1 Introduction
Brio4D ("we", "us", "our", "the Platform") operates the online gaming and sports betting website located at https://brio4d.lat. We recognise that privacy is important to our Members, and this Privacy Policy sets out in clear terms how we collect, use, store, share, and protect the personal data of every person who accesses or uses the Brio4D platform.
This Privacy Policy applies to all users of the Platform, including registered Members, visitors who browse without registering, and persons who contact our support team. It applies regardless of where you are located within Malaysia — whether you are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere across the country.
This Privacy Policy should be read in conjunction with the Brio4D Terms and Conditions, which form the overarching agreement governing use of the Platform. By accessing or using Brio4D — including registering an account, making a deposit, accepting a promotion, or submitting a support enquiry — you acknowledge that you have read and understood this Privacy Policy.
2 Definitions
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a natural person, whether directly or indirectly, including name, identification number, contact details, financial information, and online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, transfer, restriction, deletion, or destruction. |
| "Data Controller" | Brio4D, which determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of Brio4D under written instruction, such as a KYC verification provider or payment processor. |
| "Member" / "User" | Any natural person aged 21 or above who has registered an account with Brio4D or who accesses the Platform. |
| "Cookies" | Small text files stored on a user's device when they visit the Platform, used to remember preferences, analyse usage, and support Platform functionality. |
| "KYC" | Know Your Customer — the identity verification and age confirmation process required by Brio4D prior to processing withdrawals or where regulatory or security obligations require it. |
3 Personal Data We Collect
Brio4D collects only the Personal Data that is necessary to operate the Platform, verify user identity, process transactions, comply with legal obligations, and deliver a secure gaming experience. The categories of Personal Data we may collect include the following:
3.1 Registration and Identity Data
- Full legal name as it appears on a government-issued identity document
- Date of birth (for age verification — 21+ requirement)
- Email address and telephone number
- Username and encrypted password
- Residential address, including city and postcode within Malaysia
- Nationality and country of residence
3.2 Identity Verification (KYC) Documents
- Copy of MyKad (Malaysian National Identity Card), passport, or other government-issued photo identification
- Proof of address documents such as a utility bill or bank statement issued within the preceding three months
- Selfie photograph where required for enhanced identity verification
3.3 Financial Data
- Deposit and withdrawal transaction records, including amounts in MYR
- Payment method details — including bank account names (for FPX/DuitNow transfers), and eWallet identifiers (Touch 'n Go eWallet, Boost, GrabPay)
- Cryptocurrency wallet addresses where BTC or USDT transactions are made
- Account balance history and cashout records
3.4 Usage and Behavioural Data
- Betting and wagering history across sports markets (EPL, Liga Super Malaysia, UFC, and others) and casino games
- Game session logs, including start time, end time, and outcome data
- Promotion and bonus participation records
- Login timestamps, session duration, and device type
3.5 Technical and Device Data
- IP address and approximate geolocation
- Browser type and version, operating system
- Device identifiers and screen resolution
- Referral URL and navigation path within the Platform
3.6 Communications Data
- Records of live chat, WhatsApp, WeChat, or email correspondence with the Brio4D support team
- Feedback, complaints, and dispute records
- Responsible gambling self-assessment responses where voluntarily provided
4 How We Collect Personal Data
Brio4D collects Personal Data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey.
- Automatically — through cookies, session tracking technology, and server logs when you visit or use the Platform.
- From third-party service providers — including identity verification agencies, payment processors (such as FPX and DuitNow intermediaries), fraud detection services, and analytics providers, where such providers supply data pursuant to their own agreements with us.
- From publicly available sources — where Brio4D is required to conduct enhanced due diligence checks for anti-money laundering or sanctions screening purposes.
