olx500 Privacy Policy

1. Definitions

The following terms are used throughout this Privacy Policy and carry the meanings assigned here:

• "olx500," "We," "Us," "Our" — the olx500 platform accessible at https://olx500.cam and all affiliated entities that jointly operate the service.
• "You," "Your," "Player," "User" — any individual who visits, registers on, or interacts with the olx500 website or mobile interfaces.
• "Personal Data" — any information that identifies or can reasonably identify a natural person, including name, email address, phone number, payment details, device identifiers, and IP address.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — olx500, which determines the purposes and means of processing your Personal Data.
• "Data Processor" — any third party that processes Personal Data on behalf of olx500 under a written data-processing agreement.
• "KYC" — Know Your Customer verification, consisting of identity, age, and address checks required by our regulatory obligations.
• "Sensitive Data" — a subset of Personal Data requiring heightened protection, including government identification numbers (e.g., Indonesian KTP number), biometric data, and financial account information.
• "IDR" / "Rp" — Indonesian Rupiah, the primary transaction currency on the olx500 platform.
• "Cookies" — small text files stored on your device by your browser when you visit olx500, used to maintain session state and analytics.

2. Personal Data We Collect

olx500 collects Personal Data in proportion to the service being provided. The categories below outline what we collect and why each category is necessary.

2.1 Registration Data

When you create an olx500 account, we collect: full legal name, date of birth, residential address (including city — Jakarta, Surabaya, Medan, Bandung, Bali, or elsewhere in Indonesia), email address, and mobile phone number. This information is mandatory to create a valid account and verify your identity.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and our age-verification requirement (21+), we collect copies of government-issued identification documents including your Indonesian National Identity Card (KTP), passport, or driver's license (SIM). These documents contain your photograph, identification number, and date of birth. This data is treated as Sensitive Data and afforded the highest level of protection.

2.3 Financial Data

We collect payment-related information necessary to process deposits and withdrawals, including: bank account details (bank name — BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata — account holder name, and account number), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history. We do not store full payment credentials on our own servers; these are handled by licensed payment processors under separate security protocols.

2.4 Gameplay and Betting Data

We record all gaming activity on the platform including: games played, bet amounts, wager outcomes, bonus utilization, session duration, and game history. This data is used for account integrity, dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.5 Technical and Device Data

When you access olx500, we automatically collect: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URLs, pages visited, time on site, and error logs. This data is used to maintain platform security, detect fraud, and improve performance.

2.6 Communications Data

If you contact our customer support team via live chat, email, or WhatsApp, we retain records of those communications including timestamps, message content, and any attachments. This enables quality assurance, training, and dispute resolution.

2.7 Data Categories Summary

3. How We Collect Your Data

olx500 collects Personal Data through the following channels:

3.1 Directly from You

The majority of your Personal Data is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, participate in promotions, or update your account profile.

3.2 Automatically During Use

When you visit and interact with the olx500 website or app, technical data (IP address, device identifiers, browsing behavior, session data) is collected automatically through server logs, cookies, and similar tracking technologies. This collection begins as soon as you access our platform and continues throughout your session.

3.3 From Third-Party Sources

We may receive Personal Data about you from: payment processors (BCA, BRI, BNI, Mandiri and e-wallet operators) confirming transaction statuses; identity verification service providers that cross-reference your submitted documents against government databases; fraud detection partners that provide risk scores based on device fingerprinting and behavioral analytics; and affiliate partners who referred you to our platform (limited to referral tracking data only).

4. Legal Basis for Processing

olx500 processes your Personal Data only when a valid legal basis exists. We rely on the following bases depending on the nature of the processing activity:

4.1 Contractual Necessity

Processing your registration data, financial data, and gameplay data is necessary to perform the contract (our Terms & Conditions) you entered into when creating your olx500 account. Without this processing, we cannot provide you with gaming services, process payments, or maintain your account.

4.2 Legal Obligation

We are required by law to conduct KYC verification, retain transaction records, and monitor for suspicious activity. These obligations arise from international anti-money laundering (AML) standards and our licensing requirements. Compliance with these obligations is non-negotiable and cannot be opted out of.

4.3 Legitimate Interests

We process technical and device data, gameplay analytics, and communications data based on our legitimate interests in: maintaining platform security and preventing fraud, improving our services and user experience, resolving disputes and enforcing our terms, and conducting responsible gaming monitoring to protect vulnerable players.

4.4 Consent

Where we rely on your consent — for example, to send you promotional emails or SMS notifications about bonuses and new games — you may withdraw that consent at any time by updating your communication preferences in your account settings or contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. How We Use Your Personal Data

olx500 uses your Personal Data exclusively for the following purposes:

5.1 Account Management

To create, maintain, and administer your player account; verify your identity and age (21+ requirement); reset passwords and manage account security; process your KYC documents; and communicate important account-related notices including security alerts, policy updates, and transaction confirmations.

