olx388 Privacy Policy

1 Definitions

The following definitions apply throughout this Privacy Policy:

• "olx388" / "we" / "us" / "our" — refers to the olx388 online gaming platform, accessible at olx388. app, and its operators, affiliates, and licensed partners.
• "Player" / "you" / "your" — refers to any individual who registers an account on, visits, or otherwise interacts with the olx388 platform.
• "Personal Data" — refers to any information that identifies or can reasonably be used to identify a natural person, including name, date of birth, address, email address, phone number, payment details, and device identifiers.
• "Processing" — refers to any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" — refers to Know Your Customer identity verification procedures that olx388 is required to conduct before processing withdrawals or fulfilling certain account actions.
• "Third-Party Service Provider" — refers to any external company or individual engaged by olx388 to perform services on its behalf, including payment processors, identity verification providers, fraud-detection services, and analytics providers.
• "Cookies" — refers to small text files placed on your device by the olx388 platform to support session management, security, and performance monitoring.
• "Platform" — refers to the olx388 website, any mobile-optimized version thereof, and all associated services, products, and features accessible through olx388.app.

2 Data We Collect

olx388 collects personal data through several channels and at different points during your use of the platform. The categories of data we collect are as follows:

2.1 Registration Data

When you create an account on olx388, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Residential address, including city and province within Indonesia
• Email address and mobile phone number
• Username and encrypted account password

2.2 Identity Verification (KYC) Data

As part of our KYC process, which is mandatory before processing any withdrawal, we collect:

• A scanned or photographed copy of a valid government-issued photo ID — such as a KTP (Indonesian National Identity Card), SIM (driving license), or international passport
• A selfie or live photo for facial comparison purposes
• Proof of ownership of the payment method used (e.g., a photograph of your BCA, BRI, BNI, or Mandiri bank card, or a screenshot of your OVO, DANA, GoPay, ShopeePay, or LinkAja account registration).

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and timestamps
• Bank account numbers and registered account names associated with your payment method
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction reference numbers and processing confirmations

2.4 Gameplay Activity Data

• Games accessed, wagers placed, outcomes received, and session durations
• Sportsbook bet selections, including football markets such as mix parlay (accumulator bets) and voor bola (Asian handicap) on BRI Liga 1, EPL, Champions League, and other competitions
• Bonus claims, wagering progress, and promotional participation records
• Responsible gaming tool usage, including deposit limits and self-exclusion requests

2.5 Technical and Device Data

• IP address and approximate geographic location (city/region level)
• Browser type and version, operating system, and device type
• Session start and end times, page navigation paths, and click events
• Cookie identifiers and locally stored session tokens

2.6 Communications Data

• Records of support interactions via live chat and email correspondence to [email protected]
• Feedback, complaints, and dispute records
• Responses to promotions and marketing communications (where you have opted in)

3 How We Use Your Data

olx388 uses the personal data we collect for clearly defined, legitimate purposes. We do not use your data in any manner inconsistent with the purposes stated below:

olx388 will not use your personal data for automated decision-making that produces significant legal effects without human oversight. Any account action (suspension, closure, bonus voiding) that affects your account is reviewed by a member of our compliance or support team before being enacted.

4 Legal Basis for Processing

olx388 processes personal data on the following legal bases:

• Contractual Necessity: The majority of data processing is necessary to perform our obligations under the player account agreement — including account creation, transaction processing, identity verification, and support provision. Without this processing, we cannot provide the platform services.
• Consent: Where we send promotional communications by email or in-platform notification, we do so only where you have provided explicit consent. You may withdraw consent at any time by contacting [email protected] or updating your communication preferences in your account settings.
• Legitimate Interests: olx388 processes technical and device data, and conducts fraud monitoring and security analysis, on the basis of legitimate interests — specifically the protection of the platform, its players, and its financial integrity. These interests are balanced against player privacy and do not override your fundamental rights.
• Legal Obligation: Certain data processing — particularly the retention of KYC and transaction records — is carried out to comply with applicable anti-money-laundering standards and the requirements of our international gaming license.

5 Data Sharing & Disclosure

olx388 does not sell your personal data. We share data with third parties only in the following carefully limited circumstances:

• Payment Processors: Your financial transaction data and relevant identity information are shared with our payment processor partners — including those facilitating transfers through BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely for the purpose of executing and verifying your deposits and withdrawals.
• KYC and Identity Verification Providers: Identity documents and selfie images collected during the KYC process are shared with our accredited identity verification partner, which processes this data exclusively to confirm your identity and age. This partner is contractually prohibited from using your data for any other purpose.
• Fraud Prevention and Security Services: Aggregated or pseudonymized technical data, gameplay patterns, and device identifiers may be shared with fraud-detection service providers to identify and prevent account abuse, collusion, and money laundering.
• Game Studio Providers: When you play games hosted by third-party studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe — certain anonymized gameplay session data (such as bet amounts and round outcomes) is transmitted to those providers for game settlement and integrity purposes. No directly identifiable personal data is shared with game studios beyond what is technically necessary for game delivery.
• Legal and Regulatory Disclosure: olx388 may disclose personal data to law enforcement, regulatory authorities, or legal counsel if required to do so by a valid legal process, court order, or to protect against fraud, illegal activity, or threats to the safety of any person.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of olx388's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the continued applicability of this Privacy Policy.

