bola888 Platform Privacy Notice

This page describes what we collect when you use bola888 and how we keep that data protected. We undertake to collect only the information necessary to operate your account, process your payments via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, comply with applicable law, and prevent fraud. Your data is encrypted in transit and at rest; we do not sell it to third parties.

When you sign up on bola888, we ask for your email, phone number, and password. Before your first deposit, we conduct identity verification (KYC) to confirm your identity—you upload your national ID or passport and a proof-of-residency document. This protects both you and us from fraudulent accounts and money-laundering risk. We store this data securely and use it only for account verification and regulatory compliance.

Our servers process your account activity, transaction history, game records, and sportsbook settlements. We may use this data to improve our platform, detect abuse, and respond to disputes. This notice explains our full data practice—what we collect, how we use it, where your data sits, and what rights you have regarding your information on bola888.

What We Collect and How We Use It

Account Registration Data

We collect your email address, phone number, and password when you create an account. Your email is where we send security alerts, deposit confirmations, and withdrawal receipts. Your phone number is used for two-factor authentication (2FA) and SMS verification codes. Your password is hashed using bcrypt—we never store it in plain text, and even our internal team cannot view it. If you forget your password, we send a reset code to your email; you set a new password yourself.

Identity Verification (KYC)

Before you deposit funds, we require identity verification. You upload a clear photo of your national ID (front and back), passport, or driver's license. You also provide proof of residency—a utility bill, lease agreement, or government document showing your address. Our automated system scans these documents to extract and validate your details. We store images encrypted and do not share them with external vendors for verification—all processing happens inside our secure servers.

Payment Data

When you deposit or withdraw via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, we receive confirmation from those e-wallet providers confirming the transaction. For bank transfers (mobile banking, local payment, online payment, e-wallet), we receive your bank account details from your bank and the transfer confirmation. We do not store your full bank account number or card details—we keep only the last four digits and the receiving bank name for your transaction history. All payment data sits on encrypted servers.

Note: We are PCI-compliant and do not store sensitive payment card information on our servers. Payment processing is handled by encrypted third-party gateways.

Account Activity and Game Records

We log your login times, IP addresses, device type, and operating system to detect unauthorized access and fraud. We record every bet placed on Liga 1, Piala Indonesia, sportsbook markets, and casino games. We track your deposits, withdrawals, and account balance changes. This data helps us settle disputes, prevent fraud, and detect patterns of problem behaviour that may warrant account restrictions or support outreach.

Session logs: We record when you log in, from which device, and for how long. This helps us detect unauthorized account access and improve security.
Bet history: Every prediction you place—its market, odds, amount, settlement outcome—is stored permanently. You can view your full history in Account > Bet History.
Device fingerprint: We collect your device model, browser type, and operating system version to link multiple logins to your account and flag suspicious patterns.

Cookies and Tracking

We use session cookies to keep you logged in and remember your preferences (language, theme). These cookies expire when you close your browser. We also use analytics cookies to understand how users navigate bola888—which pages are visited, how long they stay, where they click. This data does not identify you personally; it helps us improve our interface and find bugs. You can disable cookies in your browser settings, though this may degrade your experience on bola888.

Your Rights and Our Data Practice

Data Storage and Server Location

Our servers are located outside Indonesia. Your data may be processed and stored in multiple jurisdictions depending on our technical infrastructure. By using bola888, you consent to your data being transferred to and processed outside your home country. We use encryption (SSL in transit, AES-256 at rest) to protect data across all transfers and storage.

Your Data Rights

You have the right to request a copy of all data we hold about you. Contact our support team with your request, and we will compile your account information, transaction history, and game records into a downloadable file. You may also request deletion of your account and associated data. If you request deletion, we close your account permanently, clear your game history, and remove your documents—though we retain transaction records for seven years for regulatory compliance. Deletion takes effect within thirty days.

Third-Party Data Processors

We use third-party services for specific functions. Payment processors (for DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers) receive your transaction details directly from their own APIs—we do not forward your banking credentials to them. Email service providers send transactional emails (login alerts, withdrawal confirmations) on our behalf. Analytics platforms (Google Analytics) receive anonymised session data. Fraud-prevention vendors receive your IP address and device fingerprint to assess risk. None of these processors use your data for marketing or sell it further.

We do not share your personal information with advertisers or data brokers.
We do not sell your email address or phone number.
We do not use your data to contact you for marketing unless you opt in.
We share data with law enforcement only when required by court order or applicable law.

Data Retention and Deletion

We keep your account data as long as your account is active. If you request account closure, we delete most data within thirty days; transaction records and identity documents are retained for seven years to satisfy money-laundering reporting requirements. After seven years, all records are permanently deleted from our servers.

Contact and Data Subject Requests

If you have questions about our privacy practice, wish to request a data download, or want to delete your account, contact our support team via in-app chat or email. Include your account email address and a clear description of your request. We respond to data-subject requests within thirty days. If we need clarification, we will ask you to confirm your identity before processing.

Important: Our service is available only where applicable local law permits online gaming. This privacy notice is subject to change as our platform evolves. We will notify you of material changes via email. Continued use of bola888 after notification constitutes acceptance of updated terms.

We remain committed to protecting your data on bola888. Our platform uses industry-standard encryption, conducts regular security audits, and restricts employee access to personal information. Whether you access bola888 from Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, or another supported location, the same privacy protections apply. Your account security—KYC verification, password hashing, 2FA, encrypted communication—is maintained consistently across all jurisdictions and at all times, including during holidays like Idul Fitri, Idul Adha, Imlek, and Nyepi.