Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Platform" means the olx167 website at https://olx167.cam, all associated sub-domains, mobile interfaces, and related services.
• "Member" / "You" means any natural person who has registered an account on olx167 or who accesses the Platform as a visitor.
• "Personal Data" means any information that directly or indirectly identifies a living natural person, including but not limited to names, identification numbers, location data, email addresses, and device identifiers.
• "Processing" means any operation performed on Personal Data, whether automated or manual — including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means olx167, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of olx167 under a written data processing agreement — such as payment gateway operators, KYC verification providers, and cloud infrastructure services.
• "KYC" means Know Your Customer — the identity verification process that requires submission of government-issued identification (e.g., KTP — Indonesian National Identity Card) before withdrawal processing.
• "Cookies" means small text files stored on a Member's device by the Platform to facilitate session management, analytics, and personalization features.

This Privacy Policy applies to all Personal Data collected by olx167 in connection with:

• Account registration, profile management, and KYC verification.
• Financial transactions — including deposits and withdrawals processed via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Gameplay activity across all product verticals — sports betting, live casino, slot games, crash games, and togel (Indonesia's traditional numbers lottery) draw-based games.
• Customer support interactions via email, live chat, and any other communication channel operated by olx167.
• General browsing of the Platform, including pages visited by non-registered visitors.

This policy does not apply to third-party websites or services that may be referenced on the Platform. olx167 is not responsible for the data practices of any third-party provider, including game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft, whose own privacy policies govern the data collected through their respective game interfaces where applicable.

olx167 collects Personal Data across the following categories, depending on how you interact with the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify the 21+ age requirement).
• Indonesian National Identity Card (KTP) number and uploaded KTP image for KYC verification.
• Residential address, city (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Makassar), and province.
• Email address and mobile phone number.

3.2 Financial Data

• Bank account names and account numbers (for withdrawal verification — no full account credentials are stored).
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja (registration name and registered phone number only).
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment channel used — all denominated in Indonesian Rupiah (IDR).

3.3 Gameplay & Betting Data

• Bet placement history, game type, stake amounts, outcomes, and session durations.
• Bonus claim history, wagering requirement progress, and promotional participation records.
• Responsible gaming tool settings — deposit limits, loss limits, self-exclusion periods, and session time limits configured by the Member.

3.4 Technical & Device Data

• IP address, browser type and version, operating system, device type, and screen resolution.
• Login timestamps, session duration, pages visited, and navigation path within the Platform.
• Geolocation data derived from IP address (country and city level — no GPS-level location is collected).

3.5 Communications Data

• Records of customer support interactions, including the content of messages sent to and received from olx167's support team.
• Survey responses, feedback submissions, and promotional opt-in records where applicable.

Personal Data is collected through the following channels and mechanisms:

• Direct Submission: Data you actively provide during account registration, KYC document upload, deposit or withdrawal form completion, and customer support interactions.
• Automated Collection: Technical and device data collected automatically via server logs, session tracking, and cookies when you browse or use the Platform.
• Payment Processors: Transaction confirmation data (amount, timestamp, channel identifier) received from our payment gateway partners upon successful transaction settlement. Full financial credentials are never transmitted to olx167 by these partners.
• KYC Verification Providers: Identity verification results and risk scores returned by our certified third-party KYC service provider following document review. The underlying document image may be processed by the provider but is not retained by olx167 beyond the period required for compliance purposes.
• Cookies & Tracking Technologies: Session cookies, preference cookies, and analytics identifiers collected automatically on Platform pages as described in Clause 11.

olx167 processes your Personal Data exclusively for the following defined purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent or as otherwise required by law:

olx167 processes Personal Data on the following legal bases, consistent with internationally recognized data protection principles:

• Contractual Necessity: Processing required to fulfill our contractual obligations to you under the Terms & Conditions — including account management, transaction processing, and KYC verification — is carried out on the basis that it is necessary to perform the contract you entered into with olx167.
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregate analytics is carried out on the basis of olx167's legitimate operational interests, provided those interests are not overridden by your fundamental privacy rights.
• Legal Obligation: Processing required to comply with AML regulations, financial reporting obligations, and lawful government or regulatory directives is carried out on the basis of legal obligation.
• Consent: Processing for optional marketing communications and non-essential cookies is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

olx167 does not sell, rent, or commercially transfer your Personal Data to third parties. Data may be shared only in the following strictly defined circumstances:

• Payment Processing Partners: Transaction data is shared with certified payment gateway operators (supporting BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja) solely to execute and confirm financial transactions. These partners are contractually bound to process data only for this purpose.
• KYC & Identity Verification Services: Identity documents (KTP images and associated data) are shared with our certified KYC provider for the sole purpose of age and identity verification. The provider operates under a binding data processing agreement with olx167.
• Game Content Providers: Gameplay session data (player identifier, stake, and outcome) is transmitted to and from third-party game studios — including Pragmatic Play, Evolution Gaming, Microgaming, Spribe, and Pocket Games Soft — as required for game operation. These studios are subject to their own regulatory certifications and data handling obligations.
• Legal & Regulatory Authorities: olx167 may disclose Personal Data to law enforcement agencies, financial intelligence units, or other government bodies where required to do so by a valid legal order, court subpoena, or mandatory regulatory reporting requirement. olx167 will notify the affected Member of such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets of olx167, Member data may be transferred to the acquiring entity, which will be required to honor this Privacy Policy or provide Members with notice of any material changes.

