Privacy Policy

1. Introduction

buah4 ("we," "us," or "our") operates an online gambling platform accessible at https://buah4.cam, providing sports betting, casino games, and related entertainment services to users in Indonesia. We understand that privacy is critically important to our users, and we are committed to being transparent about how we handle your personal data. This Privacy Policy forms part of our Terms & Conditions and should be read in conjunction with that document. This policy complies with international data protection standards and applies to all users of the buah4 platform, regardless of how you access our services (website, mobile browser, or any future applications).

2. Information We Collect

buah4 collects various types of information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and deliver personalized user experiences.

2.1 Information You Provide Directly

When you register for a buah4 account, you voluntarily provide us with personal information including:

• Identity Information: Full legal name (as it appears on your government-issued identification), date of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, and residential address in Indonesia (street address, city, postal code, province).
• Account Credentials: Username and password (passwords are encrypted and never stored in plain text).
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals. We do not store full credit/debit card numbers if such payment methods are used—these are processed through secure third-party payment gateways.
• Verification Documents: Government-issued photo ID (Indonesian KTP or passport), proof of address (utility bills, bank statements), and selfie verification photos submitted as part of Know Your Customer (KYC) compliance.
• Communication Records: Chat logs, emails, and other communications with our customer support team.

2.2 Information Collected Automatically

When you access and use the buah4 platform, we automatically collect certain technical and usage information:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, and device identifiers.
• Connection Information: IP address, internet service provider (ISP), connection type, and approximate geolocation derived from IP address (city/region level, not precise GPS coordinates).
• Usage Data: Pages visited, features used, time spent on pages, click patterns, navigation paths, referral sources (how you arrived at buah4), and session durations.
• Gambling Activity: Bets placed, games played, bet amounts, winnings and losses, deposit and withdrawal history, bonus usage, and account balance changes.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to remember your preferences, authenticate your session, analyze platform performance, and deliver relevant content. See Section 9 for detailed cookie information.

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and payment gateways.
• Identity Verification Services: Age verification and identity authentication results from specialized KYC service providers.
• Fraud Prevention Services: Risk assessment data from anti-fraud and anti-money laundering screening services.
• Game Providers: Game session data and outcome information from third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) whose games are integrated into the buah4 platform.

3. How We Use Your Information

buah4 uses the collected information for the following purposes:

• Account Management: Creating and maintaining your account, authenticating your identity, managing your profile settings, and providing customer support.
• Service Delivery: Processing deposits and withdrawals, enabling you to place bets and play games, tracking your gambling activity, calculating winnings, and managing your account balance.
• Legal Compliance: Verifying your age (ensuring you are 21+), confirming your identity and residency in Indonesia, complying with anti-money laundering (AML) regulations, preventing fraud and illegal activity, and responding to legal requests from law enforcement or regulatory authorities.
• Security and Fraud Prevention: Monitoring for suspicious account activity, detecting multiple accounts from the same individual, preventing cheating and collusion, protecting against hacking and unauthorized access, and enforcing our Terms & Conditions.
• Platform Improvement: Analyzing usage patterns to improve user experience, testing new features and games, optimizing platform performance and speed, and fixing technical bugs and errors.
• Marketing and Communications: Sending promotional emails about bonuses and special offers (you may opt out), notifying you of account activity and important updates, providing customer support responses, and delivering personalized game recommendations based on your preferences.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling, enforcing deposit limits and self-exclusion requests, and providing responsible gaming tools and resources as described on our Responsible Gaming page.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing gambling services as outlined in our Terms & Conditions).
• Legal Obligations: Processing is required to comply with applicable laws and regulations, including age verification, KYC requirements, AML laws, and tax reporting obligations.
• Legitimate Interests: Processing serves our legitimate business interests, such as fraud prevention, security maintenance, service improvement, and direct marketing (where not overridden by your privacy rights).
• Consent: In some cases, we process data based on your explicit consent, such as for optional marketing communications or certain cookie types (you may withdraw consent at any time).

5. Data Sharing and Disclosure

buah4 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for the purposes described in this policy:

5.1 Service Providers

We share data with trusted third-party service providers who assist in operating our platform, including:

• Payment Processors: Banks and payment gateways that process deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon).
• Game Providers: Software studios that supply casino games and live dealer tables (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Pocket Games Soft, Spribe).
• Identity Verification Services: KYC and age verification specialists who confirm your identity and eligibility.
• Customer Support Tools: Live chat platforms, email services, and CRM systems used to deliver customer support.
• Cloud Hosting and IT Infrastructure: Secure data centers and cloud services that host the buah4 platform and databases.
• Analytics and Marketing Services: Tools that help us understand user behavior and deliver targeted marketing (where permitted by law).

