buah4 Privacy Policy

In this Privacy Policy, the following terms carry the meanings defined below. These definitions apply throughout the document unless the context otherwise requires.

• "buah4" / "we" / "us" / "our" — refers to buah4.org and the entity operating the buah4 online betting and casino platform.
• "Player" / "you" / "your" — refers to any individual who registers an account on, accesses, browses, or otherwise uses the buah4 platform in any capacity.
• "Personal Data" — refers to any information that identifies or can reasonably be used to identify you as a natural person, including your name, email address, date of birth, residential address, phone number, device identifiers, and financial account details.
• "Processing" — refers to any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "KYC" (Know Your Customer) — refers to the identity and document verification process required by buah4 to comply with applicable anti-money-laundering and responsible gaming obligations.
• "Platform" — refers to the buah4 website, mobile web interface, and any associated digital products or services accessible via buah4.org.
• "Third Party" — refers to any natural person, company, or organisation other than you and buah4, including buah4's authorised service providers, payment processors, and technology partners.
• "IDR" / "Rp" — refers to the Indonesian Rupiah, the sole transaction currency accepted on the buah4 platform.

buah4 collects Personal Data from you in the following ways: directly when you register an account, make a deposit or withdrawal, contact support, or use the platform; automatically when you interact with the platform; and occasionally from third-party verification providers during KYC. The categories of data we collect are described in the table below.

buah4 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is contained in a government-issued identity document submitted for KYC purposes. Where a submitted document incidentally includes such data, it is stored solely for the purpose of identity verification and is not used for any other purpose.

buah4 uses your Personal Data only for the purposes described in this Policy. We do not use your data in any manner that is incompatible with the purposes for which it was originally collected. The primary purposes for which buah4 processes Personal Data are set out below.

• Account Creation and Management: To register your account, verify your identity, maintain accurate account records, and manage your account settings and preferences throughout your relationship with buah4.
• Service Delivery: To provide the full range of buah4 services, including the sportsbook, live casino, slot games, togel (Indonesia's traditional numbers lottery) markets, Domino QQ, and esports betting, as well as to process your bets, calculate winnings, and manage your IDR-denominated balance.
• Payment Processing: To process your deposits and withdrawals via Indonesian banking channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja), and to detect and prevent payment fraud.
• KYC and Regulatory Compliance: To verify your identity and age (21+), satisfy anti-money-laundering (AML) obligations, conduct ongoing monitoring of account activity for suspicious transactions, and respond to requests from competent authorities where legally required.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, apply account limits and cooling-off periods where requested or where buah4 determines intervention is appropriate in the interest of player welfare, and to maintain records of self-exclusion requests.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of communications for quality assurance and training purposes.
• Platform Security: To detect, investigate, and prevent fraud, cheating, account sharing, bot usage, and other prohibited conduct; to monitor for and respond to security threats and unauthorised access attempts.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, improve product features, and develop new services.
• Promotional Communications: Where you have provided consent or where a legitimate interest applies, to send you information about buah4 promotions, bonus offers, and platform updates by email or other agreed channels. You may withdraw consent for marketing communications at any time via your account settings or by contacting support.

buah4 processes your Personal Data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and buah4 — specifically, to provide the services you have registered for, process transactions, and manage your account. Without this processing, buah4 cannot provide its services to you.
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including anti-money-laundering laws, financial crime reporting requirements, and any order or directive issued by a competent regulatory or law enforcement authority.
• Legitimate Interests: Processing is necessary for buah4's legitimate business interests, provided those interests are not overridden by your rights and freedoms. Legitimate interests relied upon by buah4 include fraud prevention, platform security, responsible gaming monitoring, and internal analytics for service improvement.
• Consent: For marketing communications and for the use of non-essential cookies, buah4 relies on your freely given, specific, and informed consent. You may withdraw consent at any time, and withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

buah4 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We share Personal Data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose.

• Payment Processors and Banking Partners: Your financial data is shared with our payment processing partners — including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely to execute deposit and withdrawal transactions on your behalf. These partners are bound by their own regulatory obligations and data protection standards.
• Identity Verification Providers: During KYC, identity document data may be shared with authorised third-party verification service providers who assist buah4 in validating the authenticity of submitted documents. These providers operate under strict data processing agreements with buah4.
• Game and Technology Providers: Certain usage data (such as bet amounts and game session identifiers) is shared with our game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to the extent necessary to deliver their game content and ensure accurate settlement of game results.
• Legal and Regulatory Authorities: buah4 may disclose Personal Data to law enforcement agencies, courts, regulatory bodies, or other competent public authorities where required to do so by applicable law, court order, or regulatory directive. Where permitted, buah4 will notify you of such disclosures.
• Business Transfers: In the event of a merger, acquisition, reorganisation, or sale of all or a material part of buah4's assets, your Personal Data may be transferred to the successor entity. buah4 will notify affected players in advance of any such transfer and will ensure that appropriate data protection terms are maintained.
• Professional Advisers: buah4 may share Personal Data on a confidential basis with its legal advisers, auditors, and insurers where necessary for the conduct of legal proceedings, audit reviews, or insurance claims.

