Privacy Policy
of baim4

Definitions

In this Privacy Policy, the following terms carry the meanings assigned below unless the context expressly requires otherwise:

• "baim4" / "we" / "us" / "our" — the baim4 online gaming platform operated at https://baim4.org and all associated sub-domains, mobile interfaces, and services.
• "Player" / "you" / "your" — any individual who registers an account on, visits, or otherwise interacts with the baim4 platform.
• "Personal Data" — any information that identifies or can reasonably be used to identify a natural person, either directly or in combination with other available information.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — baim4 in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Third-Party Processor" — any external organisation that processes Personal Data on behalf of baim4 under a binding data-processing agreement, such as payment service providers or identity verification partners.
• "Services" — all gaming, betting, and ancillary services provided by baim4, including sportsbook wagering, live casino, slot games, and togel (Indonesia's traditional numbers lottery).
• "KYC" — Know Your Customer identity verification procedures used to confirm a Player's identity and eligibility to use the Services.
• "Cookies" — small text files stored on your device by the baim4 platform for the purposes described in Clause 9.

Data We Collect

baim4 collects the following categories of Personal Data in connection with your use of the platform:

How We Collect Your Data

baim4 collects Personal Data through the following channels:

• Direct Interactions: Data you provide when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact our support team, or respond to promotions.
• Automated Technologies: Data collected automatically when you access the baim4 platform, including via cookies, web beacons, server logs, and similar tracking technologies described in Clause 9.
• Third-Party Sources: Data received from identity verification providers, fraud-detection services, payment processors, and publicly available databases, used to supplement information you have provided directly and to meet our KYC and AML obligations.
• Game Provider Data: Aggregated session and outcome data relayed to baim4 by third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) for the purpose of accounting, dispute resolution, and responsible gaming monitoring.

Purpose of Processing

baim4 processes your Personal Data for the following purposes:

• Account Management: To create, operate, and maintain your baim4 account, including verifying your identity, processing transactions, and providing access to the Services.
• Payment Processing: To facilitate deposits and withdrawals via your nominated Indonesian bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja) in Indonesian Rupiah (IDR).
• KYC and AML Compliance: To verify your identity, confirm your age (21+), and detect and prevent money laundering, fraud, and other financial crimes in accordance with internationally recognised compliance standards.
• Service Delivery: To provide and improve the gaming and betting Services, resolve technical issues, and ensure the stability and security of the platform.
• Customer Support: To respond to your enquiries, process complaints, and manage dispute resolution through our 24/7 Indonesian-speaking support team.
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling behaviour and to administer deposit limits, cooling-off periods, and self-exclusion requests as described in our Responsible Gaming policy.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email, where you have provided your consent or where we have a legitimate interest in doing so. You may opt out at any time by contacting our support team or using the unsubscribe link in any marketing email.
• Analytics and Improvement: To analyse aggregated usage patterns, optimise the user experience, and develop new features and products — using anonymised or pseudonymised data wherever possible.
• Legal Obligations: To comply with applicable laws, regulations, court orders, and regulatory directives, and to protect the rights, property, and safety of baim4, its Players, and third parties.

Legal Basis for Processing

baim4 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and baim4 — specifically, to operate your account, accept bets, process payments, and deliver the Services you have signed up for.
• Consent: Where you have given us specific, informed consent to process your data for a particular purpose — such as receiving marketing communications — we rely on that consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legal Obligation: Processing is necessary for baim4 to comply with applicable legal and regulatory obligations, including KYC verification, AML monitoring, and responses to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for purposes that are in the legitimate interests of baim4 or a third party — for example, fraud prevention, platform security, improving our Services, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.

Sharing Your Personal Data

baim4 does not sell, rent, or trade your Personal Data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under binding contractual data-protection obligations:

• Payment Processors: Indonesian bank transfer facilitators and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum Personal Data necessary to execute your deposit or withdrawal instructions.
• Identity Verification Providers: Third-party KYC and AML compliance services may receive copies of your identity documents and biometric data solely for the purpose of verifying your identity and checking you against relevant watchlists.
• Game Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session and account identifiers necessary to deliver their games to you through the baim4 platform. These providers operate as independent data controllers for data generated within their own game environments.
• IT and Hosting Providers: Infrastructure, cloud hosting, and cybersecurity service providers who support the operation and security of the baim4 platform may process Personal Data on our behalf as data processors.
• Fraud and Risk Management Services: Specialist third-party services that assist baim4 in detecting and preventing fraudulent activity, bonus abuse, and other threats to platform integrity.
• Legal and Regulatory Authorities: Where required by law, court order, or lawful regulatory directive, baim4 may disclose Personal Data to relevant governmental, judicial, or regulatory bodies. Such disclosures are made only to the extent strictly necessary and, where legally permissible, with prior notification to you.
• Professional Advisers: Lawyers, auditors, accountants, and insurers engaged by baim4 on a confidential basis where necessary to obtain professional advice or manage legal proceedings.

International Data Transfers

baim4 operates as an internationally licensed gaming platform. As a result, your Personal Data may be processed by baim4 or its Third-Party Processors in countries outside Indonesia. When such transfers occur, baim4 takes the following steps to protect your data:

• Transfers to Third-Party Processors are governed by binding data-processing agreements that include appropriate data-protection provisions equivalent to internationally recognised standards.
• Where Personal Data is transferred to a country that does not offer a data-protection regime equivalent to generally recognised international standards, baim4 implements additional contractual safeguards, such as standard contractual clauses, to ensure your data remains adequately protected.
• baim4 conducts transfer impact assessments where required to evaluate risks associated with international data transfers and to determine whether additional safeguards are necessary.

