bsk21 Privacy Policy

bsk21 ("we", "us", "our", "Platform") is committed to protecting the privacy of everyone who visits or holds an account on the bsk21 website at https://bsk21.net. This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you as a data subject.

This Policy applies to all personal data collected through the bsk21 website, mobile-optimized site, live chat function, email correspondence, and any other interaction you have with the bsk21 platform. By registering an account or continuing to use the bsk21 platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents.

The following definitions apply throughout this Privacy Policy:

• Personal Data — any information relating to an identified or identifiable natural person ("data subject"), including name, identification number, contact details, location data, and online identifiers.
• Processing — any operation performed on personal data, including collection, storage, use, disclosure, alteration, and deletion.
• Data Controller — bsk21, the entity that determines the purposes and means of processing personal data collected through the platform.
• Data Processor — a third party that processes personal data on bsk21's behalf and under its documented instructions (e.g., payment processors, KYC providers, cloud hosting providers).
• Consent — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• Account — a registered player account on the bsk21 platform, identified by a unique username and password combination.
• KYC — Know Your Customer; the identity verification process bsk21 applies to all accounts prior to processing withdrawal requests.
• Cookie — a small text file placed on your device by the bsk21 website to enable core functionality, analytics, and session management.
• Platform — the bsk21 website at https://bsk21.net, including all pages, game interfaces, live chat, and associated services.

bsk21 collects personal data across several categories. The table below sets out each category, the specific data points within it, and the primary reason for collection:

bsk21 collects personal data through the following channels:

3.1 Directly From You

The majority of personal data we hold is provided directly by you during account registration, the KYC document submission process, deposit and withdrawal requests, live chat and email support interactions, and when you respond to promotional surveys or opt into marketing communications.

3.2 Automatically Via the Platform

When you visit and interact with the bsk21 website, our servers automatically record technical data including your IP address, device identifiers, browser type, and session activity. This data is collected via server logs, session cookies, and analytics tools operated by bsk21. No third-party advertising trackers are embedded on the bsk21 platform.

3.3 From Third-Party Service Providers

bsk21 may receive data about you from third-party service providers engaged to support platform operations, including:

• Payment processors — confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to verify and reconcile deposit and withdrawal transactions.
• KYC verification providers — identity verification confirmation from our certified KYC partner when your submitted documents are processed through an automated or semi-automated verification workflow.
• Fraud and risk screening providers — risk signals and device fingerprint data used to identify suspicious login patterns or unusual transaction behavior.
• Game providers — session and wager outcome data from licensed game studios including Evolution Gaming and Pragmatic Play Live, used to reconcile game round results and investigate disputes.

bsk21 processes your personal data for the following clearly defined purposes:

• Account creation and management: To register your account, maintain your profile, authenticate your login sessions, and manage account settings including responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Identity verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that your payment methods are registered in your own name — all mandatory requirements prior to withdrawal processing.
• Payment processing: To receive your deposits from Indonesian bank accounts and e-wallets and to credit winnings and withdrawal amounts to your nominated payment method accurately and promptly.
• Anti-money laundering (AML) compliance: To monitor transaction patterns for indicators of money laundering, terrorist financing, or other financial crime, in accordance with international AML standards.
• Fraud prevention and platform security: To detect, investigate, and prevent unauthorized account access, bonus abuse, collusion, and other fraudulent or prohibited activity on the platform.
• Customer support: To respond to your support queries, resolve disputes, process complaints, and maintain accurate records of your interactions with the bsk21 support team.
• Responsible gaming monitoring: To identify behavioral patterns that may indicate problem gambling (e.g., rapid deposit cycling, large session durations, self-exclusion history) and to proactively reach out with responsible gaming resources where appropriate.
• Legal compliance: To comply with applicable laws, court orders, regulatory requests, and obligations arising under any jurisdiction in which bsk21 operates or in which you are resident.
• Platform improvement and analytics: To understand how players navigate and use the platform, identify technical issues, and prioritize product improvements — using aggregated and, where possible, anonymized data.
• Marketing and promotions: To send you information about bsk21 promotions, bonuses, and seasonal offers — but only where you have given explicit consent and only to the email address registered on your Account. You may withdraw consent at any time by contacting [email protected].

