Privacy Policy

Definitions

The following terms carry specific meanings throughout this Privacy Policy.

Data Controller

olo4d acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, olo4d determines the purposes for which Personal Data is processed and the means by which that processing takes place. olo4d is responsible for ensuring that all processing activities carried out on the Platform comply with applicable data protection standards.

All data protection enquiries, access requests, and complaints should be directed to olo4d's support team using the contact details provided in Section 15 of this policy. olo4d aims to acknowledge all data-related requests within 72 hours of receipt and to resolve them within 30 calendar days.

Data We Collect

olo4d collects Personal Data through several channels: directly from you during registration and account activity, automatically through your use of the Platform, and from trusted Third-Party Providers engaged in identity verification and payment processing.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

3.3 Data from Third-Party Providers

olo4d may receive Personal Data about you from trusted Third-Party Providers in the following circumstances:

• KYC Verification Providers: Identity validation results and fraud-risk scores derived from checks against identity databases.
• Payment Processors: Transaction confirmation data and, where required for AML compliance, source-of-funds information.
• Analytics Providers: Aggregated, anonymised platform usage statistics used to improve the olo4d user experience.

Legal Basis for Processing

olo4d processes Personal Data only where a lawful basis exists for doing so. The primary legal bases on which olo4d relies are as follows:

• Contractual Necessity: Processing required to create and maintain your Account, process deposits and withdrawals, and deliver the gaming services you have requested — including togel (Indonesia's traditional numbers lottery) draws, live casino sessions, and sportsbook betting.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, KYC requirements, and any order or direction issued by a competent regulatory authority.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and the improvement of Platform functionality, where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional marketing communications and the placement of non-essential cookies, where your specific, informed consent has been obtained. You may withdraw consent at any time without penalty.

How We Use Your Data

olo4d uses the Personal Data it collects for the following purposes, each of which is tied to a lawful processing basis described in Section 4:

• Account Management: Creating, maintaining, and securing your olo4d Account, including processing login authentication and managing Account settings.
• Payment Processing: Facilitating deposits and withdrawals via Indonesian bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet services (OVO, DANA, GoPay, ShopeePay, LinkAja), and verifying the legitimacy of those transactions.
• Identity Verification: Conducting KYC checks to confirm player identity, age (21+), and residential eligibility in accordance with olo4d's compliance programme.
• Fraud & AML Compliance: Monitoring account activity for patterns consistent with fraud, money laundering, bonus abuse, or multi-account operation, and taking appropriate action where such patterns are identified.
• Responsible Gaming: Using game play and deposit data to identify players who may be at risk of problem gambling and to apply or offer appropriate intervention tools such as deposit limits or cooling-off periods.
• Customer Support: Responding to enquiries, resolving disputes, and maintaining records of support interactions for quality assurance and compliance purposes.
• Platform Improvement: Analysing anonymised usage data to identify usability issues, improve game performance, and develop new Platform features.
• Marketing Communications: Sending promotional emails, bonus offers, and platform news to players who have opted in to receive such communications. These communications reference events and offers relevant to Indonesian players, including seasonal promotions around Idul Fitri, Ramadhan, and Indonesian Independence Day (17 August).

Data Sharing & International Transfers

6.1 Third-Party Providers

olo4d shares Personal Data with Third-Party Providers only to the extent necessary for them to perform services on olo4d's behalf. All Third-Party Providers are contractually required to process Personal Data in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures. Current categories of Third-Party Providers include:

• KYC and identity verification service providers
• Payment gateway operators and Indonesian banking partners
• Game software suppliers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft)
• Cloud infrastructure and data hosting providers
• Platform analytics and performance monitoring services
• Anti-fraud and AML screening services

6.2 Regulatory Disclosure

olo4d may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, regulation, or court order. Such disclosures are made only to the extent required and are logged by olo4d's compliance team.

6.3 No Commercial Data Sales

olo4d does not sell, rent, lease, or otherwise transfer Personal Data to any third party for that party's own marketing, advertising, or commercial purposes. Any data sharing arrangement not described in this policy requires your explicit prior consent.

6.4 International Transfers

Some of olo4d's Third-Party Providers operate servers or offices outside Indonesia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, olo4d ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — before the transfer takes place.

Cookies & Tracking Technologies

7.1 What We Use Cookies For

The olo4d Platform uses cookies and similar technologies (including local storage tokens and session identifiers) for the following purposes:

7.2 Managing Cookies

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling essential cookies will prevent you from logging in to your olo4d Account and will impair the Platform's core functionality. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's Help documentation.

