Privacy Policy

1. Introduction

At ole99, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our online gaming platform at https://ole99.cam.

By creating an account on ole99 and using our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our data handling practices, you should not use our platform.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policy, which together govern your use of ole99 services.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account on ole99, you voluntarily provide us with the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., Indonesian National Identity Card/KTP number)
• Contact Information: Email address, mobile phone number, residential address, and postal code
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (OVO, DANA, GoPay, ShopeePay account IDs), payment transaction history, deposit amounts, withdrawal amounts, and balance information
• Verification Documents: Copies of government-issued photo identification (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photos with ID, and payment method verification screenshots
• Communication Records: Messages sent to customer support via live chat, email correspondence, phone call recordings, and feedback submitted through our platform

2.2 Information We Collect Automatically

When you use ole99, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, and device identifiers (IP address, MAC address, device fingerprint)
• Usage Data: Pages visited, games played, bet amounts and outcomes, session duration, click patterns, search queries, referral sources, and timestamps of all activities
• Location Data: IP address-based geolocation to verify you are accessing the platform from within Indonesia
• Cookies and Tracking Technologies: Session cookies, persistent cookies, local storage data, and web beacons (see Section 8 for detailed cookie information)

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection signals from banks and e-wallet providers
• Identity Verification Services: Results of identity checks performed by third-party KYC verification providers
• Game Providers: Gameplay data, bet history, and RTP (Return to Player) statistics from third-party game studios such as Pragmatic Play, Evolution Gaming, and NetEnt
• Fraud Prevention Services: Risk scores, blacklist checks, and suspicious activity alerts from third-party fraud detection systems

3. How We Use Your Information

ole99 uses your personal information for the following purposes:

3.1 Account Management and Service Delivery

• Create and maintain your player account
• Verify your identity and age (21+ requirement)
• Process deposits and withdrawals
• Manage your account balance and transaction history
• Provide access to games, sports betting markets, and togel draws
• Track gameplay, bets, wins, and losses
• Calculate and award bonuses, promotions, and VIP rewards

3.2 Communication and Customer Support

• Respond to your inquiries via live chat, email, or phone
• Send account-related notifications (deposit confirmations, withdrawal updates, security alerts)
• Notify you of new games, promotions, and platform updates
• Conduct customer satisfaction surveys

3.3 Security and Fraud Prevention

• Detect and prevent fraudulent activity, money laundering, and unauthorized access
• Monitor for multiple accounts, bonus abuse, and terms violations
• Verify the legitimacy of payment methods and source of funds
• Enforce responsible gaming limits and self-exclusion requests
• Investigate disputes, chargebacks, and complaints

3.4 Legal and Regulatory Compliance

• Comply with Indonesian anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Fulfill Know Your Customer (KYC) requirements
• Maintain records for audit and regulatory reporting purposes
• Respond to lawful requests from government authorities, law enforcement, or courts

3.5 Platform Improvement and Analytics

• Analyze user behavior to improve website navigation and game selection
• Conduct A/B testing to optimize user experience
• Generate aggregated, anonymized statistics for business intelligence
• Troubleshoot technical issues and optimize platform performance

3.6 Marketing and Promotions (with your consent)

• Send promotional emails about new games, bonuses, and special offers
• Display personalized game recommendations based on your play history
• Invite you to participate in tournaments, leaderboards, and VIP programs

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in promotional emails or adjusting your account notification preferences.

4. Legal Basis for Processing (GDPR-Aligned)

We process your personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to fulfill our Terms & Conditions and provide gaming services to you (account creation, deposits, withdrawals, gameplay)
• Legal Obligation: Processing is required to comply with Indonesian law, including AML/CTF regulations and age verification requirements
• Legitimate Interests: Processing is necessary for fraud prevention, platform security, customer support, and business analytics, provided these interests do not override your privacy rights
• Consent: Where required by law, we obtain your explicit consent before processing data for marketing purposes or using certain cookies

5. How We Share Your Information

5.1 Third-Party Service Providers

We share your personal information with trusted third-party service providers who assist us in operating the platform:

• Payment Processors: Banks, e-wallet providers, and payment gateways that facilitate deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay)
• Game Providers: Third-party game studios that supply slots, live casino games, and sports betting platforms (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe)
• Identity Verification Services: Third-party KYC providers that verify your identity and detect fraudulent documents
• Customer Support Tools: Live chat platforms, email services, and CRM systems used to manage customer inquiries
• Cloud Hosting Providers: Secure data centers and cloud storage services that host our platform infrastructure
• Analytics and Marketing Tools: Services that help us analyze user behavior and deliver targeted promotions

