Privacy Policy

Section 1

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "bbm4d" / "We" / "Us" / "Our" — the operating entity behind the bbm4d platform accessible at https://bbm4d.lat, including its officers, employees, contractors, and authorised service providers.
• "Platform" — the bbm4d website, any mobile-optimised interface, and any software application through which our betting and gaming services are delivered.
• "Player" / "You" / "Your" — any individual who visits, registers on, or interacts with the Platform in any capacity.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, bank account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "KYC Documents" — identity and address verification materials submitted by a Player in compliance with our Know Your Customer obligations, such as a national identity card (KTP), passport, or proof of payment-method ownership.
• "Third-Party Processor" — any external company engaged by bbm4d to process Personal Data on our behalf under a binding data-processing agreement, such as payment processors, identity verification providers, and fraud-detection services.
• "IDR" — Indonesian Rupiah, the currency in which all bbm4d transactions are conducted.

Section 2

Data Controller

bbm4d acts as the data controller in respect of all Personal Data collected through the Platform. As data controller, bbm4d determines the purposes for which, and the means by which, your Personal Data is processed. All questions, requests, and complaints regarding data privacy should be directed to our support team using the contact details in Section 14 of this policy.

Section 3

Personal Data We Collect

bbm4d collects Personal Data through multiple channels during your interaction with the Platform. The categories of data we collect, together with examples and the typical collection point, are summarised in the table below:

3.1 Data You Provide Voluntarily

The majority of Personal Data bbm4d holds is data you actively provide — during registration, during the KYC verification process, when making deposits or withdrawals, and when contacting our support team. Providing accurate information in all these contexts is a condition of your account agreement with us.

3.2 Data Collected Automatically

When you access the Platform, our servers automatically record Technical Data including your IP address and device identifiers. This data is used for security monitoring, fraud detection, and to ensure the Platform functions correctly across different devices and network conditions. Players accessing from locations in Jakarta, Surabaya, Bandung, Medan, Bali, and other major Indonesian cities will have their regional IP data processed for geo-verification purposes.

3.3 Data from Third Parties

In limited circumstances, bbm4d may receive data about you from third parties — for example, from our identity verification provider during the KYC process, from payment processors confirming the ownership status of a bank account, or from fraud-prevention networks flagging a known fraudulent device fingerprint. Such third-party data is handled with the same degree of care as data collected directly from you.

Section 4

How We Use Your Personal Data

bbm4d uses the Personal Data it holds for specific, documented purposes only. The following table maps each processing purpose to the relevant data category and legal basis:

Section 5

Legal Basis for Processing

bbm4d processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our obligations under the account agreement with you — for example, processing a deposit, settling a winning bet, or responding to a support request.
• Legal Obligation: Processing required to comply with applicable laws — for example, retaining financial transaction records, fulfilling KYC obligations, or cooperating with a lawful regulatory request.
• Legitimate Interests: Processing necessary for bbm4d's legitimate business interests, where those interests are not overridden by your rights — for example, fraud detection, network security monitoring, and anonymised analytics to improve the Platform.
• Consent: Processing based on your freely given, specific, and informed agreement — for example, sending you promotional emails or SMS notifications about bonuses and new game launches. You may withdraw consent for marketing communications at any time by updating your account preferences or contacting support.

Section 6

Data Sharing & Disclosure

bbm4d does not sell your Personal Data. We may share your data only in the limited circumstances described below:

6.1 Third-Party Processors

We engage carefully selected Third-Party Processors to assist in delivering our services. These include payment gateway providers facilitating IDR transactions through BCA, BRI, BNI, Mandiri, and Indonesian e-wallets; identity verification providers conducting KYC checks; fraud-detection and anti-money-laundering screening services; cloud infrastructure providers hosting Platform data; and customer support software providers. All Third-Party Processors are bound by written data-processing agreements that prohibit them from using your data for any purpose other than delivering the specific service we have engaged them for.

6.2 Game Content Providers

Certain game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe — may receive limited technical session data (such as an anonymised player token and session identifier) solely for the purpose of rendering the game correctly and recording the round result. These providers do not receive your name, contact details, or financial information.

6.3 Legal Disclosures

bbm4d may disclose your Personal Data to a government authority, law enforcement agency, or court of competent jurisdiction where we are required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of bbm4d, its players, or the public. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

6.4 Business Transfers

In the event that bbm4d undergoes a merger, acquisition, or sale of all or a portion of its assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via a prominent notice on the Platform and, where required, your consent will be sought before the transfer takes effect.

6.5 No Marketing Disclosures

Under no circumstances will bbm4d share your Personal Data with third-party companies for their own marketing or advertising purposes. We do not participate in data-sharing arrangements for advertising targeting, and we do not permit advertising networks to place tracking pixels on the Platform that identify individual players.

