Purpose and Scope of the BC Game Privacy Notice
A privacy policy is where a gambling platform commits its data habits to writing. Few players open it, which is a pity on an offshore site.
BC Game’s version names Twocent Technology Limited as the party in charge of personal data. That company runs the casino and carries Belize registration number 000041939. The platform itself dates from 2017. Its gambling permit, ALSI-202410011-FI1, was issued on Anjouan, one island of the Comoros group. Personal details therefore sit with an offshore firm, outside any Indonesian supervisor.
This is a plain-English summary, and the official wording wins wherever the two differ. The site behind it is an affiliate guide with no access to any account.
The official policy has no cookie section and no privacy inbox, so questions go through regular support.
Categories of Data That May Be Collected
The policy splits data into two piles. One comes from the account holder directly, and the other builds up during play.
| Data group | Examples named in the policy | Main use (our reading) |
| Account basics | Account ID, email, username, age | Identifying and running the account |
| Contact and address | Contact details, home address | Support and verification |
| Financial | Payment methods, financial records | Deposits and withdrawals |
| Identity documents | Government ID for KYC | Proving who the player is |
| Preferences | Marketing choices | Choosing which offers get sent |
| Technical | IP address, device ID, operating system, browser | Security and fraud checks |
| Location | Approximate or precise location | Fraud prevention and compliance |
| Activity | Usage patterns, game history, anti-fraud metrics | Service records and rule enforcement |
The third column is my own reading. The policy doesn’t pair each data type with a single reason.
Information Provided Directly by Users
Registration offers four routes. Two use a typed email or phone number, and two let a Google or Telegram account vouch for the player.
Neither the email nor the username can be edited later. I’d pick an inbox that will still exist in five years.
No passport is requested at sign-up, though players must be 18 or older. Checks are triggered by risk, most often by a big withdrawal request. Tier one covers a photo ID scanned on both sides and a selfie set shot at 5 angles. A second tier wants a home-address document no older than 3 months.
Those scans are the most sensitive files a casino ever holds about a person. The safe place to upload them is inside the account itself.
Device Information and Activity Records
The second pile grows without any typing. It covers IP address, device ID, operating system and browser, plus location and game history across 7,000+ titles from 60+ studios.
A phone session in Surabaya on Monday and a borrowed laptop in a Jakarta hotel on Tuesday night each leave their own fingerprint. Anti-fraud checks then compare both sessions with earlier logins.
Game history feeds the VIP system too. VIP points follow a simple formula of stake × house edge × 100. On a game with a 1% edge, a 10 USD stake is worth 10 XP. Level 22 brings weekly and monthly bonuses, and from level 38 withdrawals lose the 0.1% fee.
Why Personal Information May Be Processed
The policy lists these reasons for using personal data:
- running the casino and betting service
- confirming who the player is
- handling payments
- legal compliance and anti-money-laundering work
- stopping fraud
- marketing
- enforcing the terms of use
Account Operation and Identity Checks
Besides a password, the platform accepts a passkey, Cwallet, or a Google or Telegram account.
Two-factor codes come from Google Authenticator, which lives under Global Settings > Security. A verified email or phone is a precondition for turning it on. I’d write the backup key on paper and keep it away from the phone.
Security changes have consequences. Withdrawals go on hold for 24 hours after a new password or a disabled 2FA, which guards against someone else making the change.
Verification allows up to 6 attempts. Each rejection email states the reason. In my view a sharp daylight photo is the cheapest way to avoid burning attempts.
Service Analytics and Product Enhancement
The policy says little here. Its purpose list has no line about analytics, and the nearest items are running the service and logging usage patterns.
No analytics vendor is named, so a written question to support is the only route to more detail.
Account Notifications and Customer Messages
Newsletters, support replies, app push alerts and promo notices all run on the stored contact details. Some are adverts. Others are account business, such as a KYC result or a security warning.
