bmw4d Privacy Policy

This Privacy Policy describes how bmw4d ("bmw4d", "we", "us", or "our") collects, processes, stores, and protects personal data relating to individuals who visit, register on, or otherwise interact with the bmw4d platform at https://bmw4d.pro and any related mobile or desktop applications (collectively, the "Platform").

This policy applies to all visitors, registered Members, and former Members regardless of the device or method used to access the Platform. It covers personal data processed in connection with account registration, identity verification (KYC), deposits and withdrawals, sports betting, live casino activity, togel (Indonesia's traditional numbers lottery) participation, slot gaming, customer support interactions, and marketing communications.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy. Together these three documents govern the full relationship between bmw4d and its Members.

bmw4d operates as the data controller for all personal data collected through the Platform. As data controller, bmw4d determines the purposes for which and the means by which personal data is processed. bmw4d holds an international gaming licence that governs its data-handling obligations, and it operates in compliance with the data protection requirements attached to that licence.

For all data protection enquiries, rectification requests, deletion requests, or formal complaints, Members may contact bmw4d's designated data protection contact at:

bmw4d collects the minimum personal data necessary to provide a safe, compliant, and high-quality service. The categories of personal data we collect are described in the table below.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data, except where a government-issued photo ID contains such information incidentally (e.g., a photograph on a KTP). Such incidental data is not extracted, processed separately, or stored beyond the document itself.

bmw4d collects personal data through the following channels:

• Direct Interactions: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, participating in a promotion, or completing a survey.
• Automated Technologies: Technical and usage data collected automatically when you visit or interact with the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 10 for full details on our cookie practices.
• Third-Party Payment Providers: Confirmation data received from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) confirming that a transaction has been initiated or completed.
• KYC Verification Partners: Identity confirmation results and risk-scoring data provided by our contracted KYC and anti-money-laundering (AML) verification partners after you submit identity documents.
• Fraud & Security Services: Device fingerprinting data and risk signals from contracted fraud-detection services used to protect the integrity of the Platform and the security of all Members.

bmw4d processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to perform the contract between bmw4d and the Member — including account creation, bet placement, deposits and withdrawals, and customer support. Without this processing, bmw4d cannot deliver the service.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC identity verification, fraud reporting, and age verification (21+).
• Legitimate Interests: Processing necessary for bmw4d's legitimate business interests, including fraud prevention, platform security, improving service quality, and internal analytics — provided these interests are not overridden by your data protection rights.
• Consent: Where bmw4d relies on your consent — for example, for sending promotional emails or SMS, or for placing non-essential cookies — we will obtain your explicit opt-in. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

bmw4d uses the personal data it collects for the following specific purposes:

• Account Management: Creating, verifying, maintaining, and securing your Member account, including processing login sessions and two-factor authentication.
• Service Delivery: Enabling you to place bets on sports markets, play live casino games, access slot gacor titles and togel draw products, and participate in all other Platform features.
• Financial Transactions: Processing deposits and withdrawals in Indonesian Rupiah (IDR/Rp) via your nominated Indonesian bank or e-wallet, and maintaining accurate transaction records.
• Identity & Age Verification: Confirming that you are 21 years of age or older and that your identity matches the payment method registered on your account, in compliance with our licence obligations.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, collusion, bonus abuse, and unauthorised account access, including by sharing risk signals with contracted fraud-detection partners.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and improving support quality through analysis of communication records.
• Responsible Gaming: Monitoring account behaviour for signs of problem gambling and enforcing self-exclusion, deposit limits, and other responsible gaming tools that you have activated.
• Marketing Communications: Sending you promotions, bonus offers, and platform news by email or SMS where you have opted in to receive such communications. You may unsubscribe at any time via your account settings or by contacting support.
• Platform Improvement: Conducting internal analytics to understand how Members use the Platform, identify technical issues, test new features, and improve the overall member experience.
• Legal Compliance: Fulfilling reporting obligations to licensing authorities and responding to lawful requests from regulatory bodies or law enforcement agencies.

bmw4d does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. We share your data only in the following limited circumstances:

• Payment Processors: We share transaction data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to the extent necessary to process your deposits and withdrawals.
• KYC & AML Partners: We share identity documents and personal identifiers with contracted identity-verification and anti-money-laundering service providers for the purpose of fulfilling our regulatory obligations. These partners are bound by strict confidentiality agreements and data-processing terms.
• Fraud Detection Services: Device fingerprints, IP addresses, and risk signals may be shared with contracted fraud-detection providers to protect the Platform and its Members from fraudulent activity.
• Game Content Providers: When you play a game hosted by a third-party studio (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft), your session data and bet history for that game may be accessible to the studio for game-integrity and audit purposes under a data-processing agreement with bmw4d.
• Legal & Regulatory Authorities: We may disclose personal data to regulators, licensing authorities, or law enforcement agencies where we are legally obligated to do so, or where disclosure is necessary to protect the rights or safety of bmw4d, its Members, or the public.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of bmw4d's assets, Member data may be transferred to the acquiring entity, subject to equivalent data-protection commitments.

