Privacy Policy — oka520

oka520 is committed to protecting the privacy and security of all Users who access our online betting platform. This Privacy Policy applies to all personal data collected through the oka520 website (https://oka520.cam), mobile-optimized interfaces, and any related services.

We recognize that Indonesian players entrust us with sensitive personal information — including identity documents, financial details, and betting behavior — and we treat that trust with the utmost seriousness. Our data practices comply with applicable Indonesian data protection principles and international best practices in online gambling regulation.

This Privacy Policy should be read in conjunction with our Terms & Conditions. Where terms are capitalized but not defined in this Privacy Policy, they carry the definitions set out in the Terms & Conditions.

For the purposes of data protection law, oka520 is the data controller responsible for your personal information. This means we determine the purposes and means of processing your personal data and are accountable for ensuring that processing is lawful, fair, and transparent.

If you have any questions about how we handle your data, wish to exercise your data protection rights, or need to contact our Data Protection Officer, please reach us at:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Privacy Inquiry" for fastest routing to our compliance team

oka520 collects the following categories of personal data:

3.1 Registration Data

When you create an account, we collect:

• Full legal name (as it appears on your Indonesian national identity card — KTP)
• Date of birth (to verify you are at least 21 years of age)
• Email address and mobile phone number
• Registered home address (city, province, postal code)
• Chosen username and encrypted password
• Preferred currency (default: Indonesian Rupiah / IDR)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) regulations and age verification requirements, we collect:

• Scanned or photographed copy of your KTP (Indonesian National Identity Card) or passport
• NIK (Indonesian national identity number) extracted from your KTP
• Selfie photograph holding your identity document (where requested)
• Proof of address documents (bank statement, utility bill) if additional verification is required

3.3 Financial Data

• Bank account details (account holder name, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga — account number, branch code where applicable) for withdrawals
• E-wallet account information (OVO, DANA, GoPay, ShopeePay linked phone number or account ID)
• Transaction history (deposits, withdrawals, bet placements, winnings, bonus credits)
• Payment method verification documents (screenshot of bank account or e-wallet showing your registered name)

3.4 Behavioral and Usage Data

• Login timestamps and session durations
• IP address, device type, operating system, browser type, and screen resolution
• Pages visited, games played, bet amounts, odds selected, and win/loss outcomes
• Bonus acceptance and wagering requirement progress
• Use of Responsible Gaming Tools (deposit limits, self-exclusion requests, session time limits)
• Customer support interactions (live chat transcripts, email correspondence, support ticket history)

3.5 Marketing and Communication Preferences

• Consent status for promotional emails, SMS, and push notifications
• Preferred language (English or Indonesian) for customer communications
• Participation in surveys, promotions, or loyalty programs

oka520 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your oka520 account; authenticating your identity at login; managing your balance and transaction history.
• Age and Identity Verification: Confirming that you are at least 21 years of age, a resident of Indonesia, and legally entitled to access our services. This is a mandatory legal requirement for all online gambling platforms.
• Payment Processing: Facilitating deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, and ShopeePay; verifying that payment methods belong to you; detecting and preventing payment fraud.
• Fraud Prevention and Security: Monitoring account activity for suspicious patterns (multi-accounting, arbitrage exploitation, collusion, money laundering); protecting oka520 and other users from fraudulent or criminal activity.
• Regulatory Compliance: Fulfilling legal obligations under anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, responsible gaming mandates, and international gambling licensing conditions.
• Customer Support: Responding to your inquiries, resolving disputes, investigating complaints, and providing technical assistance.
• Platform Optimization: Analyzing anonymized usage data to improve game selection, enhance user interface design, optimize mobile performance on Indonesian network conditions, and fix technical issues.
• Responsible Gaming: Implementing deposit limits, loss limits, session time limits, reality checks, and self-exclusion tools you have activated; identifying and contacting users showing signs of problem gambling behavior to offer support resources.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates where you have consented to receive such communications. You may withdraw consent at any time via Account Settings.
• Legal Claims: Establishing, exercising, or defending legal claims; cooperating with law enforcement investigations; complying with court orders or regulatory requests.

oka520 processes your personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions), including account creation, payment processing, and provision of betting services.
• Legal Obligation: Processing is required to comply with applicable laws, including Indonesian age verification requirements (21+), anti-money laundering (AML) regulations, and international gambling licensing obligations.
• Legitimate Interests: Processing is necessary for oka520's legitimate business interests in fraud prevention, security, platform optimization, and responsible gaming — provided these interests do not override your fundamental rights and freedoms.
• Consent: Where we process data based on your explicit consent (e.g., marketing communications, optional cookies), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

oka520 does not sell your personal data to third parties for commercial purposes. However, we may share data with the following categories of recipients where necessary to operate our services:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive the minimum data necessary to process your deposits and withdrawals. These entities operate under their own privacy policies.
• KYC Verification Providers: Third-party identity verification services may process your KTP, passport, or address documents to confirm your identity and age. These providers are bound by strict confidentiality agreements and delete verification data after processing is complete.
• Game Providers: Casino and live dealer game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft) receive anonymized session identifiers to deliver game content. They do not receive personally identifiable information.
• IT Service Providers: Cloud hosting, cybersecurity monitoring, and technical support vendors process data on oka520's behalf under strict data processing agreements that prohibit unauthorized use or disclosure.
• Regulatory Authorities: Where required by law, oka520 discloses data to gambling regulators, law enforcement agencies, or courts in response to lawful requests, subpoenas, or court orders.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

oka520 uses cookies and similar tracking technologies to enhance your experience, maintain session state, and analyze platform usage. The following types of cookies are deployed:

