olk88 Privacy Policy

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including but not limited to a name, national identity number, date of birth, email address, phone number, IP address, device identifier, or payment account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure by transmission, dissemination, or erasure.
• "Controller" means olk88, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means any third-party service provider that processes Personal Data on behalf of olk88 under a written data processing agreement.
• "Data Subject" means the individual to whom the Personal Data relates — in the context of this policy, you as an olk88 player or prospective player.
• "Platform" means the olk88 website accessible at https://olk88.lat and all associated services, features, and communications.
• "KYC Data" means identity and address verification documents collected during the Know Your Customer verification process, including government-issued identification, proof of address, and selfie verification images.
• "Cookie" means a small text file placed on your device by the olk88 platform for functional, analytical, or security purposes.

olk88 collects Personal Data in the following categories, through the means described below:

2.1 Registration Data. When you create an olk88 account, we collect your chosen username, email address, date of birth, mobile phone number (Indonesian format, e.g., 08xx-xxxx-xxxx), and residential city or province within Indonesia. This data is necessary to create and maintain your account.

2.2 KYC and Identity Verification Data. When you request a withdrawal above the verification threshold or when olk88 initiates a KYC review, we collect copies of government-issued identity documents (such as your Indonesian KTP or passport), proof of residential address, and where required, a live selfie image. This data is retained in a secure, access-controlled document vault.

2.3 Financial Transaction Data. We collect records of all deposit and withdrawal transactions processed through your olk88 account, including the payment method used (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja), the transaction amount in IDR, the timestamp, and the transaction reference number. We do not store full bank account numbers or e-wallet PINs on our servers.

2.4 Gameplay and Betting Data. olk88 records all bets placed, games played, wager amounts, results, bonus claims and usage, session durations, and game preferences. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud detection.

2.5 Technical and Device Data. When you access the Platform, we automatically collect your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, and pages visited. This data is collected via server logs and analytics tools.

2.6 Customer Support Data. When you contact olk88 via live chat or email, we retain a record of the communication, including your messages, the support agent's responses, any attachments you submit, and the date and time of the interaction.

2.7 Voluntary Data. If you participate in surveys, promotions, or competitions offered by olk88, we may collect additional information you voluntarily provide in that context.

olk88 processes your Personal Data for the following purposes:

olk88 does not use your Personal Data for automated individual decision-making that produces legal or similarly significant effects without human review. Responsible gaming risk flags generated by automated systems are always reviewed by a member of the olk88 responsible gaming team before any account restriction is applied.

olk88 processes your Personal Data on one or more of the following legal bases depending on the purpose of the processing:

• Contractual Necessity. Processing required to fulfil our obligations under the olk88 Terms & Conditions, including account management, payment processing, and game provision. Without this processing, olk88 cannot provide its services to you.
• Legal Obligation. Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and the retention of financial records for auditing purposes.
• Legitimate Interests. Processing that is necessary for olk88's legitimate interests in operating a secure, fair, and sustainable online betting and casino platform, provided those interests are not overridden by your rights and interests. This basis covers fraud detection, platform security, responsible gaming monitoring, and technical analytics.
• Consent. Processing based on your freely given, specific, and informed consent — primarily in connection with optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5.1 Service Providers (Processors). olk88 shares Personal Data with carefully selected third-party service providers that process data on our behalf under written data processing agreements. These Processors include:

• Payment processors and Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — for the purpose of facilitating deposits and withdrawals in IDR
• KYC and identity verification platform providers — for the purpose of verifying identity documents submitted during account verification
• Cloud hosting and infrastructure providers — for the purpose of storing and serving the olk88 platform securely
• Customer support platform providers — for the purpose of managing live chat and email support interactions
• Fraud detection and security analytics providers — for the purpose of identifying and preventing fraudulent activity
• Game studio providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) — limited technical data necessary to deliver game sessions

5.2 Legal Disclosures. olk88 may disclose your Personal Data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of olk88, its players, or the public. olk88 will notify affected players of such disclosures where legally permissible.

5.3 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of olk88's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. olk88 will notify affected players of any such transfer in advance and will ensure the acquiring entity is bound by this Privacy Policy or a materially equivalent policy.

5.4 No Commercial Data Sales. olk88 does not sell, rent, licence, or otherwise commercially exploit your Personal Data to third parties for their own marketing or commercial purposes. This prohibition applies without exception.

6.1 olk88 uses cookies and similar technologies (local storage, session storage, pixel tags) to operate and improve the Platform. The categories of cookies used by olk88 are as follows:

6.2 olk88 does not use third-party advertising cookies, behavioural tracking cookies, or cross-site tracking technologies. Analytical data is processed in aggregate and anonymised form and is not used to build individual user profiles for marketing purposes.

