Privacy Policy

1. Introduction and Scope

Welcome to the okto88 Privacy Policy. This document governs the collection, processing, storage, and disclosure of personal information that you provide to okto88 ("we", "us", "our", "the Company") when you access our website, mobile applications, or use any of our gaming services (collectively, "the Platform").

okto88 is committed to protecting the privacy and security of all users, particularly our Indonesian player base. We process personal data in compliance with international data protection regulations, including principles aligned with the General Data Protection Regulation (GDPR) and other applicable privacy frameworks.

By registering an account on okto88, depositing funds, placing bets, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein.

2. Information We Collect

okto88 collects various types of personal information to provide, maintain, and improve our services. The categories of data we collect include:

2.1 Account Registration Information

When you create an okto88 account, we collect:

• Personal Identifiers: Full name, date of birth, gender, nationality, and residential address
• Contact Information: Email address, mobile phone number
• Account Credentials: Username, password (stored in encrypted form), and security questions
• Preferred Language and Currency: Indonesian Rupiah (IDR) is the default currency for all Indonesian users

2.2 Identity Verification (KYC) Documents

To comply with international anti-money laundering (AML) and Know Your Customer (KYC) regulations, we collect:

• Government-issued photo identification (Indonesian KTP, passport, or driver's license)
• Proof of address (utility bills, bank statements, or government correspondence)
• Proof of payment method ownership (bank statements or e-wallet screenshots)
• Selfie photographs for facial verification (where required)

2.3 Financial and Transaction Data

We collect information related to your financial activities on the Platform, including:

• Deposit and withdrawal transaction records
• Bank account details or e-wallet information (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Payment method verification details
• Transaction amounts, dates, and times in Indonesian Rupiah (IDR)
• Bonus claims, wagering history, and promotional activity

2.4 Gaming and Betting Activity

To provide gaming services and ensure fair play, we collect:

• Betting history across all game categories (sports betting, casino games, slots, togel lottery)
• Game selections, bet amounts, odds, and outcomes
• Win/loss records and account balance changes
• Session duration and gameplay patterns
• Responsible gaming settings (deposit limits, self-exclusion preferences)

2.5 Technical and Device Information

When you access okto88, we automatically collect:

• Device Information: Device type, operating system, browser type and version, screen resolution
• Network Data: IP address, Internet Service Provider (ISP), connection type
• Location Data: Approximate geographic location based on IP address (city and country level)
• Cookies and Tracking Technologies: Session cookies, preference cookies, analytics cookies (see Section 8)
• Usage Data: Pages visited, features used, click patterns, time spent on pages, referral sources

2.6 Communications and Support Interactions

When you contact okto88 customer support, we collect:

• Contents of your messages, emails, live chat transcripts, and WhatsApp conversations
• Attachments, screenshots, or documents you provide
• Support ticket history and resolution records

3. How We Use Your Information

okto88 processes your personal data for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your okto88 account
• Processing deposits and withdrawals via Indonesian banks and e-wallets
• Enabling you to place bets on sports, casino games, slots, and togel draws
• Calculating winnings, adjusting balances, and issuing payouts
• Managing bonus allocations and tracking wagering requirements

3.2 Identity Verification and Fraud Prevention

• Verifying your identity and age (21+ requirement for Indonesian users)
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Detecting and preventing fraudulent activity, multiple accounts, and collusion
• Monitoring suspicious betting patterns or payment irregularities
• Protecting against unauthorized account access and identity theft

3.3 Legal and Regulatory Compliance

• Complying with international gaming licenses and regulatory reporting obligations
• Responding to legal requests, court orders, or government investigations
• Maintaining records as required by applicable laws and regulations
• Enforcing our Terms & Conditions and other policies

3.4 Customer Support and Communication

• Responding to your inquiries via live chat, email, or WhatsApp (24/7 Indonesian-speaking support)
• Sending transactional notifications (deposit confirmations, withdrawal updates, bonus credits)
• Providing account statements and gaming history upon request
• Resolving disputes and handling complaints

3.5 Marketing and Promotions (With Consent)

• Sending promotional emails about new games, bonuses, and special offers
• Delivering personalized marketing based on your gaming preferences
• Informing you about loyalty program benefits and VIP tier upgrades
• Conducting surveys and gathering feedback to improve services

Opt-Out: You may unsubscribe from marketing communications at any time via the link in our emails or by adjusting your account preferences.

3.6 Platform Improvement and Analytics

• Analyzing user behavior to optimize website and mobile app performance
• Identifying popular games and features to inform product development
• Conducting A/B testing to improve user experience
• Generating aggregated, anonymized statistics for business intelligence

3.7 Responsible Gaming and Player Protection

• Implementing deposit limits, loss limits, and session reminders you have set
• Enforcing self-exclusion periods and cooling-off requests
• Monitoring for signs of problematic gambling behavior
• Providing resources and referrals to gambling support organizations

4. Legal Basis for Processing (GDPR Principles)

okto88 processes personal data based on the following legal grounds:

5. How We Share Your Information

okto88 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to support our operations, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals
• Identity Verification Services: KYC and AML compliance providers that verify documents and screen against watchlists
• Game Providers: Slot studios, live dealer platforms, and sports data providers (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming)
• Cloud Hosting and Data Storage: Secure server infrastructure providers
• Customer Support Tools: Live chat platforms and ticketing systems
• Marketing and Analytics Platforms: Email service providers and analytics tools (anonymized data)

All third-party processors are contractually bound to protect your data and may only use it for the specific purposes we authorize.

