Privacy Policy

1 Introduction

oyo888 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at oyo888.cam. As a platform serving players primarily located in Indonesia, we are committed to handling personal data responsibly, transparently, and in accordance with internationally recognized data protection principles.

This Privacy Policy describes the categories of personal data we collect from Players and visitors to our Platform, the purposes for which that data is used, the conditions under which it may be shared with third parties, the security measures we employ to protect it, and the rights available to you as a data subject. We encourage all Players to read this policy in full before registering an Account.

This policy applies to all personal data processed in connection with your use of the oyo888 Platform, including data collected through our website, mobile interface, customer support channels, and payment processing integrations. It does not apply to third-party websites or services that may be linked to or from our Platform.

2 Definitions

The following terms carry the meanings stated below throughout this Privacy Policy:

• "Account" — the registered Player account on the oyo888 Platform.
• "Data Controller" — oyo888, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of oyo888 under a data processing agreement (e.g., payment processors, KYC service providers, hosting providers).
• "Data Subject" — you, the individual whose personal data is being collected and processed.
• "KYC" — Know Your Customer; the identity verification process through which oyo888 confirms a Player's identity, age, and payment method ownership.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living natural person, directly or indirectly.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Player" — any individual who holds a registered Account on the oyo888 Platform.
• "Sensitive Data" — a subset of personal data warranting enhanced protection, including identity document details, financial information, and data related to health or wellbeing.

3 Data We Collect

oyo888 collects only the personal data necessary to provide, secure, and continuously improve our Services. The categories of data we collect are as follows:

3.1 Registration Data

When you create an Account, we collect: your full legal name; date of birth; email address; residential address; preferred username; and the phone number associated with your account or payment method.

3.2 Identity Verification (KYC) Data

To comply with responsible gaming and anti-money laundering obligations, we collect: a copy of your government-issued photo identification (Indonesian KTP, SIM, or valid passport); proof of your registered payment method (bank account screenshot showing your name and account number); and, where required, proof of residential address.

3.3 Financial and Transaction Data

We collect and maintain records of all financial transactions associated with your Account, including: deposit amounts, dates, and payment methods used (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja); withdrawal requests and processed amounts; bonus credits and wagering activity; and Account balance history.

3.4 Gaming Activity Data

We record all gaming and betting activity on the Platform, including: games played, bet amounts, outcomes, session durations, win/loss records, and any responsible gaming tools you activate (deposit limits, self-exclusion, session reminders).

3.5 Technical and Device Data

When you access the Platform, we automatically collect: your IP address; device type, model, and operating system; browser type and version; time zone; language settings; session timestamps; and referring URLs. This data is used to maintain platform security, detect fraud, and optimize the user experience.

3.6 Communications Data

We retain records of all communications between you and our support team, including live chat transcripts, WhatsApp message logs, and email correspondence. These records are maintained for quality assurance, dispute resolution, and compliance purposes.

4 How We Collect Data

oyo888 collects personal data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically — through cookies, session tracking, server logs, and analytics tools when you browse or interact with the Platform.
• From third-party payment providers — transaction confirmation data from BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and other integrated payment processors.
• From KYC verification partners — identity verification status and risk-scoring results from third-party KYC service providers engaged by oyo888.
• From fraud prevention services — device fingerprinting and behavioral risk signals from our fraud detection infrastructure.

5 Purposes of Processing

oyo888 processes your personal data for the following specific purposes:

1. Account Creation and Management: To register your Account, verify your identity, and maintain your Account profile throughout your relationship with oyo888.
2. Service Delivery: To enable you to deposit funds, place wagers, participate in games and promotions, and withdraw winnings through your preferred payment methods including BCA, BRI, BNI, Mandiri, and supported e-wallets.
3. KYC and Compliance: To fulfill our obligations under applicable anti-money laundering (AML) standards, responsible gaming regulations, and international licensing conditions — including age verification to enforce our strict 21+ policy.
4. Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and any other activity that compromises platform integrity or other Players' experiences.
5. Customer Support: To respond to your inquiries, resolve disputes, process complaints, and improve the quality of our support interactions.
6. Responsible Gaming: To monitor gaming behavior for signs of problem gambling and to administer self-exclusion requests, deposit limits, reality checks, and other player-protection tools you activate.
7. Marketing and Promotions: Where you have given explicit consent, to send you information about promotions, bonuses, and platform updates relevant to you as an oyo888 Player. You may withdraw consent at any time by contacting our support team.
8. Platform Improvement: To analyze aggregated usage patterns, identify technical issues, and continuously improve the Platform's performance, interface, and game offering.
9. Legal Obligations: To comply with any applicable legal requirements, regulatory requests, court orders, or governmental directives that necessitate the disclosure or retention of personal data.

6 Legal Basis for Processing

oyo888 processes personal data on the following legal grounds, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform our agreement with you — including Account registration, payment processing, game access, and withdrawal facilitation.
• Legal Obligation: Processing required to comply with applicable AML regulations, KYC mandates, responsible gaming standards, and international licensing conditions.
• Legitimate Interests: Processing carried out for our legitimate business interests — including fraud prevention, platform security, dispute resolution, and service improvement — where those interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as direct marketing communications, where we obtain your explicit prior consent. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Personal Data

oyo888 does not sell your personal data to third parties for commercial gain. We share personal data only in the limited circumstances described below, and only with parties bound by appropriate confidentiality and data protection obligations:

7.1 Payment Processors

To process deposits and withdrawals, we share necessary transaction data with your selected payment provider — including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). Each provider is governed by its own privacy policy and data protection obligations.

7.2 KYC and Identity Verification Partners

We engage accredited third-party KYC service providers to perform identity document verification and age checks. These providers receive only the minimum data necessary to complete the verification process and are contractually prohibited from using that data for any other purpose.

