bolakuPrivacy Policy
This page describes what we collect when you use bolaku and how we keep that data protected. We take your privacy seriously and follow data protection principles across all our operations—whether you are depositing via DANA in Jakarta, withdrawing through e-wallet in Surabaya, or playing our slot games from anywhere in our service area.
Our privacy commitments are straightforward: we collect only what we need, we share data only when required by law or for essential service delivery, and we do not sell your information to third parties for marketing. This policy applies to all bolaku users and covers your account, your gameplay, your payment history, and any communications you have with our support team.
Please read this policy carefully. If you have questions about how we handle your data, contact our support team via email or live chat.
What data we collect on bolaku
We collect data in several categories:
- Account information: Your email, password, full legal name, date of birth, and phone number are required at registration. These are stored securely and used only for account verification and account recovery.
- Identity and verification data: When you deposit real money, we collect government-issued ID images, address proof documents, and sometimes a selfie. This is required by law to prevent fraud and money laundering. We do not use these for any purpose other than verification.
- Payment data: We record every deposit and withdrawal transaction, including the payment method used (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), the amount, the date, and the transaction ID. We do not store full payment card numbers or wallet passwords.
- Gameplay data: We track which games you play, your wagers, your winnings, and your account balance. This data is used to calculate tournament scores, detect unusual patterns (for security), and improve our service.
- Device and access logs: We record your IP address, browser type, device type, and the pages you visit on bolaku. This helps us prevent fraud and diagnose technical issues.
- Communication records: If you contact our support team via email, live chat, or any other channel, we keep copies of those messages for record-keeping and service quality.
We collect this data because it is necessary to operate bolaku safely and compliantly. Account information lets us run your account. Identity data lets us comply with anti-fraud regulations. Payment data lets us process deposits and withdrawals. Gameplay data lets us run tournaments and detect suspicious activity.
How we use your data on bolaku
We use your data for the following purposes:
- Account management: Creating and maintaining your bolaku account, authenticating you at login, recovering your password if needed, and updating your account settings.
- Payment processing: Processing your deposits and withdrawals, coordinating with payment providers (mobile banking, local payment, online payment, etc.), and reconciling transactions.
- Legal and compliance: Verifying your identity, preventing fraud, detecting money laundering, responding to law enforcement requests, and maintaining audit records.
- Tournament and promotion: Calculating your tournament leaderboard scores, determining tournament prize eligibility, and notifying you of results or promotions you have opted into.
- Technical support: Diagnosing technical issues, troubleshooting game disconnections, and improving platform stability.
- Security monitoring: Detecting unauthorized access attempts, protecting against attacks, and flagging suspicious account activity.
We do not use your data for marketing emails unless you have explicitly opted in to marketing communications. We do not sell your data to third parties for commercial purposes. We do not use your gameplay data to create psychological profiles for behavioral targeting.
Your data on bolaku belongs to you. We hold it in trust to operate your account and comply with law. We do not monetize it.
How we share your data on bolaku
We share your data only when necessary:
- Payment providers: When you deposit via e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, or your bank (local payment, online payment, e-wallet, mobile banking), we provide those providers with your name, amount, and transaction ID. They use this data to process your payment and prevent fraud.
- Identity verification services: We may use third-party verification services to check your government ID and address. These services operate under strict confidentiality agreements.
- Law enforcement: If we receive a valid legal request (court order, warrant, or regulatory demand), we will disclose your data as required. We will notify you of such requests unless prohibited by law.
- Internal teams: Our support, compliance, and technical teams have access to your data as needed to perform their roles. All team members are bound by confidentiality.
We do not share your gameplay data with third parties for marketing or analytics. We do not share your identity data with other gaming platforms or external databases.
Your rights on bolaku
- You may request a copy of all data we hold about you.
- You may request correction of inaccurate data (e.g., a misspelled name).
- You may request deletion of your account and associated data, subject to legal retention requirements.
- You may opt out of marketing emails at any time by clicking the unsubscribe link in our messages.
- You may withdraw consent from non-essential data processing (though this may limit service functionality).
Data security on bolaku
We protect your data using industry-standard encryption and security practices. Your password is hashed (not stored in plain text) using secure algorithms. Your account session is encrypted using HTTPS protocol. Your identity documents are stored in encrypted databases with restricted access. Payment transactions are processed through PCI-compliant payment gateways.
However, no system is perfectly secure. We cannot guarantee absolute protection against determined hackers or unforeseen breaches. We do monitor for security threats, log suspicious activity, and investigate potential breaches promptly. If we discover that your data has been compromised, we will notify you within a reasonable timeframe.
Your bolaku password is your responsibility. Do not share it with anyone. If you suspect your account has been accessed without permission, change your password immediately and contact support.
Cookies and tracking on bolaku
We use cookies (small text files stored on your device) to remember your login session, track your preferences, and improve your experience on bolaku. These cookies are stored on your device and do not contain sensitive data like passwords or payment information. You can disable cookies in your browser settings, though this may affect your bolaku experience (for example, you may need to log in more frequently).
We also use analytics tools to understand how players use bolaku—which games are popular, where players encounter technical issues, and how long sessions typically last. This data is anonymized (not linked to your name or account) and is used only to improve our service.
How long we keep your data on bolaku
We retain your data for as long as your bolaku account is active, plus a period afterward for legal and compliance reasons:
- Active account data: As long as your account exists.
- Transaction history: We retain deposit and withdrawal records for at least five years to comply with financial regulations and tax requirements.
- Identity documents: We retain copies for at least five years for anti-money-laundering compliance. After this period, we delete or anonymize them.
- Support communications: We keep email and chat logs for at least one year for dispute resolution and training purposes.
- Deleted account data: If you delete your bolaku account, we delete non-essential personal data within thirty days, but retain transaction records and identity data as required by law.
If you request data deletion and no legal obligation requires us to retain your data, we will comply within thirty days.
Data jurisdiction and transfers
Our bolaku servers are located in multiple jurisdictions, including countries outside Indonesia. When you use bolaku, your data may be processed or stored in any of these locations. By using bolaku, you consent to this transfer. We apply the same data protection standards to all servers regardless of location.
If you are in the EU or a jurisdiction with strict data protection laws, we will comply with those laws (including GDPR if applicable). If you are in Indonesia or another supported region, we comply with applicable local regulations.
Changes to this policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by email or by posting a notice on bolaku. Your continued use of bolaku after changes take effect constitutes acceptance of the updated policy. We recommend reviewing this policy regularly to stay informed of how we handle your data.
Contact us about privacy on bolaku
If you have questions about this policy, want to exercise your rights, or need to report a data breach, contact our privacy team:
- Email: [email protected] (include "Privacy" in the subject line)
- Live chat: Available during Jakarta business hours on the bolaku website
- Mailing address: Contact us via the support form in your bolaku account dashboard for our postal address
We will respond to data access requests, deletion requests, and privacy concerns within fourteen days of receipt. Please provide as much detail as possible when contacting us, including your bolaku account email or account ID, so we can locate your data quickly.