ok168 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings set out below.

ok168 collects the following categories of Personal Data in the course of operating the Platform and delivering its services to Indonesian players.

ok168 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification under KYC obligations.

3.1 Directly from You. ok168 collects Personal Data that you provide directly when you: (a) register an account on the Platform; (b) complete KYC verification by uploading identity documents; (c) make a deposit or submit a withdrawal request; (d) contact ok168 support via live chat or email; or (e) update your account profile or responsible gaming settings.

3.2 Automatically. When you access ok168, our servers and analytics systems automatically record Technical Data including your IP address, device identifiers, session timestamps, pages visited, and game activity logs. This data is collected whether or not you are logged in to an account.

3.3 From Third Parties. ok168 may receive Personal Data about you from: (a) payment processors (BCA, BRI, BNI, Mandiri, GoPay, OVO, DANA, ShopeePay, LinkAja) to verify and reconcile transactions; (b) fraud-detection and identity-verification service providers engaged to support KYC processes; and (c) publicly available sources where permitted by applicable law for the purposes of fraud prevention and AML compliance.

3.4 Cookies and Tracking Technologies. ok168 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, and analyse usage patterns. See Section 9 for full details.

ok168 uses your Personal Data only for the purposes described below. We do not sell your Personal Data to third parties for their own marketing use.

• Account Management. Creating, maintaining, and securing your ok168 account, including verifying your identity at registration and during KYC.
• Transaction Processing. Processing deposits and withdrawals via your chosen Indonesian payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) and maintaining accurate IDR account balances.
• Platform Delivery. Providing access to the Platform's gaming products — sportsbook, live casino, slot games, and togel (Indonesia's traditional numbers lottery) — and recording game results and betting history accurately in your account.
• Customer Support. Responding to your support inquiries, resolving disputes, and communicating account-related updates via your registered email address or mobile number.
• Legal and Regulatory Compliance. Meeting anti-money-laundering (AML) obligations, responding to lawful requests from regulatory or law enforcement authorities, and fulfilling age-verification requirements for players aged 21+.
• Fraud Prevention and Security. Detecting and preventing fraudulent activity, account takeover attempts, bonus abuse, and other security threats to the Platform and its members.
• Responsible Gaming. Monitoring gameplay patterns to identify potential indicators of problem gaming and, where appropriate, reaching out to players who may benefit from responsible gaming tools or support resources.
• Platform Improvement. Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience for Indonesian players.
• Marketing (with consent). Sending promotional offers, seasonal promotions (e.g., during Idul Fitri or Ramadhan), and personalised bonus recommendations to players who have opted in to marketing communications. You may withdraw this consent at any time.

ok168 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose of each processing activity.

• Contractual Necessity. Processing required to perform the contract between ok168 and you — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation. Processing required to comply with applicable laws and regulations, including AML requirements, age-verification obligations, and responses to lawful authority requests.
• Legitimate Interests. Processing for ok168's legitimate business interests — including fraud prevention, Platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent. Processing for optional purposes — including marketing communications and certain analytics activities — where you have given explicit, freely withdrawable consent.

6.1 Service Providers. ok168 shares Personal Data with carefully selected Third-Party Providers who process data on ok168's behalf under binding data processing agreements. These include: payment processors (BCA, BRI, BNI, Mandiri, and e-wallet providers), KYC and identity-verification vendors, cloud infrastructure and hosting providers, fraud-detection services, and customer support platform providers.

6.2 Game Studios. Certain game studios integrated into the ok168 Platform — including Evolution Gaming, Pragmatic Play, PG Soft, Habanero, and Spribe — may receive limited account-session data (such as player ID and bet amounts) necessary to facilitate game rounds. These studios are contractually prohibited from using this data for their own independent purposes.

6.3 Legal and Regulatory Disclosure. ok168 may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, to respond to a lawful legal process, or to protect the rights, property, or safety of ok168, its players, or third parties.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of ok168's business, Personal Data held by ok168 may be transferred to the relevant acquiring party, subject to the same privacy protections described in this Policy.

6.5 No Sale of Data. ok168 does not sell, rent, or trade Personal Data to third parties for their own independent marketing or commercial purposes under any circumstances.

7.1 Retention Periods. ok168 retains Personal Data for as long as your account remains active and for a reasonable period thereafter, in accordance with the following general principles:

• Active Account Data. Retained for the lifetime of your account plus a minimum of 5 years following account closure, to meet regulatory and AML obligations.
• Transaction Records. Deposit, withdrawal, and betting history retained for a minimum of 5 years from the date of each transaction.
• KYC Documents. Identity verification documents retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later.
• Support Communications. Records of customer support interactions retained for 3 years from the date of the interaction.
• Marketing Preferences. Retained until you withdraw consent, after which they are deleted or anonymised within 30 days.

7.2 Deletion. Once a retention period expires and no legal obligation requires continued storage, ok168 will securely delete or irreversibly anonymise the relevant Personal Data.

