onbola Privacy Policy

This page describes what we collect when you use onbola and how we keep that data protected. When you download our app on Android, access our platform via mobile browser on iOS, or log into your account from desktop, we gather certain information to verify your identity, process your payments, and deliver our services. We take data security seriously and follow industry standards for encryption and access control.

We at onbola collect only the data necessary to operate our platform and comply with financial regulations. We do not sell your information to third parties. We share data only with our payment processors, identity-verification partners, and other service providers who require it to support onbola. This policy explains what data we hold, how we use it, and what rights you have over your information.

Our privacy practices apply to all onbola users, regardless of their location or payment method — whether they deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfers through mobile banking, local payment, online payment, and e-wallet.

Data we collect when you join onbola

When you register on onbola, we ask for your full name, mobile phone number, email address, and date of birth. We verify these details during our identity-check process. You must also provide a copy of your photo ID — a national identity card, passport, or driving licence — before we activate your account. We store scans of your ID on secure servers for up to five years after your account closes, to comply with Indonesian financial regulations.

We collect your residential address and, if needed, your tax identification number. This information helps us verify your location and comply with local tax requirements. We do not share your address with third parties except where required by law or to support payment processors.

When you log into onbola, we record your IP address, device type (Android phone, iOS device, or desktop), and the browser or app you use. We track login times and locations to detect unauthorised access. If unusual login activity is detected — for example, a login from a new city within hours of another login — we may contact you to confirm that your account has not been compromised.

Our onbola payment data practices

We do not store your payment credentials. When you deposit on onbola via DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet, your e-wallet credentials are handled by the e-wallet provider, not by onbola. We receive only confirmation that your deposit succeeded and the amount received. We never see your e-wallet PIN, password, or biometric data.

For bank transfers via mobile banking, local payment, online payment, or e-wallet virtual accounts, we generate a unique account number for your onbola profile. We do not store your actual bank credentials. We receive deposits from the bank with your virtual-account reference; settlement happens automatically.

All transaction records on onbola are encrypted and stored on secure servers. You can view your complete transaction history — every deposit, withdrawal, and game outcome — in your onbola account settings. We retain transaction records for at least seven years to comply with Indonesian accounting standards.

We at onbola encrypt all payment communications using TLS 1.3. Your payment data never travels across an unencrypted connection.

onbola security standards

How we use your data on onbola

We use your personal information for the following purposes:

To verify your identity and prevent fraud on onbola
To process your deposits and withdrawals
To calculate and settle game outcomes
To send you account notifications and support messages
To investigate disputes and complaints
To comply with Indonesian financial and tax regulations
To detect money-laundering or other financial crime
To improve our onbola platform through analytics and user feedback

We do not use your data for marketing unless you explicitly consent. We do not share your phone number or email with other companies. We do not rent or sell your data.

Third-party processors and data sharing from onbola

We share your data with third-party service providers who support onbola. These include:

Payment gateway processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and banks)
Identity-verification services that confirm your photo ID
Fraud-detection services that monitor for suspicious account activity
Cloud hosting providers that store our databases
Legal and tax advisors who help us comply with regulations

All third-party processors are required by contract to handle your data securely and to use it only for the purpose specified. We do not permit third parties to sell your information or use it for marketing.

Our onbola servers may sit outside your jurisdiction. Some data may be processed by providers in other countries. However, we maintain the same level of protection regardless of server location. Our privacy policy applies equally to all onbola users, whether they access from Jakarta, Surabaya, Bandung, Medan, Semarang, or Yogyakarta.

Identity data: Stored securely for five years after account closure; used only for verification and fraud prevention.
Payment data: Credentials never stored on onbola servers; shared with payment processors only as needed to process transactions.
Transaction records: Retained for seven years to comply with Indonesian accounting regulations.
Activity logs: Login times, IP addresses, and device types recorded for security monitoring.

Your rights over your data on onbola

You have the right to access all personal data we hold about you on onbola. Log into your account and request a data export; we will provide it within fourteen days. You also have the right to request that we correct inaccurate information — for example, if your registered address has changed.

You may request deletion of your onbola account and associated data. We will delete non-essential information immediately. However, we retain transaction records, identity verification documents, and account history for seven years as required by law. We cannot delete data that is subject to legal or regulatory hold.

We do not use your onbola data for automated decision-making or profiling. All account decisions — such as account suspension or bonus denial — are made by our human support team, not by algorithms.

Cookies and tracking on onbola

We use cookies on onbola to keep you logged in, to remember your preferences (language, display settings), and to prevent fraud. Cookies are small text files stored on your device. Our onbola cookies do not track your behaviour across other websites; they apply only to our platform.

We do not use third-party tracking cookies or analytics pixels on onbola. We measure platform performance through our own server logs, not through external services. If you disable cookies in your browser, some onbola features may not work properly — for example, you may be logged out unexpectedly.

Data retention and deletion on onbola

We retain your personal data only as long as necessary. Identity documents are kept for five years after your account closes. Transaction records are kept for seven years. Account closure requests are processed within thirty days; we then delete your email, phone number, and preferences. However, anonymised game records remain indefinitely for statistical and compliance purposes.

If your onbola account is closed due to violation of our terms, we may retain your data indefinitely to prevent re-registration by the same person.

Contact us about onbola privacy

If you have questions about your data or how we use it on onbola, contact our support team via live chat in your account. Our team can answer questions about data access, deletion requests, or privacy concerns. We respond to all privacy inquiries within seven business days.

This privacy policy was last updated in the current year. We may update this policy from time to time. If we make material changes, we will notify you via email or account notification. Your continued use of onbola after a policy update constitutes acceptance of the new policy.