bolasakti Privacy Policy

This page describes what we collect when you use bolasakti and how we keep that data protected. When you create a bolasakti account, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, or your bank, or log into our app on Android or iOS, you share certain information with us. We collect this data only to verify your identity, process your payments, prevent fraud, and comply with applicable law. We don't sell your data to advertisers or third parties unrelated to your account and gaming experience.

Our privacy practices are built around transparency. We explain what we collect, where it goes, how long we keep it, and what rights you have. Your payment credentials never sit on bolasakti servers—your bank or e-wallet provider handles that. Your gaming history, account balance, and personal details are encrypted end-to-end. You can request a complete copy of all data we hold about you at any time, and we'll provide it within five business days.

The sections below detail our collection practices, third-party processors, your rights, and how to contact us with privacy questions. If anything is unclear, contact our team at [email protected]

What data we collect and how we use it

Account information

We collect your email address or phone number, full name, date of birth, and national ID number during account creation. This information is used for Know Your Customer (KYC) verification, which is required by law to prevent fraud and money laundering. We also collect a photo of you holding your ID (taken on your phone) to confirm your identity matches the document.

Your contact information (email and phone) allows us to send account notifications, withdrawal confirmations, and support responses. You can adjust notification frequency in your account settings on mobile at any time.

Gaming and transaction data

We record every game you play, every bet you place, every deposit, and every withdrawal. This includes the date, time, amount, outcome, and which game or market you engaged with. We retain this data for seven years to resolve disputes, prevent fraud, and meet regulatory requirements. During Idul Fitri, Idul Adha, Imlek, and other peak periods, our servers log higher volume, but all data is encrypted and stored securely.

Your account balance and transaction history are visible on your bolasakti dashboard. You can export your full history at any time for your personal records or tax purposes.

Technical and device data

When you access bolasakti on your Android phone or iOS browser, we log your IP address, device type, operating system, and app version. This helps us diagnose connection issues, prevent account takeovers, and optimise performance on different devices. We also log which features you use (deposits, withdrawals, game launches) to understand usage patterns and improve user experience.

Payment and verification data

We never store your bank account number, card number, e-wallet credentials, or PIN. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or direct bank transfer, you're redirected to your bank or e-wallet app. We receive only a confirmation that the transaction succeeded—not your credentials. The same applies to withdrawals; your money returns to your original deposit source without us ever handling your sensitive banking details.

How we use your data

Our primary uses for your data are: identity verification (KYC compliance), fraud prevention, payment processing, customer support, and regulatory reporting. We don't use your data for marketing to third parties. We don't build advertising profiles. We don't sell lists of email addresses or phone numbers.

We may contact you via email or SMS to confirm withdrawals, alert you to account activity, or notify you of changes to our terms. You control notification frequency in Settings.

Third-party processors and data sharing

We work with third parties only when necessary. Our payment processors (e-wallet, mobile banking, local payment, online payment, e-wallet, and your bank) receive basic transaction details to confirm deposits and withdrawals. We use cloud-hosting providers to store encrypted data. We work with ID verification services that scan your government ID and take your selfie—these services run on your phone and don't store data on their servers after verification completes.

We do not share data with casinos, sportsbooks, or other gaming operators. We do not share data with data brokers, marketing firms, or advertisers. We may share data with law enforcement or regulators only if required by valid legal process (court order, regulatory request).

Payment processors

mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking receive transaction data only—not your personal ID or account balance.

Cloud hosting

Our servers may be located outside Indonesia. All data is encrypted regardless of server location.

ID verification services

Third-party ID scanning happens on your device; no biometric data is stored on our servers after verification.

Support tools

We use secure support software to handle your queries. Support agents in Jakarta, Surabaya, Bandung, and elsewhere access only the data you share in messages.

Cookies and tracking

We use cookies to keep you logged in, remember your preferences (like video quality and notification settings), and track website traffic. Cookies are small files stored on your phone or browser. You can clear cookies anytime in your browser settings; you'll simply need to log in again.

We don't use cookies to track you across other websites. We don't use third-party analytics cookies that identify you personally. We use basic analytics (page views, session length) to improve bolasakti's speed and usability—but this is aggregated data, not linked to your account.

Your rights on bolasakti

You can access, update, or delete your personal data anytime. Log into your bolasakti account on mobile, go to Settings, and update your email, phone, or contact preferences. To request a full data export or deletion of your account, contact our support team.

We will provide a complete copy of all data we hold about you within five business days of your request. This includes your account details, gaming history, deposits, withdrawals, and any support messages.

You can request deletion of your account. If you do, we'll remove your personal data after we've resolved any outstanding disputes or legal obligations (e.g., regulatory reporting). We may retain anonymised gaming statistics for seven years as required by law.

Data security and encryption

All connections between your phone or browser and our servers use TLS 1.3 encryption. Your personal data, gaming history, and account balance are encrypted at rest using AES-256. We don't store passwords—we store only encrypted password hashes. If you forget your password, you reset it via email or SMS; we never email your password to you.

We conduct regular security audits and penetration testing to identify vulnerabilities. If we discover a data breach affecting your account, we'll notify you by email within 24 hours.

Data retention

We keep your KYC data (name, ID, photo) as long as your account is active, plus seven years after closure (to resolve disputes and meet regulatory requirements). We retain gaming and transaction history for seven years. We keep support messages and complaint logs for five years. After these periods, we delete or anonymise the data.

Contact us about privacy

If you have questions about how we use your data, request a data export, or want to delete your account, contact us at [email protected]We respond within five business days. For urgent privacy concerns, mark your subject line "URGENT."

You can also reach our support team through your bolasakti account (in-app chat available 24/7 in Indonesian and English).

Summary and your privacy commitment

We at bolasakti prioritise your privacy. We collect only the data necessary to verify your identity, process your payments, and prevent fraud. We don't sell your data, don't build marketing profiles, and don't track you across other websites. Your banking credentials stay with your bank or e-wallet. Your gaming history is encrypted. You can export or delete your data anytime.

This privacy policy reflects our current practices as of the publication date shown below. We may update it to reflect changes in our services or legal requirements. We'll notify you by email if we make material changes. Your continued use of bolasakti after such notification means you accept the updated policy.

If you're unsure whether any of our practices align with your expectations, ask us. Our privacy team is responsive and transparent. We want you to feel confident that your account data on bolasakti is secure, private, and used only for legitimate purposes.