Privacy Policy

1. Introduction

omon88 is committed to handling your personal data with transparency, integrity, and security. We recognise that privacy is a fundamental right, and we take our responsibilities as a data controller seriously. This Policy applies to all personal data processed by omon88 in connection with the operation of its online gaming and sports betting platform, serving players across Indonesia — including Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and beyond.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between omon88 and its Players. In the event of a conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy shall prevail.

We review and update this Policy regularly to reflect changes in our data practices, technological developments, and applicable regulatory requirements. The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically.

2. Definitions

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" — omon88, being the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third party that processes personal data on behalf of omon88, strictly under our instructions and subject to data processing agreements.
• "KYC" — Know Your Customer; the identity and eligibility verification process required by omon88 for account management and financial transaction processing.
• "Cookies" — small text files placed on your device by the Platform to remember session information, preferences, and browsing behaviour.
• "Special Category Data" — personal data requiring heightened protection, including health or wellbeing information (relevant in a responsible gaming context).

3. Personal Data We Collect

omon88 collects the following categories of personal data from Players and website visitors:

Data Category	Specific Examples	Collection Point
Identity Data	Full legal name, date of birth, nationality, government ID number (KTP/SIM/passport)	Registration, KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration, account updates
Financial Data	Bank account name & number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet IDs (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit/withdrawal records	Deposit, withdrawal, KYC
Gaming Activity Data	Bet history, game session records, win/loss records, bonus usage, wagering patterns	Platform use (automated)
Technical Data	IP address, browser type and version, operating system, device identifiers, time zone (WIB/WITA/WIT), session timestamps	Platform use (automated)
Communications Data	Support chat transcripts, email correspondence, complaint records	Customer support interactions
Responsible Gaming Data	Self-exclusion requests, deposit/session limit settings, cooling-off period history	Responsible gaming tools

We do not collect or process payment card numbers (Visa, Mastercard) directly. All card transactions, where applicable, are handled exclusively by PCI-DSS compliant third-party payment processors, and omon88 receives only a tokenised transaction reference.

4. How We Collect Personal Data

omon88 collects personal data through the following channels:

• Direct interactions — data you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automated technical collection — data collected automatically as you use the Platform, including IP addresses, device fingerprints, session logs, and clickstream data, via server logs, cookies, and similar technologies.
• Third-party sources — data received from identity verification partners, fraud prevention services, payment processors, and (where applicable) credit reference agencies to validate the accuracy of information you provide to us.
• Publicly available sources — in limited circumstances, such as fraud investigation or AML (anti-money laundering) compliance, we may cross-reference information from publicly available databases or regulatory watchlists.

< !-- 5. LEGAL BASIS FOR PROCESSING -->

5. Legal Basis for Processing

Every instance of personal data processing carried out by omon88 rests on one of the following legal bases:

• Contractual necessity — processing required to perform our obligations under the Player Agreement (Terms & Conditions), including account management, payment processing, and customer support.
• Legal obligation — processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and record-keeping mandates imposed by our international operating licence.
• Legitimate interests — processing carried out for purposes that are in omon88's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security monitoring, and analytical processing to improve service quality.
• Consent — processing carried out on the basis of your freely given, specific, informed, and unambiguous consent, principally in the context of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital interests — in exceptional circumstances, processing may be necessary to protect the vital interests of a Player, for example where a safeguarding concern arises in connection with our Responsible Gaming obligations.

6. How We Use Your Personal Data

6.1 Account Management. We use identity, contact, and financial data to create and maintain your omon88 account, verify your eligibility (including age verification — you must be at least 21 years of age), process deposits and withdrawals via your chosen payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, or other supported channels), and provide customer support.

6.2 Fraud Prevention and Security. Technical data, gaming activity data, and financial data are analysed to detect and prevent fraud, money laundering, account takeover attempts, and other prohibited conduct as defined in our Terms & Conditions. This processing is essential to maintaining the integrity of the Platform and protecting all Players.

6.3 Regulatory Compliance. omon88 is required to maintain transaction records, KYC documentation, and certain account activity logs to satisfy its obligations under the terms of its international operating licence and applicable AML/CFT (Counter-Financing of Terrorism) frameworks. Compliance-related processing may involve sharing data with regulatory authorities where legally required.

6.4 Responsible Gaming. Responsible gaming data — including voluntary limit settings, self-exclusion requests, and gaming pattern indicators — is processed to support our player protection obligations and to monitor for signs of problem gambling behaviour. This processing may in limited cases involve special category data (health and wellbeing indicators) and is carried out with heightened care and access controls.

6.5 Platform Improvement and Analytics. Aggregated and, where possible, anonymised technical and gaming activity data is used to analyse platform performance, understand player behaviour patterns, optimise user experience, and inform decisions about game and product offerings. Individual Players are not identified in routine analytics reporting.