5 Purposes of Data Processing
Brio4D processes your Personal Data for the following specific and legitimate purposes:
| Purpose | Data categories used |
|---|---|
| Account creation and management | Registration data, KYC documents, communications data |
| Age and identity verification (21+) | KYC documents, date of birth, identity data |
| Processing deposits and withdrawals | Financial data, registration data, KYC documents |
| Delivering gaming and sports betting services | Usage and behavioural data, account balance data |
| Bonus and loyalty programme administration | Usage data, financial data, account data |
| Fraud prevention and security monitoring | Technical data, financial data, usage data, IP address |
| Anti-money laundering and compliance checks | KYC documents, financial data, identity data |
| Customer support and dispute resolution | Communications data, account data, financial data |
| Responsible gambling monitoring | Usage data, behavioural data, self-assessment data |
| Platform analytics and improvement | Technical data, usage data, device data |
| Sending service-related communications | Email address, communications preferences |
Brio4D does not process your Personal Data for any purpose other than those listed above, or any compatible purpose disclosed to you at the point of collection. We do not sell, rent, or otherwise commercialise your Personal Data to third-party advertising networks.
6 Legal Basis for Processing
Brio4D relies on one or more of the following legal bases for the processing of your Personal Data:
- Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions, including account operation, payment processing, and customer support.
- Compliance with legal obligations: Processing required to fulfil obligations under applicable anti-money laundering, counter-terrorism financing, and age verification regulations, including KYC and identity verification requirements.
- Legitimate interests: Processing undertaken for fraud prevention, platform security, responsible gambling monitoring, and analytics, where these interests are not overridden by your data protection rights.
- Consent: Where you have provided specific consent for a particular type of processing, such as receiving promotional communications. You may withdraw consent at any time by contacting support, without affecting the lawfulness of processing prior to withdrawal.
7 Data Sharing & Third Parties
Brio4D does not sell your Personal Data. We may share your Personal Data with the following categories of third party, where necessary and subject to appropriate confidentiality and data processing safeguards:
- Payment processors and banking partners: Including FPX intermediaries, DuitNow service providers, eWallet operators (Touch 'n Go eWallet, Boost, GrabPay), Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency transaction processors — solely to complete payment instructions you have authorised.
- KYC and identity verification providers: Third-party agencies contracted to verify the authenticity of identity documents and confirm that Members meet the 21+ age requirement.
- Fraud detection and security services: Technology providers that assist Brio4D in detecting suspicious account activity, multi-accounting, and financial irregularities.
- IT infrastructure and hosting providers: Cloud hosting and database management providers that store and process Platform data under strict contractual obligations aligned with this Policy.
- Regulatory and law enforcement authorities: Where Brio4D is required by applicable law, court order, or regulatory direction to disclose Personal Data. Brio4D will only disclose the minimum information required by law.
- Professional advisers: Legal, financial, and compliance advisers engaged by Brio4D on a confidential basis.
All third-party Data Processors are bound by written data processing agreements requiring them to process Personal Data only on Brio4D's instructions, implement appropriate security measures, and not share the data with any sub-processor without prior authorisation.
8 Cookies & Tracking Technologies
Brio4D uses cookies and similar tracking technologies to improve Platform functionality, analyse user behaviour, and support fraud prevention. By continuing to use the Platform, you consent to the use of cookies as described in this section.
| Cookie Type | Purpose | Retention |
|---|---|---|
| Required for Platform operation — including session management, authentication state, and security token validation. Cannot be disabled without impairing Platform functionality. | Session / up to 30 days | |
| Remember user preferences such as language settings, display options, and previously accessed game categories to improve your experience on return visits. | Up to 12 months | |
| Aggregate anonymised data on how visitors navigate the Platform, which pages are most visited, and where technical errors occur — used to improve Platform performance and content. | Up to 24 months |
You may control or delete cookies through your browser settings at any time. Disabling essential cookies will affect your ability to log in and use core Platform features. Brio4D does not use cookies to serve third-party advertising or to track your activity on external websites.
9 Data Retention
Brio4D retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:
- Active account data: Retained for the duration of your membership and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
- KYC and identity documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
- Financial transaction records: Retained for a minimum of seven (7) years to satisfy regulatory and audit requirements.
- Support communications: Retained for up to three (3) years from the date of the last interaction, or longer where a dispute remains unresolved.
- Marketing preferences: Retained until you withdraw consent or deregister from communications.
