Data Retention
We keep your data only as long as your account is active plus 12 months. Most platforms retain indefinitely.
LEGAL REFERENCE
Your Privacy Matters to Us
We've built bcawin around your account security and data protection. Every transaction through DANA, OVO, GoPay and QRIS is encrypted. Your personal information stays private, and we're transparent...
Data EncryptedQRIS SecureAccount ProtectedPrivacy FirstIndonesia Compliant
How We Handle Your Information
bcawin collects and processes your personal data to deliver account services, process payments through DANA, OVO, GoPay and QRIS, and comply with Indonesian regulations. We use industry-standard encryption for all transactions. Your data is never sold to third parties. We retain information only as long as necessary to maintain your account and fulfil legal obligations in supported regions. Access requests and corrections
can be submitted through our support team.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
EDITORIAL CLARITY
Why Your Privacy Is Secure Here
Encryption Standard
All account data and payment details use 256-bit SSL encryption. Your DANA, OVO, GoPay and QRIS transactions are protected end-to-end.
No Third-Party Sales
We never sell or share your personal information with advertisers or data brokers. Your account stays yours alone.
Regular Audits
Our security team conducts quarterly reviews of data handling practices. We stay current with Indonesian privacy standards.
Transparent Logging
Every access to your account is logged. You can request a full activity report anytime through your account settings.
Payment Partner Vetting
DANA, OVO, GoPay and QRIS providers meet our security requirements. We audit their compliance annually.
Incident Response
If a breach occurs, we notify affected users within 24 hours and provide guidance on account protection steps.
SIDE BY SIDE
Our Privacy Stance vs. Industry Norms
Cookie Transparency
We list every tracking cookie on our site. You can disable non-essential cookies without losing account access.
Payment Privacy
DANA, OVO, GoPay and QRIS details are never stored on our servers. We use tokenization for recurring transactions.
User Rights
You can request a data export, correction or deletion anytime. We process requests within 14 days.
Third-Party Access
We share data only with payment processors and legal authorities when required. No marketing partners ever.
Policy Updates
We notify you 30 days before any privacy policy change. You can opt out of new terms by closing your account.
Indonesia Compliance
Our practices align with Indonesian data protection law. We support regional privacy requests in full.
What Defines Our Privacy Approach
Account Ownership
Your account is yours alone. We never access your DANA, OVO, GoPay or QRIS wallet without explicit permission.
Minimal Collection
We ask only for information needed to verify your identity and process payments. No unnecessary data requests.
Transparent Practices
This policy explains exactly what we collect, how we use it and who can access it. No hidden clauses.
Secure Infrastructure
Our servers are hosted in compliant data centres with redundant backups. Your data is protected 24/7.
User Control
You control your privacy settings. Adjust notification preferences, data sharing and cookie use anytime.
Legal Clarity
We explain your rights under Indonesian law. You can request data access, correction or deletion at any time.
Privacy Policy Questions Answered
We use tokenization so your payment credentials are never stored on our servers. Each transaction is encrypted with 256-bit SSL. Payment processors handle the actual card or wallet data, not bcawin.
No. We never sell, rent or share your data with advertisers, data brokers or marketing companies. We share information only with payment processors and legal authorities when required by Indonesian law.
We retain your data while your account is active plus 12 months after closure. After that, we delete it permanently. You can request earlier deletion anytime through your account settings.
We notify all affected users within 24 hours with details of what was accessed and steps to protect your account. We also report to relevant Indonesian authorities and provide free credit monitoring if needed.
Yes. Request a full data export through your account settings or contact our support team. We'll provide everything we hold about you within 14 days, including login history and transaction records.
We use essential cookies for account security and session management. Non-essential tracking cookies are optional. You can disable them in your privacy settings without losing access to your account or lobby.
You can request account deletion anytime. We'll remove your personal data within 30 days, except records we must keep for legal compliance or fraud prevention in supported Indonesian regions.