olxtoto group Platform Privacy Notice

This page describes what we collect when you use olxtoto group and how we keep that data protected. We at olxtoto group take data security seriously; we encrypt sensitive information, limit access to verified staff, and comply with applicable privacy law in the jurisdictions we serve. Our players across Jakarta, Surabaya, Bandung, Medan, and Semarang trust us with personal details—national ID numbers, proof of residence, payment information—and we handle that trust with care.

Our privacy practices cover account registration, payment processing, game engagement, and customer support. We do not sell your personal data to third parties. We do share minimal data with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) and game studios (Pragmatic Play, PG Soft, Habanero, Playtech) only as necessary to deliver our services. We retain your data for as long as you hold an active account and for a defined period afterward for legal compliance.

This notice outlines what we collect, why we collect it, how long we keep it, and what rights you have over your information.

What Data We Collect on olxtoto group

We collect data in three categories: account details, payment information, and behavioral data. For account creation, we require your full legal name, date of birth, national ID number (KTP), email address, and phone number. We ask for proof of residence (utility bill or bank statement) during our Know Your Customer (KYC) verification process. We store these documents encrypted in our secure cloud environment; only our verification team accesses them during the review window (typically 2–4 business hours).

For payment processing, we collect transaction history: deposit amounts, withdrawal requests, payment methods used, and timestamps. We do not store full payment card details or wallet credentials; our payment partners handle those sensitive fields directly. We record your IP address, device type, and browser information each time you log in; this helps us detect unauthorized access patterns and support account recovery if needed.

For behavioral tracking, we log which games you engage with (Aviator, Sweet Bonanza, Fortune Tiger, Mahjong Ways, live-dealer tables, sportsbook markets), how long you spend on each activity, and aggregate performance data (total wagers, total wins, tournament placements). We use this data to personalize your experience, identify technical issues, and comply with anti-money-laundering (AML) regulations.

Data we collect on olxtoto group

  • Personal identifiers: full name, date of birth, national ID number, email, phone
  • Residential proof: utility bills, bank statements, or government documents
  • Payment records: deposit history, withdrawal requests, timestamps, payment method types
  • Device and access data: IP address, browser type, login timestamps, device identifiers
  • Game engagement: titles accessed, session duration, wager and win records, tournament participation

How We Use Your Data on olxtoto group

We use account and payment data primarily to deliver our service: verify your identity, process your deposits and withdrawals, settle game outcomes, and maintain your account security. We use behavioral data to detect fraud (unusual withdrawal requests, rapid large wagers from new devices), ensure AML compliance (identifying money-laundering patterns), and improve our platform (understanding which games draw engagement, identifying technical bottlenecks).

We do not use your data for marketing unless you explicitly opt in through your account settings. We do not sell your data to third-party marketers. We may share minimal data (account status, KYC completion date, transaction count) with our payment partners and game studios only as required to deliver services. During Liga 1 or Piala AFF tournament periods, we may send you notifications about new market availability or technical updates, but only if you have not disabled notifications.

Our support team accesses your account history only when you contact us with a question or issue. We maintain detailed logs of all support interactions; these logs include chat transcripts, email records, and any account changes our team makes on your behalf. You can request these logs at any time through our support portal.

How Long We Keep Your Data

We retain your account data for as long as your account remains active on olxtoto group. Once you close your account, we delete most personal identifiers within 30 days, but we retain transaction records and support logs for seven years to comply with financial regulations and potential legal inquiries. We delete payment card details and wallet credentials immediately after each transaction (our payment partners retain these, not us).

We retain device and IP address logs for six months; this helps us investigate security incidents and account recovery requests. If you request a data export, we compile all records we hold on you within 15 business days and provide them in a portable, machine-readable format. If you request deletion of specific data categories, we honor that request within 30 days where legally permissible, though we may need to retain some data for regulatory compliance.

Third Parties Who Access Your Data

Our payment partners—DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet—receive your transaction details during deposit and withdrawal processing. Each payment partner maintains their own privacy policy; we are not responsible for their data practices once we transfer information to them. Our game studios (Pragmatic Play, PG Soft, Habanero, Playtech) receive anonymized gameplay data (titles accessed, session duration, aggregate win/loss) but not your personal identifiers.

Our cloud hosting provider (which operates servers outside Indonesia) stores our encrypted databases. We maintain data processing agreements with all third parties, contractually binding them to protect your data and use it only for the purposes we specify. Our compliance officer reviews these agreements annually. We do not share your data with advertisers, data brokers, or any external parties beyond those listed above.

We at olxtoto group limit data sharing to only what is necessary to deliver your gaming experience and fulfill legal obligations.

olxtoto group privacy team

Your Rights Over Your Data on olxtoto group

You have the right to access, correct, and delete your personal data subject to legal constraints. You can view your full account record through your account settings on olxtoto group. If you find inaccurate information (misspelled name, incorrect birth date, wrong address), you can request correction through our support team; we verify the correction and update our records within five business days.

You can request a complete data export at any time through our support portal. We compile all records we hold on you and deliver them in CSV or JSON format within 15 business days. You can request deletion of your account and most associated data; we process account closure within 30 days, though we retain transaction records for seven years per financial regulation.

You have the right to opt out of non-essential communications (promotional emails, game notifications) through your account settings. You retain the right to withdraw consent for data processing at any time, though this may limit our ability to deliver services on olxtoto group. If you believe we have mishandled your data, you may file a complaint with our privacy officer at our legal contact page

Our Security Measures on olxtoto group

We encrypt all data in transit and at rest using industry-standard encryption (TLS 1.2 or higher). Our servers use firewalls and intrusion detection to prevent unauthorized access. We employ two-factor authentication (2FA) for all account access; we recommend every player enable 2FA through their account settings. Our staff access your data only through encrypted, logged connections; we audit access logs weekly for unusual activity.

We conduct security audits quarterly and penetration testing annually. We maintain data breach insurance and have incident response procedures in place; if a breach occurs, we notify affected users and relevant authorities within 48 hours. We do not guarantee absolute security—no system is impenetrable—but we maintain security practices consistent with industry standards for financial and gaming platforms.

Cookies and Tracking on olxtoto group

Our platform uses cookies to maintain your login session, remember your preferences, and track aggregate site usage. We do not use cookies to identify you personally across different websites. Our analytics provider (internal only; we do not share raw data externally) tracks aggregate page views and user flow to help us optimize our platform design. You can disable cookies in your browser settings, though this may limit your experience on olxtoto group.

Jurisdiction and Data Residency

Our primary data center is located in Indonesia. Our backup cloud systems may store encrypted copies in other Southeast Asian jurisdictions for disaster recovery; we do not store unencrypted personal data outside Indonesia without explicit consent. We comply with applicable Indonesian law and the legal requirements of jurisdictions where we operate. If local law requires us to disclose your data to authorities, we do so but notify you when legally permissible.

Our services are available only where local law permits. Players are responsible for verifying that access and use comply with their jurisdiction's applicable law. We do not operate in jurisdictions where online gaming is prohibited by statute.

Contact Our Privacy Team

If you have questions about our privacy practices on olxtoto group, wish to exercise your data rights, or want to report a data concern, our privacy officer is available during business hours (08:00–22:00 Indonesia Standard Time, Monday through Sunday). You can reach our support team via live chat on our platform or submit a written request through our contact form at our FAQ page

We aim to respond to privacy requests within five business days. For complex requests (full data export, deletion of extensive records, legal inquiries), we may extend the response window to 15 business days. We do not charge a fee for privacy requests unless they are manifestly unfounded or excessive.