7.3 Game Studio Providers

Our Platform integrates games from third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. Certain technical session data (such as a pseudonymous Player ID and session token) is shared with these studios to facilitate game delivery. No directly identifiable personal data such as your full name or ID document is shared with game studios.

7.4 Fraud Prevention and Security Services

We share device, behavioral, and transactional data with specialized fraud prevention services to protect the Platform and all Players from fraudulent activity. These services operate under strict data processing agreements that limit use of shared data to fraud detection purposes only.

7.5 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid legal process, or a governmental order. In such cases, we will notify affected Players where legally permissible to do so.

7.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of oyo888 or its assets, personal data held by the Platform may be transferred to the successor entity. Affected Players will be notified in advance of any such transfer and will retain the right to close their Account and request data deletion prior to the transfer completing.

8 Data Retention

oyo888 retains personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where anonymization is applied, the resulting data set may be retained indefinitely for aggregate statistical analysis.

9 Data Security

oyo888 implements a layered security architecture to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols — the same encryption standard used by major Indonesian banks including BCA and BNI.
• Encrypted Data Storage: Personal data and KYC documents stored on our servers are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff members access only the data required to perform their specific job functions, and all access is logged and auditable.
• Multi-Factor Authentication (MFA): Internal systems containing personal data require multi-factor authentication for all staff access.
• Penetration Testing: Our platform infrastructure undergoes regular third-party security assessments and penetration tests to identify and address vulnerabilities.
• Incident Response: oyo888 maintains a data breach response protocol. In the event of a breach affecting your personal data, we will notify affected Players and relevant authorities within the timeframes required by applicable law.

10 Cookies & Tracking Technologies

oyo888 uses cookies and similar tracking technologies to deliver, secure, and improve our Platform. A cookie is a small text file placed on your device when you visit our website. We use the following categories of cookies:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, store your language and currency preferences, and enable core security features. These cookies cannot be disabled without materially impairing Platform functionality.

10.2 Performance and Analytics Cookies

These cookies collect anonymized data about how Players use the Platform — which pages are visited most, how long sessions last, and where errors occur. This data helps us continuously improve platform performance and the user experience. No personally identifiable information is collected through these cookies.

10.3 Functionality Cookies

These cookies remember your preferences — such as your preferred deposit method, game lobby layout, and notification settings — so that you do not need to re-configure them each time you log in.

10.4 Security and Fraud Detection Cookies

These cookies support our fraud detection infrastructure by collecting device fingerprinting signals that help identify unusual or potentially fraudulent access patterns. They form a critical component of our platform security architecture.

You may manage cookie preferences through your browser settings. However, disabling strictly necessary or security cookies may prevent you from accessing certain Platform features. oyo888 does not use cookies for third-party advertising or cross-site behavioral tracking.

11 Your Rights as a Data Subject

As a Player whose personal data is processed by oyo888, you hold the following rights. To exercise any of these rights, contact our support team via live chat or at [email protected]. We aim to respond to all data rights requests within 30 days of receipt.

• Right of Access: You may request a copy of all personal data we hold about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as email address updates) can be made directly in your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (if processing was based on consent), or where processing is unlawful. This right is subject to retention obligations under applicable law — data required for AML, KYC, or regulatory compliance cannot be deleted before the mandatory retention period expires.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or a contract with you, you may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to Object: You have the right to object to processing based on our legitimate interests, including processing for direct marketing purposes. Where you object to direct marketing, we will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12 Minors and Age Restriction

oyo888 strictly prohibits the use of its Services by individuals under the age of 21. We do not knowingly collect or process personal data from individuals under 21 years of age. Our KYC verification process is specifically designed to detect and prevent underage account registration.

If we become aware that we have inadvertently collected personal data from an individual under 21, we will immediately suspend the relevant Account, delete the associated personal data (subject to any fraud investigation requirements), and refund any deposits made. Parents or guardians who become aware that a minor has registered an Account on oyo888 are urged to contact our support team immediately via live chat so that appropriate action can be taken without delay.

13 International Data Transfers

oyo888 operates servers and engages service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Indonesia. In all cases where such transfers occur, oyo888 ensures that appropriate safeguards are in place to maintain a standard of protection equivalent to that applied within Indonesia, including:

• Data processing agreements incorporating standard contractual clauses with all international data processors.
• Restricting international transfers to jurisdictions that maintain adequate data protection standards as assessed by our legal and compliance team.
• Applying technical safeguards — including encryption in transit and at rest — to all personally identifiable data transferred across borders.

You may request information about the specific countries to which your data may be transferred and the safeguards in place by contacting our support team.

14 Amendments to This Policy

oyo888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or improvements to our platform. Material changes — meaning changes that meaningfully affect how your personal data is used — will be communicated to registered Players via the email address on file no less than 7 days before the change takes effect.

Non-material updates (such as clarifications of existing practices, corrections of typographical errors, or restructuring of this document without changing its substantive content) may be made without prior notice. The "Effective Date" at the top of this policy reflects the date on which the current version came into force. The most current version of this Privacy Policy is always available at oyo888.cam/privacy-policy. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised policy.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by oyo888, please contact us through any of the following channels:

• Live Chat: Available 24/7 via your Account dashboard. This is the fastest channel for data rights requests, with average response times under 2 minutes.
• WhatsApp Support: Available through your Account dashboard. Native Indonesian-speaking agents are available around the clock to assist you.
• Email: [email protected] — responses within 4 business hours. For formal data subject access requests, please include "Data Rights Request" in your subject line and provide your registered Account email address to help us locate your records promptly.

We aim to resolve all privacy-related inquiries within 30 days of receipt. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through the dispute resolution process described in oyo888's Terms & Conditions.