Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bwslot ("bwslot", "we", "us", or "our"), the online gaming platform accessible at bwslot.cam, collects, processes, stores, and protects personal data relating to individuals ("Users", "you", or "your") who register for, access, or use our Platform and the services offered through it.

bwslot operates primarily for players resident in Indonesia. We are committed to handling your personal data in a responsible manner consistent with internationally recognised data-protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

By creating an Account on bwslot or continuing to use the Platform after this Policy has been communicated to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Platform and contact our support team to close your Account.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly. Defined terms used but not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

2 Definitions

The following key terms are used throughout this Policy:

3 Data We Collect

bwslot collects only the personal data that is necessary for the specific purposes described in Clause 5. The categories of personal data we collect are as follows:

3.1 Registration & Account Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address in Indonesia (street, city, province, postal code)
• Email address (primary communication and account-recovery channel)
• Mobile phone number (for two-factor authentication and account alerts)
• Username and hashed password (passwords are never stored in plaintext)
• Account currency preference (IDR)

3.2 KYC Verification Data

• Scanned or photographed copies of government-issued photo ID (Indonesian KTP, passport, or SIM)
• Proof of address documents (utility bills, bank statements dated within 3 months)
• Proof of payment method ownership (e.g., screenshot showing registered account name for BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay)
• Source-of-funds documentation for high-volume accounts (payslips, business registration, tax returns)

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records, including amounts (in IDR), timestamps, payment method used, and transaction reference numbers
• Bank account or e-wallet identifiers (account number, registered name) — full payment credentials are not stored on our servers; payment processing is handled by certified third-party gateways
• Bonus and promotional transaction history

3.4 Gaming & Betting Activity Data

• Game session logs: game title, stake amount, outcome, timestamp, and session duration
• Sports betting records, including markets wagered on (e.g., BRI Liga 1, EPL, Champions League, togel lottery draws, esports tournaments)
• Wagering statistics used for responsible gaming monitoring and bonus compliance

3.5 Technical & Device Data

• IP address and geolocation data (country, city-level)
• Device type, operating system, browser type, and version
• Session identifiers, cookies, and similar tracking technologies
• Referring URL and on-site navigation path data
• Platform error logs and crash reports

3.6 Communications Data

• Records of all communications between you and the bwslot support team, including live chat transcripts and email correspondence
• Feedback, survey responses, and complaint submissions
• Responsible gaming requests and self-exclusion declarations

4 How We Collect Data

bwslot collects personal data through the following channels and mechanisms:

• Direct Submission: Data you voluntarily provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys and promotions.
• Automated Collection: Data collected automatically when you interact with the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes device data, IP addresses, session durations, and page interaction events.
• Third-Party Sources: Data received from payment processors (transaction confirmation and fraud flags), KYC verification service providers (identity document validation results), and fraud-prevention networks (risk scoring data). bwslot only receives the minimum necessary output from these providers — for example, a pass/fail verification result rather than a full document image stored externally.
• Game Platform Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may transmit session and outcome data to bwslot's systems for settlement, auditing, and player-history purposes.

5 Purposes of Processing

bwslot processes personal data for the following clearly defined purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent or as otherwise required by law:

You may withdraw consent for marketing communications at any time by contacting the support team or using the unsubscribe mechanism in any promotional email. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it affect processing conducted on other legal bases.

6 Legal Basis for Processing

bwslot relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to perform the contract between bwslot and you — including account registration, game delivery, payment processing, and customer support. Without this processing, we cannot provide the Platform services.
• Legal Obligation: Processing required for bwslot to comply with applicable legal and regulatory requirements, including Anti-Money Laundering (AML) obligations, KYC mandates under our licensing framework, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing conducted to pursue bwslot's legitimate business interests, including fraud detection, platform security, abuse prevention, and anonymised analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, optional personalisation features, and non-essential cookies, where we have obtained your freely given and informed consent. You retain the right to withdraw consent at any time as described in Clause 12.

7 Data Sharing & Disclosure

bwslot does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent strictly necessary:

• Payment Processors & Banking Partners: To execute deposit and withdrawal transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. These parties process your transaction data under their own privacy policies and are bound by contractual data-processing agreements with bwslot.
• KYC & Identity Verification Providers: Specialist third-party providers that validate government-issued identity documents and perform watchlist screening. These processors operate under strict contractual obligations and are prohibited from using your data for any purpose beyond the verification service they provide.
• Game Content Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session-level data (player ID, stake, outcome) necessary to deliver game content and certify RNG outcomes. No directly identifiable personal data beyond a pseudonymous player identifier is transmitted to game studios.
• Fraud Prevention & Security Networks: bwslot participates in industry-standard fraud intelligence networks. Anonymised or pseudonymised risk signals may be shared with these networks to protect the integrity of the Platform and its users.
• Legal & Regulatory Authorities: Where bwslot is required by law, court order, or regulatory direction to disclose personal data, we will comply. Where legally permissible, we will notify you of such a disclosure request before responding.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of bwslot's assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

8 International Data Transfers

bwslot's primary servers and data infrastructure are located in secure data centres in Asia. Some of our third-party service providers — including KYC verification specialists and fraud-prevention platforms — may process personal data in jurisdictions outside Indonesia. Where such transfers occur, bwslot takes the following protective measures:

• Contractual clauses binding the recipient to data-protection standards substantially equivalent to those described in this Policy.
• Verification that the recipient jurisdiction or specific organisation maintains adequate technical and organisational security measures.
• Transfer of only the minimum necessary data required to fulfil the specific processing purpose.
• Regular review of international data-transfer arrangements to ensure continued adequacy.

