oyo138 ("we", "us", "our", "the Company", "the Platform") is committed to safeguarding the privacy and personal data of every individual who uses our services. This Privacy Policy describes how oyo138 collects, processes, stores, shares, and protects the personal information of users ("you", "User", "Player") who access our website at https://oyo138.cam and use any associated services.
This Privacy Policy applies to all personal data collected through the oyo138 platform, including data provided during account registration, identity verification (KYC), deposits and withdrawals, customer support interactions, and passive data collected through cookies and analytics tools. By creating an account or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
If you are a resident of Indonesia, you are also subject to the provisions of Indonesia's Personal Data Protection Law (Undang-Undang Pelindungan Data Pribadi) and any applicable regulations issued thereunder. We treat compliance with applicable data protection laws as a binding obligation, not merely a guideline.
All data in transit between your browser and our servers is encrypted with industry-standard TLS/SSL protocols, ensuring your information is never exposed to unauthorized parties.
oyo138 never sells, rents, or trades your personal data to third-party marketers or data brokers under any circumstances. Your information is used solely to deliver and improve our services.
You retain full rights to access, correct, export, or request deletion of your personal data. Submit a request via our support team and we will respond within 30 days.
Personal data is stored on Tier-3 certified servers protected by physical security controls, access-logging, and regular independent security audits.
We use cookies solely to maintain session integrity, deliver relevant content, and analyze platform performance. We do not use cross-site tracking cookies for advertising.
We retain personal data only as long as necessary for the purposes it was collected, subject to legal and regulatory retention obligations. Data is securely deleted or anonymized once retention periods expire.
For the purposes of this Privacy Policy, the following definitions apply:
We collect personal data that you actively provide when you interact with oyo138, including during the following activities:
When you access the oyo138 platform, certain data is collected automatically through technical means:
| Data Type | Examples | Purpose |
|---|---|---|
| Device Information | Device model, operating system, browser type and version | Platform compatibility and fraud detection |
| Network Information | IP address, ISP name, approximate geolocation (city/country level) | Security verification and jurisdiction compliance |
| Usage Data | Pages visited, time on site, betting activity logs, session duration | Service improvement and responsible gaming monitoring |
| Cookie Data | Session tokens, preference settings, analytics identifiers | Session management, personalization, analytics |
| Transaction Metadata | Timestamps, transaction amounts, payment method identifiers | AML compliance and dispute resolution |
oyo138 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions, except where such data is incidentally included in identity documents submitted for KYC purposes. Where such data is encountered, it is not recorded, analyzed, or used beyond the identity verification function.
oyo138 processes your personal data only where a lawful basis exists. Our primary lawful bases are:
The table below summarizes the key purposes for which we process your personal data:
oyo138 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your personal data with the following categories of recipients, strictly as necessary to fulfill the purposes described in this Policy:
We engage trusted third-party service providers to assist in operating our platform. These providers act as data processors on our behalf and are contractually bound to process personal data only as instructed by oyo138 and in accordance with applicable data protection laws. Categories of service providers include:
oyo138 may disclose personal data to competent authorities, law enforcement agencies, courts, or regulatory bodies where required or permitted by law, including in response to:
Where legally permissible, we will notify you before disclosing your data to authorities. In cases where prior notification is prohibited by law, we will inform you as soon as notification becomes lawfully possible.
In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and any changes to this Privacy Policy that may result from it, at least 30 days in advance where practicable.
oyo138 uses cookies and similar tracking technologies to operate and improve our platform. Cookies are small text files stored on your device when you visit our website. We use the following categories of cookies:
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the oyo138 platform. We do not use cross-site advertising cookies or behavioral profiling cookies for third-party marketing.
oyo138 retains personal data only for as long as is necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Our standard retention periods are as follows:
Upon expiry of the applicable retention period, personal data is either securely deleted using certified data destruction methods or anonymized so that it can no longer be linked to an identifiable individual.
As a user of oyo138 and as an individual whose personal data we process, you have the following rights. To exercise any of these rights, please contact us at with a clear description of your request and sufficient information to verify your identity.
Request a copy of the personal data we hold about you and information about how it is used.
Request correction of inaccurate or incomplete personal data held in your account.
Request deletion of your personal data where retention is no longer legally necessary.
Request that we temporarily halt processing of your data while a dispute is under review.
Receive your personal data in a structured, machine-readable format for transfer to another service.
Object to processing of your data based on legitimate interests, including direct marketing.
We will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for reasonable requests, but may charge a reasonable administrative fee for manifestly unfounded or excessive requests.
Your right to erasure may be limited where oyo138 is legally required to retain your data — for example, to comply with AML obligations, resolve open disputes, or respond to active regulatory inquiries. In such cases, we will restrict processing of your data to the minimum necessary to fulfill the legal requirement and notify you of the applicable retention obligation.
oyo138 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:
While we take every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for promptly notifying us of any suspected unauthorized account access.
oyo138 services are strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone under the age of 21. If we discover that personal data has been collected from a minor, we will immediately close the associated account, void all betting activity, and securely delete all personal data relating to that individual.
If you are a parent or guardian and believe that your child has registered an account or submitted personal data to oyo138, please contact us immediately at . We will take prompt action to investigate and remediate the situation. We also encourage parents and guardians to make use of parental control software to prevent minors from accessing gambling-related websites.
oyo138 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or business operations. When we make material changes to this Policy, we will:
Your continued use of oyo138 services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must discontinue use of our services and may request account closure as described in our Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact us through the following channels:
For general queries about our policies and platform, you may also consult our FAQ page, which addresses the most common questions from Indonesian players about account security, payment data, and data handling practices.
Have questions about how oyo138 handles your data? Our support team is available around the clock. You can also explore our other policy pages for a complete picture of your rights and protections.