bola39 Privacy Policy

1. Introduction

This Privacy Policy describes how bola39 ("we", "us", "our") collects, uses, stores, and protects the personal information of users ("you", "your") who access and use our online gaming platform located at bola39.cam. We are dedicated to safeguarding your privacy and handling your personal data in accordance with applicable data protection laws and international best practices.

This policy applies to all information collected through our website, mobile-optimized platform, customer support channels, and any other services we provide. We encourage you to read this Privacy Policy carefully to understand our practices regarding your personal information. If you do not agree with the terms of this Privacy Policy, please discontinue use of our services immediately.

2. Data Controller

bola39, operating through the domain bola39.cam, is the data controller responsible for the collection, processing, and protection of your personal information. As the data controller, we determine the purposes and means of processing your personal data in accordance with this Privacy Policy and applicable legal requirements.

For all privacy-related inquiries, data subject requests, or concerns about how your personal information is handled, please contact our Data Protection Team using the contact details provided in Section 14 of this policy.

3. Information We Collect

We collect various types of information to provide and improve our services, ensure platform security, comply with legal obligations, and deliver personalized user experiences. The categories of information we collect include:

3.1 Information You Provide Directly

When you register an account or use bola39 services, you voluntarily provide the following personal information:

• Registration Information: Full legal name, date of birth, gender, residential address in Indonesia, email address, mobile phone number, username, and password.
• Identity Verification Documents: Government-issued identification (KTP, passport, or driver's license), proof of residential address (utility bill, bank statement), and photographic proof of payment method ownership as required for KYC (Know Your Customer) compliance.
• Payment Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay account identifiers), and transaction history.
• Communication Data: Information provided when you contact customer support via live chat, email, WhatsApp, or other communication channels, including message content, timestamps, and support ticket details.
• Marketing Preferences: Your consent to receive promotional communications, newsletters, bonus offers, and marketing materials via email, SMS, or push notifications.

3.2 Information Collected Automatically

When you access and use bola39, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, device identifiers, screen resolution, and mobile network information.
• Connection Data: IP address, geographic location (country, city derived from IP address), internet service provider, and connection timestamps.
• Usage Data: Pages visited, games played, betting history, deposit and withdrawal activity, session duration, navigation paths, clickstream data, and feature interactions.
• Performance Data: Page load times, error messages, technical issues, and platform performance metrics.

3.3 Information from Third-Party Sources

We may receive information about you from third-party sources including payment processors (banks, e-wallet providers) for transaction verification, identity verification services for KYC compliance, fraud prevention agencies to detect suspicious activity, and game providers for gameplay data and wagering records.

4. How We Use Your Information

bola39 processes your personal information for the following legitimate purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your user account
• Processing your registration and verifying your identity (KYC compliance)
• Enabling you to place bets, play games, and access platform features
• Managing your account balance, deposits, and withdrawals
• Providing customer support and responding to your inquiries
• Communicating important account notifications, policy updates, and service changes

4.2 Legal and Regulatory Compliance

• Complying with international anti-money-laundering (AML) regulations
• Verifying age eligibility (21+ requirement) to prevent underage gambling
• Maintaining transaction records as required by financial regulations
• Responding to legal requests, court orders, and regulatory inquiries
• Cooperating with law enforcement investigations when legally obligated

4.3 Security and Fraud Prevention

• Detecting and preventing fraudulent activity, unauthorized access, and account abuse
• Monitoring betting patterns to identify collusion, bonus abuse, and irregular activity
• Protecting the integrity of our games and platform operations
• Implementing security measures to safeguard user accounts and funds
• Investigating disputes, chargebacks, and policy violations

4.4 Platform Improvement and Analytics

• Analyzing usage patterns to improve platform functionality and user experience
• Testing new features, games, and services
• Optimizing website performance, navigation, and mobile responsiveness
• Conducting statistical analysis and market research
• Understanding player preferences to enhance game selection

4.5 Marketing and Promotional Communications

With your explicit consent, we may use your information to:

• Send promotional emails about bonuses, special offers, and new games
• Deliver personalized marketing content based on your gaming preferences
• Notify you about tournaments, competitions, and exclusive VIP rewards
• Provide updates about platform enhancements and new features

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails, adjusting your account notification settings, or contacting customer support. Opting out of marketing does not affect essential service communications (account notifications, transaction confirmations, security alerts).

5. Legal Basis for Processing

We process your personal information based on the following legal grounds under applicable data protection laws:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to provide gaming services, process payments, and maintain your account as outlined in our Terms & Conditions.
• Legal Compliance: Processing is required to comply with legal obligations including KYC/AML regulations, age verification requirements, financial record-keeping laws, and response to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests including fraud prevention, platform security, service improvement, and internal analytics, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by law, we obtain your explicit consent for processing activities such as marketing communications, non-essential cookies, and data sharing with third-party marketing partners. You may withdraw consent at any time.

