Privacy Policy

1. Introduction

oja88 ("we," "us," "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and disclose personal data when you access and use the oja88 Platform at https://oja88.cam, including our sports betting, live casino, slot games, and togel (Indonesian traditional lottery) services.

This Privacy Policy applies to all users who register an account, visit the Platform, or interact with our customer support services. By using oja88, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

We process personal data in accordance with international data protection regulations, including principles aligned with the General Data Protection Regulation (GDPR) where applicable, and Indonesian data protection laws. We are transparent about our data practices and respect your rights to access, correct, and control your personal information.

2. Data Controller

The data controller responsible for processing your personal information is oja88, the operator of the Platform accessible at https://oja88.cam. We determine the purposes and means of processing your personal data in connection with our online gaming services.

If you have any questions about how your personal data is processed, or if you wish to exercise your privacy rights, you can contact our Data Protection Officer at the contact details provided at the end of this Privacy Policy.

3. Information We Collect

oja88 collects various types of personal information to provide, maintain, and improve our services. The categories of information we collect include:

3.1 Information You Provide Directly

• Account Registration Data: When you create an oja88 account, we collect your full name, date of birth, gender, email address, phone number, residential address, and chosen username and password.
• Identity Verification Data: To comply with Know Your Customer (KYC) and anti-money laundering regulations, we collect copies of government-issued identification documents (Indonesian KTP or passport), proof of address (utility bills or bank statements), and selfie photos for identity verification purposes.
• Payment Information: We collect payment details including bank account numbers, e-wallet account IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), credit/debit card information, and transaction history. Payment data is encrypted and processed through secure payment gateways.
• Communication Data: When you contact our customer support via Live Chat, email, WhatsApp, or in-platform messaging, we collect the content of your communications, including any attachments, screenshots, or documents you provide.
• Survey and Feedback Data: If you participate in surveys, promotions, or provide feedback, we collect your responses and opinions.

3.2 Information Collected Automatically

• Gaming Activity Data: We automatically collect information about your use of oja88 services, including bets placed, games played, betting history, wins and losses, deposit and withdrawal transactions, bonus claims, and account balance changes.
• Device and Technical Data: We collect device identifiers (IP address, device ID, MAC address), browser type and version, operating system, screen resolution, time zone settings, browser plug-in types and versions, and device location (based on IP address).
• Usage Data: We track how you interact with the Platform, including pages visited, time spent on pages, links clicked, search queries, login times, session duration, and navigation paths through the Platform.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior. See Section 10 for detailed cookie information.

3.3 Information from Third Parties

• Payment Processors: We receive transaction confirmation and payment status information from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and international payment processors (Visa, Mastercard).
• Identity Verification Services: We may use third-party identity verification services to validate the authenticity of documents provided during KYC verification.
• Fraud Prevention Services: We use third-party fraud detection and risk assessment services to protect against fraudulent activity, money laundering, and other security threats.

4. How We Use Your Information

oja88 processes your personal data for the following purposes:

4.1 Service Provision and Account Management

• Creating, maintaining, and managing your oja88 account
• Processing deposits, withdrawals, and other financial transactions
• Enabling you to place bets on sports events, play casino games, spin slots, and participate in togel draws
• Crediting winnings, bonuses, cashback, and promotional rewards to your account
• Providing customer support and responding to your inquiries
• Verifying your identity and age to comply with legal requirements

4.2 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• Preventing underage gambling by verifying that all users are 21 years or older
• Detecting and preventing fraud, collusion, money laundering, and other illegal activities
• Maintaining records required by gaming regulators and licensing authorities
• Responding to legal requests, court orders, and law enforcement inquiries

4.3 Security and Fraud Prevention

• Monitoring account activity for suspicious behavior and unauthorized access
• Identifying and preventing multi-accounting, bonus abuse, and other violations of our Terms and Conditions
• Protecting the integrity of our games and preventing cheating, collusion, and manipulation
• Securing the Platform against hacking, DDoS attacks, and other cyber threats