5.2 Payment Processing

To process deposits and withdrawals via your chosen payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja); detect and prevent payment fraud; comply with financial reporting obligations; and maintain accurate transaction records as required by our regulatory framework.

5.3 Gaming Services

To deliver our full suite of gaming and betting services including casino games, sports betting on BRI Liga 1, EPL, La Liga, and other leagues, lottery products including togel (Indonesia's traditional numbers lottery), sabung ayam (cockfighting) betting, and esports. Gameplay data is also used to calculate bonuses, cashback, and VIP rewards.

5.4 Responsible Gaming

To monitor betting patterns for signs of problem gambling behavior; enforce deposit limits, session time limits, and self-exclusion requests; proactively reach out to players displaying concerning patterns; and comply with responsible gaming obligations under our operating license. For full details, see our Responsible Gaming page.

5.5 Fraud Prevention and Security

To detect and prevent fraudulent account creation, bonus abuse, money laundering, and unauthorized access; investigate suspicious betting patterns or payment anomalies; maintain audit logs for security incident response; and share relevant information with law enforcement when legally required.

5.6 Marketing Communications

With your consent, to send you personalized promotional offers, bonus notifications, seasonal promotions (including Idul Fitri, Ramadhan, and other Indonesian cultural celebrations), and news about new games or features via email, SMS, or in-app messages. You may opt out of marketing communications at any time without affecting your access to olx500 services.

5.7 Platform Improvement

To analyze aggregated usage patterns, identify technical issues, test new features, optimize platform performance, and conduct internal research. Where possible, this analysis uses anonymized or pseudonymized data that cannot be traced back to individual players.

6. Data Sharing and Disclosure

olx500 does not sell or rent your Personal Data. We share it only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Payment Service Providers

We share your financial data with licensed payment processors that facilitate your deposits and withdrawals. These include the major Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja). Each provider operates under its own privacy framework and is bound by banking secrecy laws.

6.2 Game Software Providers

Our third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and others) receive your player ID and gaming session data solely to deliver their games and calculate outcomes. They do not receive your financial details, KYC documents, or full identity information.

6.3 Identity Verification Partners

KYC document verification is conducted with the assistance of specialized identity verification service providers. Your submitted documents are shared with these partners under strict data processing agreements that prohibit them from using your data for any purpose other than identity verification on our behalf.

6.4 Fraud Prevention Services

We use fraud detection platforms that analyze device fingerprints, IP reputation, and behavioral signals to assign risk scores. These services receive technical data (IP address, device identifiers, browser characteristics) but not your full personal identity information.

6.5 Legal and Regulatory Authorities

We may disclose your Personal Data to law enforcement agencies, regulatory bodies, tax authorities, or courts when required by applicable law, a valid court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of olx500's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify you in advance of any such transfer and ensure the acquiring party commits to honoring this Privacy Policy.

7. Data Retention

olx500 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, your Personal Data is securely deleted or irreversibly anonymized so that it can no longer be associated with your identity. Anonymized, aggregated data (which carries no identifying information) may be retained indefinitely for statistical and research purposes.

8. Security Measures

olx500 implements a comprehensive, layered security architecture to protect your Personal Data against unauthorized access, alteration, disclosure, and destruction. Our key security measures include:

8.1 Encryption

All data in transit between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security). Sensitive data at rest — including KYC documents and financial account details — is encrypted using AES-256, the same standard used by major global banks.

8.2 Access Controls

Access to Personal Data within olx500 is governed by role-based access control (RBAC). Only personnel with a legitimate operational need can access specific categories of data. All internal access is logged, monitored, and subject to regular audit. Staff with access to Sensitive Data undergo background checks and mandatory privacy training.

8.3 Infrastructure Security

Our platform runs on ISO 27001-certified infrastructure with firewalls, intrusion detection systems (IDS), distributed denial-of-service (DDoS) protection, and continuous vulnerability scanning. We conduct regular penetration testing by independent cybersecurity firms to identify and remediate potential weaknesses before they can be exploited.

8.4 Incident Response

We maintain a documented data breach response plan. In the event of a confirmed breach affecting your Personal Data, olx500 will notify affected players within 72 hours of discovery via your registered email address, detailing the nature of the breach, the categories of data affected, and the remedial steps we have taken.

9. Cookies and Tracking Technologies

olx500 uses cookies and similar tracking technologies to provide a functional, secure, and personalized experience. The following categories of cookies are used on our platform:

9.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They maintain your login session, remember your language and currency preferences, protect against cross-site request forgery (CSRF), and enable secure payment processing. No consent is required for these cookies as they are technically necessary to deliver the service you have requested.

9.2 Analytics Cookies

We use analytics tools to understand how players interact with olx500 — which pages are visited most frequently, where users encounter difficulties, and how navigation flows can be improved. This data is collected in aggregated form and does not identify you personally. You may opt out of analytics tracking by adjusting your browser settings.

