balislot Platform Privacy Notice

This page describes what we collect when you use balislot and how we keep that data protected. We at balislot collect personal information only to operate our platform, verify your identity, process payments via QRIS, e-wallet, mobile banking, local payment, online payment, and e-wallet, and provide customer support across Jakarta, Surabaya, Bandung, Medan, and Semarang.

Our privacy practices comply with data protection regulations in supported jurisdictions. We do not sell your data to third parties. We do not share your account credentials with payment processors. We encrypt all sensitive information in transit and at rest using industry-standard protocols.

This notice sets out our data collection, storage, retention, and your rights as a balislot user.

What Data We Collect on balislot

We at balislot collect the following categories of information:

Account data: When you create a balislot account, we collect your email address, mobile phone number, full name, date of birth, and residential address. We use this information for account verification, customer support contact, and regulatory compliance (anti-money-laundering checks).

Identity verification documents: Before your first withdrawal, we request a government-issued ID (Indonesian KTP, passport, or equivalent), proof of address (utility bill, bank statement), and proof of payment method (screenshot of your QRIS, e-wallet, or mobile banking account showing your name). We store these documents encrypted on our servers in Jakarta and retain them for seven years per our regulatory obligations. We do not share these documents with third parties except as required by law.

Payment data: We collect transaction history showing which payment method you used (local payment, online payment, e-wallet, mobile banking, local payment, online payment), deposit and withdrawal amounts, and settlement timestamps. We do not store your full payment credentials (credit card numbers, bank account numbers). Our payment processors (e-wallet gateway, mobile banking integration, local payment API) hold your credentials separately and share only tokenised references with balislot.

Gaming data: We collect records of your roulette spins, blackjack hands, slot rounds, and sportsbook wagers. This includes bet amounts, outcomes, timestamps, and your balance before and after each transaction. We use this data to calculate your account balance, resolve disputes, and detect fraudulent patterns (e.g., rapid-fire bets inconsistent with human play).

Device and usage data: When you use our mobile app or web platform, we collect your device type (Android, iOS, or browser), IP address, and session duration. We use this information for app diagnostics, crash reporting, and security monitoring. We do not track your location or access your phone's camera, microphone, or contact list.

Support communications: When you contact our support team via in-app chat, email, or phone, we record the content of your inquiry, our response, and the resolution. We retain these records for two years to handle account disputes and improve our support processes.

Key takeaways

We collect identity, payment, and gaming data to operate balislot and comply with regulations.
We do not store full payment credentials—only tokenised references from payment processors.
We encrypt all data in transit (TLS 1.3) and at rest (AES-256) on servers in Jakarta.
We retain identity documents for seven years; gaming records for two years; account data while your account is active.
We do not share your data with third parties except payment processors and regulators when legally required.

Our balislot Data Protection and User Rights

Data Storage and Encryption

We at balislot store all account and gaming data on encrypted servers located in Jakarta. Our database servers use AES-256 encryption at rest. All data transmitted between your device and our balislot servers uses TLS 1.3 encryption in transit. We maintain database backups in Surabaya and Bandung for disaster recovery. If our Jakarta server fails, your account data becomes accessible within 2 hours from our Surabaya backup without data loss.

We do not store your data on cloud platforms outside our control. We do not transfer your personal information to servers outside supported jurisdictions. Our infrastructure remains entirely within Indonesia—Jakarta primary, Surabaya and Bandung backups.

Third-Party Processors

We at balislot share limited data with third-party processors under confidentiality agreements:

Payment processors: OVO, e-wallet, mobile banking, local payment, and online payment receive only your mobile phone number and transaction amount. They do not receive your full name, ID, or account balance.
Game suppliers: Third-party slot and esports data providers (Pragmatic Play, Microgaming) receive only your account ID and session timestamps. They do not receive your identity or payment information.
Support platform: Our ticketing system (used to manage support inquiries) encrypts your support messages and stores them on our own servers, not third-party clouds.

We do not sell your data to advertisers or data brokers. We do not share your gaming activity with social media platforms. We do not use your data for marketing outside the balislot platform without explicit consent.

Your Rights on balislot

We at balislot respect your data rights. You can:

Access your data: Request a complete copy of your personal information stored on balislot. We provide this within 7 business days in machine-readable format (CSV or JSON).
Correct your data: Update your email, phone, address, or name directly in your account settings. If you cannot edit a field, contact our support team and we correct it within 24 hours.
Delete your account: Close your balislot account permanently. We retain your identity documents (ID, proof of address) for seven years per AML regulations, but delete all other personal data within 30 days of closure. Your gaming history remains archived for seven years to prevent fraud (e.g., preventing account reopening to evade withdrawal limits).
Opt out of promotional communications: Unsubscribe from email or SMS notifications in your account preferences. We honour opt-out requests within 24 hours. During Liga 1 playoffs, Piala Indonesia finals, or Piala AFF tournaments, we may send transactional SMS (e.g., withdrawal confirmations) regardless of marketing opt-out status.

Note: We at balislot retain identity documents for seven years to comply with anti-money-laundering regulations in supported jurisdictions. You cannot request deletion of these documents while they remain legally required.

Cookies and Tracking on balislot

Our balislot platform uses cookies and local storage to maintain your session and remember your preferences. We use the following categories:

Essential cookies: Session tokens that keep you logged into balislot. Without these, you cannot stay authenticated.
Preference cookies: Your selected language, theme (light/dark), and Low Data Mode toggle. We store these on your device only; they do not track you across the web.
Analytics cookies: We use basic analytics (page views, feature usage) to improve the balislot app and website. We do not use Google Analytics or third-party trackers. Our analytics data is aggregated and anonymised.

We do not use retargeting pixels or cross-site tracking. We do not build profiles of your browsing behaviour outside balislot. When you log out of your balislot account, your session token is deleted and you are fully logged out.

Contact Us About Privacy on balislot

If you have questions about our privacy practices, data retention, or your rights on balislot, contact our support team via in-app email or phone. Our privacy officer reviews all data requests within 7 business days. We provide responses in English and Indonesian. If you believe we have mishandled your data or violated this privacy notice, you can escalate your concern to our compliance team, and we investigate within 14 days.

We at balislot maintain this privacy notice on our platform and update it when our practices change. We notify users of material changes (e.g., new data collection, new processors) via email at least 30 days before the change takes effect. Our services are available only where local law permits. Users are responsible for verifying that their use of balislot complies with their own jurisdiction's data protection and privacy regulations.