Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all users of the bukit4 platform, including the bukit4 website accessible at bukit4.cam, any mobile applications, and all associated services (collectively referred to as the "Platform"). This policy governs the processing of personal data collected from users who are residents of Indonesia and who access our sports betting, casino, and gaming services.

bukit4 acts as the data controller for the personal information you provide to us. We process your personal data in accordance with international data protection best practices and principles, including transparency, data minimization, purpose limitation, accuracy, storage limitation, integrity, and confidentiality.

2. Information We Collect

bukit4 collects and processes various categories of personal data to provide our services, ensure platform security, comply with legal obligations, and improve user experience. The information we collect includes:

2.1 Account Registration Information

When you create an account on bukit4, we collect the following information:

• Personal Identification Data: Full legal name, date of birth, gender, nationality
• Contact Information: Email address, phone number registered in Indonesia, residential address including street, city, province, and postal code
• Account Credentials: Username and encrypted password (we store passwords using industry-standard hashing algorithms and never store plain-text passwords)

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering (AML) regulations and age verification requirements (21+ years), we collect and verify identity documents including:

• Indonesian national identity card (KTP) showing photograph, name, address, date of birth, and identification number
• Proof of address documents such as utility bills, bank statements, or government-issued correspondence dated within the last three months
• Selfie photographs for biometric verification and account security

2.3 Financial and Transaction Data

When you make deposits or withdrawals on bukit4, we collect:

• Bank account details including bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), account holder name, account number
• E-wallet information for OVO, DANA, or GoPay accounts
• Transaction history including deposit amounts, withdrawal amounts, timestamps, payment methods used, and transaction status
• Currency preference (Indonesian Rupiah / IDR)

We do not store complete credit card or debit card numbers. Payment processing is handled through secure third-party payment gateways that are PCI-DSS compliant.

2.4 Betting and Gaming Activity

To provide our sports betting and casino services, we record:

• Betting history including bet types (sports bets, casino wagers, live bets, mix parlay combinations), stake amounts, odds, bet timestamps, and bet outcomes (win, loss, void)
• Game play data including games played, session duration, bet patterns, RTP (Return to Player) statistics
• Account balance history and wagering turnover
• Bonus claims, bonus usage, and wagering requirement progress

2.5 Technical and Device Information

When you access bukit4, our servers automatically collect certain technical information:

• IP address and geolocation data to verify you are accessing the Platform from Indonesia
• Device information including device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version
• Cookies and tracking technologies to maintain session state, remember user preferences, and analyze Platform usage
• Log files recording access times, pages viewed, links clicked, search queries, and error logs

2.6 Communications and Customer Support

When you contact our customer support team via live chat, email, or WhatsApp, we retain:

• Content of communications including questions, complaints, feedback, and support tickets
• Chat transcripts and email correspondence
• Support case resolution history and customer satisfaction ratings

3. How We Use Your Information

bukit4 uses your personal data for the following purposes, all of which are necessary for the provision of our services or required by law:

3.1 Account Management and Service Delivery

• Create and maintain your user account
• Authenticate your identity and verify your age (21+ requirement)
• Process deposits and withdrawals via Indonesian banks and e-wallets
• Enable you to place bets on sports events and play casino games
• Calculate and credit winnings to your account
• Administer bonuses, promotions, and loyalty rewards
• Provide customer support and respond to your inquiries

3.2 Legal Compliance and Fraud Prevention

• Comply with Indonesian and international anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Verify that you meet eligibility requirements (age 21+, Indonesian residency)
• Detect, prevent, and investigate fraud, collusion, bonus abuse, and other prohibited activities
• Enforce our Terms & Conditions and maintain platform integrity
• Respond to legal requests, court orders, or regulatory inquiries
• Maintain records required by law for audit and compliance purposes

3.3 Responsible Gaming and Player Protection

• Monitor betting patterns and account activity to identify signs of problem gambling
• Implement and enforce deposit limits, wager limits, and self-exclusion requests
• Provide responsible gaming tools and resources
• Proactively contact users showing potential signs of gambling harm

3.4 Platform Improvement and Analytics

• Analyze user behavior and preferences to improve our website, mobile apps, and services
• Conduct market research and statistical analysis
• Optimize platform performance, speed, and stability
• Develop new features, games, and betting markets based on user demand
• Test new functionality and troubleshoot technical issues

3.5 Marketing and Communications

• Send promotional emails about new games, special offers, and bonuses (you may opt out at any time)
• Notify you about important account updates, security alerts, or changes to our policies
• Provide personalized content and recommendations based on your betting preferences

