Privacy Policy — olx178

In this Privacy Policy, the following terms have the meanings set out below unless the context clearly requires otherwise:

• "Platform" means the olx178 website at https://olx178.cam and all associated mobile-optimized interfaces operated by olx178.
• "We", "Us", "Our", "olx178" refers to the operator of the Platform, a licensed and internationally regulated online betting and gaming service provider.
• "You", "Player", "User" refers to any individual who visits, registers on, or transacts through the Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to your name, email address, date of birth, payment account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "KYC" (Know Your Customer) means the identity verification process by which olx178 confirms a Player's identity, age, and residency before approving withdrawals or at any point during the account lifecycle.
• "Cookies" means small text files placed on your device by the Platform to store session state, preferences, and anonymous analytics data.
• "Third-Party Service Provider" means any external entity engaged by olx178 to assist in the operation of the Platform, including payment processors, identity verification firms, fraud prevention services, and cloud infrastructure providers.
• "IDR" / "Rp" means Indonesian Rupiah, the primary transaction currency on the Platform.

olx178 collects Personal Data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and — where necessary — from trusted third-party sources for identity verification and fraud prevention purposes.

2.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, email address, phone number, and preferred currency (IDR) submitted at account creation.
• Identity Verification (KYC) Data: Government-issued ID documents such as a national identity card (KTP), passport, or driver's license (SIM); and proof of address such as a utility bill, bank statement, or official correspondence.
• Payment Data: Bank account numbers or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used for deposits and withdrawals. Raw payment credentials are tokenized and never stored in plaintext on our servers.
• Communications Data: Messages, queries, and attachments you send to our support team via live chat, WhatsApp, or email.
• Responsible Gaming Preferences: Self-exclusion requests, deposit limits, session time limits, and reality-check intervals you configure on your account.

2.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Usage Data: Pages visited, navigation paths, time spent on each section, game sessions launched, bet history, and feature interactions.
• Session Data: Login timestamps, session duration, and logout method (manual vs. timeout).
• Cookie Data: Session tokens, anonymous analytics identifiers, and user-preference flags as described in Section 6 of this policy.

2.3 Data from Third Parties

• Identity Verification Partners: Where KYC checks are outsourced, our verification partners may return a match/no-match result along with a risk score. olx178 does not receive raw biometric data from these providers.
• Fraud Prevention Services: Fraud detection vendors may provide device fingerprinting scores, velocity flags, and blacklist indicators to help us identify accounts operating in breach of our Terms & Conditions.
• Payment Processors: Banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and Bank Danamon, as well as e-wallet operators, may share transaction confirmation status and reference numbers to reconcile your deposit and withdrawal history.

olx178 uses Personal Data for the following purposes. Each purpose is linked to a specific legal basis described in Section 4:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, device data	Contract performance
Identity verification (KYC)	KYC documents, registration data	Legal obligation / Contract
Processing deposits and withdrawals	Payment data, KYC data	Contract performance
Fraud prevention and security monitoring	Usage data, device data, payment data	Legitimate interest
Responsible gaming tools	Gaming preferences, usage data	Legal obligation / Legitimate interest
Customer support communications	Communications data, account data	Contract performance
Platform analytics and improvement	Usage data, cookie data (anonymized)	Legitimate interest
Regulatory reporting and compliance	All categories as required	Legal obligation
Direct marketing (opt-in only)	Email address, gaming preferences	Consent

olx178 does not use your Personal Data to build profiles for sale to advertisers, nor do we engage in automated decision-making that produces legal or similarly significant effects on you without human review.

olx178 processes Personal Data on one or more of the following legal bases:

• Contract Performance: Processing is necessary to fulfill our obligations to you under the Terms & Conditions you accepted at registration — for example, creating your account, processing your deposits and withdrawals, and settling your bets.
• Legal Obligation: Processing is required to comply with applicable anti-money-laundering (AML) regulations, Know Your Customer (KYC) standards, and any lawful request from a competent regulatory authority or court.
• Legitimate Interest: Processing serves a genuine business interest — such as fraud detection, platform security, and aggregate analytics — that does not override your privacy rights. You may object to processing based on legitimate interest by contacting us at the address in Section 14.
• Consent: Processing is based on your freely given, specific, informed, and unambiguous consent — for example, subscribing to promotional emails. You may withdraw consent at any time by contacting our support team or updating your account notification preferences, without affecting the lawfulness of processing carried out before withdrawal.

olx178 does not sell, rent, or trade your Personal Data. We share data only in the following limited and controlled circumstances:

• Payment Processors and Banks: We share the minimum payment data necessary to execute deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers are contractually bound to handle your data securely and to use it only for payment processing.
• Identity Verification Providers: When KYC verification is required, we share your submitted identity documents with a licensed verification partner. The partner returns a verification decision; it does not retain your raw document data beyond the period required for verification.
• Fraud Prevention and Security Vendors: Device fingerprinting and behavioral analytics providers may receive technical signals (IP address, device identifiers, session patterns) to assess fraud risk. No personally identifiable financial data is shared for this purpose.
• Cloud Infrastructure Providers: The Platform is hosted on enterprise-grade cloud infrastructure. Our hosting providers operate under strict data processing agreements and are prohibited from accessing your data for their own purposes.
• Game Content Studios: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) receive only an anonymized session token to initialize your game session. They do not receive your name, contact information, or payment details.
• Legal and Regulatory Authorities: olx178 will disclose Personal Data to law enforcement, regulators, or courts when required to do so by a binding legal obligation, valid court order, or credible national security request. Where legally permissible, we will notify you of any such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of olx178's assets, your Personal Data may be transferred to the acquiring entity. You will be notified by email no less than 30 days before any such transfer, and you will retain the right to close your account and request data deletion prior to the transfer taking effect.

olx178 uses cookies and similar technologies (local storage, session storage) to operate the Platform effectively. The cookies we deploy fall into the following categories:

Cookie Type	Purpose	Duration	Can Be Disabled?
Strictly Necessary	Maintain your login session, prevent CSRF attacks, enforce security policies	Session / up to 24 hours	No — required for the Platform to function
Functional	Remember your language preferences, odds format, and responsible gaming settings	Up to 12 months	Yes — disabling may reduce personalization
Analytics	Collect anonymized data on page visits, navigation paths, and feature usage to improve the Platform	Up to 24 months	Yes — opt out via account settings

olx178 does not deploy third-party advertising cookies, social-media tracking pixels, or cross-site behavioral targeting technologies of any kind. Analytics data is processed in aggregate and cannot be used to identify individual users.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to the Platform. For a full list of cookies currently in use, contact our support team at [email protected].

olx178 implements a layered security architecture to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our current technical and organizational safeguards include:

• Transport Encryption: All connections to the Platform are secured with TLS 1.2 or higher. HSTS (HTTP Strict Transport Security) is enforced across all subdomains.
• Data Encryption at Rest: Sensitive personal data fields — including KYC document references and payment token mappings — are encrypted at rest using AES-256.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff access is logged, audited, and requires multi-factor authentication.
• Payment Tokenization: Raw bank account numbers and e-wallet identifiers are never stored in our primary databases. They are replaced with tokenized references managed by our PCI-compliant payment infrastructure layer.
• Penetration Testing: The Platform undergoes regular third-party penetration testing. Critical and high-severity findings are remediated within 30 days of identification.
• Incident Response: olx178 maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the incident.

olx178 retains Personal Data only for as long as is necessary to fulfill the purposes described in this Privacy Policy or to comply with applicable legal and regulatory obligations. The following retention schedule applies:

Data Category	Retention Period	Basis
Account registration data	Duration of active account + 5 years post-closure	Legal obligation (AML / KYC regulations)
KYC identity documents	5 years from verification date or account closure, whichever is later	Legal obligation
Transaction and betting history	5 years from transaction date	Legal obligation / Dispute resolution
Support communications	3 years from last interaction	Legitimate interest (quality assurance)
Analytics data (anonymized)	Up to 24 months, then aggregated permanently	Legitimate interest
Cookie / session data	Per cookie type — see Section 6	Legitimate interest / Consent

Upon expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymized such that it can no longer be associated with any identified or identifiable individual.