4.4 Marketing and Communications

• Sending promotional emails about new bonuses, tournaments, and special offers (with your consent)
• Providing personalized game recommendations based on your gaming preferences
• Notifying you about important account updates, security alerts, and policy changes
• Conducting market research and gathering feedback to improve our services

4.5 Platform Improvement and Analytics

• Analyzing user behavior to understand how the Platform is used and identify areas for improvement
• Testing new features, games, and functionality before full release
• Optimizing Platform performance, loading times, and mobile responsiveness
• Generating aggregate statistical reports on betting patterns, popular games, and user demographics (anonymized)

4.6 Responsible Gaming

• Monitoring gaming activity for signs of problem gambling behavior
• Implementing deposit limits, loss limits, session timers, and self-exclusion requests
• Providing access to responsible gaming tools and resources
• Contacting users displaying high-risk gambling patterns to offer support

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations under the Terms and Conditions you agreed to when creating your account. This includes providing gaming services, processing payments, and managing your account.
• Legal Obligation: We process data to comply with legal and regulatory requirements, including KYC/AML laws, age verification requirements, tax reporting obligations, and licensing conditions imposed by gaming regulators.
• Legitimate Interests: We have legitimate business interests in preventing fraud, ensuring platform security, improving our services, conducting analytics, and protecting the rights of oja88 and our users. We balance these interests against your privacy rights.
• Consent: Where required by law, we obtain your explicit consent before processing certain types of data, such as sending marketing emails or using non-essential cookies. You may withdraw consent at any time.

6. Data Sharing and Disclosure

oja88 does not sell your personal data to third parties. However, we may share your information with the following categories of recipients for legitimate business purposes:

6.1 Service Providers and Business Partners

• Payment Processors: We share payment information with Indonesian banks, e-wallet providers, and international payment gateways to process deposits and withdrawals.
• Game Providers: We share session data and betting information with game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, etc.) to facilitate gameplay and track game outcomes.
• Identity Verification Services: We share identification documents with third-party KYC verification providers to authenticate your identity.
• Cloud Hosting Providers: We store data on secure cloud servers operated by reputable hosting providers with robust security certifications.
• Customer Support Tools: We use third-party customer support platforms to manage Live Chat, ticketing, and communication logs.
• Analytics Providers: We share anonymized usage data with analytics services to understand platform performance and user behavior.

6.2 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, courts, and government authorities when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Investigate suspected fraud, money laundering, or other criminal activity
• Protect the rights, property, and safety of oja88, our users, and the public
• Enforce our Terms and Conditions and other legal agreements

6.3 Business Transfers

If oja88 is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal data may be transferred to the successor entity as part of the business transaction. We will notify you via email and Platform announcement before your data is transferred and becomes subject to a different privacy policy.

6.4 Data Processing Agreements

All third-party service providers with access to your personal data are contractually bound to process data only for the purposes we specify, implement appropriate security measures, and comply with applicable data protection laws. We conduct due diligence on service providers to ensure they meet our security and privacy standards.

7. Data Security Measures

oja88 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, alteration, and disclosure. Our security practices include:

7.1 Encryption

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology, the same encryption standard used by banks.
• Data-at-Rest Encryption: Personal data stored on our servers is encrypted using industry-standard encryption algorithms to prevent unauthorized access in the event of a data breach.
• Payment Data Security: Payment card information is tokenized and processed through PCI-DSS compliant payment gateways. We do not store full credit card numbers on our servers.

