Purpose and Scope of the BC Game Privacy Notice: What Indonesian Users Should Know
Almost nobody reads a casino’s privacy notice before signing up, and I get why. But this one answers questions people only start asking later, often around 23:00 WIB with a withdrawal sitting in review. Who has my KTP photo? Can I wipe the account?
One notice covers the whole account. Website, Android APK, Safari shortcut, casino, sportsbook, BC Poker, all of it feeds the same records.
The firm named as operator, Twocent Technology Limited, sits on Belize’s company register as number 000041939, and its gaming licence was issued in Anjouan, Comoros, so the paperwork around your data is all foreign. In Indonesia, article 303 of the KUHP treats online gambling as a crime, and Komdigi blocks such sites. Whether you play is your call under local law.
Nothing here claims BC Game meets Indonesia’s PDP Law or Europe’s GDPR.
Understanding Types of Data That May Be Collected on BC Game
Here’s the week. Call the player Dimas, from Bekasi. He’s made up, the steps aren’t, and each one leaves a different kind of record.
| Day (WIB) | What Dimas does | What gets recorded | Kept for |
| Mon 21:10 | Joins via Telegram | Telegram ID and name, later email or phone, birth date | Not published |
| Tue 20:40 | Sends 25 USDT on TRC20 | Wallet address, TXID, amount, time | 7 years |
| Thu 19:00 | Asks to cash out 600 USDT | His KTP photos, a five-angle selfie, a recent bill | Not published |
| Sat 10:15 | Opens the site on his new Oppo | Device, IP address, browser | Not published |
On Wednesday he also asks live chat about a bonus. That chat is saved too.
Information Provided Directly by Users — Essential Information
On Monday Dimas taps the Telegram button, Telegram asks him to confirm, and he’s in. What crosses over is what Telegram’s login shares, usually your Telegram ID and display name (plus a username and photo, if set). Your phone number isn’t part of that by default.
The rest goes in bit by bit, like an email for codes and a name and birth date when the profile asks. Pick that email with care, because the email and the username can’t be changed later.
On Tuesday he opens Wallet, picks USDT on TRC20, copies an address starting with T and sends 25 USDT from his exchange. He claims the 180% first stage, and the 45 locked BCD it pays goes in the log as well.
Indonesian User Guide to Device Information and Activity Records
Saturday morning, new phone. Dimas did nothing unusual, yet the site sees a new device, a new browser and a new IP. He spent the week on IndiHome Wi-Fi at home, and now he’s on Telkomsel data in a café in Bogor.
Logins, bets, rounds, bonus claims, each with a time stamp. On the Originals it’s almost literal, since the nonce in Limbo or Plinko counts your bets one by one, so round 312 stays round 312 forever.
Why Personal Information May Be Processed: Steps, Tips and Key Points
The notice gives six reasons. Running your account, KYC and anti-fraud work (anti-money-laundering included), payments, support, making the service better, and marketing. You can only refuse the marketing.
Exploring Account Operation and Identity Checks in Detail
Thursday is where it gets personal. Dimas asks for 600 USDT and a KYC request pops up. No trigger amount is published, because checks are risk-based rather than done at sign-up.
So he shoots his KTP, front then back, takes the selfie the form wants from five angles, and adds a bill or statement no older than three months. August’s bill works in October. June’s doesn’t. The form allows six attempts, and a failed one comes back with the reason by email. I’d shoot the card on a dark table near a window, because glare on a laminated card can hide the numbers.
Service Analytics and Product Enhancement: What Indonesian Users Should Know
“Service improvement” sounds vague, so picture it. Say thousands of people open Crash around 21:00 WIB and the lobby slows down. Usage data is how somebody spots that. Same idea when the APK keeps crashing on one Android version and not on another, since device data is what links the two. Which analytics tools sit behind this isn’t published.
Understanding Account Notifications and Customer Messages on BC Game
You’ll get two kinds of message. Account ones, like the code from Forgot password, Dimas’s KYC email on Thursday, or a withdrawal update. And marketing, from the newsletter to promo pop-ups.