5.2 Legal and Regulatory Authorities

We may disclose personal information to government agencies, law enforcement, regulators, or courts when:

• Required by law, regulation, or legal process (subpoena, court order)
• Necessary to prevent fraud, illegal activity, or threats to public safety
• Requested by our licensing authority for compliance audits or investigations

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized data (which cannot identify you personally) with business partners, investors, or the public for industry analysis, research, or reporting purposes.

6. Data Security Measures

okto88 implements industry-leading security practices to protect your personal information:

• 256-Bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology
• Encrypted Password Storage: Passwords are hashed using bcrypt or similar cryptographic algorithms and are never stored in plain text
• Secure Data Centers: Personal data is stored on servers located in secure, access-controlled facilities with 24/7 monitoring
• Multi-Factor Authentication (MFA): Optional two-factor authentication (2FA) via SMS or authenticator app for enhanced account security
• Regular Security Audits: Penetration testing and vulnerability assessments conducted by independent security firms
• Access Controls: Strict internal policies limiting employee access to personal data on a need-to-know basis
• Firewall and Intrusion Detection: Advanced network security systems to prevent unauthorized access

7. International Data Transfers

okto88 operates internationally and may transfer, store, or process your personal data in jurisdictions outside Indonesia. When we transfer data across borders, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by data protection authorities
• Transfers to countries with adequate data protection laws recognized by international standards
• Binding corporate rules and privacy frameworks

Your data remains protected by this Privacy Policy and applicable data protection laws regardless of where it is processed.

8. Cookies and Tracking Technologies

okto88 uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content. Types of cookies we use include:

• Essential Cookies: Required for basic site functionality (login sessions, security features). These cannot be disabled.
• Preference Cookies: Remember your language, currency, and display settings.
• Analytics Cookies: Collect anonymized data on page views, user journeys, and feature usage (e.g., Google Analytics).
• Marketing Cookies: Track conversions and deliver personalized promotions (used only with your consent).

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit site functionality.

9. Data Retention

okto88 retains personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Retention periods vary based on data type:

• Account Data: Retained for the duration of your active account plus 5 years after closure (to comply with financial regulations)
• Transaction Records: Retained for 7 years (standard financial record-keeping requirement)
• KYC Documents: Retained for 5 years after account closure or as required by AML regulations
• Marketing Communications: Retained until you opt out or withdraw consent
• Support Tickets: Retained for 3 years for quality assurance and dispute resolution

After the retention period expires, personal data is securely deleted or anonymized.

10. Your Privacy Rights

Under international data protection principles, you have the following rights regarding your personal data:

10.1 Right of Access

You may request a copy of the personal data we hold about you, including account details, transaction history, and KYC documents.

10.2 Right to Rectification

You may update or correct inaccurate personal information through your account settings or by contacting support.

10.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (for processing based on consent)
• You object to processing and no overriding legitimate grounds exist

Note: We may be legally required to retain certain data (e.g., transaction records for AML compliance) even after you request deletion.

10.4 Right to Restrict Processing

You may request that we limit how we use your personal data in specific situations, such as while we verify data accuracy or resolve a complaint.

10.5 Right to Data Portability

You may request a copy of your data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) to transfer to another service provider.

10.6 Right to Object

You may object to processing based on legitimate interests (e.g., direct marketing). We will cease processing unless we have compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

10.8 How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection team at [email protected] or through live chat. We will respond within 30 days and may request identity verification to prevent unauthorized access.

11. Children's Privacy

okto88 services are strictly intended for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21. If we discover that a minor has created an account, we will immediately close the account and delete all associated personal data.

Parents or guardians who believe their child has provided personal information to okto88 should contact us immediately at [email protected].

12. Third-Party Links and Services

The okto88 platform may contain links to third-party websites, payment processors, or game providers. This Privacy Policy applies only to okto88. We are not responsible for the privacy practices of external sites. We encourage you to review the privacy policies of any third-party services you access through our Platform.

13. Changes to This Privacy Policy

okto88 reserves the right to update this Privacy Policy to reflect changes in our practices, legal requirements, or business operations. We will notify users of material changes by:

• Posting a prominent notice on the website homepage
• Sending an email notification to registered users
• Updating the "Last Updated" date at the top of this Policy

Your continued use of okto88 after changes are posted constitutes acceptance of the revised Privacy Policy. We recommend reviewing this Policy periodically.

14. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on the okto88 website
• WhatsApp Support: Contact through our website's support section

Our Indonesian-speaking customer support and data protection team are available around the clock to assist with privacy inquiries, data access requests, or concerns about how your information is being used.