Privacy Policy

1. Introduction

bisa98 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website (https://bisa98.cam), register an account, or use any of our online gambling services, including casino games, live dealer tables, sports betting, and togel (Indonesian lottery) markets.

We recognize that trust is the foundation of our relationship with you. As a licensed online gambling platform serving Indonesian players, we handle sensitive personal and financial information, and we take our data protection responsibilities seriously. This Privacy Policy is designed to help you understand:

• What personal information we collect from you and why
• How we use and protect your information
• When and with whom we share your information
• What choices you have regarding your personal data
• How you can access, update, or delete your information

By accessing or using bisa98's services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our data handling practices, please do not use our services.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together govern your use of bisa98's platform.

2. Information We Collect

bisa98 collects several types of information from and about users of our services. The information we collect falls into three main categories:

2.1 Personal Information You Provide to Us

When you register an account, make deposits, request withdrawals, or interact with customer support, you voluntarily provide us with personal information, including:

• Account Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address, username, and password
• Identity Verification (KYC) Documents: Government-issued photo identification (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs with ID card, proof of payment method ownership
• Financial Information: Bank account details (account number, bank name, account holder name), e-wallet information (OVO, DANA, GoPay account details), credit/debit card information (card number, expiration date, CVV—processed securely through payment gateways)
• Transaction History: Deposit amounts, withdrawal requests, betting history, game play records, bonus claims, and account balance information
• Communication Records: Customer support chat transcripts, email correspondence, feedback submissions, and complaint records
• Marketing Preferences: Your consent to receive promotional emails, SMS messages, and push notifications, as well as your marketing opt-out choices

2.2 Information We Collect Automatically

When you access or use bisa98's website, we automatically collect certain technical information through cookies, log files, and similar tracking technologies:

• Device Information: Device type (desktop, mobile, tablet), operating system (Windows, macOS, Android, iOS), browser type and version, screen resolution, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, games played, bet sizes, login timestamps, session duration, navigation paths through the website
• Location Data: IP address, geolocation data (approximate city/region based on IP), timezone (WIB, WITA, WIT)
• Performance Data: Website load times, error messages, crash reports, technical diagnostics

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Verification of transaction authenticity, fraud detection alerts, payment method ownership confirmation from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay)
• Game Providers: Gameplay statistics, RTP (return to player) data, jackpot win notifications from providers like Pragmatic Play, Evolution Gaming, Microgaming, NetEnt
• Identity Verification Services: Age verification results, identity document authentication, watchlist screening (anti-money laundering and counter-terrorism financing checks)
• Social Media Platforms: If you choose to register or log in using social media credentials (e.g., Facebook, Google), we receive basic profile information permitted by that platform

3. How We Use Your Information

bisa98 uses the personal information we collect for specific, legitimate business purposes. We do not sell your personal information to third parties. The primary ways we use your data include:

3.1 Account Management and Service Provision

• Creating and maintaining your player account
• Processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other payment methods
• Enabling you to place bets on sports, casino games, live dealer tables, and togel markets
• Calculating and distributing winnings to your account
• Processing bonus claims and tracking wagering requirements
• Providing customer support and responding to your inquiries

3.2 Legal Compliance and Security

• Verifying your identity and age (21+ requirement) through KYC procedures
• Complying with anti-money laundering (AML) regulations and counter-terrorism financing (CTF) laws
• Detecting and preventing fraud, bonus abuse, collusion, and other prohibited activities
• Enforcing our Terms and Conditions and investigating Terms violations
• Responding to legal requests from Indonesian authorities, international regulators, and law enforcement agencies
• Maintaining records for audit and regulatory reporting purposes

3.3 Platform Improvement and Analytics

• Analyzing website usage patterns to improve user experience and navigation
• Identifying and fixing technical issues, bugs, and performance problems
• Developing new features, games, and betting markets based on player preferences
• Conducting internal research and statistical analysis (using aggregated, anonymized data)
• Optimizing website performance for different devices (desktop, mobile, tablet)

3.4 Marketing and Communication

• Sending promotional offers, bonus announcements, and special event notifications (with your consent)
• Providing personalized game recommendations based on your play history
• Notifying you about changes to our Terms, Privacy Policy, or services
• Sending transactional emails (deposit confirmations, withdrawal receipts, account updates)
• Conducting customer satisfaction surveys to improve our services