All third-party service providers are contractually required to protect your data and use it only for the purposes specified by ole99. We conduct due diligence to ensure our partners maintain adequate security standards.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal requests, including:

• Court orders, subpoenas, or warrants issued by Indonesian courts
• Lawful requests from law enforcement or government agencies investigating criminal activity
• Regulatory audits or inquiries from financial authorities regarding AML/CTF compliance
• Protection of our legal rights, property, or safety, or that of our users or the public

5.3 Business Transfers

In the event ole99 is acquired by, merged with, or sells substantially all of its assets to another company, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

5.4 We Do Not Sell Your Data

ole99 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data is used solely to provide our services and for the purposes outlined in this Privacy Policy.

6. Data Security Measures

We implement comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption. Sensitive data (passwords, payment information) is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on the principle of least privilege. All employees sign confidentiality agreements.
• Secure Data Centers: Our servers are hosted in secure, certified data centers with 24/7 monitoring, intrusion detection systems, and redundant backups.
• Firewall Protection: Network firewalls and web application firewalls (WAF) protect against unauthorized access and cyberattacks.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses.
• Fraud Detection Systems: Real-time monitoring systems detect suspicious activity, multiple account creation attempts, and unusual betting patterns.
• Two-Factor Authentication (2FA): Optional 2FA is available to add an extra layer of security to your account login.

Despite our best efforts, no security system is impenetrable. If you believe your account has been compromised, contact our support team immediately at [email protected].

7. Data Retention

ole99 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Category	Retention Period	Reason
Account Information	Duration of account + 5 years after closure	Legal compliance, dispute resolution
Transaction Records	5 years from transaction date	AML/CTF regulatory requirements
KYC Documents	5 years after account closure	Identity verification audit trail
Gameplay History	3 years from game session	Dispute resolution, game integrity
Customer Support Records	3 years from last interaction	Service quality, dispute resolution
Marketing Consent	Until consent is withdrawn	Promotional communications

After the retention period expires, we securely delete or anonymize your personal data so it can no longer be associated with you.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your device, remember your preferences, and improve your user experience.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly. These cookies enable login, account access, and secure transactions. They cannot be disabled.
• Performance Cookies: Collect anonymized data about how you use our website (pages visited, time spent, errors encountered) to help us improve platform performance.
• Functional Cookies: Remember your preferences such as language selection, timezone, and game favorites to provide a personalized experience.
• Advertising Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies may track your activity across different websites.

8.3 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when a cookie is being set. However, disabling essential cookies may prevent you from accessing certain features of ole99.

To manage cookies in your browser:

• Chrome: Settings > Privacy and Security > Cookies and other site data
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Edge: Settings > Cookies and site permissions > Cookies and site data

9. Your Privacy Rights

Under Indonesian data protection principles and international best practices, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request a copy of the personal data we hold about you. To request access, contact [email protected] with the subject line "Data Access Request." We will respond within 30 days.

9.2 Right to Correction

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.

9.3 Right to Deletion

You have the right to request deletion of your personal data, subject to legal retention requirements. To request deletion, contact [email protected]. Note that we may be required to retain certain information for legal compliance.

9.4 Right to Object

You have the right to object to certain types of data processing, including:

• Direct marketing communications (opt out via account settings or unsubscribe links)
• Automated decision-making and profiling

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider.

9.6 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your request and proof of identity.

10. Children's Privacy

ole99 services are strictly for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete that information and permanently close the associated account.

If you believe a minor has created an account on ole99, please report it immediately to [email protected].

11. International Data Transfers

Your personal information may be transferred to and stored on servers located outside Indonesia, including in jurisdictions that may not provide the same level of data protection as Indonesian law. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by international data protection authorities
• Transfers to jurisdictions with adequate data protection frameworks
• Explicit consent for specific data transfers where required

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make significant changes, we will notify you via email and/or a prominent notice on our website at least 30 days before the changes take effect.

The "Last Updated" date at the top of this document indicates when the most recent revisions were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of ole99 after changes to this Privacy Policy constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:

Data Protection Officer: ole99 Privacy Team
Email: [email protected]
Subject Line: Privacy Inquiry
Customer Support: Available 24/7 via live chat and email
Languages Supported: English and Bahasa Indonesia

We are committed to resolving privacy concerns fairly and promptly. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Indonesian data protection authority.