Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected, processed, and stored by bisaqq through our website, mobile applications, customer service channels, and related services. By creating an account, accessing our platform, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

bisaqq is committed to protecting your personal information and complying with applicable data protection laws and regulations. We collect only the information necessary to provide our services, verify your identity for security and regulatory purposes, and improve your gaming experience. Your trust is essential to our business, and we work diligently to safeguard your privacy at every step.

2. Data Controller Information

For the purposes of applicable data protection legislation, bisaqq acts as the data controller for the personal information collected through our platform. This means we determine how and why your personal data is processed. If you have questions, concerns, or requests regarding your personal data, you may contact our Data Protection Officer at:

• Email: [email protected] (displayed as plain text, not clickable)
• Customer Support: Available 24/7 via live chat through your account dashboard
• WhatsApp Support: 8:00 AM - 12:00 AM WIB (contact details displayed as plain text)

3. Information We Collect

3.1 Information You Provide Directly

When you register an account with bisaqq, we collect the following personal information:

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number, username, and password.
• Identity Verification Documents: Government-issued identification (KTP, passport, or national ID card), proof of address (utility bills, bank statements, or government correspondence), and selfie photographs for facial verification as part of our Know Your Customer (KYC) process.
• Financial Information: Bank account details (account holder name, bank name, account number), e-wallet account information (OVO, DANA, GoPay account identifiers), payment card details, and transaction history including deposits, withdrawals, bets, and winnings.
• Communication Data: Any information you provide when contacting customer support, including chat transcripts, email correspondence, and support ticket content.
• Voluntary Information: Preferences, feedback, survey responses, and promotional communications opt-in/opt-out choices.

3.2 Information We Collect Automatically

When you access or use bisaqq services, we automatically collect certain technical and usage information:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Usage Data: Pages visited, games played, bet history, session duration, clicks, scrolling behavior, referral sources, and navigation patterns within our platform.
• Location Data: Approximate geographic location derived from your IP address to comply with regulatory requirements and prevent access from restricted jurisdictions.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixels, and similar technologies to enhance functionality, remember preferences, and analyze platform performance.
• Security Logs: Login attempts, authentication events, security incidents, and fraud detection data.

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions that verify transaction details and detect fraudulent activity.
• Identity verification services that confirm the authenticity of your submitted documents.
• Game providers that supply usage data, game outcomes, and RNG (Random Number Generator) verification information.
• Affiliate partners who refer you to our platform (we receive only non-identifying referral data).

4. How We Use Your Information

bisaqq processes your personal data for the following legitimate purposes:

4.1 Service Provision and Account Management

• Create, maintain, and manage your gaming account.
• Process deposits, withdrawals, and payment transactions.
• Enable you to play casino games, place sports bets, participate in lottery draws (togel), and access all platform features.
• Display your account balance, transaction history, and gaming activity.
• Provide customer support and respond to inquiries.

4.2 Security, Verification, and Compliance

• Verify your identity, age (21+ requirement), and address through KYC procedures.
• Detect, prevent, and investigate fraud, money laundering, collusion, and other prohibited activities.
• Comply with legal obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
• Enforce our Terms & Conditions and respond to legal requests from authorities.
• Monitor platform security, prevent unauthorized access, and protect against cyber threats.

4.3 Responsible Gaming and Player Protection

• Implement and monitor deposit limits, loss limits, and self-exclusion settings you've configured.
• Identify patterns of potentially problematic gambling behavior.
• Provide reality check notifications and session time reminders.
• Offer access to responsible gaming resources and support organizations.

4.4 Marketing and Communications

• Send promotional offers, bonuses, and special event notifications (only with your consent).
• Provide personalized game recommendations based on your preferences.
• Distribute newsletters and platform updates (you may opt out at any time).
• Send transactional notifications about your account, deposits, withdrawals, and security alerts.

4.5 Platform Improvement and Analytics

• Analyze user behavior to improve website functionality, game selection, and user interface design.
• Conduct statistical analysis and market research to understand player preferences.
• Test new features, optimize performance, and enhance overall service quality.
• Resolve technical issues and improve platform stability.

5. Legal Bases for Processing

Under applicable data protection laws, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to when registering your account.
• Legal Obligation: Processing required to comply with Indonesian and international laws, including KYC, AML, CTF, and gaming regulations.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security monitoring, and platform improvement, provided such interests do not override your fundamental rights.
• Consent: Processing based on your explicit consent, such as marketing communications and optional data sharing (you may withdraw consent at any time).

