At oji99, your privacy is fundamental to the trust we build with every player across Indonesia. This Privacy Policy explains precisely what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information.
oji99 collects only the personal data strictly necessary to operate your account, process payments in IDR, verify your identity, and comply with applicable regulatory obligations. We do not harvest data for unrelated commercial purposes.
All data transmitted between your device and oji99 servers is protected by TLS 1.3 encryption. Sensitive fields such as passwords and payment details are stored using industry-standard hashing and encryption at rest.
oji99 does not sell, rent, or trade your personal information to third parties for marketing or advertising purposes. Data shared with partners is limited to what is operationally necessary and governed by strict data-processing agreements.
You have the right to access, correct, and request deletion of your personal data held by oji99, subject to legal and regulatory retention obligations. Submit all data-rights requests to [email protected] with the subject line "Data Rights Request".
oji99 uses essential and analytical cookies to maintain session security, improve platform performance, and deliver a personalised experience. You can manage cookie preferences via your browser settings at any time without affecting core account functionality.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected. Account data is held for the lifetime of the account plus a post-closure period required by applicable financial regulations, then securely deleted or anonymised.
1.1 Data Controller. oji99 operates the online gaming and sportsbook platform accessible at oji99.club (the "Platform"). For the purposes of this Privacy Policy, oji99 is the data controller responsible for the personal information collected from players and visitors on the Platform.
1.2 Our Commitment. oji99 is committed to handling your personal data with integrity, transparency, and security. We serve English-preference players across Indonesia — including in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, and Palembang — and we recognise that trust is the cornerstone of every player relationship. This Privacy Policy reflects that commitment in concrete, enforceable terms.
1.3 Scope. This policy covers all personal data processed in connection with your use of the Platform, including data collected during account registration, identity verification (KYC), deposits and withdrawals via Indonesian payment channels (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja), customer support interactions, and marketing communications you have opted into.
oji99 collects the following categories of personal data. We collect only what is necessary for the stated purposes, consistent with the principle of data minimisation.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, KTP or passport number, nationality | Account registration, KYC age and identity verification (21+ requirement) |
| Contact Data | Email address, WhatsApp or phone number, residential address in Indonesia | Account communication, security alerts, support responses |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, etc.), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in IDR | Processing deposits and withdrawals, AML compliance, fraud prevention |
| Technical Data | IP address, device type and OS, browser type and version, screen resolution, session timestamps | Platform security, fraud detection, performance optimisation |
| Usage Data | Games played, bet history, wagering amounts, session duration, page navigation patterns | Responsible gaming monitoring, personalisation, product improvement |
| KYC Documents | Scanned KTP/passport, proof of address, selfie with ID, payment method verification screenshots | Identity verification, fraud prevention, regulatory compliance |
| Communications Data | Live chat transcripts, support emails, WhatsApp message logs | Customer service quality, dispute resolution, compliance auditing |
| Marketing Preferences | Opted-in promotional categories, communication channel preferences | Delivering relevant promotions and seasonal offers (Ramadhan, Idul Fitri, Independence Day, etc.) |
2.1 Sensitive Data. oji99 does not intentionally collect sensitive personal data categories such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in an identity document photograph submitted for KYC purposes. If any such information is incidentally included in a document you submit, it is processed solely for the purpose of verifying your identity and is not retained for any other purpose.
oji99 collects your personal data through the following channels:
oji99 uses your personal data for the following specific and lawful purposes:
oji99 processes your personal data on the following legal grounds:
6.1 We Do Not Sell Your Data. oji99 does not sell, rent, lease, or otherwise commercialise your personal data to any third party for their own marketing or advertising purposes. Period.
6.2 Authorised Third-Party Processors. oji99 shares personal data with carefully selected third-party service providers who process data on our behalf, strictly under written data-processing agreements that bind them to confidentiality and security standards equivalent to those oji99 applies. These categories of processors include:
6.3 Legal Disclosures. oji99 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required by a lawful order, warrant, or legal obligation. We will notify you of any such disclosure to the extent permitted by law.
6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of oji99's business or assets, your personal data may be transferred to the successor entity as part of that transaction. oji99 will provide advance notice of any such transfer and ensure the receiving entity is bound by privacy obligations no less protective than those in this policy.
7.1 Cross-Border Processing. oji99 operates as an international platform. Some of our third-party service providers — including cloud hosting infrastructure, game studios, and fraud-detection platforms — may process your personal data in jurisdictions outside Indonesia. In such cases, oji99 takes appropriate measures to ensure your data receives an equivalent level of protection, including:
7.2 Your Acknowledgement. By using the oji99 Platform, you acknowledge that your personal data may be processed in jurisdictions where data protection laws may differ from those applicable in Indonesia. oji99's contractual safeguards are designed to compensate for any such differences.
