Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by oyo98 through our website (https://oyo98.cam), mobile applications, and related services. By creating an account or using oyo98 services, you consent to the data practices described in this Privacy Policy.

oyo98 operates as an international online gaming platform serving players worldwide, including Indonesian residents. We process personal data in accordance with the General Data Protection Regulation (GDPR), international data protection standards, and applicable Indonesian data protection principles. This Privacy Policy should be read in conjunction with our Terms and Conditions.

Controller Information: For the purposes of data protection law, oyo98 is the data controller responsible for your personal information. Our registered office and data protection officer contact information are provided in Section 14 of this policy.

2. Information We Collect

We collect several types of information from and about users of our services, including information by which you may be personally identified. The categories of personal data we collect include:

2.1 Information You Provide Directly

When you register for an oyo98 account, we collect the following information:

• Account Information: Full legal name, date of birth, email address, phone number, residential address, username, and password
• Identity Verification Documents: Government-issued identification (Indonesian KTP, passport, or driver's license), proof of address documents (utility bills, bank statements), and selfie photographs for KYC verification
• Payment Information: Bank account details (account number, bank name, account holder name), e-wallet account information (OVO, DANA, GoPay), and transaction history
• Communication Data: Any information you provide when contacting customer support via live chat, email, or phone, including support tickets, chat transcripts, and email correspondence

2.2 Information We Collect Automatically

When you access and use oyo98 services, we automatically collect certain information about your device and usage patterns:

• Device Information: IP address, device type and model, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address)
• Usage Data: Pages visited, features used, games played, bet amounts, win/loss records, session duration, click-stream data, and referral URLs
• Location Data: Approximate geographic location derived from IP address (we do not collect precise GPS coordinates unless explicitly authorized for mobile applications)
• Cookies and Similar Technologies: Session cookies, persistent cookies, web beacons, and local storage data (see Section 10 for detailed cookie information)

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay)
• Identity Verification Services: Results from identity verification and fraud prevention services used to comply with KYC and anti-money laundering regulations
• Affiliate Partners: If you were referred to oyo98 by an affiliate, we may receive confirmation of that referral

3. How We Use Your Information

oyo98 uses the collected personal data for the following purposes:

3.1 Service Provision and Account Management

• Creating and managing your player account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to casino games, sports betting, togel (lottery), and other gaming services
• Maintaining game history, transaction records, and account balances
• Processing bonus claims and managing promotional offers

3.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement) through KYC procedures
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Detecting and preventing fraud, cheating, collusion, and other prohibited activities
• Responding to legal requests from law enforcement or regulatory authorities
• Maintaining audit trails and records as required by gaming licenses

3.3 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests
• Sending transactional notifications (deposit confirmations, withdrawal updates, account alerts)
• Providing customer service via live chat, email, and phone
• Conducting customer satisfaction surveys

3.4 Marketing and Personalization

• Sending promotional emails about bonuses, tournaments, and new game releases (with your consent)
• Personalizing game recommendations based on your playing history
• Displaying targeted advertisements and offers relevant to your interests
• Conducting market research and analyzing player behavior to improve services

3.5 Security and Platform Improvement

• Monitoring platform security and detecting suspicious activity
• Preventing unauthorized access and protecting against cyber attacks
• Analyzing usage patterns to optimize platform performance
• Developing new features and improving user experience

3.6 Responsible Gaming

• Implementing deposit limits, loss limits, and session time limits you set
• Enforcing self-exclusion requests
• Monitoring gambling behavior to identify potential problem gambling
• Providing access to responsible gaming tools and resources

4. Legal Basis for Processing

Under GDPR and international data protection law, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to provide the gaming services you requested and to fulfill our obligations under the Terms and Conditions you agreed to when registering
• Legal Obligation: Processing is required to comply with legal and regulatory requirements, including KYC verification, AML compliance, age verification, and response to law enforcement requests
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, platform improvement, and data analytics, provided these interests do not override your fundamental rights
• Consent: For marketing communications and certain data processing activities, we obtain your explicit consent, which you may withdraw at any time

5. Data Sharing and Disclosure

oyo98 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients:

5.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals
• Game Providers: Software suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and others who provide the games you play
• Identity Verification Services: Third-party KYC and fraud prevention providers who verify your identity and screen for financial crimes
• Cloud Hosting Providers: Companies that host our servers and store data securely
• Customer Support Tools: Live chat software providers and email service providers
• Analytics and Marketing Services: Services that help us understand user behavior and deliver targeted communications

All third-party service providers are contractually bound to protect your data and use it only for the specified purposes. They are prohibited from selling or sharing your data with others.

