oke555 Privacy Policy

§ 01 Definitions

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a specific natural person, including name, identification number, contact details, financial account information, and device identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether automated or manual.
• "Data Subject" — The individual whose Personal Data is being processed — in the context of oke555, this refers to registered players, account applicants, and visitors to the Platform.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. oke555 is the Data Controller for all Personal Data collected through the Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of oke555 under a written data processing agreement, such as a payment gateway or KYC verification provider.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data for a stated purpose.
• "Cookie" — A small text file placed on a user's device by a website to remember preferences, session states, or tracking identifiers across visits.

§ 02 Data Controller

oke555 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, oke555 is responsible for ensuring that Personal Data is processed lawfully, fairly, and transparently, and in accordance with this Policy.

For all data protection enquiries, please contact our designated Data Protection contact using the details in Section 15 of this Policy. We are committed to responding to all data-related inquiries within 30 calendar days of receipt.

§ 03 Personal Data We Collect

oke555 collects Personal Data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third parties such as payment processors and KYC verification partners.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

§ 04 Legal Basis for Processing

oke555 processes Personal Data only where a valid legal basis exists. The primary legal bases relied upon are:

• Contractual Necessity: Processing is required to fulfill the contract between oke555 and the player — including account management, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing is necessary to comply with applicable legal requirements, including anti-money laundering (AML) obligations, identity verification mandates, and record-keeping requirements imposed by our international licensing authority.
• Legitimate Interests: Processing is necessary for oke555's legitimate business interests, including fraud detection and prevention, platform security monitoring, and service improvement analytics — provided these interests are not overridden by the Data Subject's rights.
• Consent: For non-essential data processing activities, such as sending promotional emails or push notifications, oke555 relies on your freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

§ 05 How We Use Your Data

oke555 uses Personal Data for the following purposes, each linked to a specific legal basis as described in Section 4:

• Account Management: Creating and maintaining your player account, verifying your identity, processing login requests, and managing account security settings. (Contractual Necessity)
• Payment Processing: Facilitating deposits and withdrawals via Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja) in Indonesian Rupiah (IDR). (Contractual Necessity)
• KYC & Compliance: Verifying player identity and age (21+), conducting AML screening, and meeting international licensing compliance requirements. (Legal Obligation)
• Fraud Prevention & Security: Detecting and investigating suspicious activity, preventing multi-accounting, and protecting the integrity of the Platform. (Legitimate Interests)
• Customer Support: Responding to inquiries, resolving disputes, and maintaining records of support interactions for quality assurance. (Contractual Necessity / Legitimate Interests)
• Responsible Gaming Monitoring: Identifying indicators of problem gambling behavior and applying account restrictions or support interventions in accordance with our Responsible Gaming policy. (Legal Obl igation / Legitimate Interests)
• Platform Improvement: Analyzing aggregated usage data to improve game selection, interface design, and overall player experience. (Legitimate Interests)
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign updates where you have provided consent or where permitted under applicable marketing regulations. (Consent)

§ 06 Data Sharing & Disclosure

oke555 does not sell or rent Personal Data to third parties. We may share Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

6.1 Authorized Third-Party Processors

• Payment Processors: Indonesian banks and e-wallet platforms (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data necessary to process deposits and withdrawals.
• KYC Verification Partners: Specialized identity verification providers receive document images and identity data solely to complete the KYC process. These partners operate under strict data processing agreements.
• Technology Providers: Hosting, infrastructure, and security vendors may process certain data as part of platform delivery. All such vendors are contractually bound to process data only on oke555's documented instructions.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymized session identifiers necessary for game delivery. They do not receive identifiable player data beyond what is required for game integrity and RNG certification.

6.2 Legal & Regulatory Disclosure

oke555 may disclose Personal Data to government authorities, law enforcement agencies, or regulatory bodies where required by a valid legal order, court order, or applicable law. We will notify affected players of such disclosures wherever legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a material part of oke555's business assets, Personal Data held by oke555 may be transferred to the acquiring entity. Players will be notified in advance of any such transfer and given the opportunity to close their accounts if they do not consent to the new data controller's terms.