6.3 You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your olk88 account. Disabling functional or analytical cookies will not affect your ability to use the Platform but may result in a reduced experience.

7.1 olk88 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active account data (registration details, gameplay records, transaction history): retained for the duration of your active account plus a minimum of five (5) years following account closure, to satisfy AML and financial record-keeping obligations.
• KYC documents: retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later, in accordance with anti-money laundering regulatory requirements.
• Customer support records: retained for three (3) years following resolution of the support case, unless the case is subject to ongoing legal proceedings.
• Technical and device logs: retained for ninety (90) days, after which they are automatically purged unless flagged for fraud or security investigation.
• Marketing consent records: retained for the duration of your consent plus two (2) years following withdrawal of consent, to demonstrate compliance with consent-based processing obligations.

7.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be linked to a specific individual.

8.1 olk88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and olk88 servers
• Encryption at rest for all databases containing Personal Data and KYC documents
• Strict role-based access controls ensuring that olk88 staff can only access the minimum Personal Data necessary for their specific role
• Two-factor authentication (2FA) enforced for all olk88 administrative system access
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists
• Intrusion detection and prevention systems monitoring all production infrastructure
• Secure deletion protocols applied when data reaches the end of its retention period

8.2 Data Breach Response. In the event of a Personal Data breach that poses a risk to the rights and freedoms of affected players, olk88 will notify affected players without undue delay following discovery of the breach and will take prompt remedial action to contain and mitigate the impact.

9.1 olk88 operates as an internationally regulated platform. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia where olk88's hosting infrastructure, game studio partners, or service providers are located.

9.2 Where such international transfers occur, olk88 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to the protections described in this policy. Safeguards used by olk88 for international transfers include contractual clauses in data processing agreements with receiving parties and the selection of Processors located in jurisdictions recognised as providing an adequate level of data protection.

9.3 Indonesian local bank and e-wallet partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja) process your payment data exclusively within Indonesia. Financial transaction data shared with these partners does not leave Indonesian territory.

As a Data Subject, you hold the following rights in respect of the Personal Data that olk88 processes about you. You may exercise these rights at any time by contacting olk88 support at [email protected]. olk88 will respond to verified requests within thirty (30) days.

To exercise any of the above rights, please contact olk88 support with a description of your request. olk88 may request verification of your identity before processing a data rights request to prevent unauthorised disclosure. Where a request is refused, olk88 will provide a written explanation of the reason.

11.1 The olk88 platform is strictly intended for adults aged 21 years and above. olk88 does not knowingly collect, process, or store Personal Data from individuals under the age of 21.

11.2 If olk88 discovers that Personal Data belonging to an individual under the age of 21 has been collected — including as a result of a false declaration of age during registration — the relevant account will be immediately suspended, any balance will be handled in accordance with the olk88 responsible gaming policy, and all Personal Data associated with the account will be deleted in accordance with applicable legal requirements.

11.3 If you believe that a minor has registered an account on the olk88 platform, please notify olk88 support immediately at [email protected].

12.1 The olk88 platform may contain references to third-party services such as Indonesian banking portals or e-wallet apps that you navigate to independently when making a deposit or withdrawal. These third-party services operate under their own privacy policies and data practices, which are entirely independent of olk88.

12.2 olk88 is not responsible for the privacy practices or content of any third-party service. We encourage you to review the privacy policies of any service you use in connection with your olk88 account, including those of your bank and e-wallet provider.

12.3 Game studios whose titles are available on the olk88 platform (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may process limited technical session data necessary to deliver their games. Such processing is governed by the applicable studio's own privacy documentation and by the data processing agreements between olk88 and each studio.

13.1 olk88 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Where a change is material — meaning it meaningfully affects how your Personal Data is processed or your rights as a Data Subject — olk88 will provide at least fourteen (14) days' advance notice by publishing a prominent notice on the Platform or by notifying you at your registered email address.

13.2 Your continued use of the olk88 Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with the changes, you may request account closure as described in the olk88 Terms & Conditions before the effective date.

13.3 The current version of this Privacy Policy, including the date of last revision, is always available at https://olk88.lat/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise a data right, or need to report a privacy concern, please contact olk88 using the details below. Our support team is available 24 hours a day, 7 days a week, including all Indonesian national public holidays.

For responsible gaming concerns, deposit limits, self-exclusion requests, or account cooling-off periods, please visit our dedicated Responsible Gaming page or contact our support team directly via live chat.