Privacy Policy

This Privacy Policy ("Policy") is issued by olx23 (referred to throughout as "olx23", "we", "us", or "our") and applies to all personal data collected from individuals ("you", "your", "User") who access, register on, or interact with the olx23 online betting and gaming platform, accessible at https://olx23.bio and any associated subdomains, mobile interfaces, or API endpoints operated by olx23.

This Policy governs data collected from Users located in Indonesia and from any other jurisdiction from which a User chooses to access the platform. By registering an account on olx23, you acknowledge that you have read, understood, and agree to the collection and use of your personal data as described in this Policy.

This Privacy Policy should be read together with the olx23 Terms & Conditions and Responsible Gaming policy, both of which form part of the overall legal framework governing your use of the platform.

For the purposes of this Policy, olx23 acts as the data controller in respect of personal data processed directly on the olx23 platform. As data controller, olx23 determines the purposes for which and the means by which your personal data is processed.

Where olx23 engages third-party service providers to process personal data on its behalf — for example, KYC verification providers, payment gateway operators, or cloud infrastructure providers — those providers act as data processors and are bound by contractual obligations to process your data only in accordance with olx23's documented instructions and applicable data protection standards.

The primary contact address for all data-protection matters at olx23 is: [email protected]

olx23 collects the following categories of personal data, depending on how you interact with the platform:

olx23 does not intentionally collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions). If you voluntarily disclose such information in a support interaction, it will be used solely to handle your query and will not be retained beyond the resolution of that interaction.

olx23 collects personal data through the following channels:

• Direct submission: Data you provide voluntarily when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated collection: Technical and behavioural data collected automatically via server logs, cookies, pixel tags, and similar technologies as you navigate the olx23 platform. See Clause 10 for full details on cookies.
• Third-party sources: Where permitted by applicable law, olx23 may receive identity verification confirmations from licensed KYC service providers, fraud-risk scores from fraud-prevention partners, and payment status confirmations from our payment processing partners. olx23 does not purchase data lists from marketing data brokers.
• Device and network signals: Information about the device, browser, IP address, and network used to access the platform, collected to support fraud detection, geolocation compliance checks, and security monitoring.

olx23 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil our obligations under the olx23 Terms & Conditions — including account creation, bet settlement, processing deposits and withdrawals through BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and USDT, and customer support.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) obligations under internationally recognised compliance frameworks.
• Legitimate interests: Processing necessary for olx23's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, internal analytics, and service improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications (promotional emails, bonus notifications, seasonal campaign alerts related to events such as Idul Fitri, Ramadhan, or Indonesian Independence Day). You may withdraw marketing consent at any time via your account settings or by contacting support.

olx23 uses your personal data for the following purposes:

1. Account management: Creating, maintaining, and securing your olx23 account; verifying your identity and age (minimum 21 years) at registration and during KYC review; enabling login and two-factor authentication.
2. Transaction processing: Processing deposits from and withdrawals to your verified Indonesian bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP), e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), or USDT wallet; reconciling transaction records.
3. Betting and gaming services: Delivering sportsbook, live casino, slot, virtual sports, sabung ayam (online cockfighting), and togel (Indonesia's traditional numbers lottery) products; settling bets; applying bonus and promotion rules.
4. Fraud and security: Detecting and preventing unauthorised account access, duplicate account registration, payment fraud, money laundering, match-fixing, and bonus abuse.
5. Responsible gaming: Monitoring betting patterns to identify potential problem gambling behaviours; administering self-exclusion requests, deposit limits, and cooling-off periods.
6. Customer support: Handling enquiries, resolving disputes, and responding to complaints submitted to [email protected].
7. Legal and regulatory compliance: Fulfilling record-keeping obligations; responding to lawful requests from competent authorities; maintaining audit trails.
8. Marketing (with consent): Sending promotional notifications, bonus offers, and platform news to Users who have opted in. Marketing communications are sent via email to the registered address and can be unsubscribed at any time.
9. Platform improvement: Conducting aggregated, anonymised analytics to understand how Users navigate the platform and improve the user experience across devices including mobile browsers commonly used in Jakarta, Surabaya, Bandung, Bali, and other Indonesian cities.

olx23 may disclose your personal data to the following categories of recipients:

