Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal data by oh222 ("we," "us," or "our") in connection with the online gaming platform and associated services accessible at https://oh222.cam (the "Platform"). It applies to all registered players, visitors, and prospective users who interact with our website, mobile-optimised interface, or customer support channels.

By registering an account with oh222 or continuing to use our Platform, you acknowledge that you have read and understood this Policy and consent to the practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

oh222 serves players primarily located in Indonesia. Our practices are designed to align with international data protection principles and applicable Indonesian regulations governing electronic commerce and personal data. Where Indonesian law imposes stricter obligations than international standards, the stricter standard applies.

2. Definitions

Throughout this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that directly or indirectly identifies a living individual, including but not limited to name, identity card number, email address, phone number, IP address, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — oh222, which determines the purposes and means of Processing your Personal Data.
• "Data Processor" — a third party that Processes Personal Data on behalf of oh222 under a formal data-processing agreement.
• "Player" or "you" — any registered account holder, visitor, or person who otherwise interacts with the Platform.
• "KTP" — Kartu Tanda Penduduk, the Indonesian national identity card used for age and identity verification.
• "KYC" — Know Your Customer, the identity and age verification process required prior to financial transactions.
• "Cookies" — small text files placed on your device by the Platform to store session information and preferences.

3. Information We Collect

3.1 Information You Provide Directly

When you register, verify your account, make transactions, or contact customer support, oh222 collects the following categories of data:

• Registration Data: Full legal name, date of birth, email address, phone number, username, and password (stored as a one-way hash).
• Identity Verification (KYC) Data: Scanned copy of Indonesian KTP, passport or driver's licence, proof-of-address documents (such as a BCA, BRI, BNI, or Mandiri bank statement), and selfie photographs for liveness checks.
• Financial Data: Bank account numbers, e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, transaction reference numbers, and payment method metadata. We do not store full card numbers or CVV values.
• Communication Data: Records of live chat conversations, WhatsApp messages to our support number, emails to [email protected], and in-app messages.
• Responsible Gaming Data: Self-imposed deposit limits, loss limits, session time limits, reality check preferences, and self-exclusion requests.

3.2 Information Collected Automatically

When you access or use the Platform, we automatically collect technical and behavioural data including:

• Device and Network Data: IP address, device type, operating system, browser type and version, screen resolution, and network connection type.
• Usage Data: Pages visited, time spent on each page, navigation paths, search queries, games played, bets placed, and feature interactions.
• Session Data: Login timestamps, logout timestamps, session duration, and geographic location derived from your IP address.
• Cookie and Tracking Data: Information collected via cookies, web beacons, and similar technologies as described in Section 7.

3.3 Information from Third Parties

We may receive data about you from third-party partners in the following contexts:

• Payment Processors: Transaction status, payment method verification results, and fraud-screening signals from our banking and e-wallet partners.
• Identity Verification Providers: Results of automated document authenticity checks and biometric liveness verification.
• Fraud Prevention Services: Risk scores, device fingerprint assessments, and flagged-account alerts from third-party anti-fraud platforms.
• Analytics Providers: Aggregated, de-identified behavioural analytics used to improve Platform performance and user experience.

4. How We Use Your Information

oh222 uses your Personal Data for the following purposes:

Account Management and Service Delivery

To create and maintain your account, process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets, settle bets across our sportsbook and casino products, and provide access to all Platform features you have requested.

Identity Verification and Regulatory Compliance

To verify that you meet the minimum age requirement of 21 years and to comply with anti-money laundering (AML) obligations, counter-terrorist financing (CTF) regulations, and applicable Indonesian laws governing electronic transactions and financial services.

Fraud Prevention and Security

To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, collusion, and other prohibited activities. This includes automated risk scoring, IP analysis, device fingerprinting, and behavioural anomaly detection.

Customer Support

To respond to your inquiries, resolve disputes, investigate complaints, and provide assistance through our 24/7 Indonesian-speaking support channels.

Responsible Gaming

To administer the responsible gaming tools you have activated (deposit limits, self-exclusion, reality checks), monitor for patterns indicative of problem gambling, and proactively reach out to players who may benefit from intervention resources.

Marketing and Personalisation

Where you have given explicit consent or where permitted by applicable law, to send you promotional communications about bonuses, new game releases, seasonal offers (such as those tied to Idul Fitri, Indonesian Independence Day, or Ramadan), and VIP programme updates. You may withdraw consent at any time by contacting our support team.

Platform Improvement and Analytics

To analyse aggregate usage patterns, diagnose technical issues, test new features, and improve the overall quality, security, and performance of the Platform. Where possible, this analysis uses de-identified or pseudonymised data.

5. Legal Bases for Processing

oh222 processes your Personal Data on the following legal grounds:

• Contract Performance: Processing necessary to deliver the services you have contracted for — account creation, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing required to comply with AML/CTF regulations, age-verification laws, and data retention mandates imposed by applicable Indonesian and international law.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing and non-essential cookies, where we have obtained your prior consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing and Disclosure of Data

oh222 does not sell, rent, or trade your Personal Data to third-party advertisers or data brokers under any circumstances. We may share data in the following limited contexts:

6.1 Service Providers and Data Processors

We engage carefully vetted third-party processors to help deliver our services. These include payment gateway operators (handling BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions), identity verification platforms, cloud hosting providers, fraud detection services, and customer support software vendors. All processors are bound by written data-processing agreements requiring them to protect your data and use it only for the purposes we specify.

