Privacy Policy

This Privacy Policy applies to all personal data processed by oja86 in connection with the oja86.app platform and any related services, applications, or communications. It is intended to be read alongside our Terms & Conditions and our Responsible Gaming Policy. By registering an account or using any part of the oja86 platform, you acknowledge that you have read and understood this Privacy Policy.

1 Definitions

The following definitions apply throughout this Privacy Policy:

• "oja86", "we", "us", or "our" refers to the oja86 online gaming platform operated at oja86.app.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, national identity number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Member", "you", or "your" refers to any individual who has registered an account with oja86 or otherwise interacts with the oja86 platform.
• "Platform" means the oja86 website, mobile-optimised site, software, tools, and all services accessible through oja86.app.
• "KYC" refers to the Know Your Customer identity verification process required for withdrawal processing and regulatory compliance.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and personalisation.
• "Third-Party Processors" means external service providers engaged by oja86 to assist in the operation of the Platform, such as payment processors, fraud detection providers, and analytics services.

2 Scope & Application

This Privacy Policy applies to all Personal Data collected by oja86 from Members and prospective Members located in Indonesia and any other jurisdiction where the Platform is accessed. It covers data collected through every channel by which you interact with oja86, including account registration, deposits and withdrawals, gameplay, customer support communications, and marketing opt-ins.

This Policy does not apply to third-party websites or services that may be linked from the Platform. oja86 has no control over and accepts no responsibility for the privacy practices of any third-party site. We recommend that you review the privacy policy of any external service you use.

3 Data We Collect

oja86 collects Personal Data across several categories depending on the nature of your interaction with the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify the 21+ age requirement).
• Indonesian National Identity Card (KTP) number or passport number.
• Residential address in Indonesia (city, province, postal code).
• Email address registered to your Account.
• Mobile phone number (used for account security and, where opted into, SMS notifications).

3.2 Financial Data

• Bank account details for your registered Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), including account holder name and account number.
• Transaction history: all deposits, withdrawals, bonuses credited, and wagering activity associated with your Account.
• Account balance history and bonus balance history.

3.3 KYC & Verification Data

• Scanned or photographed copies of government-issued identity documents submitted during KYC verification.
• Proof of payment method documentation (e.g., bank statement excerpts or e-wallet screenshots submitted to confirm ownership).
• Selfie or liveness-check images where requested as part of enhanced verification.

3.4 Technical & Usage Data

• IP address and approximate geolocation at the time of each login and transaction.
• Device type, operating system, browser type and version.
• Session duration, pages visited, features accessed, and clickstream data.
• Betting and gaming activity logs, including game type, stake, outcome, and timestamp.

3.5 Communications Data

• Records of all live chat, email, and any other written communications between you and the oja86 support team.
• Marketing preferences and opt-in or opt-out records for promotional communications.

4 How We Collect Data

oja86 collects Personal Data through the following means:

• Directly from you — when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your Account profile.
• Automatically — through cookies, server logs, and similar tracking technologies when you visit or interact with any page on the Platform. See Section 10 for full details of our Cookie usage.
• From third-party processors — payment processors and fraud detection partners may share transaction verification data with us to confirm the legitimacy of financial activity on your Account.
• From public sources — in limited circumstances, oja86 may cross-reference publicly available information (such as sanctions lists or politically exposed persons databases) as part of our AML compliance obligations.

5 Purposes of Processing

oja86 processes your Personal Data for the following purposes:

Purpose	Categories of Data Used
Account registration and management	Identity & Contact Data
Identity verification (KYC) and age confirmation (21+)	Identity & Contact Data, KYC & Verification Data
Processing deposits and withdrawals	Financial Data, Identity & Contact Data
Fraud prevention and anti-money laundering (AML) compliance	Financial Data, Technical & Usage Data, KYC Data
Platform security and access control	Technical & Usage Data, Identity & Contact Data
Customer support and dispute resolution	Identity & Contact Data, Communications Data, Financial Data
Responsible gaming monitoring and intervention	Technical & Usage Data, Financial Data, Communications Data
Personalisation of gaming experience and bonus offers	Technical & Usage Data, Financial Data
Marketing communications (where consent is given)	Identity & Contact Data, Communications Data
Platform analytics and product improvement	Technical & Usage Data
Legal and regulatory compliance and record-keeping	All categories as required

6 Legal Basis for Processing

oja86 processes your Personal Data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable anti-money laundering, age verification, fraud prevention, and licensing obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where our legitimate interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time by contacting our support team or updating your Account preferences.

