Privacy Policy — olk234

Clause 1 Data Controller

For the purposes of applicable data protection law, olk234 ("the Platform", "we", "us", "our") acts as the data controller in respect of all personal data collected from Members and visitors in connection with the operation of https://olk234.net.

As data controller, olk234 determines the purposes and means by which personal data is processed. Where we engage third-party service providers to process data on our behalf — such as payment processors, KYC verification specialists, or cloud infrastructure providers — those parties act as data processors and are bound by written data processing agreements that prohibit any use of your data beyond the specific service they are engaged to provide.

All enquiries, data rights requests, and privacy-related complaints should be directed to our designated data protection contact at [email protected], clearly marked "Privacy — Data Rights Request" in the subject line.

Clause 2 Personal Data We Collect

olk234 collects the following categories of personal data in the course of operating the Platform and providing services to Members across Indonesia:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify the 21+ age requirement).
• Indonesian residential address, including city (e.g., Jakarta, Surabaya, Bandung, Bali, Medan) and postal code.
• Email address registered to your Account.
• Mobile phone number (if provided, used for account security alerts and optional 2FA).

2.2 Identity Verification (KYC) Documents

• Scanned or photographed copies of your Indonesian National Identity Card (KTP), passport, or other government-issued photo ID.
• Proof of address documents such as bank statements, utility bills, or official government correspondence issued within the past three months.
• Payment method verification documents where required to confirm account ownership of the bank account or e-wallet used for transactions.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts (in IDR), timestamps, and associated payment methods (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja).
• Bank account numbers or e-wallet identifiers associated with your payment methods (stored in tokenised form — we do not store full bank credentials).
• Account balance history and bonus fund records.

2.4 Gaming & Betting Activity Data

• Complete record of all bets placed, games played, and outcomes, including game type, stake amounts, and session durations across all Platform products including slots, live casino, sportsbook, and togel (Indonesia's traditional numbers lottery).
• Responsible gaming settings you have configured, including deposit limits, cooling-off periods, and self-exclusion status.
• Bonus and promotional offer participation history.

2.5 Technical & Device Data

• IP address at the time of registration and subsequent logins.
• Browser type and version, operating system, and device type (desktop, tablet, or mobile).
• Session timestamps, login history, and page navigation data collected via cookies and analytics tools (see Clause 5).
• Geolocation data derived from IP address, used to enforce jurisdiction access controls and detect anomalous login behaviour.

2.6 Communications Data

• Records of your correspondence with olk234 customer support, including live chat transcripts and email exchanges, retained for quality assurance and dispute resolution purposes.
• Responses to optional surveys or feedback requests.

Clause 3 How We Collect Your Data

olk234 collects personal data through the following channels:

• Direct Provision: Data you provide directly when registering an Account on the olk234 Login page, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and device data collected automatically when you visit or use the Platform, via cookies, server logs, and analytics tools (see Clause 5 for full details).
• Payment Processors: Confirmation and reference data returned by our payment processing partners when you complete a deposit or withdrawal via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or other supported channels.
• KYC Verification Partners: Identity verification outcomes and fraud-risk scores returned by our contracted KYC service providers after you submit your identity documents.
• Game Providers: Session and outcome data passed from third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) to olk234's Platform via secure API connections.

Clause 4 Purpose & Legal Basis for Processing

The table below summarises the primary purposes for which olk234 processes your personal data, the category of data used for each purpose, and the legal basis relied upon:

Clause 5 Cookies & Tracking Technologies

olk234 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate the Platform effectively, maintain your logged-in session, and understand how Members interact with the site. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in across pages and security tokens that protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: Used to collect aggregate, anonymised data about how visitors navigate the Platform — pages visited, time spent, and entry/exit points. This data helps olk234 improve the user experience for Members across Jakarta, Surabaya, Bali, and the rest of Indonesia. Analytics cookies are set only where you have provided consent.
• Functional Cookies: Remember your preferences — such as your preferred deposit method or display language — so you do not need to re-enter them on each visit. These are active for the duration of your browser session or up to 30 days if you select "Remember Me" at login.
• Marketing & Attribution Cookies: Used, where consent has been given, to attribute your visit to a particular marketing channel and to deliver personalised promotional content relevant to games and sports markets you have previously browsed or bet on.

You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in or use key Platform features. Withdrawing consent for analytics or marketing cookies will not affect the validity of any processing already carried out prior to withdrawal.

Clause 6 Sharing Your Personal Data

olk234 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing use. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment Processors: We share the minimum data necessary (name, account reference, transaction amount in IDR) with our payment processing partners — including banks such as BCA, BRI, BNI, and Mandiri, and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja — solely to execute your deposit and withdrawal instructions.
• KYC & Identity Verification Providers: Identity documents and biometric data submitted during the KYC process are shared with our contracted identity verification partners, who are prohibited from using that data for any purpose other than verifying your identity on olk234's behalf.
• Game Studios: Session identifiers and stake/outcome data are exchanged with third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) via encrypted API connections in order to serve you the games and return your winnings correctly. These providers do not receive your full personal profile.
• Cloud Infrastructure & Technology Providers: olk234 uses internationally reputable cloud hosting and cybersecurity service providers. These partners process data strictly as processors under contractual data processing agreements and have no independent access rights to your personal information.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies where we are required to do so by law, court order, or as part of our obligations under our international gaming licence — for example, in connection with an AML investigation or a match-fixing report.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of olk234's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer via the email address registered to your Account prior to the transfer taking effect, and the incoming entity will be bound by this Privacy Policy.