bsk21 processes personal data on one or more of the following legal bases, depending on the category of data and the purpose for which it is processed:

• Contractual necessity: Processing that is necessary to perform the contract between you and bsk21 — specifically the account agreement you enter into at registration. This covers account management, payment processing, KYC, and game operation.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in furtherance of bsk21's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, and internal analytics. bsk21 conducts and documents a balancing test before relying on this basis.
• Consent: Processing that is carried out only where you have provided a clear, voluntary, and informed opt-in — specifically, the sending of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

bsk21 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only in the following limited and controlled circumstances:

6.1 Service Providers (Data Processors)

We share personal data with carefully selected third-party service providers who process data strictly on our behalf and under documented data processing agreements. These providers include our KYC verification partner, fraud screening and risk analytics provider, cloud hosting infrastructure provider, and live chat platform operator. Each provider is contractually prohibited from using your data for any purpose beyond those specified by bsk21.

6.2 Payment Partners

To process deposits and withdrawals, bsk21 shares the minimum necessary financial data (account name, account number, transaction amount, and reference) with the relevant Indonesian bank or e-wallet provider. Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) are independent data controllers in respect of transactions processed through their own systems and are subject to their own privacy policies and Indonesian financial regulations.

6.3 Game Providers

Certain technical data (such as session identifiers and wager records) is shared with licensed game studios — including Evolution Gaming and Pragmatic Play Live — solely for the purpose of game delivery, round reconciliation, and dispute resolution. Game providers do not receive your identity documents, bank account details, or contact information.

6.4 Legal and Regulatory Authorities

bsk21 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other governmental bodies where required by a valid legal order, subpoena, court order, or applicable mandatory law. Where permitted, bsk21 will notify you of such disclosure. bsk21 will challenge any disclosure request it believes to be unlawful, overly broad, or disproportionate.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a material part of bsk21's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the resulting change to data controller at least 30 days before it takes effect, and you will have the right to close your Account and request data deletion prior to the transfer completing.

bsk21 retains personal data only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that ensures it cannot be reconstructed or re-identified. Backups containing personal data are subject to the same retention schedule and are purged on the same timeline as primary data stores.

bsk21 implements a layered security architecture to protect personal data against unauthorized access, disclosure, alteration, loss, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and our servers. Every page of the bsk21 platform is served over HTTPS; HTTP connections are automatically redirected.
• Encryption at rest for all personal data stored on bsk21's database infrastructure, using AES-256 encryption with regularly rotated key management.
• Salted password hashing using a modern hashing algorithm. bsk21 stores only the hashed form of your password — plain-text passwords are never written to disk or transmitted after initial creation.
• One-time password (OTP) two-factor authentication available for all Account holders, adding a second layer of login verification beyond the username and password.
• Automatic session time-out on inactive Account sessions, reducing the risk of unauthorized access on shared or unattended devices.
• Role-based access controls (RBAC) limiting internal staff access to personal data on a strict need-to-know basis. No bsk21 employee has unrestricted access to the full dataset of player personal data.
• Real-time intrusion detection and anomaly monitoring across all production infrastructure, with automated alerting for unusual login patterns, large transaction volumes, and other risk indicators.
• Regular third-party penetration testing of the bsk21 platform and infrastructure, with identified vulnerabilities remediated within defined SLA windows.

bsk21 uses cookies and similar technologies to enable core platform functionality, maintain your authenticated session, and collect aggregate analytics data to improve the platform. We do not use third-party advertising cookies or cross-site tracking technologies.

9.1 Cookie Categories

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in across page navigations, CSRF protection tokens, and load-balancer routing cookies. These cookies cannot be disabled without rendering the platform non-functional.
• Functional Cookies: Used to remember your stated preferences, such as preferred game lobby view, notification settings, and responsible gaming tool configurations. Disabling these cookies means your preferences will not be retained between sessions.
• Analytics Cookies: Used to collect aggregate, anonymized data about how players navigate the platform — which pages are most visited, average session length, and error occurrence rates. This data is used exclusively by bsk21's internal product team for platform improvement and is not shared with third parties.

