Privacy Policy

This Privacy Policy ("Policy") describes how bcawin ("we", "us", "our", "the Company", "the Platform") collects, uses, stores, discloses, and protects personal data relating to individuals ("you", "the Player", "the User") who access or use the bcawin platform at https://bcawin.cam.

bcawin is committed to handling personal data responsibly and in a manner consistent with internationally recognized data protection principles, including purpose limitation, data minimization, storage limitation, integrity, and confidentiality. We have designed our data practices specifically to serve Indonesian players in a manner that is transparent, fair, and secure.

By creating a bcawin account, making a deposit, or otherwise engaging with platform services, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of bcawin and contact our support team to arrange account closure.

This Policy should be read alongside our Terms & Conditions, which together govern your use of bcawin. In the event of any conflict between this Policy and the Terms & Conditions with respect to data handling, this Policy shall prevail.

• "Personal Data" means any information that identifies or could reasonably identify a natural person, either directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means bcawin, which determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" means any third party that processes personal data on behalf of bcawin under a written data processing agreement.
• "KYC Data" means identity verification documents and associated biometric or personal information submitted to satisfy Know Your Customer requirements.
• "Cookies" means small text files stored on a user's device by the platform that enable session management, preference retention, and analytical tracking.
• "Sensitive Data" means a subset of personal data that warrants heightened protection, including government-issued identity numbers, financial account details, and biometric information.
• "Legitimate Interest" means a legal basis for processing personal data where bcawin has a genuine and proportionate business or security need that is not overridden by the Player's privacy interests.

bcawin collects the following categories of personal data, limited to what is necessary for the purposes described in Section 5:

bcawin collects personal data through the following channels:

• Direct Submission: Information you provide voluntarily during account registration, KYC verification, deposit and withdrawal requests, and communications with our support team.
• Automated Technical Collection: Data gathered automatically as you interact with the platform, including server logs, session cookies, and device fingerprinting used for security and fraud prevention purposes.
• Payment Processors: Transactional confirmation data received from banking partners (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) when you initiate deposits or withdrawals.
• Identity Verification Partners: Confirmation signals from third-party KYC verification services used to authenticate identity documents submitted during account verification.
• Fraud Detection Systems: Risk signals from our anti-fraud and responsible gaming monitoring tools that analyze behavioral patterns for the purpose of player protection and platform integrity.

bcawin processes your personal data for the following specific and legitimate purposes:

• Account Management: Creating, maintaining, and securing your player account, including authentication and access control.
• Identity Verification (KYC): Fulfilling legal obligations to verify player identity and age (21+) before enabling withdrawal functionality, in accordance with international anti-money laundering standards.
• Payment Processing: Facilitating deposits and withdrawals through Indonesian banking channels and e-wallet providers, recording transaction history, and reconciling account balances.
• Fraud Prevention and Security: Detecting and preventing unauthorized account access, bonus abuse, money laundering, underage gambling, and other prohibited activities described in our Terms & Conditions.
• Customer Support: Responding to player inquiries, resolving disputes, processing responsible gaming requests, and maintaining support ticket records.
• Responsible Gaming Compliance: Monitoring betting behavior to identify signs of problem gambling, administering self-exclusion and deposit limit requests, and providing reality-check notifications as described in our Responsible Gaming page.
• Platform Improvement: Analyzing aggregated, anonymized behavioral data to improve game offerings, user experience, and platform performance. Individual players are not identifiable in this analysis.
• Legal and Regulatory Compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to marketing communications. Players may withdraw consent at any time by contacting support.

bcawin relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration — including account creation, payment processing, and customer support.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering requirements, age verification mandates, and lawful authority requests.
• Legitimate Interests: Processing that serves bcawin's genuine operational needs — such as fraud prevention, platform security, and abuse detection — where those interests are not outweighed by your privacy rights.
• Consent: Processing undertaken only with your explicit, freely given consent — specifically, marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bcawin does not sell, rent, or trade your personal data. We share personal data only with the following categories of recipients, and only to the extent strictly necessary:

• Payment Service Providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to process deposits and withdrawals. These parties act as independent data controllers for their own financial processing obligations.
• Identity Verification Partners: Accredited KYC service providers receive copies of identity documents solely for the purpose of authenticating player identity. All such providers operate under contractual data processing agreements with bcawin.
• Game Software Providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, NetEnt, and Microgaming) may receive anonymized session identifiers necessary to deliver game content. These providers do not receive your full identity or financial data.
• Fraud and Security Vendors: Specialized fraud detection and cybersecurity platforms receive technical and behavioral data under strict contractual confidentiality terms for the purpose of protecting player accounts and platform integrity.
• Regulatory and Law Enforcement Authorities: bcawin will disclose personal data to competent authorities when required by a valid legal order, court directive, or regulatory obligation. We will notify the affected Player to the extent permitted by law.
• Corporate Successors: In the event of a merger, acquisition, or sale of substantially all assets, Player data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

bcawin retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention schedule:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized data may be retained indefinitely for statistical and analytical purposes.

