Reference

How We Protect Your Privacy at bcltoto

We collect only what we need to run your account, process your DANA, OVO or GoPay transactions, and keep your wallet secure.

Account Data ProtectionPayment Info HandlingYour Rights ExplainedCookie PracticesRetention Limits

Browse the Lobby Read FAQ

What This Privacy Policy Covers

bcltoto Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

This policy applies to every interaction you have with bcltoto — from account creation through to withdrawal requests. When you register, we ask for basic identification details: your name, email address, phone number, and date of birth. These allow us to verify your identity and keep

1
your account safe from unauthorised access. When you fund your wallet via DANA, OVO, or GoPay, we receive a transaction reference and the amount sent; we do not store your e-wallet PIN or full payment credentials on our servers. We also collect device-level data such as
2
your browser type, operating system, screen resolution, and IP address. This helps us detect unusual login patterns and flag potentially compromised sessions before they cause harm. If you contact our support team through live chat or email, we retain the conversation transcript so we can reference
3
it if you raise a follow-up. We do not sell or rent your personal information to third parties for marketing. Data sharing occurs only where necessary: with payment processors to complete your deposit or withdrawal, with security partners who help us monitor fraud, or where disclosure
4
is required by applicable law in eligible regions. Availability of our services depends on local law and where access is permitted.

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

PRIVACY HELP CHANNELS

How to Reach Us About Your Data

If you have a question about what we store, want to request a copy of your data, or need something corrected, reach out through any of the channels below. Our team handles privacy-related queries with priority so you are never left waiting without clarity on your own information.

DATA HANDLING PRACTICES

How We Store, Secure, and Manage Your Information

We treat your information as if it were our own — meaning we apply multiple layers of protection and keep only what serves a clear operational purpose. Below are the specific practices that shape how your data moves through our systems, from the moment you create an account to the day you ask us to remove it.

Encryption at Rest and in Transit

All personal data is encrypted using SSL during transmission between your device and our servers. Stored data sits behind encrypted databases accessible only to authorised internal systems. Your DANA, OVO, or GoPay transaction references are tokenised so raw payment details never persist in plain text.

Cookie Usage

We use session cookies to keep you logged in and analytics cookies to understand how you navigate the lobby. No advertising cookies are shared with third-party ad networks. You can clear cookies from your browser settings at any time; doing so will simply require you to log in again on your next visit.

Account Security Measures

Each login attempt is checked against your usual device fingerprint and IP range. If something looks unusual — a new city, a different device — we send a verification code to your registered phone number before granting access. This keeps your wallet and personal details safe even if credentials are compromised.

Data Retention Policy

We keep your account data for as long as your account is active plus a reasonable period after closure to comply with applicable legal obligations. Transaction records tied to DANA, OVO, or GoPay deposits and withdrawals are retained as required by financial regulations in eligible regions.

Third-Party Sharing Limits

Your information is shared only with payment processors handling your deposits, security vendors running fraud detection, and legal authorities where mandated by law. We never sell personal data. Partners who process data on our behalf are contractually bound to handle it under the same protective standards we apply internally.

Your Right to Access and Delete

You can request a full copy of the personal data we hold on you at any time through live chat or email. If you want specific records removed — such as old support transcripts or outdated contact details — submit a deletion request and we will action it unless legal retention rules apply.

Common Questions About Your Data and Privacy

We compiled these based on the actual questions our support team receives about data handling, account privacy, and payment information. If your concern is not covered here, reach out via live chat or email and we will address it directly.

We collect your name, email address, phone number, and date of birth during registration. This information is used to verify your identity, secure your account, and ensure we can reach you if there is unusual activity on your wallet or login history.

No. When you deposit through DANA, OVO, or GoPay, the transaction is processed by the e-wallet provider directly. We receive only a transaction reference number and the amount credited. Your PIN and full payment credentials never touch our servers.

Yes. Contact our support team via live chat or email with a subject line mentioning your data request. After verifying your identity through your registered email and username, we will compile and send you a summary of the personal data linked to your account.

Submit a deletion request through live chat or email. We will remove personal data that is not subject to mandatory legal retention. Transaction records required by financial regulations in eligible regions may be retained until the legal holding period expires.

Only payment processors handling your DANA, OVO, or GoPay transactions, security vendors running fraud checks, and legal authorities where disclosure is required by applicable law. We do not sell or rent your information to advertisers or unrelated third parties.

We use session cookies to maintain your login and analytics cookies to understand navigation patterns. No third-party advertising cookies are deployed. You can disable cookies in your browser settings; this will log you out and require re-authentication on your next visit.

We retain basic account records for a reasonable period after closure to meet legal and financial reporting requirements in eligible regions. Once that period passes, remaining personal data is securely deleted from our systems unless a specific legal hold applies.

If our system flags an unusual device or IP address, we pause the login and send a verification code to your registered phone number. Access is only granted after you confirm the code. This prevents unauthorised entry even if someone else has your password.

Game sessions may pass a session token and your display name to the provider so the game loads correctly. We do not share your full personal profile, payment details, or contact information with any game studio. Providers see only what is needed to run the game round.

We may update this policy when our practices evolve or when regulations in eligible regions change. When updates occur, we post the revised version on this page and notify active account holders via email or an in-account message so you can review the changes.

How We Protect Your Privacy at bcltoto

How to Reach Us About Your Data

How We Store, Secure, and Manage Your Information

Encryption at Rest and in Transit

Cookie Usage

Account Security Measures

Data Retention Policy

Third-Party Sharing Limits

Your Right to Access and Delete

Common Questions About Your Data and Privacy

01 What personal data does bcltoto collect when I create an account?

02 Does bcltoto store my DANA, OVO, or GoPay PIN?

03 Can I request a copy of all data you hold about me?

04 How do I ask bcltoto to delete my personal information?

05 Who else can see my data?

06 What cookies does bcltoto use and can I disable them?

07 How long does bcltoto keep my account data after I close my account?

08 What happens if bcltoto detects a suspicious login on my account?

09 Does bcltoto share my data with game providers like Pragmatic Play or Evolution?

10 Will this privacy policy change, and how will I know?

Related pages