Data Retention

olo4d retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The following standard retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where deletion is delayed due to an ongoing investigation, legal proceeding, or regulatory hold, olo4d will notify the affected player where legally permissible to do so.

Security Measures

olo4d implements a layered security architecture designed to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. Our security programme includes the following controls:

• Encryption in Transit: All data transmitted between your device and the olo4d Platform is encrypted using TLS 1.3. Connections that attempt to use deprecated protocols (TLS 1.0, TLS 1.1) are rejected.
• Encryption at Rest: Personal Data stored in olo4d's databases is encrypted using 256-bit AES encryption. Encryption keys are managed under a strict key management policy with regular rotation schedules.
• Access Controls: Access to Personal Data by olo4d staff is restricted on a strict need-to-know basis. All staff with data access undergo background screening and receive mandatory data protection training.
• Multi-Factor Authentication: Administrative access to systems holding Personal Data requires multi-factor authentication (MFA). Players are strongly encouraged to enable MFA on their olo4d Accounts.
• Penetration Testing: olo4d engages independent security specialists to conduct regular penetration testing of the Platform's infrastructure and application layer.
• Incident Response: olo4d maintains a documented data breach response procedure. In the event of a breach that poses a risk to affected individuals, olo4d will notify affected players and the relevant supervisory authority within the timeframe required by applicable law.

Your Data Rights

As a Player whose Personal Data is processed by olo4d, you hold the following rights in respect of that data. To exercise any of these rights, please contact the support team using the details in Section 15.

olo4d will respond to all verified data rights requests within 30 calendar days. Where a request is complex or numerous, the response period may be extended by a further 60 days, of which olo4d will notify you within the initial 30-day window. olo4d reserves the right to verify your identity before actioning any data rights request.

Minors & Age Verification

The olo4d Platform is strictly for adults aged 21 and over. olo4d does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and any Account found to be held by a person under the minimum age will be suspended immediately.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account on olo4d, please contact our support team immediately using the details in Section 15. olo4d will close the Account and delete any associated Personal Data as swiftly as possible upon receipt of a verified report.

Marketing Communications

olo4d sends promotional communications — including bonus offers, game launch announcements, tournament invitations, and seasonal promotions — only to Players who have explicitly opted in to receive them during registration or through their Account settings. Marketing messages from olo4d are delivered via email and, where you have provided consent, via the mobile number registered to your Account.

You may withdraw your marketing consent at any time by:

• Clicking the unsubscribe link included in every promotional email sent by olo4d.
• Updating your communication preferences in your Account settings dashboard.
• Contacting the support team directly via Live Chat or email.

Withdrawal of marketing consent does not affect your ability to use the Platform or receive essential transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent regardless of marketing preferences.

Third-Party Services

The olo4d Platform integrates third-party services to deliver its full range of casino, sportsbook, and payment functionality. While olo4d selects these providers carefully and requires them to maintain appropriate data protection standards, olo4d is not responsible for the independent privacy practices of third-party services operating under their own privacy policies.

Game software suppliers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may collect limited technical data (such as session identifiers and game event logs) directly through their game client software. This data is used solely for game integrity and fair play verification purposes and is not used for independent marketing or profiling of olo4d players by those suppliers.

olo4d does not maintain social media plugins, embedded social share buttons, or third-party advertising networks on the Platform that would allow those parties to track your behaviour across other websites during a Platform session.

Policy Amendments

olo4d reviews this Privacy Policy periodically and updates it when our data practices change or when legal or regulatory developments require amendment. The "Last updated" date at the top of this page reflects the date of the most recent revision.

Where changes to this policy are material — meaning they significantly affect how we collect, use, or share your Personal Data — olo4d will notify registered Players by displaying a prominent notice on the Platform and, where appropriate, by email to the address registered on your Account. Non-material clarifications and formatting updates may be made without specific notification.

Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a material change, you should close your Account before the change takes effect.

Contact & Complaints

For any questions, concerns, data rights requests, or complaints relating to this Privacy Policy or olo4d's handling of your Personal Data, please use the following contact details. All formal data protection correspondence should be submitted in writing via email to ensure a complete audit trail.

If you are not satisfied with olo4d's handling of a data protection complaint after engaging with our internal process, you may refer the matter to the supervisory authority or dispute resolution body specified under olo4d's licensing jurisdiction.