bolagoPrivacy Policy

This page describes what we collect when you use bolago and how we keep that data protected. We at bolago take privacy seriously—your email, password, and identity documents are encrypted and stored securely. We do not sell your personal information to third parties, and we do not use your data for marketing outside bolago's own communications.

Our privacy practices apply to all users of bolago across supported jurisdictions including Jakarta, Surabaya, Bandung, and Medan. Whether you access bolago on Android APK, iOS Safari, or desktop, the same privacy standards apply. This policy explains what data we collect, why we collect it, how long we keep it, and what rights you have.

Read this page carefully. If you have questions about how we handle your data, contact our support team via in-app chat or email.

What Data We Collect on bolago

We collect data in several categories:

Account information: When you register on bolago, we collect your email address, password (hashed and encrypted), and basic profile details you choose to provide.
Identity documents: For your first withdrawal, we request a scan of your national ID card and a selfie of you holding that ID. These documents are used only for KYC (Know Your Customer) verification and are encrypted separately from your account login.
Payment information: We do not store your payment card or bank account details. When you deposit, we route your request through a trusted payment gateway (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet). That gateway handles your financial data; bolago receives only a confirmation of successful deposit.
Game and transaction history: We log every game result, spin, market settlement, deposit, and withdrawal on your account. This data helps us investigate disputes and maintain accurate balances.
Device and connection data: We log your IP address, device type, operating system, and browser when you access bolago. This helps us detect fraud and provide better support.

How We Use Your Data on bolago

We use your data for the following purposes:

Account operation: We use your email and password to manage your login, reset your password if requested, and maintain your account balance.
KYC compliance: We use your identity documents to verify you are who you say you are before processing your first withdrawal. This protects both your account and our platform from fraud.
Dispute resolution: We use your game history and transaction logs to investigate disputes. If you report a disputed spin or market result, we review the server logs and dealer footage to determine what happened.
Account security: We monitor your IP address and login patterns. If we detect unusual activity—e.g., login from a new country or multiple failed password attempts—we may flag your account and ask you to verify your identity.
Legal compliance: We may disclose your data to law enforcement if required by court order or local law in your jurisdiction.

No marketing sale: We do not sell your personal data to advertisers, data brokers, or third-party marketers. We use your email only to notify you of account activity, withdrawals, KYC verification, and bolago service updates.

Where We Store Your Data and How Long We Keep It

Our servers may sit outside your jurisdiction; this is standard for online gaming platforms serving multiple regions. Your account data is encrypted in transit (HTTPS) and at rest (AES-256). bolago staff access your data only when you request support or when investigating a dispute; we do not routinely browse user accounts.

We keep your account data as long as your account exists. If you close your account, we retain your transaction history and KYC documents for seven years to comply with anti-money-laundering (AML) regulations in your jurisdiction. After seven years, we delete archived data. If you request deletion of your account before the seven-year window, we close your account immediately but retain the minimal data required by law.

Your password is hashed one-way, meaning it is encrypted but cannot be reversed. If you forget your password, we cannot show it to you; instead, we send you a reset link via email. When you set a new password, the old hash is replaced. This design ensures bolago staff never see your password.

Third-Party Data Processors Used by bolago

bolago works with the following third parties to process your data:

Payment gateways: mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank processors (online payment, e-wallet, mobile banking, local payment) handle your deposit and withdrawal transactions. These processors follow Indonesian financial regulations and have their own privacy policies.
Email service provider: We use a third-party email provider to send you password resets, withdrawal confirmations, and KYC notifications. This provider is contractually bound to use your email only for bolago communications.
Cloud hosting: Our servers are hosted by a third-party infrastructure provider. Your data is encrypted; the hosting provider cannot read it.
Fraud detection service: We use a third-party tool to detect suspicious login patterns and potential fraud. This tool receives your IP address and login history but not your KYC documents or payment details.

All third-party processors are contractually bound to keep your data confidential and use it only for the purposes bolago specifies.

Your Rights Under Our bolago Privacy Policy

You have the following rights regarding your data on bolago:

Right to access: You can download a copy of your account data—email, password reset history, game results, transactions—at any time via your Account Settings on bolago.
Right to correction: If your email or profile information is incorrect, contact support and we will update it within one business day.
Right to deletion: You can close your account and request deletion of your data (subject to the seven-year AML retention requirement mentioned above). Contact support with your request.
Right to data portability: You can request that we export your account data in a standard format (CSV or JSON). We provide this within 10 business days.
Right to object: If we use your data for fraud detection or account security purposes and you believe it is inaccurate, contact support to contest our findings.

Account data access: Available anytime in your Account Settings on bolago; no request needed.
KYC document deletion: Archived for 7 years for AML compliance; cannot be deleted during this period.
Account closure: Close your account anytime; transaction history retained 7 years per law.

Cookies and Tracking on bolago

We use cookies on bolago to store your session token (a temporary key that keeps you logged in) and your preference settings (language, notification settings). Cookies expire after 24 hours of inactivity. We do not use tracking pixels, persistent cookies for advertising, or third-party analytics that profile your behavior outside bolago.

You can disable cookies in your browser settings, but this will log you out of bolago and may prevent some features from working correctly.

How to Contact Us and Policy Updates on bolago

If you have questions about how bolago handles your data, contact our support team via in-app chat or email. We respond to privacy inquiries within one business day. If you are unsatisfied with our response, you have the right to escalate your complaint to the data protection authority in your jurisdiction.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We notify you of material changes via email. Your continued use of bolago after notification means you accept the updated policy. If you do not accept an update, you may close your account and request a final withdrawal.

Our privacy commitment is simple: we collect only the data we need to run bolago securely, we encrypt it, we do not sell it, and we give you rights to access and control it. Thank you for trusting bolago with your information.