bola99 Casino & Sportsbook Data Care

This page describes what we collect when you use bola99 and how we keep that data protected. We operate an online gaming platform across supported jurisdictions in Southeast Asia, and our data practices reflect both local regulations and our commitment to transparent account management. When you download our Android app, access bola99 through iOS Safari, or manage your account on desktop, we collect certain information to verify your identity, process your payments, and maintain service security.

We handle your personal data with strict confidentiality. We do not sell your information to advertisers or data brokers. We share data only with payment processors, compliance partners, and regulators where local law requires. This policy explains exactly what we collect, how we use it, and what rights you have over your information.

Our data centers are located outside Indonesia, but we comply with all Indonesian financial and privacy regulations. If you have questions about our practices, our support team is available via in-app chat to clarify our policy in plain language.

What We Collect and How We Use It

When you create a bola99 account, we collect your email address, phone number, and a password of your choosing. These are necessary to create your login and send you account notifications. We use your phone number to enable two-factor authentication (optional but recommended) and to contact you about account security or payment status.

During identity verification, we collect your full legal name, date of birth, and government-issued ID number (KTP, passport, or equivalent). We ask for a clear photo of both sides of your ID and a selfie of you holding your ID. This information is required under Indonesian financial regulations (KYC — Know Your Customer). We use optical character recognition to extract and verify your details against public records. Your KYC data is encrypted and stored separately from your gaming account. We retain it only as long as your account remains active, plus the minimum period required by law (typically 5–7 years).

When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, we record the amount, timestamp, and confirmation from your e-wallet provider. When you transfer funds to a mobile banking, local payment, online payment, or e-wallet virtual account we generate for you, we log the transfer. These records are retained indefinitely for financial compliance and dispute resolution. We never store your full card number or e-wallet credentials — only a token confirming the transaction and your account balance.

KYC verification
Know Your Customer process confirming your identity using government ID. Mandatory for deposits and withdrawals under Indonesian law.
Session tokens
Encrypted codes confirming your login status. They expire after subject to verification of inactivity and are deleted upon logout for security.
Payment processor
Third-party company (Midtrans, etc.) handling e-wallet and bank transfers. We do not see your banking credentials; only settlement confirmation.

Your gaming history — bets placed, results, account balance, withdrawal requests — is stored in our database for account reconciliation, dispute resolution, and regulatory compliance. During holidays like Idul Fitri or Idul Adha, payment processing may slow because bank systems operate on reduced schedules; we retain records of this delay for your reference. We use your gaming history to detect unusual activity (large unusual withdrawals, rapid bets suggesting fraud) and to comply with anti-money-laundering regulations.

Data Security and Third-Party Processors

We encrypt all data between your mobile device (Android or iOS) and our servers using SSL/TLS protocols. Our servers are hosted in ISO-27001-certified data centers outside Indonesia. This means your data sits outside your jurisdiction, but we comply with Indonesian data protection laws. Payment data is processed through certified payment gateways (Midtrans and other partners); we never store full payment credentials ourselves.

We employ these security measures: encrypted passwords stored as cryptographic hashes (not readable even by our staff), encrypted personal data at rest and in transit, two-factor authentication available on your account, and transaction logging for audit trails. Our support team cannot view your password or reset it without your verification. If you forget your password, we send a recovery email with a one-time link you must use within subject to verification.

We share your data with payment processors to confirm deposits and process withdrawals. We share aggregated data (totals, counts, not individual records) with our compliance team to detect fraud and money-laundering patterns. We may disclose your identity to regulators (the Indonesian government) if required by law. We never sell your data to advertisers or third-party marketers.

Your Rights and Data Retention

You have the right to access all personal data we hold about you. Submit a request via our support page (you must verify your identity), and we provide a downloadable file within 5 business days. You can request that we correct inaccurate information — for example, if we misspelled your name during KYC verification. You can request deletion of non-essential data, but we retain KYC information, payment records, and gaming history for the periods required by law and for dispute resolution.

You have the right to close your account at any time via the Account settings. We return any remaining balance to your registered payment method within 24 hours. Your personal data remains encrypted in our archives for 7 years (regulatory requirement), but we do not use it for marketing or any purpose beyond compliance. You can request permanent deletion after all regulatory retention periods expire; contact support for a formal data-deletion request.

We collect only what the law requires and what you need for account security. We encrypt your data, process payments transparently, and respect your privacy rights.

bola99 Editorial Team

Cookies, Location Data, and Contact

Our website and mobile app use cookies and local-storage tokens to remember your login status between sessions. These are session cookies (deleted when you close your app or browser) or persistent cookies (lasting 90 days) for convenient re-login. We do not use third-party tracking cookies for analytics. If you disable cookies in your browser settings, you will need to log in on every visit.

We collect your approximate location (at the jurisdiction level, not GPS coordinates) to confirm you are in a supported service area. We do not track your movement or share location with third parties. On mobile, bola99 requests permission to send push notifications about table availability, withdrawal status, and account alerts. These are optional; you can disable notifications in your phone's app settings.

If you have a data protection complaint or privacy concern, contact our support team via in-app chat or email. We respond within 48 hours. If your concern remains unresolved, you have the right to lodge a complaint with your local data authority (for Indonesian residents, the Personal Data Protection Commission once established). Players in JakartaSurabayaBandungand Medan can request local support; we maintain regional response channels for compliance purposes.

This privacy policy is subject to change as regulations evolve or as we improve our practices. We will notify you of material changes via email to your registered address. This policy was last updated in 2026. We invite you to review it whenever you access bola99 so you remain informed of how we handle your data.

↑