1. Introduction and Scope
This Privacy Policy applies to all personal data collected and processed by bola21 ("we," "us," "our") through our website at https://bola21.cam and any associated mobile applications or services (collectively, the "Platform"). By registering an account and using bola21 services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.
bola21 operates as an online gaming platform serving players in Indonesia. We are committed to handling your personal information with the highest standards of privacy protection, transparency, and security. This policy explains what information we collect, why we collect it, how we use it, and the choices you have regarding your personal data.
If you do not agree with the terms of this Privacy Policy, please discontinue use of the Platform immediately. For questions or concerns regarding this policy, please contact our Data Protection Officer at [email protected].
2. Information We Collect
2.1 Information You Provide Directly
When you register for a bola21 account, we collect the following personal information that you provide to us:
- Identity Information: Full legal name, date of birth, gender, and nationality as stated on your government-issued identification document (Indonesian KTP - Kartu Tanda Penduduk).
- Contact Information: Email address, phone number, and residential address.
- Account Credentials: Username and encrypted password for Platform access.
- Verification Documents: Copies of your Indonesian KTP, proof of address (utility bills, bank statements), and selfie photographs for identity verification (KYC) purposes.
- Financial Information: Bank account numbers, e-wallet account details, and payment method information for deposits and withdrawals.
- Communication Records: Content of your communications with our customer support team via live chat, email, or other channels.
2.2 Information Collected Automatically
When you use the bola21 Platform, we automatically collect certain technical and usage information:
- Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, device ID).
- Usage Data: Pages visited, games played, betting history, deposit and withdrawal transactions, session duration, click patterns, and navigation paths.
- Location Data: IP address, approximate geographic location derived from IP address, and time zone settings.
- Technical Logs: Server logs, error reports, API calls, and system performance data.
- Cookies and Similar Technologies: Information collected through cookies, web beacons, pixel tags, and local storage (see Section 8 for details).
2.3 Information from Third Parties
In limited circumstances, we may receive information about you from third-party sources:
- Payment Processors: Transaction confirmation, payment status, and fraud screening results from Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
- Identity Verification Services: Results from third-party identity verification and anti-fraud databases used to confirm your identity and prevent fraudulent account creation.
- Marketing Partners: If you arrive at bola21 through an affiliate or marketing partner, we may receive referral information and campaign tracking data.
3. How We Use Your Information
bola21 uses your personal information for the following legitimate business purposes:
3.1 Account Management and Service Delivery
- Create, maintain, and authenticate your bola21 account.
- Process your deposits, withdrawals, and internal account transfers.
- Enable you to participate in gaming activities including casino games, sports betting, and lottery draws.
- Track your gaming history, account balance, and transaction records.
- Provide customer support and respond to your inquiries.
3.2 Legal Compliance and Security
- Verify your identity and age to ensure compliance with legal requirements (21+ age restriction for Indonesian players).
- Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations applicable to online gaming operations.
- Detect, prevent, and investigate fraudulent activity, security breaches, terms violations, and other illegal behavior.
- Enforce our Terms and Conditions and protect the rights, property, and safety of bola21, our players, and the public.
- Respond to legal requests from law enforcement, regulatory authorities, or court orders.
3.3 Platform Improvement and Analytics
- Analyze usage patterns to improve Platform functionality, user experience, and game offerings.
- Conduct internal research and data analytics to optimize performance, identify trends, and develop new features.
- Test new products, services, and features before public release.
- Monitor Platform stability, uptime, and technical performance.
3.4 Marketing and Communications
- Send you promotional offers, bonus announcements, and marketing communications about bola21 services (with your consent where required by law).
- Provide personalized recommendations for games and betting markets based on your preferences.
- Notify you about important account updates, policy changes, and service announcements.
- Administer VIP loyalty programs, tournaments, and special events.
You may opt out of marketing communications at any time by adjusting your account preferences or clicking the unsubscribe link in emails. Transactional and service-related communications (account confirmations, security alerts, policy updates) cannot be opted out of while you maintain an active account.
4. Data Security and Protection
bola21 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:
4.1 Technical Security Measures
- Encryption: All data transmission between your device and our servers uses industry-standard 256-bit SSL/TLS encryption. Payment information and passwords are encrypted both in transit and at rest.
- Secure Infrastructure: Our servers are hosted in secure data centers with physical access controls, redundant power systems, fire suppression, and 24/7 monitoring.
- Firewall Protection: Multi-layered firewalls protect against external attacks, unauthorized access attempts, and distributed denial-of-service (DDoS) attacks.
- Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments on our systems regularly.
- Database Security: Personal data is stored in encrypted databases with access restricted to authorized personnel only. Database activity is logged and monitored.
4.2 Organizational Security Measures
- Access Controls: Strict role-based access policies ensure that only authorized employees can access personal data, and only to the extent necessary for their job functions.
- Employee Training: All staff members receive regular training on data protection principles, privacy regulations, and security best practices.
- Confidentiality Agreements: Employees and contractors with access to personal data are bound by strict confidentiality obligations.
- Incident Response Plan: We maintain a comprehensive incident response plan to quickly address any data breaches or security incidents.
While we employ robust security measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials and should notify us immediately if you suspect unauthorized access to your account.