• Strictly Necessary Cookies: Essential for login authentication, session management, security, and fraud prevention. These cookies cannot be disabled as they are required for core platform functionality.
• Functional Cookies: Remember your preferences (language, currency, Responsible Gaming settings) to personalize your experience across sessions.
• Analytics Cookies: Collect anonymized data on page views, click patterns, game popularity, and user navigation flows to help us optimize the platform. We use first-party analytics; no data is shared with external analytics vendors.
• Marketing Cookies: Track your interaction with promotional banners and bonus offers to measure campaign effectiveness. These cookies are set only if you have consented to marketing communications.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using oka520, but may limit certain features (e.g., personalized recommendations, saved preferences).

oka520 employs industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure:

• Encryption: All data transmitted between your device and oka520 servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (KYC documents, financial records) is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized oka520 personnel who require it to perform their duties. Access is granted on a least-privilege basis and logged for audit purposes.
• Multi-Factor Authentication (MFA): Account login is protected with optional two-factor authentication (2FA) via SMS or authenticator app to prevent unauthorized access.
• Intrusion Detection: Real-time monitoring systems detect and block suspicious network activity, SQL injection attempts, and brute-force login attacks.
• Regular Audits: oka520 conducts quarterly penetration testing by independent cybersecurity firms and annual ISO 27001 compliance audits to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach affecting Indonesian users, oka520 will notify affected individuals within 72 hours and provide guidance on protective measures.

While we implement robust security measures, no system is completely invulnerable. You are responsible for maintaining the confidentiality of your login credentials and must notify us immediately at [email protected] if you suspect unauthorized access to your account.

oka520 retains personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

• Active Account Data: Retained for the duration of your account's active status and for 90 days after account closure to allow for dispute resolution and fraud investigation.
• Financial Transaction Records: Retained for five years after the transaction date to comply with Indonesian anti-money laundering (AML) regulations and tax law requirements.
• KYC Documents: Verified identity documents (KTP, passport) are encrypted and retained for five years after account closure for regulatory compliance. Unverified or rejected documents are deleted within 30 days.
• Marketing Data: If you withdraw consent for marketing communications, your email and phone number are moved to a suppression list (to prevent future contact) but not deleted, to honor your opt-out preference.
• Inactive Accounts: Accounts with no login or transaction activity for 12 consecutive months are considered dormant. Non-essential data (betting history, support tickets) is deleted, while identity and financial records are archived in accordance with legal retention requirements.
• Self-Exclusion Records: If you self-exclude from oka520, your exclusion record is retained permanently to prevent re-registration during the exclusion period and to maintain responsible gaming audit trails.

As a user of oka520, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you, including account details, transaction history, and KYC records. We will provide this data in a commonly used electronic format within 30 days of your request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request correction. For security reasons, changes to registered name or date of birth require submission of updated identity documents.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and we have no other legal basis for processing. This right is subject to legal retention requirements (e.g., AML regulations require us to retain financial records for five years).
• Right to Restriction: You may request that we restrict processing of your data while a dispute about accuracy or lawfulness is being resolved.
• Right to Data Portability: You may request that we transfer your personal data to another service provider in a structured, machine-readable format, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing, we will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., optional cookies, marketing emails), you may withdraw that consent at any time via Account Settings or by contacting support.

To exercise any of these rights, please email [email protected] with "Data Rights Request" in the subject line. We will respond within 30 days. If we decline your request, we will explain the legal basis for the refusal.

oka520 services are strictly for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification, and users must provide a valid KTP showing they meet the minimum age requirement.

If we discover that we have inadvertently collected data from a person under 21, we will immediately suspend the account, delete all associated data, and forfeit any remaining balance in accordance with our Terms & Conditions. Parents or guardians who believe their child has created an oka520 account should contact [email protected] immediately.

oka520 is licensed and regulated internationally. As a result, your personal data may be transferred to, stored on, and processed by servers located outside Indonesia, including in jurisdictions where data protection laws may differ from those in Indonesia.

Where data is transferred internationally, oka520 ensures that appropriate safeguards are in place, including:

• Use of data centers certified under ISO 27001 security standards
• Standard contractual clauses (SCCs) approved by international data protection authorities
• Encryption of data in transit and at rest
• Access controls limiting international data access to authorized personnel only

By using oka520, you acknowledge and consent to the transfer of your data outside Indonesia under these safeguards.

oka520 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. Where amendments are material (e.g., expansion of data collection, changes to data sharing practices), we will provide at least 30 days' advance notice by posting a prominent notification on the platform and sending an email to your registered address.

Your continued use of oka520 following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you must cease using the platform and may request account closure prior to the effective date.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or how oka520 handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Privacy Matters: "Privacy Inquiry" or "Data Rights Request"
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours during business days (WIB, UTC+7)

For general account support or non-privacy questions, please visit our FAQ page or initiate a live chat session through your oka520 account dashboard.