Privacy Notice

Version 1.4 · in force from 11 October 2026

This notice explains what we do with your personal data. It is written to meet our obligations under Law No. 27 of 2022 on Personal Data Protection (UU PDP).

1. Who is responsible

PT Bali Beach Volleyball, operating Bali Volleyball Academy at Kerobokan, Bali, is the data controller for the data described here. Our contact details are at the end.

2. What we collect

When you book or sign up: your name, the name you like to be called, your WhatsApp number, your email address, and what you booked.

When you create an account: the above, plus a password, which we never store in readable form.

When you pay: the amount, the method, and a reference. Card and e-wallet details are handled by our payment provider and are never stored on our systems.

When you take part: attendance, session history, and, if you tell us, whether you are a woman or a man, which we use only where a session is for women or for men.

If you are under 18: date of birth and a parent or guardian's name and contact number. We treat this as specific personal data and hold it more carefully.

When you use this site: a session cookie so you stay signed in, your IP address and browser, kept for security and to investigate abuse.

Photographs, video and sound: images of you taken at the venue, and video with sound from the cameras that record our courts, used as described in section 6.

3. Why we use it, and on what basis

4. Who else sees it

Our payment provider, to take payment
Our email provider, to deliver confirmations and reminders
Our messaging provider, where we reply to you on WhatsApp
Our accountant and, where required, the Indonesian tax authority
Coaches and reception staff, only as much as they need to run your session

We do not sell your personal data, and we do not share it for anyone else's marketing.

Some of these providers process data outside Indonesia. Where they do, we rely on the transfer conditions permitted by UU PDP and satisfy ourselves that the recipient gives an adequate level of protection.

5. How long we keep it

Your account and booking history: while your account is open, and for two years after your last visit, so we can welcome you back rather than start again
Accounting records: ten years, as Indonesian law requires
Consent records: for as long as we rely on them, and afterwards as evidence that consent was given
Photographs and video used in our marketing: until you withdraw consent, or we no longer need them
Court camera footage: 7 days, then overwritten automatically, unless we need it for an incident or a legal claim, or a player asked for a recording of their session
Security logs: twelve months

When a period ends, we delete or anonymise the data.

6. Photographs and video

You choose whether we may use images of you in our own posts and marketing, and you can change your mind at any time by telling us. Withdrawing consent stops future use; it cannot always pull back something already published, and we will tell you honestly what we can and cannot remove. We do not use images of under 18s in marketing without a parent or guardian's separate consent.

Court cameras, livestreams and recordings

Fixed cameras record every court on video with sound at all times, including when nobody is playing. We do this for safety and security, to settle disputes and incidents, and so that players can get a recording of their own session. Our basis is our legitimate interest in running a safe venue; signs at the entrance and on each court tell you before you step on.

Camera footage is not shared or published, except in the cases below. Our staff look at it only to check an incident or to make a recording a player asked for
Footage stays on our recorder for 7 days and is then overwritten automatically, unless we need it for an incident or a legal claim
Recordings on request: a player who took part in a session can ask for a recording of it. It covers the whole court for that time, so it may include other people on and beside the court and anything said near the cameras. We send it only to the player who asked, and they may share the link on. A shared link stops working after 30 days
Livestreams: some sessions and tournaments are streamed live on our channels. Livestreams are public while they run and may stay on our channels afterwards
Marketing: a clip is used in our marketing only if you said yes to images of you. Recordings of under 18s are never used in marketing without a parent or guardian's separate consent
Teenager classes: no player can ask for a recording of a teenager class, and it is not livestreamed unless the parent or guardian of every player in the class has agreed

The cameras cannot be switched off for one player or one session. If you do not want to appear in a livestream or a published video, tell reception before you play and we will keep you off the livestream, by stopping the stream on your court or keeping the session off our public channels. The recording itself continues and is overwritten after 7 days, like all other footage. Keeping you off the livestream does not keep you out of recordings: any player in your session can still ask for a recording of it, and it may show you. Our Terms and Conditions (section 9) make this a condition of playing here.

