Your personal data belongs to you. This Privacy Policy explains precisely what information bola1 collects, how it is used, who it may be shared with, and the controls you hold over your own data.
Six commitments that shape every data decision we make at bola1. The full legal text follows below.
We collect only the personal data we genuinely need. Every data point has a clearly defined purpose — account management, KYC compliance, payment processing, or platform security. We do not collect data speculatively or without a lawful basis.
All personal data is stored using 256-bit AES encryption at rest and transmitted over TLS 1.3 connections. Access is restricted to authorised personnel operating under strict confidentiality obligations. Security controls are reviewed regularly by independent auditors.
bola1 does not sell, rent, or trade your personal information to third-party marketers. Data shared with external service providers — such as payment processors and identity verification partners — is governed by strict data processing agreements limiting its use to the specific purpose for which it was disclosed.
This Privacy Policy is written in plain, accessible English. We tell you what we collect, why we collect it, how long we keep it, and who we may share it with. There are no hidden data practices — if we change how we process your data, we will notify you promptly.
As a bola1 member you have the right to access a copy of your personal data, request corrections, ask for deletion (subject to legal retention obligations), and opt out of direct marketing at any time. All requests are handled within 30 days of receipt.
We keep personal data only for as long as it is needed for its original purpose or as required by applicable anti-money laundering and record-keeping regulations. Data that is no longer required is securely deleted or anonymised on a rolling schedule.
In this Privacy Policy the following terms carry the meanings set out below:
2.1 This Privacy Policy applies to all Personal Data collected by bola1 in connection with the operation of the platform at bola1.pro, including data collected during account registration, KYC verification, deposits and withdrawals, betting and gaming activity, customer support interactions, and marketing communications.
2.2 This Policy applies to all Members who are residents of Indonesia and at least 21 years of age. bola1 is an English-language platform operated under an international licence and primarily serves Indonesian players who access the platform in English.
2.3 This Policy should be read in conjunction with bola1's Terms & Conditions and Responsible Gaming Policy, both of which are published on this platform.
3.1 bola1 collects the following categories of Personal Data:
4.1 Directly from you. The majority of Personal Data bola1 holds is provided directly by you at the point of registration, during KYC submission, when making a deposit or withdrawal, when contacting customer support, or when updating your account profile.
4.2 Automatically. When you access the bola1 platform, we automatically collect certain Technical & Usage Data through server logs, cookies, and similar technologies embedded in the platform. This data is collected regardless of whether you are logged in to your account.
4.3 From third-party service providers. bola1 may receive supplementary data about you from the following categories of third-party source:
4.4 From publicly available sources. Where required for AML compliance, bola1 may supplement identity data with information from publicly available registers, sanction lists, or politically exposed persons (PEP) databases.
5.1 bola1 processes your Personal Data only where a lawful basis exists. The table below summarises our primary processing activities, their purposes, and the legal basis on which each relies.
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account registration | Creating and maintaining your member account; enabling login access | Performance of contract |
| KYC & age verification | Verifying identity and confirming you are 21+; AML compliance | Legal obligation |
| Payment processing | Executing deposits and withdrawals in IDR via local banks and e-wallets | Performance of contract |
| Gaming & betting activity | Delivering the services you request; settling bets and game outcomes | Performance of contract |
| Responsible gaming monitoring | Detecting harmful play patterns; applying limits and exclusions | Legal obligation / Legitimate interest |
| Fraud & security monitoring | Preventing unauthorised account access, payment fraud, and bonus abuse | Legitimate interest |
| Customer support | Responding to queries, resolving complaints, and managing account issues | Performance of contract |
| Marketing communications | Sending promotional offers, bonus alerts, and platform updates by email or WhatsApp | Consent (opt-in) |
| Platform analytics | Understanding usage patterns to improve platform performance and user experience | Legitimate interest |
| Legal compliance & record keeping | Meeting AML, tax, and regulatory obligations; responding to lawful authority requests | Legal obligation |
5.2 Where bola1 relies on legitimate interests as a legal basis, we have assessed that our interests in secure platform operation, fraud prevention, and service improvement are not overridden by your interests, rights, or freedoms, having regard to the nature and context of the processing and the safeguards we apply.
5.3 Where bola1 relies on your consent as a legal basis (specifically for marketing communications), you may withdraw that consent at any time by using the unsubscribe link in any marketing email, by adjusting your notification preferences in the account dashboard, or by contacting customer support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
6.1 bola1 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookie are in use:
6.2 bola1 does not use third-party advertising cookies or allow advertising networks to place tracking cookies on the platform. We do not participate in cross-site behavioural advertising.
6.3 You may configure your browser to refuse or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Instructions for managing cookies are available in the help section of all major browsers.
7.1 bola1 does not sell or rent your Personal Data to third parties. We share Personal Data only with the categories of recipient listed below, and only to the extent necessary for the stated purpose:
7.2 All third-party Processors engaged by bola1 are required to enter into a data processing agreement that obligates them to process Personal Data only on bola1's documented instructions, to implement appropriate technical and organisational security measures, and to assist bola1 in fulfilling Member rights requests.
