Privacy Policy — ojk88 Data Commitment

1 Who We Are

ojk88 is an internationally operated online betting and casino platform accessible at https://ojk88.vip. We provide sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) services primarily to English-preference players across Indonesia, including in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Makassar, and Palembang.

For the purposes of this Privacy Policy, "ojk88", "we", "us", and "our" refer to the ojk88 platform operator and its affiliated entities responsible for the collection and processing of personal data submitted through the Platform. We act as the data controller in respect of the personal information described in this Policy.

If you have any questions about our identity as a data controller or wish to exercise your data rights, please contact us using the details set out in Section 14 of this Policy.

2 Data We Collect

ojk88 collects the following categories of personal data from Members and visitors. We collect only what is necessary for legitimate operational, legal, and security purposes:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used for 21+ age verification).
• Residential address in Indonesia (street, city, province, postal code).
• Email address and mobile phone number.
• Chosen username and encrypted password hash (we never store your password in plain text).

2.2 KYC Verification Data

• Scan or photograph of your Indonesian National Identity Card (KTP) or passport.
• Selfie photograph for liveness verification, where required.
• Proof of address documentation (e.g., utility bill, bank statement) for enhanced due diligence.

2.3 Financial & Transaction Data

• Bank account details for deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata).
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja transactions.
• Transaction history including deposit amounts, withdrawal requests, dates, and payment method used (all denominated in IDR).
• Card details (masked) for Visa and Mastercard transactions where applicable.

2.4 Betting & Gaming Activity Data

• Full record of bets placed, markets selected, odds accepted, stakes, and outcomes across all product lines (Sportsbook, In-Play, Casino, Slots, togel, Bandar Ceme).
• Bonus claims, wagering activity, and promotion participation history.
• Session durations and game play patterns used for responsible gaming monitoring.

2.5 Technical & Device Data

• IP address and approximate geolocation (country and city level only).
• Device type, operating system, browser type and version.
• Session timestamps and page interaction logs.
• Cookie identifiers and similar tracking data (see Section 9).

2.6 Communication Data

• Records of live chat conversations with our customer support team.
• Email correspondence sent to or received from our support address.
• Any feedback, complaints, or dispute submissions you make through the Platform.

3 How We Collect Data

ojk88 collects personal data through the following channels and methods:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or submit any form on the Platform.
• Automatically: Through cookies, session tokens, and server-side logging as you browse and interact with the Platform. This includes page views, clicks, and session duration data collected passively.
• From third-party KYC providers: Identity verification results, document authenticity scores, and PEP (Politically Exposed Person) / sanctions list screening results are returned to us by our contracted KYC verification partners.
• From payment processors: Transaction confirmation data, payment status updates, and fraud screening results are received from our banking and e-wallet payment partners (BCA, BRI, OVO, DANA, etc.) when you conduct financial transactions.
• From fraud detection systems: Aggregated behavioural signals and device fingerprint data from our fraud and security monitoring systems help us detect suspicious activity.

4 How We Use Your Data

The personal data we hold about you is used exclusively for the following purposes:

5 Legal Basis for Processing

ojk88 processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing your identity, payment, and betting data is necessary to fulfil our contractual obligations to you under the ojk88 Terms & Conditions — specifically, to open your account, process your bets, and pay your winnings.
• Legal Obligation: KYC verification, AML screening, and the retention of transaction records are required by the legal and regulatory frameworks applicable to our international gaming licence. We must process this data to remain compliant.
• Legitimate Interests: We process technical and device data, fraud signals, and behavioural data on the basis of our legitimate interest in maintaining platform security, preventing fraud and collusion, and protecting the integrity of our gaming environment — provided this interest is not overridden by your fundamental rights.
• Consent: Where we send marketing communications or deploy non-essential cookies, we rely on your consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Data

ojk88 does not sell or commercially transfer your personal data. We share data only in the following controlled circumstances:

• Payment Processors: Your financial details are shared with our contracted payment processing partners (including local Indonesian bank networks and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja) solely to execute deposit and withdrawal transactions.
• KYC & Compliance Providers: Identity document images and verification data are transmitted to our contracted KYC verification partner(s) for identity authentication, PEP screening, and sanctions list checks. These providers are bound by strict data processing agreements.
• Game Technology Providers: Certain game-session data (e.g., bet ID, game round results) is shared with licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft for game integrity and dispute resolution purposes only.
• Fraud Detection & Security Partners: Anonymized or pseudonymized technical signals may be shared with security technology vendors to operate our fraud prevention systems.
• Regulatory Authorities: Where required by law or by the terms of our international gaming licence, ojk88 may disclose Member data to regulatory bodies, law enforcement agencies, or financial intelligence units. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of ojk88's business, Member data may be transferred as part of that transaction. Affected Members will be notified in advance where practicable.

