xlbola Casino & Sportsbook Data Care

This page describes what we collect when you use xlbola and how we keep that data protected. We at xlbola take data privacy seriously because your personal information—identity documents, payment details, betting records, and account preferences—sits at the centre of how we operate. Our commitment is to collect only what we need, store it securely, and share it only where necessary to serve your account or comply with legal requirements. We do not sell your data to marketing firms, and we do not use it for purposes beyond account management, payment processing, and regulatory compliance.

Our privacy practices reflect the nature of xlbola's service. We operate an online gaming and sportsbook platform available where local law permits, and this requires us to verify your identity, process your payments through Indonesian payment networks like DANA, e-wallet, mobile banking, local payment, and bank channels (online payment, e-wallet, mobile banking, local payment), and maintain betting records for compliance and dispute resolution. Each of these functions involves data, and we handle it responsibly. This policy explains exactly what data we collect, why we need it, how long we keep it, and what rights you have over it.

Our services are available only where local law permits gaming and sportsbook access in your jurisdiction. By using xlbola, you acknowledge that you have read this privacy policy and agree to our data practices. If you have questions about how we handle your data, our support team can answer them through live chat, email, or in-app help channels.

What We Collect When You Use xlbola

We at xlbola collect different types of data depending on how you interact with our platform. At signup, we collect your email address, password, and basic profile information (name, date of birth, phone number). To verify your identity and comply with Know Your Customer (KYC) requirements, we request a national ID, proof of address, and payment method documentation. We store these documents encrypted and access them only when necessary to verify your account or process withdrawals. We collect betting data—every Liga 1 football entry, live-dealer hand, slot spin, and esports market you participate in. This includes timestamps, stakes, results, and payouts. We collect payment information when you fund your account through DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts—we store details needed to process and reconcile transactions but do not store full payment credentials. We collect device and browser information for security purposes (device type, IP address, browser fingerprint) to detect fraud and unauthorized access attempts.

We also collect technical logs from your xlbola sessions—login timestamps, pages visited, features used, any errors encountered. This helps us troubleshoot technical issues and improve our platform's reliability. We do not track you across other websites or use third-party trackers to follow your activity outside xlbola. All data collection is limited to what we need to operate our service, verify compliance, and protect your account. We do not collect location data, and we do not use your data for marketing purposes without your consent.

How we use your data on xlbola

We at xlbola use your data to deliver our service. Your email and password authenticate your access. Your identity documents enable account verification and withdrawal processing—we cannot process your payout requests to mobile banking, local payment, online payment, or bank channels without confirming your identity matches your account. Your betting data allows us to calculate payouts, settle matches and games, and provide you with betting history. We use technical logs to detect fraud, prevent unauthorized account access, and troubleshoot technical problems. We use your payment information to reconcile deposits and withdrawals and provide you with transaction records. We comply with regulatory requirements by maintaining records of your identity, betting activity, and financial transactions for the duration required by law in our service regions.

We do not use your data for marketing beyond sending you account notifications (login alerts, deposit confirmations, withdrawal status updates, important policy changes). We do not share your betting preferences with third parties to target ads at you. We do not sell your contact information. Your data remains your own—we hold it in trust to operate your xlbola account securely and fairly.

Data Security and Third-Party Processors

We at xlbola encrypt all data in transit (using HTTPS) and at rest (using industry-standard encryption). Our servers are hosted in secure data centres with physical access controls, automated backups, and intrusion detection. We limit employee access to your data—only staff who need your information to serve your account can view it. We do not grant access to customer data departments unless you contact support with a specific question. We maintain regular security audits and penetration testing to identify vulnerabilities before attackers can exploit them.

Our data infrastructure involves third-party processors. Payment gateways—the systems that connect xlbola to e-wallet, mobile banking, local payment, online payment, and bank virtual accounts—receive your payment information to process deposits and withdrawals. These processors are contractually obligated to protect your data and use it only for payment processing. We do not allow them to use your data for marketing or secondary purposes. Our email provider sends transactional messages (account confirmations, withdrawal status). Our hosting provider stores our database backups. Each processor signs a data protection agreement committing to security standards and confidentiality. We remain responsible for their data handling, and we audit their practices periodically.

Your Rights and Data Retention

We at xlbola give you rights over your data. You can request access to everything we hold about you—we will provide your identity documents, betting history, payment records, and technical logs in a downloadable format. You can request correction of inaccurate data (if your address is wrong, we will update it). You can request deletion of non-essential data once your account closes, though we may retain betting records and identity information longer if required by law. You can object to certain data processing—for example, you can opt out of non-essential email notifications. To exercise these rights, contact our support team through live chat, email, or in-app help. We process data access requests within 10 business days.

We retain your data for as long as your xlbola account is active. After closure, we retain betting history indefinitely (you may need it for dispute resolution or personal accounting), identity documents for three years (regulatory requirement), and payment records for three years (audit trail). We delete technical logs after 90 days unless you have an active support case. During major holidays like Idul Fitri, Idul Adha, or Imlek, data access requests may take longer due to reduced staffing, but we always honor them within documented timelines.

Cookies and Tracking on xlbola

We at xlbola use cookies to remember your login session, keep you authenticated across xlbola pages, and store your preferences (language, timezone, dashboard layout). These cookies are essential—without them, you would need to log in on every page. We use analytical cookies to understand how users navigate xlbola (which pages are popular, where users drop off, how long sessions last). We do not use these analytics to target ads—we simply use them to improve platform usability. We do not use third-party advertising cookies. Our cookies do not follow you to other websites.

You can disable cookies in your browser settings, but this will prevent you from using xlbola because your session cannot persist. You can clear cookies at any time, which will log you out. We do not use tracking pixels, fingerprinting, or other hidden tracking mechanisms. Our analytics platform is configured to anonymize data—we see usage patterns but not individual user identities.

Jurisdiction and Legal Obligations

We at xlbola operate under jurisdiction-restricted access. Our services are available only where local law permits gaming and sportsbook operations. Different jurisdictions have different data protection rules. Our privacy practices comply with applicable laws in the regions where we operate. We may be required by law to disclose your data to regulatory authorities, law enforcement, or tax agencies. We do not voluntarily disclose user data to these parties—disclosure happens only if we receive a valid legal request. When we receive such a request, we notify you unless the law prohibits notification (e.g., if the request specifies confidentiality). We maintain a log of legal data requests and our responses to demonstrate compliance.

Users in supported jurisdictions across Indonesia—Jakarta, Surabaya, Bandung, Medan, and other regions where applicable law permits our services—have the same data protection rights. If your jurisdiction's laws change and we can no longer legally operate our platform there, we will notify you and provide instructions for closing your account and withdrawing your balance.

Contact Us About Your Data

If you have questions about xlbola's data practices, want to exercise your rights, or believe we have mishandled your data, contact our support team. We are available through live chat (immediate assistance for urgent concerns), email (detailed inquiries and data access requests), and in-app help (general privacy questions). Our multilingual team can explain our privacy practices in detail and help you understand your rights. If you are unsatisfied with our response, you may escalate to our senior privacy officer, who will investigate and respond within 10 business days. We do not charge for privacy inquiries or data access requests.

We remain committed to keeping your xlbola data protected, transparent about how we use it, and respectful of your rights. Our privacy policy reflects our belief that your data belongs to you—we simply hold it securely to operate your account fairly and comply with applicable law. If you have feedback on how we handle privacy, we welcome your input through our support channels.