Privacy Policy

Introduction

oyo88 operates an internationally licensed online sports betting and live casino platform accessible at oyo88.cam. This Privacy Policy applies to all personal data collected through the Platform — including via our website, any associated mobile applications, customer support channels, and promotional communications — regardless of where you are located.

oyo88 is committed to processing personal data responsibly, transparently, and in accordance with applicable international data protection standards. Our platform serves English-preference players across Indonesia, and we recognize the importance of maintaining the trust of our members by being direct and clear about how their information is handled.

This Policy should be read alongside our Terms & Conditions, which govern the broader membership agreement. In the event of any conflict between this Policy and the Terms regarding data matters, this Privacy Policy shall prevail.

Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, directly or in combination with other data. This includes names, email addresses, phone numbers, national identity numbers, IP addresses, and payment account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" — oyo88, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — any third party that processes Personal Data on behalf of oyo88 under a binding data processing agreement (for example, a payment gateway provider or KYC verification service).
• "Member" / "User" / "you" — any individual who has registered an account with oyo88 and whose Personal Data is being processed under this Policy.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" — Know Your Customer: the identity verification process conducted by oyo88 to confirm a Member's identity, age, and address before processing withdrawals or where otherwise required.
• "Cookies" — small text files placed on a Member's device by the Platform for the purposes described in Section 10 of this Policy.

Data We Collect

oyo88 collects the following categories of Personal Data in the course of operating the Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID.
• Date of birth (used to verify the 21+ age requirement).
• Indonesian National Identity Card number (KTP number) or passport number, submitted during KYC verification.
• Username and encrypted password.
• Selfie photograph submitted alongside your KYC documents.

3.2 Contact Data

• Primary email address linked to your Account.
• Mobile phone number (used for account security and optional promotional notifications).
• Residential address in Indonesia (city, province, postal code — as provided during KYC or Account registration).

3.3 Financial & Transaction Data

• Bank account details for Indonesian transfer methods: BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata (account name and number only; full card numbers are never stored by oyo88).
• E-wallet account identifiers: OVO, DANA, GoPay, ShopeePay, LinkAja.
• USDT wallet addresses (TRC-20 / ERC-20) for cryptocurrency transactions.
• Full history of deposits, withdrawals, and balances associated with your Account, including timestamps and transaction reference numbers.

3.4 Gaming & Betting Activity Data

• Complete bet and game round history, including markets wagered on, stakes, odds, outcomes, and session durations.
• Game preferences and browsing behavior within the Platform (used for personalized game recommendations and responsible gaming monitoring).
• Responsible gaming tool settings (deposit limits, self-exclusion status, session reminders).

3.5 Technical & Device Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, and browser version.
• Session logs, login timestamps, and platform access records.
• Cookie and similar tracking technology data as described in Section 10.

3.6 Communications Data

• Records of all communications between you and the oyo88 customer support team, including live chat transcripts and email correspondence.
• Feedback, complaints, and dispute records.

How We Collect Data

oyo88 collects Personal Data through the following channels:

1. Directly from you — when you register an Account, complete the KYC process, submit a deposit or withdrawal request, contact customer support, or respond to a promotion.
2. Automatically — through cookies, web beacons, server logs, and similar technologies when you access and interact with the Platform. See Section 10 for full details.
3. From third-party verification services — where we engage accredited KYC and identity-verification providers to cross-reference the documents you submit. These providers operate under strict data processing agreements with oyo88.
4. From payment processors — transaction confirmation data returned by payment gateways (BCA Virtual Account, OVO, DANA, GoPay integrations, and USDT blockchain networks) when processing your deposits and withdrawals.
5. From fraud prevention and security partners — flagged risk signals, device fingerprint data, and fraud alerts generated by our security infrastructure partners to protect your Account and the integrity of the Platform.

Purpose & Legal Basis for Processing

The table below sets out the primary purposes for which oyo88 processes your Personal Data and the legal basis relied upon for each:

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing does not affect your ability to continue using the Platform.

Data Sharing & Disclosure

oyo88 does not sell or rent your Personal Data. We share data only in the following controlled circumstances:

1. Payment processors and banking partners: We share the minimum necessary transaction data with BCA, BRI, BNI, Mandiri, and our e-wallet and crypto payment partners solely to execute deposit and withdrawal instructions you initiate.
2. KYC and identity verification providers: Accredited third-party KYC services receive your identity documents and verification data solely for the purpose of confirming your identity on our behalf. These providers are contractually bound to process data only as instructed by oyo88.
3. Fraud detection and security services: Our anti-fraud infrastructure partners receive technical data (IP address, device fingerprint, behavior signals) to detect and prevent unauthorized access and financial crime. No personally identifiable wagering history is shared for this purpose.
4. Game studio providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Pocket Games Soft receive anonymized session tokens necessary to deliver game content. These providers do not receive your full name, contact details, or financial data.
5. Legal and regulatory authorities: oyo88 will disclose Personal Data to competent authorities where required to do so by applicable law, court order, or legitimate regulatory request. We will notify you of such disclosure where legally permitted to do so.
6. Corporate transactions: In the event of a merger, acquisition, or asset sale involving oyo88, Personal Data may be transferred to the relevant successor entity, which will be required to honor this Privacy Policy or provide advance notice of any material changes.

In all cases where data is shared with third parties, oyo88 ensures that appropriate contractual safeguards are in place, including data processing agreements that restrict use of your data to the stated purpose and require adherence to security standards at least equivalent to those applied by oyo88.