§ 07 Cookies & Tracking Technologies

oke555 uses cookies and similar technologies to operate the Platform effectively, maintain session security, and analyze usage patterns. The table below summarizes the categories of cookies used:

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not impair core Platform functionality, including account login, deposits, and game play. Note that disabling strictly necessary cookies may prevent the Platform from operating correctly.

§ 08 Data Retention

oke555 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general framework:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Where anonymization is applied, the resulting aggregated data no longer constitutes Personal Data and may be retained indefinitely for statistical purposes.

§ 09 Data Security

oke555 implements a layered set of technical and organizational security measures to protect Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or mobile device and oke555's servers is encrypted using industry-standard TLS 1.3 protocols.
• Encryption at Rest: Sensitive Personal Data stored on oke555's servers — including financial account details and KYC document references — is encrypted at rest using AES-256.
• Access Controls: Internal access to Personal Data is restricted to authorized personnel on a strict need-to-know basis. Role-based access control (RBAC) policies are enforced across all internal systems.
• Intrusion Detection: Automated systems monitor oke555's infrastructure for anomalous access patterns, unauthorized login attempts, and potential data exfiltration activity around the clock.
• Penetration Testing: oke555 commissions independent security audits and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed Personal Data breach that poses a risk to player rights, oke555 will notify affected players without undue delay and take immediate remediation steps.

§ 10 Your Rights

As a Data Subject, you hold the following rights with respect to your Personal Data held by oke555. These rights may be exercised by contacting our support team using the details in Section 15:

oke555 will respond to all verified rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, with notification to the Data Subject.

§ 11 Children & Minors

The oke555 Platform is strictly intended for adults aged 21 years and above. oke555 does not knowingly collect Personal Data from individuals under the age of 21. As part of the registration and KYC process, oke555 actively verifies player age using government-issued identity documents.

If oke555 discovers or is notified that Personal Data has been collected from a person under 21 — whether through an error in the registration process or through the use of falsified documents — the relevant account will be closed immediately, all associated funds will be reviewed in accordance with our Terms & Conditions, and all Personal Data relating to the underage individual will be securely deleted without undue delay.

If you believe that a minor may have created an account on oke555, please report this to [email protected] immediately so that we can investigate and take appropriate action. 21+ only.

§ 12 Third-Party Services

The oke555 Platform may reference or integrate third-party services, including game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) and payment infrastructure partners. Each of these third parties operates under its own privacy policy and data processing practices.

oke555 is not responsible for the privacy practices of third-party service providers beyond the scope of the data processing agreements in place between oke555 and each provider. We encourage players to review the privacy policies of any third-party service they interact with independently of the oke555 Platform.

§ 13 International Data Transfers

As an internationally licensed platform serving Indonesian players, oke555 may transfer Personal Data to servers and processors located outside of Indonesia. Where such transfers occur, oke555 ensures that appropriate safeguards are in place to protect the Personal Data to a standard equivalent to or exceeding the protections afforded under applicable Indonesian data protection law and international best practice.

Safeguards employed for international transfers include contractual clauses that impose data protection obligations on the recipient, technical security requirements equivalent to those maintained within oke555's own infrastructure, and — where applicable — verification that the recipient jurisdiction provides an adequate level of data protection.

§ 14 Amendments to This Policy

oke555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, oke555 will update the "Last Updated" version date displayed at the top of this page and, where appropriate, notify registered players via email or an in-platform notification.

Your continued use of the oke555 Platform following publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with an updated Policy, you may close your account in accordance with the Terms & Conditions and request deletion of your data under your rights described in Section 10.

§ 15 Contact & Data Requests

For all privacy-related inquiries, data subject rights requests, or data breach reports, please contact the oke555 Data Protection team using the details below. All communications should clearly reference your registered account username and the specific nature of your request to facilitate a prompt response.

We recommend including the following information in any data request: your full registered name, the email address associated with your oke555 account, a clear description of your request (e.g., access, rectification, erasure), and a copy of your identity document to allow us to verify your identity before processing the request. This verification step is required to protect your data from unauthorized access by third parties.