8.1 What Are Cookies. Cookies are small text files placed on your device by your browser when you visit a website. oji99 uses cookies and similar technologies (such as local storage, session tokens, and pixel tags) to operate the Platform, maintain session security, and improve your experience.
8.2 Types of Cookies We Use.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain login session, CSRF protection tokens, load-balancing. These are essential for the Platform to function. | No — disabling these will break account functionality. |
| Functional | Remember your language preference, game lobby display settings, and responsible gaming tool configurations. | Yes — via browser settings, with some impact on personalisation. |
| Analytical | Measure page load times, identify navigation bottlenecks, and aggregate usage patterns to improve Platform performance. | Yes — opt out via browser settings or our cookie preference centre. |
| Security | Device fingerprinting, anomalous-login detection, fraud scoring. These protect your account from unauthorised access. | No — essential for account protection. |
8.3 Managing Cookies. You can manage or delete cookies at any time through your browser's settings. Disabling strictly necessary or security cookies will impair your ability to log in and use the Platform. Analytical and functional cookies can be disabled without preventing access, though some personalisation features will not operate as intended.
Subject to applicable law and certain regulatory limitations (particularly those relating to AML and fraud-prevention record-keeping obligations), you have the following rights regarding your personal data held by oji99:
9.1 How to Exercise Your Rights. To exercise any of the rights listed above, send a written request to [email protected] with the subject line "Privacy Rights Request". We will acknowledge receipt within 5 business days and respond substantively within 30 calendar days. We may require identity verification before processing your request to prevent unauthorised access to another person's data.
10.1 Technical Safeguards. oji99 implements the following technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
10.2 Organisational Measures. In addition to technical controls, oji99 maintains organisational security practices including mandatory staff data-handling training, confidentiality agreements for all personnel with access to player data, and documented incident response procedures.
10.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, oji99 will notify affected players without undue delay and take all reasonable steps to contain the breach, assess its impact, and prevent recurrence. Notifications will be sent to the email address registered on your account.
11.1 Retention Principles. oji99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to meet our contractual obligations to you, or to comply with legal and regulatory requirements. Once the applicable retention period expires, data is securely deleted or irreversibly anonymised.
11.2 Specific Retention Periods.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML/KYC regulatory obligation |
| Financial Transaction Records | Duration of account + 5 years post-closure | Financial record-keeping obligation |
| KYC Documents | Duration of account + 5 years post-closure | AML/CFT regulatory obligation |
| Customer Support Communications | 3 years from the date of the interaction | Dispute resolution and quality assurance |
| Technical / Usage Logs | 12 months from collection | Security monitoring and fraud detection |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
| Analytical Cookie Data | 13 months from placement | Platform improvement (legitimate interests) |
11.3 Dormant Accounts. Accounts that have been inactive for 12 consecutive months are classified as dormant. oji99 will contact the registered email address before initiating any data reduction procedures. Players may reactivate a dormant account by logging in and completing any required re-verification steps.
12.1 21+ Platform. oji99 is strictly an adults-only platform. Persons under the age of 21 are prohibited from registering an account or using any service on the Platform. oji99 does not knowingly collect or process personal data from individuals under 21 years of age.
12.2 Age Verification. oji99 enforces the 21+ age requirement through mandatory KYC verification. Where an account is found to belong to a person under 21, the account will be immediately suspended, all wagers voided, and the matter investigated. Any confirmed underage account data will be deleted upon resolution, subject to any legal reporting obligations.
12.3 Reporting Underage Access. If you believe a minor is using the oji99 Platform, please report this immediately to [email protected] with the subject line "Underage Access Report". We take such reports seriously and will investigate promptly.
13.1 Right to Update. oji99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. All amendments will be published on this page with an updated effective date.
13.2 Material Changes. Where a proposed change materially affects your privacy rights or how we process your personal data, oji99 will notify registered players via the email address on their account at least 14 days before the change takes effect. Non-material updates (such as formatting corrections or clarifications that do not alter the substance of the policy) may be made without prior notice.
13.3 Continued Use. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the revised policy, you should cease using the Platform and request account closure prior to the effective date.
13.4 Version Archive. Previous versions of this Privacy Policy are available on request by contacting [email protected] with the subject line "Privacy Policy Version Request".
If you have any questions, concerns, or requests relating to this Privacy Policy or the way oji99 processes your personal data, please contact our Privacy team using the details below. We are committed to responding to all privacy-related inquiries promptly and transparently.
Now that you understand how oji99 protects your personal data, feel free to explore our full game library, check the latest sportsbook markets, or log in to manage your account settings.