bolalionPrivacy Policy

This page describes what we collect when you use bolalion and how we keep that data protected. Many platforms treat privacy policy as legal boilerplate; we treat it as a commitment. When you sign up for bolalion—whether you're in Jakarta, Surabaya, Bandung, or Medan—we collect your email, legal name, date of birth, national ID number, and proof of address. That's necessary for account verification and regulatory compliance. Beyond those points, we collect only what we need to operate your account and process transactions through our nine payment methods (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet).

We store your data encrypted on secure servers. Our servers may sit outside your jurisdiction, but your data receives the same protection regardless of location. We don't sell your information to third parties. We share data only with payment processors, fraud-detection partners, and regulatory authorities when legally required. We retain your data only as long as your account remains active or law requires. When you delete your account, we purge your personal information within 30 days, except where we're legally obligated to retain it longer.

This policy explains the specifics: what we collect, how we use it, who we share it with, your rights, and how to contact us with questions.

What We Collect and Why

We collect your email address when you create a bolalion account. Email is how we send withdrawal confirmations, tournament updates, and support responses. We collect your legal name, date of birth, and national ID number to verify your identity—this is a regulatory requirement, not optional. We collect your physical address (proof via utility bill or government document) to confirm your jurisdiction. We use this data to unlock payment methods, process deposits and withdrawals, and ensure you're accessing bolalion from a jurisdiction where we operate.

We collect transaction history: deposit amounts, withdrawal amounts, dates, and payment methods used. This helps us detect fraud, process disputes, and maintain audit trails. We store this history for seven years to comply with Indonesian financial regulations. We collect game activity (which tournaments you view, which games you play) to personalize your account experience and send relevant market updates—for example, Liga 1 schedules during football season or esports alerts during Mobile Legends tournaments.

We collect your IP address and device information (browser type, operating system) to authenticate your sessions and prevent unauthorized access. We use cookies (see below) to keep you logged in and to remember your preferred payment method. We collect support tickets and chat history if you contact us with questions—these help us resolve issues and improve our customer service.

How We Use Your Data

We use your information to operate your account: process deposits, withdrawals, verify your identity, and authenticate your sessions. We use transaction history to detect fraud and prevent money laundering. We use activity data to send you relevant updates—tournament schedules for Piala AFF or Champions League, esports alerts, live-dealer table availability. We share anonymized usage statistics internally to improve platform performance and stability.

We may use your email to notify you of service changes, account security alerts, or regulatory updates affecting your access. We don't use your data for marketing unless you opt in. We never use your data to profile you for credit purposes or behavioral analysis beyond fraud prevention.

Third Parties We Share Data With

We share payment information with our payment processors—the companies operating DANA, e-wallet, mobile banking, and bank gateways (local payment, online payment, e-wallet, mobile banking). These processors need your transaction data to settle deposits and withdrawals. We share with fraud-detection partners to identify suspicious activity. We share with regulatory authorities (Indonesian gaming regulators, tax authorities) when legally required. We may share with law enforcement if we receive a valid court order or subpoena.

We require all third parties to sign data-processing agreements protecting your information. We undertake not to sell your personal data to advertisers, data brokers, or other commercial entities.

Your Rights and Our Commitments

You have the right to access your data: request a copy of everything we hold about you by contacting bolalion support. You have the right to correct inaccuracies: if your stored address is wrong, we'll update it. You have the right to delete your account and request purging of your personal data, subject to legal retention requirements. We'll delete within 30 days except where law requires longer retention.

You have the right to opt out of non-critical communications. We'll continue sending withdrawal confirmations and security alerts—those are essential. You can opt out of tournament updates and promotional emails via your account settings. You have the right to file a complaint with Indonesia's data-protection authority if you believe we've mishandled your information.

Cookies and Tracking

We use session cookies to keep you logged into bolalion. These expire when you close your browser. We use persistent cookies to remember your preferred payment method and language setting—these persist for one year unless you clear your browser cache. We don't use tracking cookies or third-party advertising cookies. We don't share your browsing history with advertisers.

Data Retention and Account Deletion

We retain account data (name, ID, address) for the life of your account plus seven years for regulatory compliance. We retain transaction history for seven years. We retain support tickets for two years. When you delete your account, we schedule purging of personal data (everything except mandatory legal retention) within 30 days. If your account has active disputes or pending withdrawals, we retain relevant data until resolution, then purge.

Contact and Updates

Questions about our privacy policy? Contact bolalion support through your account or email us via the support section. We respond within 2–3 business days. We may update this policy periodically—changes to core practices (data sale, third-party sharing) require 30 days' notice to all active accounts via email. We'll notify you of updates, and your continued use of bolalion after the notice period constitutes acceptance of the updated policy.

We believe your privacy is not a marketing feature to sell—it's a baseline responsibility we undertake every time you trust bolalion with your data.

Our commitment stands: we collect only what we need, keep it encrypted, don't sell it, and delete it when you ask. Your data powers your account and nothing else. Transparency—about what we collect, why, and who sees it—is how we earn your trust.