bwo99 Privacy Policy

This Privacy Policy ("Policy") describes how bwo99 ("bwo99", "the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the bwo99 online betting and casino platform available at https://bwo99.cam and all associated subdomains, mobile interfaces, and API endpoints (collectively, "the Service").

This Policy forms an integral part of the bwo99 Terms and Conditions. By registering an Account, accessing the Service, or otherwise providing personal data to bwo99, you confirm that you have read and understood this Policy and consent to the data practices described herein.

bwo99 is committed to handling personal data responsibly, transparently, and in accordance with internationally recognized data protection principles. We collect only the data we genuinely need to operate a safe, compliant, and fair online gambling service — and we retain it only for as long as is legally or operationally necessary.

If you have any questions about this Policy or wish to exercise any of your data rights described in Section 9, please contact our privacy team using the details provided in Section 14.

The following defined terms are used throughout this Policy. Where the context permits, the singular includes the plural and vice versa.

bwo99 collects Personal Data through several channels: data you provide directly when registering or using the Service, data generated automatically by your use of the platform, and data received from trusted third-party verification partners. The categories below describe all Personal Data bwo99 currently collects.

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, country of residence, and the username and password you choose at registration.
• KYC documents: Government-issued photo identification (Indonesian KTP or valid passport), selfie for liveness verification, proof of address, and proof of payment method ownership.
• Financial data: Bank account name, account number, and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) submitted to facilitate deposits and withdrawals. bwo99 does not store full card numbers or CVV codes.
• Responsible gaming disclosures: Deposit limits, session time limits, cool-down requests, and self-exclusion instructions you submit through the Account dashboard or via support.
• Support communications: Messages, complaints, and attachments submitted to bwo99 customer support via email or live chat.

3.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device language preference.
• Usage and behavioural data: Pages viewed, features used, wagers placed, game sessions started, session duration, click-stream data, and navigation paths within the platform.
• Transaction logs: A full, time-stamped record of all deposits, withdrawals, wagers, wins, losses, and bonus activations associated with your Account.
• Cookie and tracking data: Session identifiers, authentication tokens, and analytics identifiers placed on your device as described in Section 7.
• Geolocation data: Approximate geographic location derived from your IP address at the time of login, used solely for fraud detection and jurisdictional compliance — bwo99 does not use GPS-level location data.

3.3 Data Received from Third Parties

• KYC verification providers: Enhanced identity verification results, document authenticity scores, and politically exposed person (PEP) or sanctions watchlist screening outcomes from bwo99's contracted KYC service provider.
• Payment processors: Transaction confirmation references and risk scoring signals from bwo99's payment gateway partners to detect fraudulent deposit or withdrawal attempts.
• Anti-fraud networks: Device fingerprint risk scores and known fraudulent identifier flags from industry-shared anti-fraud databases.

bwo99 processes Personal Data only for the specific, legitimate purposes described below. We do not use personal data for purposes that are incompatible with the purposes for which it was originally collected.

For each processing activity described in Section 4, bwo99 relies on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between bwo99 and you — including Account management, payment processing, and dispute resolution.
• Legal obligation: Processing required to comply with applicable law — including KYC verification, AML/CFT screening, and record retention mandated by bwo99's gaming license.
• Legitimate interests: Processing necessary for bwo99's legitimate business interests, provided those interests are not overridden by your fundamental data rights — including fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent — including marketing communications. You may withdraw consent at any time without penalty by contacting support or using the unsubscribe mechanism in any marketing email.
• Vital interests: In exceptional circumstances where processing is necessary to protect your vital interests or those of another individual — for example, in a serious responsible gaming emergency.

bwo99 does not sell, rent, or trade your Personal Data with unaffiliated third parties for their own marketing or commercial purposes. We share data only in the circumstances described below, and only to the minimum extent necessary.

6.1 Service Providers and Processors

bwo99 engages trusted third-party service providers who process Personal Data on our behalf under binding data processing agreements that require them to implement appropriate security measures and prohibit them from using data for any purpose other than delivering the contracted service. These providers include:

• KYC and identity verification providers — for document authentication, liveness checks, PEP screening, and sanctions list matching.
• Payment processing partners — for facilitating deposits and withdrawals via local Indonesian bank transfers and e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Cloud infrastructure providers — for secure hosting, data storage, and content delivery.
• Customer support software providers — for live chat and ticket management systems used by the bwo99 support team.
• Anti-fraud and cybersecurity providers — for device fingerprinting, risk scoring, and threat detection.
• Analytics providers — for aggregated, anonymized platform performance monitoring.

6.2 Game Content Providers

Game content on the bwo99 platform is delivered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive limited session data (such as a tokenized player identifier and stake amounts) to generate game outcomes and return results to the platform. They do not receive your full registration data or payment details, and their use of session data is governed by their own licensed operator agreements.

6.3 Legal and Regulatory Disclosure

bwo99 may disclose Personal Data to law enforcement agencies, regulatory authorities, courts, or other governmental bodies where required to do so by applicable law, valid legal process, or the terms of our international gaming license. We will notify you of any such disclosure to the extent legally permitted.

