octa Casino & Sportsbook Data Care

This page describes what we collect when you use octa and how we keep that data protected. Our approach is straightforward: we collect only what we need to verify your identity, process your payments, and deliver our service securely. We don't sell your data to advertisers, we don't use it to build profiles on you for third-party marketing, and we don't share it outside our payment processors and fraud-detection partners without your consent.

We process your information according to data-protection laws in the jurisdictions where we operate. If you have questions about how we handle your data, or if you want to request access, correction, or deletion, our support team can help.

Read on to understand what data we collect, how we use it, and what rights you have over it.

What Data We Collect on octa

We collect data in three categories:

• Identity and account data: Your full name, date of birth, email address, mobile number, and ID number (Kartu Tanda Penduduk, passport, or other government ID). We collect this during account registration and KYC verification.
• Payment data: Information about your deposits and withdrawals — the amount, date, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), and Virtual Account reference numbers. We don't store your bank account number or wallet PIN.
• Activity data: Your login history, game sessions, bets placed, and gameplay timestamps. We track this to detect fraud, settle disputes, and understand account usage patterns.

We also collect technical data — your IP address, device type, browser version, and operating system. We use this to prevent unauthorized access, diagnose technical issues, and optimize octa's mobile performance on different devices.

How We Use Your Data on octa

We use your data for:

• Account verification: We verify your identity and cross-check your KYC data against payment methods to prevent fraud and money laundering.
• Payment processing: We share your deposit and withdrawal information with our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and your bank) to complete transactions.
• Game settlement: We track your bets and winnings to settle games fairly and maintain an accurate balance in your octa account.
• Fraud detection: We analyze login patterns, bet sizes, and withdrawal requests to spot suspicious activity and protect your account from unauthorized access.
• Customer support: We use your contact information to respond to your inquiries, confirm transactions, and notify you of account changes.
• Legal compliance: We may share data with regulatory authorities if required by law (for example, if we're asked to verify your identity in connection with a money-laundering investigation).

We don't use your data for marketing unless you opt in. We don't build predictive profiles on you, and we don't sell your information to third parties.

Third-Party Data Processors

We share your data with trusted partners who help us deliver octa's service:

• Payment providers: online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and banks (mobile banking, local payment, online payment, e-wallet) receive your name, account reference, and transaction amount to process deposits and withdrawals.
• Fraud and identity verification services: We use third-party fraud-detection tools to verify your KYC data and monitor for suspicious activity. These services see your name, ID number, and transaction history but don't retain data longer than needed.
• Customer support platforms: If you contact us via chat or email, your inquiry and response are stored on secure support software. Only our support team can access these conversations.

All third-party processors sign data-protection agreements with octa and are required to keep your data confidential. We don't allow them to use your information for their own marketing or to share it with other parties.

Your data is used only for the purposes stated in this policy — to verify you, process payments, and deliver a secure platform.

Data Location and Security on octa

Our servers may be located outside Indonesia. When you deposit or withdraw via mobile bankinglocal paymentonline paymente-walletmobile bankingor local paymentyour transaction data travels across international networks. This is necessary for payment processing and is a standard feature of online banking.

We secure your data using encryption (TLS 1.2 or higher) during transmission and at rest. Access to your account information is restricted to authorized octa staff who have signed confidentiality agreements. We don't log into your account without your explicit request, and we never access your balance or settings without your knowledge.

If we detect a data breach or security incident, we'll notify you as soon as possible via your registered email or phone number. We also notify relevant regulatory authorities where required by law.

Your Rights Over Your Data

You have the right to:

• Access: Request a copy of all data we hold on you. We'll provide this within a reasonable timeframe at no cost.
• Correction: Ask us to correct inaccurate or incomplete data (for example, if your address is wrong in our records).
• Deletion: Request that we delete your data, subject to legal and operational constraints (for example, we may retain transaction records for tax compliance).
• Withdraw consent: If you've opted into marketing communications, you can opt out anytime by contacting us or using the unsubscribe link in our emails.

To exercise any of these rights, contact our support team via our help centre with a clear description of your request. We'll respond within 30 days or as required by applicable law.

Cookies and Tracking on octa

Our octa platform uses cookies to maintain your login session and remember your settings (such as your preferred language or bet-slip display format). These are functional cookies necessary for the platform to work — without them, you'd need to log in every time you navigate between pages.

We don't use tracking cookies to follow your behaviour across third-party websites. We don't integrate third-party analytics or advertising trackers into octa. If you disable cookies in your browser, some octa features may not work correctly, but you can still log in and place bets.

Our mobile apps (Android APK and iOS browser version) don't require cookies to function, so you can use octa on your phone without cookie-related concerns.

How Long We Keep Your Data

We retain different types of data for different periods:

• Account data (name, ID, contact): We keep this for the lifetime of your account plus 7 years after you close it, to comply with anti-money-laundering regulations.
• Transaction records: We retain deposits, withdrawals, and game history for 7 years for tax and dispute-resolution purposes.
• Technical logs (IP address, login history): We keep these for 1-2 years and then delete them unless there's an ongoing investigation or dispute.
• Support conversations: We keep chat and email records for 2 years unless you request deletion sooner.

If you request account deletion and have no outstanding disputes or regulatory holds, we'll delete personal data (but retain aggregated, anonymized transaction records for auditing). If there's an active dispute or investigation, we may retain relevant data longer.

International Data Transfers

Because our servers and some payment processors are located outside Indonesia, your data may be transferred internationally. When this happens, we ensure the receiving party has adequate data-protection measures in place — either through contractual safeguards or because they operate in a jurisdiction with equivalent privacy laws.

By creating an octa account and using our service, you consent to these international transfers, which are necessary for payment processing and account management.

Contact Us About Privacy

If you have questions about our privacy practices, want to exercise your data rights, or want to report a privacy concern, contact our support team via our help centre. We offer English-language assistance and aim to respond to privacy inquiries within 10 business days.

You can also contact your local data-protection authority if you believe we've violated your privacy rights. In Indonesia, this is the Office of the Deputy for Technology and Information Security.

Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we'll notify you via your registered email address and ask for your consent if required by law.

Your continued use of octa after we post changes means you accept the updated policy. If you disagree with any changes, you can close your account and request data deletion (subject to retention requirements outlined above).