Privacy Policy

1. Introduction

ojo77 ("we," "us," or "our") operates an online betting and gaming platform specifically designed for Indonesian players. We recognize that you trust us with your personal information, and we take this responsibility seriously. This Privacy Policy describes our practices concerning the collection, use, disclosure, and protection of personal data in accordance with applicable data protection laws and international best practices.

By creating an account and using ojo77 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any aspect of this Privacy Policy, you must not use our platform.

2. Information We Collect

2.1 Information You Provide Directly

When you register an account with ojo77, we collect the following personal information:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, and residential address including street address, city, postal code, and province.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery.
• Financial Information: Bank account details (account number, account holder name, bank name, branch), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers or account IDs), and payment transaction history.
• Verification Documents: Copies of government-issued identification documents (KTP, passport), proof of address documents (utility bills, bank statements), selfie photographs for identity verification, and proof of payment method ownership.
• Communication Records: Contents of your communications with our customer support team via live chat, email, or other channels, including inquiry details, complaint submissions, and support ticket histories.

2.2 Information Collected Automatically

When you access and use the ojo77 platform, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, device identifiers (advertising ID, device ID), and mobile network information.
• Usage Data: Pages visited, features accessed, time spent on platform, click patterns, game preferences, betting patterns, deposit and withdrawal patterns, login/logout timestamps, and session duration.
• Location Data: IP address, approximate geographic location based on IP address, and timezone settings. We use this data to verify you are accessing our services from within Indonesian territory and to prevent fraud.
• Cookies and Similar Technologies: Session cookies for maintaining logged-in state, preference cookies for storing language and display settings, analytics cookies for understanding user behavior, and security cookies for fraud detection. You can control cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality.

2.3 Information from Third Parties

We may receive limited information from third-party service providers:

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers to verify deposit and withdrawal transactions.
• Identity Verification Services: Results from third-party KYC verification providers used to confirm the authenticity of submitted identification documents and detect fraudulent documentation.
• Game Providers: Game outcome data, session statistics, and RTP performance metrics from casino game studios to ensure fair play and resolve player disputes.

3. How We Use Your Information

ojo77 uses collected personal information for the following purposes:

Purpose	Description
Account Management	Creating and maintaining your user account, authenticating your identity during login, processing account modifications, and handling account closure requests.
Service Provision	Processing bets and wagers, delivering game content, calculating and crediting winnings, managing account balances, and providing access to platform features.
Payment Processing	Processing deposits via bank transfer and e-wallets, executing withdrawal requests, verifying payment method ownership, detecting duplicate transactions, and maintaining financial records.
Compliance & Verification	Verifying your age (21+ requirement), confirming your identity through KYC procedures, preventing underage gambling, detecting money laundering activities, and complying with applicable regulations.
Security & Fraud Prevention	Detecting unauthorized account access, preventing multiple account creation, identifying collusion between players, detecting bonus abuse, and protecting against cyber attacks.
Customer Support	Responding to inquiries, resolving technical issues, handling complaints, providing betting guidance, and maintaining communication history for quality assurance.
Platform Improvement	Analyzing usage patterns to optimize user experience, identifying popular features, detecting technical errors, improving game selection, and enhancing mobile performance.
Responsible Gaming	Monitoring betting behavior for problem gambling indicators, enforcing deposit and loss limits, implementing self-exclusion requests, and providing access to support resources.
Marketing Communications	Sending promotional offers, bonus notifications, game launch announcements, and platform updates via email or SMS (only with your explicit consent, which you may withdraw at any time).

4. Legal Bases for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to provide betting and gaming services as outlined in our Terms and Conditions.
• Legal Obligation: Processing is required to comply with applicable laws, including age verification requirements, anti-money laundering regulations, and financial record-keeping obligations.
• Legitimate Interests: Processing serves our legitimate business interests in preventing fraud, maintaining platform security, improving services, and ensuring fair play, provided these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and certain data collection activities, we process data based on your explicit consent, which you may withdraw at any time through your account settings or by contacting customer support.

5. Data Sharing and Disclosure

ojo77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your data with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) for processing financial transactions.
• Identity Verification Providers: KYC verification services for authenticating submitted identification documents and detecting fraud.
• Cloud Hosting Providers: Secure data centers for storing encrypted user data and platform infrastructure.
• Customer Support Tools: Live chat and ticketing system providers for managing customer inquiries and support communications.
• Analytics Services: Anonymous usage analytics platforms for understanding user behavior and improving platform performance.

All service providers are contractually bound to use your personal data only for the specific purposes we authorize and to implement appropriate security measures to protect your information.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or other governmental authorities when required by law or when we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, or regulatory requests
• Investigate suspected illegal activities, fraud, or violations of our Terms and Conditions
• Protect the rights, property, or safety of ojo77, our users, or the public
• Respond to claims that content violates the rights of third parties

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our platform of any such change in ownership or control of your personal information.

6. Data Security Measures

ojo77 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

Despite our security measures, no system is completely impenetrable. If you believe your account security has been compromised, you must notify us immediately at [email protected] and change your password. We are not liable for losses resulting from unauthorized access that occurs due to your failure to maintain the confidentiality of your login credentials.

7. Data Retention

ojo77 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations:

• Active Accounts: Personal data is retained for the duration of your active account plus a retention period necessary for legal compliance and dispute resolution.
• Closed Accounts: Following account closure, we retain identity verification records, financial transaction records, and betting history for a minimum of seven years to comply with anti-money laundering regulations and financial record-keeping requirements.
• Marketing Data: If you opt out of marketing communications, we retain minimal information (email address, opt-out preference) indefinitely to ensure we do not contact you again.
• Security Logs: Access logs, login records, and security event logs are retained for up to two years for fraud investigation and security analysis purposes.

After the applicable retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you.

8. Your Privacy Rights

You have the following rights concerning your personal data held by ojo77:

• Right to Access: You may request a copy of the personal data we hold about you, including information about how we collect, use, and share your data.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings.
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain records for compliance purposes (such as financial transaction records).
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances, such as while we investigate a data accuracy dispute.
• Right to Data Portability: You may request a machine-readable copy of personal data you provided to us, which you can transfer to another service provider.
• Right to Object: You may object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests. We will cease such processing unless we demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time through your account settings or by contacting us.

To exercise any of these rights, please contact us at [email protected] with your account details and specific request. We will respond within 30 days of receiving a valid request. In some cases, we may require additional information to verify your identity before processing your request.

9. International Data Transfers

Your personal data is primarily stored on servers located in secure data centers that comply with international data protection standards. If we transfer your data outside Indonesia, we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information in accordance with applicable data protection laws.

10. Children's Privacy

ojo77 services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such information and close the associated account. If you believe a minor has created an account on our platform, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational factors. When we make material changes, we will notify you by email (to the address specified in your account) and/or through a prominent notice on our platform at least 30 days before the changes take effect. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of ojo77 services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us through the following channels:

• Email: [email protected] (24/7 monitoring, response within 2-4 hours for privacy-related inquiries)
• Live Chat: Available 24/7 through the platform interface for immediate assistance
• Data Protection Officer: For formal privacy complaints or data subject rights requests, you may request to speak with our Data Protection Officer through any of the above contact channels

We take all privacy inquiries seriously and will investigate and respond to all legitimate concerns in a timely manner.