All third parties with whom buah4 shares Personal Data are required to implement appropriate technical and organisational security measures to protect the data they process on buah4's behalf, and to use it solely for the specific purpose for which it was disclosed.

buah4 uses cookies and similar tracking technologies to operate the platform, maintain your session, and gather aggregate analytics data. A cookie is a small text file stored on your device by your browser when you visit the platform. The cookies used by buah4 fall into the following categories:

buah4 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts that report your platform activity to external advertising networks.

You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair the functionality of the platform. Disabling functional or analytics cookies will not affect your ability to use the core buah4 services.

buah4 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, and in any event for no longer than required by applicable law or regulatory obligation. The general retention periods applied by buah4 are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate research and analytics purposes.

As a player on the buah4 platform, you hold the following rights with respect to your Personal Data:

• Right of Access: You have the right to request a copy of the Personal Data that buah4 holds about you, along with information about how it is being processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any Personal Data held by buah4 about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that buah4 delete your Personal Data where: the data is no longer necessary for the purpose it was collected; you have withdrawn consent and no other legal basis applies; or the data has been unlawfully processed. This right does not apply where buah4 is required to retain the data to comply with a legal obligation (for example, AML record-keeping requirements).
• Right to Restriction of Processing: You may request that buah4 restrict the processing of your Personal Data in certain circumstances — for example, where you contest the accuracy of the data while buah4 verifies it, or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to transmit it to another data controller.
• Right to Object: You have the right to object to processing of your Personal Data where buah4 relies on legitimate interests as its legal basis. buah4 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for legal claims.
• Right to Withdraw Consent: Where buah4 relies on your consent as the legal basis for processing (including marketing communications and non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

buah4 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and buah4's servers is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
• Encryption at Rest: Sensitive Personal Data, including financial account details and identity document data, is encrypted at rest using AES-256 encryption on buah4's storage infrastructure.
• Access Controls: Internal access to Personal Data is governed by role-based access controls (RBAC). Only personnel with a legitimate need to access specific data categories may do so, and all access is logged and audited.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their buah4 accounts. Internal buah4 systems require 2FA for all staff accessing player data.
• Regular Security Audits: buah4 conducts periodic security assessments, penetration tests, and vulnerability scans to identify and remediate security risks before they can be exploited.
• Incident Response: buah4 maintains a documented data breach response plan. In the event of a confirmed data breach affecting your Personal Data, buah4 will notify affected players and the relevant authorities within the timeframes required by applicable law.

While buah4 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. Players are encouraged to maintain strong, unique passwords for their buah4 accounts and to enable 2FA as an additional layer of protection. If you suspect that your account has been compromised, contact support at [email protected] immediately.

The buah4 platform does not contain links to external third-party websites for general browsing. Where references to third-party brands, game studios, or payment providers appear within the buah4 platform (for example, Pragmatic Play, Evolution Gaming, BCA, OVO), these are references to buah4's contracted service partners and do not constitute endorsements of, or links to, independent third-party websites.

buah4 is not responsible for the data protection practices or privacy policies of any third-party organisations, including its payment processing and game content partners. Players who have independent relationships with these organisations — for example, a BCA bank account or an OVO e-wallet — are subject to those organisations' own privacy policies in relation to that independent relationship. buah4's Privacy Policy applies solely to the processing of your Personal Data by buah4 in connection with your use of the buah4 platform.

buah4 takes the protection of minors extremely seriously. As part of the account registration process, all players are required to confirm that they are at least 21 years of age. Where buah4 has reasonable grounds to believe that a player is under 21, the account will be suspended immediately, any KYC verification will be expedited, and if underage use is confirmed, the account will be permanently closed. Any balance held in the account at the time of closure will be returned to the payment method used for deposits, provided that the funds can be traced to a payment method registered in the player's name.

If you are a parent or guardian and believe that a minor under your care has registered an account on buah4, please contact support at [email protected] immediately. buah4 will investigate and take prompt action in accordance with this policy and applicable child protection obligations.

buah4 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Where material changes are made, buah4 will provide reasonable advance notice to registered players via email notification or a prominent banner on the platform, specifying the effective date of the revised policy.

Your continued use of the buah4 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any update to this Privacy Policy, you may request closure of your account by contacting buah4 support prior to the effective date of the change.

The most current version of this Privacy Policy is always available at buah4.org/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how buah4 handles your Personal Data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way buah4 processes your Personal Data, please contact our support team through any of the following channels. All data-related requests will be handled with strict confidentiality.

• Live Chat: Available 24/7 directly through the buah4 platform — Indonesian-speaking agents available 08:00–24:00 WIB daily.
• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +62 811 0000 4884 (plain text — not a clickable link)

For Subject Access Requests (SARs) or requests to exercise any of the rights described in Clause 8, please email [email protected] with the subject line "Data Rights Request" and include your registered account email address and a description of your request. buah4 will acknowledge receipt within 48 hours and provide a full response within 5 business days.