Reference

How We Handle Your Privacy at bolakawan

Every deposit through DANA, OVO or GoPay passes through encrypted channels, and your personal details stay locked behind account-level verification only you control. We built our privacy framework around the reality that Indonesia players want fast funding without exposing more data than necessary.

Encrypted TransactionsAccount-Level AccessMinimal Data CollectionWallet PrivacySession Protection
Explore the Lobby Read FAQ
bolakawan How We Handle Your Privacy at bolakawan
THREE PRIVACY PILLARS

Core Areas Where We Protect You

bolakawan mobile gaming
E-Wallet Data Handling
Your DANA, OVO or GoPay account numbers are tokenised within our system.
KYC With Minimal Exposure
Verification documents you submit for withdrawals are reviewed, then encrypted at rest.
Login and Activity Logs
Each login generates a session token tied to your device fingerprint. If someone tries accessing your account from an unfamiliar device, we send an OTP to…
Open Your Account Explore the Lobby
HOW WE EARN TRUST

Privacy Practices You Can Verify

SSL Encryption

Every page you visit on our site loads over HTTPS with modern SSL certificates. This encrypts the data flowing between your device and our servers, whether you are checking European Football Odds or reviewing your withdrawal history.

Tokenised Wallets

DANA, OVO and GoPay credentials are replaced with single-use tokens the moment they enter our system. Even if internal logs were somehow exposed, raw wallet numbers would not be visible — only reference codes that mean nothing outside context.

Two-Factor Authentication

We send OTP codes to your registered phone number every time a new device or browser attempts to access your account.

Internal Access Controls

Not every team member sees everything. Access to personal data is tiered: support agents view only what they need to resolve your specific query, and all access is logged with timestamps for internal audit.

No Third-Party Data Sales

We do not monetise your data by selling it to advertisers or partner networks. The information you provide stays within our operational scope — account management, fraud prevention, and communication you have opted into.

Regular Purge Cycles

Inactive session logs, expired KYC documents, and outdated transaction references are purged on a scheduled cycle. We keep only what is operationally necessary or legally required, reducing the data surface area that exists at any given time.

KEY PRIVACY ELEMENTS

Six Elements That Define Our Privacy

End-to-End Encryption From the moment you type your login credentials to the second your withdrawal lands in your DANA, OVO or GoPay wallet, every byte of data is encrypted.
Data Minimisation We collect only what is needed for you to deposit, play and withdraw. No unnecessary profiling, no extensive questionnaires.
Player-Controlled Notifications Every communication channel — email, SMS, push — is opt-in. You choose what you hear about and when. If you prefer silence between sessions, toggle everything off in account settings.
Audit Trails Internal access to your data is logged with timestamps. If you ever raise a concern about data misuse, we can trace exactly who accessed what and when. This accountability layer exists for your protection, not just our compliance records.
Regional Compliance Our privacy practices adapt to regulatory expectations that apply where access is available and local law permits. We monitor evolving data rules in eligible regions and update our handling procedures accordingly — so your rights keep pace with regulation.
Instant Session Revoke Suspect something is wrong? You can revoke all active sessions from your account settings in one tap. Every device currently logged in gets disconnected immediately, forcing re-authentication via OTP before anyone — including you — can re-enter the account.
MOBILE PRIVACY CONTROLS

Privacy on Your Phone Stays Tight

When you access bolakawan from a mobile browser or the home-screen shortcut, we request only the permissions required for the session — no contacts access, no photo library scan, no background location tracking. Notifications are opt-in only; we will never push alerts without your explicit consent. If you switch between Mines Quick Game and Fortune Fishing Game in one sitting, only the session token travels with you, never your full profile payload. Players in Tangerang or anywhere else across Indonesia get identical privacy treatment regardless of connection type — mobile data or Wi-Fi.

No Background Tracking
OTP Login on New Device
Opt-In Notifications Only
Session Token Only
Open Your Account Explore the Lobby
bolakawan mobile gaming
PRIVACY HELP PATHS

Getting Help With Your Data

Team online

Data Access Request

You can ask our support team via live chat for a copy of the personal data we hold on your account. We aim to deliver this within a few working days, formatted as a downloadable summary visible only to you after re-authentication.

Account Deletion

If you decide to close your account entirely, reach out through live chat or our support email. Once confirmed, we begin purging personal data from active systems. Residual compliance records are kept only where local law mandates retention.

