required to operate their games on our Platform. These providers do not receive your name, email address, national ID number, or bank account details.

6.3 Legal and Regulatory Disclosure

brio4 may disclose Personal Data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by applicable law, a valid court order, or a lawful regulatory instruction. Where permitted, we will notify you of such a disclosure request before complying with it.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of brio4's assets, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Policy that result from it.

6.5 Aggregate and Anonymized Data

brio4 may share aggregated, anonymized, or de-identified data — from which it is not reasonably possible to identify any individual — with analytics partners, advertising networks, or industry research bodies for statistical and market research purposes. This data is not Personal Data and is not subject to the protections described in this Policy.

7. Data Retention

brio4 retains your Personal Data for as long as your account remains active and for a period thereafter as required to comply with legal and regulatory obligations, resolve disputes, enforce our agreements, and protect the legitimate interests of the Platform and its Members.

As a general guide, our standard retention periods are as follows:

• Account and identity data: Retained for the duration of account activity plus a minimum of 5 years following account closure, in line with standard AML record-keeping requirements.
• KYC documentation: Retained for a minimum of 5 years from the date of submission or from the date of the last transaction on the account, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming and betting logs: Retained for a minimum of 3 years from the date of each session or wager.
• Support and communications records: Retained for a minimum of 2 years from the date of the last communication.
• Marketing consent records: Retained until consent is withdrawn, plus 1 year thereafter as evidence of the consent status.

Where Personal Data is no longer required for any lawful purpose, it will be securely deleted or irreversibly anonymized.

8. Data Security

brio4 implements a layered set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• TLS/SSL encryption for all data transmitted between your browser or device and the brio4 servers, ensuring that your credentials, payment details, and session data cannot be intercepted in transit.
• Encryption at rest for all sensitive data fields stored in our databases, including national ID numbers, bank account details, and KYC document files.
• Role-based access controls that restrict internal staff access to Personal Data to only those employees and contractors whose job function genuinely requires it, enforced via multi-factor authentication on all internal systems.
• Regular security audits and penetration testing conducted by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that define escalation paths, containment steps, and notification timelines in the event of a suspected or confirmed data breach.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your brio4 account has been compromised, contact our support team immediately at [email protected].

9. Cookies & Tracking Technologies

brio4 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate and improve the Platform. The categories of cookies we use are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core services such as user authentication (keeping you logged in during a session), fraud prevention token validation, and load balancing across our server infrastructure. These cookies cannot be disabled without breaking core Platform functionality.

9.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, last selected payment method, and responsible gaming settings — so that you do not have to reconfigure them on every visit.

9.3 Analytics Cookies

We use analytics cookies to understand how Members navigate the Platform, which pages and game categories receive the most engagement, and where technical errors occur. This data is collected in aggregated form and is used solely to improve the Platform's performance and content. Analytics cookies do not identify you personally.

9.4 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair the functionality of the brio4 Platform and may prevent you from logging in or completing transactions. Disabling analytics or functional cookies will not prevent you from using core Platform features.

10. Your Rights Over Your Personal Data

Subject to applicable law and any overriding obligations brio4 may have (such as AML record-keeping requirements), you hold the following rights with respect to your Personal Data:

• Right of Access: You may request a copy of the Personal Data brio4 holds about you, along with information about how it is being used.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our retention obligations under applicable law.
• Right to Restriction: You may request that we temporarily suspend processing of your Personal Data while a rectification or objection request is under review.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you may request that your Personal Data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests at any time. brio4 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. We will acknowledge your request within 5 business days and aim to fulfill it within 30 calendar days. Complex or high-volume requests may require an extension of up to an additional 30 days, of which we will notify you in advance.

11. Minors & Age Restriction

The brio4 Platform is strictly for adults aged 21 years and older. We do not knowingly collect, store, or process Personal Data belonging to individuals under the age of 21. Age verification is a mandatory step during account registration, and KYC procedures are designed to detect and reject underage applicants.

If brio4 discovers or has reason to believe that a Member is under 21 years of age, the Account will be suspended immediately, all associated Personal Data will be flagged for accelerated review, and any funds held in the Account will be returned to the originating payment method after identity confirmation. Ongoing access will be permanently denied.

If you are a parent or legal guardian and believe that a minor has created a brio4 account without your knowledge, please contact us immediately at [email protected] so that we may take prompt remedial action.

12. Third-Party Services

The brio4 Platform integrates with a number of third-party services to deliver payment processing, game content, and identity verification functionality. While brio4 selects these partners carefully and requires them to maintain appropriate data security standards, each third-party provider operates under its own privacy policy and data practices. brio4 is not responsible for the privacy practices of third-party services outside of its direct contractual control.

The Platform does not contain links to external third-party websites for browsing purposes. Any third-party integrations are backend technical connections (payment APIs, game studio SDKs, KYC provider APIs) that operate invisibly within the brio4 environment and are governed by the data processing agreements described in Section 6.1 above.

13. Policy Amendments

brio4 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will update the Effective Date at the top of this page and, where required by law or where the changes significantly affect your rights, notify you directly via the email address registered to your account.

Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acknowledgment of and, where applicable, consent to the revised terms. We encourage you to review this page periodically. If you disagree with the revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

14. Contact & Data Protection Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how brio4 handles your Personal Data, please contact our support team. We treat all privacy enquiries with the same priority as account-related support requests and aim to provide substantive responses within 5 business days.