1. Introduction
This Privacy Policy applies to all personal information collected by oto88 through our website (https://oto88.cam), mobile applications, and any related services (collectively, the "Platform"). We are committed to handling your personal information in accordance with applicable data protection laws and international best practices.
oto88 operates as an online gaming platform serving players in Indonesia and other jurisdictions where our services are legally accessible. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform.
By creating an account on oto88, depositing funds, placing bets, or otherwise using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, you should not use our Platform.
2. Information We Collect
To provide you with our services, comply with legal obligations, and improve your gaming experience, oto88 collects various types of personal information. The categories of data we collect include:
2.1 Information You Provide Directly
When you register an account on oto88, you provide us with personal information including:
- Identity Information: Full legal name, date of birth, gender, nationality, and Indonesian National ID (KTP) number.
- Contact Information: Residential address, email address, mobile phone number, and preferred language.
- Account Credentials: Username, password, and security questions for account access.
- Financial Information: Bank account details (account number, bank name, account holder name), e-wallet information (OVO, DANA, GoPay account IDs), and payment card information if applicable.
- Verification Documents: Copies of your KTP (Indonesian National ID), proof of address (utility bills, bank statements), and selfie photographs for identity verification purposes.
- Communication Data: Any information you provide when contacting our customer support team via live chat, email, or phone, including the content of your messages and attachments.
2.2 Information We Collect Automatically
When you use the oto88 Platform, we automatically collect certain information through cookies, log files, and similar technologies:
- Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers (IMEI, MAC address, advertising ID).
- Usage Data: Pages visited, features used, games played, bets placed, time spent on the Platform, click-through patterns, and navigation paths.
- Transaction Data: Deposit amounts, withdrawal requests, payment methods used, transaction timestamps, and transaction status.
- Location Data: IP address, approximate geographic location based on IP, and time zone settings.
- Gameplay Data: Betting history, game outcomes, win/loss records, bonus claims, wagering progress, and VIP tier status.
- Technical Data: Browser cookies, session IDs, crash reports, and error logs for troubleshooting purposes.
2.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Payment Providers: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay).
- Identity Verification Services: Verification results from third-party KYC and anti-fraud service providers.
- Game Providers: Gameplay data and bet settlement information from third-party game studios whose games are featured on our Platform.
- Marketing Partners: Referral source data and campaign performance metrics (where you have consented to such sharing).
3. How We Use Your Information
oto88 uses your personal information for the following purposes:
3.1 Service Provision
- To create and manage your oto88 account.
- To process deposits, withdrawals, and other financial transactions.
- To provide access to casino games, live dealer tables, sports betting markets, togel draws, and other gaming products.
- To calculate and credit winnings, bonuses, and cashback to your account.
- To process and fulfill withdrawal requests to your designated bank account or payment method.
3.2 Legal Compliance and Security
- To verify your identity and age (ensuring you are at least 21 years old).
- To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
- To prevent fraud, money laundering, underage gambling, and other illegal activities.
- To detect and prevent duplicate accounts, bonus abuse, and terms violations.
- To cooperate with law enforcement requests and legal investigations where required by law.
3.3 Customer Support
- To respond to your inquiries via live chat, email, or phone.
- To troubleshoot technical issues and resolve account problems.
- To provide Indonesian-language customer support tailored to your needs.
- To investigate and resolve disputes regarding bets, bonuses, or transactions.
3.4 Platform Improvement and Personalization
- To analyze user behavior and improve the Platform's functionality, design, and user experience.
- To personalize game recommendations based on your playing preferences.
- To optimize deposit and withdrawal processes for Indonesian payment methods (BCA, BRI, BNI, Mandiri).
- To conduct A/B testing and gather user feedback on new features.
3.5 Marketing and Promotions
- To send you promotional offers, bonus announcements, and newsletters (only if you have opted in).
- To notify you of new games, features, and special events relevant to Indonesian players (e.g., Independence Day promotions, Idul Fitri bonuses).
- To manage your participation in tournaments, leaderboards, and VIP loyalty programs.
- You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting customer support.
3.6 Responsible Gaming
- To monitor gambling behavior and identify potential problem gambling patterns.
- To enforce deposit limits, self-exclusion requests, and other responsible gaming tools you have activated.
- To provide resources and support for players who may be experiencing gambling-related harm.
4. How We Share Your Information
oto88 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for legitimate business purposes:
4.1 Service Providers
We share your information with trusted third-party service providers who assist us in operating the Platform, including:
- Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals.
- KYC and Verification Providers: Third-party services that verify your identity documents and screen for fraud or money laundering risks.
- Game Providers: Licensed game studios (e.g., providers of live casino, slots, and sports betting platforms) whose games you play on oto88.
- Cloud Hosting Providers: Secure data centers where our Platform infrastructure and databases are hosted.
- Customer Support Tools: Live chat software providers and ticketing systems used to manage customer inquiries.
- Analytics Providers: Services that help us understand user behavior and improve the Platform (data is anonymized where possible).
All service providers are contractually obligated to protect your data, use it only for the purposes we specify, and comply with applicable data protection laws.
4.2 Legal and Regulatory Authorities
We may disclose your information to government authorities, regulators, or law enforcement agencies when:
- Required by law, court order, subpoena, or other legal process.
