Privacy Policy

1. Introduction and Scope

oja98 is committed to protecting the privacy and security of our users' personal information. This Privacy Policy applies to all data collected through our website (oja98.cam), mobile applications, and any other digital channels through which you interact with oja98 services. We recognize that you trust us with your personal information, and we take that responsibility seriously. This policy outlines our practices regarding data collection, processing, storage, and your rights as a user.

oja98 operates in compliance with applicable Indonesian data protection laws and adheres to internationally recognized privacy standards including the General Data Protection Regulation (GDPR) principles. As an online betting and casino platform serving Indonesian users, we handle sensitive personal and financial information, and we maintain rigorous security measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

2. Information We Collect

2.1 Personal Identification Information

When you register an account with oja98, we collect personal identification information necessary to verify your identity, comply with legal obligations, and provide our services. This information includes:

• Full legal name as it appears on your Indonesian identification document
• Date of birth (to verify you are at least 21 years of age)
• Indonesian national identity number (NIK from KTP)
• Residential address including city, province, and postal code
• Email address and mobile phone number
• Government-issued identification documents (scanned copies of KTP or equivalent)
• Selfie photograph for identity verification purposes

2.2 Financial Information

To process deposits, withdrawals, and transactions, oja98 collects financial information including:

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, and other Indonesian banks
• E-wallet account information for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history including deposits, withdrawals, bets placed, and winnings
• Payment method verification documents (bank statements or e-wallet screenshots)

Note: oja98 does not store credit card information or sensitive payment credentials. Payment processing is handled by licensed third-party payment processors who maintain their own security standards.

2.3 Technical and Usage Data

When you access oja98 services, we automatically collect technical information to improve platform performance, detect fraud, and enhance user experience:

• IP address and approximate geographic location
• Device information (device type, operating system, browser version)
• Login timestamps and session duration
• Pages visited, features used, and navigation patterns
• Betting patterns, game preferences, and win/loss statistics
• Cookies and similar tracking technologies (see Section 8 for details)

2.4 Communication Records

We retain records of all communications between you and oja98 customer support, including live chat transcripts, email correspondence, WhatsApp messages, and phone call recordings (where permitted by law). These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Information

oja98 uses your personal information for the following legitimate purposes:

4. Data Sharing and Disclosure

oja98 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including payment processing (bank transfers and e-wallet transactions), identity verification, fraud detection, customer support systems, and data analytics. These providers have access only to the information necessary to perform their specific functions and are contractually obligated to maintain confidentiality and security.

4.2 Legal and Regulatory Requirements

We may disclose your personal information when required by Indonesian law, court order, or government regulation, including but not limited to anti-money laundering (AML) reporting obligations, tax compliance, and law enforcement investigations. We will notify you of such disclosures unless legally prohibited from doing so.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the successor entity. You will be notified via email and prominent website notice of any such change in ownership or control of your personal data.

4.4 With Your Consent

We may share your information with third parties when you provide explicit consent, such as when participating in co-branded promotions or linking your oja98 account to external services.

5. Data Security Measures

oja98 implements industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols, the same standard used by major financial institutions
• Secure Storage: Personal data is stored on secure servers with restricted access, regular security audits, and intrusion detection systems
• Access Controls: Employee access to personal data is limited to those with legitimate business need and is logged for audit purposes
• Password Protection: User passwords are hashed using strong cryptographic algorithms and are never stored in plain text
• Two-Factor Authentication: Optional 2FA is available to add an extra layer of account security
• Regular Security Testing: We conduct regular penetration testing and vulnerability assessments to identify and address potential security weaknesses
• Incident Response: We maintain a security incident response plan to quickly address any data breaches or security events

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute security of data transmitted over the internet. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect any unauthorized access to your account.

6. Data Retention

oja98 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of your active account plus seven years after account closure for regulatory compliance and dispute resolution purposes
• Transaction Records: Financial transaction data is retained for a minimum of seven years to comply with Indonesian tax and anti-money laundering regulations
• Identity Verification Documents: KYC documents are retained for seven years after account closure or as required by applicable law
• Communication Records: Customer support communications are retained for three years for quality assurance and dispute resolution
• Marketing Data: Marketing preferences and communication history are retained until you withdraw consent or request deletion

After the retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices.

7. Your Privacy Rights

Under Indonesian data protection laws and GDPR principles, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days
• Right to Rectification: You can update or correct inaccurate personal information through your account settings or by contacting customer support
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements. Note that account closure may be necessary to fully exercise this right
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of your data
• Right to Data Portability: You may request transfer of your data to another service provider in a machine-readable format where technically feasible
• Right to Object: You can object to processing of your data for direct marketing purposes at any time by using the unsubscribe link in emails or contacting support
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request. We will respond within 30 days and may require verification of your identity before fulfilling your request.

8. Cookies and Tracking Technologies

oja98 uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize your browser and remember certain information.

We use the following types of cookies:

• Essential Cookies: Required for platform functionality, including login authentication and session management. These cannot be disabled
• Performance Cookies: Collect anonymous usage data to help us understand how users interact with oja98 and identify areas for improvement
• Functional Cookies: Remember your preferences (language, currency, game favorites) to personalize your experience
• Marketing Cookies: Track your browsing activity to deliver relevant promotional offers and measure marketing campaign effectiveness (requires consent)

You can control cookie settings through your browser preferences. Note that disabling certain cookies may limit platform functionality. For more information on managing cookies, please refer to your browser's help documentation.

9. Children's Privacy

oja98 services are strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that a user is under 21 years of age, we will immediately terminate their account and delete all associated personal information. Parents or guardians who believe their child has provided personal information to oja98 should contact us immediately at [email protected].

10. International Data Transfers

While oja98 primarily serves Indonesian users and stores data within Indonesia, some of our service providers may be located outside Indonesia. When we transfer personal data internationally, we ensure appropriate safeguards are in place through standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms to protect your data in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

oja98 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via email to your registered address and through prominent notice on our website at least 30 days before the changes take effect. Your continued use of oja98 services after changes become effective constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Privacy Policy Inquiry
• Live Chat: Available 24/7 through your account dashboard
• WhatsApp: +62 812 3456 7890

We will respond to all privacy-related inquiries within 30 days. For urgent matters involving suspected data breaches or unauthorized access, please contact us immediately through live chat or WhatsApp.