Privacy Policy —
0y088 Online Gaming

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below. These definitions are consistent with those used in the 0y088 Terms & Conditions.

• "0y088" / "we" / "us" / "our" — the internationally licensed operating entity behind the 0y088 online gaming platform, accessible at https://0y088.net.
• "Member" / "you" / "your" — any natural person who has registered an account on the 0y088 platform, or who accesses or browses the platform without registering.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, including name, email address, mobile number, national identity number, IP address, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "KYC Data" — identity and address verification documents submitted by a Member in connection with the Know Your Customer process, including government-issued identity cards (KTP), passports, driving licences (SIM), and payment method evidence.
• "Platform" — the 0y088 website, mobile site, and any associated applications or services made available under the 0y088 brand.
• "Third-Party Processor" — any external service provider engaged by 0y088 to process Personal Data on 0y088's behalf, subject to a written data processing agreement.
• "Cookie" — a small text file stored on your device by the Platform for functional, analytical, or security purposes.

2.1 — 0y088 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, 0y088 determines the purposes for which and the means by which Personal Data is processed.

2.2 — If you have any questions about how your Personal Data is handled, or if you wish to exercise any of the rights described in Clause 10 of this policy, you may contact the 0y088 Data Protection team via the contact channels listed in Clause 14.

2.3 — Where 0y088 engages Third-Party Processors to carry out specific processing activities — such as payment gateway providers, identity verification services, or live casino software studios — those processors act strictly under 0y088's instruction and are bound by contractual obligations that meet applicable data protection standards.

3.1 — 0y088 collects Personal Data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and in certain cases from third-party verification or payment service providers. The categories of data we collect are described below.

3.2 Registration & Account Data. When you create a 0y088 account, we collect:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address and Indonesian mobile telephone number.
• Username and hashed password (passwords are never stored in plain text).
• Residential address in Indonesia (city, province, postal code).

3.3 KYC & Verification Data. To comply with our verification requirements and to protect against fraud and money laundering, we collect:

• Copies of government-issued identity documents: KTP (Indonesian national identity card), passport, or SIM (driving licence).
• Proof of payment method: bank account statements, screenshots of e-wallet accounts (OVO, DANA, GoPay, ShopeePay, LinkAja), or bank card images confirming account ownership.
• Selfie photographs or video verification may be requested in cases where document authenticity cannot be confirmed remotely.

3.4 Financial & Transaction Data. We record all financial activity associated with your account, including:

• Deposit amounts, dates, times, and payment method identifiers (bank name, partial account number).
• Withdrawal requests, processed amounts, and destination payment method details.
• Bonus credits, wagering activity, and balance movements.
• Transaction references assigned by payment processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja).

3.5 Gameplay & Behavioural Data. To deliver and improve our gaming services, we collect:

• Game session records: game title, wager amounts, outcomes, session duration, and timestamps.
• Sports betting market selections, stake amounts, odds accepted, and settlement outcomes.
• Navigation patterns on the Platform — pages visited, features used, and time spent on each section.
• Responsible gaming tool usage: deposit limit settings, session reminders activated, cooling-off periods applied.

3.6 Technical & Device Data. When you access the Platform, our servers automatically record:

• IP address and approximate geolocation derived from IP (city-level only — not GPS-level).
• Device type, operating system, browser type and version.
• Unique device identifiers where available.
• Access timestamps, referring URL, and session identifiers.

3.7 Communications Data. If you contact 0y088 via live chat, email, or WhatsApp, we retain records of those communications — including the content, timestamps, and the support agent who handled the interaction — for quality assurance, dispute resolution, and regulatory audit purposes.

4.1 — 0y088 processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

5.1 — 0y088 uses the Personal Data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your 0y088 member account, including processing login authentication, balance management, and account preference settings.
• Payment Processing: To facilitate deposits and withdrawals via Indonesian bank transfers (BCA, BRI, BNI, Mandiri, and others) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), verify payment ownership, and maintain an accurate transaction ledger in IDR.
• Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years, confirm that you are who you claim to be, and satisfy our anti-money-laundering obligations before processing withdrawal requests.
• Service Delivery: To provide access to all games and betting markets on the Platform, including slots, live casino, sports betting, and instant-win products.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat, email, and WhatsApp in both English and Indonesian.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, abuse of bonuses, money laundering, multiple account registration, and other security threats to the Platform and its Members.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to facilitate your use of responsible gaming tools, and to intervene proactively where our systems identify at-risk activity.
• Marketing Communications: To send you promotional offers, bonus notifications, and event announcements that we believe are relevant to your activity on the Platform — but only where you have provided consent to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse aggregated and anonymised usage data in order to improve the design, performance, and content offering of the Platform.
• Legal & Regulatory Compliance: To maintain records required by applicable laws and regulations and to respond to lawful requests from competent authorities.

6.1 — 0y088 does not sell, rent, or commercially trade your Personal Data to any third party under any circumstances. We share your data only in the limited circumstances described in this clause.

6.2 Service Providers & Third-Party Processors. We engage the following categories of third-party processors who access Personal Data solely to perform services on our behalf:

• Payment processors: Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja) receive transaction data necessary to execute deposits and withdrawals.
• Identity verification providers: Specialist KYC technology partners who assist in document authentication and age verification, operating under strict data processing agreements.
• Game software studios: Licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session data to deliver their game products. These studios operate their own privacy frameworks as independent data controllers in respect of their game environments.
• Cloud infrastructure providers: Secure hosting and data storage providers operating under contractual data protection obligations.
• Fraud detection services: Technology platforms that assist 0y088 in identifying suspicious activity patterns, receiving anonymised or pseudonymised behavioural data only.