Suspicious Activity Reports

Notice something odd — a login you did not initiate, or a transaction you do not recognise? Contact us immediately through live chat. We freeze account activity, reset your session tokens, and walk you through re-securing your credentials step by step.

bolakawan What Our Privacy Approach Covers

What Our Privacy Approach Covers

When you open an account with us, we collect only what is strictly needed: your contact method, your chosen e-wallet link, and enough identity detail to verify withdrawals. We do not sell, rent, or share your information with third parties for marketing purposes outside the platform. Your DANA, OVO or GoPay transaction records stay between you, your wallet provider, and our internal

ledger — we never expose transaction IDs or amounts publicly. Session data like device type and login location helps us flag suspicious access attempts on your behalf. If you play Live Baccarat Table or Spaceman Crash Play on your phone during a commute through Bekasi, the connection is secured the same way it would be on a desktop browser. We keep retention

periods short: once data is no longer required for account verification or regulatory compliance where local law applies, it is purged from active storage.

Terms You Should Know About Privacy

01
What does SSL mean?

SSL stands for Secure Sockets Layer. It is a protocol that encrypts data between your browser and a server, preventing third parties from reading information like passwords or wallet details while the data is in transit across the internet.

02
What is tokenisation?

Tokenisation replaces sensitive data — like your DANA or OVO account number — with a random reference code called a token. The original number is not stored. Even if someone accessed the token, they could not reverse-engineer your real wallet credentials from it.

03
What does KYC stand for?

KYC means Know Your Customer. It is a verification step where you confirm your identity, usually with a photo ID and a selfie. This prevents fraud, protects your account from unauthorised withdrawals, and is required before payouts process.

04
What is an OTP?

OTP stands for One-Time Password. It is a temporary code sent to your phone when you log in from a new device. The code expires quickly, ensuring that even a stolen password cannot grant access without physical possession of your registered phone.

05
What is data minimisation?

Data minimisation is the principle of collecting only the information strictly required for a specific purpose. In our context, it means we ask for your e-wallet link and one ID document — nothing more — reducing the volume of personal data at risk.

06
What does encryption at rest mean?

Encryption at rest protects data while it sits stored on a server, not while it is moving. Even if physical storage hardware were compromised, the files would appear as unreadable code without the proper decryption key held separately by authorised systems.

07
What is a session token?

A session token is a temporary identifier assigned to you after login. It keeps you authenticated as you navigate between pages — from VIP Baccarat Circle to your withdrawal page — without requiring you to re-enter your password on every click.

08
What does data purging mean?

Data purging is the scheduled permanent deletion of personal records that are no longer needed. Once your KYC documents are verified and the retention window closes, we purge the originals so they no longer exist in any active or backup system.

09
What is two-factor authentication?

Two-factor authentication adds a second verification step beyond your password — typically an OTP sent to your phone. It dramatically reduces the chance of unauthorised access, because an attacker would need both your password and your physical device simultaneously.

10
What is an audit trail?

An audit trail is a chronological record of who accessed specific data and when. It allows us to trace every internal interaction with your account details, providing accountability and evidence if a data-handling concern ever arises from your side.

Common Privacy Questions From Our Players

We collect your phone number or email, a display name, and the e-wallet you choose for deposits — DANA, OVO or GoPay. We do not ask for home address, employer details or income. KYC documents are requested only at your first withdrawal, not at sign-up.

No. Your wallet number is tokenised the moment it enters our system. No other account holder, and no internal team member outside the payment processing layer, ever sees the full number. Only you can view the last four digits inside your own settings panel.

Every login from a new device triggers an OTP sent to your registered phone. Without that code, the password alone is useless. You can also revoke all active sessions instantly from your dashboard, forcing every connected device to re-authenticate from scratch.

Yes. Contact our live chat team and request a data export. We compile a summary of your stored personal information and make it available for download inside your account within a few working days. You will need to re-authenticate before accessing the file.

We do not sell or share your personal data with external marketing networks. Promotional messages you receive come from us directly, generated using anonymised engagement patterns — never your raw identity details. You can opt out of all communications at any time.

Upon confirmed deletion, we purge your personal data from active systems. Any residual records kept for regulatory compliance in eligible regions are stored encrypted and inaccessible to operational teams. We inform you which records, if any, remain and for how long.

Session logs record device type, approximate location and timestamp — primarily to help you spot suspicious access. We do not track gameplay choices for profiling. Whether you spent your session on Spaceman Crash Play or Live Baccarat Table, only aggregated, anonymised analytics are stored.

Check the session log inside your account dashboard. It shows every recent login with device type and approximate location. If you see an entry you do not recognise, revoke all sessions immediately and contact our support team through live chat for a security review.

No. All three wallets are processed through the same tokenisation pipeline. Regardless of whether you fund via DANA, OVO or GoPay, the privacy treatment is identical — your wallet credentials are tokenised, encrypted, and never stored in plaintext on our side.

The encryption and data-handling standards are the same across both. On mobile, we additionally ensure no unnecessary permissions are requested — no contacts, no camera access beyond optional KYC selfie, no background location. Your data surface is identical regardless of device.

Related pages

bolakawan Indonesia About Us Football Parlay Guide FAQ Plinko Drop Arcade