7 Data Retention

ojk88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is permanently deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual. Backup copies are purged on the same schedule as live data.

8 Data Security

ojk88 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction:

• 256-Bit SSL/TLS Encryption: All data exchanged between your browser or device and the ojk88 Platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encryption at Rest: Sensitive data fields — including KYC documents, payment credentials, and password hashes — are encrypted at rest using AES-256 encryption on our secure hosting infrastructure.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel only, on a strict need-to-know basis. All internal access events are logged and audited regularly.
• Penetration Testing: Our infrastructure undergoes periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that is likely to affect your personal data, ojk88 will notify affected Members without undue delay and will take immediate steps to contain and investigate the breach.
• Staff Training: All ojk88 personnel who handle personal data receive regular data protection and security awareness training as part of their onboarding and ongoing employment obligations.

9 Cookies & Tracking Technologies

ojk88 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The following types of cookies are used:

• Strictly Necessary Cookies: These are essential for the Platform to function. They maintain your login session, remember your language preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These remember your preferences (such as your preferred deposit method or notification settings) between sessions to provide a more personalised experience. You may disable these without affecting core functionality.
• Analytics Cookies: We use privacy-respecting analytics to understand aggregate usage patterns — which sections of the Platform are most visited, average session duration, and so on. This data is aggregated and anonymised; no individual betting activity is tracked through analytics cookies.
• Security & Fraud Detection Cookies: Device fingerprinting tokens and session integrity cookies help our fraud detection systems identify and block suspicious access attempts, multiple-account creation, and bot activity.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect your ability to log in or use features of the Platform. ojk88 does not use third-party advertising or retargeting cookies.

10 Your Rights Over Your Data

As an ojk88 Member, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact our support team (see Section 14). We will respond to all verified data rights requests within 30 calendar days.

11 Minors & Age Verification

ojk88 operates a strict 21+ only policy. Our Platform is not intended for, and must not be used by, any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

• Age verification is conducted as part of the registration process and again during KYC review. Any account found to belong to a person under 21 will be immediately closed and all associated data will be securely deleted, except where retention is required for fraud prevention or regulatory purposes.
• If you are a parent or guardian and believe that a minor has created an account on the ojk88 Platform without your consent, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.
• ojk88 does not direct any marketing communications at individuals under the age of 21, and we do not use age-indeterminate targeting on any marketing channel.

12 Third-Party Links

The ojk88 Platform may contain references to game providers and payment partners whose services are integrated into our Platform. These integrations are governed by data processing agreements as described in Section 6. ojk88 does not include unsolicited outbound links to unaffiliated external websites.

When you interact with integrated third-party services — such as a live casino game powered by Evolution Gaming or a payment flow handled by your bank or e-wallet provider — those parties may collect technical data directly in accordance with their own privacy policies. ojk88 is not responsible for the data practices of third-party service providers beyond the scope of our contractual agreements with them.

We encourage you to review the privacy policies of any third-party service you interact with through or in connection with the ojk88 Platform, including your chosen payment provider (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja).

13 Changes to This Privacy Policy

ojk88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify active Members via the email address registered on their account or through a prominent in-platform notification, with at least 7 days' advance notice for significant changes.
• Where changes require fresh consent (e.g., a new processing purpose), we will seek that consent through an explicit opt-in mechanism before the new processing begins.

Your continued use of the ojk88 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and contact our support team to close your account and request data deletion where applicable.

14 Contact & Data Requests

For all privacy-related enquiries, data rights requests, or concerns about how ojk88 handles your personal data, please reach out to our dedicated support team through the following channels:

• Live Chat: Available 24/7 directly on the ojk88 Platform. Select "Privacy / Data Request" as your enquiry category for prioritised handling.
• Email: [email protected] — please include "Privacy Request" in the subject line and your registered username to help us locate your account. We aim to respond to all data rights requests within 30 calendar days of identity verification.
• Response Times: General privacy enquiries are typically resolved within 5 business days (WIB 08:00–22:00). Formal data rights requests (access, erasure, portability) are processed within 30 calendar days. Indonesian-speaking agents are available across all shifts.