Privacy Policy

The following defined terms are used throughout this Privacy Policy. Where the same term appears in our Terms & Conditions, it carries the same meaning unless this Policy explicitly states otherwise.

oce69 operates as the Data Controller for all Personal Data collected through the platform. As Data Controller, oce69 determines the purposes for which your data is processed and the means by which that processing takes place.

All data protection enquiries, access requests, and complaints should be directed to our support team at [email protected]. We will acknowledge your enquiry within 2 business days and provide a substantive response within 30 calendar days.

oce69 collects only the Personal Data that is necessary to deliver its betting and gaming services, maintain regulatory compliance, and protect the security of the platform. The categories of data we collect are set out below.

oce69 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for KYC identity document verification.

oce69 collects Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotional offer.
• Automatically from your device — through server logs, session analytics, and browser storage technologies (see § 08 on Cookies & Tracking) when you visit or interact with the oce69 platform.
• From third-party service providers — including KYC verification partners who confirm the authenticity of identity documents, payment processors who confirm the status of transactions, and fraud-detection services that flag high-risk account behaviour patterns.

We do not purchase Personal Data lists from third-party data brokers. Any data received from third-party service providers is limited to what is necessary for the specific operational purpose for which that provider was engaged.

oce69 processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil the agreement between you and oce69 — including account registration, transaction processing, bet settlement, and customer support.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, KYC mandates, fraud prevention obligations, and lawful requests from competent authorities.
• Legitimate Interests: Processing necessary for the legitimate operational and security interests of oce69 — including fraud detection, platform security monitoring, system performance analytics, and responsible gaming oversight — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given opt-in — specifically, the delivery of marketing communications by email, SMS, or push notification. You may withdraw Consent at any time without affecting the lawfulness of processing carried out before withdrawal.

oce69 uses the Personal Data it collects for the following purposes:

• Creating and managing your registered account on the platform.
• Verifying your identity and age (21+) as required by our Terms & Conditions and responsible gaming obligations.
• Processing deposits and withdrawals via Indonesian bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Settling bets and game outcomes accurately and transparently.
• Detecting and preventing fraudulent activity, multi-accounting, collusion, and money laundering.
• Operating responsible gaming tools including deposit limit monitoring, session time-out enforcement, and self-exclusion list management.
• Providing customer support and resolving disputes.
• Sending transactional communications — including deposit confirmations, withdrawal status updates, and security alerts — which are not subject to marketing opt-out as they are operationally necessary.
• Sending promotional communications, offers, and personalised recommendations — only to users who have opted in to marketing.
• Analysing aggregate, anonymised usage data to improve platform performance, game selection, and user experience.
• Meeting regulatory reporting obligations and responding to lawful requests from authorities.

oce69 does not sell or rent your Personal Data to any third party. We share your data only in the following limited circumstances:

• Payment Processors: We share the minimum financial data necessary with Indonesian bank transfer gateways and e-wallet processors (OVO, DANA, GoPay, ShopeePay, LinkAja) to execute deposit and withdrawal transactions.
• KYC Verification Partners: Identity document data is shared with certified third-party KYC providers solely for the purpose of document authenticity and liveness verification. These providers are contractually bound to process data only for that purpose.
• Fraud Prevention Services: Device fingerprint data, IP addresses, and behavioural signals may be shared with specialist fraud-detection platforms to identify and block abusive account patterns.
• Cloud Infrastructure Providers: Platform data is hosted on secure, access-controlled cloud infrastructure. Hosting providers act as Data Processors under written agreements and are prohibited from accessing or using your data for any independent purpose.
• Game Studio Partners: When you play games provided by studios such as Pragmatic Play, Evolution Gaming, Spribe, or Pocket Games Soft, limited session data (e.g., player ID, wager amount, game outcome) is transmitted to that studio to operate the game. Game studios do not receive your name, national ID, or banking details.
• Legal Authorities: oce69 may disclose Personal Data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law, court order, or regulatory obligation — and only to the extent required.

All third-party Data Processors engaged by oce69 are subject to written data processing agreements that require them to maintain adequate security standards, process data only for the specified purpose, and return or delete data upon termination of the engagement.

oce69 uses browser cookies and similar tracking technologies to operate the platform securely, remember your session preferences, and analyse aggregate usage patterns. We do not use advertising cookies or share cookie data with ad-targeting networks.

You can manage cookie preferences through your browser settings. Note that clearing all cookies will log you out of your current session and may reset your platform preferences.

oce69 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure:

• Encryption in Transit: All data exchanged between your browser and the oce69 platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive data fields — including national ID numbers, bank account details, and KYC document files — are encrypted at rest using AES-256.
• Access Controls: Access to production systems containing Personal Data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access control and multi-factor authentication.
• Penetration Testing: oce69 conducts regular independent security assessments of its platform and infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a Personal Data breach that poses a risk to affected users, oce69 will notify impacted players by email within 72 hours of becoming aware of the breach, describing the nature of the incident and the steps being taken to address it.

oce69 retains Personal Data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention schedules apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised aggregate data (which cannot be used to identify any individual) may be retained indefinitely for statistical and analytical purposes.

As a user of oce69, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 calendar days.

oce69 does not knowingly collect or process Personal Data from individuals under the age of 21. The platform is strictly for adults aged 21 and above. Age verification is a mandatory step in the account registration process, and KYC documentation confirming date of birth is required before any withdrawal is processed.

If oce69 becomes aware that Personal Data has been collected from a person under the age of 21 — whether through registration error, false declaration, or any other means — the relevant account will be immediately closed, all balances forfeited, and all associated Personal Data deleted without undue delay.

If you are a parent or guardian and believe that a minor under your care has registered an account on oce69, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours.

oce69 is operated by an internationally licensed entity and uses cloud infrastructure and third-party service providers that may store or process Personal Data in jurisdictions outside Indonesia. Where such international transfers occur, oce69 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards used for international transfers include contractual data processing agreements with receiving entities, selection of service providers operating under recognised international security certifications (such as ISO 27001), and technical measures including encryption of data in transit and at rest.

By using the oce69 platform, you acknowledge and accept that your Personal Data may be transferred to and processed in jurisdictions outside Indonesia for the purposes described in this Privacy Policy.

oce69 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. Material changes will be communicated to registered users by email at least 7 days before taking effect, except where a shorter notice period is required by urgent security or legal circumstances.

The current version of this Privacy Policy is always available at https://oce69.cam/privacy-policy and carries the "Last Updated" date shown at the top of this page. Your continued use of the platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your Personal Data, please contact the oce69 data protection team:

If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction where the alleged breach occurred. oce69 will cooperate fully with any such authority in the resolution of your complaint.

For responsible gaming concerns specifically, including requests to activate self-exclusion or deposit limits, please visit our Responsible Gaming page or reference Section 9 of our Terms & Conditions.