Marketing data stays on file until the player unsubscribes. Security alerts serve a different purpose, so I’d switch off the offers and leave those alerts running.
Cookies and Similar Web Technologies
Cookies are small files a website stores in a browser.
BC Game’s policy publishes no cookie list and names no vendors. It does list automatic data like IP address, device ID and browser, which something clearly has to record.
Categories and Purposes of Cookies
Across the web, cookies tend to fall into a few groups:
- Session cookies keep a visitor logged in between pages.
- Preference cookies remember things like interface language.
- Security cookies help flag a login from a strange device.
- Analytics cookies count visits and popular pages.
- Referral cookies note which partner site sent a visitor.
Which ones bc.game uses isn’t published. The first three are hard to avoid on any site with logins.
Options for Adjusting Cookie Settings
A cookie banner on bc.game, where one appears, adds its own choices. Chrome on Android follows these steps:
- Tap the three-dot menu and open Settings.
- Choose Privacy and security, then Third-party cookies.
- Select the option that blocks them.
- For a full wipe, use Delete browsing data and tick cookies and site data.
Android needs version 5.0 or newer for the APK. On iPhone the web app runs in Safari on iOS 11.0+, so Safari’s privacy menu applies.
Clearing every cookie logs the player out, and a fresh sign-in follows. I’d block third-party cookies and leave the rest. That keeps the login alive while cutting most of the tracking that follows people between websites.
How User Information May Be Secured
On paper, the protections are SSL encryption, multi-factor login and access controls. Regular outside audits get a mention, and so do ISO 27001 and SOC 2, two well-known security standards.
This guide hasn’t seen any audit report or certificate, so proof has to come from support.
Encryption Practices for Sensitive Data
SSL scrambles data on its way between a device and the server. In the browser it shows up as the padlock and the https prefix.
Encryption can’t stop someone typing a password into a copycat page. Spare letters, odd hyphens or a country name stuck to the brand all point to a fake domain. A missing padlock is a bad sign, and a request for wallet recovery words is worse.
The genuine platform never asks for those words.
Access Permissions and Internal Safeguards
Access controls are the inside half of security. Staff should see only what their job needs, so a payments agent has no reason to open a selfie scan.
The policy says these controls exist but doesn’t describe the roles behind them.
The account holder’s half is simpler. 2FA stays on, and a 24-hour withdrawal pause that appears without any security change is a reason to contact support the same day.
Cases Where External Parties Receive Data
No casino runs alone, and the policy names four kinds of recipients.
| Recipient | What the policy says | What it means for you |
| Group companies | Data can be shared inside the group | Sister firms may see account records |
| Service providers | Payments, hosting and KYC checks | Uploaded ID may pass through a verification partner |
| Anti-fraud firms | Shared for fraud prevention | Device and activity data can leave the platform |
| Authorities | Only where the law requires it | Records can be handed over on legal demand |
The policy also says BC Game doesn’t sell or rent personal data to third parties for marketing. That rules out selling for ads, not sharing, as the table shows.
Information Shared With Payment Partners
The cashier runs on crypto, with more than 100 coins listed, and that carries an odd privacy twist. Blockchain records are public, so anyone who learns a wallet address can trace its transfers in a block explorer. No casino policy changes that.
With fiat, a processor handles the payment and sees the payer’s details. Each local method in the Fiat tab brings its own privacy rules.
A stuck fiat payment gets traced by support through its order ID, found under Wallet > Transaction.
Disclosures Required Under Applicable Law
Authorities can receive data when the law demands it. The policy names no specific laws or countries.
This page won’t claim the brand follows Indonesia’s personal data law or Europe’s GDPR, because nothing in the official summary says so.
Privacy Rights and User Choices
The policy lists six rights:
- seeing the data held
- fixing wrong details
- deletion
- limiting processing, or objecting to it
- portability
- complaining to a supervisory authority
It doesn’t say which authority takes complaints. I’d confirm it with support before relying on that right.
