ole99 Privacy Policy

ole99 ("the Platform", "we", "us", "our") is an internationally operated online sports betting and casino platform accessible at https://ole99.bio. ole99 offers a comprehensive range of products including a sportsbook covering BRI Liga 1, EPL, Champions League, and AFF Cup fixtures; live casino games powered by Evolution Gaming and other licensed studios; slot titles from Pragmatic Play, NetEnt, Microgaming, and Pocket Games Soft; and togel lottery markets including Togel Hongkong.

ole99 is the data controller for all personal information collected from members who access our platform. Our primary market is Indonesia, serving players across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, and other cities throughout the archipelago.

For all privacy-related queries, requests, and complaints, the ole99 Data Protection contact is reachable at: [email protected]

ole99 collects personal data through several channels: information you provide directly when registering and using the platform, data generated automatically through your use of the site, and data received from trusted third-party service providers such as payment processors and KYC verification partners. The specific categories of data collected are described below.

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify you are at least 21 years of age)
• Email address (primary communication channel)
• Residential address (city, province, postal code)
• Username and encrypted password
• Phone number (optional, used for two-factor authentication if enabled)

2.2 Identity Verification (KYC) Data

• Scanned or photographed copy of a valid Indonesian national identity card (KTP) or passport
• Selfie photograph taken during the live verification step, used to confirm document ownership
• Proof of payment method (e.g., screenshot of your BCA, BRI, BNI, Mandiri, or e-wallet account in your name)

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, timestamps, and reference numbers
• Payment method details (bank name, account number last four digits, e-wallet provider — we do not store full bank account numbers in plain text)
• Transaction history in Indonesian Rupiah (IDR / Rp)
• Bonus credit allocation and wagering activity records

2.4 Betting & Gaming Activity Data

• Bet placement records including market, odds, stake, and outcome for all sportsbook wagers
• Game session records for live casino, slots, and togel products
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Device fingerprint (a non-personal identifier used for fraud detection)
• Session duration, page views, click-stream data, and navigation paths within the platform
• Cookie data and local storage values (see Section 5)

2.6 Communications Data

• Records of live chat transcripts, email correspondence, and support ticket submissions between you and the ole99 support team
• Feedback, survey responses, and complaint records

ole99 processes personal data only for specific, documented purposes. The table below summarises the primary purposes for which your data is used and the corresponding data categories involved.

ole99 will not use your personal data for any purpose not listed above without first obtaining your explicit consent or as otherwise required by applicable law.

ole99 relies on the following legal bases to process your personal data, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing your registration data, KYC documents, payment details, and betting records is necessary to provide the services described in our Terms & Conditions. Without this processing, we cannot operate your account or fulfil your wagers.
• Legal obligation: We are required to collect and retain certain identity, financial, and transaction records to comply with anti-money-laundering (AML) obligations, counter-terrorism financing (CTF) requirements, and international licensing conditions applicable to our platform.
• Legitimate interests: We process technical and device data, session data, and aggregated betting patterns to detect fraud, prevent account takeover, ensure platform stability, and improve the overall product experience. We have assessed that these interests do not override your fundamental privacy rights.
• Consent: Where we send you promotional communications, personalised bonus offers, or optional marketing emails, we do so on the basis of your explicit opt-in consent at registration or via account settings. You may withdraw this consent at any time by updating your notification preferences or contacting support.

ole99 uses cookies and similar client-side tracking technologies to operate core platform functionality, remember your session, and analyse aggregate usage patterns. A cookie is a small text file stored on your device by your browser when you visit the ole99 website.

