This Privacy Policy ("Policy") describes how bali19 ("we", "us", "our", "the Platform") collects, uses, discloses, stores, and protects the personal information of users ("you", "User", "Player", "Member") who access or use our online betting platform. By creating an account or using bali19 services, you consent to the data practices described in this Policy. If you do not agree with these practices, you must not use our Platform.
bali19 is committed to protecting your personal data in accordance with internationally recognized data protection principles. We apply stringent security measures and transparent data handling practices to safeguard your information at every stage of processing.
1. Information We Collect
bali19 collects various categories of personal information to provide, maintain, and improve our services. The types of information we collect include:
1.1 Information You Provide Directly
- Account Registration Data: Full name, date of birth, email address, phone number, residential address, username, and password.
- Identity Verification (KYC) Documents: Government-issued identification (KTP, passport, driver's license), proof of address (utility bills, bank statements), and facial verification photos.
- Payment Information: Bank account details (account number, bank name, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers), and transaction history.
- Communications: Messages, emails, chat transcripts, and feedback you send to our customer support team.
- Responsible Gaming Data: Self-imposed deposit limits, loss limits, session timers, self-exclusion requests, and responsible gaming preference settings.
1.2 Information Collected Automatically
- Device and Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, language preferences, and time zone settings.
- Usage Data: Pages visited, features accessed, betting patterns, game preferences, session duration, click-through rates, and navigation paths.
- Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies used to enhance user experience, analyze platform performance, and deliver personalized content.
- Geolocation Data: Approximate geographic location derived from IP address to verify residency and comply with regional gaming regulations.
1.3 Information from Third Parties
- Payment Processors: Transaction confirmation, payment success/failure status, and fraud detection signals from banks and e-wallet providers.
- Identity Verification Services: Document authenticity checks, facial recognition results, and fraud risk scores from third-party KYC providers.
- Game Providers: Betting outcomes, game session logs, and RNG (Random Number Generator) audit data from licensed casino and slot game suppliers.
Data Encryption
All personal data transmitted to and from bali19 is protected using AES-256 encryption and TLS 1.3 protocol, ensuring your information remains secure during transfer.
Secure Storage
Your data is stored on secure servers with multi-layer access controls, regular security audits, and automated backup systems to prevent unauthorized access and data loss.
Limited Access
Only authorized personnel with legitimate business needs can access your personal information. All access is logged, monitored, and subject to strict confidentiality agreements.
Data Minimization
We collect only the minimum data necessary to provide our services, verify your identity, comply with legal obligations, and protect against fraud and abuse.
Retention Limits
Personal data is retained only as long as necessary for the purposes outlined in this Policy, after which it is securely deleted or anonymized in accordance with data retention schedules.
Compliance Certified
bali19's data protection practices are audited by independent third-party compliance firms and align with internationally recognized data protection frameworks.
2. How We Use Your Information
bali19 uses the information we collect for the following lawful purposes:
2.1 Service Delivery and Account Management
- Create, maintain, and authenticate your account.
- Process deposits, withdrawals, and internal fund transfers.
- Enable you to place bets on sports events, casino games, togel draws, and other betting products.
- Calculate winnings, settle bets, and update your account balance in real time.
- Provide customer support, respond to inquiries, and resolve disputes.
2.2 Legal and Regulatory Compliance
- Verify your identity and age to comply with KYC (Know Your Customer) and AML (Anti-Money Laundering) regulations.
- Prevent underage gambling by enforcing our strict 21+ age policy.
- Detect, investigate, and prevent fraud, money laundering, and other illegal activities.
- Comply with legal obligations, court orders, and requests from regulatory authorities.
- Maintain transaction records and audit trails as required by gaming licenses and financial regulations.
2.3 Platform Security and Integrity
- Monitor for suspicious activity, unauthorized access attempts, and account compromise.
- Detect and block bots, automated scripts, and other forms of platform abuse.
- Enforce our Terms and Conditions, including prohibitions on arbitrage betting, bonus abuse, and syndicate operations.
- Protect the fairness and integrity of games by monitoring betting patterns and identifying collusion.
2.4 Service Improvement and Personalization
- Analyze usage patterns to improve platform performance, user interface, and overall user experience.
- Customize content, recommendations, and promotional offers based on your preferences and betting history.
- Conduct A/B testing and research to develop new features and optimize existing services.
- Generate aggregated, anonymized analytics for business intelligence and strategic planning.
2.5 Marketing and Communications
- Send promotional emails, SMS messages, and platform notifications about bonuses, tournaments, and special offers (with your consent).
- Provide personalized betting tips, odds alerts, and game recommendations based on your interests.
- Inform you about important updates, policy changes, and maintenance schedules.
You can opt out of promotional communications at any time by clicking the "unsubscribe" link in marketing emails, adjusting your notification preferences in your account settings, or contacting our support team at [email protected]. Opting out will not affect service-related communications such as transaction confirmations or security alerts.
3. How We Share Your Information
bali19 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following limited circumstances:
3.1 Service Providers and Business Partners
We engage trusted third-party service providers to perform functions on our behalf, including:
- Payment Processors: Banks, e-wallet providers, and payment gateways that process deposits and withdrawals.
- Identity Verification Services: KYC/AML compliance firms that verify your identity documents and perform fraud checks.
- Game Providers: Licensed casino, slot, and sports betting software suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming) that power our games.
- Cloud Hosting Providers: Secure data centers and server infrastructure providers that host our platform.
- Customer Support Tools: Live chat, ticketing, and CRM systems used to deliver support services.
