Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by olxtoo ("we", "us", "our") in connection with your use of our online betting platform accessible at olxtoo.cam and all related services including sports betting, live casino games, slot machines, and other gaming products. This policy applies to all users regardless of their level of engagement with our platform, whether you are a registered player actively placing bets, a casual visitor browsing our website, or someone who has previously held an account with olxtoo.

By accessing the olxtoo website, creating an account, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with our privacy practices, you must immediately discontinue use of our platform and refrain from providing any personal information. For residents of Indonesia and other jurisdictions with specific data protection laws, this policy is designed to comply with applicable legal requirements including the Indonesian Electronic Information and Transactions Law (UU ITE) and international privacy frameworks.

olxtoo operates as a data controller with respect to personal information collected through our platform. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable privacy laws. Where we engage third-party service providers such as payment processors, game providers, or customer support vendors, they act as data processors under our instruction and are contractually bound to protect your information.

2. Information We Collect

olxtoo collects several categories of personal information necessary to provide our gaming services, comply with legal obligations, and enhance user experience. The types of data we collect include:

2.1 Information You Provide Directly

• Account Registration Data: When you create an olxtoo account, we collect your full legal name, date of birth, email address, mobile phone number, residential address, and chosen username and password. This information is mandatory to establish your player account and verify your eligibility to use our services.
• Identity Verification Documents: To comply with Know Your Customer (KYC) and anti-money laundering regulations, we collect copies of government-issued identification documents such as your Indonesian national identity card (KTP), proof of address documents (utility bills, bank statements), and selfie photographs for identity confirmation. These documents are processed solely for verification purposes and stored securely.
• Payment Information: We collect details about your payment methods including bank account numbers, e-wallet account identifiers (OVO, DANA, GoPay account information), and credit card details (card number, expiry date, CVV code). For security reasons, sensitive payment data such as full credit card numbers are tokenized and not stored directly on our servers.
• Communication Records: When you contact our customer support team via email, live chat, or phone, we retain records of your communications including your inquiries, complaints, feedback, and our responses. This helps us improve service quality and resolve disputes effectively.
• Marketing Preferences: We collect information about your communication preferences, including whether you wish to receive promotional emails, SMS notifications, or push notifications about bonuses, new games, and special offers.

2.2 Information Collected Automatically

• Gaming Activity Data: We automatically record detailed information about your gaming activities including bets placed, games played, stakes wagered, winnings and losses, session duration, favorite games, betting patterns, and transaction history. This data is essential for account management, fraud prevention, and responsible gaming monitoring.
• Technical and Device Information: When you access olxtoo, our servers automatically collect technical data including your IP address, browser type and version, device type and model, operating system, screen resolution, preferred language settings, referring website, and pages visited on our platform. This information helps us optimize platform performance and detect security threats.
• Cookies and Tracking Technologies: olxtoo uses cookies, web beacons, and similar technologies to track user behavior, remember login credentials, personalize content, and analyze website traffic. Cookies are small text files stored on your device that help us recognize you on return visits. You can manage cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality.
• Geolocation Data: To ensure compliance with geographic restrictions and licensing requirements, we collect approximate location data based on your IP address. We do not use GPS tracking or collect precise geolocation unless you explicitly grant permission through your device settings.

2.3 Information from Third Parties

In certain circumstances, we may receive personal information about you from third-party sources including payment service providers who confirm transaction details, identity verification services that validate your documents against government databases, fraud prevention agencies that flag suspicious activities, and marketing partners through whom you may have discovered olxtoo. We only accept third-party data from reputable sources operating in compliance with data protection laws.

3. How We Use Your Information

olxtoo processes your personal data for the following legitimate purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your player account with secure authentication
• Processing deposits, withdrawals, and financial transactions
• Enabling you to place bets and play games on our platform
• Recording gaming activity and maintaining accurate transaction records
• Providing customer support and responding to inquiries
• Resolving technical issues and troubleshooting problems
• Personalizing your gaming experience based on preferences and activity

3.2 Legal and Regulatory Compliance

• Verifying your identity and age to prevent underage gambling
• Conducting Know Your Customer (KYC) and anti-money laundering (AML) checks
• Detecting and preventing fraud, money laundering, and other illegal activities
• Complying with gaming license conditions and regulatory reporting obligations
• Maintaining records required by law enforcement and government authorities
• Responding to legal requests, court orders, and regulatory inquiries

3.3 Security and Fraud Prevention

• Monitoring for suspicious betting patterns, collusion, or bonus abuse
• Detecting unauthorized account access and protecting against hacking attempts
• Preventing payment fraud and chargeback abuse
• Identifying and blocking duplicate accounts
• Implementing security measures to protect platform integrity

3.4 Responsible Gaming and Player Protection

• Monitoring gaming behavior for signs of problem gambling
• Enforcing deposit limits, loss limits, and session time limits
• Processing self-exclusion requests and preventing excluded players from accessing accounts
• Providing access to responsible gaming tools and resources
• Intervening when player behavior indicates potential gambling addiction

3.5 Marketing and Communications

• Sending promotional emails about bonuses, new games, and special offers (with your consent)
• Delivering personalized marketing content based on your preferences and activity
• Conducting market research and customer satisfaction surveys
• Sending important account notifications and service announcements
• You may opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your account preferences