6.6 Marketing Communications. With your consent, we may use your contact data to send you promotional offers, bonus notifications, and news about new features on omon88. You may opt out of marketing communications at any time by contacting support or adjusting your account notification preferences. Opting out of marketing does not affect service-related communications (e.g., deposit confirmations, security alerts).

6.7 Legal Claims. In the event of a dispute, chargeback, or legal proceeding, omon88 may process and retain relevant personal data for the purpose of establishing, exercising, or defending legal claims.

7. Data Sharing & Third-Party Disclosure

omon88 does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors and banking partners — BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja, solely to facilitate deposits and withdrawals you initiate.
• Identity verification and KYC providers — third-party services engaged to verify government-issued identification documents and confirm player eligibility.
• Fraud prevention and AML screening services — providers that cross-reference player data against sanctions lists, politically exposed person (PEP) databases, and adverse media sources as required by our compliance obligations.
• Game studio and software providers — Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, NetEnt, and Microgaming may receive session-level technical data necessary to deliver their games via the omon88 platform. These providers do not receive your full identity or financial data.
• IT infrastructure and hosting providers — cloud hosting and server management partners who store and process Platform data on our behalf under strict data processing agreements.
• Legal and regulatory authorities — where required by applicable law, court order, or regulatory request. omon88 will notify affected Players of such disclosures where legally permitted to do so.
• Professional advisors — lawyers, auditors, and accountants engaged by omon88, bound by confidentiality obligations, who may access personal data in the course of providing professional services.

8. International Data Transfers

8.1 Cross-Border Processing. As an internationally operated platform serving players primarily in Indonesia, omon88 may transfer personal data to countries outside Indonesia for the purposes of hosting, processing, and service delivery. Such transfers may involve countries whose data protection frameworks differ from those applicable in Indonesia.

8.2 Transfer Safeguards. Where personal data is transferred internationally, omon88 ensures that appropriate safeguards are in place, including: contractual obligations on receiving parties that mirror the protections afforded under this Policy; use of standard contractual clauses approved by recognised data protection authorities; and selection of service providers operating in jurisdictions with adequate data protection standards.

8.3 Indonesian Player Data. Personal data collected from Players based in Indonesia is treated with the same level of care regardless of where it is processed. omon88 is committed to upholding data protection standards consistent with international best practice for all Indonesian Players, whether located in Jakarta, Surabaya, Bali, Medan, or elsewhere across the archipelago.

9. Data Retention

9.1 Retention Periods. omon88 retains personal data for no longer than is necessary to fulfil the purposes outlined in this Policy or to comply with applicable legal requirements. Standard retention periods are as follows:

• Active account data — retained for the duration of the account relationship plus five (5) years following account closure, to satisfy AML record-keeping requirements.
• Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction, in line with standard financial compliance obligations.
• KYC documentation — retained for five (5) years following the end of the customer relationship, or longer where required by regulatory direction.
• Customer support communications — retained for two (2) years from the date of the last interaction, unless a related legal claim extends this period.
• Marketing consent records — retained for the duration of the consent period plus three (3) years as evidence of lawful marketing activity.
• Responsible gaming records — retained for five (5) years, including self-exclusion and limit-setting history, to ensure our player protection obligations are maintained.

9.2 Post-Retention Deletion. At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual Player.

10. Security Measures

10.1 Technical Safeguards. omon88 implements a comprehensive range of technical security measures to protect personal data from unauthorised access, loss, alteration, or disclosure. These include:

• TLS/SSL encryption for all data transmitted between your device and the omon88 Platform.
• AES-256 encryption for sensitive data fields stored in our databases, including financial account details and identity document data.
• Firewalls, intrusion detection systems, and continuous security monitoring of our server infrastructure.
• Multi-factor authentication (MFA) requirements for administrative access to systems holding personal data.
• Regular third-party penetration testing and vulnerability assessments of the Platform.

10.2 Organisational Safeguards. Access to personal data within omon88 is governed by a strict role-based access control (RBAC) policy. Only employees and contractors with a legitimate operational need are granted access to personal data, and all such personnel are bound by confidentiality obligations. Staff with access to sensitive personal data receive mandatory data protection training.

10.3 Data Breach Response. In the event of a personal data breach that poses a risk to Players' rights and freedoms, omon88 will assess the breach, take immediate containment steps, and notify affected Players and relevant regulatory authorities within the timeframes required by applicable law. Players are advised to contact support immediately if they suspect unauthorised access to their account.

10.4 Player Responsibilities. While omon88 takes every reasonable measure to secure the Platform, you are responsible for maintaining the confidentiality of your account credentials. We strongly recommend using a unique, strong password for your omon88 account and enabling any available two-factor authentication options. Do not share your login details with any third party.