9.3 Functional Cookies

Functional cookies remember your preferences and settings (such as your preferred deposit method, game favorites, and notification settings) so you do not need to re-enter them on each visit. These cookies enhance your experience but are not essential to the platform's core operation.

9.4 Managing Cookies

Most browsers allow you to view, manage, and delete cookies through their settings menus. Blocking all cookies may impair certain features of the olx500 platform, including automatic login and saved preferences. We do not currently respond to browser "Do Not Track" signals, as there is no universally accepted standard for interpreting them.

10. Your Privacy Rights

As an olx500 player, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact our Data Protection Officer at the details provided in Section 14.

10.1 Right of Access

You may request a copy of all Personal Data olx500 holds about you. We will provide this in a structured, readable format within 30 days of receiving your verified request. We may charge a reasonable administrative fee for manifestly excessive or repetitive requests.

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. Most basic account details (email address, phone number) can be updated directly in your account settings. Changes to legal name or date of birth require submission of updated identity documents.

10.3 Right to Erasure

You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests and we cannot demonstrate overriding grounds. Note that we are legally required to retain certain data (transaction records, KYC documents) for regulatory periods even after account closure — erasure requests cannot override these legal obligations.

10.4 Right to Restrict Processing

You may request that we limit the processing of your Personal Data in specific circumstances: while the accuracy of data is contested; where processing is unlawful but you prefer restriction to deletion; where we no longer need the data but you require it for legal claims; or where you have objected to processing pending our assessment of legitimate grounds.

10.5 Right to Data Portability

Where processing is based on your consent or a contract and is carried out by automated means, you have the right to receive your Personal Data in a machine-readable format (JSON or CSV) and to request that we transmit it directly to another service provider where technically feasible.

10.6 Right to Object

You may object at any time to processing of your Personal Data for direct marketing purposes — including profiling for marketing — and for processing based on our legitimate interests. Where you object to marketing, we will cease that processing immediately. For legitimate-interest processing, we will cease unless we can demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without penalty, by contacting support or adjusting your account notification settings. Withdrawal does not affect the lawfulness of prior processing.

11. Children's Privacy

olx500 services are strictly intended for adults aged 21 years and above. We do not knowingly collect, use, or retain Personal Data from individuals under the age of 21. Our registration process includes mandatory age declaration and date-of-birth verification. KYC procedures are designed to detect and reject underage applicants.

If we discover or are notified that Personal Data belonging to a person under 21 years of age has been collected — whether through falsified registration information or any other means — we will immediately suspend the relevant account, delete all associated Personal Data (except records we are legally required to retain for fraud reporting purposes), void any winnings, and return any deposited funds after verifying the rightful owner.

If you are a parent or guardian and believe your child has created an olx500 account, please contact us immediately at [email protected]. We treat such reports as high priority and will act within 24 hours of receiving a verified complaint.

12. International Data Transfers

Some of our third-party service providers — including game software providers (Pragmatic Play, Evolution Gaming, NetEnt, and others) and cloud infrastructure partners — are located outside Indonesia. When your Personal Data is transferred to servers or processors in other countries, olx500 ensures that appropriate safeguards are in place to maintain the same standard of protection as required under Indonesian data protection law and international privacy standards.

Safeguards for international transfers include: contractual clauses equivalent to the Standard Contractual Clauses recognized under GDPR; transfers only to vendors in jurisdictions with adequate data protection frameworks; and technical measures (encryption, pseudonymization) that reduce risk during transit and storage regardless of the recipient country.

You may request details of the specific safeguards we apply to international transfers of your Personal Data by contacting our Data Protection Officer using the contact information in Section 14.

13. Changes to This Privacy Policy

olx500 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, legal obligations, or regulatory requirements. The "Last Updated" date at the top of this document indicates the most recent revision.

When we make material changes to this policy — such as introducing new categories of data collection, new third-party sharing arrangements, or significant changes to your rights — we will notify you proactively via your registered email address at least 14 days before the changes take effect. For non-material changes (such as clarifications of existing practices or corrections of typographical errors), we will update the document without advance notice.

Your continued use of the olx500 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must stop using our services and close your account before the effective date.

14. Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Protection Officer (DPO) through the following channels:

Customer Support (General Inquiries)

• Email: [email protected]
• Live Chat: Available 24/7 via the olx500 website (average response time under 3 minutes)
• WhatsApp: Available Monday–Sunday, 08:00–22:00 WIB

Data Protection Officer (Privacy Requests)

For formal privacy rights requests — including access, rectification, erasure, portability, restriction, and objection requests — please email [email protected] with the subject line "Privacy Rights Request — [Your Request Type]". Include your full name and registered email address so we can verify your identity before processing the request.

We aim to acknowledge all privacy rights requests within 3 business days and resolve them within 30 calendar days, consistent with the timeframes described in Section 10.