7 Data Sharing & Disclosure

oja86 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We share your data only in the following limited and necessary circumstances:

• Payment processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive the minimum financial data necessary to process your transactions.
• KYC and identity verification providers: Third-party identity verification services receive copies of your KYC documents solely for the purpose of verifying their authenticity.
• Fraud and AML compliance providers: Specialist fraud detection and anti-money laundering screening services may receive transactional and identity data to assist in protecting the Platform against financial crime.
• Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymised session data to facilitate game delivery and results certification.
• Legal and regulatory authorities: Where required by applicable law, court order, or our licensing obligations, oja86 may disclose Personal Data to the relevant regulatory or law enforcement authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of oja86's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

8 Data Retention

oja86 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account data (identity, contact, and financial records): retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AML record-keeping obligations.
• KYC documents: retained for a minimum of five (5) years from the date of submission, or longer where required by applicable regulation.
• Transaction records: retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: retained for three (3) years from the date of the last interaction, unless a dispute requires longer retention.
• Technical and usage logs: retained for up to twelve (12) months in detailed form, then aggregated or anonymised for analytical purposes.
• Marketing consent records: retained for the duration of your marketing subscription and for one (1) year following opt-out, for compliance audit purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9 Data Security

oja86 implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and our servers.
• Encryption at rest for all sensitive Personal Data and KYC documents stored in our systems.
• Role-based access controls ensuring that only authorised personnel with a documented need can access Member Personal Data, subject to strict confidentiality obligations.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Two-factor authentication (2FA) available for all Member Accounts and enforced for all internal administrative access to Member data.
• Incident response procedures designed to detect, contain, and notify affected Members of any data breach within regulatory timeframes.

10 Cookies & Tracking Technologies

oja86 uses cookies and similar tracking technologies to ensure the Platform operates correctly, to remember your preferences, and to analyse how Members use the site so that we can continually improve your experience.

10.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function — these include session management cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and regional display options to personalise your experience.
• Analytics cookies: Collect anonymised data about how visitors use the Platform — which pages are viewed, how long sessions last, and which features are most used. This data is used solely to improve Platform performance.
• Marketing cookies: Used only where you have given explicit consent to receive personalised promotional content. These cookies track your engagement with oja86 marketing materials so that we can tailor offers to your preferences.

10.2 Managing Your Cookie Preferences

You may manage non-essential cookie preferences through your browser settings at any time. Note that disabling functional or analytics cookies may affect the performance and personalisation features of the Platform. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. For full cookie management options, refer to the help documentation for your browser.

11 Your Rights

As a Member of oja86, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team using the details in Section 15.

• Right of access: You may request a copy of all Personal Data that oja86 holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data held in your Account. Some corrections require re-submission of identity documents.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to oja86's legal retention obligations (see Section 8). Data subject to AML or regulatory retention requirements cannot be erased before the mandatory period has elapsed.
• Right to restrict processing: You may request that oja86 restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: You may request a structured, machine-readable copy of Personal Data you have provided to oja86, where processing is based on your consent or on a contractual basis.
• Right to object: You may object to processing based on oja86's legitimate interests, including profiling for responsible gaming purposes. oja86 will assess each objection and cease processing unless compelling legitimate grounds override your objection.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time with immediate effect for future processing. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

12 Protection of Minors

oja86 strictly prohibits the use of the Platform by any person under the age of 21. We do not knowingly collect Personal Data from individuals under this age. If oja86 discovers or has reasonable grounds to suspect that Personal Data belonging to an underage individual has been collected, that Account will be immediately suspended, all related data will be reviewed, and the Account will be permanently closed in accordance with our age verification procedures.

Parents and guardians who believe that a minor in their care has registered an oja86 Account are encouraged to contact our support team immediately at [email protected] so that the matter can be addressed without delay. Any funds deposited by a confirmed underage individual will be returned to the originating payment method; no winnings or Bonus Funds will be released.

13 International Data Transfers

oja86 operates as an internationally licensed platform. In order to provide our Services to Members across Indonesia — from Jakarta and Surabaya to Medan, Bandung, Bali, Yogyakarta, and beyond — it may be necessary to transfer your Personal Data to servers or service providers located outside Indonesia.

Where such transfers occur, oja86 ensures that appropriate safeguards are in place to maintain the same level of data protection afforded under this Privacy Policy. These safeguards include contractual data processing agreements with all Third-Party Processors and the selection of processors operating in jurisdictions with recognised data protection standards.

14 Policy Amendments

oja86 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our processing practices, applicable law, or regulatory guidance. Where changes are material, we will notify you via the email address registered to your Account at least seven (7) days before the updated Policy takes effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform after any amended Privacy Policy has come into effect constitutes your acknowledgement of the revised terms. If you do not agree with any material change, you should cease using the Platform and close your Account before the effective date.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about how oja86 has handled your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the oja86 Platform. Response within 60 seconds during normal operating hours (WIB, UTC+7).
• Subject line: Please mark your email with the subject "Privacy Request – [Your Registered Username]" so that it is directed to our Data Protection team without delay.

oja86 takes all privacy complaints seriously. Upon receipt of a formal complaint, we will acknowledge it within 2 business days and aim to resolve it within 30 days. If you remain dissatisfied with our response, you retain the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to you.