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

5.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement, government agencies, or regulatory bodies if required by law, court order, or legal process, or if we believe disclosure is necessary to prevent fraud, protect our rights, or ensure public safety.

5.3 Business Transfers

If buah4 is involved in a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor as part of the business transition. We will notify you via email or prominent notice on the platform before any such transfer occurs.

5.4 With Your Consent

We may share your information with other parties when you explicitly consent to such sharing, such as when you authorize us to publish your name and winnings as part of a promotional campaign.

6. Data Retention

buah4 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Information is retained for the duration of your account's active status and for a reasonable period afterward to address any post-closure inquiries or disputes.
• Closed Accounts: After account closure (voluntary or involuntary), most personal data is deleted or anonymized within 90 days, except where longer retention is required by law.
• Transaction Records: Financial transaction data (deposits, withdrawals, bets, winnings) is retained for a minimum of 7 years to comply with tax, accounting, and anti-money laundering regulations.
• KYC Documents: Identity verification documents are retained for at least 5 years after account closure as required by regulatory standards.
• Communication Records: Customer support communications are retained for 3 years for quality assurance and dispute resolution purposes.

When data is no longer needed, we securely delete or anonymize it using industry-standard methods to prevent unauthorized recovery.

7. Data Security

buah4 implements robust technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by major financial institutions.
• Secure Storage: Personal data is stored in encrypted databases hosted in secure, access-controlled data centers with physical and electronic safeguards.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis, and all access is logged and monitored.
• Password Protection: User passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text.
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans to identify and address potential risks.
• Employee Training: All buah4 staff and contractors undergo data protection and security training to ensure proper handling of personal information.

While we strive to protect your data using industry best practices, no system is completely secure. We cannot guarantee absolute security of information transmitted over the internet or stored electronically. You are responsible for maintaining the confidentiality of your account credentials and for any activity conducted through your account.

8. Your Privacy Rights

As a buah4 user, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal information we hold about you, including details of how it is used and who it has been shared with.
• Right to Correction: If your personal information is inaccurate or incomplete, you may request that we correct or update it. You can update certain information directly through your account settings.
• Right to Deletion: You may request deletion of your personal information, subject to legal retention requirements (e.g., we cannot delete transaction records required by law).
• Right to Restriction: You may request that we limit the processing of your personal information in certain circumstances, such as while verifying its accuracy.
• Right to Data Portability: You may request a machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: You may object to processing of your personal information for direct marketing purposes (opt-out options are provided in all marketing emails).
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time (note: this does not affect the lawfulness of processing prior to withdrawal).

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We will respond to your request within 30 days. Note that some requests may require identity verification to prevent unauthorized access to your data.

9. Cookies and Tracking Technologies

buah4 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on subsequent visits.

9.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic platform functionality, account authentication, and security. Cannot be disabled.	Session or up to 1 year
Performance Cookies	Collect anonymous usage data to help us understand how users interact with the platform and identify areas for improvement.	Up to 2 years
Functionality Cookies	Remember your preferences (language, display settings) and provide enhanced features like personalized game recommendations.	Up to 1 year
Marketing Cookies	Track your activity across the platform to deliver relevant promotional content and measure marketing campaign effectiveness.	Up to 1 year

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling essential cookies may prevent you from accessing certain features or using the buah4 platform entirely. Disabling performance or marketing cookies will not prevent platform access but may reduce personalization and functionality.

10. International Data Transfers

buah4 primarily serves users in Indonesia, and your personal data is processed and stored within secure data centers that may be located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information, including contractual obligations requiring recipients to maintain equivalent data protection standards. By using buah4, you consent to such transfers.

11. Children's Privacy

buah4 services are strictly intended for individuals aged 21 and above. We do not knowingly collect personal information from anyone under 21 years of age. If we become aware that we have inadvertently collected data from a minor, we will promptly delete such information and close the associated account. Parents or guardians who believe their child has provided information to buah4 should contact us immediately at [email protected].

12. Changes to This Privacy Policy

buah4 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you by email (to the address registered on your account) and/or by posting a prominent notice on the platform at least 30 days before the changes take effect. Your continued use of buah4 after the effective date of the revised Privacy Policy constitutes acceptance of the changes. We encourage you to review this page periodically to stay informed about how we protect your data. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Data Protection Officer:

How We Protect Your Privacy