Honestly, I’d keep the first kind and stop the second on day one. Objecting to marketing is a right the notice names, so when you tell support, it’s a request they have to handle, not a favour.
Cookies and Similar Web Technologies — Essential Information
The notice has no dedicated cookie section, and no separate privacy email either. So what follows is general cookie know-how, plus what Chrome lets you see and change.
Indonesian User Guide to Categories and Purposes of Cookies
A login cookie is why you stay signed in after closing Chrome at lunch and coming back at 19:00.
Others remember small stuff, like the language you picked or that you left the lobby on the Originals tab. Analytics cookies count how often your phone drops by, and an ad cookie can belong to a company you’ve never heard of. The notice doesn’t say which of these BC Game sets.
Options for Adjusting Cookie Settings: Steps, Tips and Key Points
Most Indonesian phones run Chrome on Android. These steps clear cookies for every site at once.
- Open Chrome, hit the three dots at the top right and pick Delete browsing data (older versions say Clear browsing data).
- Choose a time range, tick Cookies and site data, and untick the rest to keep your history.
- Tap Delete and get ready to log back in to BC Game and most other sites.
For BC Game alone, open the site, tap the small icon left of the address and go into Cookies and site data. Third-party cookies can be blocked under Settings, Privacy and security. None of this touches the APK, which keeps its own login.
Exploring How User Information May Be Secured in Detail
Security is the part you can check least, so it helps to split claims from tools.
Encryption Practices for Sensitive Data: What Indonesian Users Should Know
The brand says traffic runs over SSL encryption, so your password or a KTP upload travels locked between phone and server.
The padlock by the address bar shows part of that.
The brand also names two certificates, ISO 27001 and SOC 2. Both are outside audits of how a company runs security, and neither can be confirmed from a phone screen, so I’d file them under “the brand’s word”.
Understanding Access Permissions and Internal Safeguards on BC Game
Inside the company, the brand says, staff log in with MFA. Which staff can open which records isn’t published.
Your side of it is 2FA through Google Authenticator. The switch is in Global Settings, inside the Security tab. It won’t turn on before the email or phone is checked. Any password reset, or 2FA going off, puts cash-outs on hold for a day. Annoying on a Friday night, but that’s what stops someone who grabbed your password at 22:00 from emptying the wallet at 22:05.
Cases Where External Parties Receive Data — Essential Information
Selling or renting data is ruled out in the notice. Sharing isn’t. Payment processors, KYC and identity vendors, game providers, and authorities when the law demands it all get a slice.
Indonesian User Guide to Information Shared With Payment Partners
People miss this part. Those 25 USDT moved on a public chain, so anyone holding the TXID can look it up on Tronscan. That’s the blockchain, not BC Game.
Fiat is different. Maybe your Fiat tab shows QRIS, GoPay, DANA, OVO or a bank option. Then the processor behind it sees the e-wallet or bank details. Any buy-crypto provider in the cashier does too. Studios like Evolution or Pragmatic Play also receive some data, since your rounds run on their games.
Disclosures Required Under Applicable Law: Steps, Tips and Key Points
When the law requires it, data goes to authorities and nobody asks you first. You can still hold your own copies.
- Download your account statement every few months, since it lists each deposit and withdrawal in one place.
- Keep the exchange’s record of every TXID you sent, because it shows the money came from you.
- Save any KYC result email instead of deleting it along with the promos.
Exploring Privacy Rights and User Choices in Detail
Four rights are named. See what’s held, fix what’s wrong, ask for deletion (with limits), and refuse marketing.
| Request | Best channel | What to expect |
| Copy of data | [email protected] | Slower than chat |
| Fix a detail | Live chat | Email and username can’t move |
| Deletion | [email protected] | Some records stay anyway |
| Stop marketing | Live chat | Account messages keep coming |
Reviewing and Correcting Your Personal Details: What Indonesian Users Should Know
Most of it shows in your profile. If the name on the account is spelled one way and your KTP another, sort that out before a KYC check, not after a rejection burns one of your six tries. The birth date works the same way, because a typo there won’t match the card either.