olx167 operates as an internationally deployed platform. As a consequence, your Personal Data may be processed and stored on servers located outside Indonesia. Where data is transferred internationally — for example, to cloud infrastructure providers or game studio servers — olx167 takes the following protective measures:

• All international data transfers are governed by binding contractual clauses that require the recipient to apply data protection standards equivalent to those described in this Privacy Policy.
• Data transferred to payment processing partners remains subject to the financial data security standards applicable to each partner's regulatory jurisdiction and certification (including PCI-DSS compliance where applicable).
• olx167 does not transfer Personal Data to jurisdictions that are known to provide materially inadequate data protection without implementing additional contractual or technical safeguards.

olx167 retains Personal Data for no longer than is necessary to fulfill the purposes for which it was collected, subject to applicable legal retention obligations. The following retention periods apply as a general framework:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized in accordance with industry-standard data destruction procedures.

olx167 implements a layered, defense-in-depth security architecture to protect Member Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Key technical and organizational measures in place include:

• Transport Security: All data in transit is encrypted using TLS 1.2 or higher with 256-bit AES cipher suites. HTTPS is enforced across the entire Platform with HSTS (HTTP Strict Transport Security) headers active.
• Data-at-Rest Encryption: Sensitive data stored in olx167's databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to Personal Data by olx167 staff is governed by the principle of least privilege. Only personnel whose job function requires access to specific data categories are granted it, and all access events are logged and audited.
• Payment Data Isolation: Payment credential data is never stored directly by olx167. Tokenized transaction references provided by PCI-DSS-certified payment processors are the only financial identifiers retained on olx167's systems.
• Penetration Testing: The Platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: olx167 maintains a documented data breach response plan. In the event of a confirmed breach affecting Member Personal Data, affected Members will be notified as promptly as practicable, with details of the nature of the breach and recommended protective actions.

olx167 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your login session, remember your preferences, and collect aggregate analytics data. The following cookie categories are in use:

• Strictly Necessary Cookies: Required for core Platform functions such as maintaining your authenticated session and processing transactions. These cookies cannot be disabled without impairing Platform functionality. No consent is required for these cookies.
• Preference Cookies: Store settings such as your chosen display language, notification preferences, and responsible gaming tool configurations. These cookies improve your experience on return visits.
• Analytics Cookies: Collect anonymized or pseudonymized data about how Members navigate the Platform — page views, session duration, game category engagement, and click paths — to help olx167 improve the user experience. These cookies are activated only upon your consent.
• Security Cookies: Support fraud detection and anti-bot mechanisms by assigning session identifiers that allow olx167's systems to distinguish legitimate users from automated scripts.

You may manage your cookie preferences through your browser settings at any time. Disabling analytics or preference cookies will not prevent you from using the core Platform but may affect certain convenience features. Disabling strictly necessary cookies may impair your ability to log in or complete transactions.

As a data subject, you hold the following rights with respect to your Personal Data held by olx167. These rights may be exercised by contacting our support team at [email protected] with a clear description of your request and your registered account username. olx167 will respond within 30 calendar days of receiving a valid, verifiable request.

olx167 operates exclusively for adults aged 21 years and above. The Platform does not knowingly collect Personal Data from individuals under the age of 21. If olx167 discovers or is notified that a Member has provided false date-of-birth information to circumvent this age restriction, the following actions will be taken immediately:

• The Account will be permanently suspended and rendered inaccessible.
• All pending wagers will be voided in accordance with the Terms & Conditions.
• The underage individual's Personal Data will be securely deleted from olx167's systems to the extent permitted by applicable legal retention obligations, including any AML-related record-keeping requirements triggered by financial transactions that may have occurred.
• Any deposited funds that can be verified as originating from the underage individual's own bank account or e-wallet may be returned to the originating payment method at olx167's sole discretion, net of any applicable transaction fees.

Parents or legal guardians who believe a minor has registered on olx167 are encouraged to contact our support team immediately at [email protected] so that the matter can be investigated and resolved without delay.

olx167 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. The following process applies to all material amendments:

• Registered Members will be notified of material changes via the email address associated with their Account at least 7 days before the updated Policy takes effect.
• A prominent notice will be displayed on the Platform for a minimum of 14 days following any material update.
• The "Last Updated" date at the top of this page will be revised to reflect the most recent amendment date.
• Your continued use of the Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

Non-material changes — such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates to contact information — may be made at any time without advance notice, though the "Last Updated" date will still be revised accordingly.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the olx167 data protection team. Our support team is available 24 hours a day, 7 days a week — including Indonesian public holidays — to assist with privacy-related inquiries.

For requests regarding your data rights as described in Clause 12, please include the following information in your message to help us process your request efficiently:

• Your full name as registered on your olx167 Account.
• Your registered email address and account username.
• The specific right you wish to exercise (e.g., access, erasure, portability).
• Any relevant context or supporting detail that will help us locate and process your data accurately.

olx167 will not charge a fee for handling data rights requests unless a request is manifestly unfounded, repetitive, or excessive — in which case a reasonable administrative fee may be applied, and the Member will be informed in advance.