- Anonymised analytics data: Retained for up to five (5) years; this data does not identify any individual Member.
Upon expiry of the relevant retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.
10 Data Security
Brio4D implements technical and organisational security measures appropriate to the sensitivity of the Personal Data we hold. These measures include, but are not limited to:
- Encryption: Data transmitted between your browser and the Brio4D platform is encrypted using TLS (Transport Layer Security). Sensitive stored data, including financial records and identity documents, is encrypted at rest.
- Access controls: Personal Data is accessible only to authorised Brio4D personnel and Data Processors who require it to perform their specific function. Access is governed by role-based permissions and audit logging.
- Intrusion detection and monitoring: The Platform is monitored continuously for unusual activity, unauthorised access attempts, and potential security incidents.
- Password security: User passwords are stored in hashed form and are never accessible in plain text by Brio4D staff. Brio4D will never request your password via any communication channel.
- Vulnerability management: Brio4D conducts regular security assessments and applies security patches in a timely manner.
While Brio4D employs robust security measures, no system can guarantee absolute security. In the event of a data breach that creates a material risk to your rights, Brio4D will notify affected Members and relevant authorities in accordance with applicable legal requirements.
11 Your Data Rights
Subject to applicable law and any overriding legal obligations on Brio4D (such as AML record-keeping requirements), you have the following rights in relation to your Personal Data:
You may request a copy of the Personal Data Brio4D holds about you, together with information about how it is processed.
You may request correction of inaccurate or incomplete Personal Data. For account details, some corrections may require identity verification.
You may request deletion of your Personal Data where it is no longer necessary, subject to Brio4D's legal retention obligations.
You may request that Brio4D limit how your data is used while a dispute or accuracy query is resolved.
Where technically feasible, you may request your Personal Data in a structured, machine-readable format for transfer to another service.
You may object to processing based on legitimate interests, including profiling, where your individual circumstances warrant it.
Where processing is based on your consent, you may withdraw it at any time by contacting support — without affecting prior lawful processing.
You may raise a concern or complaint about Brio4D's data practices with our support team or with the relevant data protection authority.
To exercise any of the above rights, please contact Brio4D at [email protected] (plain text — not a clickable link). We will acknowledge your request within a reasonable period and respond substantively within 30 days, unless the complexity of the request requires additional time, in which case we will notify you of the extended timeframe.
12 Children's Privacy & Age Restriction
The Brio4D platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, store, or process Personal Data from individuals under the age of 21. If Brio4D discovers that Personal Data has been collected from a person under this age threshold, that data will be deleted immediately and the associated account will be closed.
Parents and guardians who believe that a minor may have accessed the Platform or provided Personal Data to Brio4D should contact our support team immediately at [email protected].
13 Third-Party Links
The Brio4D platform may, from time to time, reference or display links to third-party services including payment providers. Where such links appear, Brio4D is not responsible for the data protection or privacy practices of those third-party websites or services.
Brio4D encourages Members to review the privacy policies of any third-party service they access in connection with their use of the Platform, including payment providers such as Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, and GrabPay, as each operates under its own privacy framework.
14 Amendments to This Policy
Brio4D reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. Where changes are material — for example, where a new category of Personal Data is collected, or a new category of third-party processor is engaged — Brio4D will notify registered Members via their registered email address or through a prominent on-Platform notification prior to the change taking effect.
Minor or clarificatory amendments may be made without prior notification. The effective date of the current version of this Policy is stated at the top of this page. Your continued use of the Platform following notification of material changes constitutes acceptance of the revised Privacy Policy.
The current version of this Privacy Policy is always accessible from the footer navigation of the Brio4D website.
15 Contact Us
For any questions, concerns, access requests, or complaints relating to this Privacy Policy or Brio4D's data practices, please contact us through one of the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week, via the support widget in your account dashboard
- WhatsApp / WeChat: Contact details available within your logged-in account area
- Support languages: English, Bahasa Melayu, and Mandarin Chinese
When submitting a data-related request, please include your registered full name, account username, and a clear description of your request. This helps us locate the correct records and respond accurately within the statutory timeframe.