5.1 Types of Cookies We Use

5.2 Managing Cookies

You may disable non-essential cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair core platform functionality, including your ability to log in and place bets. ole99 does not use cookies for third-party advertising or cross-site behavioural tracking.

ole99 does not sell your personal data. We share personal data only with trusted categories of third parties where such sharing is strictly necessary to deliver our services or comply with legal requirements:

• Payment processors: We share the minimum necessary financial data with local Indonesian payment partners (banks including BCA, BRI, BNI, Mandiri, and e-wallet providers OVO, DANA, GoPay, ShopeePay, LinkAja) to execute deposits and withdrawals on your behalf. These partners are contractually bound to process your data solely for payment purposes.
• KYC verification providers: Identity document scans and selfie images may be processed by our contracted identity verification partner(s) for the sole purpose of confirming your identity and age. KYC partners operate under strict data processing agreements and are prohibited from using your data for any other purpose.
• Game content studios: When you play games powered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, your session data is transmitted to those studios' servers to render the game. Each studio operates under its own licence and data processing obligations. No personally identifying financial data is shared with game studios.
• Fraud and AML screening: Transaction data and device signals may be shared with third-party fraud screening tools to identify suspicious activity. These tools process data on our behalf under contractual restrictions.
• Legal authorities: ole99 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by a valid legal process, court order, or statutory obligation. We will notify affected members of such disclosures where we are legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of the ole99 business, member data may be transferred to the acquiring entity. You will be notified in advance via your registered email address and will have the right to close your account before any such transfer takes effect.

ole99 operates as an internationally licensed platform. Your personal data may be stored and processed on servers located outside Indonesia, including in jurisdictions where data protection laws may differ from those applicable in your country of residence.

Where personal data is transferred internationally, ole99 takes reasonable steps to ensure that equivalent levels of protection are maintained, including through the use of contractual data processing agreements with all third-party data processors that incorporate internationally recognised data transfer safeguards.

By registering an account with ole99 and accepting these Terms, you acknowledge and consent to the transfer of your personal data to servers and processors located outside Indonesia where necessary for the operation of the platform.

ole99 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and ole99 servers
• AES-256 encryption at rest for all sensitive personal and financial data stored in our databases
• Role-based access controls ensuring that only authorised staff with a documented business need can access personal data, and only to the extent required for their role
• Two-factor authentication (2FA) available to all members as an optional additional layer of account security
• Automated intrusion detection systems that monitor for abnormal access patterns and flag potential security incidents in real time
• Regular security audits conducted by independent third-party security firms
• Staff training — all personnel with access to personal data undergo mandatory data protection and security training

ole99 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law. The following schedules apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data (with no link back to an individual) may be retained indefinitely for statistical and analytical purposes.

As a registered member of ole99, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 days of receiving a verified request.

• Right of access: You may request a copy of all personal data held about you by ole99, together with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., email address updates) can be made directly via your account settings panel.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our legal retention obligations described in Section 9.
• Right to restrict processing: You may request that we limit the processing of your data to storage only, pending resolution of a dispute about its accuracy or the lawfulness of our processing.
• Right to data portability: You may request a machine-readable export of the personal data you have provided to us, which you may then transfer to another service provider.
• Right to object: You may object to processing carried out on the basis of our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The ole99 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from any person under the age of 21. If you are a parent or guardian and you believe that a minor has registered an account or provided personal data to ole99, please contact us immediately at [email protected]. We will promptly investigate and, where confirmed, delete the relevant data and close the associated account.

The ole99 platform may contain links to third-party websites or resources (for example, links to game studio information pages or payment provider portals). These links are provided for convenience only. ole99 has no control over the content, privacy practices, or data handling of third-party websites and accepts no responsibility for them.

We encourage you to review the privacy policy of any third-party website you visit through a link on the ole99 platform. This Privacy Policy applies solely to data collected and processed by ole99 in connection with your use of https://ole99.bio.

ole99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where amendments are material — meaning they meaningfully alter how your personal data is collected, used, or shared — we will provide at least 14 days' advance notice via your registered email address and via a prominent notice on the ole99 homepage.

For minor, non-material amendments (such as typographical corrections or clarifications that do not change the substance of any clause), we will update the "Effective Date" at the top of this document without sending a proactive notification. We encourage you to review this page periodically.

Your continued use of the ole99 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints about this Privacy Policy or the way ole99 handles your personal data, please contact us in the first instance using the details below:

If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body applicable in your jurisdiction.

Last updated: 1 January 2026. This Privacy Policy supersedes all previous versions published on the ole99 platform. For the current Terms & Conditions, visit ole99.bio/terms-conditions.