bolakuPrivacy Policy

This page describes what we collect when you use bolaku and how we keep that data protected across all our services. We operate in supported jurisdictions across Indonesia and elsewhere where local law permits, and our privacy practice reflects the regions we serve.

We understand that your personal data is sensitive. When you sign up for bolaku, verify your identity through KYC, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or banking partners like mobile banking, local payment, online payment, and e-wallet, or follow football tournaments like Liga 1 and Piala AFF, you're trusting us with information about who you are, where you are, and how you engage. Our policy sets out exactly what we collect, how we use it, who we share it with, and what rights you have.

We're committed to transparency. Everything described below reflects our actual practice — no hidden processing, no unexpected third parties, no data sales. If you have questions about how we handle your data, our support team is available through in-app chat during business hours.

What We Collect & How We Use It

We collect information in three categories. First, account data: your email address, name, date of birth, and phone number. These are required for account creation and comply with KYC regulations in the jurisdictions we serve. Second, identity verification documents: a government ID (passport, national ID, or driving licence) and proof of address. We collect these to comply with legal obligations and to prevent fraud. Third, transaction data: deposit amounts, withdrawal requests, payment method details (not full card numbers — we use tokenised payment processors), and timestamps. We also track your engagement across bolaku — logins, time spent on Liga 1 fixtures, live-dealer play, slots, or esports content.

We use this data for legitimate purposes. Account and identity data allow us to operate your account, verify your eligibility to use our services, and comply with anti-money-laundering regulations. Transaction data helps us process deposits and withdrawals, detect fraud, and respond to chargebacks. Engagement data powers our weekly cashback calculations, tier progression, and referral tracking — all of which are designed to reward your genuine participation on bolaku.

Our Third-Party Processors & Data Transfers

We don't operate bolaku in isolation. Our payment processing relies on third-party gateways that connect to DANA, e-wallet, mobile banking, local payment, online payment, and e-wallet networks, as well as mobile banking, local payment, online payment, and e-wallet. These processors see transaction details necessary to complete deposits and withdrawals. Our servers may sit in jurisdictions outside your home country — Indonesia, Singapore, or elsewhere — to ensure uptime and performance. This means your data may be transferred internationally. We use contractual safeguards to ensure those processors treat your data with the same care we do.

We also work with identity verification vendors who help us confirm your KYC documents. These vendors see your government ID and proof of address but don't store them permanently — they verify and report back. We never sell your data to third parties for marketing, advertising, or other commercial purposes outside bolaku's legitimate operation.

Cookies & Engagement Tracking

We use cookies to keep you logged in, remember your preferences, and track how you use bolaku. These are functional and analytical cookies — they help us understand traffic patterns during major events like Idul Fitri or Idul Adha, measure performance of our match schedule features, and detect abuse. We don't use cookies for targeted advertising outside bolaku. You can disable cookies in your browser, but doing so may impair your account access or make features unavailable.

Data Retention, Security & Your Control

We retain your account data for as long as your account is active, plus a reasonable period afterward to comply with legal obligations (typically 5–7 years for financial records). Transaction records are kept for audit and anti-fraud purposes. You can request account deletion, and we'll remove your data except where law requires us to keep it (tax records, anti-money-laundering trails).

Our security infrastructure uses industry-standard encryption. All connections to bolaku use SSL/TLS. Your password is hashed, never stored in plain text. We don't store full payment card details — payment processors handle that. If you suspect unauthorised access to your account, you can reset your password immediately in settings or contact support. We recommend enabling two-factor authentication for an extra security layer.

Data deletion request

Contact our support team with your account email. We'll verify your identity and process the request within 30 days where law permits.

Correction of inaccuracies

Update your account details directly in settings, or ask support to correct KYC information if identity documents need re-verification.

Data access

Request a copy of all data we hold about you. Support will compile it in a readable format within the required timeframe.

Jurisdiction-specific rights

Residents in certain regions have additional rights under local privacy law. We comply with those requirements automatically.

Our Commitments & Support Contact

We don't use your data to build profiles for third-party sale or manipulate your engagement. We don't share your KYC documents with anyone except identity vendors during verification. We don't sell your contact details to marketing companies. Our loyalty rewards — weekly cashback, referral bonuses, tier progression — are based on your actual activity on bolaku, not on data profiling or manipulation.

If you have concerns about how we handle your privacy, or if you believe we've misused your data, reach out to our support team through in-app chat. We respond during business hours in both Indonesian and English. If you're in Jakarta, Surabaya, Bandung, Medan, or elsewhere in our service region, the same privacy standards apply. Your data is protected the same way regardless of where you access bolaku from.

This policy may be updated when regulations change or when we introduce new services. We'll notify you of material changes and give you time to review before they take effect. Your continued use of bolaku after a policy update means you accept the changes.