otw555 Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means otw555, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of otw555 under a contractual agreement.
• "User" / "Member" / "You" means any individual who visits, registers on, or uses the otw555 Platform.
• "KYC" means Know Your Customer — our identity verification process required for account security and regulatory compliance.
• "Cookies" means small text files placed on your device by the Platform to store preferences and session information.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account or interact with our Platform, you provide us with:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued ID number (e.g., KTP number, passport number).
• Contact Information: Email address, mobile phone number, and residential address in Indonesia (city, province, and postal code).
• Financial Information: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay), deposit and withdrawal history, and transaction records.
• KYC Documents: Scanned or photographed copies of your KTP / National Identity Card, passport, driver's license, utility bills, bank statements, and selfie photographs submitted for identity verification.
• Account Credentials: Username and encrypted password (we never store passwords in plain text).
• Support Communications: Messages, emails, and chat logs from interactions with our customer support team.

2.2 Information Collected Automatically

When you use the Platform, certain technical data is collected automatically:

• Device and Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bets placed, time spent on pages, click-through patterns, and navigation paths within the Platform.
• Location Data: General geographic location derived from your IP address (country and city level). We do not collect precise GPS coordinates.
• Session Data: Login times, session duration, logout events, and failed login attempts.
• Cookie and Tracking Data: Information collected via cookies, web beacons, and similar tracking technologies (see Section 9).

2.3 Information from Third Parties

We may receive limited information about you from:

• Payment Processors: Confirmation of successful transactions from banks and e-wallet providers. We do not receive your full bank account credentials from these partners.
• Fraud Detection Services: Risk signals and fraud flags from third-party security providers to protect the integrity of the Platform.
• Identity Verification Services: Confirmation of document authenticity from KYC verification partners.

3. How We Collect Your Data

otw555 collects your personal data through the following mechanisms:

• Account registration and profile update forms.
• KYC document upload processes.
• Deposit and withdrawal transaction records.
• Betting activity and game play on the Platform.
• Live chat, email, and phone communications with our support team.
• Automatic technical data collection via server logs, cookies, and analytics tools.
• Participation in promotions, surveys, or VIP program activities.

4. How We Use Your Information

We use your personal data only for specified, lawful purposes. The table below outlines the primary uses and the type of data involved:

We do not use your personal data for purposes beyond those listed above without your prior consent or as otherwise required by law.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual Necessity: Processing required to provide our betting services, manage your account, and fulfill our obligations under the Terms & Conditions.
• Legal Obligation: Processing required to comply with anti-money-laundering (AML) regulations, KYC requirements, and other applicable laws.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where our legitimate interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit consent. You may withdraw consent at any time.

6. Sharing and Disclosure of Personal Data

6.1 Third-Party Service Providers

We share personal data with trusted third-party service providers who assist us in operating the Platform. These providers act as Data Processors and are contractually bound to process your data only on our instructions and in accordance with this Policy. Categories of providers include:

• Payment processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) — for processing deposits and withdrawals.
• KYC verification partners: Identity document verification services used to authenticate member identities.
• Fraud detection providers: Security services that analyze transaction patterns and flag suspicious activity.
• Cloud and server hosting providers: Secure data center operators who store Platform data on ISO-certified infrastructure.
• Customer support platforms: Software providers that power our live chat and ticketing systems.
• Analytics providers: Tools that aggregate usage data to help us improve Platform performance and user experience.

6.2 Legal Disclosure

We may disclose your personal data to law enforcement agencies, courts, or regulatory authorities if:

• Required by applicable law, court order, or regulatory directive.
• Necessary to detect, prevent, or address fraud, money laundering, or criminal activity.
• Required to protect the safety of our members, staff, or the public.

6.3 No Sale of Personal Data

otw555 does not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only to the extent necessary to operate our services, comply with legal obligations, or protect legitimate interests.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law. Our standard retention periods are:

• Active account data: Retained for the duration of your account's active status plus 5 years after account closure.
• KYC documents: Retained for a minimum of 5 years after account closure in compliance with anti-money-laundering regulations.
• Transaction records: Retained for 5 years from the date of each transaction.
• Support communications: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn, plus 1 year as evidence of consent.
• Technical logs (server, session): Retained for 12 months from collection date.

When retention periods expire, personal data is securely deleted or anonymized. Anonymized data (which cannot identify you) may be retained indefinitely for statistical and analytical purposes.

8. Data Security Measures

Protecting your personal data is a core operational priority for otw555. We implement multiple layers of security:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS certificates.
• Encrypted Storage: Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data access is restricted on a strict need-to-know basis. All internal access is logged and audited.
• Two-Factor Authentication (2FA): Required for staff accessing member data systems, and strongly recommended for member account access.
• Security Audits: Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Incident Response: A dedicated incident response team monitors for data breaches and is prepared to notify affected members and relevant authorities within 72 hours of a confirmed breach.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the Platform. They allow us to recognize your device, remember your preferences, and analyze how yo u interact with the Platform.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options. Disabling these may affect Platform functionality.
• Analytics Cookies: Collect aggregated, anonymized data about how members use the Platform — pages visited, time on site, and navigation paths. This helps us improve user experience.
• Marketing Cookies: Used only with your consent to deliver relevant promotions and measure the effectiveness of our campaigns. You may opt out at any time.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impact your experience on the Platform, including keeping you logged in or remembering your preferences. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate securely.

10. Your Privacy Rights

As a user of the otw555 Platform, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will respond within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You may update most details directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data, subject to our legal obligations to retain certain records (e.g., KYC documents and transaction records required under AML regulations).
• Right to Restriction of Processing: You may request that we limit the processing of your data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to us, in a structured, commonly used format (e.g., CSV).
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, we will cease all marketing communications promptly.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team at [email protected]. We will verify your identity before processing any data request and respond within 30 calendar days. Complex requests may take up to 60 days, in which case we will notify you of the extension.

11. Minors and Age Verification

The otw555 Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21.

As part of our registration and KYC processes, we verify the age of all members using government-issued identity documents. Any account found to belong to a person under 21 years of age will be immediately suspended, all balances forfeited, and the relevant data flagged and deleted in accordance with our legal obligations and our Responsible Gaming commitments.

If you believe that a minor has created an account on our Platform, please contact us immediately at [email protected] so we can investigate and take appropriate action.

12. Changes to This Privacy Policy

otw555 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or Platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the Platform homepage for at least 14 days following the update.
• Send an email notification to all registered members if the changes materially affect how we process their data.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your information.

13. Contact and Data Requests

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 through your Account dashboard
• Response Time: Within 48 hours for general inquiries; within 30 days for formal data subject requests
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays (Idul Fitri, Independence Day, Nyepi, and others)

When submitting a data subject request, please include your registered email address, account username, and a clear description of your request. We will verify your identity before taking any action on your account or data.