You can ask us to remove a clip or a recording of you, or to cut you out of a livestream we still host. We will do so unless we need it for an incident or a legal claim, and will tell you if that is why.

The same applies when we bring our cameras to events at other venues. Cameras belonging to a host venue are the host's, and its own privacy notice covers them.

7. Your rights

Under UU PDP you may:

be told what we hold about you and why
get a copy of it
have it corrected or completed
have it deleted, where we have no lawful reason to keep it
withdraw your consent, where consent is what we relied on
object to how we use it, or ask us to pause using it
ask us to send your data to somebody else in a usable form
seek compensation where our failure has harmed you

Ask us and we will answer. If we cannot do what you ask, we will tell you why.

8. If something goes wrong

If personal data is exposed in a way that puts you at risk, we will tell you and the Indonesian authority within 72 hours of becoming aware, and tell you what happened and what to do about it.

9. Children

We do not knowingly create accounts for people under 18 without a parent or guardian's consent. If you believe a child's data is here without that, tell us and we will deal with it.

10. Keeping it safe

Passwords are stored only as salted hashes. Sessions can be revoked. Access to the register is limited by role, so somebody who runs the desk cannot see the books and somebody who reads the books cannot change a booking. We record who changed what.

11. Changes

We may update this notice. Every version is dated and kept, and you can ask for the version that applied when you signed up.

12. Contact us

PT Bali Beach Volleyball, Kerobokan, Bali, Indonesia. Reach us on WhatsApp at +62 877 2133 7407 or by email at bva@balivolleyballacademy.com. Ask for whoever handles data protection and your message will get to the right person.

Data requests. Email bva@balivolleyballacademy.com with the subject line "Privacy request". Say what you want: a copy of your data, a correction, deletion, or to stop marketing. We reply within 3 working days and complete the request within the period UU PDP allows.

YouTube API Services

BVA uses YouTube API Services to run the live streams of our courts and to publish short coaching videos on our own YouTube channel. By watching our streams or videos on YouTube or through the YouTube player on our pages, you are also bound by the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google's Privacy Policy applies (https://policies.google.com/privacy).

What we use it for: only our own channel. Our venue server signs in once with BVA's own Google account to start and end the live broadcasts of our courts and to upload coaching clips that a BVA manager has approved. We do not ask you to sign in with your YouTube or Google account, and we do not access, collect, store or share any data from your YouTube or Google account.

The YouTube player on our watch page is provided by YouTube; YouTube may set its own cookies when it plays. We do not receive personal data from it.

Revoking and deleting: BVA's access to its own channel can be withdrawn at any time in the Google security settings (https://myaccount.google.com/permissions). Access data held on our server for the channel (the sign-in token) is deleted within 7 days of access being withdrawn or of the service ending. If you appear in one of our videos and want it removed, tell us at bva@balivolleyballacademy.com or at reception and we remove it from our channel.

Ads measurement

We advertise on Google. To know which adverts bring people who book, our pages can carry the Google Ads tag. It records the pages you see, that you came from an advert (the ad click), and completed bookings and purchases with their value in Rupiah and our booking reference. It does not receive your name, phone number or email.

The tag sets cookies only after you choose Allow in the cookie bar. Until then Google receives only cookieless signals without identifiers. If you choose Only necessary, the tag does not load from the next page on.

Google keeps this data under its own privacy policy: policies.google.com/privacy. When you allowed it, we keep the ad click identifier with your booking for 90 days, to report a sale made later at reception.

You can change your answer at any time: Cookie settings, at the bottom of every page.

Ads measurement

The tag sets cookies only after you choose Allow in the cookie bar. Until then Google receives only cookieless signals without identifiers. If you choose Only necessary, the tag does not load from the next page on.

You can change your answer at any time: Cookie settings, at the bottom of every page.

Terms and Conditions Refund Policy