Privacy Policy — ovo777

1. Introduction

ovo777 ("we", "us", "our") is committed to safeguarding the personal data of every individual who interacts with our online betting and gaming platform. We understand that privacy is not merely a regulatory obligation — it is a cornerstone of the trust our members place in us. This Privacy Policy has been written to be transparent, readable, and complete so that you can make informed decisions about your data.

The ovo777 platform serves members across Indonesia, including in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, and Makassar. Our operations are conducted in compliance with internationally recognized data protection standards and with due regard to Indonesian consumer-protection norms.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the Platform. Where there is any conflict between the two documents regarding data-specific matters, this Privacy Policy prevails.

2. Definitions

For the purposes of this Privacy Policy, the following key terms carry the meanings defined below:

3. Data We Collect

ovo777 collects personal data in the following categories, depending on your relationship with the Platform and the features you use:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document (Indonesian KTP, Passport, or SIM).
• Date of birth, used to verify that you are 21 years of age or older as required by our Terms & Conditions.
• Residential address in Indonesia.
• Scanned or photographed copies of identity documents submitted during KYC verification.
• Selfie photographs taken for liveness verification during the KYC process.

3.2 Contact Data

• Email address registered to your ovo777 account.
• Indonesian mobile telephone number registered in your name.
• WhatsApp contact number, if provided voluntarily for support purposes.

3.3 Financial & Transaction Data

• Indonesian bank account details, including account name, account number, and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata).
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja accounts registered in your name.
• Records of all deposit and withdrawal transactions, including amounts in IDR, timestamps, payment method used, and transaction reference numbers.
• Records of all betting and gaming activity, including wager amounts, game types, outcomes, and account balance history.

3.4 Technical & Device Data

• IP address at the time of login and at the time of each session.
• Device type, operating system, and browser version.
• Unique device identifiers (where applicable).
• Session timestamps, page-view logs, and click-stream data collected for security and fraud-prevention purposes.

3.5 Communications Data

• Records of your correspondence with the ovo777 support team, including live chat transcripts, email exchanges, and any documents you submit in connection with a query or complaint.
• Survey responses and feedback submissions, where voluntarily provided.

4. How We Collect Your Data

ovo777 collects personal data through the following primary channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Automated Platform Activity: Technical and behavioral data collected automatically as you browse and use the Platform, including through cookies, server logs, and analytics tools.
• Payment Providers: Transactional confirmation data returned by Indonesian banks (BCA, BRI, BNI, Mandiri, and others), e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and international card networks (Visa, Mastercard) when you initiate a deposit or withdrawal.
• Identity Verification Services: Where ovo777 uses a third-party KYC or document-verification service provider, that provider may return verification results and risk scores associated with your submitted identity documents.
• Fraud Prevention Services: Third-party fraud-detection and anti-money-laundering screening tools may flag or enrich certain data points associated with your account activity.

5. Purpose of Processing

ovo777 processes personal data for the following specific, documented purposes. We do not use your data for purposes that are incompatible with those listed here without first obtaining your explicit consent or being required to do so by law:

6. Legal Basis for Processing

ovo777 processes your personal data on the following legal grounds, which are recognized under internationally accepted data protection frameworks:

• Contractual Necessity: Processing that is required to perform the contract between you and ovo777 — specifically, the Terms & Conditions you accept upon registration. This includes account management, transaction processing, and KYC verification.
• Legitimate Interests: Processing carried out to pursue ovo777's legitimate business interests, provided those interests are not overridden by your fundamental privacy rights. This includes fraud prevention, platform security, and aggregate analytics.
• Legal Obligation: Processing required to comply with applicable laws, regulations, court orders, or lawful government requests, including anti-money-laundering record-keeping obligations.
• Consent: Processing based on your explicit, freely given consent — specifically, the sending of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital Interests: In exceptional circumstances, ovo777 may process data to protect the vital interests of a member, such as where there is a credible risk to personal safety that requires us to contact emergency services or next of kin.

7. Data Sharing & Third Parties

ovo777 shares personal data only where strictly necessary and under contractual safeguards. We do not sell personal data. The categories of third parties with whom we may share your data are as follows:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), and international card networks (Visa, Mastercard) — solely to process deposits and withdrawals you initiate.
• KYC & Identity Verification Providers: Specialist third-party services that verify the authenticity of identity documents and perform age and watchlist screening. These providers act as Data Processors under binding data processing agreements.
• Fraud Prevention & AML Screening Services: Third-party risk-intelligence platforms that help ovo777 detect and prevent financial crime. Data shared is limited to what is necessary for the specific screening function.
• Cloud Infrastructure & Hosting Providers: Secure data center and cloud service providers that host the ovo777 Platform and its databases. These providers have no independent right to use your data.
• Customer Support Technology: Live chat and helpdesk platform providers that power our 24/7 support function. Support agents access only the data relevant to your inquiry.
• Legal Authorities: Government agencies, law enforcement, and courts where ovo777 is required by law, court order, or regulatory direction to disclose member information. We will notify affected members unless legally prohibited from doing so.
• Business Succession: In the event of a merger, acquisition, or sale of substantially all of ovo777's assets, member personal data may be transferred to the successor entity, subject to the successor adopting data protection standards at least equivalent to those in this Privacy Policy.

