Privacy Policy — big4d

big4d collects only the Personal Data that is necessary and proportionate for the purposes set out in Clause 4. The categories of data we collect are summarised in the table below:

3.1 Directly from You

The majority of Personal Data big4d holds about you is provided directly by you when you: register an Account; complete the KYC verification process; make a deposit or withdrawal; contact our support team; respond to a survey or promotion; or update your Account profile settings.

3.2 Automatically

When you visit or interact with the big4d Platform, certain Technical Data is collected automatically by our servers and analytics tools, including your IP address, device identifiers, browser fingerprint, pages visited, links clicked, and session duration. This data is collected using server logs, cookies, and similar tracking technologies described in Clause 11.

3.3 From Third Parties

big4d may receive Personal Data about you from the following categories of third parties:

• Payment service providers — transaction confirmation data from BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, and LinkAja when you deposit or withdraw;
• KYC and identity verification vendors — cross-referenced identity and document verification data to confirm the authenticity of documents you submit;
• Fraud prevention and anti-money-laundering screening services — risk scores and flagging data to protect the integrity of the Platform and all Players;
• Publicly available sources — such as government databases or publicly accessible social media profiles, where relevant to a fraud or security investigation.

big4d processes your Personal Data for the following specific, explicit, and legitimate purposes:

big4d relies on one or more of the following legal bases when processing your Personal Data:

• Contractual necessity — Processing required to perform the Agreement between you and big4d (i.e., the Terms & Conditions), including Account management, payment processing, and delivering gaming services;
• Legal obligation — Processing required to comply with applicable law, including anti-money-laundering obligations, age verification requirements, and responses to lawful requests from regulatory or law enforcement authorities;
• Legitimate interests — Processing that is necessary for big4d's legitimate business interests, including fraud prevention, network security, responsible gaming monitoring, and general Platform analytics, where those interests are not overridden by your privacy rights;
• Consent — Processing based on your freely given, specific, informed, and unambiguous agreement, applicable to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

big4d does not sell your Personal Data to any third party for their own marketing or commercial purposes. We share Personal Data only in the following circumstances and only to the extent necessary:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process Personal Data on our behalf under contractual obligations of confidentiality and data security. These include:

• Cloud hosting and infrastructure providers that store Platform data on secure servers;
• Payment processing partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, LinkAja) — who receive only the minimum data necessary to execute your transaction;
• KYC and identity verification vendors who validate the documents you submit;
• Fraud detection and anti-money-laundering screening services;
• Customer support platform operators who store and manage support ticket records;
• Game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) who receive anonymised session data to deliver game content.

6.2 Legal and Regulatory Authorities

big4d may disclose Personal Data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or lawful request. We will, where legally permissible, notify affected Players of any such disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of big4d's assets, your Personal Data may be transferred to the successor entity, subject to equivalent data protection obligations. big4d will notify affected Players of any such transfer via the email address registered to their Account.

6.4 With Your Consent

big4d will not share your Personal Data with any third party for any purpose not listed in this Clause without first obtaining your explicit consent.

big4d operates a platform that primarily serves players based in Indonesia (Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and other cities). Some of our service providers and infrastructure partners operate servers located outside Indonesia. Where Personal Data is transferred to a jurisdiction that does not provide the same level of data protection as applicable Indonesian law, big4d implements appropriate safeguards, which may include:

• Contractual clauses that impose equivalent data protection standards on the receiving entity;
• Technical measures including end-to-end encryption to protect data in transit;
• Restricting the categories of data transferred to the minimum necessary for the service provider's function.

You may request information about the specific safeguards applied to any international data transfer by contacting [email protected].

big4d retains Personal Data only for as long as is necessary for the purposes set out in Clause 4, or for as long as required by applicable legal obligations. The following default retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

big4d takes the security of your Personal Data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and the big4d Platform;
• Encryption at rest for all stored Personal Data, KYC documents, and financial records using industry-standard encryption protocols;
• Password hashing — your Account password is never stored in plain text; it is hashed using a modern one-way hashing algorithm with a unique salt;
• Access controls — access to production systems and Personal Data is restricted to authorised big4d personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication;
• Regular security audits and penetration testing of the Platform's infrastructure and application layer;
• Automated fraud and anomaly detection systems that flag unusual login patterns, rapid IP switching, and suspicious transaction sequences in real time;
• Incident response procedures — in the event of a data breach that is likely to result in a risk to your rights and freedoms, big4d will notify affected Players without undue delay.

As a Data Subject, you have the following rights in relation to the Personal Data big4d holds about you. These rights may be subject to limitations where overriding legal obligations apply (for example, big4d cannot delete transaction records that are required to be retained under anti-money-laundering law).

To exercise any of the above rights, please submit a written request to [email protected]. big4d will respond within thirty (30) calendar days of receipt of a valid request. We may request proof of identity before processing a rights request in order to prevent unauthorised disclosure.

big4d uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytics. The categories of cookies we use are as follows:

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary or functional cookies may impair Platform functionality, including the ability to log in or maintain your session. big4d does not respond to browser "Do Not Track" signals at this time, as there is no consistent industry standard for interpreting them.

big4d applies age verification controls at the point of registration and through the KYC process. If big4d discovers or reasonably suspects that Personal Data has been collected from a person under 21, it will immediately suspend the Account, delete the associated Personal Data to the extent permitted by law, and, where fraud is identified, retain the minimum data necessary to report the matter to the relevant authorities.

If you are a parent or guardian and believe that a minor in your care has registered an Account on big4d, please contact us immediately at [email protected]. We will act promptly to investigate and, where confirmed, close the Account and erase the minor's Personal Data.

big4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes, we will:

• Post the revised Policy on this page with an updated "Last Updated" date at the top;
• Send an email notification to the address registered to your Account at least seven (7) calendar days before the changes take effect, where the changes materially affect your rights or our obligations;
• Display a prominent notice on the Platform for a period of not less than seven (7) days following the publication of material changes.

Your continued use of the big4d Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you must cease using the Platform and may request Account closure by contacting [email protected].

We encourage you to review this Policy periodically so that you remain informed about how big4d protects your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or big4d's handling of your Personal Data, please reach out to our Data Protection team using the contact details below. All privacy-related enquiries are handled with strict confidentiality.

When submitting a rights request or privacy enquiry, please include your registered Account username and email address so that we can locate your records and verify your identity efficiently. Do not include your password or full bank account number in any correspondence.