6.3 Legal Disclosures. 0y088 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by a lawful order, warrant, or legal obligation. In such cases, 0y088 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify the affected Member of such a request.

6.4 Business Transfers. In the event that 0y088 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, Member data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being assumed by the acquiring party.

6.5 — All Third-Party Processors engaged by 0y088 are contractually required to process Personal Data only as instructed by 0y088, to maintain appropriate technical and organisational security measures, and to refrain from using the data for any purpose beyond the scope of their engagement.

7.1 — 0y088 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following indicative retention periods apply:

7.2 — Upon expiry of the applicable retention period, Personal Data is either securely deleted or anonymised in a manner that renders re-identification impossible. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8.1 — 0y088 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction.

8.2 Technical Controls. Our technical security measures include:

• 256-bit TLS Encryption: All data transmitted between your device and the 0y088 Platform is encrypted using Transport Layer Security (TLS 1.2 or higher), the same standard used by leading international financial institutions.
• Encrypted Data Storage: Sensitive data fields — including passwords, payment credentials, and KYC document contents — are encrypted at rest using industry-standard encryption algorithms.
• Password Hashing: Member passwords are never stored in plain text. We use strong one-way hashing with salting to ensure that even in the event of a data breach, your password cannot be recovered from stored data.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts for an additional layer of login security.
• Firewalls and Intrusion Detection: Our server infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems (IDS/IPS).
• Regular Security Audits: 0y088 commissions periodic independent security assessments and penetration tests of the Platform to identify and remediate vulnerabilities before they can be exploited.

8.3 Organisational Controls. Access to Member Personal Data within 0y088 is restricted on a strict need-to-know basis. All staff with access to Personal Data undergo data protection training and are bound by confidentiality obligations. Access logs are maintained and reviewed regularly.

8.4 — Despite these measures, no system connected to the internet can be guaranteed to be completely immune from security incidents. In the event of a data breach that is likely to result in a risk to your rights, 0y088 will notify affected Members without undue delay and will take all reasonable steps to contain and remediate the incident.

8.5 Your Responsibilities. You are responsible for maintaining the confidentiality of your own login credentials. Do not share your 0y088 username or password with anyone. If you believe your account has been compromised, contact our support team immediately via live chat at [email protected].

9.1 — The 0y088 Platform uses cookies and similar tracking technologies (including local storage and session storage) to deliver a functional, personalised, and secure experience. This clause explains what cookies we use and why.

9.2 Categories of Cookies.

9.3 — You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that disabling essential cookies will impair or prevent access to core Platform functionality.

9.4 — 0y088 does not use fingerprinting technology to track Members across third-party websites. Our tracking is limited to activity within the 0y088 Platform itself.

10.1 — As a Member of 0y088, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team using the details in Clause 14.

• Right of Access: You have the right to request a copy of the Personal Data that 0y088 holds about you, together with information about how it is processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update certain account details directly in your account settings without contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. Note that certain data must be retained by law (e.g., financial records, KYC documents, self-exclusion records) and cannot be erased.
• Right to Restrict Processing: You may request that 0y088 temporarily restrict the processing of your Personal Data in specific circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your Personal Data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, subject to 0y088's ability to demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., receipt of marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11.1 — The 0y088 Platform is strictly intended for adults aged 21 and above. 21+ We do not knowingly collect Personal Data from individuals under 21 years of age. Age verification is a mandatory step in the registration and KYC process.

11.2 — If 0y088 becomes aware that Personal Data has been collected from an individual who is under 21 years of age, we will take immediate steps to suspend the relevant account, void all associated wagers and bonuses, return any real-money balance to the verified payment method where possible, and permanently delete all Personal Data relating to that individual from our active systems, subject only to any legal obligation to retain evidence of the underage registration for regulatory reporting purposes.

11.3 — If you are a parent or guardian and believe that a minor in your care has registered on 0y088, please contact us immediately at [email protected]. We will investigate and act promptly.

12.1 — The 0y088 Platform may contain links to or integrations with third-party services — primarily game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) whose game environments are embedded within the Platform interface. These studios operate as independent data controllers in respect of data generated within their own game sessions.

12.2 — 0y088 is not responsible for the privacy practices of third-party game studios or any other external services. We encourage you to review the privacy policies of any third-party service with which you interact through the Platform.

12.3 — Payment processing interactions with Indonesian banks and e-wallet providers (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) are governed by those providers' own terms of service and privacy policies. 0y088 shares only the minimum data necessary to execute your requested transaction.

13.1 — 0y088 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. The updated policy will be published on this page with a revised "Last Updated" date.

13.2 — Where changes are material — meaning they significantly affect how we use your Personal Data or your rights in relation to it — 0y088 will provide at least seven (7) days' advance notice by email to all registered Members before the revised policy takes effect.

13.3 — Your continued use of the 0y088 Platform after the effective date of any update constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the revised policy, you must stop using the Platform and request account closure before the update takes effect.

14.1 — For any questions, concerns, or requests relating to this Privacy Policy or to your Personal Data held by 0y088, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform. Typical response time under 2 minutes.
• Email: [email protected] — for formal data subject requests, please include "Privacy Request" in the subject line. We aim to respond within 2 Business Days.
• WhatsApp: +62 811 0y088 — available 24/7 for support queries.

14.2 — Customer service is available 24 hours a day, 7 days a week (WIB, UTC+7). Both English and Indonesian are supported by our agents.

14.3 — If you are not satisfied with our response to a privacy-related complaint, you have the right to escalate the matter to the appropriate data protection authority or regulatory body in your jurisdiction.