3.5 Responsible Gaming

• Monitoring play patterns to identify signs of problem gambling behavior
• Enforcing deposit limits, session time limits, and self-exclusion requests
• Providing responsible gaming tools and support resources
• Complying with social responsibility obligations under our gaming license

4. Information Sharing and Disclosure

bisa98 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies to perform services on our behalf, including:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) process deposits and withdrawals
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and other studios host games and provide gameplay data
• Identity Verification Services: Third-party KYC/AML verification providers authenticate identity documents and screen against watchlists
• Customer Support Tools: Live chat software, email management systems, and helpdesk platforms that assist our support team
• Analytics and Marketing Services: Tools that help us understand website usage and deliver targeted advertising (with your consent)
• Cloud Hosting Providers: Secure data centers that host our servers and databases

These service providers are contractually obligated to protect your data and may only use your information to perform services on our behalf. They are prohibited from using your data for their own purposes.

4.2 Legal and Regulatory Obligations

We may disclose your personal information to government authorities, regulators, or law enforcement agencies when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Investigate suspected fraud, money laundering, or other illegal activities
• Respond to requests from Indonesian tax authorities or international financial intelligence units
• Protect the rights, property, or safety of bisa98, our users, or the public
• Enforce our Terms and Conditions or investigate policy violations

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing. For example, if you agree to participate in a joint promotion with a partner brand, we may share relevant information with that partner.

5. Data Security Measures

bisa98 takes data security extremely seriously. We employ industry-standard technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

5.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) encryption
• Secure Data Storage: Personal information is stored on secure servers with firewall protection, intrusion detection systems, and regular security audits
• Payment Security: Financial data (credit card numbers, bank account details) is processed through PCI DSS-compliant payment gateways and is never stored on our servers in plain text
• Password Protection: Player passwords are hashed and salted using industry-standard cryptographic algorithms (bcrypt, SHA-256)
• Two-Factor Authentication (2FA): Optional 2FA adds an extra layer of security to your account login
• Regular Penetration Testing: Independent security experts conduct periodic vulnerability assessments and penetration tests
• Automatic Logout: Inactive sessions are automatically logged out after a set period to prevent unauthorized access

5.2 Organizational Security Measures

• Access Controls: Personal data is accessible only to authorized bisa98 employees and contractors who need it to perform their job duties
• Staff Training: All employees undergo regular data protection and privacy training
• Confidentiality Agreements: Employees and contractors sign strict confidentiality agreements regarding player data
• Incident Response Plan: We maintain a data breach response plan to quickly address any security incidents
• Data Minimization: We collect only the data necessary to provide our services and delete information when no longer needed

5.3 Your Role in Security

While we implement robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password and change it regularly
• Never share your login credentials with anyone
• Enable two-factor authentication (2FA) for added security
• Log out of your account when using shared or public computers
• Be cautious of phishing emails claiming to be from bisa98—always verify the sender's email address
• Report any suspicious account activity to our support team immediately

Despite our best efforts, no security system is 100% impenetrable. If a data breach occurs that affects your personal information, we will notify you promptly via email and provide guidance on protective measures you should take.

6. Data Retention

bisa98 retains your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Active Account Data

While your account is active, we retain all account data, transaction history, gameplay records, and communication logs to provide you with continuous service and comply with regulatory requirements.

6.2 Closed or Inactive Accounts

• Voluntary Closure: If you close your account, we retain your data for 7 years to comply with Indonesian financial record-keeping requirements and international anti-money laundering (AML) regulations
• Inactivity: Accounts with no login or wager activity for 12 consecutive months are considered dormant. We may close dormant accounts after notifying you via email. Data from dormant accounts is retained for 7 years
• Terminated Accounts: Accounts terminated for Terms violations are retained indefinitely to prevent re-registration and maintain records for legal/regulatory purposes

6.3 Specific Data Types

• Financial Records: Transaction history, deposit/withdrawal records, and bonus claims are retained for 7 years (Indonesian tax law requirement)
• KYC Documents: Identity verification documents are retained for 7 years after account closure (AML/CTF compliance)
• Communication Logs: Customer support chat transcripts and email correspondence are retained for 5 years
• Marketing Data: If you opt out of marketing communications, we retain your email address and opt-out preference to honor your request

6.4 Data Deletion

After the retention period expires, we securely delete or anonymize your personal information so it can no longer be associated with you. Deletion is performed using industry-standard methods (e.g., cryptographic erasure, multi-pass overwriting) to prevent data recovery.

