bursaliga Privacy Policy

This page describes what we collect when you use bursaliga and how we keep that data protected. We are committed to transparency about our data practices, and we respect your privacy rights as an account holder on our platform. Our policy covers personal information, payment data, cookies, and how third-party processors access your details.

We collect only the information necessary to operate our gaming platform, verify your identity for compliance, process your deposits and withdrawals, and communicate with you about your account. We do not sell your data to marketers or brokers. We do not share your identity with other players. Your information is encrypted, logged securely, and accessible only to authorised bursaliga staff and essential third-party processors such as payment networks and identity-verification vendors.

If you have questions about how we handle your data, how to request access to your information, or how to exercise your privacy rights, our support team can guide you through the process. We also describe below how you can contact us if you have concerns about our practices.

What Data We Collect on bursaliga

We collect personal information in three phases: account registration, identity verification (KYC), and ongoing account activity.

Registration Data

When you create a bursaliga account, we collect your email address, full name, date of birth, and phone number. We also record your IP address and device type when you register. This baseline information is required to open your account and establish account security (password recovery, login notifications). We do not share your email or phone number with other players; these are private account credentials visible only to you and our support team.

Identity Verification (KYC)

Before your first withdrawal, we require identity verification. You upload a government ID photo and proof of address (utility bill, bank statement) through your account dashboard. We use a third-party identity-verification vendor to scan, validate, and store these documents securely. That vendor does not retain your documents beyond the verification process—once approved, your documents are encrypted and held by bursaliga only for compliance and audit purposes. We keep verification records indefinitely for legal compliance, even if you close your account. Our KYC process protects both you and our platform from fraud and money laundering.

Note: Your government ID and address documents are encrypted and stored separately from your account password and login credentials, reducing the risk of cross-system breaches.

Transaction and Account Activity Data

We record every deposit, withdrawal, and game wager you place on bursaliga. This includes:

Deposit amount, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual account), and timestamp
Withdrawal amount, destination, and approval status
Game type, stake amount, outcome, and timestamp for every bet or spin
Your account balance, bonus balance, and tier status at any given time
Login timestamps and IP addresses for each session

We retain this activity data for compliance, fraud detection, and customer support. Your transaction history is visible to you in your account dashboard at all times. Our support team accesses this data only to resolve disputes or investigate suspicious activity.

Cookie and Tracking Data

We use cookies to remember your login status, display preferences, and language settings. Cookies are small text files stored on your device; they are not readable by third parties. We do not use cookies to track you across other websites. Our analytics vendor (a trusted third party) collects anonymised usage data—page views, session duration, feature popularity—to improve our platform. This data does not identify you personally; it aggregates behaviour across many users to show us which features are most used and where players encounter problems.

We at bursaliga keep your personal data encrypted at rest and in transit, accessible only to authorised staff and essential processors.

bursaliga Data Security Team

How We Use and Protect Your Data on bursaliga

Our Use of Your Information

We use your data for the following purposes:

Account administration: Creating your account, processing logins, resetting passwords, and managing account settings.
Payment processing: Transmitting deposit and withdrawal instructions to payment networks (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet). These networks are third-party processors and see your name, account number, and transaction amount as required for fund transfers.
Compliance and fraud prevention: Verifying your identity, checking for suspicious patterns, detecting account takeover attempts, and maintaining records for regulatory audits.
Support and communication: Responding to your support requests, notifying you of account changes (bonus credits, tier advancement, withdrawal approvals), and sending platform updates.
Game operation: Recording your bets, calculating outcomes, settling winnings, and tracking your promotion eligibility.
Platform improvement: Analysing aggregated usage data (not linked to your name) to identify bugs, improve features, and optimise performance.

Data Security and Encryption

We encrypt all data in transit using HTTPS (the secure web protocol). Your password is hashed and stored securely—we never retain readable passwords. Your KYC documents are encrypted at rest on secure servers with limited staff access. Our servers are hosted by trusted infrastructure providers with backup systems and disaster-recovery protocols. We conduct regular security audits and respond to suspected breaches immediately, notifying affected account holders as required by law.

Third-Party Processors

We work with essential third parties who access portions of your data:

Payment networks (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment): Receive your name and account details to process fund transfers. They are bound by their own privacy policies and payment industry regulations.
Identity-verification vendor: Scans and validates your government ID and address proof. They delete original documents after verification; we retain encrypted confirmation only.
Analytics vendor: Collects anonymised usage metrics to help us improve the platform. They see no personal identifying information.
Email service provider: Delivers support responses and account notifications to your email. Your email address is shared only with this vendor for delivery purposes.

All third parties are contractually bound to protect your data and use it only for specified purposes. We do not sell your data to any other parties.

Your Rights and Data Access

You have the right to:

Access your data: Request a copy of all personal information we hold about you. Contact our support team through your account dashboard.
Correct your data: Update your name, phone number, or email address through your account settings. If you discover errors in your transaction history, report them to support.
Delete your account: Request permanent account closure and data deletion (except records required by law, such as KYC and transaction logs for compliance). Closure takes effect after any pending withdrawals complete.
Data portability: Request a structured copy of your data in a common format (such as CSV). Our support team can arrange this within a reasonable timeframe.
Withdraw consent: If you opted into marketing emails, you can unsubscribe at any time via the link in our emails.

Data Retention and Jurisdiction

We retain your transaction records indefinitely for legal and audit compliance. Your KYC documents are kept for a minimum of five years after account closure to satisfy regulatory obligations. Cookie data expires after your browser closes or after a set period (typically 30 days) unless you opt to stay logged in. Our servers may sit outside your jurisdiction—currently they are hosted in trusted data centres. By using bursaliga, you acknowledge that your data may be processed outside Indonesia, subject to encryption and contractual protections equivalent to or exceeding local standards.

Changes to This Policy

We may update this privacy policy occasionally to reflect changes in our practices or legal requirements. We will notify you of material changes via email or a notice on our platform at least 30 days before the change becomes effective. Your continued use of bursaliga after the effective date constitutes acceptance of the updated policy.

Contact Us About Privacy

If you have questions about our privacy practices, wish to exercise any of your rights, or believe your data has been mishandled, contact our support team through your bursaliga account dashboard. Our team can address most concerns directly. If you believe we have violated your privacy rights and our support team cannot resolve the issue, you may file a complaint with your local data-protection authority or pursue legal remedies available in your jurisdiction.