6.4 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of bwo99's business, Personal Data held by bwo99 may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and the identity of the successor data controller prior to your data being transferred.

bwo99 uses cookies, local storage, and similar client-side technologies to support the operation of the platform. The table below describes every category of cookie bwo99 currently deploys, along with the purpose and typical retention period for each.

bwo99 does not deploy third-party advertising, retargeting, or behavioral profiling cookies. You can manage or delete cookies via your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from accessing authenticated areas of the platform.

bwo99 retains Personal Data for the minimum period required to fulfil the purpose for which it was collected, or as mandated by applicable legal and regulatory obligations. The following retention schedule applies:

• Active Account data (registration details, transaction history, wagering records): Retained for the full duration of your Account's active status plus a minimum of five years from the date of Account closure, in line with standard AML record-keeping requirements.
• KYC documents (identity documents, proof of address, payment method verification): Retained for five years from the date of Account closure, or longer where required by the specific obligations of bwo99's gaming license.
• Customer support records (chat transcripts, email correspondence): Retained for three years from the date of the conversation, or until final resolution of any related dispute.
• Marketing consent records: Retained for the duration of your consent and for one year thereafter as evidence of consent management.
• Anonymized analytics data: May be retained indefinitely as it cannot be linked to any identified individual.
• Self-exclusion records: Retained permanently to prevent re-registration attempts by excluded individuals, even after Account deletion requests.

Subject to applicable law and certain limited exceptions (such as legal retention obligations), you have the following rights regarding the Personal Data bwo99 holds about you. You may exercise any of these rights by submitting a request to the privacy contact address in Section 14.

bwo99 will acknowledge all data rights requests within 5 business days and provide a full response within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days, notifying you of the extension and the reason within the initial 30-day window.

bwo99 operates as an internationally licensed platform, and certain service providers or group entities involved in delivering the Service may be located in jurisdictions outside Indonesia. As a result, your Personal Data may be transferred to, stored in, or processed in countries other than your country of residence.

Where such transfers occur, bwo99 takes appropriate safeguards to ensure that your Personal Data receives a level of protection consistent with internationally recognized data protection standards, including:

• Relying on transfers to countries that provide an adequate level of data protection as recognized by relevant international frameworks.
• Entering into standard contractual clauses or equivalent binding agreements with third-party processors located in non-adequate countries.
• Applying supplementary technical measures — including encryption in transit and at rest — where the destination country's legal environment may present additional risks.

You may request details of the safeguards applied to any specific cross-border transfer by contacting the privacy team at the address in Section 14.

bwo99 implements a layered security architecture designed to protect Personal Data against unauthorized access, disclosure, alteration, or destruction. The key technical and organizational measures in place include:

• Transport Layer Security: All data transmitted between your browser/app and bwo99 servers is encrypted using TLS 1.3, enforcing a minimum of 256-bit AES encryption.
• Encryption at rest: Databases containing Personal Data, KYC documents, and financial records are encrypted at rest using AES-256.
• Access controls: Access to production systems holding Personal Data is governed by role-based access controls, enforced multi-factor authentication, and comprehensive access logging. Access is granted on a strict need-to-know basis.
• Penetration testing: bwo99 commissions independent security penetration tests of its platform infrastructure on a regular basis. Critical and high-severity findings are remediated within defined SLA windows.
• Incident response: bwo99 maintains a documented data breach response procedure. In the event of a personal data breach that creates a risk to player rights, bwo99 will notify the relevant regulatory authority within the timeframe required by applicable law and will notify affected Players without undue delay.
• Vendor security assessments: All third-party processors undergo a security due diligence review prior to engagement and are subject to periodic re-assessment.

The bwo99 Service is intended exclusively for adults aged 21 years or older. bwo99 does not knowingly collect, use, or retain Personal Data from any individual under the age of 21. Age verification is a mandatory step in the bwo99 Account registration and KYC process.

If bwo99 discovers that Personal Data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — the relevant Account will be immediately suspended, all funds and winnings will be voided, and the Personal Data will be securely deleted in accordance with bwo99's data retention procedures, subject only to any legal reporting obligations.

bwo99 reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, new data processing activities, or improvements to our internal data governance practices. The revised Policy will be published at https://bwo99.cam/privacy-policy with an updated effective date.

Where an amendment materially changes how bwo99 processes your Personal Data — for example, introducing a new purpose, a new category of data, or a new third-party disclosure — bwo99 will provide advance notice to affected Players via their registered email address before the change takes effect, and will obtain fresh consent where required by applicable law.

Your continued use of the Service after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the amended Policy, you should stop using the Service and request Account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 9, or need to report a potential data breach or privacy concern, please contact the bwo99 privacy team using the details below. Email addresses are provided as plain text only and are not clickable links — please copy the address manually.

For urgent responsible gaming matters — including self-exclusion requests and Account freeze activations — please mark your message "Responsible Gaming — Urgent" so it is routed directly to the responsible gaming team ahead of the standard support queue.

For general platform support, including deposit and withdrawal queries, account verification questions, and bonus disputes, our customer support team operates 24 hours a day, 7 days a week. Live chat response times during WIB peak hours (08:00–24:00 WIB) are typically under 3 minutes.