7. Your Privacy Rights

As a bisa98 user, you have the following rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. To request access, contact our customer support team via email at [email protected] with the subject line "Data Access Request." We will provide your data within 30 days in a commonly used electronic format (e.g., PDF, CSV).

7.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information (email, phone number, address) directly through your account settings. For changes requiring verification (e.g., name change), contact customer support with supporting documentation.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information in certain circumstances, such as when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (where processing was based on consent)
• The data was processed unlawfully

Note that we cannot delete data required to comply with legal obligations (e.g., financial records required by Indonesian tax law, AML/KYC records) or establish/defend legal claims. In such cases, we will restrict processing instead.

7.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data in certain situations, such as when you contest the accuracy of data or object to processing. During the restriction period, we will store your data but not actively use it (except with your consent or for legal claims).

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider (where technically feasible). This applies to data you provided to us with consent or to perform our contract with you.

7.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes. You can opt out of marketing emails by clicking the "unsubscribe" link in any promotional email or by updating your communication preferences in your account settings. You can opt out of SMS marketing by replying "STOP" to any marketing text message.

7.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications, cookies), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

7.8 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you have the right to lodge a complaint with the relevant Indonesian data protection authority or the supervisory authority in the jurisdiction where bisa98 is licensed.

8. Cookies and Tracking Technologies

bisa98 uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze website usage, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device and remember information about your visit (e.g., login status, language preference, items in your shopping cart).

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function (e.g., login authentication, security). These cannot be disabled without breaking core functionality
• Performance Cookies: Collect anonymous information about how visitors use the site (e.g., most visited pages, error messages). Help us improve website performance
• Functional Cookies: Remember your preferences (e.g., language selection, username) to provide a more personalized experience
• Advertising Cookies: Track your browsing activity to deliver targeted advertisements based on your interests. Used only with your consent

8.3 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling cookies may limit your ability to use certain features of the bisa98 website (e.g., staying logged in, personalized game recommendations).

To manage cookies, visit your browser's settings menu:

• Chrome: Settings > Privacy and Security > Cookies and other site data
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Edge: Settings > Cookies and site permissions > Cookies and site data

9. Third-Party Services

bisa98's website may contain links to third-party websites, services, or content (e.g., game provider websites, social media platforms, payment processor sites). This Privacy Policy applies only to bisa98. We are not responsible for the privacy practices of third-party sites, and we encourage you to read their privacy policies before providing personal information.

Third-party services integrated into our platform (e.g., live chat widgets, analytics tools) have their own privacy policies. We select reputable third-party providers that comply with applicable data protection laws, but we cannot control their data practices.

10. Children's Privacy

bisa98's services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal information from individuals under 21 years of age. If you are under 21, you are prohibited from accessing or using bisa98's website and services.

If we become aware that we have inadvertently collected personal information from someone under 21, we will take immediate steps to delete that information and terminate the account. If you believe a minor has provided personal information to bisa98, please contact us immediately at [email protected].

We employ age verification measures (KYC document checks) to prevent underage gambling and comply with Indonesian law and international gaming regulations.

11. Changes to This Privacy Policy

bisa98 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this document
• Notify you via email to the address associated with your account
• Display a prominent notice on our website homepage
• Request your consent if required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Continued use of bisa98's services after changes become effective constitutes your acceptance of the revised Privacy Policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:

• Email: [email protected] (Subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 through the website
• WhatsApp: +62 812 3456 7890 (09:00-01:00 WIB daily)

For data access requests, rectification requests, deletion requests, or to exercise any of your privacy rights under Section 7, please include "Data Subject Request" in your email subject line along with your username and registered email address. We will respond to your request within 30 days.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority in Indonesia or the jurisdiction where bisa98 is licensed.