6. Data Sharing and Third Parties

bola39 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of third parties as necessary to operate our services:

6.1 Service Providers

• Payment Processors: Banks, e-wallet providers, and payment gateways that process your deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.).
• Game Providers: Third-party game studios and software suppliers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.) who deliver casino games and live dealer services.
• Identity Verification Services: KYC/AML compliance providers who verify the authenticity of your identification documents.
• Cloud Infrastructure Providers: Hosting services, data storage providers, and content delivery networks that support our platform operations.
• Customer Support Tools: Live chat software, email service providers, and ticketing systems used to deliver customer support.

6.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement agencies, regulatory bodies, or courts when legally required to comply with subpoenas, court orders, legal processes, or to protect our legal rights, prevent fraud, or address security issues.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization, subject to the same privacy protections outlined in this policy.

6.4 Third-Party Safeguards

All third parties with whom we share your data are contractually obligated to maintain confidentiality, implement appropriate security measures, process data only for specified purposes, and comply with applicable data protection laws. We carefully vet our service providers and regularly review their security practices.

7. Data Security Measures

bola39 employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

Security Measure	Description
SSL/TLS Encryption	All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption protocols.
Secure Data Storage	Personal information and financial data are stored on secure servers with encrypted databases protected by firewalls and access controls.
Two-Factor Authentication	Optional 2FA adds an extra security layer to prevent unauthorized account access even if passwords are compromised.
Access Controls	Strict role-based access controls ensure only authorized personnel can access personal data on a need-to-know basis.
Regular Security Audits	Periodic vulnerability assessments, penetration testing, and security audits to identify and address potential weaknesses.
Employee Training	All staff members receive regular data protection and security awareness training to prevent internal breaches.
Monitoring Systems	24/7 system monitoring, intrusion detection, and automated alerts to identify suspicious activity in real-time.

Despite our comprehensive security measures, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity conducted through your account.

8. Data Retention

bola39 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Account Data: Retained for the duration of your account's active status plus a reasonable period after account closure to address potential disputes or legal claims.
• Transaction Records: Financial transaction data is retained for a minimum of seven years to comply with anti-money-laundering regulations and tax record-keeping requirements.
• Identification Documents: KYC verification documents are retained for the duration required by applicable AML laws, typically five to seven years after account closure.
• Communication Records: Customer support correspondence is retained for three years for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever occurs first.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices. Anonymized data that cannot identify you may be retained indefinitely for statistical and analytical purposes.

9. Your Privacy Rights

Subject to applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your verified request.

9.2 Right to Rectification

You may request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings or by contacting customer support.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information, subject to legal limitations. We may be required to retain certain data to comply with legal obligations (financial records, KYC documentation) or resolve disputes.

9.4 Right to Restrict Processing

You can request that we limit how we use your personal information while we investigate concerns about data accuracy or the lawfulness of processing.

9.5 Right to Data Portability

You have the right to receive your personal information in a portable format and transmit it to another service provider where technically feasible.

9.6 Right to Object

You may object to processing of your personal information based on legitimate interests, particularly for marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on consent (marketing communications, optional cookies), you may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

9.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Team at [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing your request and respond within the timeframe required by applicable law.

10. Cookies and Tracking Technologies

bola39 uses cookies, web beacons, and similar tracking technologies to enhance your user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits.

Types of Cookies We Use:

• Essential Cookies: Necessary for platform functionality, account authentication, and security features. These cannot be disabled without impairing core services.
• Performance Cookies: Collect anonymous usage statistics to help us understand how visitors interact with our platform and identify areas for improvement.
• Functional Cookies: Remember your preferences (language settings, display preferences) to provide a personalized experience.
• Marketing Cookies: Track your browsing activity to deliver targeted promotional content and measure the effectiveness of marketing campaigns (requires consent).

You can manage cookie preferences through your browser settings. Disabling cookies may affect platform functionality and your ability to access certain features. Refer to your browser's help documentation for instructions on managing cookies.

11. International Data Transfers

bola39 primarily serves Indonesian residents and stores data on servers located in secure facilities that comply with international security standards. In some cases, your personal information may be transferred to and processed in countries outside Indonesia, particularly when using third-party service providers (payment processors, game providers, cloud infrastructure).

When transferring data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, and data protection agreements that meet or exceed Indonesian data protection standards. We take all reasonable steps to ensure your data receives an adequate level of protection regardless of where it is processed.

12. Children's Privacy

bola39 services are intended exclusively for adults aged 21 and above. We do not knowingly collect, process, or solicit personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected information from a person under the legal age, we will immediately delete such information and terminate the associated account.

Parents or guardians who believe their child has provided personal information to bola39 should contact us immediately at [email protected]. We take underage gambling prevention seriously and employ age verification measures during registration and withdrawal processing.

13. Changes to This Policy

bola39 reserves the right to modify, update, or revise this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will notify you by posting the updated policy on this page with a new "Effective Date" and, where appropriate, through email notification or a prominent notice on our platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of bola39 services following the posting of changes constitutes your acceptance of the revised Privacy Policy.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Team:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Expected Response Time: Within 4 hours for general inquiries; within 30 days for formal data subject requests

We are committed to addressing your privacy concerns promptly and professionally. If you believe your privacy rights have been violated or if you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.