oji99 Casino & Sportsbook Data Care

This page describes what we collect when you use oji99 and how we keep that data protected. We handle your personal information with encryption, secure storage, and limited third-party access. Our privacy commitments apply across all oji99 services—slot tournaments (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways), live-dealer tables (blackjack, roulette, baccarat, Dragon Tiger), and sportsbook markets covering Liga 1, Piala AFF, Champions League, esports, and motorsport.

We collect only what is necessary to operate your account, process payments (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), verify your identity, and respond to support requests. You have rights over your data—access, correction, and deletion—which we explain in detail below.

Our servers may sit outside your jurisdiction; data transfers are encrypted and subject to this policy. We comply with applicable data-protection frameworks and respond to legal requests through proper channels only.

What data we collect on oji99

We collect your email address, phone number, and password during account creation. We request your full name, date of birth, and identity document (national ID or passport) during KYC verification—this is required for advanced features like sportsbook betting, live-dealer play, and withdrawals above standard limits. We also collect a selfie photo to match your identity document. These documents are encrypted and stored separately from your login credentials.

We log all transactions—deposits, withdrawals, bets placed, and settlements. This transaction history is retained indefinitely for audit, dispute resolution, and regulatory compliance. We record your device type, browser version, IP address, and approximate geolocation (derived from IP) to detect fraud and security threats. We do not sell this data; it is used internally only.

When you use live chat, email support, or submit KYC documents, we retain those communications and files for at least three years. This allows us to handle disputes, investigate complaints, and provide account recovery if needed. Cookies and similar trackers may be placed on your device to remember your session, preferences, and log-in state—see our Cookies section below for details.

How we use your data on oji99

We use your email and phone to verify your account, send password resets, notify you of deposits and withdrawals, and respond to support requests. During peak activity periods (Liga 1 matches, Piala Indonesia tournaments, Idul Fitri holiday play periods), you may receive notifications about table availability or leaderboard updates—you can disable these in your account preferences.

Your identity documents are used to verify your age, legal name, and residency for regulatory compliance. KYC verification is mandatory for withdrawals; we cross-reference your document against our fraud-detection service (a third-party processor) to ensure you are not on sanctions lists or flagged for suspicious activity. This process typically takes one business day.

Transaction logs are analysed for fraud patterns, unusual betting behaviour, and account security threats. If we detect anomalies (e.g. sudden large withdrawal, login from a new country, rapid account balance changes), we may temporarily restrict your account pending verification. We notify you immediately of any restrictions and resolve them within one business day upon your confirmation.

Our third-party data processors and partners

We share limited data with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) to process deposits and withdrawals. These processors have their own privacy policies; we provide them only the minimum data needed (your name, account number, transaction amount, and reference ID). We do not authorize them to use your data for marketing or other purposes.

Our fraud-detection service (a third-party vendor) receives your KYC documents and name to check sanctions lists and known-fraud databases. This vendor operates under strict data-handling agreements and cannot retain your data beyond the verification window.

We do not sell your data to advertisers, data brokers, or marketers. We do not share your betting history with sports leagues or tournament operators. Our support platform (live chat and ticketing system) is hosted on secure, encrypted servers operated by a third-party vendor under a data-processing agreement. All third-party vendors are contractually bound to keep your data confidential.

Data retention and deletion on oji99

We retain your account data (email, phone, name, address, KYC documents) for as long as your account is active. If you close your account, we retain your transaction history, KYC documents, and communications for a minimum of three years for regulatory and dispute-resolution purposes. After three years, we may archive or anonymise this data.

You may request a copy of all your personal data held by oji99—we call this a "data subject access request" (DSAR). Submit a DSAR via support email with the subject line "Data Access Request". We respond within 30 days with a downloadable file containing all your data in a portable format. There is no fee for a DSAR; you are entitled to make one per calendar year.

You may request deletion of non-essential data (your phone number, optional profile details) at any time via account settings. We delete these within 5 business days. However, we cannot delete transactional data, KYC documents, or communication records while your account is active or within three years of closure, as these are required for regulatory compliance and dispute handling.

Cookies, trackers, and session management on oji99

We use cookies to store your session token (proof that you are logged in), your preferred language, and game leaderboard filters. Session cookies expire when you close your browser or log out manually. Persistent cookies (such as preference settings) may remain for up to one year. We do not use cookies for tracking you across other websites.

Our website uses a basic analytics tool to count page views and identify which games (Aviator, Sweet Bonanza, Gates of Olympus, Fortune Tiger, Mahjong Ways, blackjack, Liga 1 sportsbook) are most popular. This tool does not collect personal data; it tracks anonymous usage patterns only. You can disable cookies in your browser settings, but doing so may limit oji99 functionality (e.g. auto-login will not work).

We do not use third-party advertising networks, social-media trackers, or data brokers. Our mobile app (iOS and Android) may request permission to access your phone's contact list and location services; these are optional and only enable features you explicitly choose (e.g. inviting friends via SMS, receiving location-based promotions during tournaments in Jakarta, Surabaya, Bandung, Medan, or Semarang). Declining these permissions does not affect your account.

Your rights and contact for data concerns on oji99

You have the right to access your data, correct inaccuracies, request deletion of non-essential data, and port your data to another service. You also have the right to object to automated decision-making (e.g. if we freeze your account due to fraud signals, you can request a manual review). If you believe we have mishandled your data, you have the right to lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact our support team via in-app chat or email with your account ID and request type. We respond within 30 days (or longer if the request is complex). If you request deletion of your account, we acknowledge your request, flag your account as scheduled for deletion, and complete the deletion within 60 days. You retain access to your account during this window to download your data or cancel the deletion.

Our data-protection officer oversees compliance with this privacy policy. If you have privacy concerns, contact support and request escalation to the data-protection team. We treat privacy inquiries as urgent and respond with priority.

Data security measures and breach notification on oji99

We encrypt all data in transit using TLS 1.2 or higher. Passwords are salted and hashed with industry-standard algorithms; we never store plaintext passwords. Identity documents are encrypted and stored in isolated vaults separate from login credentials. Access to these vaults is restricted to authorised personnel, logged, and audited monthly.

Our servers are protected by firewalls, intrusion-detection systems, and regular security patches. We conduct annual security audits by independent third parties. If a breach occurs, we investigate immediately and notify affected users and authorities within 72 hours as required by applicable law. We do not pay ransom in case of ransomware; we isolate affected systems and restore from secure backups.

Changes to this privacy policy and international data transfers

We may update this privacy policy at any time. Material changes (e.g. new data uses, third-party processors) are announced via in-app notification or email. Your continued use of oji99 after updates constitutes acceptance. You can always view the current policy on this page.

Our servers may be located outside your country. Data transferred across borders is encrypted during transit and remains encrypted at rest. We comply with applicable data-protection frameworks and do not permit international transfers that violate local law. Our terms of use and legal notice provide additional details on jurisdiction and dispute resolution.