All third parties with whom bmw4d shares personal data are required to implement appropriate technical and organisational security measures and to use the data solely for the purpose for which it was shared.

bmw4d operates internationally and some of its contracted service providers — including KYC partners, fraud-detection vendors, and game studios — may process data on servers located outside Indonesia. Where such international transfers occur, bmw4d ensures that adequate safeguards are in place, including:

• Standard contractual clauses or equivalent data-transfer mechanisms approved by the relevant regulatory authority.
• Vendor due-diligence assessments confirming that recipients maintain data security standards equivalent to those required under bmw4d's licensing obligations.
• Data-processing agreements requiring overseas processors to notify bmw4d of any data breach within 72 hours of discovery.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia. bmw4d takes reasonable steps to ensure that any such transfer is carried out securely and in compliance with applicable data-protection standards.

bmw4d retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform-improvement purposes.

bmw4d uses cookies and similar tracking technologies to ensure the Platform functions correctly, to keep your session active between page loads, to detect fraud, and to understand how Members navigate and use the Platform. The categories of cookies we use are described below:

• Strictly Necessary Cookies: Required for the Platform to operate. These include session cookies that maintain your logged-in state, CSRF-protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how Members use the Platform — for example, which pages are visited most frequently and where errors occur. This data is used exclusively for internal Platform improvement.
• Functionality Cookies: Remember your preferences — such as your preferred display language and responsible gaming reminder settings — so you do not need to re-enter them on each visit.
• Security Cookies: Support fraud-detection and account-security functions, including device fingerprinting to identify suspicious login attempts and bot activity.

bmw4d does not use third-party advertising cookies or behavioural-targeting cookies that track your activity across other websites. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform.

bmw4d is required under its international gaming licence to verify the identity and age of Members before approving withdrawals. This Know Your Customer (KYC) process requires you to submit one or more of the following documents:

• Indonesian National Identity Card (KTP)
• Valid Indonesian or international passport
• Indonesian driving licence (SIM) — accepted as supplementary ID only
• Recent bank statement or e-wallet screenshot confirming account ownership in your legal name

KYC documents are processed as follows:

• Documents are transmitted to bmw4d's contracted KYC verification partner via an encrypted, secure upload channel.
• The verification partner confirms your identity, age, and account-name match and returns a pass/fail result to bmw4d. The underlying document is not permanently stored by bmw4d on its own servers beyond the retention period stated in Section 9.
• bmw4d staff who have no direct KYC-review role do not have access to your full identity documents.
• Where KYC verification fails — for example, due to document illegibility or a name mismatch — bmw4d's compliance team will contact you via your registered email address with instructions for resubmission.

bmw4d recognises and respects the data rights of its Members. Depending on your jurisdiction of residence and applicable law, you may hold some or all of the following rights in respect of your personal data:

To exercise any of these rights, submit a written request to [email protected] or via live chat. bmw4d will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days. Complex requests may require an extension, in which case bmw4d will notify you in writing.

Please note that some rights are subject to limitations. For example, bmw4d cannot delete transaction records that it is legally required to retain under AML regulations, nor can it erase self-exclusion records during an active exclusion period.

The bmw4d Platform is strictly intended for adults aged 21 and over. bmw4d does not knowingly collect personal data from any person under the age of 21. If bmw4d becomes aware that it has inadvertently collected personal data from an individual under 21, it will immediately suspend the associated account, void any winnings, and delete the personal data in question, with deposited funds returned at bmw4d's discretion in accordance with the Terms & Conditions.

Parents and guardians who believe that a minor may have created an account on bmw4d are encouraged to contact our support team immediately at [email protected] so that appropriate action can be taken without delay.

bmw4d implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bmw4d's servers is encrypted using industry-standard Transport Layer Security (TLS 1.3 or higher).
• Data Encryption at Rest: Sensitive fields — including financial account identifiers and identity document references — are encrypted in storage using AES-256 encryption.
• Access Controls: Personal data is accessible only to bmw4d staff who require it to perform their job functions, governed by role-based access control (RBAC) and enforced through multi-factor authentication (MFA) for all internal systems.
• Penetration Testing: bmw4d commissions independent security assessments of its Platform infrastructure on at least an annual basis to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: bmw4d maintains a documented data-breach response procedure. In the event of a breach that is likely to result in risk to Members, affected individuals will be notified without undue delay and in accordance with applicable regulatory requirements.
• Vendor Security Requirements: All third-party processors engaged by bmw4d are contractually required to implement security standards equivalent to or exceeding those applied internally.

Despite these measures, no internet-based service can guarantee absolute security. bmw4d strongly encourages Members to use a strong, unique password, to activate two-factor authentication where available, and to log out after each session — particularly on shared or public devices.

The bmw4d Platform may, from time to time, contain informational references to third-party services such as game studios, payment networks, or sports data providers. This Privacy Policy applies solely to the bmw4d Platform and does not extend to any third-party websites, applications, or services that may be referenced. bmw4d accepts no responsibility for the privacy practices of third parties. We encourage you to review the privacy policy of any external service before providing personal data to it.

bmw4d reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where an amendment materially affects your rights or how your data is used, bmw4d will provide at least 7 days' advance notice by updating the "Last Updated" date at the top of this page and, where reasonably practicable, by sending a notification to your registered email address.

For minor amendments — including typographical corrections or clarifications that do not alter the substance of our data practices — bmw4d may update this policy without advance notice. The "Last Updated" date will always reflect the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bmw4d has handled your personal data, please contact our support team using the details below:

bmw4d aims to resolve all privacy-related enquiries within 30 calendar days. If you are not satisfied with the outcome of your complaint, you may escalate the matter to the relevant regulatory authority under bmw4d's international gaming licence.