Your privacy matters to baru1. This Policy explains exactly what personal information we collect, why we collect it, how we use and protect it, and what rights you hold as a registered player on our platform.
Last Updated: January 2026baru1 ("we", "us", "our") operates the online gaming platform accessible at https://baru1.cam (the "Platform"). In providing our Services — which include sports betting, live casino, slot games, and lottery products including togel (Indonesia's traditional numbers lottery) — we are required to collect and process certain personal data about our registered users ("you", "User").
This Privacy Policy sets out in clear terms what personal data baru1 collects, the purposes for which it is processed, the third parties with whom it may be shared, the safeguards in place to protect it, how long it is retained, and the rights available to you in relation to that data. This Policy should be read alongside our Terms and Conditions, which govern the overall use of the Platform.
baru1 takes its data protection obligations seriously. We do not sell your personal information to unrelated third parties, and we collect only the data that is genuinely necessary for the provision of our Services, compliance with legal obligations, or the protection of our legitimate business interests.
For the purposes of this Privacy Policy, the following definitions apply:
baru1 collects the following categories of personal data in connection with the provision of its Services:
baru1 collects Personal Data through the following channels and mechanisms:
baru1 processes your Personal Data for the following specific purposes. We do not use your data for any purpose incompatible with those listed here without your separate consent.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity, Contact, Account data |
| Identity verification (KYC) and age confirmation (21+) | Identity data, KTP documentation |
| Processing deposits and withdrawals in IDR | Financial, Identity data |
| Delivery of gaming Services and bet settlement | Account, Gaming, Technical data |
| Fraud prevention and anti-money-laundering compliance | Identity, Financial, Technical data |
| Responsible gaming monitoring and tool administration | Account, Gaming, Financial data |
| Customer support and complaint resolution | Identity, Contact, Communications data |
| Sending promotional communications and bonus offers | Contact, Account, Gaming data |
| Platform performance analysis and improvement | Technical, Gaming data |
| Legal compliance and regulatory reporting | Identity, Financial, Account data |
baru1 processes your Personal Data under one or more of the following legal bases:
baru1 does not sell, rent, or trade your Personal Data to unrelated third parties for their own marketing or commercial purposes. We may share your data only in the following limited and controlled circumstances:
We engage trusted third-party service providers who process data strictly on our behalf and under our documented instructions. These include:
All Data Processors are bound by contractual agreements that prohibit them from using your data for any purpose beyond the specific service they provide to baru1.
baru1 may disclose your Personal Data to competent authorities, law enforcement agencies, or regulators where required by applicable law, court order, or regulatory mandate — including disclosures required by baru1's international gaming license conditions. We will notify you of any such disclosure where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of baru1's business assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify affected users via their registered email address prior to any such transfer taking effect, and the acquiring entity will be required to honor the commitments set out in this Privacy Policy.
baru1 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and Identity data | Duration of account plus 5 years after closure |
| KYC documentation (KTP, selfie) | Duration of account plus 5 years after closure |
| Financial transaction records | 7 years from transaction date (AML compliance) |
| Betting and gaming history | Duration of account plus 3 years after closure |
| Support communications | 3 years from last interaction |
| Technical and device logs | 12 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn, plus 2 years |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized or aggregated data (e.g., platform-wide gaming statistics) may be retained indefinitely for analytical purposes.
baru1 employs a comprehensive range of technical and organizational security measures to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction:
While baru1 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials and for notifying support immediately if you suspect any unauthorized access to your account.
baru1 uses cookies and similar tracking technologies on the Platform for the following purposes:
These cookies are essential for the Platform to function correctly. They enable core features such as maintaining your login session, remembering your language and currency preferences, and managing security tokens. These cookies cannot be disabled without impacting Platform functionality.
These cookies collect anonymized or aggregated data about how users navigate the Platform — including which pages are visited most frequently and where errors occur. This information helps baru1 improve the Platform's usability and performance. No personally identifying information is collected via analytics cookies.
Functional cookies remember choices you make on the Platform — such as your preferred deposit method, last-used game category, or responsible gaming settings — to provide a more personalized experience during your session.
