bobato Privacy Policy
We at bobato encrypt and secure your account data using industry-standard SSL protocols whenever you deposit, verify your identity, or place a bet across our sportsbook (Liga 1, Piala AFF, Champions League, MotoGP, badminton), live dealer (blackjack, roulette, baccarat, Dragon Tiger), slots (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), or esports (Mobile Legends, Free Fire, PUBG Mobile) offerings. This page describes what we collect when you use bobato and how we keep that data protected.
We collect personal data only to verify your account, process deposits and withdrawals, detect fraud, and comply with local law in supported jurisdictions. Your data is not sold, shared with advertisers, or used for purposes outside these categories. We undertake to notify you if our data handling practices change, and we provide tools in your dashboard to review what we hold.
Our bobato privacy commitments apply equally across all regions—Jakarta, Surabaya, Bandung, Medan, and Semarang—and all payment methods (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet). If you have questions about your data or wish to exercise your rights, our support team provides guidance via the contact channels listed at the end of this page.
What Data We Collect on bobato
We collect your email address, phone number, full legal name, and date of birth during account creation. These fields are required so we can send withdrawal confirmations and notify you of account activity. We also collect your residential address, a copy of your identity document (KTP, passport, or driving licence), and proof of address (utility bill or tax statement) to verify your account under KYC requirements. This verification step happens once per account and is mandatory before you can deposit or claim promotions.
We record every deposit, withdrawal, and bet you place—including amounts, timestamps, games, and outcomes. We store your payment method details (the last four digits of your DANA, e-wallet, mobile banking, local payment, or bank card number) to speed up future transactions, but we never store full payment credentials. Your session history, including login times and IP addresses, is logged for 90 days to detect unauthorized access.
Data categories we collect
- Identity: name, email, phone, date of birth, address, government ID
- Financial: deposit and withdrawal history, payment method last digits, promotional credits claimed
- Activity: bets placed, games played, session logs, login times and IP addresses
- Preferences: language, currency, notification settings, bet limits you set
How We Use Your Data on bobato
We use your identity data to verify you are the account holder and to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations in supported jurisdictions. This is a legal requirement for all online gaming platforms operating in Indonesia and other regions where our service is accessible. We do not share your identity document images with third parties; they are stored encrypted in our secure systems.
We use your financial and activity data to process deposits and withdrawals, calculate your tier status and weekly cashback, detect fraud or account takeover, and generate your invoice and transaction history. We never use your activity data to profile you for advertising or sell your betting patterns to data brokers. Your data remains internal to bobato unless we are legally obligated to disclose it (for instance, during law enforcement investigation in your jurisdiction).
Data Processors and Third Parties
We partner with payment processors (the companies behind online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) to enable deposits and withdrawals. These processors see only the amount, date, and account reference—they do not see your full identity or betting history. We also use encrypted cloud servers located outside Indonesia to store backups and run our platform infrastructure; your data remains encrypted in transit and at rest.
We use a third-party verification service to confirm your government ID and address documents are authentic. This service receives a copy of your ID and address proof, processes it automatically, deletes the images after verification completes, and returns only a pass/fail result to us. We do not share your data with marketing platforms, analytics companies (beyond standard web server logs), or any other third party not listed here.
Data Retention and Deletion on bobato
We retain your identity verification documents for the lifetime of your bobato account plus five years after closure, as required by local gaming and tax regulation. Your transaction history is retained for the same period so we can provide withdrawal invoices and respond to account disputes. Your session logs (IP addresses, login times) are deleted automatically after 90 days.
If you close your bobato account, we anonymise your betting history (removing your name and identity link) but retain aggregated play data for statistical analysis. You may request deletion of your personal data by contacting support, subject to regulatory retention obligations. We will confirm deletion within 14 days.
Cookies and Tracking on bobato
Our bobato platform uses functional cookies to keep you logged in and remember your language and betting preferences. These cookies do not track you across other websites and expire when you log out. We do not use advertising cookies or third-party tracking pixels. Your browser settings allow you to disable cookies, but disabling them will sign you out and prevent you from using bobato.
We do not sell your data, track you across sites, or use your betting history for advertising purposes.
Your Rights and Data Access on bobato
You have the right to access all data we hold about you. Log in to your bobato dashboard and select "Account > Data & Privacy" to download your full data export in machine-readable format. This export includes your identity details, all deposits and withdrawals, all bets and outcomes, and your tier history. We provide this export within 7 days of your request at no cost.
You may request correction of inaccurate data (e.g., a typo in your address) by contacting our support team. You may also request we stop using your data for promotional emails—toggle "Email promotions" in your preferences to opt out. If you believe we've violated your privacy rights, you may file a complaint with the data protection authority in your jurisdiction.
Contact Us About Privacy on bobato
Our data protection officer and support team are available via the "Help" menu in your bobato account dashboard. You may also reach our support team by email or chat during business hours. We respond to privacy inquiries within 7 business days. If your concern requires escalation, we will route it to our legal team for investigation.
Our bobato privacy policy is subject to change. We will notify you of material changes by posting an updated policy here and, if the change affects your rights substantially, by sending an email to your registered address. Continued use of bobato after the notification period constitutes acceptance of the new policy.
Summary: Your Data and bobato's Commitments
We collect personal, financial, and activity data necessary to verify your account, process deposits and withdrawals, detect fraud, and comply with local law. We encrypt all data in transit and at rest, never sell your data to third parties, and do not use your betting patterns for advertising. Your data is retained only as long as required by regulation and your account status. You have the right to access, correct, delete, and port your data using tools in your bobato dashboard or by contacting our support team.
Our commitment to your privacy is binding across all regions where bobato operates and all payment methods you use. If you have any questions about how we handle your data, how to exercise your privacy rights, or concerns about a potential breach, our support team is available through your dashboard contact form.