All third-party service providers engaged by olx388 are bound by data processing agreements that require them to handle your personal data in a manner consistent with this Privacy Policy and to implement appropriate technical and organizational security measures.

6 Cookies & Tracking Technologies

olx388 uses cookies and similar tracking technologies to operate the platform effectively and securely. The following categories of cookies are in use:

olx388 does not use third-party behavioral advertising cookies or retargeting pixels. You can manage or delete cookies through your browser settings at any time. Please be aware that disabling essential cookies will impair your ability to log in and use core platform features.

7 Data Security

olx388 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit using Transport Layer Security (TLS 1.2 or higher). You can verify our certificate by checking the padlock icon in your browser's address bar.
• Encrypted Data Storage: Sensitive fields — including passwords, payment identifiers, and identity document references — are stored in encrypted form at rest. Passwords are hashed using a secure one-way algorithm and are never stored in plain text.
• Access Controls: Access to systems containing personal data is restricted to authorized olx388 personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Intrusion Detection: Our infrastructure is continuously monitored for unusual access patterns, unauthorized login attempts, and potential security incidents. Automated alerts are reviewed by our security team around the clock.
• Incident Response: In the event of a data breach that poses a risk to player rights, olx388 will notify affected players and the relevant authorities within the timeframes required by applicable standards, and will take immediate steps to contain and remediate the breach.

8 Data Retention

olx388 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our general retention periods are as follows:

• Active Account Data: Retained for the duration of your account's active status. We periodically review dormant accounts (inactive for more than 12 consecutive months) and may contact you to confirm whether you wish to maintain your account.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of account closure, in accordance with anti-money-laundering compliance standards applicable to internationally licensed gaming operators.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, to support regulatory audit requirements and dispute resolution.
• Gameplay Activity Logs: Retained for 2 years from the date of the relevant session, then anonymized and aggregated for statistical purposes.
• Support Communications: Retained for 3 years from the date of the most recent interaction, to support dispute resolution and quality assurance.
• Marketing Consent Records: Retained for the duration of active consent and for 2 years following withdrawal, as evidence of consent status.

Upon expiry of the applicable retention period, data is either securely deleted from our systems or anonymized such that it can no longer be linked to any individual player.

9 Your Data Rights

As a player, you hold the following rights in relation to your personal data held by olx388. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and provide sufficient information to verify your identity.

• Right of Access: You may request a copy of all personal data olx388 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request that olx388 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. This right is subject to our legal retention obligations — we cannot delete KYC and transaction data that we are required to retain.
• Right to Restrict Processing: In certain circumstances (for example, while a data accuracy dispute is being resolved), you may request that we temporarily restrict the processing of your personal data.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to the processing of your personal data on the basis of legitimate interests. olx388 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

olx388 will respond to all verified data rights requests within 30 calendar days of receipt. If the request is complex or voluminous, we may extend this period by a further 30 days and will notify you of the extension and the reason for it.

10 Minors

The olx388 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC processes, and any account found to have been registered by or on behalf of a person under 21 will be immediately closed and all data associated with that account deleted (subject to any legal retention obligations that may apply).

If you are a parent or guardian and believe that a minor has accessed or registered on the olx388 platform using your or another adult's credentials, please contact us immediately at [email protected]. olx388 takes under-age access seriously and will act on all such notifications promptly.

11 International Data Transfers

olx388 is an internationally operated platform and some of our service providers — including KYC verification partners, fraud-detection providers, and server infrastructure operators — may be located in jurisdictions outside Indonesia. As a result, your personal data may be transferred to and processed in countries other than Indonesia.

Where such transfers occur, olx388 ensures that they are governed by appropriate contractual safeguards, including data processing agreements that impose data-protection standards equivalent to those described in this Privacy Policy. We do not transfer personal data to jurisdictions that lack adequate data-protection frameworks without implementing additional safeguards.

By using the olx388 platform, you acknowledge and consent to the transfer of your personal data to the international locations described above, subject to the protections outlined in this section.

12 Third-Party Links

The olx388 platform may, from time to time, reference or display content from third-party game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe. These providers operate their own privacy practices, which govern the data they collect during gameplay sessions delivered through their software.

olx388 is not responsible for the privacy practices of third-party game studios or any external services. We encourage you to review the privacy policies of any third-party providers whose software you interact with. This Privacy Policy applies solely to data collected directly by olx388 through the olx388.app platform and its associated services.

13 Policy Amendments

olx388 reserves the right to update or amend this Privacy Policy at any time. When we make changes, we will:

• Publish the updated Privacy Policy on this page with a revised "Last Updated" date at the top.
• Where the changes are material — affecting the categories of data we collect, the purposes for which we use it, or the rights available to you — provide advance notice via email to your registered address or through an in-platform notification, where reasonably practicable.
• In the case of significant changes that require fresh consent (for example, a new use of your data based on consent), request your explicit agreement before proceeding with the new processing activity.

Your continued use of the olx388 platform following the publication of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to an amendment, you must cease using the platform and may request account closure in accordance with the Terms & Conditions.

We recommend bookmarking this page and reviewing it periodically, particularly if you use the platform regularly. The most current version of this Privacy Policy always supersedes all prior versions.

14 Contact & Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data olx388 holds about you, please reach out to our support team using the contact details below. All privacy-related communications are handled with the highest level of confidentiality.