Section 7

Cookies & Tracking Technologies

bbm4d uses cookies and similar technologies to operate the Platform, maintain your session, and analyse usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as preferred language settings and responsible gaming limit configurations, so you do not need to re-enter them on each visit.
• Analytics Cookies: Help us understand how players navigate the Platform — for example, which game categories attract the most traffic, which deposit methods are most used, and how players move through the registration funnel. Analytics data is aggregated and anonymised before any review.
• Security & Fraud-Detection Cookies: Used to fingerprint devices for the purpose of identifying suspicious activity, duplicate account registration attempts, and other patterns associated with fraud or bonus abuse.

You may manage cookie preferences through your browser settings. Note that disabling Strictly Necessary Cookies will prevent you from logging in or making transactions on the Platform. Disabling Analytics Cookies will not affect your ability to use the Platform but will limit our ability to improve the experience over time.

Section 8

Data Retention

bbm4d retains your Personal Data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account relationship with bbm4d, plus a period of five (5) years following account closure to meet anti-money-laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, in line with internationally recognised compliance standards for online gaming operators.
• Financial Transaction Records: Retained for five (5) years from the date of the transaction.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service quality review.
• Technical / Server Log Data: Retained for up to twelve (12) months in detailed form, then aggregated or deleted.
• Marketing Consent Records: Retained until you withdraw consent plus one (1) year thereafter, to demonstrate compliance with consent obligations.

Upon the expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

Section 9

Your Data Rights

As a player on the bbm4d Platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact our support team using the details in Section 14:

• Right of Access: You may request a copy of the Personal Data bbm4d holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct it. For registration data, you may also update certain fields directly within your account settings panel.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that erasure requests may be limited where retention is required by law — for example, KYC and financial records subject to mandatory retention periods.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis and carried out by automated means, you may request that we provide your Personal Data in a structured, machine-readable format.
• Right to Object: You may object at any time to the processing of your Personal Data for direct marketing purposes. You may also object to processing based on legitimate interests, though bbm4d may be entitled to continue processing where it can demonstrate compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Section 10

Security Measures

bbm4d implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction:

• TLS/SSL Encryption: All data in transit between your browser or app and our servers is encrypted using Transport Layer Security (TLS 1.2 or higher). The padlock icon in your browser address bar confirms an active encrypted connection.
• Password Hashing: Passwords are never stored in plain text. bbm4d uses industry-standard cryptographic hashing with salting to store password credentials securely.
• Access Controls: Access to systems containing Personal Data is granted on a strict need-to-know basis and is protected by multi-factor authentication for all personnel with administrative privileges.
• Penetration Testing: bbm4d conducts periodic security assessments and penetration tests on the Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Intrusion Detection: Real-time network monitoring and intrusion detection systems are in place to identify unusual traffic patterns or access attempts associated with cyberattack activity.
• Data Minimisation in Logs: Server access logs are configured to exclude sensitive data fields such as full card numbers or bank account numbers, limiting the exposure of financial data in operational log files.

While bbm4d employs robust security practices, no system connected to the internet can guarantee absolute security. You are encouraged to use a strong, unique password for your bbm4d account and to enable any two-factor authentication options available within your account settings.

Section 11

Children's Privacy

The bbm4d Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account, deposit funds, or participate in any wagering activity on the Platform.

If bbm4d becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to verify the situation, suspend the relevant account, void any associated transactions, and delete the data as promptly as possible. If you are a parent or guardian and believe your child has accessed or registered on the Platform, please contact us immediately at support@bbm4d.lat so that we can investigate and act without delay.

Section 12

International Data Transfers

bbm4d's primary player base is located in Indonesia, and we endeavour to process Personal Data within or as close to the Indonesian region as our infrastructure permits. However, certain Third-Party Processors — such as cloud hosting providers, identity verification services, and game content providers — may process data on servers located outside Indonesia.

Where Personal Data is transferred internationally, bbm4d takes steps to ensure that appropriate safeguards are in place, including: contractual data-processing agreements incorporating standard data protection clauses; selecting processors that operate under privacy frameworks equivalent in protection to those applicable in Indonesia; and limiting the data transferred to the minimum necessary for the specific processing purpose.

By using the bbm4d Platform and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data to the extent described above and subject to the safeguards described herein.

Section 13

Updates to This Privacy Policy

bbm4d reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable laws, or the services we offer. The "Last updated" date at the top of this document indicates when the most recent revision was made.

Where changes are material — meaning they significantly affect how we use your data or the rights available to you — bbm4d will notify registered players via a prominent notice displayed upon your next login, or by email to your registered address. Non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the policy) take effect immediately upon publication.

We encourage you to review this page periodically to stay informed about how bbm4d is protecting your information. Your continued use of the Platform after any update to this policy constitutes acceptance of the revised terms.

Section 14

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please reach out to the bbm4d privacy and support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the Platform after login. This is the fastest way to reach our team for urgent account or data concerns.
• Email: support@bbm4d.lat — please include "Privacy Request" in the subject line along with your registered username to help us route your enquiry to the correct team. Responses are typically provided within 24–48 hours during standard business hours (WIB, UTC+7).

For data rights requests (access, rectification, erasure, portability), please be prepared to verify your identity before we action the request, as described in Section 9 of this policy. bbm4d is committed to responding to all privacy-related enquiries fairly, transparently, and within a reasonable timeframe.