ovo69 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by ovo69 in connection with your use of the ovo69 online gaming platform, accessible at https://ovo69.app (the "Platform"). It covers all services offered through the Platform, including sports betting, live casino, slots, togel (Indonesia's traditional numbers lottery), esports betting, and mobile casino features.

The data controller responsible for your personal data is ovo69, an entity incorporated and operating under an international gaming license. As data controller, ovo69 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection standards.

This Policy is written in English and is directed primarily at English-preference players in Indonesia. Where this Policy references obligations under "applicable law", those obligations include internationally recognized data protection principles and such local Indonesian regulations as may apply to the offshore processing of data originating from Indonesian residents.

ovo69 collects personal data in several categories depending on how you interact with the Platform. The table below summarizes the categories, specific data points within each category, and the primary purpose for which each category is collected.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for KYC purposes under applicable law, in which case such collection will be clearly notified to you at the point of collection.

ovo69 collects personal data through three primary channels:

• Direct Collection: Data you provide voluntarily when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting our support team, or responding to surveys and promotional communications.
• Automated Collection: Data collected automatically when you access or interact with the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, session activity, and browsing behavior within ovo69.app.
• Third-Party Sources: Data received from identity verification and KYC service providers, fraud detection partners, payment processors, and — where applicable — publicly available sources used to verify the accuracy of information you have provided. ovo69 does not purchase personal data lists from data brokers or marketing aggregators.

ovo69 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to perform our contract with you — that is, to operate your account, process deposits and withdrawals in Indonesian Rupiah, deliver game services, and manage your betting activity on the Platform.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, know-your-customer (KYC) requirements, fraud prevention obligations, and other legal or regulatory duties imposed on ovo69 as a licensed gaming operator.
• Legitimate Interests: Processing necessary for ovo69's legitimate business interests, where those interests are not overridden by your privacy rights. This includes fraud detection, platform security, responsible gaming monitoring, abuse prevention, and improving the quality of our services.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to optional marketing communications (promotional emails, SMS notifications) and to the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ovo69 uses the personal data we collect for the following specific purposes:

1. Account Management: Creating, maintaining, and securing your ovo69 account; processing login requests; managing your IDR balance; and providing account history statements.
2. Service Delivery: Processing bets, settling game outcomes, calculating and crediting winnings, managing bonus crediting and wagering requirement tracking, and delivering all gaming and betting services available on the Platform.
3. Payment Processing: Facilitating deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); verifying that payment instruments are registered in your legal name; and maintaining transaction records.
4. Identity & Age Verification: Verifying that you are at least 21 years of age and that the identity information you provided at registration matches your submitted KYC documents. This is a non-optional process for withdrawal eligibility.
5. Fraud Prevention & Security: Detecting and preventing fraudulent account activity, unauthorized access, bonus abuse, multi-accounting, and any other conduct prohibited under our Terms & Conditions.
6. Responsible Gaming: Monitoring account activity for patterns consistent with problem gambling behavior (such as rapidly escalating bet sizes or unusually long sessions); enforcing self-exclusion orders and deposit limits; and reaching out proactively where our systems identify concerning patterns.
7. Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions for quality assurance and training purposes.
8. Legal Compliance: Meeting our obligations under applicable AML regulations, responding to valid requests from law enforcement or regulatory authorities, and maintaining records as required by our international gaming license.
9. Platform Improvement: Analyzing aggregated, anonymized usage data to understand how players interact with the Platform and to improve game selection, user experience, and feature design. No individual player is identifiable in these analyses.
10. Marketing Communications (Consent Only): Sending you promotional offers, bonus announcements, and news about new features or seasonal promotions — including those tied to Indonesian events such as Idul Fitri (Lebaran), Ramadhan, Indonesian Independence Day (17 August), and Imlek — where you have opted in to receive such communications.

ovo69 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: We share the financial data necessary to initiate and complete transactions with our partner payment gateways and Indonesian banking partners. These processors act as data processors under contract with ovo69 and may only use your data to complete the specific transaction for which it was provided.
• KYC & Identity Verification Providers: We share identity documents and personal identifiers with licensed third-party KYC verification services to confirm your identity and age. These providers are contractually bound to handle your data in accordance with applicable data protection standards and to retain it only for as long as required for verification purposes.
• Fraud Detection & Security Partners: We share Technical Data and Usage Data with fraud prevention service providers to identify suspicious account behavior, detect unauthorized access, and protect the integrity of the Platform.
• Game Content Suppliers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe may receive limited session and bet data for the purpose of game delivery, RNG certification, and dispute resolution. Game providers do not receive your identity or financial data beyond what is strictly required for gameplay.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally obligated to do so, where disclosure is necessary to protect the rights or safety of ovo69 or third parties, or where disclosure is required under the terms of our international gaming license.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of ovo69's assets, your personal data may be transferred to the successor entity, subject to that entity's agreement to honor the commitments made in this Privacy Policy.

