Privacy Policy

1. Introduction

oto288 ("we", "us", "our", or the "Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you access or use our online gaming platform at https://oto288.cam (the "Service").

This Privacy Policy applies to all users of the oto288 Service, including visitors to our website and registered account holders. By accessing the Service, registering an account, or using any features offered by oto288, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

We are dedicated to transparency in our data practices and compliance with applicable data protection laws. If you have any questions or concerns about how we handle your personal information, please contact us using the details provided at the end of this document.

2. Information We Collect

oto288 collects several types of information from users to operate our Service, process transactions, ensure security, and comply with legal obligations. The categories of personal data we collect include:

2.1 Information You Provide Directly

When you register for an account or use the Service, you voluntarily provide us with the following information:

• Identity Information: Full legal name, date of birth, nationality, gender, and government-issued identification documents (Indonesian KTP, passport, or driver's license) required for age verification and KYC compliance.
• Contact Information: Email address, phone number, residential address (street address, city, postal code, province).
• Account Credentials: Username, password (stored in encrypted form only), and security questions/answers.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay account identifiers), payment card information (processed by secure third-party payment processors), and transaction history.
• Communication Data: Messages sent to customer support, live chat transcripts, email correspondence, and feedback surveys.

2.2 Information Collected Automatically

When you access or use the oto288 Service, we automatically collect certain technical and usage information:

• Device Information: IP address, device type and model, operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, Android ID, IDFA).
• Usage Data: Pages visited, features used, time spent on pages, clickstream data, referring/exit pages, date and time stamps, gameplay activity (games played, bets placed, wins/losses), and session duration.
• Location Data: Approximate geographic location derived from IP address. We do not collect precise GPS coordinates unless you explicitly grant permission.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 6 for details).

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification data from banks and payment service providers.
• Identity Verification Services: Confirmation of identity documents and fraud prevention checks from specialized KYC/AML service providers.
• Marketing Partners: Aggregated demographic data or referral information (if you came to oto288 through a partner or affiliate link).
• Public Databases: Information from publicly accessible sources to verify accuracy of provided information or comply with legal obligations.

3. How We Use Your Information

oto288 uses the personal information we collect for the following legitimate business purposes:

Purpose	Description	Legal Basis
Account Management	Create and maintain your account, process registrations, authenticate your identity, and manage your profile.	Contract performance
Transaction Processing	Process deposits, withdrawals, and internal transfers; maintain transaction records; verify payment methods.	Contract performance
Game Operation	Enable gameplay, process bets, determine game outcomes, award winnings, and maintain game integrity.	Contract performance
Security & Fraud Prevention	Detect and prevent fraud, cheating, money laundering, underage gambling, and other prohibited activities; monitor for suspicious behavior.	Legitimate interest, legal obligation
KYC/AML Compliance	Verify your identity and age, comply with Know Your Customer and Anti-Money Laundering regulations, report suspicious activities to authorities.	Legal obligation
Customer Support	Respond to inquiries, resolve disputes, provide technical assistance, and improve support quality.	Contract performance, legitimate interest
Marketing Communications	Send promotional offers, bonus notifications, newsletters, and updates about new games or features (you may opt out at any time).	Consent, legitimate interest
Service Improvement	Analyze usage patterns, test new features, personalize user experience, optimize performance, and conduct research.	Legitimate interest
Legal Compliance	Comply with laws, regulations, court orders, and government requests; enforce our Terms and Conditions; protect our legal rights.	Legal obligation, legitimate interest

4. How We Share Your Information

oto288 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf. These providers have access to personal information only as necessary to perform their services and are contractually obligated to maintain confidentiality and security. Categories include:

• Payment Processors: Banks, e-wallet providers, and payment gateways that process deposits and withdrawals (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, etc.).
• Game Providers: Software studios that supply casino games and sports betting platforms (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.).
• Identity Verification Services: KYC/AML compliance specialists that verify documents and screen for fraud.
• Cloud Infrastructure Providers: Hosting companies that store data on secure servers.
• Customer Support Tools: Live chat platforms and ticketing systems used to manage support interactions.
• Marketing and Analytics Services: Platforms that help us understand user behavior, measure campaign effectiveness, and improve our Service.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, regulators, or courts when required by law or when we believe in good faith that disclosure is necessary to: comply with legal obligations; respond to valid legal process (subpoenas, court orders); protect the rights, property, or safety of oto288, our users, or the public; enforce our Terms and Conditions; or detect and prevent fraud, security breaches, or other illegal activities.

4.3 Business Transfers

In the event that oto288 is involved in a merger, acquisition, bankruptcy, reorganization, or sale of assets, your personal information may be transferred to the successor entity. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when you opt in to receive communications from marketing partners or participate in co-branded promotions.