5. Information Sharing and Disclosure
bola21 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:
5.1 Service Providers and Business Partners
We engage trusted third-party service providers to perform functions on our behalf, including:
- Payment Processors: Indonesian banks and e-wallet providers that process your deposit and withdrawal transactions.
- Identity Verification Services: Third-party KYC and fraud prevention vendors that verify your identity and screen for fraudulent activity.
- Game Providers: Licensed software providers who supply casino games, live dealer tables, and other gaming content on the Platform.
- Customer Support Tools: Cloud-based customer service platforms that help us manage support tickets and live chat communications.
- Analytics Providers: Services that help us analyze Platform usage and improve user experience.
All service providers are contractually required to protect your personal information, use it only for the specified purposes, and maintain confidentiality.
5.2 Legal Requirements and Protection of Rights
We may disclose your personal information when required by law or when we believe disclosure is necessary to:
- Comply with legal obligations, court orders, subpoenas, or government requests.
- Enforce our Terms and Conditions and other agreements.
- Protect the rights, property, or safety of bola21, our players, or the public.
- Investigate and prevent fraud, security breaches, or illegal activity.
- Respond to claims that content on the Platform violates third-party rights.
5.3 Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email and/or prominent notice on the Platform before your information becomes subject to a different privacy policy.
6. Data Retention and Deletion
6.1 Retention Periods
bola21 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:
- Active Accounts: Information is retained for the duration of your active account plus any required retention period for legal compliance.
- Closed Accounts: After voluntary account closure, personal data is retained for a minimum of 5 years to comply with financial record-keeping requirements, anti-money laundering regulations, and to resolve disputes or enforce agreements.
- Transaction Records: Deposit, withdrawal, and betting records are retained for 7 years as required by financial regulations.
- Marketing Communications: If you opt out of marketing emails, your email address is retained on our suppression list indefinitely to honor your opt-out request.
- Legal Obligations: If your information is subject to ongoing legal proceedings, investigations, or regulatory inquiries, retention is extended until resolution.
6.2 Data Deletion
After the applicable retention period expires, we securely delete or anonymize your personal information using industry-standard data destruction methods. Anonymized data that cannot be linked back to you may be retained indefinitely for statistical and research purposes.
7. Your Privacy Rights
Depending on your jurisdiction and applicable data protection laws, you may have the following rights regarding your personal information:
7.1 Access and Portability
You have the right to request a copy of the personal information we hold about you. You can access most of your account information directly through your bola21 account dashboard. For a comprehensive data export, contact our Data Protection Officer at [email protected].
7.2 Correction and Update
You can update your contact information (email, phone, address) directly in your account settings. For corrections to identity information (name, date of birth) or other data that requires verification, contact customer support with supporting documentation.
7.3 Deletion and Erasure
You may request deletion of your personal information, subject to legal retention requirements. Note that we must retain certain information for 5-7 years to comply with financial regulations and anti-money laundering laws. After closing your account, genuinely deletable information (marketing preferences, optional profile data) will be removed while legally required records are retained per regulation.
7.4 Objection and Restriction
You may object to certain processing activities (e.g., direct marketing) or request restriction of processing in specific circumstances. To exercise these rights, contact [email protected] with details of your request.
7.5 Withdrawal of Consent
Where processing is based on your consent, you may withdraw consent at any time. This does not affect the lawfulness of processing conducted prior to withdrawal.
To exercise any privacy rights, please submit a verified request to [email protected]. We will respond within 30 days of receiving your request. Identity verification may be required to prevent unauthorized disclosure of your personal information.
8. Cookies and Tracking Technologies
bola21 uses cookies and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content:
8.1 Types of Cookies We Use
- Essential Cookies: Required for Platform operation, including session management, login authentication, and security features. These cannot be disabled.
- Performance Cookies: Collect anonymous usage statistics to help us improve Platform performance and identify technical issues.
- Functional Cookies: Remember your preferences (language, display settings) to provide a personalized experience.
- Marketing Cookies: Track your activity to deliver relevant promotional content and measure advertising campaign effectiveness (used only with your consent).
8.2 Managing Cookies
You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may affect Platform functionality. Disabling essential cookies will prevent you from using certain features of the bola21 Platform.
9. International Data Transfers
bola21 primarily operates to serve players in Indonesia. However, some of our service providers and infrastructure partners may be located outside Indonesia. When your personal information is transferred internationally, we ensure adequate protection through:
- Standard contractual clauses approved by data protection authorities.
- Verification that the recipient country provides adequate data protection standards.
- Contractual obligations requiring service providers to maintain equivalent security and privacy protections.
10. Changes to This Policy
bola21 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via email to your registered email address and/or prominent notice on the Platform at least 14 days before the updated policy takes effect.
The "Last Updated" date at the top of this policy indicates when the most recent revisions were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.
Your continued use of bola21 services after the updated Privacy Policy becomes effective constitutes acceptance of the changes. If you do not agree with the updated policy, you should discontinue use of the Platform and close your account.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Team:
- Email: [email protected]
- Subject Line: "Privacy Inquiry" or "Data Protection Request"
- Response Time: We aim to respond to all privacy inquiries within 48 hours.
Your privacy matters to bola21. We are committed to handling your personal information with the utmost care, transparency, and respect for your rights.