bri4d Privacy Policy

bri4d ("we", "us", "our", "the Platform") is an online gaming and sports betting service operated at https://bri4d.lat. We act as the data controller in respect of personal data collected through the bri4d platform. This Privacy Policy sets out our practices regarding the collection, use, storage, disclosure, and protection of your personal information.

This policy applies to all individuals who access the bri4d website, create an account, make deposits or withdrawals, participate in promotional activities, or otherwise interact with our services — including players from Malaysia and all other eligible jurisdictions.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and bri4d.

The following terms carry the meanings defined below throughout this Privacy Policy:

• "Personal Data" — any information that relates to an identified or identifiable natural person, directly or indirectly, including name, identification number, location data, online identifier, or factors specific to the physical, economic, or social identity of that person.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" — bri4d, the entity that determines the purposes and means of processing personal data.
• "Data Processor" — a third party that processes personal data on behalf of bri4d, under a formal data processing agreement.
• "User" / "You" — any individual who accesses the bri4d platform, registers an account, or otherwise interacts with our services.
• "KYC" — Know Your Customer verification, the process of confirming User identity, age, and source of funds in compliance with anti-money laundering obligations.
• "Cookies" — small text files placed on your device by the bri4d website to store session data, preferences, and anonymised analytics information.

bri4d collects personal data across several categories depending on the nature of your interaction with the platform:

bri4d collects personal data through the following channels:

• Direct interactions — information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated technologies — data collected automatically as you navigate our platform, including cookies, server logs, session tracking pixels, and device fingerprinting technologies used for security and fraud prevention.
• Third-party sources — data received from payment service providers (e.g., confirmation of a DuitNow or FPX transaction), identity verification services, fraud detection bureaus, and publicly available sources where relevant to AML compliance.
• Promotional channels — if you access bri4d via an affiliate link, we may receive limited referral data from the referring partner. This data is restricted to the referral source identifier and does not include any sensitive personal information.

We process your personal data for the following specific purposes:

bri4d processes your personal data on one or more of the following legal bases:

1. Contractual necessity — processing required to perform our contract with you as a registered player, including account management, payment facilitation, and service delivery.
2. Legal obligation — processing required to comply with applicable AML legislation, international gaming licensing conditions, and any lawful regulatory instruction or court order.
3. Legitimate interests — processing carried out in pursuit of bri4d's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics, provided such interests are not overridden by your fundamental rights and freedoms.
4. Consent — processing for purposes such as marketing communications and non-essential cookie deployment, where you have provided a clear, freely given, specific, and informed consent. Consent may be withdrawn at any time without prejudice to prior processing.

bri4d does not sell your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients only to the extent strictly necessary for the described purpose:

• Payment service providers — to process deposits and withdrawals. This includes Malaysian e-wallet operators, bank payment gateways (FPX, DuitNow), and cryptocurrency exchange processors.
• Identity verification and KYC providers — third-party services engaged to verify government-issued identity documents, screen against sanctions lists, and validate source-of-funds declarations.
• Game software providers — to the extent necessary for game operation, providers of casino game content integrated into the bri4d platform may receive technical session identifiers. No financial or identity data is shared with game providers beyond what is strictly required for game functionality.
• Fraud prevention and AML services — specialist third-party bureaus that assist in identifying suspicious activity, multi-account patterns, and potentially fraudulent transactions.
• Regulatory authorities and law enforcement — where bri4d is legally obligated to disclose data in response to a valid regulatory instruction, court order, or law enforcement request.
• Professional advisers — lawyers, auditors, and accountants where necessary for the conduct of bri4d's business, subject to binding confidentiality obligations.

All third-party data processors engaged by bri4d are contractually required to process personal data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection obligations.

As an international online gaming platform, bri4d processes and stores data on servers located outside of Malaysia. Your personal data may be transferred to and stored in jurisdictions that have data protection frameworks that differ from Malaysian law.

