olx98 Privacy Policy

This Privacy Policy (the "Policy") describes how olx98 (the "Platform", "we", "us", or "our") collects, uses, stores, and protects the personal data of individuals who access or use the services available at https://olx98.bet (the "Site"). olx98 is an internationally licensed online gaming platform serving registered players across Indonesia, including in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and Makassar.

We are committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy applies to all personal data collected through your use of the Site, including data collected during account registration, identity verification (KYC), financial transactions, customer support interactions, and browsing activity on the Platform.

By creating an account on olx98 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy.

The following terms carry the meanings assigned to them below throughout this Policy:

olx98 collects several categories of personal data in the course of providing its services. The specific data collected depends on how you interact with the Platform:

We collect personal data through the following mechanisms:

• Directly from you: When you register an account, complete the KYC process, make a deposit or withdrawal, contact our support team, or interact with any feature of the Platform that requires you to submit information.
• Automatically through technology: When you browse the Site, our servers and analytics tools automatically log technical and device data including your IP address, session duration, and page-level interaction data via cookies and similar technologies.
• From third-party service providers: Identity verification partners, payment processors (including the e-wallet networks OVO, DANA, GoPay, ShopeePay, and LinkAja, and the Indonesian banking networks BCA, BRI, BNI, Mandiri), and fraud prevention services may share data with us as part of delivering their contracted services to the Platform.
• From publicly available sources: In limited circumstances, olx98 may reference publicly available data (such as sanctions lists or politically exposed persons databases) as part of our anti-money-laundering compliance procedures.

olx98 processes your personal data only for defined, legitimate purposes. The table below maps each data category to the specific purposes for which it is used:

olx98 will not process your personal data for any purpose not listed above without first informing you and, where required, obtaining your explicit consent.

Every processing activity carried out by olx98 rests on one or more of the following lawful bases:

• Contract performance: Processing that is necessary to fulfil our obligations under the Terms & Conditions you accepted when registering — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering rules, age verification requirements (21+), and law enforcement requests issued by competent authorities.
• Legitimate interests: Processing that serves olx98's legitimate business interests in operating a secure, fraud-free, and commercially viable platform, where those interests are not overridden by your rights and interests. This includes fraud detection, platform analytics, and responsible gaming monitoring.
• Consent: Processing for which you have provided explicit, freely given, informed consent — primarily relating to direct marketing communications. You may withdraw this consent at any time by contacting the support team or using the unsubscribe link in any marketing email.

olx98 does not sell your personal data. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for each purpose:

• Payment processors and banking partners: To facilitate deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These entities receive only the financial data required to process each transaction.
• Identity verification providers: Third-party KYC and AML compliance services that assist olx98 in verifying the identity, age, and residency of account holders. These providers are bound by strict contractual data protection obligations.
• Game studios and technology providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive session and account identifiers necessary to deliver their game products within the olx98 platform. These providers do not receive full identity or financial data.
• Fraud prevention services: Specialised third-party platforms that assist with device fingerprinting, IP reputation analysis, and detection of multi-account or bonus-abuse activity.
• Legal and regulatory authorities: Where olx98 is required by law, court order, or regulatory directive to disclose personal data to competent authorities — including law enforcement agencies in connection with suspected money laundering, fraud, or other criminal conduct.
• Corporate successors: In the event of a merger, acquisition, or sale of substantially all of olx98's assets, personal data may be transferred to the acquiring entity, which will be bound by the terms of this Policy or a substantially equivalent replacement policy.

olx98 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

When personal data is no longer required for any of the purposes described above or any applicable legal retention obligation, olx98 will securely delete or anonymise it in a manner that prevents recovery or reconstruction.

olx98 implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our technical and organisational security measures include:

• Transport encryption: All communications between your device and the olx98 platform are encrypted using TLS 1.2 or higher (256-bit SSL), ensuring that data in transit cannot be intercepted.
• Data-at-rest encryption: Sensitive personal and financial data stored on olx98 servers is encrypted using AES-256, the same standard used by major international financial institutions.
• Access controls: Access to personal data within the olx98 organisation is granted on a strict need-to-know basis, with multi-factor authentication required for all internal systems containing personal data. Access logs are maintained and audited regularly.
• Intrusion detection: Continuous network monitoring, firewall protection, and automated intrusion detection systems are deployed to identify and respond to security threats in real time.
• Penetration testing: olx98 conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to your rights, olx98 will notify affected users without undue delay and will take all necessary steps to contain, investigate, and remediate the breach.

olx98 uses cookies and similar tracking technologies to operate core platform functionality, analyse user behaviour in aggregate, and maintain session security. The following categories of cookies are deployed on the Site:

You can manage or delete cookies through your browser's settings. Note that disabling essential or security cookies will prevent certain features of the Platform from functioning correctly. olx98 does not currently use third-party advertising or retargeting cookies.

As a registered user of the olx98 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of the personal data olx98 holds about you, along with information on how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: You may request that olx98 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations (for example, financial records required to be kept for 7 years).
• Right to restrict processing: You may request that olx98 limit the ways in which your personal data is used — for example, during a period in which you have disputed the accuracy of the data we hold.
• Right to data portability: Where processing is based on your consent or on a contractual relationship, you may request that olx98 provide your personal data in a structured, machine-readable format so that it can be transferred to another provider.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing based on olx98's legitimate interests where you believe your rights and interests outweigh those interests. olx98 will review all such objections and respond within a reasonable timeframe.

olx98 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or high in volume, we may extend this period by up to a further 30 days, in which case we will inform you of the extension and the reasons for it.

The olx98 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Registration on the Platform requires confirmation that the applicant meets the minimum age requirement, and KYC verification is used to validate age before withdrawals are approved.

If olx98 determines or has reason to believe that an Account has been registered by or on behalf of a person under 21 years of age, the Account will be suspended immediately and all personal data associated with it will be deleted as promptly as possible, subject only to any overriding legal obligations to retain records related to the incident. Any winnings accrued through an underage account will be forfeited in full.

If you are a parent or guardian and believe that a person under 21 in your care may have created an Account on olx98, please contact us immediately at [email protected] so that we can investigate and take prompt action.

olx98 is an internationally licensed online gaming platform. Certain service providers used by olx98 — including cloud infrastructure providers, game studios, and KYC verification services — may process personal data in jurisdictions outside of Indonesia. Where personal data is transferred internationally, olx98 ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to protect the data to a standard at least equivalent to the protections described in this Policy.
• Due diligence assessments of the data protection frameworks in force in the destination jurisdiction.
• Restrictions on the purposes for which transferred data may be used by the recipient, aligned with the purposes described in Section 5 of this Policy.

By using the olx98 Platform, you acknowledge and consent to the potential transfer of your personal data to international service providers under the safeguards described above.

olx98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, applicable legal requirements, or feedback from users. When material changes are made, we will notify registered account holders via email or in-platform notification at least seven (7) calendar days before the amended Policy takes effect.

The "Last Updated" date displayed at the top of this page will always reflect the date on which the most recently published version of this Policy came into force. We encourage you to review this page periodically to remain informed of how olx98 handles your personal data. Your continued use of the Platform after the effective date of any updated Policy constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how olx98 handles your personal data, please reach out to our support team using the contact details below:

When submitting a data rights request or a privacy-related enquiry, please include your registered username and email address so that we can locate your account and respond efficiently. For your security, we may ask you to complete a brief identity verification step before actioning any request that involves access to or deletion of personal data.