As a user of the olx178 Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and your registered account username. We will acknowledge your request within 5 business days and provide a substantive response within 14 business days:

• Right of Access: You may request a copy of the Personal Data olx178 holds about you, along with information about how it is being used.
• Right to Rectification: If your Personal Data is inaccurate or incomplete, you may request that we correct or complete it. Some corrections (e.g., changes to your registered name) may require supporting documentation for verification purposes.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to any overriding legal obligation to retain data (see Section 8).
• Right to Restriction of Processing: You may request that we restrict processing of your Personal Data — for example, while a rectification request is under review or while you contest the legitimacy of a processing activity.
• Right to Data Portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format (JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: You may object to processing based on legitimate interest, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defense of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

If you are under 21 years of age, you are not permitted to register, access, or use the Platform in any capacity. By registering, you represent and warrant that you are 21 or older.

If olx178 becomes aware that a registered account belongs to an individual under the age of 21 — whether through KYC verification, parental notification, or any other means — we will immediately suspend the account, void any pending bets, and return any real-money balance to the original deposit source where technically feasible. All Personal Data collected in connection with an underage account will be deleted as soon as is practicable.

Parents and guardians who suspect that a minor has registered on the Platform should contact us immediately at [email protected]. We take all such notifications with the utmost seriousness and will act swiftly to address them.

The Platform may display references to third-party game studios, sports leagues (such as BRI Liga 1, the EPL, or the Champions League), and event organizers purely for informational or contextual purposes. olx178 does not embed external links that navigate users away from the Platform to third-party websites.

Game sessions powered by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others) run within iFrame environments on the Platform. These studios operate their own data handling practices governed by their respective privacy policies for the purpose of delivering game content. olx178 contractually limits the data these studios may receive to the minimum necessary to initialize and operate a game session.

olx178 is not responsible for the privacy practices of any third-party service provider beyond its contractual obligations. We encourage you to review the privacy policies of any third-party services you use independently of the Platform.

olx178 operates internationally and may transfer Personal Data to, and store it in, countries outside Indonesia. These countries may have different data protection laws than those in force in Indonesia.

Where Personal Data is transferred outside Indonesia, olx178 ensures that appropriate safeguards are in place, including one or more of the following:

• Contractual clauses with the receiving party that impose equivalent data protection obligations to those in this policy.
• Transfers to entities operating under internationally recognized privacy frameworks or holding equivalent certifications.
• Processing within cloud infrastructure providers operating ISO 27001-certified data centers with documented access and security controls.

By registering on the Platform and providing Personal Data, you acknowledge that your data may be transferred to and processed in jurisdictions outside Indonesia. If you would like more information about the specific safeguards applied to international transfers of your data, please contact us at [email protected].

olx178 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. The most current version will always be published at https://olx178.cam/privacy-policy with an updated effective date at the top of the page.

Where changes are material — such as a new category of data being collected, a new type of third-party sharing, or a change to your rights — olx178 will provide at least 14 days' advance notice via email to all registered account holders before the revised policy takes effect. For minor, non-material changes (such as clarifications of existing language), we may update the policy without individual notification, though the effective date will always reflect the most recent revision.

Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any revision, you may close your account in accordance with Section 10 of our Terms & Conditions and request deletion of your data as described in Section 9 of this policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how olx178 handles your Personal Data, please reach out through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the Platform.
• WhatsApp Support: Available daily from 08:00 to 23:00 WIB.

When submitting a data rights request by email, please include your registered account username and specify the right you wish to exercise (e.g., "Right of Access", "Right to Erasure") in the subject line. This helps us route your request to the correct team and respond within our 14-business-day commitment.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.