By using the Platform, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described above.

9 Data Retention

bwslot retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data is no longer personal data and may be retained indefinitely for statistical and analytical purposes.

10 Security Measures

bwslot employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bwslot Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). The padlock icon in your browser confirms this connection is active.
• Encryption at Rest: Sensitive personal data stored in our databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Password Security: User passwords are stored using a one-way cryptographic hashing algorithm with individual salting. bwslot employees cannot view or recover your password in plaintext.
• Two-Factor Authentication (2FA): Users are strongly encouraged to enable 2FA on their accounts. 2FA adds a second verification layer using a one-time code sent to your registered mobile number, making unauthorised access significantly more difficult even if your password is compromised.
• Access Controls: Access to personal data within bwslot is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific job function. All internal data access is logged and auditable.
• Intrusion Detection & Monitoring: The Platform is monitored continuously for suspicious activity, brute-force login attempts, and anomalous transaction patterns using automated threat-detection systems.
• Penetration Testing: bwslot engages independent security professionals to conduct regular penetration tests of the Platform's infrastructure. Critical vulnerabilities identified are remediated within 72 hours.
• Data Breach Response: In the event of a personal data breach that poses a risk to affected individuals, bwslot will notify impacted Users and relevant regulatory authorities within 72 hours of becoming aware of the breach, in accordance with applicable data-protection obligations.

11 Cookies & Tracking Technologies

bwslot uses cookies and similar tracking technologies to deliver, maintain, and improve the Platform experience. A cookie is a small text file stored on your device by your web browser when you visit the Platform. The following categories of cookies are used:

You may manage or withdraw your consent for non-essential cookies at any time through your browser's settings. Most modern browsers allow you to block or delete cookies selectively. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

bwslot does not use cookies to serve third-party advertising on your device or to track your browsing activity across websites outside of bwslot.cam.

12 Your Rights

As a User of the bwslot Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at the details provided in Clause 16. bwslot will respond to all verified rights requests within 30 calendar days:

• Right of Access: You may request a copy of the personal data bwslot holds about you, along with information about how it is being processed, the legal basis for processing, and the categories of recipients with whom it has been shared.
• Right to Rectification: If any personal data bwslot holds about you is inaccurate or incomplete, you have the right to request its correction. For account-detail corrections, you may also update certain information directly via your Account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) the data has been processed unlawfully. Note that this right may be limited where bwslot has a legal obligation to retain data (e.g., AML record-keeping requirements).
• Right to Restriction of Processing: In certain circumstances you may request that bwslot restricts the processing of your data — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV).
• Right to Object: You may object at any time to processing carried out on the basis of legitimate interests, including profiling. bwslot will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent for marketing communications can be actioned by emailing the support team or clicking the unsubscribe link in any promotional email.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing the request to ensure we do not disclose or modify data belonging to a different individual.

13 Minors & Age Restriction

The bwslot Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the KYC process, and Accounts found to belong to individuals under 21 will be immediately suspended and all balances returned to the registered payment method following compliance review.

If you are a parent or guardian and believe that a minor has created an Account on bwslot using false information, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 24 hours of receiving the report.

Any personal data inadvertently collected from a person under the age of 21 will be deleted as soon as the underage status is confirmed.

14 Third-Party Links & Services

The bwslot Platform may contain references to third-party services — for example, links to live sports data providers or game studio certification pages. These third-party services operate under their own independent privacy policies, and bwslot accepts no responsibility or liability for their data-handling practices.

We encourage you to review the privacy policies of any third-party services you access in connection with your use of the bwslot Platform. bwslot does not endorse or make representations about the privacy or security standards of third-party services beyond our own Platform boundary.

15 Policy Amendments

bwslot reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or regulatory requirements. When material changes are made — meaning changes that substantively affect how we collect, use, or share your personal data — we will notify you via your registered email address at least 7 calendar days before the updated Policy takes effect.

For minor revisions (such as grammatical corrections, improved clarity, or administrative updates that do not alter your substantive rights), the Policy may be updated without prior notice. The "Last Updated" date displayed at the top of this page will always reflect the most recent revision date.

Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how bwslot protects your personal data.

16 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bwslot handles your personal data, please contact our dedicated Data Protection team using the details below. All privacy-related inquiries are handled with strict confidentiality and prioritised response times.

When submitting a data rights request, please include your registered email address and Account username so we can verify your identity efficiently. bwslot will never charge a fee for handling a legitimate data rights request unless the request is manifestly unfounded or excessive in scope.