bcawin employs a layered security architecture to protect personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Transport Encryption: All data transmitted between your device and bcawin servers is encrypted using TLS 1.2 or higher (SSL). Our platform operates exclusively over HTTPS.
• Data Encryption at Rest: Sensitive data stored on bcawin servers — including KYC documents and financial records — is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to bcawin staff with a legitimate operational need. Role-based access controls and audit logging are applied to all internal data systems.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts. bcawin staff accounts with access to personal data require mandatory 2FA.
• Fraud Detection Systems: Real-time monitoring systems flag unusual account activity, including login from new devices, IP address anomalies, and atypical transaction patterns, triggering automated alerts for human review.
• Third-Party Security Audits: bcawin undergoes periodic security assessments conducted by independent third-party specialists to identify and remediate vulnerabilities.
• Incident Response: In the event of a confirmed data breach that is likely to result in a risk to Player rights, bcawin will notify affected Players without undue delay and take immediate remediation action.

bcawin uses cookies and similar tracking technologies to deliver and improve platform functionality. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential to platform operation. These enable login session management, security token validation, and fraud prevention. They cannot be disabled without impairing core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming configurations. Disabling these cookies will result in a reduced personalized experience.
• Analytical Cookies: Collect aggregated, anonymized data about how Players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used exclusively for internal platform improvement. These cookies require your consent.
• Session Cookies: Temporary cookies that expire when you close your browser, used to maintain your active gaming session and prevent duplicate bet submissions.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your bcawin account. bcawin does not use third-party advertising or retargeting cookies.

As a Player on bcawin, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of the personal data bcawin holds about you, including the categories of data, the purposes for which it is processed, and the recipients with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Identity-sensitive corrections may require re-verification.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to overriding legal retention obligations described in Section 8.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, such as while the accuracy of data is under dispute or while an objection to processing is being considered.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests at any time. You may also withdraw consent for marketing communications at any time, with immediate effect.
• Right to Human Review: If bcawin takes a significant decision affecting your account, you have the right to request human review of that decision rather than acceptance of a purely automated outcome.

bcawin will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or voluminous, we may extend this period by a further 60 days, with notification to the Player.

bcawin is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes age verification steps, and full KYC verification is required before any withdrawal is processed.

If bcawin becomes aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data to the extent permitted by law, and report the incident to our compliance team for further action.

If you are a parent or guardian and believe that a minor in your care has registered on bcawin, please contact us immediately at [email protected] so we can take appropriate protective measures without delay.

bcawin operates internationally and may transfer personal data to servers or service providers located outside Indonesia. Where such transfers occur, bcawin ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses that bind the receiving party to data protection standards equivalent to those applied by bcawin.
• Transfers only to jurisdictions that maintain adequate data protection frameworks recognized by international standards.
• Encryption of data in transit for all cross-border transfers, regardless of destination.

By using bcawin, you acknowledge that your personal data may be processed in countries other than Indonesia, subject to the safeguards described above.

bcawin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. The following process governs policy amendments:

• Material changes will be communicated to registered Players via email to the address on file at least 7 days before the amended policy takes effect.
• The current version of this Policy, including the "Last Updated" date, will always be accessible at https://bcawin.cam/privacy-policy.
• Continued use of bcawin following the effective date of any amendment constitutes acceptance of the revised Policy. If you object to any change, you must cease using the platform and may request account closure and data deletion as described in Section 11.
• Non-material clarifications or typographical corrections may be made without advance notice.

If you have any questions, concerns, or formal complaints regarding this Privacy Policy or bcawin's data practices, please contact our Privacy team using the details below:

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Complaint" for faster routing.
• Response Time: Privacy-related queries are typically addressed within 5 business days. Formal data rights requests are processed within 30 days as described in Section 11.
• Live Support: Our 24/7 live chat support team can provide general guidance on privacy matters and escalate formal requests to the Privacy team on your behalf.

bcawin takes all privacy complaints seriously. If you are not satisfied with our response, you retain the right to escalate your complaint to a relevant data protection supervisory authority in your jurisdiction.