Where personal data is transferred internationally, bri4d takes reasonable steps to ensure that appropriate safeguards are in place — including contractual protections with data processors, server-side encryption, and data access controls — to protect your information to a standard consistent with this Privacy Policy.

bri4d retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data — retained for the duration of the account relationship and for a minimum of five (5) years following permanent account closure.
• KYC and identity documents — retained for a minimum of five (5) years following account closure, in compliance with international AML requirements that mandate record-keeping for anti-financial crime purposes.
• Transaction and financial records — retained for a minimum of five (5) years from the date of each transaction.
• Customer support records — retained for up to three (3) years from the date of the last interaction.
• Marketing consent records — retained until you withdraw consent or for up to three (3) years from the last active engagement with marketing communications.
• Technical and log data — retained for a period of twelve (12) to twenty-four (24) months for security and fraud prevention purposes, then deleted or anonymised.

Where retention beyond these periods is required by a specific legal obligation or active legal proceedings, data will be held until that obligation or proceeding is concluded.

bri4d implements a layered set of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption — all data transmitted between your browser and the bri4d server is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• AES-256 data encryption — sensitive data stored in our databases is encrypted at rest using AES-256 encryption, including KYC documents and payment reference data.
• Two-factor authentication (2FA) — available to all account holders and required for withdrawal requests above defined thresholds.
• Access controls — internal access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control systems.
• Regular security audits — penetration testing, vulnerability assessments, and third-party security audits are conducted periodically to identify and remediate security risks.
• Incident response protocol — bri4d maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify affected Users within 72 hours of becoming aware, where technically and legally feasible.

The bri4d platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. Cookies are small text files stored on your device that help us recognise your browser, maintain session state, and analyse platform usage patterns.

bri4d deploys the following categories of cookies:

• Strictly necessary cookies — essential for core platform functionality including authentication, session management, and security. These cookies cannot be disabled without breaking core features. No consent is required for their use.
• Performance and analytics cookies — used to collect anonymised data about how Users navigate the platform, which pages are most visited, and where technical errors occur. This data informs platform improvements.
• Functional cookies — used to remember your language preference, currency setting (MYR), and interface customisations between sessions.
• Marketing and targeting cookies — used, with your consent, to track referral sources and deliver relevant promotional content. You may withdraw consent for marketing cookies at any time via your account settings or by clearing your browser cookies.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the bri4d platform.

Subject to applicable law and the terms of this policy, you have the following rights in respect of your personal data held by bri4d:

1. Right of Access — you may request a copy of the personal data bri4d holds about you, along with information about how that data is being processed.
2. Right to Rectification — you may request correction of inaccurate or incomplete personal data held in your bri4d account.
3. Right to Erasure ("Right to be Forgotten") — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (particularly AML record-keeping requirements).
4. Right to Restriction of Processing — you may request that processing of your personal data be restricted in certain circumstances, such as while the accuracy of data is being verified following a correction request.
5. Right to Data Portability — where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request a machine-readable export of your personal data.
6. Right to Object — you have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
7. Right to Withdraw Consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Please note that some rights are subject to limitations under applicable law — for example, data necessary for AML compliance cannot be erased regardless of a User's erasure request until the minimum statutory retention period has elapsed.

bri4d's services are strictly for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data from any person under the age of 21. Age verification is conducted as part of the KYC process, and accounts found to belong to individuals under the minimum age are immediately closed and all funds returned to the originating payment method.

If you have reason to believe that a minor has accessed bri4d and provided personal data without appropriate parental consent, please contact us immediately at [email protected] so that we may take immediate corrective action.

bri4d reserves the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or operational requirements. When material changes are made — those that meaningfully affect User rights or the nature of data processing — we will provide at least fourteen (14) days' advance notice via email to your registered address and/or a prominent notice on the bri4d website.

The current version of this Privacy Policy is always accessible at https://bri4d.lat/privacy-policy. The "Last Updated" date at the top of this document reflects the date of the most recent substantive revision. Continued use of the bri4d platform after the effective date of any amendment constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bri4d, please contact us using the details below. Our team is available 24 hours a day, 7 days a week.