11. Cookies & Tracking Technologies

11.1 What Are Cookies? Cookies are small text files placed on your device by the omon88 Platform when you visit. They allow the Platform to recognise your device across multiple sessions, retain your preferences, and collect analytical information about how you use the site.

11.2 Types of Cookies Used. omon88 uses the following categories of cookies:

• Strictly necessary cookies — essential for the Platform to function. These include session authentication cookies that keep you logged into your account and security cookies that help detect fraud. These cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies — collect anonymous data about how visitors use the Platform (e.g., pages visited, time on page, error messages encountered) to help us improve the user experience. No personally identifying information is collected by these cookies.
• Functional cookies — remember your preferences, such as language settings and display options, to personalise your experience on return visits.
• Marketing cookies — used, with your consent, to deliver relevant promotional content and track the effectiveness of our marketing campaigns. These cookies may be set by omon88 or by trusted marketing partners operating under data processing agreements.

11.3 Managing Cookies. You can manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform, including your ability to log in and place wagers. Instructions for managing cookies in the most widely used browsers (Chrome, Firefox, Safari, Edge) are available from the respective browser's help documentation.

11.4 Other Tracking Technologies. In addition to cookies, omon88 may use web beacons (also known as pixel tags or clear GIFs) in email communications and certain Platform pages to confirm whether emails are opened and to track engagement. These are used solely for internal analytical purposes and are not shared with third parties for their own marketing use.

12. Protection of Minors

12.1 Age Restriction. The omon88 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If you are under 21, you must not attempt to register an account or use the Platform in any capacity.

12.2 Discovery of Minor's Data. If omon88 discovers or is notified that personal data has been collected from a person under 21 years of age — whether through misrepresentation during registration or any other means — we will take immediate steps to delete that data, close the associated account, and void any transactions made. Parents or guardians who believe their child may have accessed the Platform should contact us immediately at [email protected].

12.3 Parental Controls. We encourage parents and guardians of individuals under 21 years of age to use available parental control software to restrict access to online gambling platforms. omon88 supports initiatives that promote safe internet use by minors.

13. Exercising Your Privacy Rights

13.1 How to Submit a Request. To exercise any of the privacy rights described in the "Your Data Rights" section above — including access, rectification, erasure, restriction of processing, data portability, or objection — please submit your request in writing to [email protected] with the subject line "Privacy Rights Request". Please include your full name, registered email address, and a description of the right you wish to exercise.

13.2 Response Timeline. omon88 will acknowledge receipt of your request within five (5) business days and will provide a substantive response within thirty (30) calendar days. In cases of particular complexity, this period may be extended by up to a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

13.3 Identity Verification. For the protection of all Players, omon88 reserves the right to verify your identity before processing any privacy rights request. This is to ensure that personal data is not disclosed to, amended, or deleted at the request of an unauthorised third party.

13.4 Limitations on Rights. Certain privacy rights are not absolute. Where omon88 is required by law to retain specific data (e.g., AML transaction records), or where data is necessary for the establishment, exercise, or defence of legal claims, we may decline to fulfil an erasure or restriction request with respect to that data. We will always explain the basis for any such refusal.

13.5 Withdrawal of Consent. Where processing is based on your consent (primarily for marketing communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

14. Amendments to This Policy

14.1 Right to Update. omon88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. Material changes — those that substantively affect how we collect or use your personal data — will be communicated to registered Players via email or a prominent notice displayed upon next login, with at least seven (7) days' notice prior to the changes taking effect.

14.2 Continued Use as Acknowledgement. Your continued use of the omon88 Platform following the effective date of any revision constitutes your acknowledgement of the updated Policy. If you do not agree to the revised terms, you may close your account and request deletion of your personal data as described in Clause 13.

14.3 Version Archive. The current version of this Privacy Policy is always available at https://omon88.cam/privacy-policy. The "Last Updated" date at the top of this page reflects when the most recent revision was made effective.

15. Contact & Complaints

15.1 Privacy Enquiries. For any questions or concerns about this Privacy Policy or omon88's data practices, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Enquiry" or "Privacy Rights Request"
• Support Hours: 24 hours a day, 7 days a week — primary coverage in WIB (UTC+7), with WITA (UTC+8) and WIT (UTC+9) coverage also available
• Language: Indonesian-speaking agents are available; English support is also provided

15.2 Complaints. If you are dissatisfied with omon88's handling of your personal data or our response to a privacy rights request, you have the right to escalate your complaint through omon88's internal dispute resolution process. Details of this process are available by contacting our support team. Where internal resolution is not satisfactory, you may seek further recourse through any competent supervisory authority or arbitration body available in your jurisdiction.

For further information on your rights as a Player, including responsible gaming tools and self-exclusion options, please visit our Responsible Gaming page. For general questions, our FAQ page provides answers to the most commonly raised topics. You may also review our full Terms & Conditions for the complete Player Agreement.