bolago Privacy Policy

This page describes what we collect when you use bolago and how we keep that data protected. We collect personal information to verify your account, process payments, detect fraud, and comply with law. Our commitment is to handle your data transparently and securely, with clear controls over how it is used.

When you open an account on bolago, you provide your email, name, date of birth, and residential address. During your first deposit, we collect copies of your government-issued ID and proof of address to complete Know Your Customer (KYC) verification. We also collect information about your payment methods—the bank account or mobile wallet you use for deposits and withdrawals through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet.

Beyond account setup, we collect session data: the games you play, stakes, outcomes, session timestamps, and your account balance after each session. This data is encrypted and stored on secure servers. We do not sell your personal information to third parties, and we restrict access to your data to bolago staff and authorized service providers who assist with payments, fraud detection, and customer support.

What Data We Collect on bolago

Account Information

When you register on bolago, we collect your email address, password (hashed), full name, date of birth, residential address, and phone number. We use this information to create your account, communicate with you about service updates, and verify your identity. Your email is your primary login credential and the contact method we use for account notifications.

Identity and KYC Documentation

We require government-issued ID (passport, national ID, or driver's license) and proof of residential address (utility bill, bank statement, or government correspondence) before your first withdrawal. We collect these documents as scanned images or photographs and store them encrypted. This process protects both you and bolago by confirming your identity and preventing fraud, money laundering, and account takeover.

Payment Information

We collect information about your payment methods: the bank account or mobile wallet you use for deposits and withdrawals. We do not store your full card number or bank account number in plain text. Instead, we store encrypted tokens that allow us to process future transactions without requiring you to re-enter those details each time. Payment processing is handled by third-party providers who comply with industry security standards.

Session and Behavioral Data

When you play on bolago, we record your session activity: which games you access, the dates and times you play, your stakes, the outcomes, your account balance before and after each session, and whether you used any bonus credits. We also log your IP address, device type, and browser information for security and fraud detection. This data helps us detect unusual account activity, prevent unauthorized access, and investigate disputes.

Our servers may be located outside your jurisdiction. By using bolago, you consent to the transfer and storage of your data on servers that may be in different countries. However, we apply the same encryption and security standards regardless of server location.

How We Use and Protect Your Data on bolago

Use of Your Information

We use your data for the following purposes: account verification and KYC compliance; processing deposits and withdrawals through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and Indonesian banks; fraud detection and prevention; settlement of bets and games; customer support and dispute resolution; regulatory reporting as required by local law; and service improvement. We do not use your data to target you with marketing unless you have opted in to receive communications from bolago.

Data Security and Encryption

We encrypt your data in transit (using TLS/SSL) and at rest (using AES encryption). Access to your personal information is restricted to bolago employees and authorized contractors who need it to perform their job functions. Employees sign confidentiality agreements and undergo security training. We conduct regular security audits and penetration testing to identify and remediate vulnerabilities.

Third-Party Processors

We work with third-party service providers for payment processing, email delivery, and customer support tools. These processors act as data processors on our behalf and are contractually obligated to protect your data with the same standards we apply. We do not permit them to use your data for their own marketing or other purposes.

Cookies and Tracking

When you access bolago through a web browser, we use cookies to maintain your session, remember your login status, and track your preferences. These cookies are essential for the platform to function. We also use analytics cookies to understand how users interact with bolago—which pages are visited, how long sessions last, and what features are used. You can disable cookies in your browser settings, but this may affect your ability to use bolago.

Data Retention and Deletion

We retain your account information, session history, and payment records for as long as your account is active and for a period after account closure as required by anti-money-laundering and tax regulations. In most cases, we retain data for at least five years after account closure. Identity documents are retained for the same period. You may request deletion of non-essential data, but we may retain certain information for legal compliance.

Contact and Updates

If you have questions about our privacy practices, believe your data has been compromised, or wish to exercise your rights over your data, contact our support team through in-app live chat or email. We respond to data requests within standard timeframes. We update this privacy policy periodically to reflect changes in our practices or legal requirements. Material changes are communicated through in-app notifications.

Your data security is our responsibility. We take this obligation seriously and invest in technology and training to protect your information. If you use bolago in Jakarta, Surabaya, Bandung, Medan, or Semarang, your data is protected under the same standards regardless of jurisdiction.