3.6 Analytics and Platform Improvement

• Analyzing website traffic and user behavior to optimize platform performance
• Conducting A/B testing to improve user interface and experience
• Identifying popular games and betting markets to guide content decisions
• Evaluating marketing campaign effectiveness
• Developing new features and services based on user feedback and usage patterns

4. Data Sharing and Disclosure

olxtoo does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality agreements:

4.1 Service Providers and Business Partners

• Payment Processors: Banks, e-wallet providers, and payment gateway operators who facilitate deposits and withdrawals require access to your payment information to process transactions securely.
• Game Providers: Software vendors such as Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt receive limited data necessary to deliver game content and track gaming sessions.
• Identity Verification Services: Third-party KYC providers verify your identity documents against government databases and fraud prevention databases to ensure account legitimacy.
• Customer Support Vendors: Live chat providers and email support platforms may process communication records to deliver customer service on our behalf.
• Marketing and Analytics Partners: We share anonymized or aggregated data with analytics platforms like Google Analytics to understand user behavior without revealing individual identities.

4.2 Legal and Regulatory Authorities

We may disclose personal information to government agencies, law enforcement, regulatory bodies, and courts when required by law or when we believe in good faith that disclosure is necessary to comply with legal obligations, protect our rights and property, investigate fraud, respond to government requests, or protect the safety of our users and the public.

4.3 Corporate Transactions

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. You will be notified via email and prominent website notice of any change in ownership or control of your data.

5. Data Security Measures

olxtoo implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security protocols include:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS protocols. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Personal data is accessible only to authorized olxtoo employees and contractors who require access to perform their job functions. Access is granted on a need-to-know basis with multi-factor authentication requirements.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular security audits to identify and remediate vulnerabilities.
• Secure Data Centers: Personal information is stored on secure servers located in facilities with physical security controls including 24/7 monitoring, biometric access systems, and environmental protections.
• Regular Security Testing: We conduct periodic penetration testing, vulnerability assessments, and security audits to evaluate and strengthen our defenses against emerging threats.
• Employee Training: All olxtoo staff undergo mandatory data protection and security awareness training to ensure proper handling of personal information.

Despite our robust security measures, no internet transmission or electronic storage system is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You also have a responsibility to protect your account by using strong passwords, not sharing login credentials, and logging out after each session on shared devices.

6. Data Retention

olxtoo retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, accounting, and reporting obligations. Specific retention periods vary by data type:

• Account and Transaction Data: Retained for a minimum of 7 years after account closure to comply with anti-money laundering regulations and financial record-keeping requirements.
• Identity Verification Documents: Retained for 7 years after account closure or as required by Indonesian law and international AML standards.
• Gaming Activity Records: Retained for 7 years to support dispute resolution, regulatory audits, and responsible gaming monitoring.
• Marketing Communications: Retained until you withdraw consent or request deletion, unless longer retention is required for legal compliance.
• Customer Support Records: Retained for 3 years to facilitate service improvement and dispute resolution.
• Cookie and Technical Data: Retained for the duration specified in our cookie settings, typically 30 days to 2 years depending on cookie type.

After the applicable retention period expires, we securely delete or anonymize your personal information so that it cannot be associated with you individually. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

7. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. Indonesian residents and users in jurisdictions with comprehensive data protection laws may exercise the following rights:

• Right to Access: Request a copy of the personal data we hold about you, including account information, transaction history, and communication records.
• Right to Rectification: Request correction of inaccurate or incomplete personal information in your account profile.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements and legitimate business needs.
• Right to Restriction: Request temporary restriction of processing in certain circumstances, such as while we verify the accuracy of disputed data.
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: Object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your account details and a description of your request. We will respond within 30 days and may require identity verification to prevent unauthorized access to personal information. Please note that certain rights may be subject to legal limitations and exemptions.

8. Children's Privacy

olxtoo services are strictly intended for adults aged 21 years and older in accordance with Indonesian gambling age restrictions. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete such information and terminate the associated account. Parents and guardians who believe their child has provided personal information to olxtoo should contact us immediately at [email protected].

9. International Data Transfers

olxtoo operates internationally and may transfer your personal information to countries outside Indonesia for processing and storage. Some of these jurisdictions may not have data protection laws equivalent to those in Indonesia. When we transfer data internationally, we implement appropriate safeguards including standard contractual clauses, adequacy decisions, and binding corporate rules to ensure your data receives adequate protection regardless of location. By using our services, you consent to the international transfer of your personal information as described in this policy.

10. Changes to This Privacy Policy

olxtoo reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated via email to your registered address and prominently displayed on our website at least 30 days before taking effect. Your continued use of olxtoo services following notification of changes constitutes acceptance of the revised Privacy Policy. We recommend reviewing this policy periodically to stay informed about how we protect your information.

11. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Team:

Email: [email protected]
Data Protection Officer: [email protected]
Subject Line: Privacy Inquiry - Your Name and Account ID

We aim to respond to all privacy-related inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Indonesian data protection authority or the supervisory authority in your jurisdiction.