- Necessary to investigate suspected fraud, money laundering, or other criminal activity.
- Required to protect the rights, property, or safety of oto88, our users, or the public.
- Necessary to comply with licensing obligations or regulatory reporting requirements.
4.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email or prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.
4.4 With Your Consent
We may share your information with other third parties when you have given explicit consent for such sharing, such as when you opt in to receive offers from marketing partners.
5. Data Security
Protecting your personal information is a top priority for oto88. We implement robust security measures to safeguard your data against unauthorized access, loss, misuse, or disclosure:
- Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive data (passwords, payment information) is encrypted at rest using AES-256 encryption.
- Access Controls: Only authorized personnel with a legitimate business need can access your personal information. Access is granted on a least-privilege basis and logged for audit purposes.
- Secure Infrastructure: Our Platform is hosted on secure cloud servers with firewalls, intrusion detection systems, and regular security patching.
- Regular Audits: We conduct regular security audits and vulnerability assessments to identify and remediate potential risks.
- Employee Training: All oto88 employees and contractors are trained on data protection best practices and are bound by confidentiality obligations.
- Two-Factor Authentication: We offer two-factor authentication (2FA) options to enhance account security (recommended for all players).
While we strive to protect your information using industry best practices, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized access to your account.
6. Data Retention
oto88 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Specific retention periods include:
- Account Data: Retained for the duration of your active account plus 7 years after account closure (to comply with financial record-keeping and AML regulations).
- Transaction Records: Retained for 7 years after the transaction date (required for tax and financial auditing purposes).
- KYC Documents: Retained for 7 years after your last transaction (required by AML regulations).
- Communication Logs: Retained for 3 years after the last communication (for dispute resolution and quality assurance).
- Marketing Data: Retained until you withdraw consent or 2 years after your last interaction with marketing communications, whichever comes first.
After the applicable retention period expires, we securely delete or anonymize your personal information so that it can no longer be associated with you.
7. Your Privacy Rights
Under applicable data protection laws, you have the following rights regarding your personal information:
- Right to Access: You have the right to request a copy of the personal information we hold about you. Contact our support team to submit an access request.
- Right to Rectification: You have the right to correct inaccurate or incomplete personal information. You can update most information directly in your account settings or by contacting support.
- Right to Erasure: You have the right to request deletion of your personal information, subject to legal retention requirements (e.g., we cannot delete financial records required for tax audits).
- Right to Restrict Processing: You have the right to request that we limit how we use your data in certain circumstances (e.g., while a dispute is being resolved).
- Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and transmit it to another service provider.
- Right to Object: You have the right to object to processing of your data for direct marketing purposes. Use the unsubscribe link in marketing emails or contact support.
- Right to Withdraw Consent: Where we rely on your consent to process your data, you may withdraw consent at any time (note that this will not affect the lawfulness of processing based on consent before its withdrawal).
To exercise any of these rights, please contact our Data Protection Officer at [email protected] (plain text, not a clickable link). We will respond to your request within 30 days.
8. Cookies and Tracking Technologies
oto88 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and improve site functionality.
8.1 Types of Cookies We Use
- Essential Cookies: Required for the Platform to function properly (e.g., session management, security features). These cannot be disabled.
- Performance Cookies: Collect anonymous data about how you use the Platform to help us improve performance and fix errors.
- Functional Cookies: Remember your preferences (e.g., language selection, currency display) to provide a personalized experience.
- Marketing Cookies: Track your activity across websites to deliver targeted advertisements (only used with your consent).
8.2 Managing Cookies
You can control cookie settings through your browser preferences. Note that disabling certain cookies may impact the functionality of the Platform. Most browsers allow you to block third-party cookies while still accepting first-party cookies.
9. International Data Transfers
oto88 operates internationally, and your personal information may be transferred to and processed in countries outside Indonesia. These countries may have data protection laws that differ from Indonesian law. When we transfer your data internationally, we ensure adequate safeguards are in place, such as:
- Standard contractual clauses approved by data protection authorities.
- Transfers to countries with adequacy decisions (deemed to provide adequate data protection).
- Binding corporate rules for intra-group transfers.
By using oto88, you consent to the transfer of your information to countries outside Indonesia for the purposes described in this Privacy Policy.
10. Children's Privacy
oto88 is strictly for adults aged 21 and over. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that a user is underage, we will immediately close the account, void all transactions, and delete the associated personal information. Parents or guardians who believe their child has provided personal information to oto88 should contact us immediately at [email protected] (plain text).
11. Third-Party Links
The oto88 Platform may contain links to third-party websites, game providers, or payment processors. This Privacy Policy applies only to oto88. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
12. Changes to This Privacy Policy
oto88 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will notify you by:
- Posting a prominent notice on the Platform homepage.
- Sending an email notification to your registered email address.
- Displaying a pop-up notification when you next log in.
The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of oto88 after changes are posted constitutes your acceptance of the updated Privacy Policy.
13. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or how oto88 handles your personal information, please contact us:
- Email: [email protected] (plain text; not a clickable mailto link)
- Live Chat: Available 24/7 for registered members through the oto88 Platform
- Data Protection Officer: Inquiries regarding data protection rights can be directed to our DPO via the email address above with the subject line "Data Protection Inquiry"
We aim to respond to all privacy-related inquiries within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.