• KYC and identity verification providers: Licensed third-party services that assist olx23 in verifying your identity, age, and address against authoritative data sources. These providers process identity data solely under olx23's instructions and may not use it for their own purposes.
• Payment service providers: Banks, e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), card networks (Visa, Mastercard), and blockchain network partners (for USDT) involved in processing your financial transactions. Financial data is shared only to the extent necessary to complete the relevant transaction.
• Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive the minimum technical data necessary to deliver their game content within the olx23 platform environment (typically a session token and bet amount; not your full identity record).
• Fraud prevention and security services: Third-party services that provide IP reputation scoring, device fingerprinting, and transaction risk assessment to protect olx23 and its Users from fraud and financial crime.
• Cloud infrastructure and hosting providers: Providers of the servers, databases, and content delivery networks on which the olx23 platform operates. These providers act as data processors under contractual data-processing agreements.
• Professional advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and who access personal data only where strictly necessary to provide their services to olx23.
• Law enforcement and regulatory authorities: Where olx23 is required by applicable law, court order, or lawful regulatory instruction to disclose personal data, we will comply with such requirements. Where permitted, olx23 will notify the affected User of such a request prior to disclosure.

olx23 operates internationally and may transfer your personal data to countries outside Indonesia for processing by our service providers (including cloud hosting infrastructure, KYC verification platforms, and game studio partners). Such transfers are conducted in compliance with applicable data protection requirements and are subject to appropriate safeguards, including:

• Data processing agreements incorporating internationally recognised standard contractual clauses that contractually bind the recipient to protect your data to a standard equivalent to that maintained by olx23.
• Transfers to service providers in jurisdictions that maintain data protection regimes recognised as providing an adequate level of protection for personal data.
• Where neither of the above applies, olx23 will obtain your explicit consent before transferring your data to a destination that does not offer adequate protection, or will implement alternative appropriate safeguards.

Regardless of where your data is processed, olx23 remains responsible for ensuring that it is handled in accordance with this Privacy Policy and applicable data protection standards.

olx23 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or compliance obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

olx23 uses cookies and similar tracking technologies to provide a secure, personalised, and fully functional platform experience. A "cookie" is a small text file stored on your device by your browser. The following categories of cookies are used on the olx23 platform:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your login state, security tokens that protect against cross-site request forgery (CSRF) attacks, and load-balancing cookies. These cookies cannot be disabled without disrupting platform functionality.
• Functional cookies: Enable personalisation features such as your preferred language, odds format (Asian handicap / voor bola or European decimal), and remembered account settings. Disabling these cookies may reduce the convenience of your experience.
• Analytics cookies: Collect aggregated, anonymised data about how Users navigate the platform — including which pages are most visited, session duration, and device types. This data is used solely to improve platform design and performance. olx23 uses first-party analytics only and does not deploy Google Analytics, Meta Pixel, or any other third-party advertising analytics tool.
• Security and fraud-detection cookies: Support our real-time fraud monitoring systems by associating a device fingerprint with a session, enabling detection of account takeover attempts and automated bot traffic.

olx23 does not use advertising cookies, retargeting pixels, or any cookie that enables third-party advertisers to track your browsing activity across other websites.

You can manage or delete cookies through your browser settings at any time. Please note that deleting strictly necessary cookies will require you to log in again on your next visit. Most modern browsers (Chrome, Firefox, Safari, and Samsung Internet — the most widely used browser among Indonesian mobile users) provide straightforward cookie management interfaces accessible through their settings menus.

The security measures implemented by olx23 include, but are not limited to:

• Transport encryption: All data transmitted between your device and olx23 servers is encrypted using TLS 1.2 or higher, enforced via HTTPS across all platform endpoints. HTTP connections are automatically redirected to HTTPS.
• Data-at-rest encryption: Sensitive data fields — including KTP scans, financial account details, and hashed passwords — are encrypted at rest using AES-256 encryption in our database layer.
• Password security: User passwords are never stored in plaintext. olx23 uses a salted cryptographic hashing algorithm (bcrypt or equivalent) so that even in the event of a database breach, raw passwords are not exposed.
• Access controls: Access to production systems containing personal data is restricted to authorised olx23 personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA) for all administrative accounts.
• Intrusion detection and monitoring: olx23 operates 24/7 monitoring systems that detect and alert on anomalous access patterns, unauthorised login attempts, and potential data exfiltration events.
• Regular security testing: olx23 conducts periodic vulnerability assessments and penetration testing of its platform infrastructure. Critical vulnerabilities are remediated on a priority basis.
• Incident response: In the event of a confirmed personal data breach that is likely to result in a risk to affected Users, olx23 will take immediate steps to contain the breach, assess its scope, notify affected Users without undue delay, and implement remediation measures.

While olx23 maintains robust security measures, no online platform can guarantee absolute security. You play an important role in your own account security by using a strong, unique password and not sharing your login credentials with any third party.

As a User of the olx23 platform, you hold the following rights in respect of your personal data. You may exercise any of these rights at any time by contacting our support team at [email protected]. olx23 will respond to all rights requests within 30 days of receipt.