8.1 Technical Measures. ok168 implements industry-standard technical security measures to protect your Personal Data, including: 256-bit SSL/TLS encryption for all data in transit between your device and ok168's servers; encryption of sensitive data fields (including payment account details) at rest; one-way cryptographic hashing of all player passwords (raw passwords are never stored or readable); regular security patching of Platform infrastructure; and intrusion-detection systems monitoring for unauthorised access attempts.

8.2 Organisational Measures. Access to Personal Data within ok168 is restricted on a strict need-to-know basis. Support agents are trained to verify account ownership before discussing account-sensitive information. ok168 maintains documented data-handling procedures and conducts regular reviews of its security practices.

8.3 Your Responsibilities. You are responsible for keeping your ok168 login credentials confidential. ok168 will never ask you to share your password via email, chat, or phone. If you suspect that your account has been accessed without your authorisation, contact ok168 support immediately at [email protected] so that your account can be secured.

8.4 Breach Notification. In the event of a data security breach that is likely to result in a risk to your rights and freedoms, ok168 will notify affected players without undue delay in accordance with applicable data protection obligations.

9.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. ok168 uses cookies and similar technologies (including local storage and session tokens) to operate core Platform functions and to understand how players use the site.

9.2 Types of Cookies Used. ok168 uses the following categories of cookies:

• Strictly Necessary Cookies. Required for the Platform to function — including session authentication cookies that keep you logged in to your account and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies. Remember your preferences, such as display settings, language selections, and deposit-method preferences, to provide a more personalised experience.
• Analytics Cookies. Collect anonymised data about how players navigate the Platform — including pages visited, time on page, and game category preferences — to help ok168 improve the user experience. These are only placed with your consent.
• Marketing Cookies. Used to understand which promotional channels bring players to ok168 and to measure the effectiveness of campaigns. Only placed with your explicit consent.

9.3 Managing Cookies. You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality — for example, disabling functional cookies may require you to re-enter preferences on each visit. Strictly necessary cookies cannot be disabled without preventing the Platform from operating correctly.

ok168 respects your rights over your own Personal Data. The following rights are available to all ok168 Members. To exercise any of these rights, contact ok168 support at [email protected] with your registered account email and a clear description of your request. ok168 will respond within 30 days.

11.1 Age Restriction. ok168 is strictly prohibited to persons under the age of 21. ok168 does not knowingly collect Personal Data from individuals under 21 years of age. If ok168 discovers that it has inadvertently collected data from a minor, that data will be deleted immediately and the associated account will be permanently suspended.

11.2 Parental Responsibility. If you are the parent or guardian of a minor and you believe that the minor has registered an ok168 account or provided Personal Data to ok168, please contact ok168 support immediately at [email protected]. ok168 will investigate and take appropriate action without delay.

11.3 Parental Controls. ok168 encourages parents and guardians of Indonesian households to use commercially available internet filtering and parental-control tools to prevent minors from accessing online gaming platforms. For guidance on responsible gaming and access controls, please visit our Responsible Gaming page.

12.1 Cross-Border Processing. ok168 operates as an international platform. Some of the Third-Party Providers engaged by ok168 — including cloud infrastructure providers, game studios, and fraud-detection vendors — may process Personal Data in countries outside Indonesia. In particular, game studios such as Evolution Gaming, Pragmatic Play, and PG Soft maintain server infrastructure across multiple jurisdictions.

12.2 Safeguards. Where Personal Data is transferred outside Indonesia, ok168 ensures that appropriate safeguards are in place, including: (a) contractual clauses requiring the receiving party to maintain data protection standards equivalent to those applied by ok168; (b) selection of Third-Party Providers who maintain recognised international security certifications; and (c) data minimisation — only the minimum data necessary for the specific service is transferred to each provider.

12.3 Your Acknowledgement. By using ok168, you acknowledge that your Personal Data may be transferred to and processed in countries other than Indonesia as part of the normal operation of the Platform. ok168 will always apply the protections described in this Privacy Policy regardless of where your data is processed.

13.1 Right to Update. ok168 reserves the right to update this Privacy Policy at any time to reflect changes in its data practices, Platform functionality, applicable law, or regulatory guidance. The effective date displayed at the top of this document will be updated with each revision.

13.2 Notification of Material Changes. Where an amendment constitutes a material change to how ok168 collects or uses your Personal Data, ok168 will notify you via your registered email address at least 14 days before the change takes effect.

13.3 Continued Use. Your continued use of ok168 following the effective date of an amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must close your account before the effective date of the amendment by contacting ok168 support.

14.1 Privacy Inquiries. If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns about how ok168 handles your Personal Data, please contact the ok168 support team:

Email: [email protected] (plain text — not a clickable link)

ok168 maintains a 24/7 Indonesian-speaking support team. Privacy-related requests submitted by email will be acknowledged within 2 business days and resolved within 30 calendar days. Where the complexity of a request requires additional time, ok168 will notify you of the extended timeline and the reasons for it.

14.2 Complaints. If you are not satisfied with ok168's response to a privacy inquiry, you have the right to escalate your complaint. ok168 takes all privacy complaints seriously and will work in good faith to resolve any outstanding concerns through direct dialogue before escalation to any external body.

14.3 Related Policies. This Privacy Policy should be read alongside the ok168 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between you and ok168.