7.2 Access Controls

• Access to personal data is restricted to authorized employees and contractors who require access to perform their job functions
• Multi-factor authentication is required for administrative access to sensitive systems
• Role-based access controls limit what data each employee can view and modify
• All access to personal data is logged and monitored for suspicious activity

7.3 Infrastructure Security

• Our servers are hosted in secure data centers with physical security controls including surveillance, biometric access, and 24/7 monitoring
• Firewalls, intrusion detection systems, and anti-DDoS protection safeguard against cyber attacks
• Regular security audits and penetration testing identify and address vulnerabilities
• Automated backups ensure data can be recovered in the event of system failure

7.4 Account Security Recommendations

While we implement robust security measures, you also play a critical role in protecting your account. We recommend:

• Choosing a strong, unique password and changing it regularly
• Enabling two-factor authentication for additional security
• Never sharing your login credentials with anyone
• Logging out after each session, especially on shared devices
• Being cautious of phishing emails and only accessing oja88 through our official website
• Contacting support immediately if you suspect unauthorized account access

8. Data Retention

oja88 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and applicable legal requirements:

• Account Data: Retained for the duration of your active account and for 7 years after account closure to comply with financial regulations and tax reporting requirements.
• Transaction Records: Retained for 10 years to comply with anti-money laundering regulations and financial auditing requirements.
• Identity Verification Documents: Retained for 7 years after account closure as required by KYC/AML regulations.
• Gaming History: Retained for 5 years to resolve disputes, investigate fraud, and comply with gaming regulatory requirements.
• Communication Logs: Customer support communications retained for 3 years to improve service quality and resolve disputes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

After the applicable retention period expires, we securely delete or anonymize personal data so that it can no longer be associated with you. Anonymized data may be retained indefinitely for statistical and analytical purposes.

9. Your Privacy Rights

You have the following rights regarding your personal data. To exercise any of these rights, please contact our Data Protection Officer using the contact information in Section 12.

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide the information in a structured, commonly used, and machine-readable format within 30 days of your request.

9.2 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact support for assistance.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or when you withdraw consent. Please note that we may be legally required to retain certain data for compliance purposes even after your deletion request.

9.4 Right to Restrict Processing

You have the right to request that we limit how we process your personal data in specific situations, such as while we verify the accuracy of contested data or assess whether we have legitimate grounds to continue processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and request that we transfer it to another service provider, where technically feasible.

9.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time by adjusting your account settings or contacting us. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

9.8 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority or supervisory authority.

10. Cookies and Tracking Technologies

oja88 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly. These cookies enable core functionality such as user authentication, session management, and security features. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous information about how visitors use the Platform, such as which pages are visited most often and whether users experience errors. This helps us improve Platform performance.
• Functionality Cookies: Remember your preferences and choices (such as language, currency, and username) to provide a personalized experience on return visits.
• Targeting/Advertising Cookies: Used to deliver relevant promotional content based on your interests and track the effectiveness of marketing campaigns. These cookies may be set by third-party advertising partners.

10.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may limit your ability to use certain features of the Platform. You can manage cookie preferences through your browser settings or through the cookie consent banner displayed on your first visit.

10.3 Third-Party Tracking

We use third-party analytics services (such as Google Analytics) to understand Platform usage and user behavior. These services may use cookies and other tracking technologies. We also work with advertising partners who may place cookies on your device to deliver targeted advertising on third-party websites.

11. International Data Transfers

oja88 operates internationally and may transfer personal data to countries outside Indonesia for processing and storage. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws.

These safeguards may include:

• Transferring data only to countries recognized as providing adequate data protection
• Implementing Standard Contractual Clauses approved by data protection authorities
• Ensuring third-party service providers are certified under recognized data protection frameworks
• Obtaining your explicit consent for international data transfers where required by law

Our primary data processing operations are conducted within secure data centers that meet international security standards. We limit international transfers to situations where necessary for service provision, legal compliance, or fraud prevention.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how oja88 processes your personal data, please contact us through the following channels:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the Platform (click the chat icon)
• WhatsApp: +62 812 3456 7890 (for reference only)

We aim to respond to all privacy-related inquiries within 30 days. For urgent matters concerning unauthorized access or suspected data breaches, please contact us immediately via Live Chat or email.

Changes to This Privacy Policy: We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or Platform features. We will notify you of material changes via email and Platform announcement at least 30 days before they take effect. Your continued use of oja88 after changes become effective constitutes acceptance of the updated Privacy Policy.