olxototo Casino & Sportsbook Data Care

This page describes what we collect when you use olxototo and how we keep that data protected. Whether you access our platform through an Android installation, via your browser on iOS, or through our mobile-responsive web interface, the information you share with us during registration, deposit, gameplay, and account recovery is handled under the same strict privacy commitments. We built this guide to explain our actual practice, not to bury the details in legal jargon.

Our approach to data privacy is straightforward: we collect only what we need to run the platform, verify your identity for regulatory compliance, process your deposits and withdrawals through local payment methods like DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet, and provide you with responsive customer support in your preferred language during business hours. We do not sell your personal information to advertisers, and we do not retain it longer than necessary.

Our platform operates in supported jurisdictions where local law permits. If you are outside those regions, our service is not available to you, and we do not collect or process your data. The sections below walk you through each category of information we handle, how long we keep it, who has access to it, and what rights you have to review, correct, or request deletion of your account data.

What we collect and why

We collect your email address and a secure password when you register an account on olxototo. We need your email to send you account-recovery links, deposit confirmations, withdrawal status updates, and service notices. We store your password in encrypted form; we never see or store your plain-text password.

We collect your full name, date of birth, national ID number (or passport number), and residential address to comply with anti-money-laundering regulations in Indonesia and any other supported jurisdiction where you hold an account. This information is verified during the KYC (Know Your Customer) process. We handle your identity documents—scanned copies of your ID or passport—with the same confidentiality as we do other account data. Our KYC verification is processed by our internal compliance team and by third-party identity verification processors approved by our legal and security teams.

We record the date and time of your deposits, the payment method you used (e.g., DANA, e-wallet, or a mobile banking virtual account), and the amount. We do not store your full payment card or bank account number; payment processors handle that encryption themselves, and we receive only a tokenized reference. We log your withdrawals in the same way, along with the bank account or e-wallet you requested the funds be sent to. These transaction logs are kept for seven years to satisfy tax and regulatory record-keeping requirements, particularly for large withdrawals that may trigger reporting thresholds during events like Idul Fitri, when deposit volumes peak across Indonesia.

How we secure your KYC documents

We encrypt all identity documents and store them on servers in secure data centers. Only our compliance team and authorized payment processors see these documents; they are never shared with game studios, marketing partners, or sportsbook operators for Liga 1, Piala AFF, or other sports markets we cover.

We log your IP address and device type (Android phone, iPhone, Safari browser, etc.) each time you log in. This helps us detect unauthorized access and recover your account if you forget your password or suspect compromise. We keep these login logs for one year and then delete them unless a specific support case is open (e.g., a dispute or fraud investigation).

We collect information about which games you play, which sportsbook events you view (e.g., Champions League or MotoGP markets), and how long you remain active on the platform. We do not collect this data to profile you for advertising; we collect it to understand which features are working well, which need improvement, and to spot technical issues. This behavioral data is kept for 90 days and then aggregated into anonymous statistics before deletion of individual-level records.

How we use your data and who we share it with

We use your personal information to run olxototo. That means we use your email and account details to process your deposits and withdrawals; your identity information to comply with local law in Bandung, Jakarta, Surabaya, Medan, and Semarang, where we have concentrations of active users; and your transaction history to detect fraud, respond to chargebacks, and provide customer support. Our multilingual support team (available during business hours) may need to access your account details to resolve disputes or recover an account.

We share your payment information with our payment processors—the third-party companies that operate the DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank-transfer systems. These processors are contractually obligated to keep your information confidential and to use it only to process your transaction. We do not share your KYC documents, login logs, or behavioral data with any external party except as required by law enforcement or court order.

We use cookies and similar tracking technologies to keep you logged in, to remember your preferences (e.g., your language choice), and to prevent fraud. We do not use cookies to build a profile of your browsing activity across other websites. If you prefer not to accept cookies, you can adjust your browser settings; however, some features of olxototo may not function correctly if cookies are disabled.

Your rights on olxototo

  • You may request a copy of all personal data we hold about you.
  • You may ask us to correct inaccurate or incomplete information.
  • You may request deletion of your account and all associated data, except transaction records required by law.
  • You may object to the use of your data for certain purposes, such as marketing (though we do not currently use it for that).
  • You may withdraw your consent to cookies at any time by adjusting your browser settings.

To exercise any of these rights, contact our support team. We aim to respond to data-access requests within 14 calendar days. If your request is complex or requires coordination with third-party processors, we may ask for additional time (up to 30 days). We will not charge you a fee for reasonable requests.

Our servers may sit outside your jurisdiction; however, we ensure that all data transfers comply with privacy laws in the regions where we operate. We retain your account and transaction data for as long as your account is active and for seven years after closure to satisfy legal record-keeping obligations. Behavioral data and login logs are deleted after the periods described above, unless a dispute or investigation requires us to retain them longer. If you have questions about our data practices, contact our support team during business hours, and we will clarify our policy and explain how it applies to your account.