Reviewing and Correcting Your Personal Details
A fair amount is visible inside the account. The statement covers deposits, withdrawals and play time, and past bets are listed too.
Corrections have limits, because the email and username stay locked after sign-up. Other fields, like a misspelled surname, go through support.
A name that matches the ID card matters before any KYC request. A mismatch is a classic reason for rejection, and each failure uses up one of the 6 attempts.
Making a Personal Data Removal Request
Closing the account is a job for the support team, reachable by live chat or at [email protected]. Self-exclusion works differently and isn’t a substitute.
The tidy order is to withdraw the balance first. The request then comes from the registered email, includes the username and asks for closure plus deletion where possible.
Deletion doesn’t wipe everything at once. An account closed in October 2026 could still have transaction logs on file until October 2033. Its anti-fraud data might stay until October 2031. Those dates are ceilings, not fixed deadlines.
How Long User Data May Be Retained
The policy gives four clear periods.
| Record type | How long it may be kept |
| Account data | While the account is active |
| Transaction records | Up to 7 years |
| Anti-fraud data | Up to 5 years |
| Marketing data | Until you unsubscribe |
“Up to” means a maximum, so some records may go sooner. KYC scans get no period of their own in the summary. Support is the place to find out how long they’re held.
Processing Information Across Borders
BC Game is a global service. Data moves between the Belize company, its group firms, hosting providers and verification partners.
Server locations aren’t listed, so it’s safest to assume the data leaves the country. The declared safeguards travel with it, but no Indonesian regulator watches them.
Those records leave a country where article 303 of the KUHP makes gambling for money a crime and where Komdigi, formerly Kominfo, blocks casino sites that hold no Indonesian licence, this one included. That legal risk rests with each reader.
Personal Data in Responsible Gaming Controls
Safer-play tools create records too. Every limit leaves a note about the player’s habits in the account.
The self-exclusion menu offers breaks of 1, 7, 30 or 180 days, plus a permanent option. The choice becomes final after a 24-hour cooling-off. Reactivation after the period ends goes through [email protected].
The “Set Gambling Limit” screen handles caps on wagers and losses. The period is the player’s pick, anything from one day to one quarter, with week and month in between. Deposits have no cap at all, and no reminder pops up after a long session.
The account statement puts play time next to money moved. I’d look at it once a month, say on payday. Three weeks of late-night sessions in plain numbers says more than any warning banner.
Players under 18 can’t register. Free online support exists through Gambling Therapy, and a puskesmas doctor is another place to start.
How Changes to Privacy Terms Are Communicated
The current version sits on the platform. For important changes, the brand says it sends an email or an account notification.
The registered address can’t be swapped, so losing access to it means missing those notices.
A screenshot of the policy page, dated at sign-up, is a cheap habit. Minor edits may not trigger any email, and they only show up by comparison.
Where to Send Privacy-Related Questions
There’s no dedicated privacy address. Questions go through regular support:
- the live chat on bc.game, staffed around the clock
- [email protected], which leaves a written record
- the Help Centre, worth reading before writing in
A request works best from the account email with the username included. A real agent won’t ask for a password or a 2FA code, and no phone or WhatsApp line is official.
Principles of Transparent Data Handling
What makes a privacy policy honest? I’d look for a named operator, plain data categories and real retention periods, and BC Game’s document has all three.
It spells out 7 purposes, 6 rights and 4 retention periods.
The gaps are real too. There’s no cookie section and no privacy email, and neither a complaint body nor a server list is named.
I’d tell a friend the document gets specific where regulators usually push and stays vague in exactly the places ordinary players ask about.
Conclusion
BC Game’s privacy policy covers account, payment, identity and device data, the reasons for using it and who may receive it. Transaction records can last up to 7 years and anti-fraud data up to 5. Cookie details and complaint routes are thin. The live version on bc.game deserves a read before any document upload.