9.2 Managing Cookies

You can control and delete cookies through your browser settings. Instructions for the most commonly used browsers are available on the browser developer's support pages (Chrome, Firefox, Safari, Edge). Please note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the bsk21 platform. Disabling analytics cookies will not affect your ability to play.

9.3 No Third-Party Ad Trackers

bsk21 does not embed Facebook Pixel, Google Ads tags, TikTok Pixel, or any comparable third-party advertising tracker on any page of the platform. Your on-site activity is not shared with social media or advertising platforms for the purpose of retargeting or behavioral advertising.

As a data subject, you hold the following rights in respect of your personal data held by bsk21. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verified request.

The bsk21 platform is strictly intended for adults aged 21 and over. bsk21 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the Account registration process, and documentary proof of age is required before any withdrawal is processed.

If bsk21 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated Account, return any remaining balance to the deposit source, and permanently delete all personal data associated with that Account from our systems. If you believe a minor has registered on the bsk21 platform using false information, please contact [email protected] immediately.

The bsk21 platform does not contain outbound links to third-party websites. All navigation within the bsk21 platform remains within the bsk21.net domain. However, certain game interfaces delivered by licensed providers (Evolution Gaming, Pragmatic Play Live) are rendered within embedded frames; the operation of these game environments is subject to the game provider's own privacy policy, a copy of which is available upon request from bsk21 support.

bsk21 accepts no responsibility for the privacy practices or data handling of any third-party service provider whose interface may be encountered in the course of using the platform. If you have concerns about how a specific game provider handles your data, please contact bsk21 support and we will clarify the applicable data processing arrangement.

bsk21 is an internationally operated platform. Personal data collected from players in Indonesia may be transferred to, stored on, and processed by servers located outside Indonesia. In all cases where personal data is transferred internationally, bsk21 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that applied within Indonesia.

Safeguards applied to international data transfers include: data processing agreements containing standard contractual clauses with all third-party processors; transfer only to service providers located in jurisdictions recognized as providing adequate data protection; and transfer impact assessments conducted prior to any new cross-border data sharing arrangement being established.

Personal data transferred to game providers (Evolution Gaming, Pragmatic Play Live) for live dealer game operation is limited to technical session data and does not include identity documents, bank account information, or full contact details. All such transfers are governed by data processing agreements aligned with international data protection standards.

bsk21 reviews and updates this Privacy Policy periodically to reflect changes in platform operations, applicable law, or data processing practices. Material changes — defined as changes that significantly affect how your personal data is used or your rights in relation to it — will be communicated to registered Account holders via email notification to the registered email address, with a minimum notice period of 14 days before the updated Policy takes effect.

Non-material updates (such as clarifications of existing practices, corrections of typographical errors, or additions that expand rather than restrict your rights) may be made without advance notice. The "Last Updated" date displayed at the top of this page always reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how bsk21 protects your personal data.

Your continued use of the bsk21 platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the updated terms. If you disagree with a material update, you may close your Account before the effective date by contacting [email protected], and your personal data will be handled in accordance with the deletion and retention obligations described in Section 7.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data bsk21 holds about you, please contact our support team through the following channels:

• Email: [email protected] — subject line "Privacy Policy Enquiry" or "Data Rights Request" — responses within 24 hours
• Live Chat: Available 24/7 directly from any page on the bsk21 platform — average first response under 5 minutes
• WhatsApp: +62 811 0000 2121 — Indonesian-speaking agents available around the clock (WIB, UTC+7)

Data rights requests (access, rectification, erasure, portability, objection) will be acknowledged within 5 business days and responded to in full within 30 calendar days. Where a request is complex or involves a large volume of data, bsk21 may extend this period by a further 30 days, in which case you will be notified of the extension before the initial 30-day period expires.