Understanding Making a Personal Data Removal Request on BC Game
Want everything gone? You can ask, but “everything” won’t happen.
- Email [email protected] from the address you signed up with, put your username in the body, and write “data deletion request” as the subject.
- Withdraw your balance first, since a closed account with 3 USDT stuck in it helps nobody.
- Expect a reply listing what stays, because transaction and anti-fraud records have fixed periods.
Only want a break? Self-exclusion does that, and it’s a different tool.
How Long User Data May Be Retained — Essential Information
Two numbers are published. Transaction records stay for 7 years, anti-fraud records for 5.
Tuesday’s 25 USDT deposit, made in late October 2026, can still be on file in October 2033, even if Dimas closes the account next month. Anything flagged on the anti-fraud side during Thursday’s check can sit there until 2031.
For the rest (the Telegram details, the KYC photos, Saturday’s login, the chat logs), no period is published at all. I’d assume they last as long as the account, but that’s my guess, not the notice.
Indonesian User Guide to Processing Information Across Borders
Your data leaves Indonesia the moment you send it. The operator’s registered in Belize, its licence came from Anjouan, and the ID-check and payment vendors may be in a third country. Where the servers are isn’t published.
For a player in Jakarta or Makassar, that means two things. Local rules may not reach wherever the data lands, and any request you make goes in English to a firm abroad. Keep it short, with your username up top, because a long message in mixed Bahasa and English just slows the reply.
Personal Data in Responsible Gaming Controls: Steps, Tips and Key Points
Limits are data too. Say you cap losses at 50 USDT a week under Set Gambling Limit (daily, monthly and quarterly work too). That number gets saved, and every bet is checked against it. Locking yourself out for a day, a week, a month, half a year or for good gets written down the same way.
Nothing changes back at once.
Changes wait out a 24-hour cooling-off, so a calm Sunday choice can’t be undone on a rough Monday night. Coming back after an exclusion means writing to [email protected]. There’s no tool to cap deposits, and the site won’t tell anyone how long a session has run. A phone timer or Digital Wellbeing covers that, and that data stays on the phone, not on a server abroad.
Exploring How Changes to Privacy Terms Are Communicated in Detail
BC Game’s terms say they can change at any time, and that using the site afterwards means you accept the new version. I’d treat the privacy notice the same way. No personal warning before a change is promised.
So what helps? If the notice shows a date, note it next to your username. Check again before a large cash-out or a deletion request. If something there reads differently from this page, trust the live notice, not me.
Where to Send Privacy-Related Questions: What Indonesian Users Should Know
Privacy questions go to normal support. Live chat never closes, in the app or the browser, and usually answers in minutes. An email to [email protected] takes longer, often around a day, and no deadline is published.
My pick? Live chat for quick things, email for anything you’ll want in writing later.
No phone line exists. If someone on WhatsApp claims to be “BC Game CS” and asks for a KTP photo to “verify” the account, it’s a scam. Real KYC uploads happen inside your account, never in a chat app.
Understanding Principles of Transparent Data Handling on BC Game
What does transparent mean here, day to day? The notice says what’s collected, why, who else gets it, and gives two retention numbers. It rules out selling.
The gaps flagged along the way count just as much. I like that the 7 and 5 are written down. I’d like it more if the rest were too.
Here’s a quick test. Ask live chat which of your records they’d keep after a deletion. If the answer lines up with the 7 and 5 years, good. If it’s vague, ask again by email and keep the reply.
Final Overview — Essential Information
Every step of that week left a record, from the Telegram sign-up to the new Oppo. Transactions stay 7 years, anti-fraud records 5, and you can ask to see, fix or delete what’s held. Before a big withdrawal or a deletion request, open the live notice and skim it again.