Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to all personal information collected by okta33 through the website https://okta33.cam, our mobile-optimized platform, and any related applications or services (collectively, the "Platform"). By registering an account, making a deposit, placing a bet, or otherwise using the okta33 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

okta33 operates as an international online gambling platform serving primarily the Indonesian market. We process personal data of Indonesian residents in compliance with applicable international data protection principles and the regulatory requirements of the jurisdiction in which we hold our gaming license. This Privacy Policy should be read in conjunction with our Terms & Conditions, which form part of the binding agreement between you and okta33.

If you do not agree with any aspect of this Privacy Policy, you must not use the Platform or provide us with any personal information. Continued use of the Platform following any update to this Privacy Policy constitutes acceptance of the revised policy.

2. Data Controller Identity

For the purposes of applicable data protection law, the data controller responsible for your personal information is:

• Company Name: okta33
• Platform: https://okta33.cam
• Contact for Data Privacy Matters: [email protected] (please use subject line "Data Privacy Request")
• Response Time: We aim to respond to all data privacy inquiries within 30 days of receipt.

okta33 acts as the data controller for all personal information collected through the Platform. We determine the purposes and means of processing your data and are responsible for compliance with applicable data protection obligations.

3. Information We Collect

okta33 collects several categories of personal information depending on your interactions with the Platform. The types of data we collect include:

4. How We Use Your Information

okta33 processes your personal information for the following lawful purposes:

• Account Administration: To create, maintain, and manage your Player Account; to authenticate your identity when you log in; to provide customer support; and to enforce our Terms & Conditions.
• Payment Processing: To process deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); to verify payment method ownership; and to maintain financial transaction records.
• Regulatory Compliance: To verify that you are at least 21 years of age; to conduct KYC (Know Your Customer) checks; to comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations; and to report to gaming regulators as required by our license conditions.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, duplicate accounts, bonus abuse, collusion, money laundering, and unauthorized account access; to monitor for suspicious betting patterns; and to protect the integrity of our games and Platform.
• Responsible Gaming: To monitor gambling behavior for signs of problem gambling; to enforce deposit limits, loss limits, and self-exclusion periods you have set; to provide reality checks and session time warnings; and to intervene if we identify at-risk behavior.
• Game Provision: To enable you to place bets on sports events (including Indonesian football leagues like BRI Liga 1, Persija Jakarta, Persib Bandung, Bali United, and international leagues), play casino games (slots, live dealer tables, roulette, blackjack, baccarat), participate in togel (lottery-style numbers games with draws from Singapore, Hong Kong, Sydney, and other pools), and access live sabung ayam (cockfighting) streams; and to calculate and credit winnings to your account.
• Marketing Communications: With your prior consent, to send promotional offers, bonus announcements, VIP program updates, and newsletters via email or SMS. You may opt out of marketing communications at any time by clicking the unsubscribe link or contacting support.
• Platform Improvement: To analyze user behavior and preferences, conduct A/B testing, optimize game performance, improve mobile responsiveness, and develop new features tailored to Indonesian player preferences.
• Legal Obligations: To respond to lawful requests from law enforcement, regulatory authorities, or courts; to investigate suspected illegal activity; and to protect the rights, property, or safety of okta33, our players, or the public.

5. Legal Basis for Processing

okta33 relies on the following legal bases to process your personal information, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, payment processing, game provision, and customer support — is based on the necessity to fulfill our contractual obligations under the Terms & Conditions.
• Legal Obligation: Processing required for KYC verification, AML compliance, age verification, regulatory reporting, and responding to lawful government requests is carried out to comply with our legal and regulatory obligations.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring is based on our legitimate interest in operating a secure, fair, and compliant gambling platform, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications, optional cookies, and personalized content recommendations is based on your explicit prior consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third-Party Disclosure

okta33 does not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• Game Providers: We share necessary gameplay data with licensed game studios (such as Pragmatic Play, Evolution Gaming, PG Soft, and Spribe) to enable game functionality, calculate results, and maintain game logs. These providers act as data processors under binding agreements and may not use your data for their own purposes.
• Payment Processors: We share financial transaction data with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) strictly to process deposits and withdrawals on your behalf.
• KYC & Fraud Prevention Services: We may share identity documents and account information with accredited third-party identity verification and fraud detection services to conduct KYC checks and flag suspicious activity.
• Regulatory Authorities & Law Enforcement: We will disclose personal information to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies when required to do so by applicable law, court order, or regulatory direction. Where legally permissible, we will notify you of such disclosure.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of okta33's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such change via your registered email address.
• Professional Advisors: We may share information with lawyers, auditors, and security consultants under strict confidentiality obligations where necessary to obtain professional advice or to protect our legal rights.

