Privacy Policy

1Introduction

oce69 ("we", "us", "our", "the Platform") operates an online gaming platform accessible at https://oce69.ws, offering sports betting, live casino, togel (Indonesia's traditional numbers lottery), slots, and virtual sports to players in Indonesia. The protection of personal data submitted to oce69 is taken seriously and is managed in accordance with internationally recognised data protection principles.

This Privacy Policy is intended to give you a clear and transparent account of our data practices. If you have any questions that are not answered here, please contact our support team using the details in Section 16.

2Definitions

• "Personal Data" means any information that identifies or can be used to identify a natural person, including name, date of birth, email address, device identifiers, and financial details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means oce69, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of oce69 under a data processing agreement.
• "Player", "you", "your" means any individual who registers an account on, or accesses, the oce69 Platform.
• "Game Provider" means any third-party software studio whose games are accessible via the Platform, such as Evolution Gaming, Pragmatic Play, NetEnt, or Microgaming.
• "KYC" means the Know Your Customer identity and age verification process required prior to processing withdrawals.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality and analytics.

3Data We Collect

oce69 collects Personal Data in the following categories:

3.1 Identity Data

Full legal name, date of birth, gender, and government-issued identification number (such as NIK from your KTP — Indonesian National Identity Card — or passport number).

3.2 Contact Data

Email address, mobile phone number, and city or region of residence within Indonesia (e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta).

3.3 Financial Data

Bank account details (for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, and other supported banks), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal transaction records, account balance history, and bonus claim records.

3.4 Technical Data

IP address, browser type and version, operating system, device type and identifiers, session timestamps, login history, and referring URL.

3.5 Gameplay Data

Bet history, game sessions, wagering amounts, game outcomes, sport market selections, and responsible gaming tool settings (deposit limits, loss limits, self-exclusion status).

3.6 Communications Data

Records of your interactions with oce69 customer support, including live chat transcripts, email correspondence, and support ticket history.

3.7 KYC Documentation

Copies of government-issued photo identification, proof of address documents, and payment method ownership documentation submitted during the KYC process.

4How We Collect Your Data

oce69 collects Personal Data through the following channels:

• Direct submission — information you provide at registration, during KYC, when contacting support, or when updating your account profile.
• Automated collection — technical data collected automatically when you access the Platform, including via cookies, log files, and session tracking.
• Payment providers — transaction data received from your bank (BCA, BRI, BNI, Mandiri, etc.) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) when you make deposits or withdrawals.
• Game Providers — gameplay data generated during your sessions with games hosted by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and other certified studios.
• Fraud prevention and verification services — identity data verification results and risk signals from third-party KYC and AML service providers.

5Purpose & Use of Your Data

oce69 uses your Personal Data for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity Data, Contact Data
Identity and age verification (KYC)	Identity Data, KYC Documentation
Processing deposits and withdrawals	Financial Data, Identity Data
Delivering gaming products and services	Gameplay Data, Technical Data
Fraud prevention and anti-money-laundering compliance	Identity Data, Financial Data, Technical Data
Customer support and dispute resolution	Communications Data, Identity Data, Gameplay Data
Responsible gaming monitoring and enforcement	Gameplay Data, Financial Data, Identity Data
Marketing and promotional communications (with consent)	Contact Data, Gameplay Data
Platform analytics and performance improvement	Technical Data, Gameplay Data
Legal and regulatory compliance	All categories as required

oce69 will not use your Personal Data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your consent.

6Legal Basis for Processing

oce69 processes your Personal Data on the following legal grounds:

• Contractual necessity — processing required to fulfil the agreement between oce69 and you as a registered player, including account management, payment processing, and game delivery.
• Legal obligation — processing required to comply with applicable laws, including anti-money-laundering obligations, age verification requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests — processing undertaken to protect the Platform from fraud, to maintain platform security, to conduct analytics to improve our services, and to enforce our Terms & Conditions.
• Consent — processing for optional activities such as direct marketing communications. You may withdraw consent at any time by contacting support or updating your account communication preferences.

7Data Sharing & Disclosure

oce69 does not sell your Personal Data to any third party. We share Personal Data only in the following circumstances and only to the minimum extent necessary:

7.1 Game Providers

Gameplay data and, where technically required, account identifiers are shared with licensed Game Providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe) to deliver game sessions. These providers operate under contractual data protection obligations and are prohibited from using your data for their own marketing purposes.

7.2 Payment Processors

Financial data necessary to execute deposit and withdrawal transactions is shared with your chosen payment provider — including Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja). All payment data in transit is encrypted using SSL-256 technology.

7.3 KYC and Fraud Prevention Services

Identity and KYC documentation may be shared with certified third-party identity verification and anti-fraud service providers to authenticate your identity and assess financial crime risk. These processors are bound by strict data processing agreements.

7.4 Regulatory and Law Enforcement Authorities

oce69 may disclose Personal Data to regulatory bodies, law enforcement agencies, or judicial authorities where required to do so by law, court order, or in connection with any legal proceedings. In all such cases, disclosure is limited to the minimum data required by the request.