5. Data Security Measures

oto288 takes data security seriously and implements comprehensive technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (passwords, financial information) is encrypted using industry-standard encryption algorithms.
• Access Controls: Personal information is accessible only to authorized personnel who require it to perform their job functions. All employees and contractors with access to personal data are bound by confidentiality agreements.
• Secure Infrastructure: Our servers are protected by firewalls, intrusion detection/prevention systems, and DDoS mitigation. We conduct regular security assessments and penetration testing.
• Authentication: Strong password requirements, account lockout after failed login attempts, and optional two-factor authentication (2FA) for enhanced account protection.
• Monitoring: Continuous monitoring of systems for suspicious activity, unauthorized access attempts, and potential security breaches. We maintain detailed audit logs.
• Regular Updates: Software and systems are regularly updated and patched to address known security vulnerabilities.
• Data Minimization: We collect only the personal information necessary for identified purposes and retain it only as long as required.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you become aware of any security vulnerability or breach, please contact us immediately at [email protected].

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, authenticate your session, and improve functionality. oto288 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) to enhance your experience and operate the Service effectively.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the Service to function. These cookies enable core functionality such as security, authentication, and session management. You cannot opt out of essential cookies.
• Performance Cookies: Collect anonymous information about how you use the Service (pages visited, time spent, errors encountered) to help us improve performance and user experience.
• Functional Cookies: Remember your preferences (language selection, theme choice, username) to personalize your experience on repeat visits.
• Advertising Cookies: Track your browsing activity to deliver targeted advertisements and measure campaign effectiveness. These cookies may be set by our advertising partners.

6.3 Managing Cookies

Most web browsers allow you to control cookies through browser settings. You can choose to block or delete cookies, but this may impact your ability to use certain features of the Service. To manage cookies, consult your browser's help documentation (Chrome, Firefox, Safari, Edge all provide cookie management options).

7. Your Privacy Rights

oto288 respects your privacy rights and provides you with control over your personal information. Depending on your jurisdiction, you may have the following rights:

• Right to Access: Request a copy of the personal information we hold about you and information about how we process it.
• Right to Rectification: Request correction of inaccurate or incomplete personal information.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal information, subject to legal retention requirements and legitimate business needs.
• Right to Restriction: Request limitation on how we use your personal information in certain circumstances (e.g., while disputing accuracy).
• Right to Data Portability: Request transfer of your personal information to another service provider in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing of your personal information for direct marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent for processing activities based on consent (such as marketing communications), without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. Please note that certain requests may require identity verification to protect your privacy and security. Some rights may be subject to exceptions or limitations under applicable law (e.g., we cannot delete data required for legal compliance or ongoing transactions).

8. Data Retention

oto288 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus 5 years after account closure for legal compliance, financial record-keeping, and potential dispute resolution.
• Transaction Records: Retained for 7 years after the transaction date to comply with Indonesian financial regulations and tax requirements.
• KYC/AML Documentation: Retained for 5 years after account closure as required by anti-money laundering regulations.
• Marketing Communications Data: Retained until you unsubscribe or withdraw consent, plus 1 year to honor your opt-out preferences.
• Support Communications: Retained for 3 years to improve service quality and resolve potential disputes.
• Technical Logs: Retained for 90 days to 1 year for security monitoring, troubleshooting, and performance optimization.

After retention periods expire, we securely delete or anonymize personal information so that it can no longer identify you.

9. Children's Privacy

The oto288 Service is intended for individuals who are at least 21 years of age. We do not knowingly collect personal information from individuals under 21. If you are under 21, you must not access the Service, register an account, or provide any personal information to oto288.

If we become aware that we have inadvertently collected personal information from someone under 21, we will take immediate steps to delete such information from our systems. If you believe we have collected information from someone under 21, please contact us immediately at [email protected].

Parents and guardians should supervise children's internet use and ensure they do not access gambling websites. We encourage the use of parental control software to prevent minors from accessing age-restricted content.

10. International Data Transfers

oto288 operates internationally and may transfer your personal information to countries outside of Indonesia for processing and storage. These countries may have data protection laws that differ from Indonesian laws. When we transfer data internationally, we implement appropriate safeguards to ensure your information receives adequate protection, including:

• Standard contractual clauses approved by data protection authorities
• Data processing agreements with third-party service providers that include data protection obligations
• Encryption of data during transmission and storage
• Regular audits of international service providers' security practices

11. Updates to This Privacy Policy

oto288 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending an email notification to registered users (if the changes are significant)
• Displaying a prominent notice on the Service homepage

Your continued use of the Service after the updated Privacy Policy becomes effective constitutes acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on our website for immediate assistance
• Response Time: We aim to respond to all privacy-related inquiries within 48 hours during business days

For formal complaints or unresolved issues, you may also have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction. We are committed to working with you to resolve any privacy concerns fairly and promptly.