8. Cookies & Tracking Technologies

ovo777 uses cookies and similar tracking technologies to operate core platform functions, maintain session security, and gather aggregated analytics data. The following cookie categories are in use:

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary or functional cookies may impair your ability to use certain features of the Platform. To opt out of optional analytics or marketing cookies, contact our support team or adjust your browser's cookie controls.

9. Data Retention

ovo777 retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention schedules apply:

• Active Account Data: Retained for the duration of your membership plus a minimum of five (5) years following account closure, to satisfy financial record-keeping and AML compliance requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in line with international anti-money-laundering standards.
• Transaction Records: All deposit, withdrawal, and betting records are retained for a minimum of five (5) years from the date of the transaction.
• Support Communications: Chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
• Marketing Consent Records: Records of your consent to or opt-out from marketing communications are retained for as long as the consent decision remains relevant, plus two (2) years thereafter.
• Technical & Device Logs: IP address logs and session data are retained for ninety (90) days for security and fraud investigation purposes, after which they are automatically deleted or anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with our internal data lifecycle management procedures.

10. Security Measures

ovo777 implements a multi-layered security architecture designed to protect your personal data against unauthorized access, accidental loss, alteration, and disclosure. Our key security controls include:

• Transport Encryption: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher with 256-bit AES cipher suites.
• Data-at-Rest Encryption: Sensitive data fields stored in our databases — including identity document references and financial account details — are encrypted at rest using industry-standard symmetric encryption.
• Access Control: Internal access to personal data is role-based and restricted to employees and contractors who require it to perform their specific job function. All internal access events are logged and audited.
• Penetration Testing: ovo777 commissions independent security assessments and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach affecting member rights, ovo777 will notify affected members and, where required, the relevant supervisory authority within 72 hours of becoming aware of the breach.
• Staff Training: All personnel with access to personal data receive mandatory data protection training upon onboarding and annual refresher training thereafter.

11. Your Data Rights

As a member of ovo777, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "DATA RIGHTS REQUEST":

ovo777 will respond to all data rights requests within thirty (30) calendar days. Where the complexity or volume of a request requires additional time, we will notify you of the extension and provide a revised response date. There is no charge for exercising your data rights, unless requests are manifestly unfounded or excessive.

12. Minors & Age Restriction

ovo777 strictly prohibits the use of its Platform by any person under the age of 21. The collection of personal data from minors is not intentional, and ovo777 does not knowingly create accounts for or process the personal data of individuals below the age of 21.

If ovo777 becomes aware that personal data belonging to a person under 21 has been collected — whether through a KYC review, a complaint, or any other means — we will immediately suspend the relevant account, delete the personal data collected, and forfeit any balance in accordance with our Terms & Conditions.

If you are a parent or guardian and have reason to believe your child (under 21) has registered an ovo777 account, please contact us immediately at [email protected] so that we can take prompt action.

13. Cross-Border Data Transfers

ovo777 operates internationally, and some of the third-party service providers referenced in Clause 7 may store or process personal data in jurisdictions outside Indonesia. Where personal data is transferred internationally, ovo777 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements incorporating internationally recognized standard data protection clauses.
• Transfer only to jurisdictions that are recognized as providing an adequate level of data protection by relevant international standards.
• Technical security controls (encryption in transit and at rest) that apply regardless of where data is geographically stored.

You may request further information about the specific safeguards applicable to any international data transfer by contacting us at [email protected].

14. Amendments to This Privacy Policy

ovo777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered Members by email to the address on file and by displaying a prominent notice on the Platform for at least fourteen (14) days before the changes take effect.

Your continued use of the ovo777 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with a material change, you may request account closure in accordance with our Terms & Conditions.

Minor amendments — such as typographical corrections or clarifications that do not materially alter your rights — may be made without prior notification. The "Last Updated" date at the top of this page will always reflect the most recent revision.

15. Contact & Data Inquiries

For all privacy-related inquiries, data rights requests, or concerns about how ovo777 handles your personal data, please contact us through the following channels. For formal data rights requests, prefix your email subject line with "DATA RIGHTS REQUEST:" to ensure proper routing to our data protection team.