Clause 7 International Data Transfers

olk234 operates as an internationally licensed platform. As a result, certain personal data may be stored on or transferred to servers located outside Indonesia — for example, in the jurisdiction in which our licence is held or where our cloud infrastructure provider maintains data centres.

Whenever personal data is transferred internationally, olk234 ensures that at least one of the following safeguards is in place:

• The receiving country has been assessed as providing an adequate level of data protection comparable to internationally recognised standards.
• The transfer is governed by a contractual data processing agreement incorporating standard data protection clauses that impose data protection obligations on the recipient equivalent to those in this Privacy Policy.
• The transfer is necessary to perform the contract between olk234 and the Member (for example, routing a payment instruction through an international correspondent bank).

Clause 8 Data Retention

olk234 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. The following general retention periods apply:

Once a retention period expires, personal data is securely deleted or irreversibly anonymised in accordance with olk234's internal data destruction procedures.

Clause 9 Security Measures

olk234 implements a comprehensive, multi-layered security programme to protect Member personal data against unauthorised access, disclosure, alteration, or destruction. Key security controls include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and the olk234 Platform — including the olk234 Login page, cashier, and game interfaces — is encrypted using industry-standard 256-bit TLS protocols. Look for the padlock icon in your browser address bar to confirm the secure connection is active.
• Encrypted Data Storage: Sensitive personal data, including KYC documents and payment credentials, is stored in encrypted form on access-controlled servers. Encryption keys are managed separately from the data they protect.
• Role-Based Access Controls: Internal access to Member personal data is restricted on a strict need-to-know basis. Every employee and contractor with data access undergoes background screening and is bound by a confidentiality agreement.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their Accounts via the security settings panel. 2FA adds a critical additional layer of protection beyond the standard username and password combination.
• Intrusion Detection & Monitoring: olk234 operates 24/7 network monitoring and intrusion detection systems. Suspicious activity — including anomalous login attempts from unfamiliar IP addresses or unusual transaction patterns — triggers automated alerts and immediate investigation.
• Regular Security Audits: The Platform and its underlying infrastructure undergo periodic penetration testing and security audits conducted by independent cybersecurity specialists to identify and remediate vulnerabilities proactively.

Clause 10 Your Data Rights

As a Member of olk234, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact [email protected] with the subject line "Privacy — Data Rights Request". We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data olk234 holds about you, together with information about the purposes for which it is processed and the third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For simple profile updates (such as your email address or Indonesian residential address), you can make corrections directly from your Account settings panel.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of personal data we hold about you where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interest. Note that certain data may be retained in anonymised form, or where deletion conflicts with our legal retention obligations (see Clause 8).
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of your data or have objected to processing pending verification of our legitimate grounds — you may request that we restrict active processing of your data while the matter is reviewed.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to olk234 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another service provider where technically feasible.
• Right to Object: Where olk234 processes your personal data on the basis of legitimate interest, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Clause 11 Protection of Minors

The olk234 Platform is strictly for adults aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. Age verification (21+) is a mandatory step in the KYC process and is enforced before any withdrawal can be processed.

If olk234 becomes aware that personal data has been collected from an individual under the age of 21, the relevant Account will be immediately suspended, all associated data will be securely deleted (except where retention is required by law for AML or fraud-reporting purposes), and any deposits received will be returned to the originating payment method following appropriate investigation.

Clause 12 Third-Party Links & Services

The olk234 Platform may contain references to third-party services, game studios, or payment providers. This Privacy Policy applies exclusively to data processed by olk234 in connection with the Platform at https://olk234.net. It does not extend to any third-party websites, applications, or services, even where a reference to such a service appears on the Platform.

olk234 strongly recommends that you review the privacy policies of any third-party service providers — including your bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) — before submitting personal data to those services. olk234 accepts no responsibility or liability for the privacy practices of any third party.

Clause 13 Marketing Communications

olk234 may send you promotional communications — including bonus offers, seasonal promotions tied to Indonesian holidays such as Idul Fitri, Ramadhan, and Indonesian Independence Day (17 August), new game announcements, and sportsbook market highlights for events such as BRI Liga 1, the EPL, Champions League, and Piala AFF — only where you have given explicit consent to receive such communications.

You may withdraw your consent and unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link included in the footer of every promotional email we send.
• Updating your communication preferences directly in the notifications section of your Account settings panel.
• Contacting our support team via live chat or at [email protected] and requesting removal from all marketing lists.

Please allow up to 5 business days for your opt-out preference to be fully reflected across all our communication channels. Note that withdrawing consent for marketing communications will not affect your ability to use the Platform or receive essential transactional messages (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent on the basis of contract performance and cannot be disabled while your Account is active.

Clause 14 Amendments to This Privacy Policy

olk234 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services offered on the Platform. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where an amendment is material — meaning it significantly affects your rights or the way we use your personal data — olk234 will notify you by email to the address registered to your Account at least 14 days before the amendment takes effect. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically. The current version will always be accessible at https://olk234.net/privacy-policy. Archived versions of prior Privacy Policy documents are available on request by contacting [email protected].

Clause 15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about the way olk234 has handled your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related concerns fairly, transparently, and promptly.

• Email: [email protected] — use the subject line "Privacy — Data Rights Request" or "Privacy — Complaint" as appropriate. Written responses to formal complaints will be provided within 30 calendar days.
• Live Chat: Available 24/7 directly on the Platform, including during Ramadhan and all Indonesian public holidays. Live chat is the fastest channel for general privacy queries and urgent data security concerns.
• Platform: https://olk234.net — all support resources, responsible gaming tools, and account management options are accessible from the Platform at any time.