boba77 Privacy Policy

Indonesia's data protection framework, established through the Law No. 27 of 2022 on Personal Data Protection, requires online operators to disclose what information they collect and how they store it. This page describes what we collect when you use boba77 and how we keep that data protected. We operate our platform with encryption, secure servers, and clear rules about who can access your information.

Our boba77 account system collects personal data starting from registration. We collect your email, password hash, full name, date of birth, national ID number, and proof-of-address documents. We also collect transaction records—every deposit, withdrawal, and gaming session. We track your IP address, browser type, and device identifier to detect fraud and enforce our terms. All of this data is used solely for account verification, payment settlement, legal compliance, and platform security.

We do not sell your data to advertisers or marketing networks. We do not share your Liga 1 betting history, slot game activity, or live-dealer session records with third parties except where Indonesian law requires it—such as anti-money-laundering (AML) reporting to financial authorities. Our servers may sit outside Indonesia, but our data handling procedures comply with local law.

What We Collect and How

When you register on boba77, we require your email and password. During account creation, you provide your legal name, date of birth, and national ID number (KTP or passport). We ask for a clear digital photo of your ID document (both sides visible) and a proof-of-address document—utility bill, government letter, or rental agreement showing your name and current address. We store these documents encrypted and accessible only to our verification team. Once your identity is verified, we retain your ID photo and address proof indefinitely for compliance and audit purposes.

We collect transaction data automatically. When you deposit via DANAe-wallet, mobile bankingor bank virtual account (local payment, online payment, e-wallet, mobile banking), we log the timestamp, amount, method, and final status (approved/rejected). When you place a bet on Liga 1 or play a live-dealer game, we record the market, stake, outcome, and settlement status. When you withdraw, we log destination account, amount, and processing timestamp. This data is stored in our encrypted database and retained for 7 years to satisfy Indonesian financial auditing requirements.

We collect technical data passively. Your IP address, browser user-agent, device type, and session tokens are logged to detect unauthorized access and prevent fraud. We use geolocation data (derived from your IP) to check whether you are in a jurisdiction where boba77 operates. We do not track your physical movement or store location history beyond your login IP.

KYC documents

Government-issued ID and proof of address collected during account verification and stored encrypted for compliance audit.

Transaction logs

Timestamp, amount, method, and outcome of every deposit, withdrawal, and game session. Retained for 7 years.

Session data

IP address, browser type, device ID, and login tokens used to authenticate you and detect suspicious access.

How We Use Your Data

We use your email and password to authenticate your login and prevent unauthorized access. We use your KYC documents to verify your identity and confirm you meet legal age and jurisdiction requirements. We use your transaction data to settle withdrawals (sending money to your registered bank or e-wallet), process disputes, and generate account statements. We use technical data to identify fraud, prevent bot activity, enforce our terms of service, and improve platform stability.

We report certain data to government authorities where required by law. If you are suspected of money laundering, or if your account receives multiple large deposits followed by immediate withdrawal, we file a Suspicious Transaction Report (STR) with Indonesia's Financial Intelligence Unit (PPATK) per Anti-Money-Laundering (AML) regulations. We do not ask permission before filing these reports—Indonesian law requires them. We also respond to legal requests from Indonesian police or courts if you are under investigation for a crime.

We do not use your data for marketing. We do not send promotional emails about new slot games or Piala AFF tournaments unless you explicitly opt into marketing communications during account setup. Once opted in, you can opt out at any time via your account settings or by contacting our support team.

Third-Party Processors and Data Transfers

Our payment processors (local payment, online payment, e-wallet, mobile banking, local payment, online payment, and bank virtual account providers) receive your account number, amount, and transaction timestamp to execute your deposit or withdrawal. We do not store your payment credentials—your e-wallet PIN or bank password is entered directly in their app, never on boba77. Our payment partners are contractually bound to use your data only to process your transaction and comply with their own regulatory obligations.

Our hosting provider stores our database on encrypted servers. Our servers may be located in Singapore, Malaysia, or other Southeast Asian jurisdictions to ensure fast connection speeds. Regardless of server location, we apply the same encryption and access controls as if servers were in Jakarta or Surabaya. Our hosting agreement includes strict clauses prohibiting them from accessing or using your data for any purpose other than providing server capacity.

We use a third-party identity verification service to cross-check your KYC documents against Indonesian national ID records. This service receives your full name, ID number, and ID photo only—no transaction history or betting data. Verification typically completes within subject to verification on business days.

Your Rights on boba77

You have the right to correct inaccurate data. If your registered name or address is wrong, contact our support team to update it. We will correct your account within 2 business days and confirm the change via email.

You have the right to object to certain processing. If you receive marketing emails and wish to opt out, you can unsubscribe directly from the email footer or update your preference in Account Settings > Notifications. Your objection takes effect within 24 hours.

You do not have the right to delete your account data entirely. We retain transaction records and KYC documents for 7 years per Indonesian financial regulation, even after you close your account. This is a legal requirement, not a choice.

Cookies and Tracking

We use session cookies to keep you logged in. These cookies are deleted when you close your browser. We use persistent cookies (stored for 30 days) to remember your payment method preference and language setting. You can disable cookies in your browser settings, but doing so may prevent boba77 from functioning correctly.

We do not use third-party tracking pixels, Google Analytics, or social-media tracking. We do not know what other websites you visit or what devices you own—we only see your activity within boba77.

Contact and Complaints

If you have a question about this policy or wish to request your data, contact our support team at [email protected] or via the contact form in your account. We will respond within 7 business days. If you believe we have mishandled your data, you may file a complaint with Indonesia's Personal Data Protection Authority (Otoritas Jaminan Infrastruktur Finansial, or OJIF) or your local data protection office.

We update this policy periodically to reflect changes in our processing or Indonesian law. We will notify you via email and in-app banner if material changes occur. Your continued use of boba77 after a policy update constitutes acceptance of the new terms. If you do not agree, you may close your account and request data deletion (subject to the 7-year retention rule above).