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing betting and gaming services as outlined in our Terms & Conditions)
• Legal Obligation: Processing is required to comply with Indonesian and international legal obligations including AML/CTF laws, age verification requirements, and tax reporting
• Legitimate Interests: Processing is necessary for our legitimate business interests in operating a secure platform, preventing fraud, improving services, and marketing our products, provided such interests do not override your fundamental rights
• Consent: Where required by law, we obtain your explicit consent before processing certain data such as marketing communications

5. Data Sharing and Disclosure

bukit4 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals
• Identity Verification Services: KYC verification providers to authenticate your identity documents and prevent fraud
• Game Providers: Software providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe who power our casino games and slots
• Technology Infrastructure: Cloud hosting providers, content delivery networks (CDNs), and server management companies that maintain our technical infrastructure
• Customer Support Tools: Live chat platforms and customer relationship management (CRM) systems

All third-party service providers are contractually bound to protect your data and use it only for the purposes specified by bukit4.

5.2 Legal and Regulatory Requirements

We may disclose your information to government authorities, law enforcement agencies, regulatory bodies, or courts when:

• Required by law, regulation, legal process, or governmental request
• Necessary to enforce our Terms & Conditions or other agreements
• Required to detect, prevent, or address fraud, security, or technical issues
• Necessary to protect the rights, property, or safety of bukit4, our users, or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal data may be transferred to the successor entity as part of the business transaction. We will notify you via email or prominent notice on our Platform before your data is transferred and becomes subject to a different privacy policy.

6. Data Security Measures

bukit4 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS encryption (HTTPS protocol). Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized bukit4 employees and contractors on a need-to-know basis. All personnel with data access sign confidentiality agreements.
• Secure Servers: Our servers are housed in secure data centers with physical security measures including 24/7 monitoring, biometric access controls, and fire suppression systems.
• Firewalls and Intrusion Detection: We employ firewalls, intrusion detection systems (IDS), and regular vulnerability scanning to prevent unauthorized access.
• Regular Security Audits: Our security infrastructure undergoes regular third-party audits and penetration testing to identify and address vulnerabilities.
• Account Security: We require strong passwords, offer two-factor authentication (2FA) as an option, and monitor for suspicious login activity.

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

7. Data Retention

bukit4 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Accounts: While your account remains active, we retain all account data, transaction history, and betting records to provide ongoing services.
• Closed Accounts: After you close your account, we retain certain data for legal and regulatory compliance purposes, typically for five (5) years from the date of account closure or the last transaction, whichever is later.
• Legal Requirements: We may retain data longer if required by law, for pending legal proceedings, to resolve disputes, or to enforce our agreements.
• Anonymized Data: We may retain anonymized or aggregated data indefinitely for statistical analysis and platform improvement purposes. Anonymized data cannot be used to identify individual users.

8. Your Privacy Rights

As a user of bukit4, you have the following rights regarding your personal data:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you. You may access much of this information directly through your account dashboard. To request a comprehensive data export, contact our support team.

8.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request correction. You can update your contact information, address, and phone number directly in your account settings. For changes to your name or date of birth, contact customer support with supporting documentation.

8.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent. Please note that we may be required to retain certain data to comply with legal obligations even after you request deletion.

8.4 Right to Restrict Processing

You may request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

8.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or adjusting your communication preferences in your account settings.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at [email protected] with your account details and specific request. We will respond to your request within thirty (30) days.

9. Cookies and Tracking Technologies

bukit4 uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

Types of cookies we use:

• Essential Cookies: Required for basic platform functionality such as maintaining your login session and remembering your language preference.
• Performance Cookies: Collect anonymous data about how you use our Platform, helping us identify and fix issues and improve performance.
• Functional Cookies: Remember your preferences and settings to provide a personalized experience.
• Advertising Cookies: May be used to deliver relevant marketing content based on your interests.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality.

10. Children's Privacy

bukit4 is intended exclusively for users aged 21 years and older. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that a user under 21 has created an account or provided personal information, we will immediately close the account and delete all associated data. If you believe a minor has accessed our Platform, please contact us immediately at [email protected].

11. International Data Transfers

Your personal data is primarily stored on servers located in secure data centers that comply with international security standards. In some cases, your data may be transferred to or processed by service providers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place, including contractual clauses requiring the recipient to protect your data according to standards equivalent to those described in this Privacy Policy.

12. Changes to This Privacy Policy

bukit4 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on our Platform or by sending you an email to the address associated with your account. The "Last Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the bukit4 Platform after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 through your account dashboard
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours during business days (WIB timezone)