We retain personal data for as long as is necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. The following retention schedule applies:

At the end of the applicable retention period, personal data is either permanently deleted from our systems or irreversibly anonymized so that it can no longer be associated with any identifiable individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.

ovo69 implements a comprehensive, layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our key technical and organizational security measures include:

• Transport Encryption: All data in transit between your browser or mobile device and our servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously to ensure uninterrupted encryption coverage.
• Data-at-Rest Encryption: Sensitive data stored on our servers — including KYC documents, financial records, and password hashes — is encrypted using AES-256 or equivalent industry-standard encryption algorithms. Plaintext passwords are never stored.
• Access Controls: Access to personal data within ovo69's internal systems is restricted on a strict need-to-know basis. Staff access is authenticated via multi-factor authentication (MFA), and all access events are logged and regularly audited.
• Two-Factor Authentication (2FA) for Players: All ovo69 account holders are strongly encouraged to enable 2FA via mobile OTP from the Account Settings panel. 2FA significantly reduces the risk of unauthorized account access even if your password is compromised.
• Fraud Detection Systems: Real-time automated monitoring systems analyze login patterns, transaction behavior, and device fingerprints to detect and flag anomalous activity. Flagged events trigger immediate security review by our operations team.
• Penetration Testing & Audits: We commission independent third-party security audits and penetration tests on a regular basis. Critical findings are remediated on a priority basis before any public disclosure.
• Incident Response: In the event of a confirmed data breach affecting your personal data, ovo69 will notify affected players as soon as reasonably practicable via the email address registered to their account, and will take all necessary steps to contain, investigate, and remediate the breach.

ovo69 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyze usage patterns. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on ovo69.app:

• Essential Cookies: Strictly necessary for the Platform to function. These cookies manage your authenticated session, maintain your IDR balance display, and enable the core gaming and betting features. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences such as display language, odds format, and responsible gaming settings. These cookies enhance your experience but are not strictly required for the Platform to operate.
• Analytics Cookies: Used to collect anonymized data about how players navigate the Platform — which pages are visited most, where users exit, and how features are used. This data is used exclusively to improve the Platform. Analytics data is not linked to individual player identities.
• Security Cookies: Used as part of our fraud detection systems to establish a baseline device fingerprint and detect anomalous session behavior that may indicate account compromise or unauthorized access.

ovo69 does not use advertising cookies, third-party tracking pixels, or social media re-targeting cookies. We do not allow advertising networks to place cookies on ovo69.app.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential or security cookies may impair your ability to use the Platform. Disabling functional cookies will cause your preferences to reset on each visit.

As an ovo69 account holder, you have the following rights over your personal data. These rights may be exercised at any time by contacting our support team via live chat or at [email protected] (plain text — not a clickable link):

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used format within thirty (30) calendar days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. For identity data, correction may require re-submission of updated KYC documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where we have processed it unlawfully. Please note that we may be legally required to retain certain data (e.g., AML-related transaction records) even after an erasure request.
• Right to Restriction: You may request that we restrict the processing of your data while a dispute about its accuracy or the legality of our processing is pending resolution.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that we provide your personal data in a machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object at any time to processing based on our legitimate interests. We will honor your objection unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Human Review: You may request that any automated decision that materially affects your account (such as an automated fraud flag) be reviewed by a human member of our team, who has the authority to override the automated outcome.

ovo69 strictly prohibits access to its Platform by individuals under the age of 21. The collection of personal data from minors is not intended and is actively prevented through our mandatory age verification procedures at registration and during KYC verification.

If ovo69 becomes aware or reasonably suspects that an account is held by a person under 21 years of age, the account will be immediately suspended, all pending bets will be voided, and the balance will be returned to the payment instrument from which deposits were made. In cases involving suspected deliberate misrepresentation of age, ovo69 may forfeit the balance in accordance with its Terms & Conditions and refer the matter to relevant authorities.

Parents and guardians who believe that a minor has registered an account on ovo69.app should contact our support team immediately via live chat or at [email protected]. All such reports are treated as a priority and handled with complete confidentiality. We also recommend that parents and guardians in Indonesia make use of parental control software to restrict minors' access to online gaming sites.

As an internationally licensed offshore gaming platform, ovo69 operates infrastructure and engages service providers in multiple jurisdictions. Your personal data may be transferred to and processed in countries other than Indonesia. Such transfers occur in the following contexts:

• Data center infrastructure hosted in jurisdictions with recognized data protection standards.
• KYC verification services operating from jurisdictions covered by their own data protection regulatory frameworks.
• Game studio technical infrastructure (e.g., live casino streaming studios operated by Evolution Gaming in multiple international locations).

Whenever personal data is transferred internationally, ovo69 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding internationally recognized data protection principles. These safeguards include contractual data processing agreements with all recipient organizations and, where applicable, standard contractual clauses or equivalent transfer mechanisms.

By registering an account and using the ovo69 Platform, you acknowledge and consent to the transfer of your personal data to locations outside Indonesia for the purposes described in this Privacy Policy.

ovo69 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will:

• Post the revised Privacy Policy on this page with an updated "Last updated" date.
• Send a notification to the email address registered to your ovo69 account, summarizing the key changes and their effective date.
• Where required by applicable law or where changes involve a new purpose for processing your data, seek your fresh consent before proceeding.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with the updated Policy, you may close your account by contacting our support team and requesting account closure in accordance with Section 13 of our Terms & Conditions. Any data rights requests or pending withdrawal transactions submitted before the policy update will be handled under the version of the Policy in effect at the time of the request.

We recommend bookmarking this page and reviewing the Policy periodically, particularly if you have not used the Platform for an extended period.

For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data rights, please contact ovo69's Data Support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the Platform. Our Indonesian-speaking support agents are available at all hours and are trained to handle data rights inquiries with sensitivity and care.
• Support Email: [email protected] (plain text — not a clickable link). Please allow up to two (2) business days for an initial acknowledgment.

When submitting a data rights request, please include your registered username or account email address, the nature of your request (e.g., access, rectification, erasure), and any relevant details that will help our team process your request accurately. We may need to verify your identity before actioning the request — this is a routine security measure to protect your data from unauthorized access by third parties.