By using the baim4 platform, you acknowledge and consent to the transfer of your Personal Data to countries outside Indonesia as described in this Clause.

Data Retention

baim4 retains your Personal Data for no longer than is necessary for the purposes for which it was collected, subject to the following retention principles:

• Active Accounts: Personal Data associated with an active baim4 account is retained for as long as your account remains open and active.
• Closed Accounts: Following account closure, baim4 retains account records, transaction history, and KYC documentation for a minimum of five (5) years from the date of closure. This retention period reflects our obligations under AML regulations and the potential need to respond to regulatory enquiries or legal proceedings.
• Marketing Data: Where you have consented to receive marketing communications, we retain your contact and preference data until you withdraw consent or request deletion. Following opt-out, we retain a suppression record to prevent inadvertent re-marketing.
• Support Communications: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the interaction, to support dispute resolution and service quality monitoring.
• Technical Logs: Server and access logs containing IP addresses and session data are retained for up to ninety (90) days, unless a specific security incident or legal investigation requires longer retention.

When Personal Data is no longer required, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

Cookies & Tracking Technologies

baim4 uses cookies and similar technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the functioning of the platform. These cookies enable core features such as session authentication, account login persistence, and security token management. They cannot be disabled without impairing your ability to use the Services.
• Functional Cookies: Used to remember your preferences — such as your preferred language, currency display (IDR), and responsible gaming settings — so that the platform behaves consistently across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players interact with the baim4 platform — for example, which game categories are most popular, how Players navigate between pages, and where technical issues are encountered. This data is used solely to improve the platform and is never shared for advertising purposes.
• Security Cookies: Used to detect and prevent fraudulent activity, account takeovers, and other security threats. These cookies assist in identifying unusual login patterns and verifying that transactions originate from your registered device.

baim4 does not use third-party advertising cookies or cross-site tracking cookies. You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the availability or performance of some platform features.

Security Measures

baim4 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure:

• TLS/SSL Encryption: All data transmitted between your device and the baim4 platform is encrypted using Transport Layer Security (TLS), ensuring that your credentials and financial information cannot be intercepted in transit.
• Encryption at Rest: Sensitive Personal Data fields — including identity documents, financial data, and KYC records — are encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to Personal Data by baim4 personnel is governed by a strict role-based access control (RBAC) policy. Only staff with a verified operational need may access Player records, and all access is logged and subject to regular audit.
• Two-Factor Authentication: baim4 offers and strongly recommends two-factor authentication (2FA) for all Player accounts. Internal administrative access requires 2FA as a mandatory control.
• Penetration Testing: The baim4 platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: baim4 maintains a formal data breach response procedure. In the event of a breach that is reasonably likely to result in harm to affected Players, we will notify impacted individuals and relevant authorities within the timeframes required by applicable data protection standards.

Your Rights

Subject to applicable law and certain exemptions, you have the following rights in relation to your Personal Data held by baim4:

• Right of Access: You may request a copy of the Personal Data baim4 holds about you, along with information about how it is being used.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For most account data, you can make corrections directly through your account settings.
• Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. This right is subject to legal retention obligations — for example, baim4 is required to retain KYC and transaction records for a minimum of five years following account closure.
• Right to Restriction: You may request that baim4 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you may request that baim4 provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your Personal Data where baim4 relies on legitimate interests as the legal basis for processing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

To exercise any of the above rights, please contact our support team with your full registered name, username, and a description of your request. We will respond within 30 days. We may need to verify your identity before processing your request to protect against unauthorised access to your data.

Minors

baim4 is strictly an adults-only platform. The Services are not directed at, and may not be used by, any person under the age of 21. baim4 does not knowingly collect Personal Data from individuals under 21 years of age.

• If baim4 discovers that it has inadvertently collected Personal Data from a person under 21, it will take immediate steps to delete that data and close the associated account.
• If you believe that a minor has registered an account on baim4, please notify us immediately at [email protected] so that we can take appropriate action.
• baim4 employs age verification controls during the registration process and as part of KYC procedures to minimise the risk of underage access to the platform.

Third-Party Links & Game Providers

The baim4 platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. While baim4 takes care to work only with reputable, licensed game providers, please be aware of the following:

• Third-party game environments may collect data independently of baim4, particularly relating to in-game actions, session duration, and technical performance metrics. This data collection is governed by the respective game provider's own privacy policy, not by this document.
• baim4 does not include links to unrelated external websites within its platform. If you encounter a link to a third-party website that appears to be associated with baim4 but is hosted on a different domain, treat it with caution and report it to our support team.
• baim4 accepts no responsibility for the data practices of any third-party game provider or any external website. We encourage you to review the privacy policies of any third-party service you interact with.

Amendments to This Policy

baim4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The following process applies to any such changes:

• Material changes to this Privacy Policy — those that significantly affect how we collect, use, or share your Personal Data — will be communicated to registered Players via the registered email address at least 7 days before the changes take effect.
• Non-material changes, such as clarifications of existing provisions, corrections of typographical errors, or changes that do not materially affect your rights, may take effect upon publication without prior individual notification.
• The "Last Updated" date at the top of this page reflects the date of the most recent revision. We recommend reviewing this Privacy Policy periodically to stay informed of how baim4 handles your Personal Data.
• Your continued use of the baim4 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change, you should cease using the platform and contact our support team to request account closure.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way baim4 processes your Personal Data, please contact our dedicated privacy support team through either of the following channels:

When submitting a data subject rights request, please include your registered username, the email address associated with your account, the nature of your request, and any supporting information that will assist us in verifying your identity and processing your request efficiently.

If you are not satisfied with our response to a privacy complaint or data subject rights request, you have the right to escalate the matter in accordance with the dispute resolution procedures outlined in our Terms & Conditions.