International Data Transfers

oyo88 operates as an internationally licensed platform. This means that Personal Data collected from Members in Indonesia may be stored on and processed by servers located outside Indonesia. In all cases where data is transferred internationally, oyo88 ensures that equivalent protections apply through one or more of the following mechanisms:

• Binding contractual clauses in data processing agreements with all receiving parties.
• Transfer only to jurisdictions that maintain adequate data protection standards as assessed by our compliance team.
• Encryption of data in transit and at rest, regardless of the storage location.

By using the oyo88 Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia. We take all reasonable steps to ensure that any such transfer is conducted securely and that your data receives the same level of protection it would receive if processed within Indonesia.

Data Retention

oyo88 retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law or regulatory obligation. The following standard retention periods apply:

• Account and identity data (KYC records): Retained for the duration of your membership plus a minimum of five years after account closure, in compliance with standard anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction.
• Betting and gaming activity logs: Retained for a minimum of three years from the date of each session, or longer where required by our responsible gaming obligations.
• Customer support records: Retained for two years after the closure of each support ticket or dispute, unless the matter remains subject to ongoing legal proceedings.
• Marketing consent records: Retained for the duration of your consent plus one year to demonstrate compliance in the event of a complaint or audit.
• Technical and access logs: Typically retained for 90 days for security and fraud investigation purposes, after which they are deleted or fully anonymized.

When Personal Data is no longer required for any legitimate purpose or legal obligation, it is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual.

Security Measures

oyo88 employs a multi-layered technical and organizational security framework to protect your Personal Data from unauthorized access, loss, alteration, or disclosure. Our security measures include:

• 256-bit TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial account references.
• Multi-factor authentication (MFA) available and strongly recommended for all Member accounts.
• Role-based access controls ensuring that internal staff can access only the data necessary for their specific job function. No employee has unrestricted access to the full Member database.
• Intrusion detection systems and 24/7 security monitoring to identify and respond to unauthorized access attempts in real time.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Secure, physically isolated data centers with access restricted to authorized personnel only.

While oyo88 takes all reasonable precautions to protect your data, no system is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, oyo88 will notify affected Members promptly through the email address registered on their Account and will take all appropriate steps to contain and remediate the incident.

Cookies & Tracking Technologies

oyo88 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help the Platform function correctly, remember your preferences, and gather usage analytics. We use the following categories of cookies:

1. Strictly Necessary Cookies: Required for the Platform to operate. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled without preventing you from using the Platform. No consent is required for their use.
2. Functional Cookies: Used to remember your preferences — such as your preferred language, display settings, and responsible gaming limits — so you do not have to re-enter them on each visit.
3. Analytics Cookies: Used to collect aggregated, anonymized data about how Members interact with the Platform (page visits, session lengths, feature usage). This data is used solely to improve the Platform's performance and user experience. No individual Member is identifiable from analytics data.
4. Security and Fraud Detection Cookies: Used to identify unusual access patterns, detect bot activity, and flag potentially fraudulent sessions. These are an integral part of our security infrastructure.

oyo88 does not use third-party advertising cookies or affiliate tracking cookies that would share your browsing behavior with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from accessing your Account.

Your Rights

As a Member whose Personal Data is processed by oyo88, you hold the following rights with respect to your information. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

All data rights requests are handled by oyo88's Data Protection team and are responded to within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly. There is no charge for submitting a data rights request.

Minors & Age Restriction

The oyo88 Platform is strictly intended for adults aged 21 and above. oyo88 does not knowingly collect or process Personal Data belonging to individuals under the age of 21. The age of 21 reflects Indonesian gambling age norms and is enforced through our mandatory KYC process, which requires government-issued photo ID confirming date of birth before any withdrawal is processed.

If oyo88 discovers or is notified that an Account belongs to a person under the age of 21, that Account will be closed immediately. All Personal Data associated with the Account will be deleted as soon as legally permissible, and any funds held in the Account will be handled in accordance with our standard underage account procedures.

We encourage parents and guardians in Indonesia to make use of parental control software and internet filtering tools to prevent minors from accessing online gambling platforms. If you believe a minor has registered an account on oyo88, please contact us immediately at [email protected].

Third-Party Links & Services

The oyo88 Platform may display references to third-party services such as game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) and payment networks (BCA, OVO, DANA, USDT networks). These third parties operate their own independent privacy policies and data practices, over which oyo88 has no control once data leaves our Platform.

oyo88 is not responsible for the privacy practices, content, or security of any third-party service. We strongly encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform. This Privacy Policy applies solely to Personal Data processed by oyo88 directly.

Changes to This Policy

oyo88 reserves the right to update this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data collected, the purposes for which it is used, or the rights available to Members — we will notify you by email to the address registered on your Account and by displaying a prominent notice on the Platform at least 14 days before the revised Policy takes effect.

Minor clarifications and non-material updates (such as correcting typographical errors or clarifying existing practices without changing their substance) may be made without prior notice, though the "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Continued use of the oyo88 Platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

Contact & Data Requests

For any privacy-related queries, data rights requests, or concerns about how oyo88 handles your Personal Data, please contact our Data Protection team using the details below. All communications should clearly state your full name, registered email address, and the nature of your request.

For general account support, live chat is available 24/7 through the Platform. For matters relating to the Terms & Conditions that govern your membership, please visit our Terms & Conditions page. To review your responsible gaming options and self-exclusion tools, visit our Responsible Gaming page.