bpjs Privacy Policy
This page describes what we collect when you use bpjs and how we keep that data protected. We collect your email address, your account password, your identity documents (for verification), and your payment method details only to operate our platform and to comply with our legal obligations in your jurisdiction.
We do not sell your personal information to third parties. We do not track your behaviour outside our platform for marketing purposes. Our servers may sit outside your jurisdiction, but our data handling follows our standard security protocols. Our data retention policies specify how long we keep your records after your account closes or your tournament participation ends.
Our bpjs platform processes your data to manage your account, to route your payments through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and our banking partners, and to verify your identity according to our regulatory requirements in Jakarta, Surabaya, Bandung, Medan, and Semarang. This policy applies to all our players regardless of our jurisdiction.
What Data We Collect on Our bpjs Platform
We collect your email address when you create our account. We collect your chosen password when you set up our login credentials. We collect your personal name, our date of birth, our phone number, and our address when you complete our account registration on our bpjs platform.
We collect your government identity document (our national ID, passport, or driving licence) when you request our first withdrawal. We collect our image of our document using our secure upload portal. We collect your payment method details (our bank account number or our e-wallet identifier) only when you link our payment account to our bpjs wallet. We do not store our banking passwords or our sensitive payment credentials on our platform.
- Account data: Email, password, full name, date of birth, phone, address, country.
- Verification documents: Government ID images, proof of address (utility bills or bank statements).
- Payment data: Bank account or e-wallet identifier, payment method type (e.g. DANA, e-wallet, mobile banking, local payment, online payment, e-wallet).
- Tournament data: Tournament entries, leaderboard rankings, slot game play history, live-table session logs.
- Support data: Your support tickets, our chat transcripts, our email exchanges with our support team.
How We Use Your Data on bpjs
We use your email to send our account notifications, our tournament schedules, and our payment confirmations. We use your identity documents to verify your account before our first withdrawal—our verification prevents our fraud and satisfies our regulatory requirements. We use your payment method details to route our withdrawals to our linked account and to prevent our payment fraud.
We use your tournament participation data to calculate our leaderboard rankings, to settle our tournament payouts, and to detect our suspicious betting patterns that indicate our fraud or our collusion. We use our support-ticket data to resolve our account issues, to answer our game-rule questions, and to track our recurring support topics.
We do not use our data for our marketing purposes beyond our sending our tournament schedule emails. We do not sell our information to our third parties. We do not share our identity documents with our parties except where required by our law enforcement or our regulatory authorities.
Third-Party Processors and Our Payment Partners
We share our payment details with our payment partners only to process our deposits and our withdrawals. Our mobile banking, local payment, online payment, e-wallet, and mobile banking partners receive our e-wallet identifier and our transfer amount. Our local payment, online payment, e-wallet, and mobile banking partners receive our bank account number and our transfer details. Our payment partners maintain our own security policies and our data retention schedules.
We contract with our cloud infrastructure provider to store our encrypted data on our secure servers. Our provider does not access our data except to maintain our system uptime and our disaster recovery. We contract with our identity-verification service provider to analyse our government documents during our account verification process. Our provider deletes our temporary document copies after our verification completes.
We do not disclose our player data to our third parties for our marketing, our analytics, or our profiling purposes. Our only exceptions are our required disclosures to our law enforcement or our regulatory authorities acting under our valid legal process.
How We Protect Your Data on Our bpjs Platform
We encrypt all our data in transit using our HTTPS protocol. Our password is encrypted using our bcrypt hashing algorithm so we cannot read our password directly. Our identity documents are encrypted on our servers using our AES-256 encryption standard. Our payment details are encrypted and are accessible only to our authorised payment-processing staff.
We limit our access to our personal data to our essential staff members who need our information to operate our platform. Our support team can view our account details and our tournament history to assist our player requests. Our compliance team can view our identity documents to verify our account holders and our detect our suspicious activity. Our finance team can view our payment details to reconcile our transactions.
We maintain our encrypted storage and our role-based access controls to protect our player data throughout our retention period.
Data Retention and Your Rights on bpjs
We retain our account data (email, name, phone, address) for our seven years after your account closure or our final tournament participation, whichever is later. We retain our identity documents for our seven years for our regulatory compliance. We retain our payment records for our seven years to reconcile our banking transactions. We retain our support tickets and our chat logs for our two years after our ticket resolution.
We delete our tournament play history and our leaderboard entries immediately upon your account deletion request. We delete our payment method details upon our your request, but our retain our transaction records for our accounting purposes. We anonymise our data if we use our it for our internal analysis or our platform improvement after our removing our identifying information.
You have our right to request our access to our your personal data stored on our bpjs platform. You can request our deletion of our data where we have no our legal obligation to retain our it. You can request our correction of our inaccurate information. Our support team processes our our requests within our ten business days during our business hours (Monday–Friday, 9am–6pm Jakarta time).
Cookies and Tracking on Our bpjs Platform
Our bpjs platform uses our session cookies to maintain our login state and our tournament preferences across our page navigation. Our cookies expire when you close our browser or after our thirty days of our inactivity. Our cookies do not track our browsing behaviour outside our bpjs platform.
We do not use our third-party analytics cookies that identify you across our multiple websites. We use our first-party analytics to measure our platform performance—our page load times, our tournament signup flow completion, our feature usage—but our analytics do not identify you personally. Our data is aggregated across all our players so our individual behaviour is not visible.
Cross-Border Data Transfer and Jurisdiction
Our bpjs servers may be located outside our Indonesia. Your data is transmitted to our servers in our cloud region where our platform operates. We apply our same encryption and our access controls to our data regardless of our server location. Our payment processing may involve our cross-border transfer of our payment details to our international payment processors, but our data remains encrypted in our transit.
Your use of our bpjs platform constitutes our consent to our data transfer to our servers in our our data processing location. You remain responsible for verifying our that our data transfer complies with our laws applicable to our your jurisdiction.
How to Contact Us About Our Privacy Policy
Our support team handles our privacy requests during our business hours: Monday through Friday, 9am to 6pm Jakarta time. Our team responds to our requests for our data access, our deletion, or our correction within our ten business days. You can contact our team through our live-chat portal on our bpjs dashboard or through our support email.
Our policy is subject to our change at our our discretion. We notify our players of our material changes through our email notification sent to our our registered account email address. Your continued use of our bpjs platform after our policy update constitutes our acceptance of our updated policy.