6.2 Game Providers

Our platform integrates games from providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe. These providers receive minimal technical data (such as a pseudonymised player identifier, session token, and bet/win amounts) necessary to operate the games and reconcile results. They do not receive your full name, KTP number, or payment details.

6.3 Legal and Regulatory Authorities

We may disclose your Personal Data to governmental bodies, law enforcement agencies, financial regulators, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of oh222, our players, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business, player data may be transferred to the acquiring entity as part of that transaction. We will notify affected players via email and on-site notice prior to any such transfer, and the acquiring entity will be required to honour this Policy.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for core Platform functionality including login sessions, security tokens, and transaction integrity. These cannot be disabled without breaking the service.
• Performance and Analytics Cookies: Collect anonymised data about how players use the Platform to help us improve page load times, navigation flows, and feature design.
• Functional Cookies: Remember your preferences such as language settings, display options, and recently viewed games to personalise your experience.
• Targeting and Marketing Cookies: Used (with your consent) to measure the effectiveness of our promotional campaigns and deliver relevant bonus offers. These may involve limited third-party technology partners.

7.2 Managing Cookies

You can manage non-essential cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies entirely; however, doing so may impair functionality such as staying logged in or remembering your preferences. Detailed instructions for managing cookies in Chrome, Firefox, Safari, and other browsers are available through each browser's official help documentation.

8. Data Retention

oh222 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Communications: Retained for three (3) years from the date of the most recent interaction.
• Marketing Consent Records: Retained for five (5) years from the date consent was given or withdrawn.
• Anonymised Analytics Data: May be retained indefinitely in aggregate, de-identified form as it no longer constitutes Personal Data.

When retention periods expire, data is securely deleted or irreversibly anonymised. If legal proceedings are ongoing, data may be retained beyond standard retention periods until the matter is resolved.

9. International Data Transfers

oh222 primarily processes data on servers located within secure international data centres. Some of our third-party processors — particularly game providers and cloud infrastructure partners — may process data in countries outside Indonesia. When data is transferred internationally, oh222 ensures appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities;
• Binding corporate rules where applicable;
• Transfers to countries that have been assessed as providing an adequate level of data protection.

Regardless of where your data is processed, oh222 applies the same security standards and privacy protections described in this Policy.

10. Your Privacy Rights

As a player of oh222, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team using the details in Section 14.

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is used.
• Right to Rectification: You may request correction of inaccurate or incomplete data. Some corrections (such as name changes) require documentary evidence.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restriction of Processing: You may request that we limit how we use your data while a dispute or investigation is pending.
• Right to Data Portability: You may request your Personal Data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to Processing based on legitimate interests or for direct marketing purposes. Direct marketing objections will be honoured immediately.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior Processing.

We will respond to all legitimate privacy rights requests within 30 days. In complex cases we may extend this period by a further 30 days, with written notification and explanation provided within the first 30-day window.

11. Security Measures

oh222 implements a layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transferred between your browser or device and our servers is encrypted using TLS 1.2 or higher. Our domain enforces HTTPS at all times.
• Encryption at Rest: Sensitive data fields including identity document details and financial records are encrypted at the database level using AES-256 encryption.
• Access Controls: Strict role-based access policies ensure that internal staff can access only the data required for their specific function. All access is logged and audited.
• Password Security: Passwords are stored as salted, one-way cryptographic hashes. Plaintext passwords are never stored or transmitted.
• Penetration Testing: We engage independent security firms to conduct regular penetration tests and vulnerability assessments of our infrastructure.
• Incident Response: We maintain a documented data-breach response plan. In the event of a breach affecting your rights and freedoms, we will notify you and relevant authorities within 72 hours of becoming aware.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security.

12. Children and Minors

oh222 operates an exclusively adult platform. Access to, and use of, our services is strictly prohibited for any person under the age of 21. We do not knowingly collect Personal Data from individuals under 21. All accounts are subject to mandatory age verification using Indonesian KTP or equivalent identity documents prior to financial transactions.

If we become aware that Personal Data has been collected from a person under 21 — whether through false registration or any other means — we will immediately close the account, void all associated transactions, and securely delete the data. Parents or guardians who believe a minor may have registered on our platform should contact us immediately via the details in Section 14.

13. Changes to This Policy

oh222 reserves the right to update or amend this Privacy Policy at any time. We will notify you of material changes by posting a prominent notice on the Platform and, where we hold your email address, by sending you a notification email at least 14 days before the changes take effect. The date of the most recent revision is always displayed at the top of this page.

Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the changes, you must cease using the Platform and contact us to close your account.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 within your oh222 account dashboard
• WhatsApp: +62 812-3456-7890 (plain text — not a clickable link)
• Response Time: Privacy rights requests are acknowledged within 48 hours and resolved within 30 days