7. Data Retention

okta33 retains personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable legal, regulatory, or contractual obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard data destruction methods. Anonymized data may be retained indefinitely for analytical and statistical purposes, as it can no longer be linked back to an identifiable individual.

8. Your Data Protection Rights

Subject to applicable law and regulatory restrictions, you have the following rights in relation to your personal information held by okta33:

• Right of Access: You may request a copy of all personal information we hold about you, along with information about how it is being used and who it has been shared with. We will respond to access requests within 30 days.
• Right to Rectification: If any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update basic account details (email address, phone number, residential address) directly through your Account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal information where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Please note that we may be required to retain certain data to comply with legal, regulatory, or contractual obligations even after a deletion request.
• Right to Restriction of Processing: You may request that we temporarily restrict the processing of your data while a correction request or objection is being assessed.
• Right to Data Portability: You may request a copy of the personal information you provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON) to transfer to another service provider.
• Right to Object: You may object to processing based on our legitimate interests (including profiling for responsible gaming purposes) at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Privacy Request." Please include your full name and the email address registered to your Account to enable us to locate your data and verify your identity. We will respond within 30 days of receiving a valid request.

9. Data Security Measures

okta33 takes the security of your personal information seriously and has implemented a comprehensive set of technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, loss, or destruction:

• Encryption in Transit: All data exchanged between your device and okta33 servers is encrypted using 256-bit TLS/SSL encryption — the same standard used by major Indonesian banks and international financial institutions.
• Encryption at Rest: Sensitive data fields including passwords, financial account numbers, and identity document scans are encrypted at rest using AES-256 encryption within our database infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. okta33 employees are granted only the minimum data access necessary to perform their job functions, and all access is logged and monitored.
• Multi-Factor Authentication: okta33's internal administrative systems require multi-factor authentication (MFA) for all staff who handle player personal data.
• Regular Security Audits: We conduct periodic penetration testing, vulnerability assessments, and security audits of our Platform infrastructure. Critical vulnerabilities are remediated on a priority basis.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, okta33 will notify affected users within 72 hours of discovery and will take immediate steps to contain and remediate the breach.
• Staff Training: All okta33 employees who handle personal data receive regular data protection and cybersecurity training.

While we apply industry-leading security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account password and for logging out after each session, particularly on shared devices. If you suspect unauthorized access to your Account, contact us immediately at [email protected].

10. Cookies & Tracking Technologies

okta33 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device that enables us to recognize your browser, remember your preferences, and deliver a more personalized experience.

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling cookies may impair certain Platform features. For the avoidance of doubt, okta33 does not use third-party advertising cookies or behavioral tracking cookies that share your data with external advertising networks.

11. Protection of Minors

The okta33 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect or process personal information from persons under the age of 21. If we become aware that a person under the age of 21 has registered an account or provided personal information, we will immediately close the account, refund any deposits made (minus any winnings derived from that account), and permanently delete the associated personal data.

If you believe that a minor has accessed or registered on the okta33 Platform, please contact us immediately at [email protected] with the subject line "Underage Account Report." We take such reports very seriously and will investigate and act upon them promptly.

12. Marketing Communications

okta33 may send you promotional communications — including bonus offers, seasonal promotions tied to Indonesian holidays such as Idul Fitri, Idul Adha, and Indonesian Independence Day (17 August), VIP program updates, and new game announcements — only if you have given us your explicit consent to do so at registration or through your Account settings.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any promotional email;
• Updating your notification preferences in your Account settings under "Communication Preferences"; or
• Contacting our support team at [email protected] and requesting removal from our marketing list.

Opting out of marketing communications will not affect your ability to receive transactional communications that are necessary for the operation of your account — such as withdrawal confirmations, security alerts, and KYC requests. These are sent on the basis of contractual necessity and cannot be disabled.

13. Amendments to This Privacy Policy

okta33 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform functionality. We will notify you of material changes by sending a notice to your registered email address and/or by posting a prominent notice on the Platform at least 7 days before the changes take effect.

The date at the top of this page ("Last Updated") will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of any revision constitutes acceptance of the updated policy.

14. Contact & Data Privacy Requests

If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your data protection rights, please contact the okta33 data privacy team through the following channels:

• Email: [email protected] — subject line: "Data Privacy Request"
• Live Chat: Available 24/7 via the Platform interface
• Response Time: We aim to acknowledge all privacy requests within 3 business days and to provide a full response within 30 calendar days.
• Languages Supported: Privacy requests may be submitted in English or Indonesian (Bahasa Indonesia).