7.5 Business Transfers

In the event that oce69's business or any part of it is acquired, merged, or transferred to a third party, your Personal Data may form part of the transferred assets. You will be notified of any such transfer in advance, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.

8Data Retention

oce69 retains your Personal Data for as long as your account remains active and for a defined period thereafter, based on the following principles:

• Active accounts: All Personal Data categories are retained for the lifetime of your active account.
• Closed accounts: Identity, Financial, and KYC data are retained for a minimum of 5 years following account closure to comply with anti-money-laundering and regulatory record-keeping obligations.
• Gameplay data: Retained for a minimum of 3 years following the last recorded game session for dispute resolution and responsible gaming audit purposes.
• Communications data: Customer support records are retained for 3 years from the date of the last interaction.
• Marketing data: Retained until you withdraw consent or for 2 years from your last engagement with a marketing communication, whichever is earlier.

When retention periods expire, Personal Data is securely deleted or anonymised such that it can no longer be associated with any individual.

9Security Measures

oce69 implements a layered security architecture to protect your Personal Data against unauthorised access, loss, alteration, or disclosure:

• SSL-256 Encryption: All data transmitted between your device and oce69 servers is encrypted using 256-bit SSL/TLS protocols.
• Tokenised Payment Data: Financial account details are tokenised at the point of capture; oce69 does not store raw bank account numbers or full card details on its servers.
• Two-Factor Authentication (2FA): Players may enable 2FA on their accounts via the security settings panel to add an additional authentication layer at login.
• Access Controls: Access to Personal Data within oce69's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data undergo regular data protection training.
• Penetration Testing: The Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights and interests, oce69 will notify affected players and, where legally required, report to the relevant authority within 72 hours of becoming aware of the breach.

While oce69 applies industry-leading security standards, no digital platform can guarantee absolute security. You are encouraged to use a strong, unique password for your oce69 account and to enable 2FA.

10Cookies & Tracking Technologies

oce69 uses cookies and similar technologies to operate and improve the Platform. The following types of cookies may be active when you use oce69:

Cookie Type	Purpose	Duration
Essential	Required for the Platform to function — session management, login state, and security tokens.	Session
Functional	Remembers your preferences such as language, currency display (IDR), and game lobby settings.	Up to 12 months
Analytics	Collects anonymised usage data to help oce69 understand how players navigate the Platform and identify areas for improvement.	Up to 24 months
Responsible Gaming	Stores session timing data locally to support the session time limit feature available in account settings.	Session

You may manage cookie preferences through your browser settings. Disabling essential cookies may impair the functionality of the Platform. oce69 does not use third-party advertising cookies or share tracking data with ad networks.

11Your Data Rights

As a player on the oce69 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our support team via live chat or at [email protected]. oce69 will respond to verified requests within 30 days.

Please note that certain rights may be limited where oce69 is required to retain or process data to comply with a legal obligation (such as AML record-keeping) or to defend against a legal claim.

12Minors & Age Verification

oce69 strictly prohibits access to its Platform by individuals under the age of 21. We do not knowingly collect Personal Data from any person under 21 years of age. Age verification is a mandatory step in the KYC process, and any account found to have been registered by an underage individual will be immediately suspended, with all associated data subject to deletion after any legally required investigation period has concluded. If you believe a minor has accessed oce69, please contact our support team immediately.

13Third-Party Services

The oce69 Platform integrates with third-party Game Providers and payment processors as described in this Policy. These third parties operate their own privacy policies, and oce69 is not responsible for the data practices of these independent providers beyond the contractual protections we put in place. Players are encouraged to review the privacy documentation of any payment provider they use, including OVO, DANA, GoPay, ShopeePay, and LinkAja, as well as major Indonesian banks such as BCA, BRI, BNI, and Mandiri.

oce69 does not embed third-party social media widgets, advertising networks, or tracking pixels on the Platform. No player data is shared with social media platforms without your explicit consent.

14International Data Transfers

oce69 operates servers and engages service providers across multiple jurisdictions. Where your Personal Data is transferred outside Indonesia, oce69 ensures that appropriate safeguards are in place, including contractual data processing agreements with all relevant processors that impose equivalent data protection standards. oce69 will not transfer your Personal Data to any jurisdiction that does not provide an adequate level of protection for personal data without first implementing appropriate protective measures.

15Changes to This Privacy Policy

oce69 reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. For material changes that significantly affect how your data is processed, oce69 will notify you by email to your registered address or via an in-platform notification prior to the change taking effect. Continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you should cease using the Platform and request account closure.

16Contact

For any questions, requests, or complaints relating to this Privacy Policy or the processing of your Personal Data by oce69, please contact our Data Protection team:

• Live Chat: Available 24/7 directly within the oce69 Platform after logging in
• Email: [email protected] (plain text — not a clickable link)
• Response Time: Live chat within 2 minutes; email requests within 5 business days

For further information about your account security, please visit our FAQ page. To review your rights under our full legal framework, please read our Terms & Conditions.