Privacy Policy — How olb88 Protects Your Data

olb88 ("we", "us", "our") is the data controller responsible for the personal information collected through the olb88 platform. As data controller, we determine the purposes and means of processing your personal data and are accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all privacy-related enquiries, requests to exercise your data rights, or concerns regarding this policy, you may contact our dedicated privacy team through the channels listed in Section 12 of this document. We aim to acknowledge all privacy-related communications within 48 hours of receipt.

olb88 collects personal data across several categories, depending on how you interact with our platform. The table below summarises what we collect and the primary reason for collection:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless it is voluntarily provided in the context of a responsible gaming self-exclusion or limit-setting request, in which case it is handled with additional safeguards.

olb88 processes your personal data for the following defined purposes:

• Account management: Creating and maintaining your olb88 account, authenticating your identity on login, processing password resets, and communicating account-related notifications such as deposit confirmations and withdrawal approvals.
• KYC and age verification: Confirming that you are at least 21 years of age and a genuine individual before releasing withdrawal funds, in compliance with our responsible gaming commitments and anti-fraud controls.
• Payment processing: Executing deposits and withdrawals through your selected payment channel — whether via local Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, or Bank Permata, or via e-wallets including OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Platform operation and improvement: Analysing gameplay data, identifying technical issues, improving user interface design, and optimising game recommendations based on aggregated activity patterns.
• Fraud prevention and security: Detecting duplicate accounts, identifying suspicious betting patterns, preventing money laundering, and protecting the integrity of all games available on the platform.
• Marketing communications: Sending promotional offers, bonus announcements, and platform updates via email or SMS to Members who have opted in to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: Retaining records as required by applicable law and responding to valid requests from competent authorities.
• Responsible gaming: Monitoring account activity for signs of problem gambling and facilitating self-exclusion, deposit limit, and time-out requests made by Members.

Each category of data processing carried out by olb88 rests on one or more of the following legal grounds:

• Contract performance: Processing that is necessary to operate your account, process payments, and deliver the gaming services you have contracted us to provide falls under this basis. Without this processing, we cannot deliver our services to you.
• Legal obligation: Certain processing activities — including KYC identity verification, retention of transaction records, and cooperation with lawful authority requests — are required by applicable law and cannot be waived by Member preference.
• Legitimate interests: Fraud detection, platform security, abuse prevention, and service improvement activities are carried out on the basis of olb88's legitimate interest in operating a safe, fair, and commercially sustainable platform. We have assessed that these interests do not override Members' fundamental privacy rights.
• Consent: Marketing communications by email or SMS are sent only to Members who have provided explicit opt-in consent. This consent can be withdrawn at any time without affecting the Member's ability to use the platform.

olb88 does not sell, rent, or trade your personal data. We may share your data only in the following limited and defined circumstances:

• Payment processors: When you make a deposit or request a withdrawal, your financial details are shared with the relevant payment provider (e.g., your Indonesian bank's API gateway or your e-wallet operator) solely to complete that transaction. These providers operate under their own privacy policies and applicable financial regulations.
• KYC verification providers: Identity documents submitted for age and identity verification are shared with our contracted third-party KYC service provider. This provider is bound by strict data processing agreements and is prohibited from using your data for any purpose other than verification.
• Game content providers: Game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymised or pseudonymised session data necessary to deliver and maintain their game environments. These studios do not receive your name, contact information, or payment details.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, analytics, and customer support platform providers that process data on our behalf under binding data processing agreements.
• Law enforcement and regulatory bodies: Where we are required by law, court order, or other legal process to disclose personal data to competent authorities, we will do so. Where permitted, we will notify the affected Member before disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of olb88's business assets, Member personal data may be transferred to the acquiring entity. Members will be notified of any such transfer and of any material change in data processing practices that results from it.

olb88 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data (identity, contact, financial, and transaction data) is retained for the full duration of your membership and for a minimum of five (5) years following account closure, in accordance with standard financial record-keeping requirements.
• KYC documentation (identity documents, proof of payment method) is retained for a minimum of five (5) years following account closure to support any retrospective fraud investigations or regulatory audits.
• Customer support records (chat transcripts, email correspondence) are retained for three (3) years from the date of the interaction to facilitate resolution of any follow-up disputes.
• Technical and log data (IP addresses, device identifiers, session logs) is retained for twelve (12) months and then deleted or anonymised.
• Marketing preference data is retained until you withdraw your consent, at which point it is deleted within thirty (30) days.

Once the applicable retention period has elapsed, data is securely deleted or irreversibly anonymised such that it can no longer be associated with any individual Member.

olb88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport encryption: All data transmitted between your device and olb88 servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• At-rest encryption: Sensitive data fields — including payment credentials, identity document references, and password hashes — are encrypted in our databases using industry-standard algorithms.
• Access controls: Internal access to Member personal data is granted on a strict need-to-know basis. Staff with data access undergo background screening and receive regular data-handling training.
• Two-factor authentication: Administrative access to olb88 internal systems requires multi-factor authentication. Members are also encouraged to enable additional verification for their own accounts.
• Penetration testing: olb88 commissions regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to Members, olb88 will notify affected individuals promptly and take all reasonable steps to contain the breach, assess its impact, and prevent recurrence.

While we maintain robust security controls, no internet-based platform can guarantee absolute security. Members are advised to use strong, unique passwords for their olb88 accounts and to avoid accessing the platform over unsecured public Wi-Fi networks.

olb88 uses cookies and similar tracking technologies to deliver and improve our platform experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: These are essential for core platform functionality, including maintaining your login session, remembering your language and currency preferences, and securing your account against cross-site request forgery attacks. These cookies cannot be disabled without impairing basic platform functionality.
• Performance and analytics cookies: These collect anonymised data about how Members navigate the platform — which game categories attract the most traffic, where Members exit the registration flow, and how page load times can be improved. This information helps us continuously refine the olb88 experience.
• Functional cookies: These remember your personalisation choices, such as preferred deposit method, game lobby filter settings, and recent search terms in the sportsbook, so you do not need to re-enter them on each visit.
• Marketing cookies: If you have opted in to marketing communications, these cookies help us deliver promotions that are relevant to your gameplay preferences and betting history. Marketing cookies are only placed with your consent.

As an olb88 Member, you hold a number of rights in relation to your personal data. We are committed to facilitating the exercise of these rights promptly and without unnecessary complexity. Your rights include:

The olb88 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under 21. Our registration process requires users to confirm their date of birth, and our KYC verification process is designed to detect and reject applications from minors.

If olb88 becomes aware that personal data belonging to an individual under the age of 21 has been collected, we will take immediate steps to close the relevant account, void any associated wagers or balances, return any deposits made via the original payment method, and permanently delete all personal data associated with that account.

olb88 reserves the right to update or amend this Privacy Policy at any time. All changes will be published on this page, and the "Last Updated" date at the top of the document will be revised accordingly. Where changes are material — meaning they significantly affect how we collect, use, or share personal data — we will notify active Members via email or via a prominent notice on the platform prior to the changes taking effect.

Your continued use of the olb88 platform following publication of any amended Privacy Policy constitutes your acknowledgement of the updated terms. We recommend that you review this page periodically to stay informed of how your data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data olb88 holds about you, please reach out through any of the following channels:

• Live Chat: Available 24/7 from any page on the olb88 platform. This is the fastest route to our support and privacy team, staffed by Indonesian-speaking agents around the clock.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line, along with your registered username and a clear description of your request or concern.

We are committed to resolving all privacy-related concerns in a timely, transparent, and fair manner. If you are not satisfied with our response, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.