Where you have consented, marketing cookies may track your engagement with promotional content on the Platform to help baru1 deliver more relevant bonus offers. You may withdraw this consent at any time via your account privacy settings or by contacting support.
Most web browsers allow you to manage cookie preferences through your browser settings, including blocking or deleting all cookies. Please note that blocking strictly necessary cookies will affect your ability to use the Platform.
As a registered user of the baru1 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact us at the details provided in Section 15.
Request a copy of all Personal Data baru1 holds about you, along with information on how it is used and with whom it is shared.
Request correction of any inaccurate or incomplete Personal Data held about you. Some corrections may require KYC re-verification.
Request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to overriding legal retention obligations.
Request that baru1 restrict the processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
Receive a copy of the Personal Data you provided to baru1 in a structured, commonly used, machine-readable format where technically feasible.
Object to processing based on legitimate interests, including direct marketing. baru1 will cease processing unless compelling grounds exist to continue.
Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint with baru1's internal data team or with a relevant supervisory authority if you believe your data has been mishandled.
baru1 will respond to all data rights requests within 30 days of receipt. Where a request is complex or high in volume, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.
The baru1 Platform is strictly for adults aged 21 and over. baru1 does not knowingly collect Personal Data from individuals under the age of 21. Registration on the Platform requires submission of a valid Indonesian KTP, which confirms the holder's date of birth and legal age. Where baru1 discovers or has reason to believe that an account has been registered by a person under the age of 21, that account will be immediately suspended, all funds will be withheld pending investigation, and the Personal Data associated with the account will be deleted in accordance with applicable law.
If you are a parent or guardian and believe your child has registered on the baru1 Platform, please contact us immediately at [email protected] (plain text — not a clickable link) so that we can investigate and take appropriate action without delay.
Some of baru1's Data Processors — including game studio technology providers and cloud infrastructure partners — may process Personal Data on servers located outside Indonesia. Where such international transfers occur, baru1 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy, including:
You may request further information about international transfers and the specific safeguards applied by contacting us at the details in Section 15.
baru1 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where amendments are material — meaning they meaningfully affect your rights or how your data is used — baru1 will provide at least 7 days' advance notice via email to your registered address, or via a prominent notice displayed on the Platform.
The "Last Updated" date at the top of this Policy will be revised each time an update is made. We encourage you to review this Policy periodically. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way baru1 handles your Personal Data, please reach out to our dedicated data support team using the following details:
If you are not satisfied with baru1's response to a privacy complaint, you may escalate the matter to the relevant supervisory or regulatory authority in your jurisdiction. baru1 will cooperate fully with any such investigation.
Six core principles that guide how baru1 handles your personal data every day
Every data transmission between your device and the baru1 Platform is protected by TLS encryption. Payment data, KYC documents, and account credentials are all transmitted and stored under rigorous cryptographic standards — your information never travels in plaintext.
baru1 collects only the data genuinely necessary to provide our Services, verify your identity, process payments in IDR, and comply with our legal obligations. We do not collect surplus data, and we never sell your personal information to third parties for their own commercial use.
Your Personal Data is never sold, rented, or traded to unrelated third parties. Where we engage Data Processors — such as payment partners like BCA, GoPay, or game studios like Pragmatic Play — they operate strictly under our instructions and are contractually prohibited from using your data for their own purposes.
You hold clear rights over your data at all times — including the right to access, correct, restrict, port, or request deletion of your Personal Data. baru1 processes all data rights requests within 30 days and provides transparent responses on what data is held and why.
baru1 does not hold your data indefinitely. Clear retention schedules govern every data category — from KYC documents held for 5 years post-account closure, to transaction records retained for 7 years under AML obligations, to technical logs refreshed on a 12-month rolling basis.
Our Indonesian-speaking support team is available around the clock to assist with any privacy-related query, data rights request, or complaint — including during Idul Fitri, Nyepi, and all Indonesian public holidays. We acknowledge all privacy inquiries within 24 hours.
Our support team is available 24/7 to answer any questions about how baru1 handles your personal data. You can also review our Terms and Conditions for the full platform rules, or visit the FAQ for quick answers to the most common queries.