5.2 Legal and Regulatory Authorities

We may disclose your personal data if required by law or in good faith belief that such action is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms and Conditions or other agreements
• Protect the rights, property, or safety of oyo98, our users, or the public
• Respond to claims of illegal activity or violations of third-party rights
• Cooperate with law enforcement investigations or regulatory audits

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity. We will notify you via email or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

6. International Data Transfers

oyo98 is an international platform, and your personal data may be transferred to, stored, and processed in countries outside Indonesia, including countries that may not have the same data protection laws as Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Data transfers within the European Economic Area (EEA) comply with GDPR adequacy requirements
• Transfers to countries without adequacy decisions are protected by Standard Contractual Clauses (SCCs) approved by the European Commission
• We conduct due diligence on all international service providers to ensure they provide adequate data protection

By using oyo98 services, you acknowledge and consent to the international transfer of your personal data as described in this Privacy Policy.

7. Data Security Measures

oyo98 takes data security seriously and implements industry-standard technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data at rest is also encrypted.
• Access Controls: Personal data is accessible only to authorized employees and service providers on a need-to-know basis. All personnel with access to personal data are bound by confidentiality obligations.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security controls, including 24/7 monitoring, biometric access controls, and redundant power and cooling systems.
• Network Security: We employ firewalls, intrusion detection systems, and regular vulnerability scanning to protect against cyber attacks.
• Two-Factor Authentication: We offer two-factor authentication (2FA) to add an extra layer of security to your account.
• Regular Audits: Our security practices are audited regularly by independent third-party security firms.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. You also have a responsibility to protect your account by choosing a strong password, not sharing your credentials, and logging out after each session.

8. Data Retention and Deletion

oyo98 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Active Accounts

For active player accounts, we retain your personal data for the duration of your relationship with oyo98 and for a reasonable period thereafter to comply with legal obligations and resolve disputes.

8.2 Closed Accounts

After you close your account, we retain certain information for legal and regulatory purposes:

• Identity and KYC Documents: Retained for 7 years after account closure to comply with AML regulations
• Transaction Records: Retained for 7 years to comply with financial record-keeping requirements
• Account History: Retained for 5 years to resolve potential disputes and prevent fraud
• Marketing Data: Deleted immediately upon account closure or earlier if you unsubscribe from marketing communications

8.3 Automatic Deletion

Once the retention period expires, we securely delete or anonymize your personal data so it can no longer be associated with you.

9. Your Privacy Rights

Under GDPR and international data protection law, you have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge in a commonly used electronic format within 30 days of your request.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings, or contact us for assistance.

9.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. This right is not absolute and may be limited by legal retention requirements.

9.4 Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider.

9.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your account preferences.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

9.8 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority in your country of residence.

To exercise any of these rights, please contact us using the details provided in Section 14.

10. Cookies and Tracking Technologies

oyo98 uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly. These include session cookies that maintain your login state and security cookies that protect against fraud.
• Performance Cookies: Collect anonymous information about how you use our website, such as which pages are most popular and error messages you receive.
• Functionality Cookies: Remember your preferences (language, currency, timezone) and provide enhanced features.
• Advertising Cookies: Track your browsing across websites to deliver targeted advertisements relevant to your interests.

10.2 Cookie Management

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling cookies may affect the functionality of oyo98 services. Essential cookies cannot be disabled as they are necessary for the platform to operate.

11. Third-Party Services

oyo98 uses third-party services to enhance platform functionality and user experience. These services may collect and process personal data according to their own privacy policies:

• Game Providers: Pragmatic Play, Evolution Gaming, NetExt, Microgaming, and others may collect usage data to improve game performance and detect fraud
• Payment Processors: Indonesian banks and e-wallet providers collect transaction data to process payments securely
• Analytics Services: We use analytics tools to understand user behavior and improve our services

We encourage you to review the privacy policies of these third-party services. oyo98 is not responsible for the privacy practices of external services.

12. Children's Privacy

oyo98 services are intended exclusively for individuals aged 21 and older. We do not knowingly collect, use, or disclose personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected data from a person under 21, we will delete that information immediately and close the account.

If you are a parent or guardian and believe your child has provided personal information to oyo98, please contact us immediately so we can take appropriate action.

13. Changes to This Privacy Policy

oyo98 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email at your registered email address
• Display a prominent notice on our website
• For significant changes affecting your rights, request your explicit consent where required by law

Your continued use of oyo98 services after changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Subject Line: Privacy Inquiry
• Customer Support: Available 24/7 via live chat through your account dashboard

For specific privacy rights requests (access, deletion, rectification, portability), please include the following in your email:

• Your full name and registered email address
• Your oyo98 username (if applicable)
• Detailed description of your request
• Proof of identity (to prevent unauthorized disclosure)

We will respond to all privacy requests within 30 days. For complex requests, we may extend this period by an additional 60 days, and we will inform you of any such extension.