fortunabola Privacy Policy

This page describes what we collect when you use fortunabola and how we keep that data protected. We take your privacy seriously; we collect only the personal information needed to verify your account, process your payments, and comply with anti-money-laundering regulations.

When you create an account on fortunabola, we collect your name, date of birth, phone number, email address, and identification document (passport or national ID) to verify your identity. We also log your account activity—login times, games played, deposits and withdrawals—to maintain security and detect unusual behavior. We do not sell your information to third parties, and we do not use it for marketing unless you explicitly consent.

Our servers may be located outside your jurisdiction, but we apply the same data protection practices globally. If you have questions about how we handle your data or want to access or delete your information, contact our support team and we will assist you within 30 days.

What Data We Collect on fortunabola

Account Information and KYC Verification

We collect the following data when you open an account on fortunabola: your full name, date of birth, phone number, email address, physical address, and a copy of your identification document (passport, national ID, or driver's license). We use this information to verify your identity, prevent fraud, and comply with anti-money-laundering and know-your-customer regulations in jurisdictions where we operate. Your identification document is stored encrypted and is accessed only by our compliance team. We do not display it in your account or share it with other users.

We also collect your preferred payment method: if you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we store the account or card identifier so we can process future transactions faster. Your payment information is encrypted and stored separately from your personal data.

Activity and Transaction Logging on fortunabola

We log every action on fortunabola: when you log in, which games you play, how long you play, your wagers and outcomes, deposits and withdrawals, and any customer support interactions. This data helps us detect fraud, investigate disputes, and improve our platform. We retain this activity log for as long as your account is active, plus a defined retention period (typically 5 years) for regulatory compliance. After that, we delete or anonymize it unless law requires us to retain it longer.

We also collect device information: your IP address, browser type, operating system, and device model. This helps us identify unauthorized access attempts and prevent account takeovers. If you log in from an unusual location or device, we may prompt you to confirm your identity or enable two-factor authentication.

KYC and compliance: We collect identification data to comply with anti-money-laundering regulations in supported jurisdictions. This data is encrypted and accessed only by our compliance team. We never share it with third parties without your consent or legal requirement.

Cookies and Analytics on fortunabola

We use cookies to store your session token so you stay logged in when you navigate our platform. We also use analytics cookies to track how users interact with our site—which pages you visit, how long you stay, whether you complete deposits—so we can improve our platform. These analytics cookies do not identify you personally; they are tied to your session but are not linked to your account data.

You can disable cookies in your browser settings, but some platform features may not work correctly if you do. We also respect do-not-track signals; if your browser sends a do-not-track request, we do not collect additional analytics data beyond what is necessary to operate fortunabola.

How We Use Your Data and Your Privacy Rights

Data Use and Third-Party Processors

We use your data for four primary purposes: (1) to verify your identity and prevent fraud, (2) to process your deposits and withdrawals through payment providers, (3) to resolve disputes and investigate complaints, and (4) to comply with anti-money-laundering and tax laws in supported jurisdictions. We do not use your data for marketing, advertising, or profiling unless you explicitly opt in.

We share your data with third-party processors in limited cases: payment providers (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive your payment information to process transactions; our hosting provider accesses your data to maintain our servers and backups; and our compliance consultants may review transaction records to verify we meet regulatory standards. Each third party is contractually bound to protect your data and use it only for the purposes we specify.

We never sell your data to marketing companies, data brokers, or advertisers. If a law enforcement agency or regulator requests your data, we require them to provide a legal warrant or regulatory order. We will notify you of such requests unless law prohibits us from doing so.

Your Rights on fortunabola

You have the right to access, correct, or delete your personal data. If you want to review the data we hold about you, log into your account and go to Settings > Account Data, or contact our support team. We will provide your data in a readable format within 30 days. If you find incorrect information, you can update it yourself or ask us to correct it.

You also have the right to request deletion of your account and associated data. If you close your account, we delete your personal information (name, phone, email, address) within 30 days, except where we are required by law to retain it for tax or anti-money-laundering compliance. Your transaction history and game records may be retained for 5 years as required by regulations. You can request account deletion by contacting our support team.

On fortunabola, your privacy is protected by encryption, limited data collection, and strict access controls. We do not sell your data, and we comply with all applicable data protection laws in supported jurisdictions.

fortunabola data protection principle

Data Security and International Transfers

We encrypt all personal data in transit (using TLS) and at rest (using AES-256). Our servers are protected by firewalls, intrusion detection, and regular security audits. We limit access to your data to authorized employees and contractors who need it to perform their jobs. All staff sign confidentiality agreements.

Our servers may be located outside your country, including in jurisdictions with different data protection laws. When we transfer your data internationally, we apply the same encryption and access controls regardless of location. If you are in the EU or a jurisdiction with specific data residency requirements, contact our support team to discuss options.

Contact and Data Protection Officer

If you have questions about our privacy practices, want to access or delete your data, or believe we have violated your privacy rights, contact our support team through the app or website. We will respond within 30 days. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction. We are committed to working with regulators to resolve any privacy disputes.

Our support team operates across Jakarta, Surabaya, Bandung, Medan, and Semarang, and responds in Indonesian and English. For complex data requests or disputes, we may involve our compliance and legal teams, but response times remain within 30 days. We also honor requests related to Idul Fitri, Idul Adha, Imlek, and Nyepi holidays by extending response windows by a few business days if necessary.

Key privacy practices

  • We collect only data necessary for account verification, payment processing, and regulatory compliance.
  • Your identification document is encrypted and accessed only by our compliance team.
  • We do not sell your data to third parties or use it for marketing without your consent.
  • You can access, correct, or delete your personal data within 30 days of request.
  • We encrypt all data in transit and at rest; our servers are protected by firewalls and security audits.