8.1 bola1 is operated under an international licence, and some of our service providers are located in jurisdictions outside Indonesia. As a result, your Personal Data may be transferred to and processed in countries that do not have data protection laws equivalent to those of Indonesia.
8.2 Where such transfers occur, bola1 takes steps to ensure that your Personal Data receives an adequate level of protection, including by entering into standard contractual clauses with recipient organisations that establish binding data protection obligations, by selecting processors that hold recognised international security certifications (such as ISO/IEC 27001), and by conducting transfer impact assessments where required by applicable law.
8.3 By using the bola1 platform you acknowledge that your Personal Data may be transferred internationally as described in this section, and that bola1 will apply appropriate safeguards to protect it in transit and at the destination.
9.1 bola1 retains Personal Data for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law or regulation. The principal retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | AML and regulatory record-keeping requirements |
| Financial transaction records | 5 years after transaction date | AML compliance and financial audit obligations |
| Gaming & betting history | 3 years after last activity | Dispute resolution, responsible gaming monitoring |
| Customer support records | 3 years after case closure | Quality assurance, complaint handling, legal proceedings |
| Marketing preferences & consent records | Duration of account + 1 year | Evidence of consent and opt-out compliance |
| Technical & usage logs | 13 months on a rolling basis | Security monitoring, fraud detection, platform analytics |
| Self-exclusion records | Indefinitely (or duration of exclusion + 5 years) | Preventing re-registration during active exclusion period |
9.2 When Personal Data is no longer required for any of the purposes listed in Section 5 and no legal retention obligation applies, bola1 will securely delete or irreversibly anonymise it. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
10.1 As a bola1 member whose Personal Data we process, you hold the following rights. To exercise any of these rights, please submit a written request to support@bola1.pro with your account username and a description of the right you wish to exercise. We will respond within thirty (30) days of receipt, or notify you if additional time is required.
10.2 bola1 will not charge a fee for handling a rights request unless the request is manifestly unfounded or excessive. In such cases, a reasonable administrative fee may be applied, or we may refuse the request — in either case we will explain our reasoning in writing.
11.1 The bola1 platform is strictly prohibited for use by individuals under the age of 21. We do not knowingly collect Personal Data from anyone under 21 years of age. Age verification is a mandatory step in the KYC process, and accounts for which age cannot be satisfactorily confirmed will be suspended pending verification.
11.2 If bola1 becomes aware that Personal Data belonging to a person under 21 has been collected — whether through a misrepresentation at registration or by any other means — we will promptly close the relevant account, delete all associated Personal Data to the extent permitted by law, and refund any deposited funds to the payment method from which they originated.
11.3 If you believe that a minor has registered an account on the bola1 platform, please notify us immediately at support@bola1.pro. We take all such reports seriously and will investigate promptly.
12.1 bola1 implements a layered security architecture to protect Personal Data against unauthorised access, loss, alteration, or disclosure. Key technical and organisational measures include:
12.2 While bola1 takes all reasonable steps to protect your Personal Data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying bola1 immediately if you suspect unauthorised access to your account.
13.1 The bola1 platform does not contain links to third-party websites, social media platforms, or external services beyond the internal navigation described in the site's menu structure. This Privacy Policy does not apply to any external website or service that you access independently of the bola1 platform.
13.2 Game content delivered via embedded iframes from licensed providers (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, and others) is governed by the respective provider's own privacy practices with respect to game session data. bola1 enters into data processing agreements with all such providers to ensure that game session data is used only for the purposes of game delivery and outcome settlement, and not for independent marketing or profiling.
14.1 bola1 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. The "Last Updated" date at the top of this document will be revised whenever a material change is made.
14.2 Material changes — those that significantly affect how your Personal Data is processed or the rights you hold — will be communicated to you by email to your registered account address and/or by a prominent notice on the platform, no less than fourteen (14) days before the change takes effect.
14.3 Minor or clarificatory amendments may be made without prior notice. Your continued use of the bola1 platform after the effective date of any amendment constitutes your acknowledgement of the updated Policy.
15.1 If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Section 10, or have a concern about how bola1 handles your Personal Data, please contact the bola1 Data Protection team through any of the following channels:
15.2 All formal privacy complaints and rights requests must be submitted in writing via the email address above. We will acknowledge receipt within two (2) business days and aim to resolve your complaint within thirty (30) days.
15.3 If you are not satisfied with bola1's response to a privacy complaint, you may escalate the matter to the data protection supervisory authority in the jurisdiction where bola1 holds its operating licence. Contact details for the relevant authority will be provided upon request.
Log in to bola1 and enjoy thousands of slots, live sports betting, and an immersive casino — all secured by the data protection practices described in this Policy.
21+ only. Gambling involves financial risk. Please play responsibly.