All service providers are contractually bound to use your data only for the specific services they provide to bali19 and to maintain equivalent levels of data protection.
3.2 Legal and Regulatory Authorities
We may disclose your information to law enforcement agencies, regulatory bodies, courts, and government authorities when:
- Required by law, subpoena, court order, or legal process.
- Necessary to comply with gaming license obligations or financial reporting requirements.
- Reasonably necessary to protect the rights, property, or safety of bali19, our users, or the public.
- Required to investigate, prevent, or take action regarding suspected fraud, money laundering, or illegal activity.
3.3 Business Transfers
In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate transaction, your personal information may be transferred to the acquiring entity or successor company. You will be notified of any such change in ownership or control of your personal data.
3.4 With Your Consent
We may share your information with third parties when you have given explicit consent, such as when you authorize us to share your betting results on social media or participate in a third-party promotion.
4. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
4.1 Access and Portability
You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.
4.2 Correction and Update
You have the right to correct inaccurate or incomplete personal information. You can update most account details directly through your account settings. For changes to verified KYC information, contact our support team.
4.3 Deletion (Right to be Forgotten)
You have the right to request deletion of your personal data in certain circumstances, such as when:
- The data is no longer necessary for the purposes for which it was collected.
- You withdraw consent and there is no other legal basis for processing.
- You object to processing and there are no overriding legitimate grounds.
Note: We may retain certain information where required by law (e.g., transaction records for tax and AML purposes) or where necessary to establish, exercise, or defend legal claims.
4.4 Restriction and Objection
You have the right to restrict or object to certain types of data processing, including:
- Objecting to direct marketing (opt-out rights described above).
- Restricting processing while we verify the accuracy of disputed data.
- Objecting to processing based on legitimate interests if you have compelling grounds relating to your particular situation.
4.5 Data Retention and Deletion Schedules
bali19 retains personal data only as long as necessary for the purposes outlined in this Policy. General retention periods include:
- Active Account Data: Retained for the duration of your account's active status.
- Closed Account Data: Retained for 7 years after account closure to comply with financial record-keeping obligations.
- Marketing Data: Retained until you opt out or withdraw consent, after which it is deleted within 90 days.
- KYC Documents: Retained for 7 years after account closure or last transaction, as required by AML regulations.
- Transaction Logs: Retained for 7 years to comply with tax and audit requirements.
4.6 Exercising Your Rights
To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request". We will respond to your request within 30 days. You may be required to verify your identity before we process your request.
5. Cookies and Tracking Technologies
5.1 What Are Cookies
Cookies are small text files stored on your device by your web browser when you visit our Platform. Cookies enable us to recognize your device, remember your preferences, and improve your user experience.
5.2 Types of Cookies We Use
- Essential Cookies: Required for the Platform to function properly, including session management, authentication, and security.
- Functional Cookies: Remember your preferences, language settings, and personalized features.
- Analytics Cookies: Collect aggregated usage statistics to help us understand how users interact with the Platform.
- Marketing Cookies: Track your activity across websites to deliver personalized advertisements (only with your consent).
5.3 Managing Cookies
You can control and delete cookies through your browser settings. However, disabling essential cookies may impair the functionality of the Platform and prevent you from accessing certain features.
6. International Data Transfers
bali19 operates internationally and may transfer your personal data to servers located outside Indonesia. When we transfer data internationally, we ensure that:
- The receiving jurisdiction provides an adequate level of data protection as recognized by international standards.
- Appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs).
- The transfer is necessary for the performance of our contract with you or for the establishment, exercise, or defense of legal claims.
7. Data Security Measures
bali19 employs industry-standard technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, alteration, or destruction. Our security measures include:
- Encryption: AES-256 encryption for data at rest and TLS 1.3 for data in transit.
- Access Controls: Role-based access restrictions, multi-factor authentication for staff, and regular access audits.
- Intrusion Detection: Real-time monitoring, automated threat detection, and 24/7 security operations center.
- Secure Development: Code reviews, vulnerability scanning, penetration testing, and secure software development lifecycle (SDLC) practices.
- Employee Training: Regular data protection and security awareness training for all staff members.
- Incident Response: Documented breach notification procedures compliant with regulatory requirements.
In the unlikely event of a data breach that poses a risk to your rights and freedoms, bali19 will notify you and relevant regulatory authorities within 72 hours in accordance with applicable data protection laws. Notifications will include a description of the breach, the data affected, potential consequences, and mitigation measures taken.
8. Children's Privacy
bali19 strictly prohibits access to persons under the age of 21. We do not knowingly collect, use, or disclose personal information from individuals under 21 years of age. If we become aware that a user is underage:
- The account will be immediately suspended and permanently closed.
- All personal data associated with the account will be securely deleted.
- Any remaining balance will be forfeited (or returned to the depositing source at our discretion).
- The user will be permanently banned from creating future accounts.
If you believe that an underage individual has created an account on bali19, please report it immediately to [email protected].
9. Changes to This Privacy Policy
bali19 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:
- Update the "Last Updated" date at the top of this document.
- Notify you via email or prominent platform notification.
- Provide a reasonable notice period (typically 14-30 days) before the updated Policy takes effect.
Your continued use of the Platform after the updated Policy takes effect constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your data.
10. Contact Us
If you have questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact us:
- Data Protection Officer: [email protected]
- General Support: [email protected]
- Support Hours: 24/7 — Including all Indonesian public holidays
- Response Time: We aim to respond to all privacy inquiries within 48 hours.
For more information about your rights and obligations as a bali19 member, please read our Terms & Conditions. For tools and resources to help you gamble responsibly, visit our Responsible Gaming page.