bolasaktiPrivacy Policy

This page describes what we collect when you use bolasakti and how we keep that data protected. We collect personal information during account creation and verification, payment processing, and gameplay to fulfil our service obligations, comply with anti-money-laundering regulations, and protect your account from fraud. Our commitment is to store your data securely, share it only with trusted partners who help us operate bolasakti, and respect your rights to access, correct, and request deletion of your information.

We understand that your privacy is fundamental. We use industry-standard encryption for data at rest and in transit, maintain access controls on our servers, and conduct regular security reviews. Our payment partners (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) and identity-verification providers work under data-protection agreements that ensure your information remains confidential and is used only for the specific purposes you authorised.

Our services are available only where local law permits. By using bolasakti, you acknowledge that you have read this privacy policy and agree to the data practices described here. If you have questions about how we handle your data, contact our support team through bolasakti.id.

What data we collect on bolasakti

We collect information at several points in your bolasakti journey. When you create an account, we collect your email address, full name, date of birth, and a secure password. We use your email as your account recovery point and as the channel for all official bolasakti notifications. Your password is hashed using industry-standard algorithms and never stored in plain text on our servers.

During identity verification—which is mandatory before real-money play—we collect your government-issued identification number, proof of residential address, and sometimes phone number. We use this information to verify your identity, confirm you meet your jurisdiction's eligibility requirements, and comply with anti-money-laundering and counter-terrorist-financing regulations. Our identity-verification partners process these documents securely and delete them after verification is complete unless we are required to retain them by law.

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), we collect transaction details—amount, timestamp, payment method—to match the deposit to your account and maintain a clear audit trail. Our payment processors may collect additional information required by their compliance obligations. When you withdraw, we record your destination account details to ensure funds reach the correct recipient.

During gameplay across all bolasakti categories (sportsbook, live-dealer, slots, esports, number games), we collect data about your wagers, selections, session duration, and results. We use this data to calculate payouts, track your activity for fraud detection, and compute recurring rewards such as our Weekly Cashback programme. Your account statement reflects all this activity and is available for download at any time.

How we use your data on bolasakti

We use your data for the following purposes:

• Account administration: We use your email and identity information to manage your account, send notifications, and respond to your support requests.
• Payment processing: We use your banking and payment details to process deposits, withdrawals, and calculate fees. Our payment partners handle the actual fund transfers.
• Fraud prevention: We analyse your activity patterns to detect and prevent fraudulent transactions, account takeovers, and money laundering. We may block suspicious withdrawals pending investigation.
• Regulatory compliance: We use your data to comply with anti-money-laundering, counter-terrorist-financing, and other legal requirements applicable to bolasakti.
• Bonus and reward calculation: We track your qualifying activity to calculate cashback rewards and other promotional credits.
• Platform improvement: We may use anonymised, aggregated data to understand user trends and improve bolasakti's performance and features.

We do not sell your personal data to unaffiliated third parties for marketing or any other purpose. We do share data with payment processors, identity-verification providers, and fraud-detection services strictly for the purposes described above and only under contractual agreements that require them to keep your data confidential.

Third-party processors we work with on bolasakti

Our infrastructure and service partners include:

• Payment processors: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and Indonesian banks (online payment, e-wallet, mobile banking, local payment) process your deposits and withdrawals. These entities are bound by their own privacy policies and regulatory requirements.
• Identity-verification providers: Third-party services verify your government-issued documents and proof of address. They delete verification records after the process completes unless legally required to retain them.
• Fraud-detection and analytics services: We use third-party tools to monitor account activity and detect suspicious patterns. These services operate under strict data-use agreements.
• Cloud infrastructure providers: Our servers may be located outside your jurisdiction. All data is encrypted in transit and at rest, and we choose providers with strong security certifications.

We maintain current data-processing agreements with all third parties that outline their obligations to keep your data confidential and use it only for authorised purposes. You can request details about any third party's handling of your data by contacting our support team.

Your rights regarding data on bolasakti

You have rights over your personal data stored on bolasakti:

• Access: You can request a complete copy of all personal data we hold about you. We will provide this in a portable, machine-readable format within a reasonable timeframe.
• Correction: If any of your information is inaccurate or incomplete, you can request that we correct it. You can update some information directly in your account settings.
• Deletion: You can request deletion of your personal data, subject to legal obligations to retain records for regulatory compliance. We will retain data for as long as necessary to fulfil your account and satisfy legal requirements.
• Restrict processing: You can request that we limit how we use your data for specific purposes.
• Data portability: You can request that we transfer your data to another service provider in a structured format.

To exercise any of these rights, contact our support team or email the address specified in our legal notice on bolasakti.id. We will verify your identity and respond to your request within the timeframe required by applicable law—typically within thirty days.

Cookies and tracking on bolasakti

We use cookies and similar tracking technologies on bolasakti to improve your experience, remember your preferences, and protect against fraud. Essential cookies are required for bolasakti to function—these include session cookies that keep you logged in. Functional cookies remember your preferences (language, notification settings). Analytical cookies help us understand how users interact with bolasakti; these data are anonymised and aggregated. We do not use cookies to track you across other websites.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from using bolasakti. Disabling other cookies may reduce functionality but bolasakti will still work. We do not sell cookie data to third parties.

Data retention on bolasakti

We retain your personal data for different periods depending on the category:

• Account information: We retain your name, email, and identity verification records for as long as your account is active, plus a retention period after account closure for dispute resolution and regulatory compliance.
• Transaction records: We retain deposit, withdrawal, and gameplay records in accordance with anti-money-laundering regulations—typically for five to seven years after the transaction.
• Support communications: We retain emails and support tickets for two to three years to help resolve disputes and improve our support process.
• Marketing communications: If you have opted in to receive promotional emails from bolasakti, we retain your email address until you unsubscribe.

We delete or anonymise data after these retention periods unless we are required by law to retain it longer. If you request deletion of your account, we will initiate the deletion process and remove your data according to the timeframes above.

Contact us about your bolasakti data

If you have privacy questions, wish to exercise your data rights, or suspect a data breach, contact our support team through bolasakti.id. You can also email our data protection officer or submit a data-access request through our in-platform form. We aim to respond to all privacy-related enquiries within fourteen business days. For legal or regulatory enquiries about your data, mark your message as "DATA PROTECTION" to ensure it reaches the appropriate team.

We take your privacy seriously and are committed to transparent, fair practices regarding your data. This policy is subject to change as bolasakti evolves; we will notify you of material changes via email and update the policy on bolasakti.id. Your continued use of bolasakti after such updates constitutes your acceptance of the revised policy.