6. Data Sharing and Disclosure

6.1 When We Share Your Information

bisaqq does not sell your personal data to third parties for marketing purposes. However, we may share your information with the following categories of recipients:

Recipient Category	Purpose of Sharing	Data Shared
Payment Processors	Process deposits and withdrawals	Name, bank account details, transaction amounts
Identity Verification Services	Verify KYC documents and detect fraud	ID documents, name, date of birth, address
Game Providers	Enable gameplay and track gaming activity	Username, bet history, game preferences
Customer Support Tools	Provide efficient support services	Account details, chat transcripts, support tickets
Analytics Providers	Analyze platform performance and user behavior	Aggregated, anonymized usage data
Legal Authorities	Comply with legal obligations and court orders	Any data required by applicable law

6.2 International Data Transfers

bisaqq operates internationally and may transfer your personal data to countries outside Indonesia for processing and storage. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities.
• Data processing agreements with all third-party service providers.
• Encryption and security measures during data transfer.
• Compliance with the data protection laws of both the source and destination countries.

7. Data Security

Protecting your personal information is a top priority for bisaqq. We implement comprehensive technical and organizational security measures, including:

• Encryption: All data transmitted between your device and our servers is protected by industry-standard 256-bit SSL/TLS encryption, the same technology used by banks for secure online transactions.
• Secure Data Storage: Personal data is stored on secure servers protected by firewalls, intrusion detection systems, and regular security audits.
• Access Controls: Strict access controls ensure only authorized personnel can view personal data, and only when necessary for legitimate business purposes.
• Authentication: Multi-factor authentication options available for account access, and all passwords are hashed using strong cryptographic algorithms.
• Regular Security Testing: Penetration testing, vulnerability assessments, and third-party security audits conducted regularly.
• Employee Training: All staff undergo data protection and security awareness training.
• Incident Response: Comprehensive incident response plan in place to address any security breaches promptly.

Despite our best efforts, no data transmission over the internet or electronic storage system is 100% secure. If you suspect unauthorized access to your account, change your password immediately and contact our support team.

8. Data Retention

bisaqq retains your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our retention periods are as follows:

• Active Accounts: Personal data retained for the duration of your account's active status plus any required legal retention period.
• Closed Accounts: After voluntary account closure, we retain essential data for 7 years to comply with financial regulations, AML requirements, and legal obligations. Some data may be retained longer if required by law or pending legal proceedings.
• Marketing Data: Retained until you withdraw consent or for up to 3 years from your last interaction with our platform.
• Transaction Records: Retained for 7 years to comply with financial record-keeping requirements.
• Security Logs: Retained for up to 2 years for security monitoring and fraud prevention purposes.

After the applicable retention period expires, personal data is securely deleted or anonymized so it can no longer be associated with you.

9. Your Data Protection Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. You can access most of your data directly through your account dashboard. For a comprehensive data export, contact our support team.

9.2 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings. For changes to verified data (name, date of birth), contact support with supporting documentation.

9.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary for its original purpose or if you withdraw consent. However, we may retain certain data if required by law or for legitimate business purposes (e.g., fraud prevention, legal disputes).

9.4 Right to Restrict Processing

You can request that we limit how we use your data in certain situations, such as when you contest data accuracy or object to processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

9.6 Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will stop such processing unless we can demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

9.8 Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority or supervisory body.

To exercise any of these rights, please contact our Data Protection Officer via the contact details provided in Section 2 of this Privacy Policy. We will respond to your request within 30 days.

10. Cookies and Tracking Technologies

bisaqq uses cookies and similar tracking technologies to enhance your experience, analyze platform performance, and deliver personalized content. Types of cookies we use include:

• Essential Cookies: Required for platform functionality, authentication, and security. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use our site to help us improve performance.
• Functional Cookies: Remember your preferences and settings for a personalized experience.
• Marketing Cookies: Track your activity to deliver relevant advertisements and measure campaign effectiveness (only with your consent).

You can manage cookie preferences through your browser settings. However, disabling certain cookies may affect platform functionality. For detailed information about cookies, visit your browser's help section.

11. Children's Privacy

bisaqq services are strictly intended for individuals aged 21 and older. We do not knowingly collect, process, or solicit personal data from anyone under the age of 21. If we discover that we have inadvertently collected data from a minor, we will delete that information immediately and permanently close the associated account. If you believe a minor has provided personal data to bisaqq, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Updating the "Last Updated" date at the top of this page.
• Sending an email notification to your registered email address.
• Displaying a prominent notice on our platform.

Your continued use of bisaqq services after such notification constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your personal information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected] (plain text display, not clickable)
• Data Protection Officer: Available via the email address above
• Customer Support: 24/7 live chat through your account dashboard
• WhatsApp Support: Available 8:00 AM - 12:00 AM WIB (contact details displayed as plain text)

We are committed to resolving any privacy concerns promptly and transparently. Our support team will respond to your inquiry within 48 hours.